last executing test programs: 3m51.568564803s ago: executing program 32 (id=197): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x208, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x1cc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x556000000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffd}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0xb0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x8a8cd7b35d7d25d1}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x73a}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40480f4}, 0x4001) (async, rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) (rerun: 64) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x1) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '[:!)$%$}.\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040804}, 0x8040) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000000}, 0x20000001) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '}\\[\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4400}, 0x48015) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x60}}, 0x4000040) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a80)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000ac0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000ec0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b00)={0x35c, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_SDP={0x170, 0x13, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [{0xe, 0x1, '[:!)$%$}.\x00'}, {0x4}, {0x9, 0x1, ' \\/\'^'}, {0x11, 0x1, '0000:00:10.0\x00'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0x5, 0x1, '-'}]}, {0x60, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0xc, 0x1, 'devlink\x00'}, {0x5, 0x1, ')'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xd, 0x1, 'netdevsim'}, {0x8, 0x1, 'pci\x00'}, {0xd, 0x1, 'netdevsim'}]}, {0x28, 0x0, 0x0, 0x1, [{0x8, 0x1, 'pci\x00'}, {0x5, 0x1, ')'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x80, 0x0, 0x0, 0x1, [{0x5, 0x1, '2'}, {0xe, 0x1, 'NLBL_MGMT\x00'}, {0xc, 0x1, 'devlink\x00'}, {0xc, 0x1, 'devlink\x00'}, {0xe, 0x1, 'netdevsim\x00'}, {0x13, 0x1, '^\'[-}#$\'{/<$u#-'}, {0xd, 0x1, 'netdevsim'}, {0xc, 0x1, 'devlink\x00'}, {0xa, 0x1, '}$^.\'/'}]}, {0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x8, 0x1, 'pci\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_LLC_SDP={0x1b8, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x88'}, {0x4}]}, {0x28, 0x0, 0x0, 0x1, [{0xe, 0x1, 'netdevsim\x00'}, {0xa, 0x1, '(-)&],'}, {0x8, 0x1, ':*]}'}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '(\\'}]}, {0x48, 0x0, 0x0, 0x1, [{0x11, 0x1, '0000:00:10.0\x00'}, {0x1c, 0x1, '/selinux/avc/hash_stats\x00'}, {0xd, 0x1, 'netdevsim'}, {0x4}]}, {0x4c, 0x0, 0x0, 0x1, [{0x4}, {0xb, 0x1, '}[[T\xf3{&'}, {0x8, 0x1, '!,ZT'}, {0x8, 0x1, '[-/-'}, {0x11, 0x1, '0000:00:10.0\x00'}, {0x4}, {0x8, 0x1, '.#\x04@'}, {0x5, 0x1, '$'}]}, {0x8, 0x0, 0x0, 0x1, [{0x4}]}, {0x68, 0x0, 0x0, 0x1, [{0x5, 0x1, ']'}, {0x6, 0x1, '\\\\'}, {0xc, 0x1, 'devlink\x00'}, {0x11, 0x1, '[:)+\xd2*\'\xc5!^%.+'}, {0x5, 0x1, '\x1e'}, {0x8, 0x1, '&}-,'}, {0x7, 0x1, '\xaf,+'}, {0x1c, 0x1, '/selinux/avc/hash_stats\x00'}]}, {0x6c, 0x0, 0x0, 0x1, [{0x11, 0x1, '0000:00:10.0\x00'}, {0x11, 0x1, '0000:00:10.0\x00'}, {0x5, 0x1, '\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0xc, 0x1, 'devlink\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '#'}, {0x8, 0x1, 'pci\x00'}, {0x4}]}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, r5, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040904) (async, rerun: 32) write(r4, &(0x7f0000001000)="fd66b31155", 0x5) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r4) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f00000010c0)={@private, @private, 0x0}, &(0x7f0000001100)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, r10, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001240), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r12, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f00000013c0)={0x190, r13, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x158, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x55}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x20, 0x1, @random="c55356fd404aac8336a9da30e038a2f969bb645e2e06589d5acba024"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e4a77a512302"}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1d0e5bdf4b95"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random="d7"}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}, 0x190}}, 0x20000000) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000001600)=0x1, 0x4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000001640)=0x7, 0x8) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000001a80)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10840000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001700)={0x310, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b71fa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x704188a8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x342c7c50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bdd9602}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x242ac140}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a5253da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63418e11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14ca823b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x512695cb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x246330b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c220f3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2415dcd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67558285}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33aa179a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57b8620a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x768a520c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7442ce4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59b898cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a8f1010}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x226628f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x576e37e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69c027da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d30510d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32801ccb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x234a98b4}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5adb2a56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10f01b32}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x738c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe184}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c4006ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e9e6bb8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x485c365f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7655}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e66}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50093c1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa70b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c261f7e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7866b0b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4930c51e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x80000000}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x196a4cdf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90b9}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fd669e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54ced2b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d54}]}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 2m59.809961757s ago: executing program 33 (id=822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r5, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffff9, 0x10000000005, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0xa, 0x5, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0xfff, 0x20000000009, 0x9, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x20005, 0x2, 0x4ff, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0xf6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x2, 0x94f, 0x150b0000, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0xe, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0xbd, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa8, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x6, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0x5, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x9, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xffe, 0x80, 0x10000003, 0xd, 0x44, 0x6, 0xffff, 0x1, 0x401, 0x4, 0x2, 0x8000000007, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000740)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xff, "791d717ab0371a"}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000001740)={{r7, 0x3, 0x1, 0xeef8, 0x4, 0x876, 0x1, 0x2, 0x1000, 0x7f, 0x6, 0x8001, 0x2, 0x40, 0x6}}) 2m53.298059274s ago: executing program 5 (id=895): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aa5ccb00", 0x388, 0x800}) readv(r0, &(0x7f0000001d40)=[{&(0x7f0000000380)=""/217, 0xd9}], 0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) 2m53.088135459s ago: executing program 5 (id=897): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000024c0)=@int=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xc}, {0xa, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0xa000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) 2m52.860684295s ago: executing program 34 (id=897): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000024c0)=@int=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xc}, {0xa, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0xa000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) 2m45.622579855s ago: executing program 3 (id=976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9", 0x8, 0x8012, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000140)=""/8, 0x8, 0x89100100, 0x0, 0x0) 2m44.613024899s ago: executing program 3 (id=981): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x9, @remote, 0x1}, 0x1c, 0x0}}], 0x2, 0x54) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') 2m44.442741159s ago: executing program 3 (id=982): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="c109000000000000001d1e02", 0xc}], 0x1}, 0x20040000) 2m44.262119125s ago: executing program 3 (id=983): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='u\a0 2', 0x5) 2m29.244145264s ago: executing program 35 (id=983): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='u\a0 2', 0x5) 1m52.278395169s ago: executing program 36 (id=1273): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x9c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x7, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e26}, @IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x73cb1340}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa0}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x800, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0xc}}, 0x14}}, 0x24000004) 1m2.649190796s ago: executing program 37 (id=1962): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r1, r0, 0x0, 0x7d1d7457) 58.419390434s ago: executing program 38 (id=1855): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 54.264398694s ago: executing program 9 (id=2018): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000200)={0x3ff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 54.047379551s ago: executing program 9 (id=2020): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 53.960731488s ago: executing program 9 (id=2022): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x50, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00"]}, 0x50}}, 0x0) 53.960378486s ago: executing program 9 (id=2023): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 53.910309735s ago: executing program 9 (id=2025): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 53.607075596s ago: executing program 9 (id=2029): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000032000000000000008a0100003801000001000000000000000000000000000000000000000000000000000000746573745f72616964004141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414100414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141000000000000000008000000000000000000000000000000726169640000000000000000000000007261696431203120382032") 53.525156002s ago: executing program 39 (id=2029): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000032000000000000008a0100003801000001000000000000000000000000000000000000000000000000000000746573745f72616964004141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414100414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141000000000000000008000000000000000000000000000000726169640000000000000000000000007261696431203120382032") 42.435505899s ago: executing program 4 (id=2133): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x48854) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 41.994373332s ago: executing program 1 (id=2145): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x30, r2, 0x601, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "b9dc78f2b462571f24a91414bf62e085"}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) 41.958334264s ago: executing program 1 (id=2148): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000010000ff4a70f3"}, 0x40008, 0x5}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x1, 0xd) 41.828662421s ago: executing program 1 (id=2150): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 41.760730269s ago: executing program 1 (id=2153): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 41.739466347s ago: executing program 1 (id=2155): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0xfffe0000) bind(r0, 0x0, 0x0) 40.567704272s ago: executing program 4 (id=2157): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='dummy_udc.0', 0xb) 40.567549805s ago: executing program 1 (id=2158): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000010000ff4a70f3"}, 0x40008, 0x5}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x1, 0xd) 40.442968143s ago: executing program 40 (id=2158): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000010000ff4a70f3"}, 0x40008, 0x5}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x1, 0xd) 40.377610261s ago: executing program 4 (id=2162): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 40.282956488s ago: executing program 4 (id=2163): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 40.209638841s ago: executing program 4 (id=2166): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000004400010029bd70000400000002000000040048808800018084003f807d00e8809030c0b1b1fa1f54b9f4094cac7393a45a15b7bde230abf3b934b4cd99a9202c28cf108090356f80410723"], 0xa0}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb80140001801000108008000b0005000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 39.905622279s ago: executing program 4 (id=2170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x3, 0x101, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0x8, 0x115, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa810}, 0x40801) 38.993050171s ago: executing program 41 (id=2170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x3, 0x101, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0x8, 0x115, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa810}, 0x40801) 32.291724555s ago: executing program 0 (id=2215): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000200)={0x3ff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 32.215711733s ago: executing program 5 (id=2160): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 32.13591156s ago: executing program 5 (id=2217): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 32.102907506s ago: executing program 3 (id=2172): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 32.016852871s ago: executing program 5 (id=2220): renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) 32.016161854s ago: executing program 3 (id=2221): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2\n', 0x3) write(r0, &(0x7f00000000c0)='-3\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) 31.922955165s ago: executing program 5 (id=2222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f0000000200), 0x100) write(0x1, &(0x7f0000000200), 0x100) 31.449759031s ago: executing program 0 (id=2223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000500)='devices/platform/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='i2c_designware\x00', 0xf) close(r1) r2 = openat(r0, &(0x7f0000000700)='bus/platform/drivers/i2c_designware/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='pcspkr\x00', 0x7) close(r2) close(r0) 31.347731148s ago: executing program 0 (id=2226): capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 31.205410338s ago: executing program 0 (id=2228): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 31.142625544s ago: executing program 0 (id=2230): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) setresuid(0xee01, 0xee00, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1) 31.11192576s ago: executing program 0 (id=2232): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) 26.89798215s ago: executing program 8 (id=2250): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) 26.853946408s ago: executing program 8 (id=2251): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x0) 26.852175698s ago: executing program 8 (id=2252): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ebe2d000000000001090224000100000000090400000103010200092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) 16.000411496s ago: executing program 42 (id=2232): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) 15.986891256s ago: executing program 43 (id=2222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f0000000200), 0x100) write(0x1, &(0x7f0000000200), 0x100) 15.984172869s ago: executing program 8 (id=2255): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/n\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/n/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n', 0x2) close(r0) 15.957922574s ago: executing program 44 (id=2221): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2\n', 0x3) write(r0, &(0x7f00000000c0)='-3\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) close(r2) 15.90816662s ago: executing program 8 (id=2257): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 15.768545847s ago: executing program 8 (id=2258): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='10\n', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) close(r3) 12.793405837s ago: executing program 2 (id=2253): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='bq24190 0x6b\n\x00', 0xd) 12.745281671s ago: executing program 2 (id=2259): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 12.636025951s ago: executing program 2 (id=2260): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x0) 12.500163501s ago: executing program 2 (id=2261): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='8250_pericom\n', 0xd) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/bus/pci/drivers/8250_pericom\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000500)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='0000:00:00.0\n', 0xd) r4 = openat(r2, &(0x7f0000000700)='new_id\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='8086 29c0\n', 0xa) 12.304649906s ago: executing program 2 (id=2262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='/dev/ram0,65536\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtd0\x00', 0x2, 0x0) ioctl$MEMGETINFO(r1, 0x80204d01, &(0x7f0000000300)) 12.257288063s ago: executing program 2 (id=2264): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='udp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='-2 -3 +4\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1\n', 0x2) close(r2) 11.156477136s ago: executing program 6 (id=2283): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) 11.009556895s ago: executing program 6 (id=2284): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000680), 0x0) 11.009389865s ago: executing program 6 (id=2285): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407d1ed43000010000000109022200010100e0320904000001030002000921100100012222000705810308000a0000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/hid/drivers/arvo\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) 10.807591385s ago: executing program 7 (id=2290): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 10.806165229s ago: executing program 7 (id=2291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir1\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, 'work'}}, {@nfs_export_on}, {@uuid_off}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./mnt/dir2\x00', 0x1) 10.765353292s ago: executing program 7 (id=2292): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) 10.699336722s ago: executing program 7 (id=2293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpufreq\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/1024, 0x400) close(r0) 10.699214054s ago: executing program 7 (id=2294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000680), 0x0) 495.70493ms ago: executing program 45 (id=2258): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='10\n', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) close(r3) 494.125048ms ago: executing program 6 (id=2296): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/ath11k/initstate\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/ath11k/refcnt\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/ath11k/holders\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/ath11k/sections\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/ath11k/version\x00', 0x0, 0x0) 490.059056ms ago: executing program 7 (id=2303): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='mem\x00', 0x3) close(r0) 409.800311ms ago: executing program 6 (id=2297): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 0s ago: executing program 6 (id=2298): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x300, 0x7, 0x1]}) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) ioctl$COMEDI_POLL(r0, 0x640f) read(r0, &(0x7f0000000400)=""/100, 0x64) ioctl$COMEDI_CANCEL(r0, 0x6407) kernel console output (not intermixed with test programs): 6.3-2 04/01/2014 [ 206.634791][T11720] Call Trace: [ 206.634796][T11720] [ 206.634803][T11720] dump_stack_lvl+0x100/0x190 [ 206.634832][T11720] should_fail_ex.cold+0x5/0xa [ 206.634855][T11720] _copy_from_user+0x2e/0xd0 [ 206.634874][T11720] copy_msghdr_from_user+0x9f/0x4c0 [ 206.634899][T11720] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 206.634926][T11720] ? futex_unqueue+0x133/0x2c0 [ 206.634954][T11720] ___sys_sendmsg+0x106/0x1e0 [ 206.634980][T11720] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.635005][T11720] ? __pfx___futex_wait+0x10/0x10 [ 206.635020][T11720] ? __pfx_try_to_wake_up+0x10/0x10 [ 206.635038][T11720] ? futex_hash+0x311/0x400 [ 206.635063][T11720] ? __fget_files+0x34/0x3d0 [ 206.635097][T11720] __sys_sendmmsg+0x20c/0x440 [ 206.635119][T11720] ? __pfx___sys_sendmmsg+0x10/0x10 [ 206.635137][T11720] ? ksys_write+0x190/0x250 [ 206.635159][T11720] ? __pfx_do_futex+0x10/0x10 [ 206.635188][T11720] ? fput+0x7c/0x100 [ 206.635207][T11720] ? __pfx___x64_sys_futex+0x10/0x10 [ 206.635226][T11720] ? ksys_write+0x1ac/0x250 [ 206.635242][T11720] ? __pfx_ksys_write+0x10/0x10 [ 206.635261][T11720] __x64_sys_sendmmsg+0x9c/0x100 [ 206.635280][T11720] ? lockdep_hardirqs_on+0x7d/0x110 [ 206.635300][T11720] do_syscall_64+0x123/0x790 [ 206.635322][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.635338][T11720] RIP: 0033:0x7f6ad159e159 [ 206.635351][T11720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.635366][T11720] RSP: 002b:00007f6ad23b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 206.635381][T11720] RAX: ffffffffffffffda RBX: 00007f6ad1825fa0 RCX: 00007f6ad159e159 [ 206.635391][T11720] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 206.635401][T11720] RBP: 00007f6ad163503b R08: 0000000000000000 R09: 0000000000000000 [ 206.635411][T11720] R10: 0000000000002890 R11: 0000000000000246 R12: 0000000000000000 [ 206.635421][T11720] R13: 00007f6ad1826038 R14: 00007f6ad1825fa0 R15: 00007ffea6700f08 [ 206.635444][T11720] [ 207.173065][T11748] FAULT_INJECTION: forcing a failure. [ 207.173065][T11748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.173094][T11748] CPU: 2 UID: 0 PID: 11748 Comm: syz.8.1756 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.173116][T11748] Tainted: [L]=SOFTLOCKUP [ 207.173122][T11748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.173131][T11748] Call Trace: [ 207.173137][T11748] [ 207.173143][T11748] dump_stack_lvl+0x100/0x190 [ 207.173171][T11748] should_fail_ex.cold+0x5/0xa [ 207.173194][T11748] _copy_from_user+0x2e/0xd0 [ 207.173213][T11748] copy_msghdr_from_user+0x9f/0x4c0 [ 207.173252][T11748] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 207.173281][T11748] ? futex_unqueue+0x133/0x2c0 [ 207.173308][T11748] ___sys_sendmsg+0x106/0x1e0 [ 207.173332][T11748] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.173356][T11748] ? __pfx___futex_wait+0x10/0x10 [ 207.173369][T11748] ? __pfx_try_to_wake_up+0x10/0x10 [ 207.173387][T11748] ? futex_hash+0x311/0x400 [ 207.173411][T11748] ? __fget_files+0x34/0x3d0 [ 207.173445][T11748] __sys_sendmmsg+0x20c/0x440 [ 207.173466][T11748] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.173484][T11748] ? ksys_write+0x190/0x250 [ 207.173504][T11748] ? __pfx_do_futex+0x10/0x10 [ 207.173533][T11748] ? fput+0x7c/0x100 [ 207.173557][T11748] ? __pfx___x64_sys_futex+0x10/0x10 [ 207.173577][T11748] ? ksys_write+0x1ac/0x250 [ 207.173592][T11748] ? __pfx_ksys_write+0x10/0x10 [ 207.173611][T11748] __x64_sys_sendmmsg+0x9c/0x100 [ 207.173629][T11748] ? lockdep_hardirqs_on+0x7d/0x110 [ 207.173651][T11748] do_syscall_64+0x123/0x790 [ 207.173675][T11748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.173693][T11748] RIP: 0033:0x7f95adf9e159 [ 207.173707][T11748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.173722][T11748] RSP: 002b:00007f95aee5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.173739][T11748] RAX: ffffffffffffffda RBX: 00007f95ae225fa0 RCX: 00007f95adf9e159 [ 207.173749][T11748] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 207.173758][T11748] RBP: 00007f95ae03503b R08: 0000000000000000 R09: 0000000000000000 [ 207.173768][T11748] R10: 0000000000002890 R11: 0000000000000246 R12: 0000000000000000 [ 207.173777][T11748] R13: 00007f95ae226038 R14: 00007f95ae225fa0 R15: 00007ffcf8cbec28 [ 207.173798][T11748] [ 207.996956][T11777] FAULT_INJECTION: forcing a failure. [ 207.996956][T11777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.996978][T11777] CPU: 3 UID: 0 PID: 11777 Comm: syz.8.1768 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.996993][T11777] Tainted: [L]=SOFTLOCKUP [ 207.996996][T11777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.997003][T11777] Call Trace: [ 207.997007][T11777] [ 207.997012][T11777] dump_stack_lvl+0x100/0x190 [ 207.997031][T11777] should_fail_ex.cold+0x5/0xa [ 207.997048][T11777] _copy_from_user+0x2e/0xd0 [ 207.997061][T11777] copy_msghdr_from_user+0x9f/0x4c0 [ 207.997080][T11777] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 207.997099][T11777] ? futex_unqueue+0x133/0x2c0 [ 207.997116][T11777] ___sys_sendmsg+0x106/0x1e0 [ 207.997148][T11777] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.997165][T11777] ? __pfx___futex_wait+0x10/0x10 [ 207.997181][T11777] ? __pfx_try_to_wake_up+0x10/0x10 [ 207.997195][T11777] ? futex_hash+0x311/0x400 [ 207.997213][T11777] ? __fget_files+0x34/0x3d0 [ 207.997237][T11777] __sys_sendmmsg+0x20c/0x440 [ 207.997253][T11777] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.997267][T11777] ? ksys_write+0x190/0x250 [ 207.997283][T11777] ? __pfx_do_futex+0x10/0x10 [ 207.997304][T11777] ? fput+0x7c/0x100 [ 207.997318][T11777] ? __pfx___x64_sys_futex+0x10/0x10 [ 207.997332][T11777] ? ksys_write+0x1ac/0x250 [ 207.997343][T11777] ? __pfx_ksys_write+0x10/0x10 [ 207.997356][T11777] __x64_sys_sendmmsg+0x9c/0x100 [ 207.997369][T11777] ? lockdep_hardirqs_on+0x7d/0x110 [ 207.997384][T11777] do_syscall_64+0x123/0x790 [ 207.997399][T11777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.997410][T11777] RIP: 0033:0x7f95adf9e159 [ 207.997420][T11777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.997430][T11777] RSP: 002b:00007f95aee5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.997441][T11777] RAX: ffffffffffffffda RBX: 00007f95ae225fa0 RCX: 00007f95adf9e159 [ 207.997448][T11777] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 207.997454][T11777] RBP: 00007f95ae03503b R08: 0000000000000000 R09: 0000000000000000 [ 207.997461][T11777] R10: 0000000000002890 R11: 0000000000000246 R12: 0000000000000000 [ 207.997467][T11777] R13: 00007f95ae226038 R14: 00007f95ae225fa0 R15: 00007ffcf8cbec28 [ 207.997481][T11777] [ 208.940195][T11807] FAULT_INJECTION: forcing a failure. [ 208.940195][T11807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.940219][T11807] CPU: 1 UID: 0 PID: 11807 Comm: syz.7.1782 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.940234][T11807] Tainted: [L]=SOFTLOCKUP [ 208.940238][T11807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.940244][T11807] Call Trace: [ 208.940248][T11807] [ 208.940253][T11807] dump_stack_lvl+0x100/0x190 [ 208.940274][T11807] should_fail_ex.cold+0x5/0xa [ 208.940292][T11807] _copy_from_user+0x2e/0xd0 [ 208.940305][T11807] ____sys_sendmsg+0x1d1/0xbe0 [ 208.940325][T11807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.940343][T11807] ? preempt_schedule_common+0x3c/0xb0 [ 208.940360][T11807] ? preempt_schedule_thunk+0x16/0x40 [ 208.940376][T11807] ___sys_sendmsg+0x190/0x1e0 [ 208.940394][T11807] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.940410][T11807] ? __pfx_try_to_wake_up+0x10/0x10 [ 208.940423][T11807] ? futex_hash+0x311/0x400 [ 208.940443][T11807] ? __fget_files+0x34/0x3d0 [ 208.940470][T11807] __sys_sendmmsg+0x20c/0x440 [ 208.940485][T11807] ? __pfx___sys_sendmmsg+0x10/0x10 [ 208.940498][T11807] ? ksys_write+0x190/0x250 [ 208.940512][T11807] ? __pfx_do_futex+0x10/0x10 [ 208.940532][T11807] ? xfd_validate_state+0x129/0x190 [ 208.940548][T11807] __x64_sys_sendmmsg+0x9c/0x100 [ 208.940563][T11807] ? lockdep_hardirqs_on+0x7d/0x110 [ 208.940577][T11807] do_syscall_64+0x123/0x790 [ 208.940592][T11807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.940614][T11807] RIP: 0033:0x7f6ad159e159 [ 208.940625][T11807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.940635][T11807] RSP: 002b:00007f6ad23b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.940648][T11807] RAX: ffffffffffffffda RBX: 00007f6ad1825fa0 RCX: 00007f6ad159e159 [ 208.940656][T11807] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 208.940663][T11807] RBP: 00007f6ad163503b R08: 0000000000000000 R09: 0000000000000000 [ 208.940670][T11807] R10: 0000000000002890 R11: 0000000000000246 R12: 0000000000000000 [ 208.940677][T11807] R13: 00007f6ad1826038 R14: 00007f6ad1825fa0 R15: 00007ffea6700f08 [ 208.940692][T11807] [ 209.147673][T11815] jffs2: notice: (11815) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 209.158742][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 209.158761][ T43] audit: type=1400 audit(1789414571.696:960): avc: denied { write } for pid=11814 comm="syz.7.1784" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.657025][T11837] NILFS (nullb0): couldn't find nilfs on the device [ 209.717449][T11840] FAULT_INJECTION: forcing a failure. [ 209.717449][T11840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.717483][T11840] CPU: 2 UID: 0 PID: 11840 Comm: syz.6.1793 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.717509][T11840] Tainted: [L]=SOFTLOCKUP [ 209.717517][T11840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.717526][T11840] Call Trace: [ 209.717532][T11840] [ 209.717540][T11840] dump_stack_lvl+0x100/0x190 [ 209.717576][T11840] should_fail_ex.cold+0x5/0xa [ 209.717605][T11840] _copy_from_user+0x2e/0xd0 [ 209.717628][T11840] copy_msghdr_from_user+0x9f/0x4c0 [ 209.717661][T11840] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 209.717693][T11840] ? futex_unqueue+0x133/0x2c0 [ 209.717732][T11840] ___sys_sendmsg+0x106/0x1e0 [ 209.717767][T11840] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.717797][T11840] ? __pfx___futex_wait+0x10/0x10 [ 209.717816][T11840] ? __pfx_try_to_wake_up+0x10/0x10 [ 209.717839][T11840] ? futex_hash+0x311/0x400 [ 209.717870][T11840] ? __fget_files+0x34/0x3d0 [ 209.717912][T11840] __sys_sendmmsg+0x20c/0x440 [ 209.717940][T11840] ? __pfx___sys_sendmmsg+0x10/0x10 [ 209.717962][T11840] ? ksys_write+0x190/0x250 [ 209.717989][T11840] ? __pfx_do_futex+0x10/0x10 [ 209.718026][T11840] ? xfd_validate_state+0x129/0x190 [ 209.718055][T11840] __x64_sys_sendmmsg+0x9c/0x100 [ 209.718078][T11840] ? lockdep_hardirqs_on+0x7d/0x110 [ 209.718105][T11840] do_syscall_64+0x123/0x790 [ 209.718133][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.718152][T11840] RIP: 0033:0x7f259c19e159 [ 209.718170][T11840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.718187][T11840] RSP: 002b:00007f259d0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 209.718206][T11840] RAX: ffffffffffffffda RBX: 00007f259c425fa0 RCX: 00007f259c19e159 [ 209.718220][T11840] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 209.718229][T11840] RBP: 00007f259c23503b R08: 0000000000000000 R09: 0000000000000000 [ 209.718238][T11840] R10: 0000000000002890 R11: 0000000000000246 R12: 0000000000000000 [ 209.718249][T11840] R13: 00007f259c426038 R14: 00007f259c425fa0 R15: 00007ffd4153bde8 [ 209.718269][T11840] [ 210.538677][T11865] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 210.552659][T11865] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.568491][T11865] bond5: (slave geneve3): making interface the new active one [ 210.569653][T11865] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 210.579439][ T5809] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.579465][ T5809] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.579482][ T5809] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.579499][ T5809] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.278445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 213.810491][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1829'. [ 215.460740][ T43] audit: type=1400 audit(1789414577.336:961): avc: denied { write } for pid=11946 comm="syz.8.1832" name="functions" dev="configfs" ino=24718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.460789][ T43] audit: type=1400 audit(1789414577.356:962): avc: denied { write } for pid=11946 comm="syz.8.1832" name="mjpeg" dev="configfs" ino=38536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.460829][ T43] audit: type=1400 audit(1789414577.356:963): avc: denied { read } for pid=11946 comm="syz.8.1832" name="bmaControls" dev="configfs" ino=38545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 216.963947][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1839'. [ 218.507546][T11998] udc dummy_udc.0: failed to start g1: -19 [ 218.508267][T11998] UDC core: g1: couldn't find an available UDC or it's busy [ 218.981333][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1853'. [ 219.401872][T12029] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1863'. [ 219.401888][T12029] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1863'. [ 220.300836][T12051] udc dummy_udc.0: failed to start g1: -19 [ 220.302716][T12051] UDC core: g1: couldn't find an available UDC or it's busy [ 220.548011][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1872'. [ 220.548031][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1872'. [ 220.745741][ T5734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.747535][ T5734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.760103][ T5734] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.766755][ T5734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.767270][ T5734] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.040836][ T5729] bond0: (slave syz_tun): Releasing backup interface [ 221.327472][T12067] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.327578][T12067] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.327675][T12067] bridge_slave_0: entered allmulticast mode [ 221.329311][T12067] bridge_slave_0: entered promiscuous mode [ 221.331620][T12067] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.331744][T12067] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.331849][T12067] bridge_slave_1: entered allmulticast mode [ 221.333329][T12067] bridge_slave_1: entered promiscuous mode [ 221.360867][T12067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.367199][T12067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.390697][T12067] team0: Port device team_slave_0 added [ 221.392973][T12067] team0: Port device team_slave_1 added [ 221.415915][T12067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.415932][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.415953][T12067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.417705][T12067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.417717][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.417737][T12067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.454344][T12067] hsr_slave_0: entered promiscuous mode [ 221.455100][T12067] hsr_slave_1: entered promiscuous mode [ 221.574392][T12067] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.574424][T12067] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.642215][T12067] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.642249][T12067] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.703709][T12067] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.703731][T12067] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.819171][T12067] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.819192][T12067] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.039039][T12096] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1881'. [ 222.039056][T12096] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1881'. [ 222.049282][T12067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.053815][T12067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.060811][T12067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.070777][T12067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.071482][T12067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.084563][T12067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.085388][T12067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.088182][T12067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.114830][T12067] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.114915][T12067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.115108][T12067] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.115184][T12067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.150978][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.151583][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.193452][T12067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.203304][T12067] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.212315][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.212384][ T7379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.213769][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.213879][ T7379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.521332][T12067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.552103][T12067] veth0_vlan: entered promiscuous mode [ 222.559606][T12067] veth1_vlan: entered promiscuous mode [ 222.574016][T12067] veth0_macvtap: entered promiscuous mode [ 222.576226][T12067] veth1_macvtap: entered promiscuous mode [ 222.584382][T12067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.587617][T12067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.641562][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.641591][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.641608][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.641626][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.717493][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.717507][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.734900][ T7364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.734922][ T7364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.858112][ T5734] Bluetooth: hci6: command tx timeout [ 224.456804][T12152] FAULT_INJECTION: forcing a failure. [ 224.456804][T12152] name failslab, interval 1, probability 0, space 0, times 0 [ 224.456871][T12152] CPU: 2 UID: 0 PID: 12152 Comm: syz.8.1896 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.456897][T12152] Tainted: [L]=SOFTLOCKUP [ 224.456903][T12152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.456915][T12152] Call Trace: [ 224.456934][T12152] [ 224.456941][T12152] dump_stack_lvl+0x100/0x190 [ 224.456989][T12152] should_fail_ex.cold+0x5/0xa [ 224.457014][T12152] should_failslab+0xc2/0x120 [ 224.457042][T12152] kmem_cache_alloc_noprof+0x92/0x6a0 [ 224.457058][T12152] ? __pfx_vma_is_special_huge+0x10/0x10 [ 224.457080][T12152] ? ptlock_alloc+0x1f/0x70 [ 224.457109][T12152] ptlock_alloc+0x1f/0x70 [ 224.457133][T12152] pte_alloc_one+0x82/0x3d0 [ 224.457153][T12152] __do_fault+0x26c/0x440 [ 224.457173][T12152] do_fault+0x585/0x1830 [ 224.457193][T12152] ? __pfx_filemap_map_pages+0x10/0x10 [ 224.457216][T12152] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 224.457238][T12152] ? __pfx_do_fault+0x10/0x10 [ 224.457257][T12152] ? do_raw_spin_unlock+0x145/0x1e0 [ 224.457280][T12152] ? _raw_spin_unlock+0x28/0x50 [ 224.457305][T12152] ? __pmd_alloc+0x3fb/0x950 [ 224.457323][T12152] __handle_mm_fault+0x150b/0x2f60 [ 224.457352][T12152] ? __pfx___handle_mm_fault+0x10/0x10 [ 224.457375][T12152] ? __pfx_mt_find+0x10/0x10 [ 224.457412][T12152] ? find_vma+0xbf/0x140 [ 224.457425][T12152] ? __pfx_find_vma+0x10/0x10 [ 224.457447][T12152] handle_mm_fault+0x363/0xa20 [ 224.457476][T12152] do_user_addr_fault+0x745/0x12f0 [ 224.457500][T12152] exc_page_fault+0x6f/0xd0 [ 224.457522][T12152] asm_exc_page_fault+0x26/0x30 [ 224.457545][T12152] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 224.457565][T12152] Code: 89 ee 48 89 ef e8 31 74 e1 fc 4d 85 ff 75 26 e8 47 7a e1 fc 89 de 4c 89 e7 e8 fd c1 54 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 21 7a e1 fc 48 89 d8 5b 5d 41 [ 224.457583][T12152] RSP: 0018:ffffc90007f37cb8 EFLAGS: 00050246 [ 224.457598][T12152] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000078 [ 224.457607][T12152] RDX: 0000000000000001 RSI: ffffc90007f37d10 RDI: 0000000000000000 [ 224.457619][T12152] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000fe6fb0 [ 224.457630][T12152] R10: ffffc90007f37d87 R11: 0000000000000000 R12: ffffc90007f37d10 [ 224.457641][T12152] R13: 0000000000000078 R14: 00007ffffffff000 R15: 0000000000000000 [ 224.457681][T12152] ? _copy_to_user+0x93/0xd0 [ 224.457703][T12152] do_statfs_native+0xa2/0x110 [ 224.457724][T12152] ? __pfx_do_statfs_native+0x10/0x10 [ 224.457751][T12152] ? simple_statfs+0x13/0x1d0 [ 224.457764][T12152] ? fput+0x7c/0x100 [ 224.457788][T12152] __do_sys_fstatfs+0xf4/0x100 [ 224.457808][T12152] ? __pfx___do_sys_fstatfs+0x10/0x10 [ 224.457845][T12152] do_syscall_64+0x123/0x790 [ 224.457867][T12152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.457883][T12152] RIP: 0033:0x7f95adf9e159 [ 224.457898][T12152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.457914][T12152] RSP: 002b:00007f95aee5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 224.457930][T12152] RAX: ffffffffffffffda RBX: 00007f95ae225fa0 RCX: 00007f95adf9e159 [ 224.457941][T12152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 224.457953][T12152] RBP: 00007f95ae03503b R08: 0000000000000000 R09: 0000000000000000 [ 224.457964][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.457975][T12152] R13: 00007f95ae226038 R14: 00007f95ae225fa0 R15: 00007ffcf8cbec28 [ 224.457995][T12152] [ 224.938206][ T5734] Bluetooth: hci6: command tx timeout [ 225.126554][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1900'. [ 225.213657][ T43] audit: type=1400 audit(1789414587.756:964): avc: denied { write } for pid=12166 comm="syz.7.1903" name="functions" dev="configfs" ino=24718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.226719][ T43] audit: type=1400 audit(1789414587.766:965): avc: denied { write } for pid=12166 comm="syz.7.1903" name="interface.ncm" dev="configfs" ino=40596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.227593][ T43] audit: type=1400 audit(1789414587.766:966): avc: denied { write } for pid=12166 comm="syz.7.1903" name="functions" dev="configfs" ino=24718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.229205][ T43] audit: type=1400 audit(1789414587.776:967): avc: denied { write } for pid=12166 comm="syz.7.1903" name="interface.rndis" dev="configfs" ino=40601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 226.381485][ T43] audit: type=1326 audit(1789414588.927:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12207 comm="syz.7.1919" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad159e159 code=0x7ffc0000 [ 226.381698][ T43] audit: type=1326 audit(1789414588.927:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12207 comm="syz.7.1919" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad159e159 code=0x7ffc0000 [ 226.384652][ T43] audit: type=1326 audit(1789414588.927:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12207 comm="syz.7.1919" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad159e159 code=0x7ffc0000 [ 226.385093][ T43] audit: type=1326 audit(1789414588.927:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12207 comm="syz.7.1919" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad159e159 code=0x7ffc0000 [ 226.385134][ T43] audit: type=1326 audit(1789414588.927:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12207 comm="syz.7.1919" exe="/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f6ad159e159 code=0x7ffc0000 [ 226.385331][ T43] audit: type=1326 audit(1789414588.927:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12207 comm="syz.7.1919" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ad159e159 code=0x7ffc0000 [ 226.710457][T12219] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 227.027825][ T5734] Bluetooth: hci6: command tx timeout [ 229.097615][ T5734] Bluetooth: hci6: command tx timeout [ 229.901039][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.028114][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.076025][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.089338][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.093022][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.094043][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.097288][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.145157][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.283943][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.596577][ T12] bridge_slave_1: left allmulticast mode [ 230.596684][ T12] bridge_slave_1: left promiscuous mode [ 230.596871][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.603129][ T12] bridge_slave_0: left allmulticast mode [ 230.603152][ T12] bridge_slave_0: left promiscuous mode [ 230.604574][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.707670][ T1043] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 230.782040][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.783644][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.784720][ T12] bond0 (unregistering): Released all slaves [ 230.872784][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 230.872796][ T43] audit: type=1400 audit(1789414593.417:978): avc: denied { write } for pid=12336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.878760][ T1043] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 230.883578][ T1043] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.883599][ T1043] usb 5-1: config 0 has no interface number 0 [ 230.887069][ T1043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.887089][ T1043] usb 5-1: Product: syz [ 230.887100][ T1043] usb 5-1: Manufacturer: syz [ 230.887110][ T1043] usb 5-1: SerialNumber: syz [ 230.891999][ T1043] usb 5-1: config 0 descriptor?? [ 230.894303][ T1043] usb 5-1: selecting invalid altsetting 1 [ 230.894402][ T1043] dvb_ttusb_budget: ttusb_init_controller: error [ 230.894411][ T1043] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 230.926256][ T43] audit: type=1400 audit(1789414593.467:979): avc: denied { write } for pid=12340 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.944904][ T1043] DVB: Unable to find symbol stv0299_attach() [ 230.962030][ T1043] DVB: Unable to find symbol tda8083_attach() [ 230.962045][ T1043] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 231.032042][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 231.059306][T12307] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.059506][T12307] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.059625][T12307] bridge_slave_0: entered allmulticast mode [ 231.060881][T12307] bridge_slave_0: entered promiscuous mode [ 231.063575][T12307] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.063646][T12307] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.063711][T12307] bridge_slave_1: entered allmulticast mode [ 231.064898][T12307] bridge_slave_1: entered promiscuous mode [ 231.095556][T12307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.104208][T12307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.104283][ T5811] usb 5-1: USB disconnect, device number 2 [ 231.158185][ T12] hsr_slave_0: left promiscuous mode [ 231.158960][ T12] hsr_slave_1: left promiscuous mode [ 231.159632][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.159649][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.162433][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.162450][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.177009][ T12] veth1_macvtap: left promiscuous mode [ 231.177044][ T12] veth0_macvtap: left promiscuous mode [ 231.177129][ T12] veth1_vlan: left promiscuous mode [ 231.179349][ T12] veth0_vlan: left promiscuous mode [ 231.203613][ T43] audit: type=1400 audit(1789414593.747:980): avc: denied { write } for pid=12350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.226219][T12354] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1972'. [ 231.264977][ T43] audit: type=1400 audit(1789414593.807:981): avc: denied { write } for pid=12355 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.441428][ T12] team0 (unregistering): Port device team_slave_1 removed [ 231.458261][ T12] team0 (unregistering): Port device team_slave_0 removed [ 231.584806][T12366] udc dummy_udc.0: failed to start g1: -19 [ 231.585651][T12366] UDC core: g1: couldn't find an available UDC or it's busy [ 231.609591][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 231.614887][T12307] team0: Port device team_slave_0 added [ 231.618377][T12307] team0: Port device team_slave_1 added [ 231.644220][T12307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.644233][T12307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.644246][T12307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.645027][T12307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.645035][T12307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.645047][T12307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.691083][T12369] binder: 12367:12369 ioctl c0306201 200000000080 returned -14 [ 231.702478][T12307] hsr_slave_0: entered promiscuous mode [ 231.703220][T12307] hsr_slave_1: entered promiscuous mode [ 231.703801][T12307] debugfs: 'hsr0' already exists in 'hsr' [ 231.703817][T12307] Cannot create hsr debugfs directory [ 231.834344][ T43] audit: type=1400 audit(1789414594.387:982): avc: denied { write } for pid=12370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.912823][T12374] binder: 12367:12374 ioctl c0306201 2000000003c0 returned -14 [ 231.958453][T12307] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 232.053545][T12307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.071045][T12307] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 232.092413][T12307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.093190][T12307] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 232.102391][T12307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.105196][T12307] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 232.111642][T12307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.122746][ T43] audit: type=1400 audit(1789414594.667:983): avc: denied { write } for pid=12375 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.198259][T12307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.216753][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 232.217582][ T5734] Bluetooth: hci1: command tx timeout [ 232.221101][T12307] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.230687][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.230772][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.234585][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.234669][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.369678][ T43] audit: type=1400 audit(1789414594.907:984): avc: denied { write } for pid=12385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.451941][ T43] audit: type=1400 audit(1789414594.997:985): avc: denied { write } for pid=12394 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.519796][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 232.573980][T12307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.656638][T12408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1980'. [ 232.804512][T12307] veth0_vlan: entered promiscuous mode [ 232.813578][T12307] veth1_vlan: entered promiscuous mode [ 232.842679][T12307] veth0_macvtap: entered promiscuous mode [ 232.846387][T12307] veth1_macvtap: entered promiscuous mode [ 232.859220][T12307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.865411][T12307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.889391][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.889432][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.889461][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.889491][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.977026][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.977047][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.009685][ T7366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.009706][ T7366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.109571][T12427] FAULT_INJECTION: forcing a failure. [ 233.109571][T12427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.109608][T12427] CPU: 1 UID: 0 PID: 12427 Comm: syz.9.1964 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.109634][T12427] Tainted: [L]=SOFTLOCKUP [ 233.109642][T12427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.109654][T12427] Call Trace: [ 233.109661][T12427] [ 233.109669][T12427] dump_stack_lvl+0x100/0x190 [ 233.109701][T12427] should_fail_ex.cold+0x5/0xa [ 233.109724][T12427] ? prepare_alloc_pages+0x16d/0x5b0 [ 233.109748][T12427] should_fail_alloc_page+0xeb/0x140 [ 233.109792][T12427] prepare_alloc_pages+0x1f0/0x5b0 [ 233.109822][T12427] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 233.109857][T12427] ? free_unref_folios+0x81c/0x1790 [ 233.109886][T12427] ? free_unref_folios+0x801/0x1790 [ 233.109919][T12427] ? __lock_acquire+0x5c0/0x1f40 [ 233.109941][T12427] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 233.109972][T12427] ? __css_rstat_updated+0x1ce/0x590 [ 233.109997][T12427] ? lock_acquire+0x1d1/0x380 [ 233.110017][T12427] ? do_raw_spin_lock+0x128/0x260 [ 233.110039][T12427] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 233.110063][T12427] ? find_held_lock+0x2b/0x80 [ 233.110096][T12427] ? __lock_acquire+0x5c0/0x1f40 [ 233.110116][T12427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.110140][T12427] ? policy_nodemask+0xed/0x4f0 [ 233.110165][T12427] alloc_pages_mpol+0x201/0x550 [ 233.110191][T12427] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 233.110222][T12427] folio_alloc_mpol_noprof+0x36/0x260 [ 233.110252][T12427] shmem_alloc_folio+0x135/0x160 [ 233.110278][T12427] shmem_alloc_and_add_folio+0x371/0xd40 [ 233.110310][T12427] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 233.110341][T12427] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 233.110373][T12427] shmem_get_folio_gfp+0x75b/0x1980 [ 233.110403][T12427] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 233.110434][T12427] ? filemap_map_pages+0x114a/0x2100 [ 233.110464][T12427] shmem_fault+0x1fb/0xa30 [ 233.110493][T12427] ? __pfx_shmem_fault+0x10/0x10 [ 233.110523][T12427] ? __pfx_filemap_map_pages+0x10/0x10 [ 233.110557][T12427] ? find_held_lock+0x2b/0x80 [ 233.110588][T12427] ? __pfx_filemap_map_pages+0x10/0x10 [ 233.110612][T12427] __do_fault+0x10b/0x440 [ 233.110635][T12427] do_fault+0xb3f/0x1830 [ 233.110658][T12427] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 233.110685][T12427] ? __pfx_do_fault+0x10/0x10 [ 233.110704][T12427] ? rcu_read_unlock+0x2d/0xb0 [ 233.110729][T12427] ? rcu_read_unlock+0x2d/0xb0 [ 233.110754][T12427] ? __pte_offset_map+0x179/0x310 [ 233.110776][T12427] __handle_mm_fault+0x150b/0x2f60 [ 233.110809][T12427] ? __pfx___handle_mm_fault+0x10/0x10 [ 233.110834][T12427] ? pte_offset_map_lock+0x174/0x320 [ 233.110855][T12427] ? find_held_lock+0x2b/0x80 [ 233.110878][T12427] ? find_held_lock+0x2b/0x80 [ 233.110897][T12427] ? follow_page_pte+0x536/0x1050 [ 233.110929][T12427] handle_mm_fault+0x363/0xa20 [ 233.110958][T12427] __get_user_pages+0x8ae/0x2c30 [ 233.110986][T12427] ? __pfx_mt_find+0x10/0x10 [ 233.111011][T12427] ? __pfx___get_user_pages+0x10/0x10 [ 233.111040][T12427] populate_vma_page_range+0x267/0x3f0 [ 233.111064][T12427] ? __pfx_populate_vma_page_range+0x10/0x10 [ 233.111083][T12427] ? __pfx_find_vma_intersection+0x10/0x10 [ 233.111110][T12427] __mm_populate+0x107/0x3a0 [ 233.111135][T12427] ? __pfx___mm_populate+0x10/0x10 [ 233.111157][T12427] ? up_write+0x2dc/0x5b0 [ 233.111181][T12427] vm_mmap_pgoff+0x441/0x470 [ 233.111202][T12427] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 233.111225][T12427] ? __pfx_do_futex+0x10/0x10 [ 233.111254][T12427] ksys_mmap_pgoff+0xe4/0x610 [ 233.111276][T12427] ? __x64_sys_futex+0x358/0x4d0 [ 233.111301][T12427] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 233.111323][T12427] ? xfd_validate_state+0x129/0x190 [ 233.111348][T12427] __x64_sys_mmap+0x125/0x190 [ 233.111392][T12427] do_syscall_64+0x123/0x790 [ 233.111422][T12427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.111441][T12427] RIP: 0033:0x7efd0cb9e159 [ 233.111458][T12427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.111475][T12427] RSP: 002b:00007efd0d9e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 233.111494][T12427] RAX: ffffffffffffffda RBX: 00007efd0ce25fa0 RCX: 00007efd0cb9e159 [ 233.111506][T12427] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 233.111519][T12427] RBP: 00007efd0cc3503b R08: ffffffffffffffff R09: 0000000000000000 [ 233.111538][T12427] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 233.111548][T12427] R13: 00007efd0ce26038 R14: 00007efd0ce25fa0 R15: 00007ffcc082bfd8 [ 233.111573][T12427] [ 233.347324][ T5735] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 233.389325][T12436] UDC core: g1: couldn't find an available UDC or it's busy [ 233.428987][T12439] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1988'. [ 233.507412][ T5735] usb 5-1: Using ep0 maxpacket: 32 [ 233.508153][ T5735] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.509150][ T5735] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 233.511867][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.511885][ T5735] usb 5-1: Product: syz [ 233.511896][ T5735] usb 5-1: Manufacturer: syz [ 233.511908][ T5735] usb 5-1: SerialNumber: syz [ 233.516113][ T5735] usb 5-1: config 0 descriptor?? [ 233.516787][T12428] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.519892][ T5735] hub 5-1:0.0: bad descriptor, ignoring hub [ 233.519912][ T5735] hub 5-1:0.0: probe with driver hub failed with error -5 [ 234.222849][T12458] FAULT_INJECTION: forcing a failure. [ 234.222849][T12458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.222877][T12458] CPU: 3 UID: 0 PID: 12458 Comm: syz.8.1995 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.222898][T12458] Tainted: [L]=SOFTLOCKUP [ 234.222903][T12458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.222912][T12458] Call Trace: [ 234.222917][T12458] [ 234.222923][T12458] dump_stack_lvl+0x100/0x190 [ 234.222952][T12458] should_fail_ex.cold+0x5/0xa [ 234.222977][T12458] ? prepare_alloc_pages+0x16d/0x5b0 [ 234.223000][T12458] should_fail_alloc_page+0xeb/0x140 [ 234.223022][T12458] prepare_alloc_pages+0x1f0/0x5b0 [ 234.223047][T12458] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 234.223079][T12458] ? rcu_is_watching+0x13/0xc0 [ 234.223103][T12458] ? __lock_acquire+0x5c0/0x1f40 [ 234.223121][T12458] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.223146][T12458] ? __css_rstat_updated+0x1ce/0x590 [ 234.223167][T12458] ? lock_acquire+0x1d1/0x380 [ 234.223203][T12458] ? do_raw_spin_lock+0x128/0x260 [ 234.223223][T12458] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 234.223244][T12458] ? find_held_lock+0x2b/0x80 [ 234.223271][T12458] ? __lock_acquire+0x5c0/0x1f40 [ 234.223290][T12458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.223311][T12458] ? policy_nodemask+0xed/0x4f0 [ 234.223333][T12458] alloc_pages_mpol+0x201/0x550 [ 234.223356][T12458] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 234.223383][T12458] folio_alloc_mpol_noprof+0x36/0x260 [ 234.223409][T12458] shmem_alloc_folio+0x135/0x160 [ 234.223430][T12458] shmem_alloc_and_add_folio+0x371/0xd40 [ 234.223456][T12458] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 234.223480][T12458] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 234.223506][T12458] shmem_get_folio_gfp+0x75b/0x1980 [ 234.223532][T12458] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 234.223555][T12458] ? filemap_map_pages+0x114a/0x2100 [ 234.223579][T12458] shmem_fault+0x1fb/0xa30 [ 234.223601][T12458] ? __pfx_shmem_fault+0x10/0x10 [ 234.223625][T12458] ? __pfx_filemap_map_pages+0x10/0x10 [ 234.223647][T12458] ? find_held_lock+0x2b/0x80 [ 234.223669][T12458] ? __pfx_filemap_map_pages+0x10/0x10 [ 234.223687][T12458] __do_fault+0x10b/0x440 [ 234.223703][T12458] do_fault+0xb3f/0x1830 [ 234.223721][T12458] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 234.223744][T12458] ? __pfx_do_fault+0x10/0x10 [ 234.223760][T12458] ? rcu_read_unlock+0x2d/0xb0 [ 234.223780][T12458] ? rcu_read_unlock+0x2d/0xb0 [ 234.223800][T12458] ? __pte_offset_map+0x179/0x310 [ 234.223846][T12458] __handle_mm_fault+0x150b/0x2f60 [ 234.223876][T12458] ? __pfx___handle_mm_fault+0x10/0x10 [ 234.223898][T12458] ? pte_offset_map_lock+0x174/0x320 [ 234.223916][T12458] ? find_held_lock+0x2b/0x80 [ 234.223938][T12458] ? find_held_lock+0x2b/0x80 [ 234.223965][T12458] ? follow_page_pte+0x536/0x1050 [ 234.223994][T12458] handle_mm_fault+0x363/0xa20 [ 234.224019][T12458] __get_user_pages+0x8ae/0x2c30 [ 234.224041][T12458] ? __pfx_mt_find+0x10/0x10 [ 234.224066][T12458] ? __pfx___get_user_pages+0x10/0x10 [ 234.224092][T12458] populate_vma_page_range+0x267/0x3f0 [ 234.224112][T12458] ? __pfx_populate_vma_page_range+0x10/0x10 [ 234.224132][T12458] ? __pfx_find_vma_intersection+0x10/0x10 [ 234.224155][T12458] __mm_populate+0x107/0x3a0 [ 234.224174][T12458] ? __pfx___mm_populate+0x10/0x10 [ 234.224193][T12458] ? up_write+0x2dc/0x5b0 [ 234.224213][T12458] vm_mmap_pgoff+0x441/0x470 [ 234.224231][T12458] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 234.224253][T12458] ? __pfx_do_futex+0x10/0x10 [ 234.224277][T12458] ksys_mmap_pgoff+0xe4/0x610 [ 234.224294][T12458] ? __x64_sys_futex+0x358/0x4d0 [ 234.224314][T12458] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 234.224331][T12458] ? __pfx___x64_sys_futex+0x10/0x10 [ 234.224355][T12458] __x64_sys_mmap+0x125/0x190 [ 234.224375][T12458] do_syscall_64+0x123/0x790 [ 234.224396][T12458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.224412][T12458] RIP: 0033:0x7f95adf9e159 [ 234.224425][T12458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.224439][T12458] RSP: 002b:00007f95aee5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 234.224455][T12458] RAX: ffffffffffffffda RBX: 00007f95ae225fa0 RCX: 00007f95adf9e159 [ 234.224465][T12458] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 234.224477][T12458] RBP: 00007f95ae03503b R08: ffffffffffffffff R09: 0000000000000000 [ 234.224487][T12458] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 234.224496][T12458] R13: 00007f95ae226038 R14: 00007f95ae225fa0 R15: 00007ffcf8cbec28 [ 234.224518][T12458] [ 234.297281][ T5090] Bluetooth: hci1: command tx timeout [ 234.302409][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.307693][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.308453][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.309137][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.309581][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.502002][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1997'. [ 234.801644][T12459] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.801721][T12459] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.801781][T12459] bridge_slave_0: entered allmulticast mode [ 234.802472][T12459] bridge_slave_0: entered promiscuous mode [ 234.803998][T12459] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.804059][T12459] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.804124][T12459] bridge_slave_1: entered allmulticast mode [ 234.804846][T12459] bridge_slave_1: entered promiscuous mode [ 234.819061][T12459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.821729][T12459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.982430][T12459] team0: Port device team_slave_0 added [ 235.012618][T12459] team0: Port device team_slave_1 added [ 235.060169][T12459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.060181][T12459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.060193][T12459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.061041][T12459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.061049][T12459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.061061][T12459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.104002][T12502] udc dummy_udc.0: failed to start g1: -19 [ 235.105256][T12502] UDC core: g1: couldn't find an available UDC or it's busy [ 235.145619][T12459] hsr_slave_0: entered promiscuous mode [ 235.146862][T12459] hsr_slave_1: entered promiscuous mode [ 235.147583][T12459] debugfs: 'hsr0' already exists in 'hsr' [ 235.147601][T12459] Cannot create hsr debugfs directory [ 235.315186][ T43] audit: type=1400 audit(1789414597.857:986): avc: denied { write } for pid=12503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.381704][ T43] audit: type=1400 audit(1789414597.927:987): avc: denied { write } for pid=12506 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.601146][T12511] FAULT_INJECTION: forcing a failure. [ 235.601146][T12511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.601169][T12511] CPU: 3 UID: 0 PID: 12511 Comm: syz.9.2004 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.601184][T12511] Tainted: [L]=SOFTLOCKUP [ 235.601188][T12511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.601195][T12511] Call Trace: [ 235.601199][T12511] [ 235.601204][T12511] dump_stack_lvl+0x100/0x190 [ 235.601224][T12511] should_fail_ex.cold+0x5/0xa [ 235.601238][T12511] ? prepare_alloc_pages+0x16d/0x5b0 [ 235.601255][T12511] should_fail_alloc_page+0xeb/0x140 [ 235.601270][T12511] prepare_alloc_pages+0x1f0/0x5b0 [ 235.601287][T12511] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 235.601308][T12511] ? rcu_is_watching+0x13/0xc0 [ 235.601324][T12511] ? __lock_acquire+0x5c0/0x1f40 [ 235.601337][T12511] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.601357][T12511] ? __css_rstat_updated+0x1ce/0x590 [ 235.601372][T12511] ? lock_acquire+0x1d1/0x380 [ 235.601383][T12511] ? do_raw_spin_lock+0x128/0x260 [ 235.601397][T12511] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 235.601411][T12511] ? find_held_lock+0x2b/0x80 [ 235.601430][T12511] ? __lock_acquire+0x5c0/0x1f40 [ 235.601442][T12511] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.601456][T12511] ? policy_nodemask+0xed/0x4f0 [ 235.601472][T12511] alloc_pages_mpol+0x201/0x550 [ 235.601489][T12511] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 235.601507][T12511] folio_alloc_mpol_noprof+0x36/0x260 [ 235.601524][T12511] shmem_alloc_folio+0x135/0x160 [ 235.601541][T12511] shmem_alloc_and_add_folio+0x371/0xd40 [ 235.601559][T12511] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 235.601576][T12511] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 235.601595][T12511] shmem_get_folio_gfp+0x75b/0x1980 [ 235.601614][T12511] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 235.601631][T12511] ? filemap_map_pages+0x114a/0x2100 [ 235.601648][T12511] shmem_fault+0x1fb/0xa30 [ 235.601665][T12511] ? __pfx_shmem_fault+0x10/0x10 [ 235.601682][T12511] ? __pfx_filemap_map_pages+0x10/0x10 [ 235.601698][T12511] ? find_held_lock+0x2b/0x80 [ 235.601714][T12511] ? __pfx_filemap_map_pages+0x10/0x10 [ 235.601728][T12511] __do_fault+0x10b/0x440 [ 235.601740][T12511] do_fault+0xb3f/0x1830 [ 235.601753][T12511] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 235.601770][T12511] ? __pfx_do_fault+0x10/0x10 [ 235.601782][T12511] ? rcu_read_unlock+0x2d/0xb0 [ 235.601797][T12511] ? rcu_read_unlock+0x2d/0xb0 [ 235.601812][T12511] ? __pte_offset_map+0x179/0x310 [ 235.601830][T12511] __handle_mm_fault+0x150b/0x2f60 [ 235.601876][T12511] ? __pfx___handle_mm_fault+0x10/0x10 [ 235.601904][T12511] ? pte_offset_map_lock+0x174/0x320 [ 235.601928][T12511] ? find_held_lock+0x2b/0x80 [ 235.601951][T12511] ? find_held_lock+0x2b/0x80 [ 235.601975][T12511] ? follow_page_pte+0x536/0x1050 [ 235.602017][T12511] handle_mm_fault+0x363/0xa20 [ 235.602049][T12511] __get_user_pages+0x8ae/0x2c30 [ 235.602073][T12511] ? __pfx_mt_find+0x10/0x10 [ 235.602099][T12511] ? __pfx___get_user_pages+0x10/0x10 [ 235.602132][T12511] populate_vma_page_range+0x267/0x3f0 [ 235.602156][T12511] ? __pfx_populate_vma_page_range+0x10/0x10 [ 235.602179][T12511] ? __pfx_find_vma_intersection+0x10/0x10 [ 235.602196][T12511] __mm_populate+0x107/0x3a0 [ 235.602210][T12511] ? __pfx___mm_populate+0x10/0x10 [ 235.602224][T12511] ? up_write+0x2dc/0x5b0 [ 235.602239][T12511] vm_mmap_pgoff+0x441/0x470 [ 235.602252][T12511] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 235.602267][T12511] ? __pfx_do_futex+0x10/0x10 [ 235.602284][T12511] ksys_mmap_pgoff+0xe4/0x610 [ 235.602297][T12511] ? __x64_sys_futex+0x358/0x4d0 [ 235.602312][T12511] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 235.602324][T12511] ? xfd_validate_state+0x129/0x190 [ 235.602339][T12511] __x64_sys_mmap+0x125/0x190 [ 235.602353][T12511] do_syscall_64+0x123/0x790 [ 235.602369][T12511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.602380][T12511] RIP: 0033:0x7efd0cb9e159 [ 235.602390][T12511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.602400][T12511] RSP: 002b:00007efd0d9e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 235.602413][T12511] RAX: ffffffffffffffda RBX: 00007efd0ce25fa0 RCX: 00007efd0cb9e159 [ 235.602420][T12511] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 235.602426][T12511] RBP: 00007efd0cc3503b R08: ffffffffffffffff R09: 0000000000000000 [ 235.602433][T12511] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 235.602439][T12511] R13: 00007efd0ce26038 R14: 00007efd0ce25fa0 R15: 00007ffcc082bfd8 [ 235.602453][T12511] [ 235.910541][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2006'. [ 235.974001][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 235.974018][ T43] audit: type=1400 audit(1789414598.517:991): avc: denied { write } for pid=12520 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.129990][ T43] audit: type=1400 audit(1789414598.677:992): avc: denied { write } for pid=12529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.148449][T12459] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.151508][T12459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.152320][T12459] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.155213][T12459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.155875][T12459] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.162572][T12459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.163518][T12459] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.172725][T12459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.236501][T12459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.250258][ T43] audit: type=1400 audit(1789414598.797:993): avc: denied { write } for pid=12541 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.264010][T12459] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.273328][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.273415][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.288148][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.288230][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.377246][ T66] Bluetooth: hci4: command tx timeout [ 236.378230][ T5734] Bluetooth: hci1: command tx timeout [ 236.401795][ T43] audit: type=1400 audit(1789414598.947:994): avc: denied { write } for pid=12544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.480544][ T43] audit: type=1400 audit(1789414599.027:995): avc: denied { write } for pid=12551 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.609516][ T43] audit: type=1400 audit(1789414599.157:996): avc: denied { write } for pid=12556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.662802][T12459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.666382][T12563] binder: 12562:12563 ioctl c0306201 200000000080 returned -14 [ 236.699959][ T43] audit: type=1400 audit(1789414599.247:997): avc: denied { write } for pid=12564 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.700037][T12459] veth0_vlan: entered promiscuous mode [ 236.709455][T12459] veth1_vlan: entered promiscuous mode [ 236.728312][T12459] veth0_macvtap: entered promiscuous mode [ 236.732006][T12459] veth1_macvtap: entered promiscuous mode [ 236.742029][T12459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.744815][T12459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.823068][ T43] audit: type=1400 audit(1789414599.367:998): avc: denied { write } for pid=12566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.909196][T12573] binder: 12562:12573 ioctl c0306201 2000000003c0 returned -14 [ 236.922589][ T43] audit: type=1400 audit(1789414599.467:999): avc: denied { write } for pid=12572 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.022952][ T8974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.022966][ T8974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.084909][ T8973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.084931][ T8973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.088346][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.088755][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.088776][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.088794][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.131881][ T43] audit: type=1400 audit(1789414599.677:1000): avc: denied { write } for pid=12576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.234408][T12584] program syz.1.1994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.423002][ T6279] usb 5-1: USB disconnect, device number 3 [ 237.873868][T12607] udc dummy_udc.0: failed to start g1: -19 [ 237.874489][T12607] UDC core: g1: couldn't find an available UDC or it's busy [ 238.452655][T12635] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 238.457592][ T5734] Bluetooth: hci1: command tx timeout [ 238.457621][ T66] Bluetooth: hci4: command tx timeout [ 238.561786][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 238.622872][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2022'. [ 238.764449][T12649] binder: 12648:12649 ioctl c0306201 200000000080 returned -14 [ 238.770782][T12649] binder: 12648:12649 ioctl c0306201 2000000003c0 returned -14 [ 239.053100][ T5782] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.128287][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2032'. [ 239.201345][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.202011][ T5782] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.209454][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.214878][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.224048][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.225578][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.279794][T12664] udc dummy_udc.0: failed to start g1: -19 [ 239.285909][T12664] UDC core: g1: couldn't find an available UDC or it's busy [ 239.304233][ T5782] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.357837][T12669] binder: 12668:12669 ioctl c0306201 200000000080 returned -14 [ 239.358403][T12669] binder: 12668:12669 ioctl c0306201 2000000003c0 returned -14 [ 239.398518][ T5782] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.642047][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2040'. [ 239.700788][ T5782] bridge_slave_1: left allmulticast mode [ 239.700813][ T5782] bridge_slave_1: left promiscuous mode [ 239.701076][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.705704][ T5782] bridge_slave_0: left allmulticast mode [ 239.705726][ T5782] bridge_slave_0: left promiscuous mode [ 239.705888][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.941686][ T5782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.946072][ T5782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.952085][ T5782] bond0 (unregistering): Released all slaves [ 239.966665][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 240.267005][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 240.281959][ T5782] hsr_slave_0: left promiscuous mode [ 240.282292][ T5782] hsr_slave_1: left promiscuous mode [ 240.282655][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.282666][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.283078][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.283088][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.285691][ T5782] veth1_macvtap: left promiscuous mode [ 240.285710][ T5782] veth0_macvtap: left promiscuous mode [ 240.285753][ T5782] veth1_vlan: left promiscuous mode [ 240.285781][ T5782] veth0_vlan: left promiscuous mode [ 240.597512][ T5734] Bluetooth: hci4: command tx timeout [ 240.628039][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 240.628791][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 240.629673][ T30] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 240.629693][ T30] usb 6-1: config 0 has no interface number 0 [ 240.629724][ T30] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.629741][ T30] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 240.629762][ T30] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.629783][ T30] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 240.629801][ T30] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.631869][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.631889][ T30] usb 6-1: Product: syz [ 240.631903][ T30] usb 6-1: Manufacturer: syz [ 240.631914][ T30] usb 6-1: SerialNumber: syz [ 240.634295][ T30] usb 6-1: config 0 descriptor?? [ 240.640005][ T30] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input17 [ 240.905285][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2056'. [ 240.997814][ T9] usb 6-1: USB disconnect, device number 4 [ 241.005221][T12734] udc dummy_udc.0: failed to start g1: -19 [ 241.005692][T12734] UDC core: g1: couldn't find an available UDC or it's busy [ 241.291557][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 241.312928][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 241.337731][ T5734] Bluetooth: hci1: command tx timeout [ 241.451965][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 241.564890][T12661] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.564966][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.565070][T12661] bridge_slave_0: entered allmulticast mode [ 241.566161][T12661] bridge_slave_0: entered promiscuous mode [ 241.569885][T12661] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.569954][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.570054][T12661] bridge_slave_1: entered allmulticast mode [ 241.570794][T12661] bridge_slave_1: entered promiscuous mode [ 241.573410][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 241.573424][ T43] audit: type=1400 audit(1789414604.097:1020): avc: denied { write } for pid=12739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.592596][T12661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.594011][T12661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.614722][T12661] team0: Port device team_slave_0 added [ 241.618044][T12661] team0: Port device team_slave_1 added [ 241.650996][ T43] audit: type=1400 audit(1789414604.197:1021): avc: denied { write } for pid=12747 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.654549][T12661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.654560][T12661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.654573][T12661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.655397][T12661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.655404][T12661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.655417][T12661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.706778][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11 [ 241.722328][T12661] hsr_slave_0: entered promiscuous mode [ 241.722855][T12661] hsr_slave_1: entered promiscuous mode [ 241.723143][T12661] debugfs: 'hsr0' already exists in 'hsr' [ 241.723153][T12661] Cannot create hsr debugfs directory [ 241.867403][ T43] audit: type=1400 audit(1789414604.407:1022): avc: denied { write } for pid=12754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.949658][ T43] audit: type=1400 audit(1789414604.497:1023): avc: denied { write } for pid=12763 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.974199][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2064'. [ 242.022092][ T43] audit: type=1400 audit(1789414604.567:1024): avc: denied { write } for pid=12770 comm="syz.8.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 242.074907][ T43] audit: type=1400 audit(1789414604.617:1025): avc: denied { connect } for pid=12770 comm="syz.8.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 242.107828][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12 [ 242.209994][ T43] audit: type=1400 audit(1789414604.757:1026): avc: denied { write } for pid=12774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.264401][ T43] audit: type=1400 audit(1789414604.807:1027): avc: denied { write } for pid=12781 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.282251][T12784] udc dummy_udc.0: failed to start g1: -19 [ 242.282838][T12784] UDC core: g1: couldn't find an available UDC or it's busy [ 242.309188][ T5445] 8021q: adding VLAN 0 to HW filter on device eth13 [ 242.466780][ T66] Bluetooth: hci3: command 0x0406 tx timeout [ 242.538163][ T43] audit: type=1400 audit(1789414605.087:1028): avc: denied { write } for pid=12792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.629089][ T66] Bluetooth: hci4: command tx timeout [ 242.632143][ T43] audit: type=1400 audit(1789414605.177:1029): avc: denied { write } for pid=12797 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.663108][T12661] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.666566][T12661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.667917][T12661] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.673514][T12661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.674409][T12661] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.687242][T12661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.688197][T12661] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.701280][T12661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.872469][T12661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.892841][T12661] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.904042][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.904119][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.913823][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.913894][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.213857][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 243.271104][T12661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.385906][T12848] udc dummy_udc.0: failed to start g1: -19 [ 243.390018][T12848] UDC core: g1: couldn't find an available UDC or it's busy [ 243.426805][ T66] Bluetooth: hci1: command tx timeout [ 243.692140][T12661] veth0_vlan: entered promiscuous mode [ 243.699051][T12661] veth1_vlan: entered promiscuous mode [ 243.758593][T12661] veth0_macvtap: entered promiscuous mode [ 243.760862][T12661] veth1_macvtap: entered promiscuous mode [ 243.767187][T12661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.770504][T12661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.857222][ T5782] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.857566][ T5782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.857595][ T5782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.857621][ T5782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.871407][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.871427][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.898750][T12869] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 243.906056][ T8974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.906074][ T8974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.470413][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2083'. [ 244.919363][T12918] udc dummy_udc.0: failed to start g1: -19 [ 244.921807][T12918] UDC core: g1: couldn't find an available UDC or it's busy [ 245.496680][ T66] Bluetooth: hci1: command tx timeout [ 245.521259][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 245.952281][T12950] udc dummy_udc.0: failed to start g1: -19 [ 245.954601][T12950] UDC core: g1: couldn't find an available UDC or it's busy [ 246.540464][T12969] netlink: Unknown conntrack attr (0) [ 246.579314][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 246.579331][ T43] audit: type=1400 audit(1789414609.128:1056): avc: denied { write } for pid=12970 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.685564][T12982] udc dummy_udc.0: failed to start g1: -19 [ 246.692591][T12982] UDC core: g1: couldn't find an available UDC or it's busy [ 246.718550][T12979] befs: (nbd4): unable to read superblock [ 246.946536][ T43] audit: type=1400 audit(1789414609.488:1057): avc: denied { write } for pid=12984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.078932][ T43] audit: type=1400 audit(1789414609.628:1058): avc: denied { write } for pid=12991 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.134512][T12998] jffs2: notice: (12998) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 247.136970][ T43] audit: type=1400 audit(1789414609.688:1059): avc: denied { write } for pid=12997 comm="syz.0.2111" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.155060][T13001] xt_hashlimit: size too large, truncated to 1048576 [ 247.223919][T13004] netlink: 'syz.8.2112': attribute type 2 has an invalid length. [ 247.272076][ T43] audit: type=1400 audit(1789414609.818:1060): avc: denied { write } for pid=13005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.348274][ T43] audit: type=1400 audit(1789414609.898:1061): avc: denied { write } for pid=13008 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.576520][ T66] Bluetooth: hci1: command tx timeout [ 250.426443][T13066] udc dummy_udc.0: failed to start g1: -19 [ 250.426800][T13066] UDC core: g1: couldn't find an available UDC or it's busy [ 250.643875][T13085] udc dummy_udc.0: failed to start g1: -19 [ 250.644514][T13085] UDC core: g1: couldn't find an available UDC or it's busy [ 251.844517][T12348] udevd[12348]: 'ata_id --export /dev/sda' [13109] terminated by signal 11 (Segmentation fault) [ 251.967874][T13110] udevd[13110]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Exec format error [ 252.195731][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.300397][ T5734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.305625][ T5734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.314978][ T5734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.319520][ T5734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.320136][ T5734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.399118][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.562942][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.718535][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.850045][ T43] audit: type=1400 audit(1789414615.398:1062): avc: denied { write } for pid=13147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.530916][ T43] audit: type=1400 audit(1789414616.078:1063): avc: denied { write } for pid=13152 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.759385][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.765525][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.777091][ T13] bridge_slave_1: left allmulticast mode [ 253.777107][ T13] bridge_slave_1: left promiscuous mode [ 253.777213][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.782258][ T13] bridge_slave_0: left allmulticast mode [ 253.782274][ T13] bridge_slave_0: left promiscuous mode [ 253.782394][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.788802][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.802875][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.815523][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.091650][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.101635][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.102733][ T13] bond0 (unregistering): Released all slaves [ 254.214896][ T43] audit: type=1400 audit(1789414616.758:1064): avc: denied { write } for pid=13176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.264323][ T43] audit: type=1400 audit(1789414616.808:1065): avc: denied { write } for pid=13181 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.297564][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.297687][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.297746][T13120] bridge_slave_0: entered allmulticast mode [ 254.300648][T13120] bridge_slave_0: entered promiscuous mode [ 254.311491][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 254.311774][T13120] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.311862][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.311931][T13120] bridge_slave_1: entered allmulticast mode [ 254.313034][T13120] bridge_slave_1: entered promiscuous mode [ 254.376418][ T66] Bluetooth: hci4: command tx timeout [ 254.382011][T13120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.391184][T13120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.417651][T13120] team0: Port device team_slave_0 added [ 254.424484][T13120] team0: Port device team_slave_1 added [ 254.461506][ T43] audit: type=1400 audit(1789414617.008:1066): avc: denied { write } for pid=13191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.480647][ T13] hsr_slave_0: left promiscuous mode [ 254.505959][ T13] hsr_slave_1: left promiscuous mode [ 254.506732][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.506744][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.518822][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.520636][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.541666][ T43] audit: type=1400 audit(1789414617.088:1067): avc: denied { write } for pid=13194 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.569661][ T13] veth1_macvtap: left promiscuous mode [ 254.569686][ T13] veth0_macvtap: left promiscuous mode [ 254.569730][ T13] veth1_vlan: left promiscuous mode [ 254.569763][ T13] veth0_vlan: left promiscuous mode [ 254.850463][ T13] team0 (unregistering): Port device team_slave_1 removed [ 254.855257][ T13] team0 (unregistering): Port device team_slave_0 removed [ 255.094696][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 255.106977][T13120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.106995][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.107008][T13120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.108789][T13120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.108803][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.108825][T13120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.232767][T13120] hsr_slave_0: entered promiscuous mode [ 255.233196][T13120] hsr_slave_1: entered promiscuous mode [ 255.233470][T13120] debugfs: 'hsr0' already exists in 'hsr' [ 255.233481][T13120] Cannot create hsr debugfs directory [ 255.658890][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.658924][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.705882][ T43] audit: type=1400 audit(1789414618.248:1068): avc: denied { write } for pid=13227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.794682][ T43] audit: type=1400 audit(1789414618.338:1069): avc: denied { write } for pid=13232 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.969536][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 255.976276][ T66] Bluetooth: hci1: command tx timeout [ 256.052512][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.091493][T13159] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.094292][T13159] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.094426][T13159] bridge_slave_0: entered allmulticast mode [ 256.095770][T13159] bridge_slave_0: entered promiscuous mode [ 256.100322][T13159] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.100395][T13159] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.100505][T13159] bridge_slave_1: entered allmulticast mode [ 256.101732][T13159] bridge_slave_1: entered promiscuous mode [ 256.165182][T13249] xt_hashlimit: size too large, truncated to 1048576 [ 256.167752][ T43] audit: type=1400 audit(1789414618.718:1070): avc: denied { write } for pid=13245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.208237][T13251] netlink: 'syz.8.2193': attribute type 2 has an invalid length. [ 256.211010][T13159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.213534][T13159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.244362][ T43] audit: type=1400 audit(1789414618.788:1071): avc: denied { write } for pid=13252 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.269902][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.289500][T13159] team0: Port device team_slave_0 added [ 256.291336][T13159] team0: Port device team_slave_1 added [ 256.368219][T13159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.368232][T13159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.368245][T13159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.400823][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.407389][T13159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.407401][T13159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.407420][T13159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.456010][ T66] Bluetooth: hci4: command tx timeout [ 256.519138][T13159] hsr_slave_0: entered promiscuous mode [ 256.519767][T13159] hsr_slave_1: entered promiscuous mode [ 256.520064][T13159] debugfs: 'hsr0' already exists in 'hsr' [ 256.520075][T13159] Cannot create hsr debugfs directory [ 256.552405][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.487199][T13120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.497429][T13120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.503398][T13120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.511452][T13120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.512355][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 257.512484][T13120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.516801][T13120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.520725][T13120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.538700][T13120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.607635][ T13] bridge_slave_1: left allmulticast mode [ 257.607659][ T13] bridge_slave_1: left promiscuous mode [ 257.607864][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.612374][ T13] bridge_slave_0: left allmulticast mode [ 257.612398][ T13] bridge_slave_0: left promiscuous mode [ 257.612569][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.791455][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.794255][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.803568][ T13] bond0 (unregistering): Released all slaves [ 257.863777][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 257.863794][ T43] audit: type=1400 audit(1789414620.408:1075): avc: denied { write } for pid=13279 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.056086][ T66] Bluetooth: hci1: command tx timeout [ 258.201270][ T43] audit: type=1400 audit(1789414620.748:1076): avc: denied { write } for pid=13301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.224523][ T13] hsr_slave_0: left promiscuous mode [ 258.225350][ T13] hsr_slave_1: left promiscuous mode [ 258.225724][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.225735][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.235529][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.235546][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.244089][ T13] veth1_macvtap: left promiscuous mode [ 258.244139][ T13] veth0_macvtap: left promiscuous mode [ 258.244220][ T13] veth1_vlan: left promiscuous mode [ 258.244282][ T13] veth0_vlan: left promiscuous mode [ 258.264022][ T43] audit: type=1400 audit(1789414620.808:1077): avc: denied { write } for pid=13305 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.379595][ T43] audit: type=1400 audit(1789414620.928:1078): avc: denied { write } for pid=13307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.437951][ T13] team0 (unregistering): Port device team_slave_1 removed [ 258.442422][ T13] team0 (unregistering): Port device team_slave_0 removed [ 258.443377][ T43] audit: type=1400 audit(1789414620.988:1079): avc: denied { write } for pid=13310 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.544341][ T43] audit: type=1400 audit(1789414621.088:1080): avc: denied { write } for pid=13312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.548479][ T66] Bluetooth: hci4: command tx timeout [ 258.585114][T13120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.591767][T13120] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.602673][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.602754][ T7366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.606484][ T43] audit: type=1400 audit(1789414621.158:1081): avc: denied { write } for pid=13315 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.614694][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.614775][ T7366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.770445][T13159] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.790596][T13159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.791356][T13159] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.803109][ T43] audit: type=1400 audit(1789414621.348:1082): avc: denied { write } for pid=13318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.803842][T13159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.804430][T13159] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.808280][T13159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.808789][T13159] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.831741][T13159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.880058][T13159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.889151][T13159] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.894420][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.894499][ T7362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.896154][ T43] audit: type=1400 audit(1789414621.448:1083): avc: denied { write } for pid=13331 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.910447][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.910564][ T8973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.155873][ T43] audit: type=1400 audit(1789414621.608:1084): avc: denied { write } for pid=13341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.505923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 259.602796][T13120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.812052][T13120] veth0_vlan: entered promiscuous mode [ 259.831567][T13120] veth1_vlan: entered promiscuous mode [ 259.871755][T13120] veth0_macvtap: entered promiscuous mode [ 259.878775][T13159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.880770][T13120] veth1_macvtap: entered promiscuous mode [ 259.931040][T13120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.942596][T13120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.973591][T13159] veth0_vlan: entered promiscuous mode [ 260.004208][T13159] veth1_vlan: entered promiscuous mode [ 260.137200][ T66] Bluetooth: hci1: command tx timeout [ 260.141940][T13159] veth0_macvtap: entered promiscuous mode [ 260.144580][ T627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.144598][ T627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.159320][T13159] veth1_macvtap: entered promiscuous mode [ 260.190702][T13159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.194346][T13159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.199562][T13415] nvme nvme0: failed to connect socket: -111 [ 260.231472][ T627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.231486][ T627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.298984][ T5809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.299012][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.299030][ T5809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.299047][ T5809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.299064][ T5809] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.299081][ T5809] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.299098][ T5809] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.299115][ T5809] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.347446][T13423] i2c_designware pcspkr: error -EINVAL: invalid resource (null) [ 260.347474][T13423] i2c_designware pcspkr: probe with driver i2c_designware failed with error -22 [ 260.404164][ T7364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.404184][ T7364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.430267][ T7364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.430294][ T7364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.627101][ T66] Bluetooth: hci4: command tx timeout [ 260.826121][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 261.034287][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 261.218411][T13475] i2c_designware pcspkr: error -EINVAL: invalid resource (null) [ 261.218443][T13475] i2c_designware pcspkr: probe with driver i2c_designware failed with error -22 [ 261.257916][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 261.520192][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 262.065800][ T42] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 262.216244][ T66] Bluetooth: hci1: command tx timeout [ 262.216726][ T42] usb 13-1: New USB device found, idVendor=08ca, idProduct=0001, bcdDevice= 1.00 [ 262.217522][ T42] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.426924][ T42] aiptek 13-1:1.0: Aiptek using 400 ms programming speed [ 263.430983][ T42] input: Aiptek as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/input/input18 [ 263.488631][ T42] usb 13-1: USB disconnect, device number 3 [ 263.488677][ C2] aiptek 13-1:1.0: aiptek_irq - usb_submit_urb failed with result -19 [ 264.017745][T13520] ftl_cs: FTL header not found. [ 264.030922][ T7902] udevd[7902]: 'mtd_probe /dev/mtd2ro' [13523] terminated by signal 11 (Segmentation fault) [ 264.063828][T13520] block2mtd: mtd2: [/dev/ram0] erase_size = 128KiB [131072] [ 265.470937][T13541] bq24190-charger 0-006b: Can't get irq info [ 265.471032][T13541] bq24190-charger 0-006b: probe with driver bq24190-charger failed with error -22 [ 265.471185][T13541] i2c i2c-0: new_device: Instantiated device bq24190 at 0x6b [ 265.524884][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 265.524902][ T43] audit: type=1400 audit(1789414628.069:1111): avc: denied { unmount } for pid=10846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 266.025467][ T1043] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 266.176208][ T1043] usb 13-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 266.177332][ T1043] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.177360][ T1043] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.178790][ T1043] usb 13-1: config 0 descriptor?? [ 266.589885][ T1043] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0 [ 266.589904][ T1043] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0 [ 266.589916][ T1043] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0 [ 266.589928][ T1043] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0 [ 266.589940][ T1043] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0 [ 266.589951][ T1043] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0 [ 266.589963][ T1043] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0 [ 266.589974][ T1043] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0 [ 266.589986][ T1043] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0 [ 266.589997][ T1043] konepure 0003:1E7D:2DBE.0005: unknown main item tag 0x0 [ 266.592414][ T1043] konepure 0003:1E7D:2DBE.0005: hidraw1: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.8-1/input0 [ 266.623320][T12348] udevd[12348]: 'fido_id' [13560] terminated by signal 11 (Segmentation fault) [ 266.791036][ T6639] usb 13-1: USB disconnect, device number 4 [ 267.271755][ T43] audit: type=1400 audit(1789414629.819:1112): avc: denied { write } for pid=13563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.334971][ T43] audit: type=1400 audit(1789414629.879:1113): avc: denied { write } for pid=13566 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.927360][ T43] audit: type=1400 audit(1789414633.479:1114): avc: denied { write } for pid=13573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.987370][ T43] audit: type=1400 audit(1789414633.539:1115): avc: denied { write } for pid=13576 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.220610][ T43] audit: type=1400 audit(1789414633.769:1116): avc: denied { write } for pid=13579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.289211][ T43] audit: type=1400 audit(1789414633.839:1117): avc: denied { write } for pid=13582 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.051063][ T43] audit: type=1400 audit(1789414634.599:1118): avc: denied { write } for pid=13585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.092861][ T43] audit: type=1400 audit(1789414634.639:1119): avc: denied { write } for pid=13588 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.315612][ T43] audit: type=1400 audit(1789414634.859:1120): avc: denied { write } for pid=13591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.364058][ T43] audit: type=1400 audit(1789414634.909:1121): avc: denied { write } for pid=13594 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.143721][ T43] audit: type=1400 audit(1789414635.689:1122): avc: denied { write } for pid=13597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.204230][ T43] audit: type=1400 audit(1789414635.749:1123): avc: denied { write } for pid=13600 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.645418][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 276.645431][ T43] audit: type=1400 audit(1789414639.189:1128): avc: denied { write } for pid=13620 comm="syz.8.2255" name="subsystems" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 276.699305][ T5734] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.704419][ T5734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.705875][ T5734] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.706267][ T5734] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.706549][ T5734] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.730643][ T5734] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 276.742977][ T5734] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 276.744113][ T5090] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 276.751779][ T5734] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 276.753741][ T5734] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 276.780220][ T66] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 276.783055][ T66] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 276.783743][ T66] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 276.787957][ T66] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 276.788524][ T66] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 277.262037][T13623] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.262080][T13623] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.262138][T13623] bridge_slave_0: entered allmulticast mode [ 277.262877][T13623] bridge_slave_0: entered promiscuous mode [ 277.270052][T13623] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.270095][T13623] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.270159][T13623] bridge_slave_1: entered allmulticast mode [ 277.271054][T13623] bridge_slave_1: entered promiscuous mode [ 277.300713][T13623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.302657][T13623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.333538][T13627] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.333581][T13627] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.333641][T13627] bridge_slave_0: entered allmulticast mode [ 277.334371][T13627] bridge_slave_0: entered promiscuous mode [ 277.343609][T13627] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.343669][T13627] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.343734][T13627] bridge_slave_1: entered allmulticast mode [ 277.344431][T13627] bridge_slave_1: entered promiscuous mode [ 277.365401][T13623] team0: Port device team_slave_0 added [ 277.378331][T13627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.379220][T13623] team0: Port device team_slave_1 added [ 277.392140][T13627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.409668][T13623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.409679][T13623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.409692][T13623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.409939][T13632] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.409977][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.410125][T13632] bridge_slave_0: entered allmulticast mode [ 277.410840][T13632] bridge_slave_0: entered promiscuous mode [ 277.412012][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.412639][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.412701][T13632] bridge_slave_1: entered allmulticast mode [ 277.413539][T13632] bridge_slave_1: entered promiscuous mode [ 277.420292][T13623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.420302][T13623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.420315][T13623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.431773][T13627] team0: Port device team_slave_0 added [ 277.438782][T13632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.446629][T13627] team0: Port device team_slave_1 added [ 277.456076][T13632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.480511][T13623] hsr_slave_0: entered promiscuous mode [ 277.480964][T13623] hsr_slave_1: entered promiscuous mode [ 277.481273][T13623] debugfs: 'hsr0' already exists in 'hsr' [ 277.481284][T13623] Cannot create hsr debugfs directory [ 277.488386][T13627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.488397][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.488409][T13627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.489222][T13627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.489270][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.489284][T13627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.523112][T13632] team0: Port device team_slave_0 added [ 277.524657][T13632] team0: Port device team_slave_1 added [ 277.549971][T13627] hsr_slave_0: entered promiscuous mode [ 277.550406][T13627] hsr_slave_1: entered promiscuous mode [ 277.550725][T13627] debugfs: 'hsr0' already exists in 'hsr' [ 277.550736][T13627] Cannot create hsr debugfs directory [ 277.560893][T13632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.560904][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.560916][T13632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.567270][T13632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.567280][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.567293][T13632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.651316][T13632] hsr_slave_0: entered promiscuous mode [ 277.651758][T13632] hsr_slave_1: entered promiscuous mode [ 277.652064][T13632] debugfs: 'hsr0' already exists in 'hsr' [ 277.652075][T13632] Cannot create hsr debugfs directory [ 277.762285][T13623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.762326][T13623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.877287][T13623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.877309][T13623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.931814][T13623] bond0: (slave netdevsim1): Releasing backup interface [ 277.933573][T13623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.933594][T13623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.994053][T13623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.994076][T13623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.088790][ T43] audit: type=1400 audit(1789414640.639:1129): avc: denied { write } for pid=13688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.131865][ T43] audit: type=1400 audit(1789414640.679:1130): avc: denied { write } for pid=13691 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.292689][ T43] audit: type=1400 audit(1789414640.839:1131): avc: denied { write } for pid=13693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.355519][ T43] audit: type=1400 audit(1789414640.909:1132): avc: denied { write } for pid=13696 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.431921][ T43] audit: type=1400 audit(1789414640.979:1133): avc: denied { write } for pid=13698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.483192][ T43] audit: type=1400 audit(1789414641.029:1134): avc: denied { write } for pid=13701 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.540917][T13632] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.572427][ T43] audit: type=1400 audit(1789414641.119:1135): avc: denied { write } for pid=13703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.609650][T13632] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.623077][ T43] audit: type=1400 audit(1789414641.169:1136): avc: denied { write } for pid=13706 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.677076][T13632] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.702562][ T43] audit: type=1400 audit(1789414641.249:1137): avc: denied { write } for pid=13708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.729275][T13632] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.784997][ T66] Bluetooth: hci7: command tx timeout [ 278.786193][ T66] Bluetooth: hci8: command tx timeout [ 278.865854][ T66] Bluetooth: hci9: command tx timeout [ 278.908749][T13623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.914059][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.917608][T13623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.920503][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.920892][T13623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.925283][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.927137][T13623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.932562][T13623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.032254][T13627] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 279.044572][T13627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.049308][T13627] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 279.052115][T13627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.053647][T13627] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 279.060100][T13627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.060505][T13627] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 279.064698][T13627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.081415][T13623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.127592][T13623] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.153717][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.153809][ T7366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.176597][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.176643][ T7366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.218912][T13632] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 279.222233][T13632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.227050][T13632] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 279.231399][T13632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.240770][T13632] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 279.242623][T13632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.243033][T13632] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 279.244565][T13632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.312134][T13627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.339788][T13627] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.350565][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.350611][ T8973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.351645][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.351686][ T8973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.373430][T13632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.393758][T13632] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.400815][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.400859][ T7362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.413009][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.413053][ T8975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.584860][T13623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.642674][T13623] veth0_vlan: entered promiscuous mode [ 279.646828][T13623] veth1_vlan: entered promiscuous mode [ 279.663876][T13627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.665960][T13623] veth0_macvtap: entered promiscuous mode [ 279.668242][T13623] veth1_macvtap: entered promiscuous mode [ 279.674543][T13623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.679752][T13623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.749056][T13632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.776494][ T8975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.776509][ T8975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.793941][ T8975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.793956][ T8975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.794910][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.795042][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.795373][T12575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.815305][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.850422][T13806] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 279.906370][T13627] veth0_vlan: entered promiscuous mode [ 279.912500][T13627] veth1_vlan: entered promiscuous mode [ 279.939310][T13627] veth0_macvtap: entered promiscuous mode [ 279.942097][T13627] veth1_macvtap: entered promiscuous mode [ 279.949206][T13627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.955830][T13627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.960791][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.000789][T13632] veth0_vlan: entered promiscuous mode [ 280.032169][T13632] veth1_vlan: entered promiscuous mode [ 280.048742][ T627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.048761][ T627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.128288][T13632] veth0_macvtap: entered promiscuous mode [ 280.135232][T13632] veth1_macvtap: entered promiscuous mode [ 280.140213][ T7364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.140226][ T7364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.156110][T12575] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.156454][ T5809] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.156491][ T5809] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.176392][T13632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.180692][T13632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.200080][T13822] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 280.231372][T13822] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 280.235519][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.235546][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.235565][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.235583][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.294289][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.294304][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.339764][T13828] block2mtd: error: cannot open device /dev/ram0 [ 280.401298][ T627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.401317][ T627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.581627][T13845] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 280.667091][T13852] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 280.669657][T13851] block2mtd: error: cannot open device /dev/ram0 [ 280.686451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 280.765781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 280.804997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 280.834550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 280.854912][ T66] Bluetooth: hci8: command tx timeout [ 280.854936][ T66] Bluetooth: hci7: command tx timeout [ 280.934804][ T5090] Bluetooth: hci9: command tx timeout [ 280.978932][T13868] overlayfs: failed to resolve 'work': -2 [ 281.439360][T13872] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 281.659265][T13880] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 281.773943][T13888] comedi comedi0: probed id does not match board id (0xf != 0x7) [ 281.835850][T13892] overlayfs: failed to resolve 'work': -2 [ 281.844863][ T6639] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 281.995136][ T6639] usb 11-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 1.00 [ 281.995987][ T6639] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.426781][ T6639] arvo 0003:1E7D:30D4.0006: hidraw1: USB HID v1.10 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0 [ 282.438624][T13626] udevd[13626]: 'fido_id' [13900] terminated by signal 11 (Segmentation fault) [ 282.934535][ T5090] Bluetooth: hci7: command tx timeout [ 282.934549][ T66] Bluetooth: hci8: command tx timeout [ 283.024703][ T66] Bluetooth: hci9: command tx timeout [ 283.604479][ T6639] arvo 0003:1E7D:30D4.0006: couldn't init struct arvo_device [ 283.604506][ T6639] arvo 0003:1E7D:30D4.0006: couldn't install keyboard [ 283.606756][ T6639] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -71 [ 283.609012][ T6639] usb 11-1: USB disconnect, device number 7 [ 285.024481][ T66] Bluetooth: hci8: command tx timeout [ 285.024518][ T66] Bluetooth: hci7: command tx timeout [ 285.099147][ T5090] Bluetooth: hci9: command tx timeout [ 292.160322][T13909] PM: suspend entry (deep) [ 292.219040][T12575] Filesystems sync: 0.055 seconds [ 292.991405][T13909] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 292.993484][T13909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.004421][T13909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.004503][T13909] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 293.012386][T13909] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 293.012476][T13909] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 293.017324][T13909] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 293.026381][T13909] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 293.026461][T13909] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 293.031038][T13909] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 293.032417][T13909] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.032461][T13909] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 293.034461][T13909] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 293.039758][T13909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.039841][T13909] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 293.044733][T13909] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 293.049576][T13909] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 293.049660][T13909] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 293.051038][T13909] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 293.055313][T13909] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 293.055397][T13909] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 293.058327][T13909] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 293.063210][T13909] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 293.063289][T13909] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 293.067943][T13909] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 293.079471][T13909] Freezing user space processes [ 293.087854][T13909] ------------[ cut here ]------------ [ 293.087866][T13909] debug_locks && p->lockdep_depth [ 293.087874][T13909] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x211/0x2e0, CPU#3: syz.7.2303/13909 [ 293.098125][T13909] Modules linked in: [ 293.099864][T13909] CPU: 3 UID: 0 PID: 13909 Comm: syz.7.2303 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.104311][T13909] Tainted: [L]=SOFTLOCKUP [ 293.106077][T13909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 293.110264][T13909] RIP: 0010:__set_task_frozen+0x211/0x2e0 [ 293.112688][T13909] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 d8 87 89 00 8b ab a0 0b 00 00 31 ff 89 ee e8 19 40 16 00 85 ed 74 09 e8 a0 45 16 00 90 <0f> 0b 90 e8 97 45 16 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 [ 293.120491][T13909] RSP: 0018:ffffc900073ef998 EFLAGS: 00010083 [ 293.122813][T13909] RAX: 0000000000043d16 RBX: ffff88802584a580 RCX: ffffc9003a80d000 [ 293.126050][T13909] RDX: 0000000000080000 RSI: ffffffff81f5d770 RDI: ffff88802aeb2580 [ 293.129270][T13909] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 293.132442][T13909] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802584a598 [ 293.135566][T13909] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff88802584b000 [ 293.138700][T13909] FS: 00007fc313ecd6c0(0000) GS:ffff8880d5e59000(0000) knlGS:0000000000000000 [ 293.142343][T13909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.145084][T13909] CR2: 0000001b30511ff8 CR3: 000000003fd6f000 CR4: 0000000000352ef0 [ 293.148085][T13909] Call Trace: [ 293.149529][T13909] [ 293.150817][T13909] ? __pfx___set_task_frozen+0x10/0x10 [ 293.152975][T13909] task_call_func+0x169/0x380 [ 293.154967][T13909] ? cgroup1_freezing+0x12c/0x3b0 [ 293.157115][T13909] ? cgroup1_freezing+0x12c/0x3b0 [ 293.159253][T13909] ? __pfx_task_call_func+0x10/0x10 [ 293.161515][T13909] ? cgroup1_freezing+0x136/0x3b0 [ 293.163640][T13909] freeze_task+0x151/0x270 [ 293.165559][T13909] ? __pfx_freeze_task+0x10/0x10 [ 293.167695][T13909] ? lockdep_hardirqs_on+0x7d/0x110 [ 293.169950][T13909] ? ktime_get_with_offset+0x2b6/0x3d0 [ 293.172347][T13909] try_to_freeze_tasks+0x243/0x680 [ 293.174562][T13909] ? do_raw_spin_lock+0x30/0x260 [ 293.176695][T13909] ? __pfx_try_to_freeze_tasks+0x10/0x10 [ 293.179084][T13909] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.181316][T13909] ? lockdep_hardirqs_on+0x7d/0x110 [ 293.183351][T13909] freeze_processes+0xf2/0x1e0 [ 293.185390][T13909] pm_suspend+0x32c/0x7b0 [ 293.187204][T13909] state_store+0x101/0x240 [ 293.189134][T13909] ? __pfx_state_store+0x10/0x10 [ 293.191249][T13909] kobj_attr_store+0x58/0x80 [ 293.193260][T13909] ? __pfx_kobj_attr_store+0x10/0x10 [ 293.195466][T13909] sysfs_kf_write+0xf2/0x150 [ 293.197407][T13909] kernfs_fop_write_iter+0x3e0/0x5f0 [ 293.199569][T13909] ? __pfx_sysfs_kf_write+0x10/0x10 [ 293.201770][T13909] vfs_write+0x6af/0x1050 [ 293.203628][T13909] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 293.206132][T13909] ? __pfx_vfs_write+0x10/0x10 [ 293.208224][T13909] ? find_held_lock+0x2b/0x80 [ 293.210261][T13909] ksys_write+0x12a/0x250 [ 293.212106][T13909] ? __pfx_ksys_write+0x10/0x10 [ 293.214196][T13909] do_syscall_64+0x123/0x790 [ 293.216215][T13909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.218744][T13909] RIP: 0033:0x7fc312f9e159 [ 293.220664][T13909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.228729][T13909] RSP: 002b:00007fc313ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 293.232297][T13909] RAX: ffffffffffffffda RBX: 00007fc313225fa0 RCX: 00007fc312f9e159 [ 293.235651][T13909] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 293.239092][T13909] RBP: 00007fc31303503b R08: 0000000000000000 R09: 0000000000000000 [ 293.242382][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.245644][T13909] R13: 00007fc313226038 R14: 00007fc313225fa0 R15: 00007fff29c52528 [ 293.248909][T13909] [ 293.250204][T13909] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 293.253196][T13909] CPU: 3 UID: 0 PID: 13909 Comm: syz.7.2303 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.257563][T13909] Tainted: [L]=SOFTLOCKUP [ 293.259332][T13909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 293.263442][T13909] Call Trace: [ 293.264857][T13909] [ 293.266091][T13909] dump_stack_lvl+0x100/0x190 [ 293.268067][T13909] vpanic+0x553/0x970 [ 293.269709][T13909] ? __pfx_vpanic+0x10/0x10 [ 293.271613][T13909] panic+0xd1/0xe0 [ 293.273183][T13909] ? __pfx_panic+0x10/0x10 [ 293.275049][T13909] check_panic_on_warn.cold+0x19/0x34 [ 293.277258][T13909] ? __set_task_frozen+0x211/0x2e0 [ 293.279368][T13909] __warn.cold+0x191/0x318 [ 293.281228][T13909] __report_bug+0x30f/0x440 [ 293.283118][T13909] ? __set_task_frozen+0x211/0x2e0 [ 293.285218][T13909] ? __pfx___report_bug+0x10/0x10 [ 293.287252][T13909] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 293.289879][T13909] ? ttwu_queue_wakelist+0x2fd/0x450 [ 293.292058][T13909] ? rcu_is_watching+0x13/0xc0 [ 293.294039][T13909] ? ttwu_queue_wakelist+0x2fd/0x450 [ 293.296342][T13909] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 293.299046][T13909] ? __set_task_frozen+0x211/0x2e0 [ 293.301234][T13909] report_bug+0xb3/0x220 [ 293.303009][T13909] ? __set_task_frozen+0x211/0x2e0 [ 293.305173][T13909] handle_bug+0x16a/0x2a0 [ 293.306977][T13909] exc_invalid_op+0x17/0x50 [ 293.308871][T13909] asm_exc_invalid_op+0x1a/0x20 [ 293.310871][T13909] RIP: 0010:__set_task_frozen+0x211/0x2e0 [ 293.313221][T13909] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 d8 87 89 00 8b ab a0 0b 00 00 31 ff 89 ee e8 19 40 16 00 85 ed 74 09 e8 a0 45 16 00 90 <0f> 0b 90 e8 97 45 16 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 [ 293.320995][T13909] RSP: 0018:ffffc900073ef998 EFLAGS: 00010083 [ 293.323511][T13909] RAX: 0000000000043d16 RBX: ffff88802584a580 RCX: ffffc9003a80d000 [ 293.326730][T13909] RDX: 0000000000080000 RSI: ffffffff81f5d770 RDI: ffff88802aeb2580 [ 293.329947][T13909] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 293.333182][T13909] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802584a598 [ 293.336315][T13909] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff88802584b000 [ 293.339356][T13909] ? __set_task_frozen+0x210/0x2e0 [ 293.341398][T13909] ? __set_task_frozen+0x210/0x2e0 [ 293.343525][T13909] ? __pfx___set_task_frozen+0x10/0x10 [ 293.345792][T13909] task_call_func+0x169/0x380 [ 293.347760][T13909] ? cgroup1_freezing+0x12c/0x3b0 [ 293.349829][T13909] ? cgroup1_freezing+0x12c/0x3b0 [ 293.351917][T13909] ? __pfx_task_call_func+0x10/0x10 [ 293.354068][T13909] ? cgroup1_freezing+0x136/0x3b0 [ 293.356146][T13909] freeze_task+0x151/0x270 [ 293.358001][T13909] ? __pfx_freeze_task+0x10/0x10 [ 293.360047][T13909] ? lockdep_hardirqs_on+0x7d/0x110 [ 293.362199][T13909] ? ktime_get_with_offset+0x2b6/0x3d0 [ 293.364410][T13909] try_to_freeze_tasks+0x243/0x680 [ 293.366444][T13909] ? do_raw_spin_lock+0x30/0x260 [ 293.368428][T13909] ? __pfx_try_to_freeze_tasks+0x10/0x10 [ 293.370651][T13909] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.372812][T13909] ? lockdep_hardirqs_on+0x7d/0x110 [ 293.374974][T13909] freeze_processes+0xf2/0x1e0 [ 293.376964][T13909] pm_suspend+0x32c/0x7b0 [ 293.378745][T13909] state_store+0x101/0x240 [ 293.380594][T13909] ? __pfx_state_store+0x10/0x10 [ 293.382628][T13909] kobj_attr_store+0x58/0x80 [ 293.384591][T13909] ? __pfx_kobj_attr_store+0x10/0x10 [ 293.386768][T13909] sysfs_kf_write+0xf2/0x150 [ 293.388673][T13909] kernfs_fop_write_iter+0x3e0/0x5f0 [ 293.390842][T13909] ? __pfx_sysfs_kf_write+0x10/0x10 [ 293.393002][T13909] vfs_write+0x6af/0x1050 [ 293.394827][T13909] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 293.397245][T13909] ? __pfx_vfs_write+0x10/0x10 [ 293.399223][T13909] ? find_held_lock+0x2b/0x80 [ 293.401201][T13909] ksys_write+0x12a/0x250 [ 293.402992][T13909] ? __pfx_ksys_write+0x10/0x10 [ 293.405039][T13909] do_syscall_64+0x123/0x790 [ 293.406956][T13909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.409408][T13909] RIP: 0033:0x7fc312f9e159 [ 293.411265][T13909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.419061][T13909] RSP: 002b:00007fc313ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 293.422432][T13909] RAX: ffffffffffffffda RBX: 00007fc313225fa0 RCX: 00007fc312f9e159 [ 293.425696][T13909] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 293.428922][T13909] RBP: 00007fc31303503b R08: 0000000000000000 R09: 0000000000000000 [ 293.432155][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.435391][T13909] R13: 00007fc313226038 R14: 00007fc313225fa0 R15: 00007fff29c52528 [ 293.438619][T13909] [ 294.534953][T13909] Shutting down cpus with NMI [ 294.537670][T13909] Kernel Offset: disabled [ 294.539473][T13909] Rebooting in 86400 seconds..