last executing test programs: 1m30.41819383s ago: executing program 1 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x24000890) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) 1m30.319809772s ago: executing program 1 (id=211): syz_open_procfs(0x0, 0x0) r0 = syz_io_uring_setup(0xf10, &(0x7f0000000400)={0x0, 0xd4ad, 0x10000, 0x0, 0x27f}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x18, 0x0, 0x8e, 0x0, &(0x7f0000002940), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) io_uring_enter(r0, 0x1ffd, 0x9c3a, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000380)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 1m30.262269021s ago: executing program 1 (id=212): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x4008, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x700}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r4, r4, 0x3, 0xfffffffffffffffa, 0x3fff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000e35000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000003c0)={{0xfec08000, 0x40000, 0xc, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x6}, {0x1ffe, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xdddd1000, 0xf, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0xa, 0x5, 0x10, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x60000, 0xffff1000, 0xa, 0x0, 0x3, 0x9, 0x4, 0xc3, 0x4, 0x90, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb3, 0x1, 0xff, 0x7}, {0x692daea2027b6777, 0x6}, {0x40000, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14008a, 0x6, 0x0, 0xe6e70c00, [0x7, 0x401, 0x8, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x7, 0x3, 0x0, 0xd2, 0x9c, 0xf7, 0x8, 0x10, 0x8, 0xd1, 0x1, 0x0, 0x3, 0x4, 0x5, 0xbc, 0x43, 0xe9, '\x00', 0x9, 0x9f72}) 1m30.122116797s ago: executing program 1 (id=214): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000380)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write(r4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x111) rmdir(&(0x7f0000000100)='./control\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000d50000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz1\x00', {0x4, 0x694b, 0x27, 0x725}, 0x4d, [0x3, 0x5, 0x3, 0x7ff, 0x8, 0x7, 0x7ff, 0xcd28, 0xffff0000, 0x3, 0x9, 0x2, 0x7, 0xffffffff, 0x80000001, 0x401, 0x550761e4, 0x6, 0x1, 0x1ff, 0x1, 0x3, 0x6, 0x7, 0x9, 0x656, 0x81, 0x80, 0x8000, 0x0, 0xffffffff, 0xfffffff7, 0x1, 0x0, 0x0, 0x1, 0x5, 0xb6, 0xbb93, 0x10001, 0x6, 0xffff, 0x400, 0x5, 0xffffff00, 0x4, 0x7, 0xdb, 0xfdc, 0x7, 0x8001, 0x6, 0x3, 0x7fff, 0x9, 0x401, 0x4, 0x2, 0x1006, 0x0, 0xfffffff7, 0x1000, 0xfb9, 0xffffffff], [0xffffffff, 0x830, 0x7, 0x5, 0x6, 0x7, 0x1, 0x80000000, 0x9, 0xfffffff9, 0x74, 0x3, 0x39b14d65, 0x9, 0x7, 0xfff, 0x7fff, 0x6, 0x331, 0x8000, 0x0, 0xffffff13, 0x3, 0x1, 0xfffffff8, 0x45b, 0xfffffffd, 0x8, 0x101, 0x5, 0x81, 0xfffffff7, 0x9, 0x7, 0xf4, 0x5, 0xfffffffd, 0x8, 0x52, 0x2, 0x8, 0x8, 0x8, 0x7, 0x0, 0xb, 0x62, 0x2, 0xfffffff9, 0x80007, 0x5, 0xf2b, 0xe, 0x5, 0x1, 0x5, 0x8, 0x36, 0x3, 0x6, 0x2, 0x7, 0x2, 0x8], [0x7ff, 0x5, 0x6b7cc830, 0x40, 0x434, 0x1ff, 0x7fff, 0x8000, 0x7, 0x8, 0x7fff, 0x32, 0x7ff, 0x1, 0x2, 0x8001, 0x0, 0x6, 0xe7a, 0x6, 0x5, 0x9, 0x956e, 0x9, 0x76c, 0x9, 0xff, 0x734, 0x1, 0x5, 0x5, 0x0, 0x19b, 0x800, 0x0, 0x6, 0xa, 0x7fff, 0xcbfd, 0x81, 0x5, 0x1000, 0x1, 0x101, 0xa34, 0x262c, 0xfffffffd, 0x0, 0xe2d, 0x5, 0x4, 0x9, 0x7fffffff, 0x4, 0x4, 0x10000, 0x0, 0x7, 0x0, 0xb715, 0x304, 0x6, 0x5, 0x4], [0xa166, 0x151, 0xd68f, 0x8000, 0x6, 0x6, 0x7, 0x5, 0x2, 0x7, 0xfffffffd, 0x3, 0xfe, 0x7, 0x6, 0x80, 0xfffffff3, 0x7ff, 0x6a1, 0x5, 0x10000, 0x3, 0x2, 0x7, 0x45f2, 0x10, 0x7, 0x98, 0xff, 0x7, 0x3, 0x5, 0x8, 0x0, 0x26, 0x5, 0x3ff, 0xe, 0x9, 0x40, 0x3, 0x7f, 0x8000001, 0x3, 0x1606d85b, 0x9, 0x8, 0x3, 0x2, 0x20000000, 0x1, 0x8001, 0x8, 0x4062, 0x10, 0x7, 0x80, 0x2, 0x31c, 0x1, 0x7, 0x249, 0x8, 0x5]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x358, 0xffff8881f5c0a000) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)}) socket$can_j1939(0x1d, 0x2, 0x7) 1m29.462195695s ago: executing program 1 (id=215): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x480c0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000140)={0x6, &(0x7f00000000c0)=[{0x4307, 0x5, 0x8, 0x7}, {0x100, 0x4, 0xf8, 0x4}, {0xffd0, 0x9, 0x4d, 0x7}, {0x2, 0xe, 0x1, 0x1}, {0x7, 0xb, 0x3, 0xeb}, {0xffff, 0xe, 0x49, 0x7}]}) setreuid(0xee01, 0xee01) (async) setreuid(0xee01, 0xee01) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x7}, 0x10}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.892490168s ago: executing program 1 (id=222): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "16a8bc", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (fail_nth: 4) 1m28.850058345s ago: executing program 32 (id=222): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "16a8bc", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (fail_nth: 4) 27.002085251s ago: executing program 4 (id=1044): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0x2, 0xffff}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x14) 27.001961421s ago: executing program 4 (id=1045): r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 26.912040481s ago: executing program 4 (id=1046): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @remote}], 0x30) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(r1, 0x7) listen(r0, 0x7) 26.911924141s ago: executing program 4 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="600000001800050601000000000000000a400000fe040001000000001400010020010dd700010000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef0500080001000055b9fa305526000500", 0x60) 26.831346022s ago: executing program 4 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket(0x10, 0x1, 0xffeffffe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc}) ioctl(r3, 0x3b8e, &(0x7f0000000580)="10") 26.831168359s ago: executing program 4 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1', 0x1) 21.010017282s ago: executing program 0 (id=1096): fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c90012000e00050014010a0023004000800080"], 0x17) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) write(r0, &(0x7f0000000440)="15afda6fd092f57901aa0ddfb5deed462ee3d002a8ec688c13da0a9e3453ad45d87cf9691246f1050e9bc87eb88a67d6cf211c19073f403899b2858e32c089f9e20c1b8fc5b54135a1c3388570d496ee779e8a5216b438e29319ab79ae437685115a2547601006a737e6f88d43bc0da160dea9a048a0d47ea777e89d033bfc7b9545009d8cda0490345ceda4404118af0a62bc", 0x93) 6.844267339s ago: executing program 2 (id=1101): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) 6.843160664s ago: executing program 0 (id=1102): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffffda}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x5) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=@delchain={0x2c, 0x65, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {0x10, 0x5}, {0xf, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c040) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x10c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x8000000) ppoll(&(0x7f00000001c0)=[{r3, 0x5200}], 0x1, &(0x7f0000000280), 0x0, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x2, 0xbe}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad386dd", 0x4, 0x840, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) ioctl$UI_SET_ABSBIT(r9, 0x40045567, 0x8) 6.843045192s ago: executing program 2 (id=1103): mkdir(0x0, 0x111) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x20000004) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) 6.842768866s ago: executing program 2 (id=1104): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x18c) write(r3, &(0x7f00000000c0)='Z', 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="64f2ad67d9fa65660f657f3666b8001000000f23c00f21f86635020003000f23f80f20e00f22e0660f383f5600f20f017f000f794000360fc79a2c00660f3833f3", 0x41}], 0x1, 0x10, &(0x7f0000000440)=[@flags={0x3, 0x10000}, @efer={0x2, 0x8000}], 0x2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000240)={0x20003, 0x0, {[0x9, 0xc9, 0xf3, 0xc0, 0x7, 0xab, 0xd0f0, 0x2]}}) setns(0xc9, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000002c0)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'wlan1\x00', @ifru_addrs=@ethernet={0x1, @local}}) ioctl(r4, 0x4048aecb, &(0x7f0000000240)) r5 = gettid() rt_tgsigqueueinfo(r0, r5, 0xc, &(0x7f00000003c0)={0x26, 0x7fffffff, 0x10004}) r6 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x80020, 0x0) socket(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/freeze_filesystems', 0x583000, 0x1f0) mq_timedsend(r7, &(0x7f00000014c0)="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", 0x1000, 0x5, &(0x7f00000024c0)) rt_tgsigqueueinfo(r0, r5, 0x5, &(0x7f0000000180)={0x2b, 0x8, 0x29b}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) r8 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x20041) ioctl$ECCGETLAYOUT(r8, 0x81484d11, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000100)={0x1f, 0x1001, @none, 0x2}, 0xe) 6.842594667s ago: executing program 33 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1', 0x1) 6.840759731s ago: executing program 0 (id=1105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='655', 0x3) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000300)={0x9909cd, 0xcd82}) 6.834856503s ago: executing program 2 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$COMEDI_SETRSUBD(0xffffffffffffffff, 0x6410) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x685e, 0x4, 0x76, 0x1040, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x8}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000a80)={{0x7, 0x0, 0x9, 0x6, 'syz1\x00', 0x9}, 0x0, [0x6, 0x7, 0x6, 0x40, 0x5, 0x0, 0x0, 0x6fb, 0x4, 0x8, 0x0, 0x4, 0x0, 0x0, 0x6, 0x8, 0xf, 0x5, 0x10000, 0x3, 0xe, 0x7, 0x400, 0xd99, 0x8, 0x0, 0x54b4, 0xffffffffffffffff, 0xc4d8, 0x8, 0x510, 0xb0, 0x9, 0x1, 0xfc, 0x100000000, 0x8, 0x3, 0x6, 0x2, 0x400, 0xf4, 0x9, 0x9, 0x5, 0xa89, 0x6, 0x3, 0x6, 0x7, 0x1, 0x6, 0x1, 0x4, 0x7fff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0x8, 0x4, 0x8, 0x7f, 0xfff, 0x4, 0x6, 0x9, 0x6, 0x6d9e, 0x0, 0x7657, 0x73ba6cbd, 0x800, 0x1000, 0x8, 0x1, 0x100000000, 0x0, 0x5, 0x7, 0xfffffffffffffe01, 0x5, 0x10000, 0xaf6e, 0x7, 0x9, 0x3, 0x5, 0x400, 0x400, 0x6, 0xfffffffffffffffe, 0x1, 0xc, 0x5, 0x4, 0x6598da, 0x800, 0x8, 0x80000000, 0x5, 0xfffffffffffff539, 0xfffffffffffffffe, 0x9, 0x7, 0x6, 0x9355, 0x5, 0x100, 0x100, 0x1, 0x4, 0x6, 0x8, 0x7, 0x8000000000000000, 0x7ff, 0x2, 0x2, 0x2, 0x10, 0xa, 0x9, 0x4, 0x8000, 0x3ff, 0x3943ae76, 0x9]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x74a0, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x9) getdents64(r8, &(0x7f0000000140)=""/62, 0x3e) 60.304788ms ago: executing program 0 (id=1109): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180)=0xfffffffa, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg$inet(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="3abb87518784cda676", 0x9}], 0x1}}], 0x400015b, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0x4, 0xffeb}, {0xf, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) write(r1, &(0x7f0000000300)='01:80:c2:00:00:00', 0x11) 59.877146ms ago: executing program 2 (id=1110): fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c90012000e00050014010a0023004000800080"], 0x17) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="15afda6fd092f57901aa0ddfb5deed462ee3d002a8ec688c13da0a9e3453ad45d87cf9691246f1050e9bc87eb88a67d6cf211c19073f403899b2858e32c089f9e20c1b8fc5b54135a1c3388570d496ee779e8a5216b438e29319ab79ae437685115a2547601006a737e6f88d43bc0da160dea9a048a0d47ea777e89d033bfc7b9545009d8cda0490345ceda4404118af0a62bc", 0x93) 55.672482ms ago: executing program 3 (id=1111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 55.526284ms ago: executing program 3 (id=1112): mkdir(0x0, 0x111) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x20000004) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) 54.734271ms ago: executing program 0 (id=1113): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x18c) write(r3, &(0x7f00000000c0)='Z', 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="64f2ad67d9fa65660f657f3666b8001000000f23c00f21f86635020003000f23f80f20e00f22e0660f383f5600f20f017f000f794000360fc79a2c00660f3833f3", 0x41}], 0x1, 0x10, &(0x7f0000000440)=[@flags={0x3, 0x10000}, @efer={0x2, 0x8000}], 0x2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000240)={0x20003, 0x0, {[0x9, 0xc9, 0xf3, 0xc0, 0x7, 0xab, 0xd0f0, 0x2]}}) setns(0xc9, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000002c0)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'wlan1\x00', @ifru_addrs=@ethernet={0x1, @local}}) ioctl(r4, 0x4048aecb, &(0x7f0000000240)) r5 = gettid() rt_tgsigqueueinfo(r0, r5, 0xc, &(0x7f00000003c0)={0x26, 0x7fffffff, 0x10004}) r6 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x80020, 0x0) socket(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/freeze_filesystems', 0x583000, 0x1f0) mq_timedsend(r7, &(0x7f00000014c0)="9faaa56489f0f259db81f1b0221789356af8fe99ef11a68a4ae2676b809a48728e6a944eb57cb0f022e79c94af353358558aea2f0c462f7a550d6e6c4b978473ae5af164b7232a679ad7da9079f3ae60babfcf905b94c33e0b2e4493667d1255ad508e6cf56dbaa1133622259fd37b849fdd9de9e1a64e7d314079a5d40ade5725e62b273c4b147f631a84e7e0d900075a037231817b8485c0d5e8ae0dedad16390e265a2c14f0b0514d864114a64c80448531c95593da970efa50d56bf404b90f6cf1526a70dba6740ad70e046710fe01caeee79cd46c5bd92e66f0efd9fade2f480e4b973e7e2b2b98f420468ac7b9101dbc77f0f3657e28c69e7984682d8e819462d9a9aa148abbdc32400bcb2a214199f33a4381774ab2b9ad7d27e98bdfa44831c8ca02bd72369880fb8baf5b43f22fed9afb13a8f9dd6c9168bcc70d8b7c7360494a78b0e15acc1d17327ef9b02130b23f201ba135fdd070a912f75a3775b594ae0cf44a7e72a7532f6b329ddce96eb7f20a8b46b39327bbc1a5e6047fa9b34ba53feb5441e01e39861cf7c6591aeaf66ec53f7f48ee2f29f182cffed10e74e15e9ec517ddc76af30eacb5c0a008fb24d015ad1c5dec4790f8d58e95f8797595ff4dc35827546ac8049e69e2ba6c84195d5f1a4ea53d63561fc5a8c5c03b6163c4dc686b2b39ca712b0b10a9fb8f999074337fa093a4bff00e4fa66b523fead11deede9ef2d240b2284d43d0785ced7605ef5be0feeccf6ca50f383a9631b60614157730b4b4e1d38d8f60346208381bbbfbaedcf3ab5f7f826562825283ac8a8af011267e653badc0fa0aff864df6652fa9190d5b7ff4e222e50906995bc6953c2f12757cb7ee8092c19b2dc42f744f84bfb27e9560d912d4cab3a42c467ebd6d6fbb7c689a2fbc6af7d83f590a94e258ec6f66a94f4f8a851ea06a74b40c4ead91efa61920c8c0a3e4302fb990dd053cf26204230c0bfd5a8bbe0a6df19767193dcf4f2f940e6c30cb511335d5175f77a69b418968ce109c0f7cc107a198ab55a9739ab2bfc14a37f8c5af1fc3ad93e44061ee2b0122787e18b926e309b6f3bd892330f1e12a0005b59c27b0d770b327b0c975aded22161d1d52fcdfe44e3fe076ca015508c3de710c1f373c61209ea3e881d309e31ad1c266893f63aa1683b3f979d9088ba07fc60d2c1b93703f237b7d558f4f4504b531282898811aafcf0ed9bda3c937b235eeed102b48324e01d9bda75d2835646ba77c4d7bd10d613c19867c24b52de1d49e8425f6975b3419b88018b459d52c9878320563bbcd6bdd2cd19d50c1766d66bd0417518ca5674b6fc93225a4ea9172d29b3e67a56f258b11313de076ca5f3b698d299af4dca88a72a58382e25650cf1116cfd1bde821bc9f63fbdd22a8a2542c94d5d6dbf29706709528bc88e2e9b3cc06f697bd94a50b31aa583eb596f4312533d85a2fde2d86096aa5811c387122d6944a94a0266d7001eb08f0ca18b527b486ff0c6864fdac9efac4703fb85fe2a319d1df729ec4e57a0b54ad0dd35446ddd20f84cffd3a8bb633990d7ec77caecf6d797e5a7d415d12591c486190f72d0275f9a0f56e90b4bf69babb8f98a357442728a65cff39621750ed5c110908f1fa08b1af8309291d37c86270d014ad64390006787a43e5be09c9a7961a9582ec9282328bb0b1329a8646def8d0b5598f4cc70ab0ac533ba37b813eafdd926a24336ec8039719bea94bc3afd3414fdd34051c3255e1729916f92d22ec1d1112bac7ea5629db51cb7aa90ec9a42d71322773cdfe4a8be7414497603c42dc51a28c97fd35b0279b99e2fe94ae7b4bc0944ebde43e464bc74647c4d9b9d5162aa5a1ed27a8806ab785e4169d2d925898285236314707ad010f535512947730010396da69c8f1a32031a925dbf980ae304cd35e97f9f38d85f1f714da638aeea8c881636b942956ca31690ddbcfc93584a6144a5471d98444ae702a896b0fc453761464635e64087d9ddc4b9924f73f2cdbcb57844815599a8cdc16b1a26bfb70947471661b9ae8b967603c5e59f7dc1f4ab414bb1bb3a66081417444eaa82f82eb477d5cf253e3fb54146022df66e441fe12a080e99910f856d830c7e8650122237cb82b13c9b0158b529711e27cc149a98bedcc4e12f7472ef84b475f8a1b9bd7f02b8a1e8bf0f233b00eca86e02c6dc37528d664db1f4d26aa133c742446aafbfedbe67f3223f451b9ed485c9b2c66fab7b8bdf865688c742448117a4f3afaed54e60c0823fa450780e87dce1d5919b4d09dd1008685492c63547d1aae17a361710637f128d1bb0cfb62ba5b7fc35fca9e15ae00344fc33b325516cb9ae1eaac5a9b4a61da3d82f04d6beffaabc824351a2e3543d103cc6218e8a04631ca9472b99d670818139425430fb0be2032771f63e1eae576172a1679ba59a6ba87d34c4d290d5b1122361440aa2fff7a40d3da2f6ea5034f521d5e6b654e7ef170ed33f91b52306ca339168da09337b97aae875d7cbea38e0d95d3951c3fa8fc1144363c0e1f57ffc429e1b53e2a3f2f40742a23b7363bcbde2c95ae324c7963739792f7e3f0d9fcf4ddf7716ec30fb57424de011b0d3b60a4bd0a4be60f3479ad3f20c1a10fe7d4b734061e3311b6a8c16d216021e557930b3c899ee024c0aa6efca64ccdd38128211f2b2bf802f9656facf21e55447e3df01802d0d41b8f71aa6901b7c5be2f6aecd5a851cf82a824320a3de28ce3520fdc4dd5456000662aacccbb1083f727e7f1357688f4e120f5611667d150965a969d048c391d723badc8faf983cf76133b41499424548a23dc3f2de897a19be6e055d1a73fca163ec4cdb7e83e93cd0a0bccf0faaa048a45be1d4bb88b7d6467890630152c3f42fe33290e23f8c498588c4874f610f37536851b5cf84bf829d2fd5f466a56f928d26fb22bbca880a9891fc73241f6d111b35ea571aa3378cd8aeaf54ab52739572810d898a0972c2fd7ec75300fa15dc88bf6c357ca0d8def21de1be62c5165929cd243995d4deb407047853eec97696705ec183171cf2332aea17548ca3f676c273f106baacd05d476a23141d1ef1930b7bbd8a520ba75be2397f660faf0634ad2e31e205e24ef94064c54e3cdbec32e1dc044619c58e1837dac301d98ca050f903899c2886e0942bf2c51aaffeef379f2ff0d92980e32cfab63fe7c7ce93a202404c7eb8884e102762462451f132fc4c107e903d21674d69e0dd72e08e24a4bbb0f53900556f3867c7a1e2c7325ddfe6230ab497205e2a90e70b65feeb1699a30bd5868a92159533bf43473861585f9a213428c5b2b4d83f8dc3c259ea7445002234cd96ac585a83a2e230bd856ba7110a3bf60f51c55d0bde48249c52be105c59d3bfa94d82ce5efe608fd9b6a7ba5c2dc466ebd1583260c4e731bec1fe4e2ca7883aa2955bffc2ea27f6db9380277229b63ef6cc5db40341b5f3c8cb8ff4daa65faf866c2c95c92dbccfd7e2d011af393504081800946281188de82aee383d88bbceaad6a2b63ac9fcb5c4891cdff75ffe48be1ddb3877faf45547bd40a83eb9c680e4a5ecc613a9739a6ce4c6be344570e04ce146733125271388a7f1395ef6ed3a413550d9bbe90424eb6fcc36b411d26ba6156ec4e1c1a7faa65919718ab2a2aa4cc427bf6e450ba4a83433b8c766fea41ff4abc403390c5dcb3512cc4be70cb2acbeef9578ec5cc36cfa2318a0e206f0565e72aed32415e39381898b8a53ab1e358bab4ae5c05587859b9a1178be1f933458c02ffe34e2c735395934e14740803163dbe0d45d381b512be31984170e92ddda1224ae624ed3594f38f2b88fb33038699f4b22daa4b6fdeea818a446dbcc506f4b2eb3baec1f84ee4c09eec372dae8d6cc1798eae507576eb15e86ff1bc2eb9d19cda0422e7959bb0fef43e866a8e59e6b22a29b1f017449404c13ec34189c8c01df0f931f8339631973dc663776d28bda96e8066353ef64ead305633cf70fdf4d98b48efaedb18bc0b53a3dae0ae296b98ab7a6ec47f98590a8a18b8bdc3b3ff12275ae3cc3633be635f913d5b72c6e04d326495d6e4efe216edcba7739d403fc5976566f4d4181aeeec9a61b0755b586ea668506dd25e1516fbe9508324e83a63c31f13644729c353d1d4e34aa2559edf3ef317c2b389d98f36615601632e64c1b7e982f91f5c560e33bc8d4954f363495d790a2fc58b4f64a0ce485b2920dc69b197aff3119bbff046287f68519e33daa1d244ab5d63ca89827a33a6eac31192cdc802ca3d945acee060f39be68379cdcb7c838fa1ce9e282090a275d7543527e74589ee7dcf43e2ae2639bca84b921cb0cbc52e7761984b8ad117a3f8ee3204d2800945b7edd9d185bb121e7dda2958852a144cf76ce5bb81538866c18cdcf3185ac0c34053a2dcf62680c708227f604cbf938a9a829fa1a8b6a0422a872d146085d6ce61630278055c9f4c86f24edb8428a7b4abd1dc852f0ac01c12cb47a68bc0e8fad363f62ec22614f4506664314813d95de78a6550ca41bf2549ed11de13ceb9f47504b59d4da62d81cd5227bb507cb5b8c9c18de11d542b93ae3c1d507b9ed74367dd240709da802cb4e3d48bc6b6f0284dca3cd67b2821b3addda132bdeffeb8fff2f6199df78336bc28821ed8a149b7dcfbc6f210514a207987a6c4b4ef69b923945ec9b11cc4a6fc7048e8549191f8cc6750ce261ce3ffc39dfd7d585e8cbe7d5b213638c2fec53165afab9280d07ebba302c241777840d74e76035da712a9e7a76ad9fa07be16bfa83f071dca4bd707d458641bb9680990c84070597eb7c621cc1adc670b2e0e6be7309b95c7ba14c4af1032ce392b0f4a7bccd92373d682cd67dd30290aea6f457e63f321f98567922c6e80467be4d7a750788c8b2bdf1091a5eec4e1089d32eb2a3b4443a9a49ee3571ba369f519cac20d17bf20b6708ad1e3af7a7b7e05a1ee07aac4b9cb0ba9a27cf41ff0595ea415ef4798abd91b3752101e0eab5f72c4084cbddf26d5b2b241d8812d7bf4f9e76521e939075a9b68133309faaf9e9a9e14dcd0033dbf1f2f4472f8fe97fa78edc6d9dafa7f0385a3938b5897f6a684359df6779f4f9d09e92148e5a4b16b68e88942f87d74944b0d131571e32334125ec4511c4280e136b37885d08b6a9c7d956bf4cf274da6b8c9a74ab7068a5576115522e5f03c1fad2f28b918a4ad7faf27fc9deb031b9e0c72029e8096ede057a9ea73d3510437bfcdefb2235e84b170acfc22717c4de1bdc6bb340964a7c643ecfa27b0c54b1eb57a933047967b824ac7b9193f9bc919770501e5cf20ff0941a0bd10e89be7c86b1b5bae69df843c9b186c36ad3585a1c5df0d98abb746044eae0b7a208fab853702c1b760e84f6a84bcb21a2bd1aee0c927b7f776cfd3a875c6398ddc39b6bc13642aa014274edb3149da322d4ca21503860c687a02d918262cd19b65a0b16f2cd26dd062d3c0175931133f29358f4e5508dc1861829c35a225100b60d01fbe4b2708d90881346d558ce56a16d132ea9a5a47d74f81a82e427906b4dc24b8de9f8430f818de236e5439ae53a03d4ec8dd2a8b4af05066ab44e18cac487e83ec1cc7150460c10d66212ff7617730f916e1a775598c1d6542c830543c298e4699b9c49b1499251e0fd0d3b43a980a4303e5d647ad0daea2aa90b5aeeab5d462842e3cb512189e592b198c1b89ea0c0fbe4b388339df92e96face196cf29cf2f0b09580b7c19f1322adcf6ff8406acbb8b95c8", 0x1000, 0x5, &(0x7f00000024c0)) rt_tgsigqueueinfo(r0, r5, 0x5, &(0x7f0000000180)={0x2b, 0x8, 0x29b}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) r8 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x20041) ioctl$ECCGETLAYOUT(r8, 0x81484d11, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000100)={0x1f, 0x1001, @none, 0x2}, 0xe) 54.342194ms ago: executing program 3 (id=1114): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@map_fd, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xe4, &(0x7f0000000240)=""/228, 0x41100, 0x81a831a906a30bac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x1, 0x84, 0x101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='file n*t/sctp/* +', 0x11) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x20, 0x7800, 0x0, 0x3) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x11135, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 43.687208ms ago: executing program 3 (id=1115): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40000000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, r4, 0x311, 0x70bd25, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x50, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048011) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000007c0)={0x79, 0x0, 0xc}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000005c0)={0x81, 0x0, 0x5}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) openat$make_it_fail(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000480)='1', 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e3861121", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0x76a, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff4, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x101}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000080)=0xfd8) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_GET_VERSION(r8, 0x8004552d, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r5, 0x40044145, &(0x7f0000001540)=0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r10, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) 42.423516ms ago: executing program 5 (id=1106): clock_gettime(0x17, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=44bsd\x00') 42.173608ms ago: executing program 0 (id=1116): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x100012, r1, 0x0) r2 = memfd_secret(0x80000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002580)={0xfc, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xfd}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000040)=0x8002, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140), 0x5d) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000200)=""/68) r5 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) connect(r6, &(0x7f00000000c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x80) writev(r5, &(0x7f0000000380)=[{&(0x7f00000003c0)="db", 0x1}], 0x1) 42.104641ms ago: executing program 5 (id=1117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='655', 0x3) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000300)={0x9909cd, 0xcd82}) 41.970513ms ago: executing program 2 (id=1118): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0xfc, 0x7fff0026}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd70e3ffffffff0100000008000300", @ANYRES32=r1, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 41.854895ms ago: executing program 3 (id=1119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) getpgrp(0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) lseek(r0, 0x10001, 0x1000000000000f5) 1.476974ms ago: executing program 5 (id=1120): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)) creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x559000, 0x50) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000010025bd7004fbdbdf2500000000", @ANYRES32=r0, @ANYBLOB="00000000034a04000a"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 0s ago: executing program 3 (id=1121): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180)=0xfffffffa, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="3abb87518784cda676", 0x9}], 0x1}}], 0x400015b, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0x4, 0xffeb}, {0xf, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) write(r1, &(0x7f0000000300)='01:80:c2:00:00:00', 0x11) 0s ago: executing program 0 (id=1127): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002480)={[0x8000000000000001, 0x9, 0x2, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0x2, 0x14000000000, 0xffffffffffffffff, 0x5, 0x0, 0x9, 0x6], 0xeeee0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/hid.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002480)={[0x8000000000000001, 0x9, 0x2, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0x2, 0x14000000000, 0xffffffffffffffff, 0x5, 0x0, 0x9, 0x6], 0xeeee0000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x0) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) (async) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/hid.usb0\x00') (async) kernel console output (not intermixed with test programs): o_syscall_64+0x123/0x790 [ 103.927482][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.927497][ T7978] RIP: 0033:0x7f07a0d9e159 [ 103.927507][ T7978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.927520][ T7978] RSP: 002b:00007f07a1d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.927534][ T7978] RAX: ffffffffffffffda RBX: 00007f07a1025fa0 RCX: 00007f07a0d9e159 [ 103.927542][ T7978] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000003 [ 103.927550][ T7978] RBP: 00007f07a1d47090 R08: 0000000000000000 R09: 0000000000000000 [ 103.927558][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.927566][ T7978] R13: 00007f07a1026038 R14: 00007f07a1025fa0 R15: 00007ffe1bb3d178 [ 103.927582][ T7978] [ 103.955057][ T7981] FAULT_INJECTION: forcing a failure. [ 103.955057][ T7981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.955084][ T7981] CPU: 3 UID: 0 PID: 7981 Comm: syz.3.632 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.955104][ T7981] Tainted: [L]=SOFTLOCKUP [ 103.955110][ T7981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.955119][ T7981] Call Trace: [ 103.955124][ T7981] [ 103.955130][ T7981] dump_stack_lvl+0x100/0x190 [ 103.955156][ T7981] should_fail_ex.cold+0x5/0xa [ 103.955176][ T7981] _copy_from_iter+0x43a/0x1690 [ 103.955198][ T7981] ? __pfx__copy_from_iter+0x10/0x10 [ 103.955217][ T7981] ? __pfx___alloc_skb+0x10/0x10 [ 103.955243][ T7981] netlink_sendmsg+0x808/0xda0 [ 103.955266][ T7981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.955287][ T7981] ? selinux_socket_sendmsg+0x198/0x2f0 [ 103.955333][ T7981] ____sys_sendmsg+0xa4d/0xbe0 [ 103.955350][ T7981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.955371][ T7981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.955396][ T7981] ? lock_acquire+0x1d1/0x380 [ 103.955414][ T7981] ? get_pid_task+0x2a/0x250 [ 103.955436][ T7981] ___sys_sendmsg+0x190/0x1e0 [ 103.955454][ T7981] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.955471][ T7981] ? get_pid_task+0x106/0x250 [ 103.955498][ T7981] ? find_held_lock+0x2b/0x80 [ 103.955532][ T7981] __sys_sendmsg+0x160/0x210 [ 103.955553][ T7981] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.955585][ T7981] do_syscall_64+0x123/0x790 [ 103.955603][ T7981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.955620][ T7981] RIP: 0033:0x7f020a99e159 [ 103.955632][ T7981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.955646][ T7981] RSP: 002b:00007f0208bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.955662][ T7981] RAX: ffffffffffffffda RBX: 00007f020ac25fa0 RCX: 00007f020a99e159 [ 103.955671][ T7981] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 103.955680][ T7981] RBP: 00007f0208bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 103.955689][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.955697][ T7981] R13: 00007f020ac26038 R14: 00007f020ac25fa0 R15: 00007ffe13b605d8 [ 103.955716][ T7981] [ 103.992838][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 104.001222][ T7984] batadv0: entered promiscuous mode [ 104.003239][ T7984] macsec0: entered promiscuous mode [ 104.003440][ T7984] macsec0: entered allmulticast mode [ 104.003453][ T7984] batadv0: entered allmulticast mode [ 104.004675][ T7984] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 104.005755][ T7984] batadv0: left allmulticast mode [ 104.005905][ T7984] batadv0: left promiscuous mode [ 104.044881][ T5743] Bluetooth: hci1: unexpected event for opcode 0x200f [ 104.064367][ T7987] netlink: 'syz.2.634': attribute type 2 has an invalid length. [ 104.110865][ T43] audit: type=1400 audit(1791027384.137:641): avc: denied { create } for pid=7988 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.414109][ T7999] FAULT_INJECTION: forcing a failure. [ 104.414109][ T7999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.414140][ T7999] CPU: 3 UID: 0 PID: 7999 Comm: syz.2.639 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.414160][ T7999] Tainted: [L]=SOFTLOCKUP [ 104.414165][ T7999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.414174][ T7999] Call Trace: [ 104.414179][ T7999] [ 104.414185][ T7999] dump_stack_lvl+0x100/0x190 [ 104.414214][ T7999] should_fail_ex.cold+0x5/0xa [ 104.414239][ T7999] _copy_from_user+0x2e/0xd0 [ 104.414261][ T7999] ucma_join_multicast+0xa2/0x160 [ 104.414284][ T7999] ? __pfx_ucma_join_multicast+0x10/0x10 [ 104.414316][ T7999] ? __pfx_ucma_join_multicast+0x10/0x10 [ 104.414336][ T7999] ucma_write+0x1fb/0x330 [ 104.414353][ T7999] ? __pfx_ucma_write+0x10/0x10 [ 104.414370][ T7999] ? bpf_lsm_file_permission+0x9/0x10 [ 104.414390][ T7999] ? security_file_permission+0x76/0x210 [ 104.414409][ T7999] ? rw_verify_area+0xce/0x6d0 [ 104.414425][ T7999] vfs_write+0x2aa/0x1050 [ 104.414444][ T7999] ? __pfx_ucma_write+0x10/0x10 [ 104.414461][ T7999] ? lock_acquire+0x1d1/0x380 [ 104.414476][ T7999] ? __fget_files+0x34/0x3d0 [ 104.414495][ T7999] ? __pfx_vfs_write+0x10/0x10 [ 104.414509][ T7999] ? find_held_lock+0x2b/0x80 [ 104.414529][ T7999] ? __fget_files+0x215/0x3d0 [ 104.414546][ T7999] ? __fget_files+0x215/0x3d0 [ 104.414567][ T7999] ? __fget_files+0x21f/0x3d0 [ 104.414589][ T7999] ksys_write+0x1f8/0x250 [ 104.414604][ T7999] ? __pfx_ksys_write+0x10/0x10 [ 104.414625][ T7999] do_syscall_64+0x123/0x790 [ 104.414642][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.414656][ T7999] RIP: 0033:0x7f07a0d9e159 [ 104.414668][ T7999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.414680][ T7999] RSP: 002b:00007f07a1d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.414695][ T7999] RAX: ffffffffffffffda RBX: 00007f07a1025fa0 RCX: 00007f07a0d9e159 [ 104.414704][ T7999] RDX: 00000000000000a0 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 104.414712][ T7999] RBP: 00007f07a1d47090 R08: 0000000000000000 R09: 0000000000000000 [ 104.414720][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.414729][ T7999] R13: 00007f07a1026038 R14: 00007f07a1025fa0 R15: 00007ffe1bb3d178 [ 104.414747][ T7999] [ 104.640852][ T8015] FAULT_INJECTION: forcing a failure. [ 104.640852][ T8015] name failslab, interval 1, probability 0, space 0, times 0 [ 104.640886][ T8015] CPU: 3 UID: 0 PID: 8015 Comm: syz.2.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.640912][ T8015] Tainted: [L]=SOFTLOCKUP [ 104.640918][ T8015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.640929][ T8015] Call Trace: [ 104.640936][ T8015] [ 104.640945][ T8015] dump_stack_lvl+0x100/0x190 [ 104.640978][ T8015] should_fail_ex.cold+0x5/0xa [ 104.641002][ T8015] ? __netlink_lookup+0x652/0x900 [ 104.641028][ T8015] should_failslab+0xc2/0x120 [ 104.641054][ T8015] kmem_cache_alloc_noprof+0x92/0x6a0 [ 104.641078][ T8015] ? skb_clone+0x190/0x400 [ 104.641109][ T8015] skb_clone+0x190/0x400 [ 104.641136][ T8015] netlink_deliver_tap+0xaed/0xcc0 [ 104.641164][ T8015] netlink_unicast+0x62b/0x850 [ 104.641193][ T8015] ? __pfx_netlink_unicast+0x10/0x10 [ 104.641223][ T8015] netlink_sendmsg+0x8b0/0xda0 [ 104.641251][ T8015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.641299][ T8015] ? selinux_socket_sendmsg+0x198/0x2f0 [ 104.641328][ T8015] ____sys_sendmsg+0xa4d/0xbe0 [ 104.641346][ T8015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.641373][ T8015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.641399][ T8015] ? lock_acquire+0x1d1/0x380 [ 104.641421][ T8015] ? get_pid_task+0x2a/0x250 [ 104.641448][ T8015] ___sys_sendmsg+0x190/0x1e0 [ 104.641470][ T8015] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.641498][ T8015] ? get_pid_task+0x106/0x250 [ 104.641533][ T8015] ? find_held_lock+0x2b/0x80 [ 104.641576][ T8015] __sys_sendmsg+0x160/0x210 [ 104.641602][ T8015] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.641641][ T8015] do_syscall_64+0x123/0x790 [ 104.641663][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.641680][ T8015] RIP: 0033:0x7f07a0d9e159 [ 104.641693][ T8015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.641709][ T8015] RSP: 002b:00007f07a1d47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.641726][ T8015] RAX: ffffffffffffffda RBX: 00007f07a1025fa0 RCX: 00007f07a0d9e159 [ 104.641738][ T8015] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 104.641748][ T8015] RBP: 00007f07a1d47090 R08: 0000000000000000 R09: 0000000000000000 [ 104.641760][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.641770][ T8015] R13: 00007f07a1026038 R14: 00007f07a1025fa0 R15: 00007ffe1bb3d178 [ 104.641795][ T8015] [ 104.692355][ T8019] netlink: 56 bytes leftover after parsing attributes in process `syz.3.645'. [ 104.697717][ T8021] netlink: 56 bytes leftover after parsing attributes in process `syz.3.645'. [ 105.253583][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'. [ 105.267757][ T8027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.404948][ T8031] FAULT_INJECTION: forcing a failure. [ 105.404948][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 105.404972][ T8031] CPU: 2 UID: 0 PID: 8031 Comm: syz.2.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.404990][ T8031] Tainted: [L]=SOFTLOCKUP [ 105.404994][ T8031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.405001][ T8031] Call Trace: [ 105.405005][ T8031] [ 105.405009][ T8031] dump_stack_lvl+0x100/0x190 [ 105.405029][ T8031] should_fail_ex.cold+0x5/0xa [ 105.405052][ T8031] should_failslab+0xc2/0x120 [ 105.405076][ T8031] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 105.405098][ T8031] ? __alloc_skb+0x5b7/0x710 [ 105.405119][ T8031] ? __alloc_skb+0x140/0x710 [ 105.405143][ T8031] __alloc_skb+0x140/0x710 [ 105.405163][ T8031] ? __alloc_skb+0x5b7/0x710 [ 105.405184][ T8031] ? __pfx___alloc_skb+0x10/0x10 [ 105.405211][ T8031] skb_copy+0x1ca/0x3a0 [ 105.405234][ T8031] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 105.405259][ T8031] x25_lapb_receive_frame+0x93/0x1000 [ 105.405314][ T8031] ? kmalloc_reserve+0x148/0x350 [ 105.405334][ T8031] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 105.405358][ T8031] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 105.405381][ T8031] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 105.405403][ T8031] ? lock_acquire+0x1d1/0x380 [ 105.405429][ T8031] __netif_receive_skb+0x1f/0x120 [ 105.405450][ T8031] netif_receive_skb+0x139/0x7d0 [ 105.405471][ T8031] ? __pfx_netif_receive_skb+0x10/0x10 [ 105.405496][ T8031] ? _copy_from_iter+0x270/0x1690 [ 105.405525][ T8031] tun_rx_batched.isra.0+0x3f6/0x750 [ 105.405549][ T8031] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 105.405570][ T8031] ? tun_get_user+0x1e1e/0x3cc0 [ 105.405588][ T8031] tun_get_user+0x1f53/0x3cc0 [ 105.405618][ T8031] ? __lock_acquire+0x5c0/0x1f40 [ 105.405637][ T8031] ? __pfx_tun_get_user+0x10/0x10 [ 105.405660][ T8031] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 105.405694][ T8031] ? find_held_lock+0x2b/0x80 [ 105.405716][ T8031] ? tun_get+0x191/0x370 [ 105.405729][ T8031] ? tun_get+0x191/0x370 [ 105.405746][ T8031] tun_chr_write_iter+0xdc/0x200 [ 105.405762][ T8031] vfs_write+0x6af/0x1050 [ 105.405776][ T8031] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 105.405792][ T8031] ? __pfx_vfs_write+0x10/0x10 [ 105.405804][ T8031] ? find_held_lock+0x2b/0x80 [ 105.405828][ T8031] ksys_write+0x12a/0x250 [ 105.405841][ T8031] ? __pfx_ksys_write+0x10/0x10 [ 105.405857][ T8031] do_syscall_64+0x123/0x790 [ 105.405871][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.405882][ T8031] RIP: 0033:0x7f07a0d9e159 [ 105.405896][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.405909][ T8031] RSP: 002b:00007f07a1d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.405927][ T8031] RAX: ffffffffffffffda RBX: 00007f07a1025fa0 RCX: 00007f07a0d9e159 [ 105.405938][ T8031] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000003 [ 105.405948][ T8031] RBP: 00007f07a1d47090 R08: 0000000000000000 R09: 0000000000000000 [ 105.405958][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.405968][ T8031] R13: 00007f07a1026038 R14: 00007f07a1025fa0 R15: 00007ffe1bb3d178 [ 105.405992][ T8031] [ 105.675948][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'. [ 105.695212][ T8053] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.844454][ T8093] sctp: [Deprecated]: syz.0.662 (pid 8093) Use of int in max_burst socket option. [ 106.844454][ T8093] Use struct sctp_assoc_value instead [ 108.586816][ T8044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.642824][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 108.642840][ T43] audit: type=1400 audit(1791027388.667:649): avc: denied { wake_alarm } for pid=8096 comm="syz.3.663" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.826935][ T43] audit: type=1400 audit(1791027388.847:650): avc: denied { setopt } for pid=8104 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.828608][ T43] audit: type=1400 audit(1791027388.847:651): avc: denied { shutdown } for pid=8104 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.828656][ T43] audit: type=1400 audit(1791027388.847:652): avc: denied { read } for pid=8104 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.032654][ T8112] FAULT_INJECTION: forcing a failure. [ 109.032654][ T8112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 109.032684][ T8112] CPU: 2 UID: 0 PID: 8112 Comm: syz.2.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.032704][ T8112] Tainted: [L]=SOFTLOCKUP [ 109.032709][ T8112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.032717][ T8112] Call Trace: [ 109.032722][ T8112] [ 109.032728][ T8112] dump_stack_lvl+0x100/0x190 [ 109.032768][ T8112] should_fail_ex.cold+0x5/0xa [ 109.032785][ T8112] ? prepare_alloc_pages+0x16d/0x5b0 [ 109.032813][ T8112] should_fail_alloc_page+0xeb/0x140 [ 109.032834][ T8112] prepare_alloc_pages+0x1f0/0x5b0 [ 109.032856][ T8112] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 109.032873][ T8112] ? alloc_skb_with_frags+0xdd/0x760 [ 109.032898][ T8112] ? sock_alloc_send_pskb+0x801/0x980 [ 109.032916][ T8112] ? tun_get_user+0x7d0/0x3cc0 [ 109.032934][ T8112] ? tun_chr_write_iter+0xdc/0x200 [ 109.032955][ T8112] ? vfs_write+0x6af/0x1050 [ 109.032970][ T8112] ? ksys_write+0x12a/0x250 [ 109.032985][ T8112] ? do_syscall_64+0x123/0x790 [ 109.033004][ T8112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.033027][ T8112] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 109.033057][ T8112] ? rcu_is_watching+0x13/0xc0 [ 109.033079][ T8112] ? trace_kmem_cache_alloc+0xdd/0x100 [ 109.033099][ T8112] ? __kasan_slab_alloc+0x89/0x90 [ 109.033120][ T8112] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 109.033138][ T8112] ? trace_kmem_cache_alloc+0xdd/0x100 [ 109.033157][ T8112] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.033178][ T8112] ? policy_nodemask+0xed/0x4f0 [ 109.033201][ T8112] alloc_pages_mpol+0x201/0x550 [ 109.033223][ T8112] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 109.033241][ T8112] ? __alloc_skb+0x5b7/0x710 [ 109.033293][ T8112] ? __pfx___alloc_skb+0x10/0x10 [ 109.033319][ T8112] ? lock_acquire+0x1d1/0x380 [ 109.033340][ T8112] alloc_pages_noprof+0x1a/0x160 [ 109.033355][ T8112] alloc_skb_with_frags+0x4e7/0x760 [ 109.033378][ T8112] ? __might_fault+0xc5/0x140 [ 109.033396][ T8112] sock_alloc_send_pskb+0x801/0x980 [ 109.033415][ T8112] ? _copy_from_iter+0x270/0x1690 [ 109.033439][ T8112] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 109.033456][ T8112] ? __lock_acquire+0x5c0/0x1f40 [ 109.033472][ T8112] ? _parse_integer_limit+0x1ac/0x220 [ 109.033497][ T8112] ? _kstrtoull+0x144/0x200 [ 109.033517][ T8112] ? iov_iter_advance+0xac/0x6d0 [ 109.033533][ T8112] ? __pfx__kstrtoull+0x10/0x10 [ 109.033557][ T8112] tun_get_user+0x7d0/0x3cc0 [ 109.033586][ T8112] ? __lock_acquire+0x5c0/0x1f40 [ 109.033604][ T8112] ? __pfx_tun_get_user+0x10/0x10 [ 109.033628][ T8112] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 109.033659][ T8112] ? find_held_lock+0x2b/0x80 [ 109.033683][ T8112] ? tun_get+0x191/0x370 [ 109.033702][ T8112] ? tun_get+0x191/0x370 [ 109.033730][ T8112] tun_chr_write_iter+0xdc/0x200 [ 109.033756][ T8112] vfs_write+0x6af/0x1050 [ 109.033779][ T8112] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 109.033804][ T8112] ? __pfx_vfs_write+0x10/0x10 [ 109.033823][ T8112] ? find_held_lock+0x2b/0x80 [ 109.033865][ T8112] ksys_write+0x12a/0x250 [ 109.033886][ T8112] ? __pfx_ksys_write+0x10/0x10 [ 109.033914][ T8112] do_syscall_64+0x123/0x790 [ 109.033937][ T8112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.033955][ T8112] RIP: 0033:0x7f07a0d9e159 [ 109.033972][ T8112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.033989][ T8112] RSP: 002b:00007f07a1d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.034008][ T8112] RAX: ffffffffffffffda RBX: 00007f07a1025fa0 RCX: 00007f07a0d9e159 [ 109.034020][ T8112] RDX: 0000000000000fce RSI: 00002000000012c0 RDI: 0000000000000003 [ 109.034031][ T8112] RBP: 00007f07a1d47090 R08: 0000000000000000 R09: 0000000000000000 [ 109.034041][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.034050][ T8112] R13: 00007f07a1026038 R14: 00007f07a1025fa0 R15: 00007ffe1bb3d178 [ 109.034072][ T8112] [ 109.560998][ T43] audit: type=1400 audit(1791027389.587:653): avc: denied { create } for pid=8126 comm="syz.4.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 109.583858][ T43] audit: type=1400 audit(1791027389.607:654): avc: denied { map } for pid=8126 comm="syz.4.674" path="socket:[27782]" dev="sockfs" ino=27782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.681111][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 109.797981][ T43] audit: type=1800 audit(1791027389.817:655): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.679" name="(" dev="sda1" ino=2043 res=0 errno=0 [ 109.840701][ T43] audit: type=1400 audit(1791027389.867:656): avc: denied { create } for pid=8146 comm="syz.4.680" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.894081][ T8151] netlink: 36 bytes leftover after parsing attributes in process `syz.4.682'. [ 109.894126][ T8151] netlink: 36 bytes leftover after parsing attributes in process `syz.4.682'. [ 109.910645][ T8152] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 109.910666][ T8152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.682'. [ 109.910664][ T8151] netlink: 36 bytes leftover after parsing attributes in process `syz.4.682'. [ 109.910711][ T8151] netlink: 36 bytes leftover after parsing attributes in process `syz.4.682'. [ 109.923352][ T8152] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 109.923371][ T8152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.682'. [ 109.926941][ T8152] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 109.926977][ T8152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.682'. [ 109.927168][ T8152] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 109.927181][ T8152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.682'. [ 109.927345][ T8152] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 109.927356][ T8152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.682'. [ 109.929214][ T8152] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 109.930456][ T8152] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 109.930721][ T8152] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 109.931059][ T8152] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 109.931319][ T8152] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 110.178511][ T43] audit: type=1400 audit(1791027390.197:657): avc: denied { read } for pid=8163 comm="syz.0.686" name="tcm.usb0" dev="configfs" ino=9001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.178852][ T43] audit: type=1400 audit(1791027390.197:658): avc: denied { read open } for pid=8163 comm="syz.0.686" path="/130/config/usb_gadget/g1/functions/tcm.usb0" dev="configfs" ino=9001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.260477][ T1478] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 110.316490][ T8171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.316539][ T8171] IPv6: NLM_F_CREATE should be set when creating new route [ 110.316560][ T8171] IPv6: NLM_F_CREATE should be set when creating new route [ 110.343140][ T8169] configfs-gadget.g1 gadget.0: HOST MAC 4a:ef:e7:ec:f6:db [ 110.343198][ T8169] configfs-gadget.g1 gadget.0: MAC 4e:6d:ee:60:37:ce [ 110.373777][ T8169] ip_tables: iptables: counters copy to user failed while replacing table [ 110.419687][ T1478] usb 8-1: Using ep0 maxpacket: 32 [ 110.422329][ T1478] usb 8-1: unable to get BOS descriptor or descriptor too short [ 110.422378][ T1478] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 110.425678][ T5743] Bluetooth: hci2: unexpected event for opcode 0x200b [ 110.427652][ T1478] usb 8-1: string descriptor 0 read error: -22 [ 110.427750][ T1478] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.441139][ T1478] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 110.446918][ T1478] dw2102: su3000_power_ctrl: 1, initialized 0 [ 110.447409][ T1478] dvb-usb: bulk message failed: -22 (2/0) [ 110.487280][ T8188] FAULT_INJECTION: forcing a failure. [ 110.487280][ T8188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.487316][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.0.693 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.487371][ T8188] Tainted: [L]=SOFTLOCKUP [ 110.487379][ T8188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.487392][ T8188] Call Trace: [ 110.487400][ T8188] [ 110.487409][ T8188] dump_stack_lvl+0x100/0x190 [ 110.487442][ T8188] should_fail_ex.cold+0x5/0xa [ 110.487473][ T8188] _copy_to_user+0x32/0xd0 [ 110.487502][ T8188] simple_read_from_buffer+0xcb/0x170 [ 110.487534][ T8188] proc_fail_nth_read+0x1af/0x230 [ 110.487559][ T1478] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.487564][ T8188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.487592][ T8188] ? rw_verify_area+0xce/0x6d0 [ 110.487613][ T8188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.487641][ T8188] vfs_read+0x1e4/0xb40 [ 110.487666][ T8188] ? lock_acquire+0x1d1/0x380 [ 110.487690][ T8188] ? __fget_files+0x34/0x3d0 [ 110.487715][ T8188] ? __pfx_vfs_read+0x10/0x10 [ 110.487733][ T8188] ? find_held_lock+0x2b/0x80 [ 110.487764][ T8188] ? __fget_files+0x215/0x3d0 [ 110.487805][ T8188] ? __fget_files+0x21f/0x3d0 [ 110.487842][ T8188] ksys_read+0x12a/0x250 [ 110.487863][ T8188] ? __pfx_ksys_read+0x10/0x10 [ 110.487883][ T8188] ? v4l2_ioctl+0x1c5/0x250 [ 110.487914][ T8188] do_syscall_64+0x123/0x790 [ 110.487941][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.487964][ T8188] RIP: 0033:0x7f612675e98e [ 110.487982][ T8188] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.488001][ T8188] RSP: 002b:00007f61275a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.488020][ T8188] RAX: ffffffffffffffda RBX: 00007f61275a66c0 RCX: 00007f612675e98e [ 110.488034][ T8188] RDX: 000000000000000f RSI: 00007f61275a60a0 RDI: 0000000000000004 [ 110.488048][ T8188] RBP: 00007f61275a6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.488061][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.488074][ T8188] R13: 00007f6126a26038 R14: 00007f6126a25fa0 R15: 00007ffcadd5b138 [ 110.488106][ T8188] [ 110.499465][ T1478] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 110.502442][ T1478] usb 8-1: media controller created [ 110.502739][ T1478] dvb-usb: bulk message failed: -22 (6/0) [ 110.502749][ T1478] dw2102: i2c transfer failed. [ 110.502775][ T1478] dvb-usb: bulk message failed: -22 (6/0) [ 110.502785][ T1478] dw2102: i2c transfer failed. [ 110.502794][ T1478] dvb-usb: bulk message failed: -22 (6/0) [ 110.502805][ T1478] dw2102: i2c transfer failed. [ 110.502814][ T1478] dvb-usb: bulk message failed: -22 (6/0) [ 110.502824][ T1478] dw2102: i2c transfer failed. [ 110.502834][ T1478] dvb-usb: bulk message failed: -22 (6/0) [ 110.502843][ T1478] dw2102: i2c transfer failed. [ 110.502851][ T1478] dvb-usb: bulk message failed: -22 (6/0) [ 110.502860][ T1478] dw2102: i2c transfer failed. [ 110.502866][ T1478] dvb-usb: MAC address: 02:02:02:02:02:02 [ 110.533575][ T1478] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.574312][ T1478] dvb-usb: bulk message failed: -22 (3/0) [ 110.574333][ T1478] dw2102: command 0x0e transfer failed. [ 110.574342][ T1478] dvb-usb: bulk message failed: -22 (3/0) [ 110.574354][ T1478] dw2102: command 0x0e transfer failed. [ 110.598256][ T8192] FAULT_INJECTION: forcing a failure. [ 110.598256][ T8192] name failslab, interval 1, probability 0, space 0, times 0 [ 110.598287][ T8192] CPU: 2 UID: 0 PID: 8192 Comm: syz.0.694 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.598310][ T8192] Tainted: [L]=SOFTLOCKUP [ 110.598316][ T8192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.598326][ T8192] Call Trace: [ 110.598331][ T8192] [ 110.598339][ T8192] dump_stack_lvl+0x100/0x190 [ 110.598369][ T8192] should_fail_ex.cold+0x5/0xa [ 110.598394][ T8192] should_failslab+0xc2/0x120 [ 110.598418][ T8192] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 110.598440][ T8192] ? __alloc_skb+0x140/0x710 [ 110.598468][ T8192] __alloc_skb+0x140/0x710 [ 110.598487][ T8192] ? __alloc_skb+0x5b7/0x710 [ 110.598508][ T8192] ? __pfx___alloc_skb+0x10/0x10 [ 110.598537][ T8192] hci_sock_sendmsg+0x1b27/0x26a0 [ 110.598568][ T8192] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 110.598593][ T8192] ? selinux_socket_sendmsg+0x198/0x2f0 [ 110.598619][ T8192] sock_write_iter+0x53a/0x5b0 [ 110.598636][ T8192] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 110.598661][ T8192] ? __pfx_sock_write_iter+0x10/0x10 [ 110.598685][ T8192] ? bpf_lsm_file_permission+0x9/0x10 [ 110.598708][ T8192] ? security_file_permission+0x76/0x210 [ 110.598733][ T8192] ? rw_verify_area+0xce/0x6d0 [ 110.598753][ T8192] vfs_write+0x6af/0x1050 [ 110.598773][ T8192] ? __pfx_sock_write_iter+0x10/0x10 [ 110.598793][ T8192] ? __pfx_vfs_write+0x10/0x10 [ 110.598809][ T8192] ? find_held_lock+0x2b/0x80 [ 110.598850][ T8192] ksys_write+0x1f8/0x250 [ 110.598869][ T8192] ? __pfx_ksys_write+0x10/0x10 [ 110.598896][ T8192] do_syscall_64+0x123/0x790 [ 110.598916][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.598938][ T8192] RIP: 0033:0x7f612679e159 [ 110.598953][ T8192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.598968][ T8192] RSP: 002b:00007f61275a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.598986][ T8192] RAX: ffffffffffffffda RBX: 00007f6126a25fa0 RCX: 00007f612679e159 [ 110.598997][ T8192] RDX: 000000000000000d RSI: 0000200000000400 RDI: 0000000000000004 [ 110.599007][ T8192] RBP: 00007f61275a6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.599017][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.599027][ T8192] R13: 00007f6126a26038 R14: 00007f6126a25fa0 R15: 00007ffcadd5b138 [ 110.599052][ T8192] [ 110.679103][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 110.679130][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 110.679144][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa6b4 instead [ 110.679164][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd1aa instead [ 110.679181][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 110.679197][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 110.679214][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 110.679227][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 110.679257][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 110.683565][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 110.683586][ T8197] jffs2: Further such events for this erase block will not be printed [ 110.683917][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 110.683934][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 110.683955][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xa6b4 instead [ 110.683971][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd1aa instead [ 110.683984][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 110.683999][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 110.684013][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 110.684031][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 110.684057][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 110.684079][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 110.684092][ T8197] jffs2: Further such events for this erase block will not be printed [ 110.684390][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 110.684405][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 110.684419][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xa6b4 instead [ 110.684435][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xd1aa instead [ 110.684476][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 110.684490][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 110.684504][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xa6b4 instead [ 110.684519][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xd1aa instead [ 110.684557][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 110.684569][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 110.684584][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xa6b4 instead [ 110.684599][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xd1aa instead [ 110.684638][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 110.684654][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 110.684668][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xa6b4 instead [ 110.684684][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xd1aa instead [ 110.684722][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 110.684734][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 110.684748][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xa6b4 instead [ 110.684764][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xd1aa instead [ 110.684812][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 110.684822][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 110.684836][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xa6b4 instead [ 110.684852][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xd1aa instead [ 110.684892][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 110.684902][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 110.684913][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xa6b4 instead [ 110.684929][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xd1aa instead [ 110.684975][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 110.684986][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 110.685000][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xa6b4 instead [ 110.685017][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xd1aa instead [ 110.685058][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 110.685068][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 110.685082][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xa6b4 instead [ 110.685098][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xd1aa instead [ 110.685139][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 110.685151][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 110.685164][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xa6b4 instead [ 110.685180][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xd1aa instead [ 110.685221][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 110.685233][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 110.685247][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xa6b4 instead [ 110.685296][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xd1aa instead [ 110.685322][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 110.685331][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 110.685341][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xa6b4 instead [ 110.685351][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xd1aa instead [ 110.685377][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 110.685388][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 110.685403][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xa6b4 instead [ 110.685420][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xd1aa instead [ 110.685460][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 110.691081][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 110.691101][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xa6b4 instead [ 110.691117][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xd1aa instead [ 110.691165][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 110.691180][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 110.691192][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xa6b4 instead [ 110.691209][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xd1aa instead [ 110.691250][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 110.691264][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 110.691274][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xa6b4 instead [ 110.691284][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xd1aa instead [ 110.691321][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 110.691335][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 110.691349][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xa6b4 instead [ 110.691364][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xd1aa instead [ 110.691397][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 110.691411][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 110.691425][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xa6b4 instead [ 110.691441][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xd1aa instead [ 110.691478][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 110.691491][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 110.691506][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xa6b4 instead [ 110.691522][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xd1aa instead [ 110.691557][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 110.691571][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 110.691586][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xa6b4 instead [ 110.691601][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xd1aa instead [ 110.691639][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 110.691653][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 110.691667][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xa6b4 instead [ 110.691683][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xd1aa instead [ 110.691718][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 110.691732][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 110.691746][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xa6b4 instead [ 110.691761][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xd1aa instead [ 110.691801][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 110.691815][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 110.691829][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xa6b4 instead [ 110.691844][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xd1aa instead [ 110.691879][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 110.691895][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 110.691911][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xa6b4 instead [ 110.691927][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xd1aa instead [ 110.691974][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 110.691989][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 110.692005][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xa6b4 instead [ 110.692024][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xd1aa instead [ 110.692064][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 110.692078][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 110.692093][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xa6b4 instead [ 110.692161][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xd1aa instead [ 110.692201][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 110.692216][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 110.692230][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xa6b4 instead [ 110.692246][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xd1aa instead [ 110.692285][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 110.692294][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 110.692309][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xa6b4 instead [ 110.692324][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xd1aa instead [ 110.692367][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 110.692378][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 110.692391][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xa6b4 instead [ 110.692407][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xd1aa instead [ 110.692449][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 110.692462][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 110.692476][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xa6b4 instead [ 110.692492][ T8197] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xd1aa instead [ 110.692525][ T8197] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 110.692532][ T8197] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 110.716533][ T8197] binder: 8195:8197 ioctl 4018620d 0 returned -22 [ 110.723226][ T8197] binder: 8195:8197 ioctl c0306201 200000000640 returned -22 [ 110.723367][ T8197] binder: 8195:8197 ioctl ae41 2 returned -22 [ 110.901626][ T1478] dvb-usb: bulk message failed: -22 (3/0) [ 110.901653][ T1478] dw2102: command 0x0e transfer failed. [ 110.901659][ T1478] dvb-usb: bulk message failed: -22 (3/0) [ 110.901666][ T1478] dw2102: command 0x0e transfer failed. [ 110.901670][ T1478] dvb-usb: bulk message failed: -22 (1/0) [ 110.901677][ T1478] dw2102: command 0x51 transfer failed. [ 110.904712][ T8154] dvb-usb: bulk message failed: -22 (5/0) [ 110.904729][ T8154] dw2102: i2c transfer failed. [ 110.961434][ T1478] DVB: Unable to find symbol ds3000_attach() [ 110.961446][ T1478] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 111.021629][ T1478] rc_core: IR keymap rc-su3000 not found [ 111.021650][ T1478] Registered IR keymap rc-empty [ 111.023684][ T1478] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 111.031205][ T1478] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input13 [ 111.035889][ T1478] dvb-usb: schedule remote query interval to 150 msecs. [ 111.035904][ T1478] dw2102: su3000_power_ctrl: 0, initialized 1 [ 111.035912][ T1478] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 111.036891][ T1478] usb 8-1: USB disconnect, device number 8 [ 111.112715][ T8219] kvm: MWAIT instruction emulated as NOP! [ 111.113479][ T8227] FAULT_INJECTION: forcing a failure. [ 111.113479][ T8227] name failslab, interval 1, probability 0, space 0, times 0 [ 111.113508][ T8227] CPU: 2 UID: 0 PID: 8227 Comm: syz.0.700 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.113531][ T8227] Tainted: [L]=SOFTLOCKUP [ 111.113537][ T8227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.113561][ T8227] Call Trace: [ 111.113569][ T8227] [ 111.113576][ T8227] dump_stack_lvl+0x100/0x190 [ 111.113616][ T8227] should_fail_ex.cold+0x5/0xa [ 111.113640][ T8227] should_failslab+0xc2/0x120 [ 111.113669][ T8227] __kvmalloc_node_noprof+0x113/0x9b0 [ 111.113691][ T8227] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 111.113714][ T8227] ? stack_depot_save_flags+0x27/0x9f0 [ 111.113739][ T8227] ? kvm_recalculate_apic_map+0x225/0x1500 [ 111.113765][ T8227] kvm_recalculate_apic_map+0x225/0x1500 [ 111.113789][ T8227] ? __pfx_vmx_set_virtual_apic_mode+0x10/0x10 [ 111.113815][ T8227] ? __pfx_kvm_recalculate_apic_map+0x10/0x10 [ 111.113837][ T8227] ? __kvm_apic_set_base+0x20d/0xa40 [ 111.113861][ T8227] kvm_apic_set_base+0x1a4/0x200 [ 111.113887][ T8227] __set_sregs_common.constprop.0+0x4f1/0x1bc0 [ 111.113911][ T8227] ? __pfx___set_sregs_common.constprop.0+0x10/0x10 [ 111.113941][ T8227] __set_sregs+0x7e/0x260 [ 111.113957][ T8227] ? __pfx___set_sregs+0x10/0x10 [ 111.113978][ T8227] kvm_arch_vcpu_ioctl_set_sregs+0xce/0x110 [ 111.113997][ T8227] kvm_vcpu_ioctl+0x8ee/0x1700 [ 111.114023][ T8227] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 111.114047][ T8227] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.114070][ T8227] ? do_vfs_ioctl+0x226/0x13e0 [ 111.114089][ T8227] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 111.114106][ T8227] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 111.114132][ T8227] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 111.114158][ T8227] ? __fget_files+0x34/0x3d0 [ 111.114190][ T8227] ? selinux_file_ioctl+0x13b/0x290 [ 111.114211][ T8227] ? selinux_file_ioctl+0xb6/0x290 [ 111.114234][ T8227] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 111.114258][ T8227] __x64_sys_ioctl+0x18e/0x210 [ 111.114278][ T8227] do_syscall_64+0x123/0x790 [ 111.114304][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.114321][ T8227] RIP: 0033:0x7f612679e159 [ 111.114336][ T8227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.114352][ T8227] RSP: 002b:00007f6127584028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.114369][ T8227] RAX: ffffffffffffffda RBX: 00007f6126a26090 RCX: 00007f612679e159 [ 111.114380][ T8227] RDX: 0000200000000340 RSI: 000000004138ae84 RDI: 0000000000000005 [ 111.114389][ T8227] RBP: 00007f6127584090 R08: 0000000000000000 R09: 0000000000000000 [ 111.114394][ T8226] FAULT_INJECTION: forcing a failure. [ 111.114394][ T8226] name failslab, interval 1, probability 0, space 0, times 0 [ 111.114400][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.114413][ T8227] R13: 00007f6126a26128 R14: 00007f6126a26090 R15: 00007ffcadd5b138 [ 111.114438][ T8227] [ 111.114450][ T8226] CPU: 0 UID: 0 PID: 8226 Comm: syz.2.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.114474][ T8226] Tainted: [L]=SOFTLOCKUP [ 111.114481][ T8226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.114491][ T8226] Call Trace: [ 111.114497][ T8226] [ 111.114504][ T8226] dump_stack_lvl+0x100/0x190 [ 111.114534][ T8226] should_fail_ex.cold+0x5/0xa [ 111.114555][ T8226] ? __netlink_lookup+0x652/0x900 [ 111.114588][ T8226] should_failslab+0xc2/0x120 [ 111.114613][ T8226] kmem_cache_alloc_noprof+0x92/0x6a0 [ 111.114637][ T8226] ? skb_clone+0x190/0x400 [ 111.114666][ T8226] skb_clone+0x190/0x400 [ 111.114692][ T8226] netlink_deliver_tap+0xaed/0xcc0 [ 111.114721][ T8226] netlink_unicast+0x62b/0x850 [ 111.114748][ T8226] ? __pfx_netlink_unicast+0x10/0x10 [ 111.114780][ T8226] netlink_sendmsg+0x8b0/0xda0 [ 111.114807][ T8226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.114854][ T8226] ? selinux_socket_sendmsg+0x198/0x2f0 [ 111.114883][ T8226] ____sys_sendmsg+0xa4d/0xbe0 [ 111.114900][ T8226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.114925][ T8226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.114950][ T8226] ? lock_acquire+0x1d1/0x380 [ 111.114971][ T8226] ? get_pid_task+0x2a/0x250 [ 111.114998][ T8226] ___sys_sendmsg+0x190/0x1e0 [ 111.115020][ T8226] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.115040][ T8226] ? get_pid_task+0x106/0x250 [ 111.115074][ T8226] ? find_held_lock+0x2b/0x80 [ 111.115118][ T8226] __sys_sendmsg+0x160/0x210 [ 111.115145][ T8226] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.115184][ T8226] do_syscall_64+0x123/0x790 [ 111.115206][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.115225][ T8226] RIP: 0033:0x7f07a0d9e159 [ 111.115240][ T8226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.115257][ T8226] RSP: 002b:00007f07a1d47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.115275][ T8226] RAX: ffffffffffffffda RBX: 00007f07a1025fa0 RCX: 00007f07a0d9e159 [ 111.115286][ T8226] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 111.115295][ T8226] RBP: 00007f07a1d47090 R08: 0000000000000000 R09: 0000000000000000 [ 111.115305][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.115317][ T8226] R13: 00007f07a1026038 R14: 00007f07a1025fa0 R15: 00007ffe1bb3d178 [ 111.115342][ T8226] [ 111.174419][ T1478] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 111.760756][ T8247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.861004][ T8221] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.861028][ T8221] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 111.879169][ T8221] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.879185][ T8221] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 111.895994][ T8221] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.896018][ T8221] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 112.416610][ T8265] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 112.453992][ T8265] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.704951][ T8279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8279 comm=syz.4.721 [ 113.287460][ T8293] FAULT_INJECTION: forcing a failure. [ 113.287460][ T8293] name failslab, interval 1, probability 0, space 0, times 0 [ 113.287493][ T8293] CPU: 3 UID: 0 PID: 8293 Comm: syz.0.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.287518][ T8293] Tainted: [L]=SOFTLOCKUP [ 113.287524][ T8293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.287536][ T8293] Call Trace: [ 113.287542][ T8293] [ 113.287549][ T8293] dump_stack_lvl+0x100/0x190 [ 113.287580][ T8293] should_fail_ex.cold+0x5/0xa [ 113.287606][ T8293] should_failslab+0xc2/0x120 [ 113.287632][ T8293] kmem_cache_alloc_noprof+0x92/0x6a0 [ 113.287653][ T8293] ? map_create+0x143a/0x30d0 [ 113.287668][ T8293] ? __sys_bpf+0x12a0/0x4a30 [ 113.287686][ T8293] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 113.287717][ T8293] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 113.287748][ T8293] idr_get_free+0x52e/0xa00 [ 113.287781][ T8293] idr_alloc_u32+0x1ac/0x320 [ 113.287804][ T8293] ? __pfx_idr_alloc_u32+0x10/0x10 [ 113.287825][ T8293] ? lock_acquire+0x1d1/0x380 [ 113.287844][ T8293] ? __radix_tree_preload+0x7c/0x820 [ 113.287873][ T8293] idr_alloc_cyclic+0x10b/0x230 [ 113.287895][ T8293] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 113.287914][ T8293] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 113.287943][ T8293] map_create+0x1698/0x30d0 [ 113.287959][ T8293] ? find_held_lock+0x2b/0x80 [ 113.287983][ T8293] ? avc_has_perm_noaudit+0x11e/0x470 [ 113.288012][ T8293] ? avc_has_perm_noaudit+0x11e/0x470 [ 113.288045][ T8293] ? __pfx_map_create+0x10/0x10 [ 113.288072][ T8293] ? avc_has_perm+0x135/0x1e0 [ 113.288098][ T8293] ? __pfx_avc_has_perm+0x10/0x10 [ 113.288137][ T8293] ? __might_fault+0xc5/0x140 [ 113.288157][ T8293] ? __might_fault+0xc5/0x140 [ 113.288179][ T8293] ? selinux_bpf+0xfb/0x150 [ 113.288199][ T8293] __sys_bpf+0x12a0/0x4a30 [ 113.288223][ T8293] ? __pfx___sys_bpf+0x10/0x10 [ 113.288239][ T8293] ? find_held_lock+0x2b/0x80 [ 113.288262][ T8293] ? get_pid_task+0xfc/0x250 [ 113.288283][ T8293] ? get_pid_task+0xfc/0x250 [ 113.288314][ T8293] ? find_held_lock+0x2b/0x80 [ 113.288345][ T8293] ? rcu_read_lock_any_held+0x6a/0x90 [ 113.288374][ T8293] ? find_held_lock+0x2b/0x80 [ 113.288399][ T8293] ? ksys_write+0x190/0x250 [ 113.288418][ T8293] ? ksys_write+0x190/0x250 [ 113.288439][ T8293] ? lock_acquire+0x1d1/0x380 [ 113.288472][ T8293] ? fput+0x7c/0x100 [ 113.288498][ T8293] ? ksys_write+0x1ac/0x250 [ 113.288522][ T8293] ? __x64_sys_bpf+0xce/0x140 [ 113.288541][ T8293] __x64_sys_bpf+0xce/0x140 [ 113.288560][ T8293] ? do_syscall_64+0xae/0x790 [ 113.288582][ T8293] do_syscall_64+0x123/0x790 [ 113.288602][ T8293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.288621][ T8293] RIP: 0033:0x7f612679e159 [ 113.288635][ T8293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.288652][ T8293] RSP: 002b:00007f61275a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.288671][ T8293] RAX: ffffffffffffffda RBX: 00007f6126a25fa0 RCX: 00007f612679e159 [ 113.288684][ T8293] RDX: 0000000000000050 RSI: 0000200000000a00 RDI: 0000000000000000 [ 113.288693][ T8293] RBP: 00007f61275a6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.288704][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.288716][ T8293] R13: 00007f6126a26038 R14: 00007f6126a25fa0 R15: 00007ffcadd5b138 [ 113.288742][ T8293] [ 113.398721][ T8295] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 113.410735][ T8295] veth0_macvtap: Caught tx_queue_len zero misconfig [ 113.524634][ T8306] FAULT_INJECTION: forcing a failure. [ 113.524634][ T8306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.524665][ T8306] CPU: 3 UID: 0 PID: 8306 Comm: syz.3.728 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.524685][ T8306] Tainted: [L]=SOFTLOCKUP [ 113.524690][ T8306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.524699][ T8306] Call Trace: [ 113.524704][ T8306] [ 113.524710][ T8306] dump_stack_lvl+0x100/0x190 [ 113.524738][ T8306] should_fail_ex.cold+0x5/0xa [ 113.524777][ T8306] _copy_to_user+0x32/0xd0 [ 113.524801][ T8306] vcs_read+0x7d7/0xc30 [ 113.524830][ T8306] ? __pfx_vcs_read+0x10/0x10 [ 113.524850][ T8306] ? bpf_lsm_file_permission+0x9/0x10 [ 113.524874][ T8306] ? security_file_permission+0x76/0x210 [ 113.524902][ T8306] ? iov_iter_advance+0xac/0x6d0 [ 113.524919][ T8306] ? rw_verify_area+0xce/0x6d0 [ 113.524954][ T8306] ? __pfx_vcs_read+0x10/0x10 [ 113.524968][ T8306] vfs_readv+0x5d8/0x8d0 [ 113.524986][ T8306] ? __pfx_vfs_readv+0x10/0x10 [ 113.525003][ T8306] ? lock_acquire+0x1d1/0x380 [ 113.525018][ T8306] ? __fget_files+0x34/0x3d0 [ 113.525044][ T8306] ? __fget_files+0x21f/0x3d0 [ 113.525066][ T8306] ? do_readv+0x13e/0x340 [ 113.525079][ T8306] do_readv+0x13e/0x340 [ 113.525093][ T8306] ? __pfx_do_readv+0x10/0x10 [ 113.525111][ T8306] do_syscall_64+0x123/0x790 [ 113.525128][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.525143][ T8306] RIP: 0033:0x7f020a99e159 [ 113.525154][ T8306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.525167][ T8306] RSP: 002b:00007f0208bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 113.525182][ T8306] RAX: ffffffffffffffda RBX: 00007f020ac25fa0 RCX: 00007f020a99e159 [ 113.525191][ T8306] RDX: 0000000000000002 RSI: 00002000000021c0 RDI: 0000000000000003 [ 113.525199][ T8306] RBP: 00007f0208bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.525207][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.525215][ T8306] R13: 00007f020ac26038 R14: 00007f020ac25fa0 R15: 00007ffe13b605d8 [ 113.525233][ T8306] [ 113.716585][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.717006][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.800789][ T8321] FAULT_INJECTION: forcing a failure. [ 113.800789][ T8321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.800830][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.3.734 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.800856][ T8321] Tainted: [L]=SOFTLOCKUP [ 113.800864][ T8321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.800875][ T8321] Call Trace: [ 113.800882][ T8321] [ 113.800890][ T8321] dump_stack_lvl+0x100/0x190 [ 113.800924][ T8321] should_fail_ex.cold+0x5/0xa [ 113.800951][ T8321] _copy_to_user+0x32/0xd0 [ 113.800974][ T8321] simple_read_from_buffer+0xcb/0x170 [ 113.800999][ T8321] proc_fail_nth_read+0x1af/0x230 [ 113.801023][ T8321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.801046][ T8321] ? rw_verify_area+0xce/0x6d0 [ 113.801063][ T8321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.801085][ T8321] vfs_read+0x1e4/0xb40 [ 113.801108][ T8321] ? lock_acquire+0x1d1/0x380 [ 113.801129][ T8321] ? __fget_files+0x34/0x3d0 [ 113.801154][ T8321] ? __pfx_vfs_read+0x10/0x10 [ 113.801173][ T8321] ? find_held_lock+0x2b/0x80 [ 113.801201][ T8321] ? __fget_files+0x215/0x3d0 [ 113.801231][ T8321] ? __fget_files+0x21f/0x3d0 [ 113.801293][ T8321] ksys_read+0x12a/0x250 [ 113.801315][ T8321] ? __pfx_ksys_read+0x10/0x10 [ 113.801343][ T8321] do_syscall_64+0x123/0x790 [ 113.801365][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.801385][ T8321] RIP: 0033:0x7f020a95e98e [ 113.801402][ T8321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.801418][ T8321] RSP: 002b:00007f0208bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.801439][ T8321] RAX: ffffffffffffffda RBX: 00007f0208bf66c0 RCX: 00007f020a95e98e [ 113.801453][ T8321] RDX: 000000000000000f RSI: 00007f0208bf60a0 RDI: 0000000000000004 [ 113.801465][ T8321] RBP: 00007f0208bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.801476][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.801487][ T8321] R13: 00007f020ac26038 R14: 00007f020ac25fa0 R15: 00007ffe13b605d8 [ 113.801514][ T8321] [ 113.844159][ T8323] tmpfs: Using encoding : utf8-12.1.0 [ 113.844159][ T8324] tmpfs: Using encoding : utf8-12.1.0 [ 113.950834][ T8323] bonding: b is being created... [ 114.002878][ T8323] FAULT_INJECTION: forcing a failure. [ 114.002878][ T8323] name failslab, interval 1, probability 0, space 0, times 0 [ 114.002906][ T8323] CPU: 3 UID: 0 PID: 8323 Comm: syz.3.735 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.002925][ T8323] Tainted: [L]=SOFTLOCKUP [ 114.002930][ T8323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.002939][ T8323] Call Trace: [ 114.002943][ T8323] [ 114.002949][ T8323] dump_stack_lvl+0x100/0x190 [ 114.002974][ T8323] should_fail_ex.cold+0x5/0xa [ 114.002994][ T8323] should_failslab+0xc2/0x120 [ 114.003015][ T8323] __kmalloc_noprof+0xfc/0x840 [ 114.003031][ T8323] ? __netlink_kernel_create+0x181/0x750 [ 114.003053][ T8323] __netlink_kernel_create+0x181/0x750 [ 114.003072][ T8323] ? __pfx___netlink_kernel_create+0x10/0x10 [ 114.003094][ T8323] ? __pfx_diag_net_init+0x10/0x10 [ 114.003112][ T8323] diag_net_init+0xbd/0x140 [ 114.003130][ T8323] ? __pfx_diag_net_init+0x10/0x10 [ 114.003148][ T8323] ? find_held_lock+0x2b/0x80 [ 114.003169][ T8323] ? __pfx_sock_diag_rcv+0x10/0x10 [ 114.003186][ T8323] ? __pfx_sock_diag_bind+0x10/0x10 [ 114.003205][ T8323] ? __raw_spin_lock_init+0x3a/0x110 [ 114.003225][ T8323] ? __pfx_cma_init_net+0x10/0x10 [ 114.003280][ T8323] ops_init+0x1e2/0x5f0 [ 114.003306][ T8323] setup_net+0x118/0x3a0 [ 114.003326][ T8323] ? __pfx_setup_net+0x10/0x10 [ 114.003351][ T8323] copy_net_ns+0x345/0x7a0 [ 114.003366][ T8323] create_new_namespaces+0x3ea/0xac0 [ 114.003387][ T8323] unshare_nsproxy_namespaces+0xf2/0x220 [ 114.003405][ T8323] ksys_unshare+0x4a2/0xa70 [ 114.003422][ T8323] ? __pfx_ksys_unshare+0x10/0x10 [ 114.003445][ T8323] __x64_sys_unshare+0x31/0x40 [ 114.003461][ T8323] do_syscall_64+0x123/0x790 [ 114.003478][ T8323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.003493][ T8323] RIP: 0033:0x7f020a99e159 [ 114.003504][ T8323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.003517][ T8323] RSP: 002b:00007f0208bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 114.003531][ T8323] RAX: ffffffffffffffda RBX: 00007f020ac25fa0 RCX: 00007f020a99e159 [ 114.003540][ T8323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 114.003548][ T8323] RBP: 00007f020aa3506b R08: 0000000000000000 R09: 0000000000000000 [ 114.003556][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.003564][ T8323] R13: 00007f020ac26038 R14: 00007f020ac25fa0 R15: 00007ffe13b605d8 [ 114.003585][ T8323] [ 114.055790][ T8337] create_pit_timer: 5 callbacks suppressed [ 114.055806][ T8337] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.381287][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 114.381305][ T43] audit: type=1400 audit(1791027394.407:676): avc: denied { map } for pid=8345 comm="syz.3.741" path="/193/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 114.752690][ T8354] FAULT_INJECTION: forcing a failure. [ 114.752690][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.752717][ T8354] CPU: 3 UID: 0 PID: 8354 Comm: syz.2.744 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.752734][ T8354] Tainted: [L]=SOFTLOCKUP [ 114.752739][ T8354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.752747][ T8354] Call Trace: [ 114.752751][ T8354] [ 114.752756][ T8354] dump_stack_lvl+0x100/0x190 [ 114.752779][ T8354] should_fail_ex.cold+0x5/0xa [ 114.752797][ T8354] _copy_from_iter+0x1f4/0x1690 [ 114.752816][ T8354] ? __asan_memset+0x23/0x50 [ 114.752831][ T8354] ? __pfx__copy_from_iter+0x10/0x10 [ 114.752847][ T8354] ? __pfx___alloc_skb+0x10/0x10 [ 114.752871][ T8354] netlink_sendmsg+0x808/0xda0 [ 114.752891][ T8354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.752910][ T8354] ? selinux_socket_sendmsg+0x198/0x2f0 [ 114.752937][ T8354] ____sys_sendmsg+0xa4d/0xbe0 [ 114.752950][ T8354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.752968][ T8354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.752985][ T8354] ? lock_acquire+0x1d1/0x380 [ 114.753000][ T8354] ? get_pid_task+0x2a/0x250 [ 114.753019][ T8354] ___sys_sendmsg+0x190/0x1e0 [ 114.753035][ T8354] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.753055][ T8354] ? get_pid_task+0x106/0x250 [ 114.753088][ T8354] ? find_held_lock+0x2b/0x80 [ 114.753123][ T8354] __sys_sendmsg+0x160/0x210 [ 114.753146][ T8354] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.753184][ T8354] do_syscall_64+0x123/0x790 [ 114.753208][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.753222][ T8354] RIP: 0033:0x7f07a0d9e159 [ 114.753260][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.753274][ T8354] RSP: 002b:00007f07a1d47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.753287][ T8354] RAX: ffffffffffffffda RBX: 00007f07a1025fa0 RCX: 00007f07a0d9e159 [ 114.753295][ T8354] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 114.753303][ T8354] RBP: 00007f07a1d47090 R08: 0000000000000000 R09: 0000000000000000 [ 114.753310][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.753318][ T8354] R13: 00007f07a1026038 R14: 00007f07a1025fa0 R15: 00007ffe1bb3d178 [ 114.753334][ T8354] [ 114.840971][ T8358] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=8358 comm=syz.2.746 [ 114.882514][ T43] audit: type=1400 audit(1791027394.907:677): avc: denied { create } for pid=8360 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.917414][ T43] audit: type=1400 audit(1791027394.937:678): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 114.995000][ T43] audit: type=1400 audit(1791027395.017:679): avc: denied { getopt } for pid=8366 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.124079][ T1163] wlan1: Trigger new scan to find an IBSS to join [ 115.132356][ T8373] ftl_cs: FTL header not found. [ 115.184240][ T8373] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 115.205976][ T8382] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 115.223967][ T8384] __nla_validate_parse: 22 callbacks suppressed [ 115.223988][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 115.250929][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.757'. [ 115.319659][ T35] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 115.333994][ T8394] validate_nla: 12 callbacks suppressed [ 115.334013][ T8394] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 115.380860][ T8400] netlink: 'syz.3.761': attribute type 29 has an invalid length. [ 115.381852][ T8400] netlink: 'syz.3.761': attribute type 29 has an invalid length. [ 115.385045][ T43] audit: type=1400 audit(1791027395.407:680): avc: denied { append } for pid=8399 comm="syz.3.761" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 115.502466][ T8376] e1000e 0000:00:02.0 eth1: removed PHC [ 115.549278][ T43] audit: type=1400 audit(1791027395.567:681): avc: denied { write } for pid=8403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.627478][ T43] audit: type=1400 audit(1791027395.647:682): avc: denied { write } for pid=8406 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.642351][ T8376] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 115.711440][ T1041] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 115.777835][ T43] audit: type=1400 audit(1791027395.797:683): avc: denied { write } for pid=8408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.835211][ T43] audit: type=1400 audit(1791027395.857:684): avc: denied { write } for pid=8411 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.856384][ T35] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 115.858319][ T35] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 115.858339][ T35] usb 7-1: can't read configurations, error -71 [ 115.859700][ T1041] usb 8-1: Using ep0 maxpacket: 32 [ 115.860404][ T1041] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 115.861514][ T1041] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 115.861613][ T1041] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 115.861694][ T1041] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.861711][ T1041] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 115.864224][ T1041] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.864240][ T1041] usb 8-1: Product: syz [ 115.864249][ T1041] usb 8-1: Manufacturer: syz [ 115.864256][ T1041] usb 8-1: SerialNumber: syz [ 115.883925][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 115.894610][ T1041] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input14 [ 115.951260][ T43] audit: type=1400 audit(1791027395.977:685): avc: denied { write } for pid=8413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.092134][ T1041] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 116.092147][ T1041] (id 0x00) [ 116.140500][ T1041] rc_core: IR keymap rc-imon-pad not found [ 116.140513][ T1041] Registered IR keymap rc-empty [ 116.140553][ T1041] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 116.140562][ T1041] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 116.293762][ T1041] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 116.297357][ T1041] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input15 [ 116.319378][ T1041] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:9> initialized [ 116.534129][ T8400] imon:send_packet: packet tx failed (-71) [ 116.535178][ T1041] usb 8-1: USB disconnect, device number 9 [ 116.559997][ T8400] imon:vfd_write: send packet #0 failed [ 117.306981][ T8459] FAULT_INJECTION: forcing a failure. [ 117.306981][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 117.307027][ T8459] CPU: 2 UID: 0 PID: 8459 Comm: syz.4.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.307064][ T8459] Tainted: [L]=SOFTLOCKUP [ 117.307071][ T8459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.307083][ T8459] Call Trace: [ 117.307089][ T8459] [ 117.307096][ T8459] dump_stack_lvl+0x100/0x190 [ 117.307127][ T8459] should_fail_ex.cold+0x5/0xa [ 117.307152][ T8459] should_failslab+0xc2/0x120 [ 117.307179][ T8459] kmem_cache_alloc_noprof+0x92/0x6a0 [ 117.307196][ T8459] ? mempool_init_node+0x2f7/0x6f0 [ 117.307209][ T8459] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 117.307221][ T8459] mempool_init_node+0x2f7/0x6f0 [ 117.307234][ T8459] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 117.307245][ T8459] ? __pfx_mempool_free_slab+0x10/0x10 [ 117.307255][ T8459] mempool_init_noprof+0x3a/0x50 [ 117.307268][ T8459] bioset_init+0x37e/0x8a0 [ 117.307286][ T8459] ? __pfx_bioset_init+0x10/0x10 [ 117.307302][ T8459] ? kasan_save_track+0x14/0x30 [ 117.307315][ T8459] ? __kasan_kmalloc+0xaa/0xb0 [ 117.307329][ T8459] ? __kmalloc_cache_node_noprof+0x30c/0x720 [ 117.307344][ T8459] ? __alloc_disk_node+0x5a/0x6b0 [ 117.307357][ T8459] __alloc_disk_node+0x83/0x6b0 [ 117.307369][ T8459] __blk_alloc_disk+0xd2/0x170 [ 117.307380][ T8459] ? __pfx___blk_alloc_disk+0x10/0x10 [ 117.307394][ T8459] ? __pfx___debug_object_init+0x10/0x10 [ 117.307429][ T8459] ? lockdep_init_map_type+0x5c/0x250 [ 117.307450][ T8459] ? lockdep_init_map_type+0x5c/0x250 [ 117.307474][ T8459] dm_create+0x5e8/0x1530 [ 117.307494][ T8459] dev_create+0x121/0x2a0 [ 117.307514][ T8459] ? __pfx_dev_create+0x10/0x10 [ 117.307539][ T8459] ctl_ioctl+0x4d2/0xcc0 [ 117.307556][ T8459] ? __pfx_dev_create+0x10/0x10 [ 117.307576][ T8459] ? __pfx_ctl_ioctl+0x10/0x10 [ 117.307616][ T8459] ? selinux_file_ioctl+0x13b/0x290 [ 117.307637][ T8459] ? selinux_file_ioctl+0xb6/0x290 [ 117.307663][ T8459] dm_ctl_ioctl+0x22/0x30 [ 117.307679][ T8459] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 117.307697][ T8459] __x64_sys_ioctl+0x18e/0x210 [ 117.307717][ T8459] do_syscall_64+0x123/0x790 [ 117.307738][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.307756][ T8459] RIP: 0033:0x7fd5f759e159 [ 117.307772][ T8459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.307790][ T8459] RSP: 002b:00007fd5f83f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.307810][ T8459] RAX: ffffffffffffffda RBX: 00007fd5f7825fa0 RCX: 00007fd5f759e159 [ 117.307824][ T8459] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 117.307836][ T8459] RBP: 00007fd5f763506b R08: 0000000000000000 R09: 0000000000000000 [ 117.307848][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.307860][ T8459] R13: 00007fd5f7826038 R14: 00007fd5f7825fa0 R15: 00007ffe1820ea58 [ 117.307886][ T8459] [ 118.079772][ T37] wlan1: Trigger new scan to find an IBSS to join [ 118.336453][ T8395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.501723][ T8498] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 118.608591][ T8504] netlink: 'syz.3.786': attribute type 4 has an invalid length. [ 118.694106][ T7085] IPVS: starting estimator thread 0... [ 118.789832][ T8507] IPVS: using max 43 ests per chain, 103200 per kthread [ 119.331354][ T8536] syzkaller0: entered promiscuous mode [ 119.331373][ T8536] syzkaller0: entered allmulticast mode [ 119.634374][ T8547] xt_IDLETIMER: timeout value is too big [ 119.958859][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 119.958873][ T43] audit: type=1800 audit(1791027399.977:703): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.809" name="file0" dev="sda1" ino=2044 res=0 errno=0 [ 120.058522][ T43] audit: type=1400 audit(1791027400.077:704): avc: denied { create } for pid=8562 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 120.060462][ T8563] scsi_nl_rcv_msg: discarding partial message [ 120.060578][ T8563] scsi_nl_rcv_msg: discarding partial skb [ 120.061919][ T43] audit: type=1400 audit(1791027400.077:705): avc: denied { write } for pid=8562 comm="syz.0.811" path="socket:[27429]" dev="sockfs" ino=27429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 120.112363][ T43] audit: type=1400 audit(1791027400.137:706): avc: denied { mount } for pid=8564 comm="syz.0.812" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 120.113256][ T43] audit: type=1400 audit(1791027400.137:707): avc: denied { search } for pid=8564 comm="syz.0.812" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 120.114015][ T43] audit: type=1400 audit(1791027400.137:708): avc: denied { write } for pid=8564 comm="syz.0.812" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 120.114055][ T43] audit: type=1400 audit(1791027400.137:709): avc: denied { open } for pid=8564 comm="syz.0.812" path="/169/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 120.115080][ T43] audit: type=1400 audit(1791027400.137:710): avc: denied { search } for pid=8564 comm="syz.0.812" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 120.159593][ T43] audit: type=1400 audit(1791027400.177:711): avc: denied { create } for pid=8568 comm="syz.2.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 120.173366][ T43] audit: type=1400 audit(1791027400.197:712): avc: denied { sys_admin } for pid=8568 comm="syz.2.814" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 120.697614][ T8584] syz.0.819 (8584) used greatest stack depth: 17984 bytes left [ 120.921604][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.922114][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.006840][ T8594] tipc: Resetting bearer [ 121.119669][ T1163] wlan1: Trigger new scan to find an IBSS to join [ 121.151975][ T8594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.175256][ T8594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.441007][ T5812] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.441049][ T5812] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.441076][ T5812] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.441104][ T5812] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.946180][ T7085] IPVS: starting estimator thread 0... [ 121.995769][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'. [ 122.027948][ T1163] IPVS: starting estimator thread 0... [ 122.034103][ T8643] netlink: 'syz.3.844': attribute type 2 has an invalid length. [ 122.039717][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 122.042433][ T8634] IPVS: using max 42 ests per chain, 100800 per kthread [ 122.119666][ T8642] IPVS: using max 42 ests per chain, 100800 per kthread [ 122.145085][ T8650] FAULT_INJECTION: forcing a failure. [ 122.145085][ T8650] name failslab, interval 1, probability 0, space 0, times 0 [ 122.145117][ T8650] CPU: 1 UID: 0 PID: 8650 Comm: syz.0.847 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.145147][ T8650] Tainted: [L]=SOFTLOCKUP [ 122.145155][ T8650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.145169][ T8650] Call Trace: [ 122.145176][ T8650] [ 122.145186][ T8650] dump_stack_lvl+0x100/0x190 [ 122.145251][ T8650] should_fail_ex.cold+0x5/0xa [ 122.145280][ T8650] should_failslab+0xc2/0x120 [ 122.145308][ T8650] __kmalloc_noprof+0xfc/0x840 [ 122.145332][ T8650] ? ops_init+0x77/0x5f0 [ 122.145367][ T8650] ops_init+0x77/0x5f0 [ 122.145399][ T8650] setup_net+0x118/0x3a0 [ 122.145433][ T8650] ? __pfx_setup_net+0x10/0x10 [ 122.145472][ T8650] copy_net_ns+0x345/0x7a0 [ 122.145495][ T8650] create_new_namespaces+0x3ea/0xac0 [ 122.145529][ T8650] unshare_nsproxy_namespaces+0xf2/0x220 [ 122.145556][ T8650] ksys_unshare+0x4a2/0xa70 [ 122.145581][ T8650] ? __pfx_ksys_unshare+0x10/0x10 [ 122.145616][ T8650] __x64_sys_unshare+0x31/0x40 [ 122.145638][ T8650] do_syscall_64+0x123/0x790 [ 122.145663][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.145683][ T8650] RIP: 0033:0x7f612679e159 [ 122.145701][ T8650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.145721][ T8650] RSP: 002b:00007f61275a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 122.145745][ T8650] RAX: ffffffffffffffda RBX: 00007f6126a25fa0 RCX: 00007f612679e159 [ 122.145760][ T8650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 122.145772][ T8650] RBP: 00007f612683506b R08: 0000000000000000 R09: 0000000000000000 [ 122.145784][ T8650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.145796][ T8650] R13: 00007f6126a26038 R14: 00007f6126a25fa0 R15: 00007ffcadd5b138 [ 122.145830][ T8650] [ 122.221633][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 122.223460][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 122.223495][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 122.226961][ T10] usb 9-1: string descriptor 0 read error: -22 [ 122.227033][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.244133][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 122.244155][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 122.244165][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 122.248522][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.251150][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 122.251184][ T10] usb 9-1: media controller created [ 122.251198][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 122.251205][ T10] dw2102: i2c transfer failed. [ 122.251213][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 122.251220][ T10] dw2102: i2c transfer failed. [ 122.251227][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 122.251234][ T10] dw2102: i2c transfer failed. [ 122.251243][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 122.251251][ T10] dw2102: i2c transfer failed. [ 122.251257][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 122.251265][ T10] dw2102: i2c transfer failed. [ 122.251272][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 122.251279][ T10] dw2102: i2c transfer failed. [ 122.251284][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 122.292402][ T8655] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.298514][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.320579][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 122.320590][ T10] dw2102: command 0x0e transfer failed. [ 122.320595][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 122.320601][ T10] dw2102: command 0x0e transfer failed. [ 122.347107][ T8659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.851'. [ 122.630880][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 122.630902][ T10] dw2102: command 0x0e transfer failed. [ 122.630909][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 122.630919][ T10] dw2102: command 0x0e transfer failed. [ 122.630925][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 122.630936][ T10] dw2102: command 0x51 transfer failed. [ 122.631340][ T8625] dvb-usb: bulk message failed: -22 (5/0) [ 122.631354][ T8625] dw2102: i2c transfer failed. [ 122.649630][ C1] net_ratelimit: 604 callbacks suppressed [ 122.669895][ T10] DVB: Unable to find symbol ds3000_attach() [ 122.669902][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 122.692382][ T8682] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.729753][ T10] rc_core: IR keymap rc-su3000 not found [ 122.729767][ T10] Registered IR keymap rc-empty [ 122.730940][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 122.747641][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input16 [ 122.756102][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 122.756117][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 122.756129][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 122.774715][ T10] usb 9-1: USB disconnect, device number 6 [ 122.851003][ T8697] block nbd0: shutting down sockets [ 122.924177][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 122.965074][ T8708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.866'. [ 123.047421][ T8721] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 123.195873][ T8739] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 123.339964][ T6533] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 123.469721][ T6533] usb 7-1: device descriptor read/64, error -71 [ 123.487630][ T8763] netlink: 'syz.4.884': attribute type 10 has an invalid length. [ 123.488591][ T5812] bond0: (slave bond_slave_0): interface is now down [ 123.488611][ T5812] bond0: (slave bond_slave_1): interface is now down [ 123.512303][ T5812] bond0: (slave bond_slave_0): interface is now down [ 123.512322][ T5812] bond0: (slave bond_slave_1): interface is now down [ 123.520104][ T5812] bond0: now running without any active interface! [ 123.709946][ T6533] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 123.738021][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.888'. [ 123.839696][ T6533] usb 7-1: device descriptor read/64, error -71 [ 123.949969][ T6533] usb usb7-port1: attempt power cycle [ 124.289760][ T6533] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 124.310401][ T6533] usb 7-1: device descriptor read/8, error -71 [ 124.549794][ T6533] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 124.572863][ T6533] usb 7-1: device descriptor read/8, error -71 [ 124.683859][ T6533] usb usb7-port1: unable to enumerate USB device [ 124.739663][ T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 124.869784][ T10] usb 9-1: device descriptor read/64, error -71 [ 125.130395][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 125.269711][ T10] usb 9-1: device descriptor read/64, error -71 [ 125.379943][ T10] usb usb9-port1: attempt power cycle [ 125.729720][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 125.750580][ T10] usb 9-1: device descriptor read/8, error -71 [ 125.989995][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 126.020489][ T10] usb 9-1: device descriptor read/8, error -71 [ 126.139996][ T10] usb usb9-port1: unable to enumerate USB device [ 126.236046][ T8809] bond1: (slave bond0): Releasing active interface [ 126.237926][ T8809] bond1: (slave geneve2): making interface the new active one [ 126.241837][ T8809] bridge_slave_0: left allmulticast mode [ 126.241858][ T8809] bridge_slave_0: left promiscuous mode [ 126.242082][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.249097][ T8809] bridge_slave_1: left allmulticast mode [ 126.249115][ T8809] bridge_slave_1: left promiscuous mode [ 126.249358][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.268170][ T8809] bond0: (slave bond_slave_0): Releasing backup interface [ 126.274606][ T8809] bond0: (slave bond_slave_1): Releasing backup interface [ 126.283568][ T8809] team0: Port device team_slave_0 removed [ 126.286049][ T8809] team0: Port device team_slave_1 removed [ 126.286280][ T8809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.287569][ T8809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.589747][ T25] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 126.641743][ T8820] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 126.696219][ T8824] ERROR: Out of memory at tomoyo_memory_ok. [ 126.750808][ T25] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 126.752505][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.752519][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.752550][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.757115][ T25] usb 7-1: config 0 descriptor?? [ 127.107895][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 127.107909][ T43] audit: type=1400 audit(1791027407.127:744): avc: denied { map } for pid=8841 comm="syz.0.919" path="/217/dev/sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.172874][ T25] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 127.172966][ T25] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 127.186060][ T25] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0003/input/input17 [ 127.251812][ T25] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 127.375162][ T5834] usb 7-1: USB disconnect, device number 17 [ 127.547006][ T43] audit: type=1400 audit(1791027407.567:745): avc: denied { bind } for pid=8851 comm="syz.4.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.547043][ T43] audit: type=1400 audit(1791027407.567:746): avc: denied { listen } for pid=8851 comm="syz.4.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.547078][ T43] audit: type=1400 audit(1791027407.567:747): avc: denied { connect } for pid=8851 comm="syz.4.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.755727][ T43] audit: type=1400 audit(1791027407.777:748): avc: denied { listen } for pid=8862 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.756743][ T8863] net_ratelimit: 55 callbacks suppressed [ 127.819499][ T8868] Console: switching to colour dummy device 80x25 [ 127.932832][ T8872] netlink: Failed to add helper -22 [ 127.932903][ T8872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.087524][ T43] audit: type=1400 audit(1791027408.107:749): avc: denied { map } for pid=8885 comm="syz.4.938" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.087777][ T43] audit: type=1400 audit(1791027408.107:750): avc: denied { read write } for pid=8885 comm="syz.4.938" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.178354][ T43] audit: type=1400 audit(1791027408.197:751): avc: denied { create } for pid=8893 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.181035][ T43] audit: type=1400 audit(1791027408.207:752): avc: denied { bind } for pid=8893 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.192018][ T43] audit: type=1400 audit(1791027408.217:753): avc: denied { listen } for pid=8893 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.414999][ T8913] set match dimension is over the limit! [ 128.546357][ T8919] tc action pedit offset must be on 32 bit boundaries [ 128.546366][ T8919] tc action pedit offset must be on 32 bit boundaries [ 128.546372][ T8919] tc action pedit offset must be on 32 bit boundaries [ 128.546377][ T8919] tc action pedit offset must be on 32 bit boundaries [ 128.546381][ T8919] tc action pedit offset must be on 32 bit boundaries [ 128.546386][ T8919] tc action pedit offset must be on 32 bit boundaries [ 128.546391][ T8919] tc action pedit offset must be on 32 bit boundaries [ 128.546396][ T8919] tc action pedit offset must be on 32 bit boundaries [ 128.546401][ T8919] tc action pedit offset must be on 32 bit boundaries [ 128.546406][ T8919] tc action pedit offset must be on 32 bit boundaries [ 128.754825][ T8930] FAULT_INJECTION: forcing a failure. [ 128.754825][ T8930] name failslab, interval 1, probability 0, space 0, times 0 [ 128.754849][ T8930] CPU: 3 UID: 0 PID: 8930 Comm: syz.0.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.754865][ T8930] Tainted: [L]=SOFTLOCKUP [ 128.754869][ T8930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.754876][ T8930] Call Trace: [ 128.754881][ T8930] [ 128.754887][ T8930] dump_stack_lvl+0x100/0x190 [ 128.754907][ T8930] should_fail_ex.cold+0x5/0xa [ 128.754925][ T8930] should_failslab+0xc2/0x120 [ 128.754942][ T8930] __kmalloc_cache_noprof+0x91/0x6d0 [ 128.754954][ T8930] ? __x64_sys_futex+0x358/0x4d0 [ 128.754971][ T8930] ? __do_sys_mincore+0x120/0x6c0 [ 128.754985][ T8930] __do_sys_mincore+0x120/0x6c0 [ 128.754998][ T8930] do_syscall_64+0x123/0x790 [ 128.755012][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.755024][ T8930] RIP: 0033:0x7f612679e159 [ 128.755036][ T8930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.755050][ T8930] RSP: 002b:00007f61275a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 128.755061][ T8930] RAX: ffffffffffffffda RBX: 00007f6126a25fa0 RCX: 00007f612679e159 [ 128.755070][ T8930] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 128.755077][ T8930] RBP: 00007f612683506b R08: 0000000000000000 R09: 0000000000000000 [ 128.755085][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.755093][ T8930] R13: 00007f6126a26038 R14: 00007f6126a25fa0 R15: 00007ffcadd5b138 [ 128.755109][ T8930] [ 129.484876][ T8988] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.096874][ T8998] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 130.121279][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 130.524096][ T9005] netlink: 260 bytes leftover after parsing attributes in process `syz.3.982'. [ 130.525670][ T9005] netlink: 260 bytes leftover after parsing attributes in process `syz.3.982'. [ 131.650109][ T6533] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 131.800625][ T6533] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 131.801549][ T6533] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.802315][ T6533] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.804010][ T6533] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.804025][ T6533] usb 8-1: Product: syz [ 131.804037][ T6533] usb 8-1: Manufacturer: syz [ 131.804048][ T6533] usb 8-1: SerialNumber: syz [ 131.812490][ T6533] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 131.816968][ T6533] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 131.820568][ T6533] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 131.932778][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 131.932807][ T9063] syzkaller0: entered promiscuous mode [ 131.975762][ T9065] FAULT_INJECTION: forcing a failure. [ 131.975762][ T9065] name failslab, interval 1, probability 0, space 0, times 0 [ 131.975798][ T9065] CPU: 0 UID: 0 PID: 9065 Comm: syz.2.1006 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.975827][ T9065] Tainted: [L]=SOFTLOCKUP [ 131.975835][ T9065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.975846][ T9065] Call Trace: [ 131.975855][ T9065] [ 131.975863][ T9065] dump_stack_lvl+0x100/0x190 [ 131.975898][ T9065] should_fail_ex.cold+0x5/0xa [ 131.975926][ T9065] should_failslab+0xc2/0x120 [ 131.975956][ T9065] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 131.976001][ T9065] ? do_futex+0x190/0x440 [ 131.976025][ T9065] ? alloc_inode+0x183/0x250 [ 131.976054][ T9065] alloc_inode+0x183/0x250 [ 131.976077][ T9065] create_pipe_files+0x4c/0x970 [ 131.976109][ T9065] do_pipe2+0xbd/0x1e0 [ 131.976134][ T9065] ? __pfx_do_pipe2+0x10/0x10 [ 131.976160][ T9065] ? __sys_setsockopt+0x1b5/0x220 [ 131.976195][ T9065] __x64_sys_pipe+0x33/0x50 [ 131.976224][ T9065] do_syscall_64+0x123/0x790 [ 131.976250][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.976269][ T9065] RIP: 0033:0x7f07a0d9e159 [ 131.976288][ T9065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.976307][ T9065] RSP: 002b:00007f07a1d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 131.976328][ T9065] RAX: ffffffffffffffda RBX: 00007f07a1025fa0 RCX: 00007f07a0d9e159 [ 131.976341][ T9065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 131.976357][ T9065] RBP: 00007f07a0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 131.976366][ T9065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.976379][ T9065] R13: 00007f07a1026038 R14: 00007f07a1025fa0 R15: 00007ffe1bb3d178 [ 131.976407][ T9065] [ 132.019679][ T1563] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 132.082614][ T9074] netlink: 'syz.0.1010': attribute type 10 has an invalid length. [ 132.082696][ T9074] syz_tun: entered promiscuous mode [ 132.088485][ T9074] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 132.201751][ T1563] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 132.202676][ T1563] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 132.204493][ T1563] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.204504][ T1563] usb 9-1: Product: syz [ 132.204511][ T1563] usb 9-1: Manufacturer: syz [ 132.204519][ T1563] usb 9-1: SerialNumber: syz [ 132.207675][ T9055] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 132.413176][ T25] usb 9-1: USB disconnect, device number 11 [ 132.455200][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.455690][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.467206][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 132.771851][ T9103] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 132.947715][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 132.947728][ T43] audit: type=1400 audit(1791027412.967:758): avc: denied { ioctl } for pid=9105 comm="syz.2.1025" path="socket:[30667]" dev="sockfs" ino=30667 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.959662][ C2] net_ratelimit: 66 callbacks suppressed [ 133.092482][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1031'. [ 133.121945][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121982][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.122374][ T1442] aoe: packet could not be sent on syzkaller0. consider increasing tx_queue_len [ 134.032671][ T9148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.033189][ T9148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.214157][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'. [ 134.314668][ T43] audit: type=1400 audit(1791027414.337:759): avc: denied { read } for pid=9162 comm="syz.4.1049" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 135.120703][ T9148] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 135.122454][ T9036] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 135.123062][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 135.123124][ C2] usb 8-1: ti_bulk_in_callback - nonzero urb status, -71 [ 135.123134][ C2] usb 8-1: ti_bulk_in_callback - stopping read! [ 135.123297][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 135.123514][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 135.123716][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 135.123939][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 135.124094][ T6533] usb 8-1: USB disconnect, device number 10 [ 135.124157][ C2] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 135.124172][ C2] usb 8-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 135.126144][ T9148] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -19 [ 135.126179][ T9148] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -19 [ 135.127856][ T9147] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -19 [ 135.717489][ T43] audit: type=1400 audit(1791027415.737:760): avc: denied { name_bind } for pid=9168 comm="syz.3.1051" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 135.998884][ T9181] FAULT_INJECTION: forcing a failure. [ 135.998884][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 135.998921][ T9181] CPU: 2 UID: 0 PID: 9181 Comm: syz.3.1057 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.998950][ T9181] Tainted: [L]=SOFTLOCKUP [ 135.998959][ T9181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.998972][ T9181] Call Trace: [ 135.998980][ T9181] [ 135.998989][ T9181] dump_stack_lvl+0x100/0x190 [ 135.999020][ T9181] should_fail_ex.cold+0x5/0xa [ 135.999052][ T9181] should_failslab+0xc2/0x120 [ 135.999080][ T9181] __kvmalloc_node_noprof+0x113/0x9b0 [ 135.999104][ T9181] ? lockdep_hardirqs_on+0x61/0x110 [ 135.999129][ T9181] ? bpf_compute_postorder+0x158/0x860 [ 135.999162][ T9181] bpf_compute_postorder+0x158/0x860 [ 135.999183][ T9181] ? bpf_check_cfg+0x4a3/0x990 [ 135.999211][ T9181] bpf_check+0x7d1d/0xa550 [ 135.999244][ T9181] ? __css_rstat_updated+0x1ce/0x590 [ 135.999270][ T9181] ? __lock_acquire+0x5c0/0x1f40 [ 135.999294][ T9181] ? __pfx___css_rstat_updated+0x10/0x10 [ 135.999335][ T9181] ? __pfx_bpf_check+0x10/0x10 [ 135.999362][ T9181] ? lock_acquire+0x1d1/0x380 [ 135.999385][ T9181] ? find_held_lock+0x2b/0x80 [ 135.999412][ T9181] ? bpf_prog_load+0x19f9/0x2a70 [ 135.999443][ T9181] ? __asan_memset+0x23/0x50 [ 135.999470][ T9181] ? bpf_prog_load+0x1ab3/0x2a70 [ 135.999496][ T9181] bpf_prog_load+0x1ab3/0x2a70 [ 135.999547][ T9181] ? __pfx_bpf_prog_load+0x10/0x10 [ 135.999601][ T9181] __sys_bpf+0x1f46/0x4a30 [ 135.999630][ T9181] ? __pfx___sys_bpf+0x10/0x10 [ 135.999651][ T9181] ? find_held_lock+0x2b/0x80 [ 135.999677][ T9181] ? futex_wake+0x4ea/0x5e0 [ 135.999714][ T9181] ? rcu_read_lock_any_held+0x6a/0x90 [ 135.999743][ T9181] ? find_held_lock+0x2b/0x80 [ 135.999770][ T9181] ? ksys_write+0x190/0x250 [ 135.999792][ T9181] ? ksys_write+0x190/0x250 [ 135.999829][ T9181] ? __x64_sys_futex+0x34f/0x4d0 [ 135.999855][ T9181] ? __x64_sys_futex+0x358/0x4d0 [ 135.999883][ T9181] ? fput+0x7c/0x100 [ 135.999908][ T9181] ? __pfx___x64_sys_futex+0x10/0x10 [ 135.999935][ T9181] ? ksys_write+0x1ac/0x250 [ 135.999961][ T9181] ? __x64_sys_bpf+0xce/0x140 [ 135.999981][ T9181] __x64_sys_bpf+0xce/0x140 [ 136.000003][ T9181] ? do_syscall_64+0xae/0x790 [ 136.000027][ T9181] do_syscall_64+0x123/0x790 [ 136.000049][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.000070][ T9181] RIP: 0033:0x7f020a99e159 [ 136.000086][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.000105][ T9181] RSP: 002b:00007f0208bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.000124][ T9181] RAX: ffffffffffffffda RBX: 00007f020ac25fa0 RCX: 00007f020a99e159 [ 136.000137][ T9181] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 136.000149][ T9181] RBP: 00007f020aa3506b R08: 0000000000000000 R09: 0000000000000000 [ 136.000167][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.000180][ T9181] R13: 00007f020ac26038 R14: 00007f020ac25fa0 R15: 00007ffe13b605d8 [ 136.000209][ T9181] [ 136.086172][ T43] audit: type=1400 audit(1791027416.107:761): avc: denied { write } for pid=9184 comm="syz.3.1059" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 137.033161][ T9147] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -19 [ 137.050830][ T6533] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 137.068020][ T6533] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 137.082060][ T6533] ti_usb_3410_5052 8-1:2.0: device disconnected [ 137.178574][ T9208] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.460411][ T9216] geneve0: entered promiscuous mode [ 137.489804][ T5812] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.490006][ T5812] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.490126][ T5812] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.490174][ T5812] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.677623][ T43] audit: type=1400 audit(1791027417.697:762): avc: denied { write } for pid=9224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.757636][ T43] audit: type=1400 audit(1791027417.777:763): avc: denied { write } for pid=9228 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.160308][ T1163] net_ratelimit: 60 callbacks suppressed [ 138.312010][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.312521][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.465706][ T9242] netlink: 'syz.2.1078': attribute type 10 has an invalid length. [ 138.466013][ T9242] syz_tun: entered promiscuous mode [ 138.472150][ T9242] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 138.476324][ T5812] bond0: (slave bond_slave_0): interface is now down [ 138.476338][ T5812] bond0: (slave bond_slave_1): interface is now down [ 138.476346][ T5812] bond0: (slave team0): interface is now down [ 138.499933][ T13] bond0: (slave bond_slave_0): interface is now down [ 138.499950][ T13] bond0: (slave bond_slave_1): interface is now down [ 138.499960][ T13] bond0: (slave team0): interface is now down [ 138.499969][ T13] bond0: (slave syz_tun): interface is now down [ 138.517745][ T13] bond0: now running without any active interface! [ 138.528472][ T9244] : error -22: [ 138.528484][ T9244] which=0x0, count=3, error_idx=0, request_fd=3 [ 138.528500][ T9244] , name=H264 I-Frame QP Value [ 138.528509][ T9244] , id/size=0x990a5e/3, id/val=0x0/0x0 [ 138.528530][ T9244] , id/val=0x0/0x0 [ 138.528538][ T9244] [ 138.792586][ T43] audit: type=1400 audit(1791027418.817:764): avc: denied { write } for pid=9249 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.848560][ T9252] batadv_slave_0: Caught tx_queue_len zero misconfig [ 139.014163][ T43] audit: type=1400 audit(1791027419.037:765): avc: denied { ioctl } for pid=9258 comm="syz.0.1086" path="socket:[32262]" dev="sockfs" ino=32262 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.234323][ T9285] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1097'. [ 140.281170][ T43] audit: type=1400 audit(1791027420.307:766): avc: denied { write } for pid=9286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.342835][ T9285] e1000 0000:00:06.0 eth0: left allmulticast mode [ 140.348753][ T43] audit: type=1400 audit(1791027420.367:767): avc: denied { write } for pid=9289 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.448946][ T43] audit: type=1400 audit(1791027420.467:768): avc: denied { write } for pid=9293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.477010][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 140.514699][ T43] audit: type=1400 audit(1791027420.537:769): avc: denied { write } for pid=9301 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.584674][ T9305] 8021q: adding VLAN 0 to HW filter on device eth0 [ 140.602288][ T1563] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 140.606379][ T43] audit: type=1400 audit(1791027420.627:770): avc: denied { write } for pid=9303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.679141][ T43] audit: type=1400 audit(1791027420.697:771): avc: denied { write } for pid=9310 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.812970][ T43] audit: type=1400 audit(1791027420.837:772): avc: denied { write } for pid=9317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.889830][ T43] audit: type=1400 audit(1791027420.917:773): avc: denied { write } for pid=9323 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.361734][ T7092] net_ratelimit: 64 callbacks suppressed [ 145.877207][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 145.877221][ T43] audit: type=1400 audit(1791027425.897:778): avc: denied { write } for pid=9343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.925108][ T43] audit: type=1400 audit(1791027425.947:779): avc: denied { write } for pid=9346 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.005167][ T43] audit: type=1400 audit(1791027428.027:780): avc: denied { write } for pid=9348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.057541][ T43] audit: type=1400 audit(1791027428.077:781): avc: denied { write } for pid=9351 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.417724][ T43] audit: type=1400 audit(1791027428.437:782): avc: denied { write } for pid=9354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.474975][ T43] audit: type=1400 audit(1791027428.497:783): avc: denied { write } for pid=9357 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.639697][ C1] net_ratelimit: 52 callbacks suppressed [ 150.271802][ T43] audit: type=1400 audit(1791027430.297:784): avc: denied { write } for pid=9362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.334855][ T43] audit: type=1400 audit(1791027430.357:785): avc: denied { write } for pid=9365 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.840659][ C3] net_ratelimit: 35 callbacks suppressed [ 154.291469][ T9372] overlayfs: missing 'lowerdir' [ 154.304323][ T9376] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1108'. [ 154.367220][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.374244][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.375435][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.377263][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.379468][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.418463][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.421762][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.422570][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.424736][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 154.427951][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.429257][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.536608][ T43] audit: type=1400 audit(1791027434.557:786): avc: denied { write } for pid=9386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.617919][ T43] audit: type=1400 audit(1791027434.637:787): avc: denied { write } for pid=9401 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.642050][ T9405] 8021q: adding VLAN 0 to HW filter on device eth0 [ 154.646266][ T9405] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 154.650915][ T1563] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 154.728407][ T43] audit: type=1400 audit(1791027434.747:788): avc: denied { mount } for pid=9410 comm="syz.3.1115" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 154.754555][ T43] audit: type=1400 audit(1791027434.777:789): avc: denied { write } for pid=9411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.809375][ T43] audit: type=1400 audit(1791027434.827:790): avc: denied { write } for pid=9415 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.957166][ T43] audit: type=1400 audit(1791027434.977:791): avc: denied { write } for pid=9419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.971862][ T43] audit: type=1400 audit(1791027434.997:792): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 155.045900][ T43] audit: type=1400 audit(1791027435.067:793): avc: denied { write } for pid=9423 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.215486][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.215672][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.215829][ T9377] bridge_slave_0: entered allmulticast mode [ 155.217296][ T9377] bridge_slave_0: entered promiscuous mode [ 155.220026][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.220215][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.220367][ T9377] bridge_slave_1: entered allmulticast mode [ 155.221419][ T9377] bridge_slave_1: entered promiscuous mode [ 155.256623][ T9377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.258413][ T9377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.293636][ T9377] team0: Port device team_slave_0 added [ 155.295645][ T9377] team0: Port device team_slave_1 added [ 155.323867][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.323874][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.323887][ T9377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.324761][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.324767][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.324780][ T9377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.369278][ T9377] hsr_slave_0: entered promiscuous mode [ 155.370482][ T9377] hsr_slave_1: entered promiscuous mode [ 155.371080][ T9377] debugfs: 'hsr0' already exists in 'hsr' [ 155.371097][ T9377] Cannot create hsr debugfs directory [ 155.584009][ T9377] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.589073][ T9377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.590061][ T9377] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.598452][ T9377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.599400][ T9377] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.613115][ T9377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.613638][ T9377] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.618428][ T9377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.694897][ T9377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.708391][ T9377] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.716515][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.716566][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.724014][ T231] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.724058][ T231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.025342][ T9377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.198724][ T9377] veth0_vlan: entered promiscuous mode [ 156.211266][ T9377] veth1_vlan: entered promiscuous mode [ 156.244297][ T9377] veth0_macvtap: entered promiscuous mode [ 156.251206][ T9377] veth1_macvtap: entered promiscuous mode [ 156.267769][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.275394][ T9377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.299952][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.300014][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.300044][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.300074][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.387980][ T7092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.387992][ T7092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.436764][ T231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.436779][ T231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.445617][ T43] audit: type=1400 audit(1791027436.467:794): avc: denied { mounton } for pid=9377 comm="syz-executor" path="/syzkaller.egfxSw/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 156.460902][ T43] audit: type=1400 audit(1791027436.487:795): avc: denied { mounton } for pid=9377 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 156.489871][ T5743] Bluetooth: hci4: command tx timeout [ 158.569777][ T5743] Bluetooth: hci4: command tx timeout [ 159.039885][ C1] net_ratelimit: 271 callbacks suppressed [ 160.639965][ T5743] Bluetooth: hci4: command tx timeout [ 160.871765][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 160.871779][ T43] audit: type=1400 audit(1791027440.897:798): avc: denied { write } for pid=9462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.932723][ T43] audit: type=1400 audit(1791027440.957:799): avc: denied { write } for pid=9465 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.082866][ T43] audit: type=1400 audit(1791027441.107:800): avc: denied { mount } for pid=9470 comm="syz.3.1119" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 161.138077][ T9478] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1120'. [ 161.252356][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 161.295761][ T43] audit: type=1400 audit(1791027441.317:801): avc: denied { write } for pid=9488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.395705][ T43] audit: type=1400 audit(1791027441.417:802): avc: denied { write } for pid=9501 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.505397][ T43] audit: type=1400 audit(1791027441.527:803): avc: denied { write } for pid=9515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.538335][ T43] audit: type=1400 audit(1791027441.557:804): avc: denied { write } for pid=9512 comm="syz.0.1127" name="functions" dev="configfs" ino=8996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.548669][ T43] audit: type=1400 audit(1791027441.567:805): avc: ** replaying previous printk message ** [ 161.548669][ T43] audit: type=1400 audit(1791027441.567:805): avc: denied { write } for pid=9512 comm="syz.0.1127" name="functions" dev="configfs" ino=8996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.551810][ T43] audit: type=1400 audit(1791027441.577:806): avc: denied { remove_name } for pid=9512 comm="syz.0.1127" name="hid.usb0" dev="configfs" ino=34454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.552131][ T43] audit: type=1400 audit(1791027441.577:807): avc: denied { rmdir } for pid=9512 comm="syz.0.1127" name="hid.usb0" dev="configfs" ino=34454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 161.552748][ T9514] configfs: configfs hid.usb0: dropping attrs for dir [ 161.552851][ T9514] configfs: o hid.usb0 removing done (2) [ 161.552934][ T9514] [ 161.590925][ T9514] ====================================================== [ 161.593569][ T9514] WARNING: possible circular locking dependency detected [ 161.595968][ T9514] syzkaller #0 Tainted: G L [ 161.598112][ T9514] ------------------------------------------------------ [ 161.600499][ T9514] syz.0.1127/9514 is trying to acquire lock: [ 161.602638][ T9514] ffffffff903feac8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 161.605783][ T5446] Deleting 0a00020f/32 dsfield=0x00 t=ffff888059ad8b30 [ 161.605901][ T5446] In tnode_resize ffff88802af4e320 inflate_threshold=50 threshold=25 [ 161.606556][ T5446] Insert table=254 a9fe0000/16 [ 161.614174][ T9514] [ 161.614174][ T9514] but task is already holding lock: [ 161.616711][ T9514] ffff88803a8ac880 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 161.619911][ T9514] [ 161.619911][ T9514] which lock already depends on the new lock. [ 161.619911][ T9514] [ 161.623480][ T9514] [ 161.623480][ T9514] the existing dependency chain (in reverse order) is: [ 161.626348][ T9514] [ 161.626348][ T9514] -> #3 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 161.629650][ T9514] lock_acquire+0x1d1/0x380 [ 161.631663][ T9514] down_write+0x8b/0x1f0 [ 161.633384][ T9514] configfs_depend_item_unlocked+0xf3/0x6a0 [ 161.635491][ T9514] usbg_make_tpg+0x251/0x610 [ 161.637152][ T9514] target_fabric_make_tpg+0xab/0x8c0 [ 161.639012][ T9514] configfs_mkdir+0x525/0xd40 [ 161.640641][ T9514] vfs_mkdir+0x364/0x850 [ 161.642194][ T9514] filename_mkdirat+0x48b/0x5e0 [ 161.643883][ T9514] __x64_sys_mkdirat+0x89/0xc0 [ 161.646008][ T9514] do_syscall_64+0x123/0x790 [ 161.647972][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.650354][ T9514] [ 161.650354][ T9514] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 161.653239][ T9514] lock_acquire+0x1d1/0x380 [ 161.654921][ T9514] __mutex_lock+0x1a4/0x1bd0 [ 161.656518][ T9514] tcm_alloc_inst+0x5f/0x1e0 [ 161.658412][ T9514] try_get_usb_function_instance+0x136/0x1f0 [ 161.661076][ T9514] usb_get_function_instance+0x16/0x70 [ 161.663560][ T9514] function_make+0x18c/0x3f0 [ 161.665521][ T9514] configfs_mkdir+0x525/0xd40 [ 161.667679][ T9514] vfs_mkdir+0x364/0x850 [ 161.669766][ T9514] filename_mkdirat+0x48b/0x5e0 [ 161.671743][ T9514] __x64_sys_mkdirat+0x89/0xc0 [ 161.674070][ T9514] do_syscall_64+0x123/0x790 [ 161.676259][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.680246][ T9514] [ 161.680246][ T9514] -> #1 (func_lock){+.+.}-{4:4}: [ 161.683119][ T9514] lock_acquire+0x1d1/0x380 [ 161.685394][ T9514] __mutex_lock+0x1a4/0x1bd0 [ 161.687760][ T9514] try_get_usb_function_instance+0x26/0x1f0 [ 161.690665][ T9514] usb_get_function_instance+0x16/0x70 [ 161.693191][ T9514] function_make+0x18c/0x3f0 [ 161.695343][ T9514] configfs_mkdir+0x525/0xd40 [ 161.697527][ T9514] vfs_mkdir+0x364/0x850 [ 161.699563][ T9514] filename_mkdirat+0x48b/0x5e0 [ 161.701878][ T9514] __x64_sys_mkdirat+0x89/0xc0 [ 161.704111][ T9514] do_syscall_64+0x123/0x790 [ 161.706484][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.709537][ T9514] [ 161.709537][ T9514] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 161.713033][ T9514] check_prev_add+0xeb/0xe60 [ 161.714802][ T9514] __lock_acquire+0x1528/0x1f40 [ 161.716520][ T9514] lock_acquire+0x1d1/0x380 [ 161.718141][ T9514] __mutex_lock+0x1a4/0x1bd0 [ 161.719739][ T9514] configfs_rmdir+0x5ae/0x950 [ 161.721505][ T9514] vfs_rmdir+0x328/0x8a0 [ 161.723698][ T9514] filename_rmdir+0x31a/0x5c0 [ 161.726312][ T9514] __x64_sys_rmdir+0x46/0x70 [ 161.728568][ T9514] do_syscall_64+0x123/0x790 [ 161.730676][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.733150][ T9514] [ 161.733150][ T9514] other info that might help us debug this: [ 161.733150][ T9514] [ 161.737444][ T9514] Chain exists of: [ 161.737444][ T9514] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#24 [ 161.737444][ T9514] [ 161.743566][ T9514] Possible unsafe locking scenario: [ 161.743566][ T9514] [ 161.746743][ T9514] CPU0 CPU1 [ 161.749149][ T9514] ---- ---- [ 161.751136][ T9514] lock(&sb->s_type->i_mutex_key#24); [ 161.753228][ T9514] lock(tpg_instances_lock); [ 161.755701][ T9514] lock(&sb->s_type->i_mutex_key#24); [ 161.758971][ T9514] lock(gadget_subsys.su_mutex); [ 161.760085][ C1] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 161.764259][ T9514] [ 161.764259][ T9514] *** DEADLOCK *** [ 161.764259][ T9514] [ 161.768100][ T9514] locks held by syz.0.1127/9514: 3, last CPU#3: [ 161.771021][ T9514] #0: ffff88802416a460 (sb_writers#13){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 161.774959][ T9514] #1: ffff888057e40600 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 161.779613][ T9514] #2: ffff88803a8ac880 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 161.783893][ T9514] [ 161.783893][ T9514] stack backtrace: [ 161.786414][ T9514] CPU: 3 UID: 0 PID: 9514 Comm: syz.0.1127 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.790570][ T9514] Tainted: [L]=SOFTLOCKUP [ 161.792859][ T9514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.797187][ T9514] Call Trace: [ 161.798572][ T9514] [ 161.799803][ T9514] dump_stack_lvl+0x100/0x190 [ 161.801575][ T9514] print_circular_bug.cold+0x178/0x1be [ 161.803433][ T9514] check_noncircular+0x146/0x160 [ 161.804997][ T9514] check_prev_add+0xeb/0xe60 [ 161.807094][ T9514] ? __bfs+0x150/0x2a0 [ 161.808949][ T9514] __lock_acquire+0x1528/0x1f40 [ 161.811322][ T9514] lock_acquire+0x1d1/0x380 [ 161.813478][ T9514] ? configfs_rmdir+0x5ae/0x950 [ 161.815708][ T9514] ? __pfx___might_resched+0x10/0x10 [ 161.817983][ T9514] ? __lock_acquire+0x5c0/0x1f40 [ 161.820094][ T9514] __mutex_lock+0x1a4/0x1bd0 [ 161.822071][ T9514] ? configfs_rmdir+0x5ae/0x950 [ 161.824106][ T9514] ? configfs_rmdir+0x5ae/0x950 [ 161.826166][ T9514] ? reacquire_held_locks+0xdd/0x1f0 [ 161.828445][ T9514] ? __pfx___mutex_lock+0x10/0x10 [ 161.830575][ T9514] ? do_raw_spin_lock+0x128/0x260 [ 161.832699][ T9514] ? find_held_lock+0x2b/0x80 [ 161.835090][ T9514] ? fast_dput+0x2fe/0x6f0 [ 161.837506][ T9514] ? do_raw_spin_unlock+0x145/0x1e0 [ 161.840438][ T9514] ? _raw_spin_unlock+0x28/0x50 [ 161.842561][ T9514] ? fast_dput+0x168/0x6f0 [ 161.844457][ T9514] ? configfs_rmdir+0x5ae/0x950 [ 161.846546][ T9514] configfs_rmdir+0x5ae/0x950 [ 161.848575][ T9514] ? __pfx_configfs_rmdir+0x10/0x10 [ 161.850820][ T9514] ? __pfx_down_write+0x10/0x10 [ 161.852860][ T9514] vfs_rmdir+0x328/0x8a0 [ 161.854600][ T9514] filename_rmdir+0x31a/0x5c0 [ 161.856706][ T9514] ? __pfx_filename_rmdir+0x10/0x10 [ 161.859212][ T9514] ? do_getname+0x191/0x390 [ 161.861360][ T9514] __x64_sys_rmdir+0x46/0x70 [ 161.863310][ T9514] do_syscall_64+0x123/0x790 [ 161.865151][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.867371][ T9514] RIP: 0033:0x7f612679e159 [ 161.869033][ T9514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.875951][ T9514] RSP: 002b:00007f61275a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 161.879200][ T9514] RAX: ffffffffffffffda RBX: 00007f6126a25fa0 RCX: 00007f612679e159 [ 161.882719][ T9514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 161.886015][ T9514] RBP: 00007f612683506b R08: 0000000000000000 R09: 0000000000000000 [ 161.888907][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.891782][ T9514] R13: 00007f6126a26038 R14: 00007f6126a25fa0 R15: 00007ffcadd5b138 [ 161.894430][ T9514] [ 161.896415][ T9514] config_item hid.usb0: cleaning up [ 161.896471][ T9514] device class 'hidg': unregistering [ 161.896479][ T9514] kobject: 'hidg' (ffff888057b9b050): auto cleanup 'remove' event [ 161.896489][ T9514] kobject: 'hidg' (ffff888057b9b050): kobject_uevent_env [ 161.896510][ T9514] kobject: 'hidg' (ffff888057b9b050): fill_kobj_path: path = '/class/hidg' [ 161.896575][ T9514] kernfs hidg: removing [ 161.896596][ T9514] kobject: 'hidg' (ffff888057b9b050): kobject_cleanup, parent 0000000000000000 [ 161.896606][ T9514] kobject: 'hidg' (ffff888057b9b050): calling ktype release [ 161.896614][ T9514] class 'hidg': release. [ 161.896620][ T9514] class 'hidg' does not have a release() function, be careful [ 161.898429][ T9514] kobject: 'hidg': free name [ 161.898577][ T9530] debugfs: creating file '9530-8' [ 161.898652][ T9530] debugfs: creating file 'remote_tlb_flush' [ 161.898716][ T9530] debugfs: creating file 'remote_tlb_flush_requests' [ 161.898779][ T9530] debugfs: creating file 'mmu_shadow_zapped' [ 161.898831][ T9530] debugfs: creating file 'mmu_pte_write' [ 161.898879][ T9530] debugfs: creating file 'mmu_pde_zapped' [ 161.898925][ T9530] debugfs: creating file 'mmu_flooded' [ 161.898983][ T9530] debugfs: creating file 'mmu_recycled' [ 161.899036][ T9530] debugfs: creating file 'mmu_cache_miss' [ 161.899163][ T9530] debugfs: creating file 'mmu_unsync' [ 161.899215][ T9530] debugfs: creating file 'mmu_shadow_pages' [ 161.899266][ T9530] debugfs: creating file 'pages_4k' [ 161.899373][ T9530] debugfs: creating file 'pages_2m' [ 161.899425][ T9530] debugfs: creating file 'pages_1g' [ 161.899474][ T9530] debugfs: creating file 'nx_lpage_splits' [ 161.899693][ T9530] debugfs: creating file 'max_mmu_rmap_size' [ 161.899834][ T9530] debugfs: creating file 'max_mmu_page_hash_collisions' [ 161.899888][ T9530] debugfs: creating file 'halt_successful_poll' [ 161.899943][ T9530] debugfs: creating file 'halt_attempted_poll' [ 161.900366][ T9530] debugfs: creating file 'halt_poll_invalid' [ 161.900421][ T9530] debugfs: creating file 'halt_wakeup' [ 161.900472][ T9530] debugfs: creating file 'halt_poll_success_ns' [ 161.900521][ T9530] debugfs: creating file 'halt_poll_fail_ns' [ 161.900573][ T9530] debugfs: creating file 'halt_wait_ns' [ 161.900624][ T9530] debugfs: creating file 'halt_poll_success_hist' [ 161.900663][ T9527] device class 'hidg': registering [ 161.900674][ T9530] debugfs: creating file 'halt_poll_fail_hist' [ 161.900679][ T9527] kobject: 'hidg' (ffff888057b98850): kobject_add_internal: parent: 'class', set: 'class' [ 161.900712][ T9527] kobject: 'hidg' (ffff888057b98850): kobject_uevent_env [ 161.900728][ T9527] kobject: 'hidg' (ffff888057b98850): fill_kobj_path: path = '/class/hidg' [ 161.900735][ T9530] debugfs: creating file 'halt_wait_hist' [ 161.900792][ T9530] debugfs: creating file 'blocking' [ 161.900841][ T9530] debugfs: creating file 'pf_taken' [ 161.900889][ T9530] debugfs: creating file 'pf_fixed' [ 161.900942][ T9530] debugfs: creating file 'pf_emulate' [ 161.901011][ T9530] debugfs: creating file 'pf_spurious' [ 161.901095][ T9530] debugfs: creating file 'pf_fast' [ 161.901150][ T9530] debugfs: creating file 'pf_mmio_spte_created' [ 161.901201][ T9530] debugfs: creating file 'pf_guest' [ 161.901301][ T9530] debugfs: creating file 'tlb_flush' [ 161.901391][ T9530] debugfs: creating file 'invlpg' [ 161.901441][ T9530] debugfs: creating file 'exits' [ 161.901487][ T9530] debugfs: creating file 'io_exits' [ 161.901542][ T9530] debugfs: creating file 'mmio_exits' [ 161.901569][ T9530] debugfs: creating file 'signal_exits' [ 161.901595][ T9530] debugfs: creating file 'irq_window_exits' [ 161.901623][ T9530] debugfs: creating file 'nmi_window_exits' [ 161.901659][ T9530] debugfs: creating file 'l1d_flush' [ 161.901685][ T9530] debugfs: creating file 'halt_exits' [ 161.901716][ T9530] debugfs: creating file 'request_irq_exits' [ 161.901742][ T9530] debugfs: creating file 'irq_exits' [ 161.901773][ T9530] debugfs: creating file 'host_state_reload' [ 161.901799][ T9530] debugfs: creating file 'fpu_reload' [ 161.901828][ T9530] debugfs: creating file 'insn_emulation' [ 161.901854][ T9530] debugfs: creating file 'insn_emulation_fail' [ 161.901884][ T9530] debugfs: creating file 'hypercalls' [ 161.901910][ T9530] debugfs: creating file 'irq_injections' [ 161.901937][ T9530] debugfs: creating file 'nmi_injections' [ 161.901965][ T9530] debugfs: creating file 'req_event' [ 161.902930][ T9530] debugfs: creating file 'nested_run' [ 161.902994][ T9530] debugfs: creating file 'directed_yield_attempted' [ 161.903047][ T9530] debugfs: creating file 'directed_yield_successful' [ 161.903098][ T9530] debugfs: creating file 'preemption_reported' [ 161.903158][ T9530] debugfs: creating file 'preemption_other' [ 161.903195][ T9530] debugfs: creating file 'guest_mode' [ 161.903226][ T9530] debugfs: creating file 'notify_window_exits' [ 161.903252][ T9530] debugfs: creating file 'mmu_rmaps_stat' [ 161.903316][ T9530] kobject: 'kvm' (ffff888024239000): kobject_uevent_env [ 161.903337][ T9530] kobject: 'kvm' (ffff888024239000): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 161.919743][ C3] Dropped {multi|broad}cast of type=[86dd] [ 161.923156][ T9496] kcov: kcov_task_exit: t = ffff88805a9f0000, kcov->t = ffff88805a9f0000 [ 161.923456][ T9502] kcov: kcov_task_exit: t = ffff88805a884b00, kcov->t = ffff88805a884b00 [ 161.954280][ T9534] kcov: kcov_start: t = ffff888027400000, size = 524288, area = ffffc90025acd000 [ 161.954641][ T9534] sock ffff88803ddd6d80 [ 161.957542][ T9534] cmd 400448ca arg 0 [ 161.957569][ T9534] channel 2 len 36 [ 161.957586][ T9534] 0 [ 161.957593][ T9534] hci0 orig refcnt 5 [ 161.957604][ T9534] hci0 ffff8880393bc000 [ 161.957612][ T9534] hci0: [ 161.959108][ T9534] hci0: err 0x13 [ 161.959117][ T9534] hci0: cancelling interleave scan [ 161.959134][ T9534] hci0 orig refcnt 6 [ 161.960032][ T9534] sock ffff88803ddd6d80 sk ffff888057873000 [ 161.960070][ T9534] 0 [ 161.960076][ T9534] hci0 orig refcnt 5 [ 161.960094][ T9534] channel 3 len 6 [ 161.960114][ T9534] channel 3 len 8 [ 161.960136][ T9534] 0 [ 161.960141][ T9534] hci0 orig refcnt 6 [ 161.960149][ T9534] hci0 ffff8880393bc000 [ 161.960156][ T9534] hci0: [ 161.960161][ T9534] hci0: Updating devcoredump state from IDLE to IDLE. [ 161.960169][ T9534] hdev hci0 event 7 [ 161.960176][ T9534] hci0: [ 161.960181][ T9534] hci0: [ 161.960186][ T9534] hdev hci0 event 9 [ 161.960193][ T9534] hci0 orig refcnt 7 [ 161.960200][ T9534] hdev hci0 event 3 [ 161.960214][ T9534] hdev 0000000000000000 len 8 [ 161.960228][ T9534] hci0 orig refcnt 8 [ 161.960267][ T9534] channel 2 len 10 [ 161.960286][ T9534] channel 2 len 36 [ 161.961192][ T9534] sock ffff88803ddd6d80 sk ffff888057873000 [ 161.961321][ T5743] hci0 acl 0 sco 0 le 0 iso 0 [ 161.961342][ T5743] hci0 type 1 len 6 [ 161.961356][ T5743] hdev ffff8880393bc000 len 6 [ 161.961492][ T9533] sock ffff88803ddd6d80 sk ffff888057873000 [ 161.961514][ T9533] channel 2 len 10 [ 161.961536][ T9533] hci0 ffff8880393bc000 [ 161.961543][ T9533] hci0: [ 161.963940][ T9533] hci0: err 0x13 [ 161.963954][ T9533] hci0: cancelling interleave scan [ 161.963971][ T9533] All LE pending actions cleared [ 161.963977][ T9533] hdev hci0 [ 161.963982][ T9533] hdev hci0 event 4 [ 161.964002][ T9533] hdev 0000000000000000 len 8 [ 161.964027][ T9533] hdev hci0 event 8 [ 161.964035][ T9533] hci0 orig refcnt 7 [ 161.964050][ T9533] channel 3 len 6 [ 161.964069][ T9533] channel 3 len 8 [ 161.964082][ T9533] hci0 orig refcnt 6 [ 161.964267][ T9534] kcov: kcov_task_exit: t = ffff888027400000, kcov->t = ffff888027400000 [ 161.981670][ T9480] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 776 [ 161.981865][ T9480] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 776 [ 161.982200][ T9486] kcov: kcov_task_exit: t = ffff888034c0a580, kcov->t = ffff888034c0a580 [ 161.982405][ T9481] kcov: kcov_task_exit: t = ffff88802de42580, kcov->t = ffff88802de42580 [ 161.983004][ T9489] kcov: kcov_task_exit: t = ffff888035240000, kcov->t = ffff888035240000 [ 161.984035][ T9] nfc: nfc_urelease_event_work: portid 776 [ 161.984075][ T9] nfc: nfc_urelease_event_work: portid 776 [ 162.079645][ C2] bridge0: hello timer expired [ 162.159926][ C1] bridge1: hello timer expired [ 162.283525][ T9512] kobject: 'kvm' (ffff888024239000): kobject_uevent_env [ 162.283548][ T9512] kobject: 'kvm' (ffff888024239000): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 162.322293][ T9528] kobject: 'kvm' (ffff888024239000): kobject_uevent_env [ 162.322330][ T9528] kobject: 'kvm' (ffff888024239000): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 162.559639][ C1] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 3) [ 162.559656][ C0] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 4) [ 162.559753][ C0] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 162.559798][ C0] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 7) [ 162.719867][ T5743] Bluetooth: hci4: command tx timeout [ 162.719925][ T5743] hci4 cmd_cnt 1 cmd queued 0 [ 164.079666][ C2] bridge0: hello timer expired [ 164.159744][ C0] bridge1: hello timer expired [ 164.239731][ C0] net_ratelimit: 85 callbacks suppressed [ 164.239794][ C0] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 164.559661][ C3] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 164.799713][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 165.039676][ C3] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 165.040159][ T9433] wireguard: wg1: Receiving keepalive packet from peer 33 ([::1]:20001/0%0) [ 165.119621][ C2] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 7) [ 165.119854][ T37] wireguard: wg0: Sending handshake initiation to peer 14 ([::1]:20003/0%0) [ 165.120005][ T37] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 165.120024][ T37] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 165.120036][ T37] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140b, type=128, ifindex=8) => 00000003 [ 165.120050][ T37] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140a, type=128, ifindex=8) => 00000003 [ 166.079685][ C2] bridge0: hello timer expired [ 166.159626][ C1] bridge1: hello timer expired [ 167.679618][ C3] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 5) [ 168.079697][ C2] bridge0: hello timer expired [ 168.159619][ C1] bridge1: hello timer expired [ 168.319623][ C3] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 3) [ 168.319918][ C1] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 8) [ 168.319966][ C1] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 4) [ 169.439625][ C1] net_ratelimit: 48 callbacks suppressed [ 169.439640][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 169.600186][ T9435] wireguard: wg2: Packet has unallowed src IP (fe80::42) from peer 35 ([::1]:20001/0%0) [ 169.600632][ C1] ipv6_addr_label(addr=fc00:0000:0000:0000:0000:0000:0000:0001, type=0, ifindex=0) => 00000005 [ 169.600665][ C1] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 169.600687][ C1] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000a, type=0, ifindex=1) => 00000001 [ 169.600710][ C1] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000e, type=0, ifindex=2) => 00000001 [ 169.600733][ C1] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140d, type=0, ifindex=3) => 00000001 [ 169.600754][ C1] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140c, type=0, ifindex=3) => 00000001 [ 169.600777][ C1] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:14aa, type=0, ifindex=3) => 00000001 [ 169.600801][ C1] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140b, type=0, ifindex=3) => 00000001 [ 169.601017][ C1] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 170.079829][ C3] bridge0: hello timer expired [ 170.159655][ C1] bridge1: hello timer expired [ 170.159647][ C2] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 8) [ 170.879821][ C0] bridge0: port 1(bridge_slave_0) forward delay timer [ 170.879850][ C0] bridge0: port 1(bridge_slave_0) event 16 [ 170.879889][ C0] bridge0: br_fill_ifinfo event 16 port bridge_slave_0 master bridge0 [ 170.880189][ C1] bridge0: port 2(bridge_slave_1) forward delay timer [ 170.880207][ C1] bridge0: port 2(bridge_slave_1) event 16 [ 170.880232][ C1] bridge0: br_fill_ifinfo event 16 port bridge_slave_1 master bridge0