last executing test programs: 1m31.604311665s ago: executing program 1 (id=32): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000500)="01005e0101010011223344558888", 0xe, 0x0, &(0x7f0000000600)={0x11, 0x8888, r1, 0x1, 0x0, 0x6, @random}, 0x14) 1m31.285339161s ago: executing program 1 (id=39): socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x40) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) 1m30.412647617s ago: executing program 1 (id=52): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x7, 0x80, 0xc, 0x5}, 0x4f, [0x0, 0x6, 0x8, 0x3, 0xfff, 0x5, 0x5, 0x4, 0x4, 0xa6e, 0x9, 0x1, 0xfc, 0x8000, 0xfc8d, 0x3, 0xdfb, 0x8, 0xfff, 0x9, 0xb4, 0x7, 0x7ff, 0x0, 0x96e, 0x80000001, 0x1, 0x74e, 0x7, 0x9, 0x8, 0x3, 0x1, 0x6, 0x3ff, 0x6, 0x1372, 0x2, 0xa, 0x0, 0x4, 0x21cb090e, 0x3ff, 0x7, 0x6, 0xb, 0x9, 0x2, 0x3, 0x8, 0x5, 0x3, 0x3, 0x8, 0x2, 0x700, 0x9, 0xffffffff, 0xff, 0x5, 0xfffffff9, 0x1, 0x7ff, 0xaab], [0x0, 0x0, 0x100, 0xffffffff, 0x10001, 0x4, 0x120, 0x1, 0x2e4, 0x9, 0x5, 0x5, 0x3fc9, 0x7fff, 0x3, 0x3, 0x2, 0x6, 0xffffff34, 0x8, 0x3ff, 0xb7, 0x5, 0xf58, 0x7, 0x9, 0x3, 0x400, 0x5, 0xd4, 0xfffffffa, 0xfff, 0x9, 0xd7ed, 0x1, 0x4, 0x7690, 0x9, 0x6, 0x100, 0x10001, 0x4000000, 0x401, 0xffc00000, 0x2, 0x0, 0xfffff24c, 0xfffffcf7, 0x6, 0x1000, 0x4, 0x7, 0x7fffffff, 0xffff, 0x3, 0x9, 0x0, 0x7fffffff, 0x9, 0x681, 0xf7, 0x37, 0x6, 0x1000], [0x601d9d1c, 0x4, 0xff, 0x3, 0x0, 0x6, 0x0, 0x3, 0x5ef6, 0x1000, 0xba2e, 0x7, 0x9, 0x45, 0x2, 0xe057, 0x7fff, 0x4, 0x7fffffff, 0x80, 0x6, 0x6, 0x5, 0xa547, 0x350, 0x3, 0x3, 0x5, 0x8, 0x54d8, 0x2, 0x3, 0x0, 0x5, 0x6, 0x1960, 0x7, 0x1, 0x200, 0x0, 0x8, 0x9, 0x8, 0x95d, 0x0, 0x1, 0xfff, 0x40000800, 0x7, 0x4, 0x80000000, 0x81, 0x0, 0x5, 0x4, 0x26d, 0x1, 0xffff2dc6, 0x8, 0x1, 0x8, 0x6, 0xfffffffc, 0x3], [0x8, 0x9, 0x0, 0x5, 0xff, 0x5, 0x4, 0x80000001, 0x0, 0x5, 0x0, 0x2, 0x2, 0x2, 0xb, 0x1, 0x4, 0xff, 0x3, 0xfffffe00, 0x0, 0x6159, 0x3, 0xf, 0x6, 0x6, 0x0, 0xfffffff8, 0x36, 0xfffff832, 0x2, 0x101, 0xd7f7, 0xffffff01, 0x0, 0x1, 0x9, 0x2, 0x5, 0x8, 0x2, 0xc, 0x81, 0xffffffa5, 0x18000, 0x6, 0x7ff, 0x3, 0x5, 0x6, 0xe, 0x1, 0x415d, 0xfffffffb, 0xffffffff, 0x1, 0xfffffffb, 0x5, 0x103, 0x3, 0x401, 0x7, 0x400, 0xffffffff]}, 0x45c) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) recvmmsg(r5, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000080)=0xde, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0x1, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x65, 0x7, 0x9, "7b5b12", 0xd}]}}}, 0x12) 1m29.833642874s ago: executing program 1 (id=67): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='sys\x00', 0x200, 0x2) mkdirat(r0, &(0x7f00000001c0)='sys\x00', 0x15f) mount(0x0, &(0x7f0000000000)='sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) write$binfmt_misc(r3, &(0x7f0000000040), 0xffc1) write(r2, &(0x7f0000000138)="000000000000000000d50c00000000000001d600000000006d6972726f72", 0x1e) ioctl(r2, 0xc138fd09, &(0x7f0000000000)="04000000000000000000000090010000380100000100000000000000000000000000000000000000000000000000000074") write(r1, &(0x7f0000000180)='1', 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x3, &(0x7f0000000380)="e742a933f37ff726a51f1fb1010f93e96a837b8e11d417e6e3310bf49eea1fce838e98f50839bb743e63989194db03e84f2142edad4ac17451f607214b1f357bba9e2928cad039eb1deebd41e71d789bc1bac9e1f17d276ddd7fc1c9685ecee004c924c7df313107c7a2143cb413c0ecbbfe35daa22587eabc97d6548ba84ac5332650ca66edf4453b227ca7ff03de968b419779071b9fb5e2418fe35d3100149b") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x40010, r6, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r7, 0x8000000000000000, 0x4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYRESDEC=r0], 0x20}}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 1m29.772783673s ago: executing program 1 (id=68): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) sendmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="144d11906a65d09b2e78bf6a61e32ac5822da6f1ab2e64fc62e86d3a2bcd1de11fc9ef7b99c0a556c5519c79d44df94d4b7b01854c3bb6ddf7491c0c63a462df1177abb37c7afad6436ef64de8d8285efe3a977dd2e57a0338e0c7b08805f17cb2a8c56c31de167960316b4c61293c03cbcfddd4025256382d90b372d727a0d3de5a9f2fb1500aab5e1cba4495cb900db0f8f6c1c198ec5a2674561ce717b16a29abbff39203e008f47a6776884bfb0747", 0xb1}, {&(0x7f0000000100)="7f1cb7eb731b916d68d980654f3551c73bda129ee8def3fbadc49ba96b7d3d6271fbc84afd944a3ed34278c867d11860b71827bde0d458bffe9d78289c77403314566b519f980b5e19ccc031fd03a71c", 0x50}, {&(0x7f0000000180)="09adb45404a4072601d078f14f1127bae0c9433d8167091bc57699860842ac25e254b1e46be9150a4cc8d338d9be21ad82d096e92fa97216d0c0", 0x3a}, {&(0x7f00000001c0)="9112003eac338b74d5349dcb4553cfaa50ad245fca08d6d6101315adfc3ab908ef7bc881681359c239f6a89c1b40061ad62c9c78b026c69c66", 0x39}, {&(0x7f0000000200)="94689eaa34a72edfb72e05518c2736df314fc4e5cf4740738fe3b5a21667cc9ee7e8b82bc6c353d159872bdfb47a95e246403d1d726ae5f0fcb9b1fe454580ac32b8eff59c7804f443fcde5e03e92d8e50abaaef257776bb1ecde1f86535acf0be4268f16a56addd4e8d3e5f0ae16f3a3e45599d3694dcfeba25fbce8b3bc264a043d6e8b9cae55075a35087e5ca3d459b6833101a47", 0x96}, {&(0x7f00000002c0)="0b0b48718bbc1ffc6be1bda72a3b2c3c7c69fb15f7a3a9bc56ca24a647670558aec9baff1e3ff13432f41cda2ba1c85768a4124b8383e8425aaba9ec3edbf78d7fb9a14cb9e5b11857e33a0f214852d78a", 0x51}, {&(0x7f0000000340)="3bd897dba32c653654782b69d54e848f56d8c8650abca0db7c8262ca4ca09be96065881296edeae6eb842529d33a68f6ef074857dd024160ca1d83e186309d7b3ec5cad97f658a1140c68cb12038b4e5a5f6488b0bad6efb88e446226806122781484b7c108df248f2b13284f66eb586a4bd0be9f0da5b402f23d4d7d81276c4f5425de9b4032a8956b0d452a4aa2576bc4c98e5fe39eba1169cd079229b841a874309131e93550470b5596b0710b86165308c7aec2f6fea2c", 0xb9}], 0x7, &(0x7f00000005c0)=[{0xd0, 0x11, 0x80000000, "6f7439c087bb3c3d8dbf0a7ad4b6823ccd0448dab16ec8577746db6975660972467d406162c7bddf0bb481ece9769048274789ace1845ea972bab6290aa6f461ca011296150cd941d4004f3062ac6e125c37ccdc4e41379a99a2a09b9de37ac189ff53f8b37c490dff30258a19cf7efde6293059b548109c93ba4c9c278753ee8429e78bb85c40b090ecc10492875506d9c22fa00ae271aa8d4211899225849a9701946ce9046c2a6418ddb41bbac29976d269608a48fbddbc"}, {0xa0, 0x3a, 0x10000, "7b28de90942946a1dfcaeddd27095c7d845f9f0c9e92d9221bac568607998a2a20e1c99a3475c2021430ce0964f955496514a28ef4803825dc55e661e7046fda3d6ceebafdf269042b37a9664dc3c6ffe6c51eacc7fe50d372ec1619ccbf6dd67ff9031adce61f3f5d1fd35896f2e3b1e9ac871c5050e91ff991d701419995b72af5e96692b7210ac74e1f9df6"}], 0x170}}], 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) 1m29.294488459s ago: executing program 1 (id=75): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2282, 0x10b) syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), 0x0) write(r2, &(0x7f0000000000)='7', 0x1) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x103) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="e7842a3e0090", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="e7842a3e0090", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$tcp_mem(r6, &(0x7f0000000180)={0x8, 0x20, 0x1, 0x20, 0x6}, 0x48) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000040)={[{@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@favordynmods}, {@favordynmods}, {}, {@memory_localevents}, {@pids_localevents}]}) (async) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000040)={[{@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@favordynmods}, {@favordynmods}, {}, {@memory_localevents}, {@pids_localevents}]}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) (async) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)={0x10, 0x0, 0x3}, 0x10) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)={0x10, 0x0, 0x3}, 0x10) 1m29.246562543s ago: executing program 32 (id=75): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2282, 0x10b) syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), 0x0) write(r2, &(0x7f0000000000)='7', 0x1) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x103) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="e7842a3e0090", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="e7842a3e0090", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$tcp_mem(r6, &(0x7f0000000180)={0x8, 0x20, 0x1, 0x20, 0x6}, 0x48) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000040)={[{@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@favordynmods}, {@favordynmods}, {}, {@memory_localevents}, {@pids_localevents}]}) (async) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000040)={[{@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@favordynmods}, {@favordynmods}, {}, {@memory_localevents}, {@pids_localevents}]}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) (async) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)={0x10, 0x0, 0x3}, 0x10) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)={0x10, 0x0, 0x3}, 0x10) 3.163398342s ago: executing program 3 (id=975): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904", @ANYBLOB="9fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) 1.474970467s ago: executing program 2 (id=1003): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x6, 0x7, 0x1}) (fail_nth: 5) 1.474796522s ago: executing program 2 (id=1004): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x1, 0x4, 0xf, 0x0, 0x0, [{0x2, 0x2, 0x1, '\x00', 0xd}, {0x4e, 0x7d, 0x7, '\x00', 0x9}, {0x0, 0x9, 0xa, '\x00', 0x7}, {0x2, 0x81, 0x1, '\x00', 0x3}, {0x80, 0xb, 0x0, '\x00', 0x6}, {0x7, 0xd, 0x7, '\x00', 0x1}, {0x4, 0x8, 0x1, '\x00', 0x4}, {0x1, 0xff, 0xf5, '\x00', 0x2}, {0x4, 0x7, 0x8, '\x00', 0x5}, {0x3, 0x81, 0x9, '\x00', 0x4}, {0x6e, 0x1, 0x40, '\x00', 0x53}, {0x8, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x5, 0x0, '\x00', 0x80}, {0x5, 0x5, 0x0, '\x00', 0x1}, {0xff, 0x1, 0x2, '\x00', 0x80}, {0x1, 0xc, 0x67, '\x00', 0x3}, {0xfb, 0x4, 0x9, '\x00', 0x7}, {0x7, 0x5, 0xf, '\x00', 0x6}, {0x7, 0xfe, 0x46, '\x00', 0x7f}, {0x7f, 0x0, 0x8, '\x00', 0x7}, {0xf9, 0x5, 0xc, '\x00', 0x5}, {0x5, 0xdd, 0x8, '\x00', 0x5c}, {0x2, 0x9, 0xee, '\x00', 0x1}, {0xf, 0x4c, 0xf7, '\x00', 0x8}]}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x1ff}, 0x2, 0x5, 0x2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockname$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xc, 0x3ff, 0x7, 0xffffffffffffff80}}, 0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r7, 0x0) bind$bt_sco(r6, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r6, 0x2) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000005c0)={0x0, 0x1e, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r8, 0x1}, 0x14}}, 0x0) 916.773867ms ago: executing program 2 (id=1013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0x3, 0x300) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000060000000000000aaff020000000000000000000000000001"], 0x7a) 654.981571ms ago: executing program 0 (id=1016): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000008608000440000000220500020089000000340001800c00010062697477697365002400028008000340000000020800014004000014080002400000001208000640000000020900010073797a30000000001400000011000100000000000000000007"], 0x108}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000600000000014f194e20002b"], 0x65) 553.998046ms ago: executing program 2 (id=1017): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) ppoll(&(0x7f0000000180)=[{r0, 0x204}, {r1}, {0xffffffffffffffff, 0x1422}, {0xffffffffffffffff, 0x4021}, {0xffffffffffffffff, 0x10e}, {0xffffffffffffffff, 0x7300}], 0x6, &(0x7f00000001c0), &(0x7f0000000200), 0x8) socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x18800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000280)={0x7, 'veth0_to_batadv\x00', {0xfffffff9}, 0x2}) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/60, 0x3c, 0x1) syz_ublk_setup_io_uring(0x2bb4, &(0x7f0000000300)={0x0, 0xd2e2, 0x20, 0x0, 0x1fc, 0x0, r2}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001540)={0x4, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f00000004c0)=""/4096, 0x1000}], &(0x7f0000001500)=[0x5, 0x3, 0x8001, 0xfffffffffffffbff, 0x8000000000000000], 0x2}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000001580)={0x2c, 0x12, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x1, 0x6, [0x6e8, 0x80, 0x1, 0x4, 0x7621, 0x5, 0x81, 0x7]}}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x5}, @generic={0xa4, 0x3c, "9c64250579c3b19541ab3b029633eb7f5719e831d2bcac13125ef312b66868e396495d0eecd595b960b7c9f5b62c84fea94cb52420a6d0a916edc5a1"}]}, 0x98) syz_emit_vhci(&(0x7f0000001640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xcf, 0x2}, {0x6c}}}}, 0xf) syz_emit_vhci(&(0x7f0000001880)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none, 0x6}}}, 0xd) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000002e40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002e00)={&(0x7f0000002c80)={0x164, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2c}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, [{0xc}, {0x30}, {0xb}, {0x30}, {0x30, 0x1}, {0x1}, {0x18, 0x1}, {0x1, 0x1}, {0x24}, {0x18, 0x1}, {0x6c, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x682b708e0df7ae3a, 0x1}, {0x2c}, {0x30}, {0x9, 0x1}, {0x9, 0x1}, {0x1b, 0x1}, {0x36, 0x1}, {0x3, 0x1}, {0x4}, {0x48}, {0xb}, {0x1b, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x9}, {0x18}, {0xb}, {0x4}, {0x9, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0xb, 0x5, 0x1b, 0x48, 0x1b, 0x30, 0x18, 0x16, 0xb, 0x6c, 0x16, 0x2, 0x16, 0x6c, 0x9, 0x1b, 0x60, 0x36, 0xb, 0x2, 0x24, 0x60, 0x1b]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x80, 0x964, 0x40, 0xa, 0x7, 0x92, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xd7e3, 0xfffc, 0x1ff, 0xb9e6, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0xb, 0x48, 0x12, 0x16, 0x5, 0x36, 0x2, 0x36, 0x6c, 0x12, 0x1, 0x0, 0xb6111542866cf8de, 0x6, 0x18, 0x1b, 0x9, 0x30, 0x2, 0x12]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x12, 0x4, 0xc, 0x30, 0x60, 0x60, 0x1, 0x60, 0xc, 0x9, 0x48, 0x1b, 0x36, 0x24, 0x24, 0x24, 0x4, 0x1b, 0x1b, 0x6, 0x30, 0x12, 0x60, 0x1b, 0x5, 0x1b, 0x1, 0x5, 0x18, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xfffb, 0xe9, 0x0, 0x8, 0xe, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x51b, 0x80, 0xdf21, 0x17bb, 0x4, 0xd9b7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x10000}]}, 0x164}, 0x1, 0x0, 0x0, 0x94000}, 0x24000800) syz_emit_vhci(&(0x7f0000003480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc1}, "5d24f9a6117da9072f302b346125687597d01301d669a076cce65ec2512601b03994809e2c6ee69420ac4e9ae2c078daa4de538c4157207c6466fb00cc74aa470933ae49439e70064f8b546d9f9b89eec6074ca4e27798f5bd7a9a636605c99bd24339dd2a295fbdc0ca7eac1b7aa9d9699a66f657e63ece5775002cdf44ad14c8426375f9a19135fb223f1f40011d56798a037f8f514c8a5cb2f0d4682912069a5168a3582fb2acb3845ea0a8811af1fe9f553bc8c6a427f42df4eb356f57068b"}, 0xc5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003680)={{r2}, &(0x7f0000003600), &(0x7f0000003640)='%pi6 \x00'}, 0x20) 553.39974ms ago: executing program 0 (id=1018): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x7, 0x80, 0xc, 0x5}, 0x4f, [0x0, 0x6, 0x8, 0x3, 0xfff, 0x5, 0x5, 0x4, 0x4, 0xa6e, 0x9, 0x1, 0xfc, 0x8000, 0xfc8d, 0x3, 0xdfb, 0x8, 0xfff, 0x9, 0xb4, 0x7, 0x7ff, 0x0, 0x96e, 0x80000001, 0x1, 0x74e, 0x7, 0x9, 0x8, 0x3, 0x1, 0x6, 0x3ff, 0x6, 0x1372, 0x2, 0xa, 0x0, 0x80000000, 0x21cb090e, 0x3ff, 0x7, 0x6, 0xb, 0x9, 0x2, 0x3, 0x8, 0x5, 0x3, 0x3, 0x8, 0x2, 0x700, 0x9, 0xffffffff, 0xff, 0x5, 0xfffffff9, 0x1, 0x7ff, 0xaab], [0x0, 0x0, 0x100, 0xffffffff, 0x10001, 0x2, 0x120, 0x1, 0x2e4, 0x9, 0x5, 0x5, 0x3fc9, 0x7fff, 0x3, 0x3, 0x2, 0x6, 0xffffff34, 0x8, 0x3ff, 0xb7, 0x5, 0xf58, 0x7, 0x9, 0x3, 0x400, 0x5, 0xd4, 0xfffffffa, 0xfff, 0x9, 0xd7ed, 0x1, 0x4, 0x7690, 0x9, 0x6, 0x100, 0x10001, 0x4000000, 0x401, 0xffc00000, 0x2, 0x0, 0xfffff24c, 0xfffffcf7, 0x6, 0x1000, 0x8, 0x7, 0x7fffffff, 0xffff, 0x3, 0x9, 0x0, 0x7fffffff, 0x9, 0x681, 0xf7, 0x37, 0x6, 0x1000], [0x601d9d1c, 0x4, 0xff, 0x3, 0x0, 0x6, 0x0, 0x3, 0x5ef6, 0x1000, 0xba2e, 0x7, 0x9, 0x45, 0x2, 0xe057, 0x7fff, 0x4, 0x7fffffff, 0x80, 0x6, 0x6, 0x5, 0xa547, 0x350, 0x3, 0x3, 0x5, 0x8, 0x54d8, 0x2, 0x3, 0x0, 0x5, 0x6, 0x1960, 0x7, 0x1, 0x200, 0x0, 0x8, 0x9, 0x8, 0x95d, 0x0, 0x1, 0xfff, 0x40000800, 0x7, 0x4, 0x80000000, 0x81, 0x0, 0x5, 0x4, 0x26d, 0x1, 0xffff2dc6, 0x8, 0x3, 0x8, 0x6, 0xfffffffc, 0x3], [0x8, 0x9, 0x0, 0x5, 0xff, 0x5, 0x4, 0x80000001, 0x0, 0x5, 0x0, 0x2, 0x2, 0x2, 0xb, 0x1, 0x4, 0xff, 0x3, 0xfffffe00, 0x0, 0x6159, 0x3, 0xf, 0x6, 0x6, 0x0, 0xfffffff8, 0x36, 0xfffff832, 0x2, 0x101, 0xd7f7, 0xffffff01, 0x0, 0x1, 0x9, 0x2, 0x5, 0x8, 0x2, 0xc, 0x81, 0xffffffa5, 0x18000, 0x6, 0x7ff, 0x3, 0x5, 0x6, 0xe, 0x1, 0x415d, 0xfffffffb, 0xffffffff, 0x1, 0xfffffffb, 0x5, 0x103, 0x3, 0x401, 0x7, 0x400, 0xffffffff]}, 0x45c) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1a7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="d08908650d2277752b4a3739e546738d772937af35eacb91ffb40a9a68517e24fa2c8a3b6aa0b72db5365ee0942eb7f133dc0a395491bb95b339d8e41d21787a8e83c362a07e74198b7a512220bbab4d4388cf2cc9380ef046be806d7e3c7422e43e3b39d94bef57634b702468e60c29029eba5a05a3ad6b744e211435a90dfffe873e1fd4b6e5e93d8abf51f3e70566b3d638e6cf0d61298699dcc0763a9438d05b50604d21eabce341b22b119cef38064f4a93fdd724e25d76f8fe3c0e9419b7db6a3dfaab481e076486349f767b63e9b00e5553e308d0c535734cde604ee4958d84cc5cb07a01ce24db10aa26da756891443d86f89479da5a826460f62144c7866eaadc2a7b7ffb7fd7fd7752d30bccc57075c5a9a484e4eb93c54b1bb07b588adfdccad44691899f3d6970aa668258cc9f16343abc30c862d80bbfac5840e1f505d9dbdd952355f59d4984dad7c3572999a02d6cddde04f2af5114fd110d62d0f655dc9120424db6cba753cad330ad192bb6466492fc148c1ebfe2144e708c405d4c5eeac28ea69ca11ff1d606af8d1cf282098de8260548f19465a292b77c1ec178f7f4160b35b593fb684b5c5872c0debbe3790e62c1c0b2252d51b04f9f5133585dc4f1c1638c23c7376ab619319d4cb7ac37116a943bc7d9a2fe696d7deebc39d454789bcdacb948402b9c6fb1298e34b67d1765caf51f00fe253520d7ce80bc8c04e4067156baf4a679855b2e2489a838eb3320cbf6d82cd1b71812fd4e65cca2f1a31d72209f4d9a42060faca011cc05b605919df055b81fb3f2cf309b44b44250fc1e280ac5025bde97469068c027a4d2e1b4ba1cdd6daec1c7a74d608fa7c2a4e208283c2c9598878b88379a7f2b40a82320f7575033f8d1efce5d38549656fd914732726cb2ed9905814d967ab2de197f75c87f80be4069509532517f93007da774a0566b115011f0d6404b4a8bb105e55ccab6231137dc6d4097aefab807d3d171ae31e41b0b3a7bb2ed59ab38fb0a30660f84a158714469b5a16fbd216d91214ff5548cbbc1a8651d44b6d48b47367efe35a96c3083d5636cca0289db56a139fba77d20319dee5e3c7021627e93b1e7427d6954f7033a923d369961835480093a84522a78a24d1b01c30ba4b9afaac16953e56c7eade9269c9d306d6d7d7fb8d4b67801ffdff9285a6075d8caacd7cad679aa6f25f97c235fcdff129c521f52dd33911a55bf81cd946dbed554506729c6f4bc0178b04803e41317764aff863aacbf34c0c1dd5f53479bfc4f89d1132e5aaa0b7e2b5e46dae77752705590743dd56b65c80498182da8beccf2adffdd5cab674fa77f0f611f53a636a1261dd2483212955d76db0b0d1b59c364401c99cfe5feccf0c62f59aa07f34ba60a23bd99d702b0a4922e77f3f7d293f2c6af55b72697e7e8f25d545fe13c052fcc805d42b4b4c8a5d47bdf2ed52da9bd6d556503fabb59a24e834d3efd8da37abf4385724acfa0318b61b954c3db83500ebb66eb9e764c2bcd770cba99ef7f45780d28468e150c2eada94a58d7c62b6423eb95e583c9d6790025151a0029e13264cf91de3b2d349e169e7fd7528356a84a8786401dd30cbeeb0dd894cbe2d38a7846f4859be693099cbab757af8524e47b000518d79d15ede075d02e84e3dfb092d9cd3156656f0ed90af68d6b50377a15277128f7f249d377c560bf7a094d73b552e2e685e793e440079aea56ed2661e1cf40f23f8a63c85648cad96b54ae59ba3eaee102586b7ede6035dbf89e6dfd8524a2336156826fe4fc7f0c26495226f24456ca577d03f938034e2a9f2d8691e0d166ba0c6bd7daddb1e920c6842761c54126d7b12ca074ad89ff002b5738dc75ca73eb81cf70f9a2d0cb6ff53398a5bd9fddb5e1f20207ec75dc2afe4fc40a8cae8c267c38823db2820db622da5007bbc424908d00ea0716ef83518b218b60c615b6d35ca4812ba25130bc0eebe4dafccb90c0c56ffe84643828d957d6878c3a23085ed8815212b785e054f4dff29262fbb9d9ce509f14cdda9d2b8ffabbaa5d6aa3a4ab01d59408552e555a6b62d4cd35794e5c890c9f93f993f42d38dea2c41c7ba8db41e90b95880b7ffd6d6370616809edb2744b24a6b59c127467a3372bcd6c088b0ed697dd243b1d534a0fc28ef961779ec71f8707fd2928cbf23bff26d0a00231a72583089a22a1d0d6cfadaeb31a98cda1c84eb5e8bf047a89e8687e5f100bd57d1d67a4073306f377fe43ff33634aee3173032719c4c34189265f541357044dc8dbf56540d5be66047f908beaf040db44dd57b891b1e3e4cc98be5c20c81f4be6a2398b642d81de2e9c4ba34b8801a2fcd50d8d5ba6f497923bf29662b62f36119bcbfb6df3c1c8d61cff9962699673e5b0ffbb01deb81b2044157df7e03ca3a4c9a03ae2f59e55702c2079ee48ded1dfa0eb32872d80d9b113ad5b537597226948f8ac6b8d5ed700c357e8b9a1178e6f4b86c64ce0ba042152df716681e08bc7622b9977e421f554183611f8ffc36dfa1dafa2d4b2a76d8bc524e9ff22596ae79a964c67bca4311966f05208b626eac58c658aa384798ef738b17cefa55923316a1f9780c22a5828e3a2a62c40136341fcfbc8dae32ca560758467a266c5a170a05800a726ea0d93af19a4aaddaf8150c214f8b36b75ebec966062f1a4fdabb31eba08a1b277670b2e5dff82f77a4bec5b50c28a6459d9170b1115173709d113f677de59cb9b283037f8927317972139198841d798f2118de1a8ae2689e5cff6226282c8b801936b27ffdaa2876e3d8eace08fbd3380c0e0d0f33630c1a483520b423c63443c6bbe8c0f78ec143a0721eda931d444e5355e8cfd7af0177a98e181020ca7a0d59af6b4b4da2b404f302adc2f0537a2731bb1fe76a0b49caac4428e2504d02a0d12d05f935a634e7fe376872d90df5ceadd10bb2b0dcdb09167d3d021ee952381e7f267991985dc58ce6e5510d434933792fc600e701334cc223ad8da2004f83776b423037dc91a048cc1f7a85529d0f1dd4893d6e945ac0e57a6d3caae1b553c4bbb9a45137c8a729e7402d4a3c7a62c004f73acbc108ecdf868540058f69058d0d85a0b447861253b45161d91a21d0c254e908b0be9776560fd2e7fc91696fef7911d6c929f66642aad4ddbf434ab9ccd2b2a8320a3c1d355e0c73744bc3f12af5c2b743fbe3264a1585f999ee258dccea6b022722f1c4b4ca2ede91724960dbb515d2660e3878b6049e13c04ea60bbf5de0c31abbb67e4f4faca1611fad5f8e448d27864e9926d8a642dc1ad325003bf257dbbe6cffb71e82b6e33991d3e33eaa067a3e4aee53f01b25a976ece5027a339d1d9009a656820319aef88b955898bab3271066fd7a1c73fe97aaed2ab65c23cd90c039f2284ec2757441012ce010a4338e5dea06b96d3e30c5eb90632f9043bc9ac455564bb6e3395e433836c1634b9d6ada30893995565f1ff55e4f21ad8fd24f20ef4641cdb3c2235b9465cc2adaa3d0396dc9d16c5b78d2aa0d4673436e899f9b522112733348c81ea8df1805d379c12174967567da6ab12a8fb892a06171d0dc0b0308ac1a9151929ba6d408b76c8047798d03ef2697e800d069e43968ac73d85652b2ec1af17a89a9cf90c4ce9c9578283ab6405bdebf3271cdee7d33329a572a1da59d4457b95d8b43c09a9268e16c095a76a24f16ebcc14b35f6a7fa0a0292d5d49f08dd027391769ee294fc297e2082b5663e0fa4ea1d57eeac0440ea9692fc609f272b2c713b8a21d326a31a9be45664ee4bd9dfbe3521cf3470521e05fa7355e8246cfcab12c56f45b38f32d26aa405faf491b47cd69b1d869c1111a51cf91968cde89c83fbb6f2622e0cca462ce6cf8420d37399eadc4ad98bc7afcac48e84f34095a96a7233aa5179e2f7f09f88edbf438871d73d85d304fce8a93b87191e0b1d24d3ab621ba8463a94e4157614b189805202e6f183c5b2b9ed9c03498eb661e01075a3cf9d92aa2d0def273ab4e4f44557ad0e39b8098cabb34df304cf5e9f98b059b81e52a0fe8a94077e853ad81f1614572af204297bc8dc8b306f202e454d7cce3d63726ea726c44556a580beebc49feabec4ef9dfec51b8889c702beba509ecb99c92a899a676c25df905d13729afd2310ba0d0386bcb910a400111711219cdc9fe3b3dcb6036bc4073069a7ee0562a0e74b7a6953f498ce3385c43c73c944b958b6a8741d21027931d6b6e9a1212372282e2e27f9d205ae918516617d57cc3835d5c4e94d79ad4b9cf11cd295060e97b3aeab1989f1e479cbd3abe75cf3d96ca45ba99b08bdd2954d431ab373700f232890543680435f86f20ada308cc5a288bb2d4d46735df7f032dfe6a57b196e3a167837d1c893c607a4494cdb1829d1d9989c2a3867c348c6653d6c25dc4643c301b4a77ca616a8a2c72fb6c49ac92c2d81e56045b4f190e002c83f5e21aeccfddb4301b50431ed01cabbd1ae809bdc47855abefce9e88f720a0c7266c4773c91f2b6a8115ccd901197806bb7e8b71593fbc5f617adad4acfd13aa77c3c038f589eea19aa84b10d6e57dc0509afcb08d5325dea5cfe501e17efb53b2b7b836d2fd6b0a554795e0b980c2e375510cc4e95adb350024d9ceda192e8e905ac57378a6e56a5f85aa098b3460f4604f70203baaa791df1cd1824b7e370d9a6dbeea8564340782f3819cf77b1465d83815c0d931fde82b7648d0ea5b3d9d95f515f383c73987727d13a0dc2b5c164dae511c2d9ad4923884baa8ab6a62d370c1fa09aa9161d6f2f354f6c834d7f5b77430119ef251d5cedb73bfabe18dce03f44eccb121f04aa12ffa18e9429907ea13f312470cc79d5ace21220153c7fa0c5f4d748eb813d644aa89d368377da6b12fe74d1f5b04457a79bf1d50f96d3598bcdfc0f408500ee71df89387a3ef169edcab9d1ccbb1059c0d148f66314d79bf0cd4eb6c69a22fbe92219d9a7def174f57c194e07f900393fbbe583eb296a41a9f00def5e4f646e3d0bbbb7d6be06ad91a2a4fffb264833d66e22325bfcc6659fe3afb7340a5aa2ea0524e371e666e7573da8ac4d6f1fa7000debb596503a93014e672fffa5a4ce36c24e067b896a3ca02bc93a57b71e986e113781c5a17e86a9b3d194f9e0f4a876885963ac7a2f24568a521493fff90d3f04bfb978ed08e4bac76832cfe85324417f7a53dd3116c1edc8f20d6c05e77487406c4b1d70f692c1741035f9bbae6c3ae8044a9e3fa919c55e885ab9efc6b0e187ab76cb0df0639bc0e30048584138d3a957c1fdbd43939c3e4c96f354fa2a9025e546a263706a3a437e508a9b96b6ad10bdc65ef2be4ac11fe5861c8caa963b21581ee4d2b18ce4b45157386cb8ab41bea212950d4cf71b6b9421296106a0eb2446d2648309d67ecc4a213cfeb5a1d2c188cdb60c0934bc7ce9b867001230d548f081e1c2047dd60d78d327d0dd4f7db1b23f2ef55cd3a02f85bd40ccf33a7bea13505418760bce8815cee7aeeea906c4b730db663a32ccb9fad68bfce3ae52f0a64b30c59ee707c763f8ef81a74f507f7deff192bc7f960124ebb32bf6e744200231b86a3fbb74c6a2525ecc3e23e71fb7941c587db947", 0xf96, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20004450) syz_emit_ethernet(0xbe, 0x0, 0x0) rmdir(0x0) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140010001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f0800044000000037080002400000000224000180090001006d6173710000000014000280080002400000001508000141000000080900020073797a320000000014000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x6000840) dup3(0xffffffffffffffff, r2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1a1) syz_open_dev$sg(0x0, 0x6f5e, 0x2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 514.827218ms ago: executing program 0 (id=1019): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x9, 0x2) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) 425.039196ms ago: executing program 4 (id=1020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000022000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 424.753315ms ago: executing program 4 (id=1021): mkdirat(0xffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='isp1301 0x2', 0xb) 354.322691ms ago: executing program 4 (id=1022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r3 = socket$inet(0x2, 0x0, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) write(r4, &(0x7f0000000500)="080211000001080211000000080045", 0xf) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8932, &(0x7f00000000c0)={'dummy0\x00', 0x0}) (async) eventfd2(0x7, 0x1) (async) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x18, 0x0, @opaque="731926fbb5955f7551b93decbdcd31f8"}}}}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}}}}}}}, 0x0) (async) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f0000000180)=@other={0x2030000200000345, &(0x7f0000000280)}) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 235.051262ms ago: executing program 0 (id=1023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x884) 154.596302ms ago: executing program 4 (id=1024): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x8000, &(0x7f0000000100)={@_ha_fsid={[0x8, 0x8]}, {0x0, 0x4, 0xb, 0x7fffffffffffffff}}, 0xb5, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x7}, {[0x7, 0xfffffffa, 0x0, 0x7]}, 0x0, 0x0, 0x0}) mmap(&(0x7f0000c7c000/0x1000)=nil, 0x1000, 0x1, 0x40010, r0, 0xc7d6f000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000c43000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003d4000/0x3000)=nil, &(0x7f00003e8000/0x4000)=nil, &(0x7f0000129000/0x4000)=nil, 0x0}, 0xfffffffffffffca6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000210400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000000e00010069703667726574617000000004000280"], 0x38}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x1000c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0xc840) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_emit_ethernet(0xfa, &(0x7f00000008c0)={@local, @local, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @esp={0x8, 0x6, "cc595b", 0xbc, 0x32, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @empty, {[@dstopts={0x5c, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x7fff}]}, @hopopts={0xc, 0x4, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private0}]}, @fragment={0x87, 0x0, 0xf, 0x0, 0x0, 0x8, 0x65}, @hopopts={0x2c, 0x4, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private1}]}], {0x4d6, 0x9, @basic={0x0, 0x0, 0x0, [@runt="ebb8f91bdf3ad30c2eba221288ed7261b064907b3a65a87a905392f7d9969c3523cb0c874f75"]}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017e0", @ANYRES32], 0x3c}}, 0x0) 154.263726ms ago: executing program 0 (id=1025): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1ff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000100)=0xfefffff2, 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r3, &(0x7f0000000600)={&(0x7f0000000200)=@l2, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f0000000440)=""/68, 0x44}], 0x3, &(0x7f0000000500)=""/204, 0xcc}, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) write(r0, &(0x7f00000001c0)='kyber', 0x5) 154.130854ms ago: executing program 3 (id=1026): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x11, 0x80, 0x8, 0xb, 0x8, 0xff}}, @TCA_RED_STAB={0x104, 0x2, "000000000000000000000000000000000000000100"}]}}]}, 0x148}}, 0x0) 154.014305ms ago: executing program 4 (id=1027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000050900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000208000b400000000028000480240001800b000100657874686452000014000280080001400000000c08000640000000040900010073797a300000"], 0xc4}, 0x1, 0x2000000}, 0x0) 84.03402ms ago: executing program 3 (id=1028): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x7, 0x80, 0xc, 0x5}, 0x4f, [0x0, 0x6, 0x8, 0x3, 0xfff, 0x5, 0x5, 0x4, 0x4, 0xa6e, 0x9, 0x1, 0xfc, 0x8000, 0xfc8d, 0x3, 0xdfb, 0x8, 0xfff, 0x9, 0xb4, 0x7, 0x7ff, 0x0, 0x96e, 0x80000001, 0x1, 0x74e, 0x7, 0x9, 0x8, 0x3, 0x1, 0x6, 0x3ff, 0x6, 0x1372, 0x2, 0xa, 0x0, 0x80000000, 0x21cb090e, 0x3ff, 0x7, 0x6, 0xb, 0x9, 0x2, 0x3, 0x8, 0x5, 0x3, 0x3, 0x8, 0x2, 0x700, 0x9, 0xffffffff, 0xff, 0x5, 0xfffffff9, 0x1, 0x7ff, 0xaab], [0x0, 0x0, 0x100, 0xffffffff, 0x10001, 0x2, 0x120, 0x1, 0x2e4, 0x9, 0x5, 0x5, 0x3fc9, 0x7fff, 0x3, 0x3, 0x2, 0x6, 0xffffff34, 0x8, 0x3ff, 0xb7, 0x5, 0xf58, 0x7, 0x9, 0x3, 0x400, 0x5, 0xd4, 0xfffffffa, 0xfff, 0x9, 0xd7ed, 0x1, 0x4, 0x7690, 0x9, 0x6, 0x100, 0x10001, 0x4000000, 0x401, 0xffc00000, 0x2, 0x0, 0xfffff24c, 0xfffffcf7, 0x6, 0x1000, 0x8, 0x7, 0x7fffffff, 0xffff, 0x3, 0x9, 0x0, 0x7fffffff, 0x9, 0x681, 0xf7, 0x37, 0x6, 0x1000], [0x601d9d1c, 0x4, 0xff, 0x3, 0x0, 0x6, 0x0, 0x3, 0x5ef6, 0x1000, 0xba2e, 0x7, 0x9, 0x45, 0x2, 0xe057, 0x7fff, 0x4, 0x7fffffff, 0x80, 0x6, 0x6, 0x5, 0xa547, 0x350, 0x3, 0x3, 0x5, 0x8, 0x54d8, 0x2, 0x3, 0x0, 0x5, 0x6, 0x1960, 0x7, 0x1, 0x200, 0x0, 0x8, 0x9, 0x8, 0x95d, 0x0, 0x1, 0xfff, 0x40000800, 0x7, 0x4, 0x80000000, 0x81, 0x0, 0x5, 0x4, 0x26d, 0x1, 0xffff2dc6, 0x8, 0x3, 0x8, 0x6, 0xfffffffc, 0x3], [0x8, 0x9, 0x0, 0x5, 0xff, 0x5, 0x4, 0x80000001, 0x0, 0x5, 0x0, 0x2, 0x2, 0x2, 0xb, 0x1, 0x4, 0xff, 0x3, 0xfffffe00, 0x0, 0x6159, 0x3, 0xf, 0x6, 0x6, 0x0, 0xfffffff8, 0x36, 0xfffff832, 0x2, 0x101, 0xd7f7, 0xffffff01, 0x0, 0x1, 0x9, 0x2, 0x5, 0x8, 0x2, 0xc, 0x81, 0xffffffa5, 0x18000, 0x6, 0x7ff, 0x3, 0x5, 0x6, 0xe, 0x1, 0x415d, 0xfffffffb, 0xffffffff, 0x1, 0xfffffffb, 0x5, 0x103, 0x3, 0x401, 0x7, 0x400, 0xffffffff]}, 0x45c) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1a7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf96, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20004450) syz_emit_ethernet(0xbe, 0x0, 0x0) rmdir(0x0) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140010001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f0800044000000037080002400000000224000180090001006d6173710000000014000280080002400000001508000141000000080900020073797a320000000014000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x6000840) dup3(0xffffffffffffffff, r2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1a1) syz_open_dev$sg(0x0, 0x6f5e, 0x2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 83.76357ms ago: executing program 0 (id=1029): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@dont_appraise}, {@obj_user}], 0x2c}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000240)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x155, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e0a040d0489000000000000c0b5731fd600000000000800000000000000008eae5bdb713ed65043066341c4510741a35909adfdaa44afefdaafa854c97942b01200"/78], 0xd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) socket$inet6(0xa, 0xa, 0x101) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 64.702811ms ago: executing program 3 (id=1030): mkdirat(0xffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='isp1301 0x2', 0xb) 55.272138ms ago: executing program 4 (id=1031): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x9, 0x2) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) 2.504062ms ago: executing program 2 (id=1032): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x21) 2.207486ms ago: executing program 3 (id=1033): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x1, 0x25dfdbfb, {{@in6=@mcast2, @in=@loopback, 0x0, 0x4, 0x4000, 0x0, 0xa, 0x60, 0x80, 0x1, 0x0, 0xee01}, {0x9, 0x2, 0x4000000000, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50, 0x6b4d}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000001000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.091653ms ago: executing program 2 (id=1034): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 0s ago: executing program 3 (id=1035): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904", @ANYBLOB="9fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) 0s ago: executing program 2 (id=1036): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x8010) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1feff) kernel console output (not intermixed with test programs): ][ T7525] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f3b11f9e159 [ 88.063576][ T7525] RDX: 00007f3b12e5df10 RSI: 0000000000000058 RDI: 00007f3b12e5df10 [ 88.063583][ T7525] RBP: 00007f3b1203506b R08: 0000000000000000 R09: 0000000000000058 [ 88.063589][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.063595][ T7525] R13: 00007f3b12226308 R14: 00007f3b12226270 R15: 00007ffed0d2d698 [ 88.063610][ T7525] [ 88.067526][ T7525] memory: usage 307200kB, limit 307200kB, failcnt 32762 [ 88.067539][ T7525] memory+swap: usage 432120kB, limit 9007199254740988kB, failcnt 0 [ 88.067546][ T7525] kmem: usage 4856kB, limit 9007199254740988kB, failcnt 0 [ 88.067552][ T7525] Memory cgroup stats for /syz2: [ 88.067667][ T7525] cache 309542912 [ 88.067674][ T7525] rss 12288 [ 88.067678][ T7525] rss_huge 0 [ 88.067681][ T7525] shmem 309542912 [ 88.067685][ T7525] mapped_file 0 [ 88.067689][ T7525] dirty 0 [ 88.067692][ T7525] writeback 0 [ 88.067696][ T7525] workingset_refault_anon 2 [ 88.067700][ T7525] workingset_refault_file 306 [ 88.067704][ T7525] swap 127918080 [ 88.067707][ T7525] swapcached 182976512 [ 88.067711][ T7525] pgpgin 180403 [ 88.067715][ T7525] pgpgout 104817 [ 88.067719][ T7525] pgfault 30470 [ 88.067722][ T7525] pgmajfault 19 [ 88.067726][ T7525] inactive_anon 245600256 [ 88.067730][ T7525] active_anon 59744256 [ 88.067734][ T7525] inactive_file 0 [ 88.067738][ T7525] active_file 0 [ 88.067741][ T7525] unevictable 4194304 [ 88.067745][ T7525] hierarchical_memory_limit 314572800 [ 88.067786][ T7525] hierarchical_memsw_limit 9223372036854771712 [ 88.067793][ T7525] total_cache 309542912 [ 88.067797][ T7525] total_rss 12288 [ 88.067800][ T7525] total_rss_huge 0 [ 88.067833][ T7525] total_shmem 309542912 [ 88.067838][ T7525] total_mapped_file 0 [ 88.067842][ T7525] total_dirty 0 [ 88.067846][ T7525] total_writeback 0 [ 88.067850][ T7525] total_workingset_refault_anon 2 [ 88.067854][ T7525] total_workingset_refault_file 306 [ 88.067858][ T7525] total_swap 127918080 [ 88.067862][ T7525] total_swapcached 182976512 [ 88.067866][ T7525] total_pgpgin 180403 [ 88.067870][ T7525] total_pgpgout 104817 [ 88.067874][ T7525] total_pgfault 30470 [ 88.067878][ T7525] total_pgmajfault 19 [ 88.067881][ T7525] total_inactive_anon 245600256 [ 88.067885][ T7525] total_active_anon 59744256 [ 88.067889][ T7525] total_inactive_file 0 [ 88.067893][ T7525] total_active_file 0 [ 88.067897][ T7525] total_unevictable 4194304 [ 88.067946][ T7525] anon_cost 0 [ 88.067951][ T7525] file_cost 0 [ 88.067955][ T7525] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.525,pid=7515,uid=0 [ 88.068009][ T7525] Memory cgroup out of memory: Killed process 7515 (syz.2.525) total-vm:49268kB, anon-rss:0kB, file-rss:36864kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 88.229722][ T5092] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 88.229907][ T5092] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 88.299669][ T7626] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 88.932321][ T7536] syz.2.525 (7536) used greatest stack depth: 17560 bytes left [ 89.185034][ T7654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.558'. [ 89.288246][ T5092] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 89.289080][ T5092] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 89.580356][ T7672] bond1: entered allmulticast mode [ 89.602345][ T43] audit: type=1400 audit(1790244169.468:551): avc: denied { block_suspend } for pid=7676 comm="syz.2.568" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.690322][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 89.690338][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 89.822993][ T7692] netlink: 'syz.0.574': attribute type 12 has an invalid length. [ 89.868528][ T43] audit: type=1400 audit(1790244169.738:552): avc: denied { unlink } for pid=7691 comm="syz.0.574" name="#3" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.869661][ T7692] overlayfs: conflicting lowerdir path [ 89.926527][ T7698] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 89.977024][ T7698] veth5: entered allmulticast mode [ 89.988546][ T7698] bond2: (slave veth5): Enslaving as an active interface with a down link [ 89.998725][ T7698] macvlan2: entered promiscuous mode [ 89.998746][ T7698] macvlan2: entered allmulticast mode [ 89.999240][ T7698] bond2: entered promiscuous mode [ 90.002234][ T7698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.002871][ T7698] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 90.003157][ T7698] bond2: left promiscuous mode [ 90.021519][ T7700] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 90.021538][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 90.094346][ T7700] kvm [7695]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 90.094745][ T7700] kvm [7695]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 90.140299][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 90.208932][ T7705] bond0: no command found in slaves file - use +ifname or -ifname [ 90.231286][ T43] audit: type=1400 audit(1790244170.098:553): avc: denied { bind } for pid=7703 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 90.231524][ T43] audit: type=1400 audit(1790244170.098:554): avc: denied { listen } for pid=7703 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 90.349251][ T43] audit: type=1400 audit(1790244170.218:555): avc: denied { write } for pid=7709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.426138][ T43] audit: type=1400 audit(1790244170.298:556): avc: denied { watch watch_reads } for pid=7712 comm="syz.4.580" path="/proc/244/task/245/setgroups" dev="proc" ino=18638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 90.447221][ T43] audit: type=1400 audit(1790244170.308:557): avc: denied { write } for pid=7714 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.518373][ T7720] FAULT_INJECTION: forcing a failure. [ 90.518373][ T7720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.518396][ T7720] CPU: 1 UID: 0 PID: 7720 Comm: syz.4.583 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.518411][ T7720] Tainted: [L]=SOFTLOCKUP [ 90.518415][ T7720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.518422][ T7720] Call Trace: [ 90.518425][ T7720] [ 90.518430][ T7720] dump_stack_lvl+0x100/0x190 [ 90.518459][ T7720] should_fail_ex.cold+0x5/0xa [ 90.518475][ T7720] _copy_from_user+0x2e/0xd0 [ 90.518492][ T7720] video_usercopy+0xe71/0x1730 [ 90.518513][ T7720] ? __pfx___video_do_ioctl+0x10/0x10 [ 90.518530][ T7720] ? __pfx_video_usercopy+0x10/0x10 [ 90.518555][ T7720] v4l2_ioctl+0x1bd/0x250 [ 90.518571][ T7720] ? __pfx_v4l2_ioctl+0x10/0x10 [ 90.518589][ T7720] __x64_sys_ioctl+0x18e/0x210 [ 90.518602][ T7720] do_syscall_64+0x123/0x790 [ 90.518623][ T7720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.518635][ T7720] RIP: 0033:0x7f938f19e159 [ 90.518643][ T7720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.518654][ T7720] RSP: 002b:00007f9390104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.518665][ T7720] RAX: ffffffffffffffda RBX: 00007f938f425fa0 RCX: 00007f938f19e159 [ 90.518672][ T7720] RDX: 0000200000000040 RSI: 000000004020565a RDI: 0000000000000003 [ 90.518679][ T7720] RBP: 00007f9390104090 R08: 0000000000000000 R09: 0000000000000000 [ 90.518686][ T7720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.518692][ T7720] R13: 00007f938f426038 R14: 00007f938f425fa0 R15: 00007ffc37ef6d78 [ 90.518706][ T7720] [ 90.556668][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.557162][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.592018][ T7725] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 90.619326][ T7729] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 90.660602][ T7729] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 90.757106][ T7725] veth3: entered allmulticast mode [ 90.767576][ T7725] bond2: (slave veth3): Enslaving as an active interface with a down link [ 90.775120][ T7737] macvlan2: entered promiscuous mode [ 90.775141][ T7737] macvlan2: entered allmulticast mode [ 90.776070][ T7737] bond2: entered promiscuous mode [ 90.777568][ T7737] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.778314][ T7737] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 90.781400][ T7737] bond2: left promiscuous mode [ 90.807709][ T5809] bridge0: entered promiscuous mode [ 90.902197][ T7745] netlink: 'syz.2.588': attribute type 1 has an invalid length. [ 90.902212][ T7745] nbd: error processing sock list [ 90.905794][ T7745] block nbd0: shutting down sockets [ 90.907881][ T7749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.918651][ T7749] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 90.918713][ T7749] CPU: 3 UID: 0 PID: 7749 Comm: syz.4.589 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.918730][ T7749] Tainted: [L]=SOFTLOCKUP [ 90.918734][ T7749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.918740][ T7749] Call Trace: [ 90.918745][ T7749] [ 90.918749][ T7749] dump_stack_lvl+0x100/0x190 [ 90.918775][ T7749] sysfs_warn_dup.cold+0x1c/0x28 [ 90.918793][ T7749] sysfs_create_dir_ns+0x24b/0x2b0 [ 90.918809][ T7749] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 90.918836][ T7749] ? find_held_lock+0x2b/0x80 [ 90.918854][ T7749] ? kobject_add_internal+0x25f/0x930 [ 90.918868][ T7749] ? kobject_add_internal+0x25f/0x930 [ 90.918882][ T7749] ? do_raw_spin_unlock+0x145/0x1e0 [ 90.918898][ T7749] kobject_add_internal+0x2c8/0x930 [ 90.918913][ T7749] kobject_add+0x16a/0x1e0 [ 90.918925][ T7749] ? __pfx_kobject_add+0x10/0x10 [ 90.918939][ T7749] ? __kasan_kmalloc+0xaa/0xb0 [ 90.918953][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 90.918966][ T7749] ? class_to_subsys+0x114/0x150 [ 90.918985][ T7749] device_add+0x294/0x1970 [ 90.919001][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 90.919014][ T7749] ? __pfx_device_add+0x10/0x10 [ 90.919028][ T7749] ? lockdep_init_map_type+0x5c/0x250 [ 90.919041][ T7749] ? __init_waitqueue_head+0xca/0x150 [ 90.919058][ T7749] i2c_new_client_device+0x660/0xd30 [ 90.919074][ T7749] new_device_store+0x20f/0x420 [ 90.919094][ T7749] ? __pfx_new_device_store+0x10/0x10 [ 90.919111][ T7749] ? find_held_lock+0x2b/0x80 [ 90.919127][ T7749] ? sysfs_file_kobj+0xe4/0x290 [ 90.919140][ T7749] ? sysfs_file_kobj+0xe4/0x290 [ 90.919156][ T7749] ? __pfx_new_device_store+0x10/0x10 [ 90.919168][ T7749] dev_attr_store+0x58/0x80 [ 90.919184][ T7749] ? __pfx_dev_attr_store+0x10/0x10 [ 90.919201][ T7749] sysfs_kf_write+0xf2/0x150 [ 90.919216][ T7749] kernfs_fop_write_iter+0x3e0/0x5f0 [ 90.919228][ T7749] ? __pfx_sysfs_kf_write+0x10/0x10 [ 90.919245][ T7749] vfs_write+0x6af/0x1050 [ 90.919257][ T7749] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 90.919270][ T7749] ? __pfx_vfs_write+0x10/0x10 [ 90.919280][ T7749] ? find_held_lock+0x2b/0x80 [ 90.919305][ T7749] ksys_write+0x12a/0x250 [ 90.919316][ T7749] ? __pfx_ksys_write+0x10/0x10 [ 90.919331][ T7749] do_syscall_64+0x123/0x790 [ 90.919349][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.919361][ T7749] RIP: 0033:0x7f938f19e159 [ 90.919371][ T7749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.919381][ T7749] RSP: 002b:00007f9390104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.919392][ T7749] RAX: ffffffffffffffda RBX: 00007f938f425fa0 RCX: 00007f938f19e159 [ 90.919399][ T7749] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000003 [ 90.919405][ T7749] RBP: 00007f938f23506b R08: 0000000000000000 R09: 0000000000000000 [ 90.919412][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.919418][ T7749] R13: 00007f938f426038 R14: 00007f938f425fa0 R15: 00007ffc37ef6d78 [ 90.919433][ T7749] [ 90.919486][ T7749] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 90.919506][ T7749] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 91.077511][ T6152] logitech-hidpp-device 0005:046D:B012.0005: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 91.123720][ T7762] fido_id[7762]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.142287][ T5092] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 91.144866][ T5092] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 91.179034][ T7771] overlay: Unknown parameter 'dont_appraise' [ 91.196088][ T5092] Bluetooth: hci1: unexpected event for opcode 0x040d [ 91.211436][ T7779] netlink: 36 bytes leftover after parsing attributes in process `syz.3.599'. [ 91.241903][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.261500][ T7780] 1ªî{X¹¦: left allmulticast mode [ 91.333896][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.334307][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.350373][ T7780] dummy0: left promiscuous mode [ 91.367197][ T7792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.603'. [ 91.435487][ T7780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.565507][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.565552][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.565583][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.565613][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.663474][ T5092] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 92.804287][ T7823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.812160][ T7823] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 92.812176][ T7823] CPU: 3 UID: 0 PID: 7823 Comm: syz.4.615 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.812191][ T7823] Tainted: [L]=SOFTLOCKUP [ 92.812195][ T7823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.812201][ T7823] Call Trace: [ 92.812206][ T7823] [ 92.812222][ T7823] dump_stack_lvl+0x100/0x190 [ 92.812243][ T7823] sysfs_warn_dup.cold+0x1c/0x28 [ 92.812260][ T7823] sysfs_create_dir_ns+0x24b/0x2b0 [ 92.812277][ T7823] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 92.812291][ T7823] ? find_held_lock+0x2b/0x80 [ 92.812307][ T7823] ? kobject_add_internal+0x25f/0x930 [ 92.812320][ T7823] ? kobject_add_internal+0x25f/0x930 [ 92.812334][ T7823] ? do_raw_spin_unlock+0x145/0x1e0 [ 92.812349][ T7823] kobject_add_internal+0x2c8/0x930 [ 92.812365][ T7823] kobject_add+0x16a/0x1e0 [ 92.812377][ T7823] ? __pfx_kobject_add+0x10/0x10 [ 92.812391][ T7823] ? __kasan_kmalloc+0xaa/0xb0 [ 92.812405][ T7823] ? lockdep_init_map_type+0x5c/0x250 [ 92.812418][ T7823] ? class_to_subsys+0x114/0x150 [ 92.812437][ T7823] device_add+0x294/0x1970 [ 92.812452][ T7823] ? lockdep_init_map_type+0x5c/0x250 [ 92.812465][ T7823] ? __pfx_device_add+0x10/0x10 [ 92.812479][ T7823] ? lockdep_init_map_type+0x5c/0x250 [ 92.812492][ T7823] ? __init_waitqueue_head+0xca/0x150 [ 92.812509][ T7823] i2c_new_client_device+0x660/0xd30 [ 92.812525][ T7823] new_device_store+0x20f/0x420 [ 92.812538][ T7823] ? __pfx_new_device_store+0x10/0x10 [ 92.812553][ T7823] ? find_held_lock+0x2b/0x80 [ 92.812568][ T7823] ? sysfs_file_kobj+0xe4/0x290 [ 92.812580][ T7823] ? sysfs_file_kobj+0xe4/0x290 [ 92.812594][ T7823] ? __pfx_new_device_store+0x10/0x10 [ 92.812605][ T7823] dev_attr_store+0x58/0x80 [ 92.812619][ T7823] ? __pfx_dev_attr_store+0x10/0x10 [ 92.812636][ T7823] sysfs_kf_write+0xf2/0x150 [ 92.812656][ T7823] kernfs_fop_write_iter+0x3e0/0x5f0 [ 92.812671][ T7823] ? __pfx_sysfs_kf_write+0x10/0x10 [ 92.812706][ T7823] vfs_write+0x6af/0x1050 [ 92.812729][ T7823] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 92.812755][ T7823] ? __pfx_vfs_write+0x10/0x10 [ 92.812775][ T7823] ? find_held_lock+0x2b/0x80 [ 92.812818][ T7823] ksys_write+0x12a/0x250 [ 92.812838][ T7823] ? __pfx_ksys_write+0x10/0x10 [ 92.812870][ T7823] do_syscall_64+0x123/0x790 [ 92.812904][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.812926][ T7823] RIP: 0033:0x7f938f19e159 [ 92.812943][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.812962][ T7823] RSP: 002b:00007f9390104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.812982][ T7823] RAX: ffffffffffffffda RBX: 00007f938f425fa0 RCX: 00007f938f19e159 [ 92.812997][ T7823] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000003 [ 92.813009][ T7823] RBP: 00007f938f23506b R08: 0000000000000000 R09: 0000000000000000 [ 92.813020][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.813030][ T7823] R13: 00007f938f426038 R14: 00007f938f425fa0 R15: 00007ffc37ef6d78 [ 92.813056][ T7823] [ 92.813147][ T7823] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 92.813184][ T7823] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 93.196415][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 93.196430][ T43] audit: type=1400 audit(1790244173.068:567): avc: denied { connect } for pid=7828 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.315289][ T43] audit: type=1400 audit(1790244173.078:568): avc: denied { read } for pid=7828 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.175364][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 94.250114][ T43] audit: type=1400 audit(1790244174.118:569): avc: denied { map } for pid=7852 comm="syz.4.628" path="socket:[17777]" dev="sockfs" ino=17777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.250254][ T43] audit: type=1400 audit(1790244174.118:570): avc: denied { read } for pid=7852 comm="syz.4.628" path="socket:[17777]" dev="sockfs" ino=17777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.337442][ T10] usb 7-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 94.338611][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.338655][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 94.338674][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 94.338701][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.349622][ T7841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.349716][ T7841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.406622][ T43] audit: type=1400 audit(1790244174.278:571): avc: denied { read } for pid=7859 comm="syz.0.632" name="usbmon2" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.406770][ T43] audit: type=1400 audit(1790244174.278:572): avc: denied { open } for pid=7859 comm="syz.0.632" path="/dev/usbmon2" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.410266][ T43] audit: type=1400 audit(1790244174.278:573): avc: denied { map } for pid=7859 comm="syz.0.632" path="/dev/usbmon2" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.545236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.585224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 94.605225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.675226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.925269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.935241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.125253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.305239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.415208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.435209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.975930][ T10] usb 7-1: USB disconnect, device number 5 [ 96.259492][ T5092] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 98.507349][ T43] audit: type=1400 audit(1790244178.378:574): avc: denied { watch } for pid=7897 comm="syz.4.643" path="/128/bus" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.507400][ T43] audit: type=1400 audit(1790244178.378:575): avc: denied { watch_sb watch_reads } for pid=7897 comm="syz.4.643" path="/128/bus" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.673170][ T7905] warning: `syz.0.642' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.300497][ T43] audit: type=1400 audit(1790244179.168:576): avc: denied { sqpoll } for pid=7917 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.041605][ T43] audit: type=1400 audit(1790244179.908:577): avc: denied { mmap_zero } for pid=7924 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 100.320763][ T43] audit: type=1400 audit(1790244180.188:578): avc: denied { create } for pid=7936 comm="syz.2.659" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.323526][ T43] audit: type=1400 audit(1790244180.188:579): avc: denied { read } for pid=7936 comm="syz.2.659" name="file0" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.323929][ T43] audit: type=1400 audit(1790244180.188:580): avc: denied { open } for pid=7936 comm="syz.2.659" path="/188/file0" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.344058][ T43] audit: type=1400 audit(1790244180.208:581): avc: denied { unlink } for pid=5732 comm="syz-executor" name="file0" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.370886][ T7939] netlink: 9 bytes leftover after parsing attributes in process `syz.2.660'. [ 100.371196][ T7939] 1ªî{X¹¦: entered promiscuous mode [ 100.372168][ T7939] netlink: 5 bytes leftover after parsing attributes in process `syz.2.660'. [ 100.372260][ T7939] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 100.374254][ T7939] 0ªî{X¹¦: left promiscuous mode [ 100.374277][ T7939] 0ªî{X¹¦: entered allmulticast mode [ 100.379494][ T7939] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 100.681507][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.662'. [ 100.681613][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.662'. [ 101.328745][ T7951] jffs2: notice: (7951) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 104.273175][ T8000] loop0: detected capacity change from 0 to 32768 [ 104.987354][ T43] audit: type=1326 audit(1790244184.858:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.678" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b11f9e159 code=0x7ffc0000 [ 104.987421][ T43] audit: type=1326 audit(1790244184.858:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.678" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b11f9e159 code=0x7ffc0000 [ 104.993552][ T43] audit: type=1326 audit(1790244184.858:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.678" exe="/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f3b11f9e159 code=0x7ffc0000 [ 104.993600][ T43] audit: type=1326 audit(1790244184.858:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.678" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b11f9e159 code=0x7ffc0000 [ 104.993641][ T43] audit: type=1326 audit(1790244184.858:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.678" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b11f9e159 code=0x7ffc0000 [ 105.047016][ T8017] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 106.103528][ T43] audit: type=1400 audit(1790244185.968:587): avc: denied { write } for pid=8044 comm="syz.0.697" name="ptype" dev="proc" ino=4026533026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 106.255280][ T43] audit: type=1400 audit(1790244186.118:588): avc: denied { shutdown } for pid=8052 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.065947][ T35] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 108.216026][ T35] usb 8-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 108.217011][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.219040][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.219054][ T35] usb 8-1: Product: syz [ 108.219061][ T35] usb 8-1: Manufacturer: syz [ 108.219068][ T35] usb 8-1: SerialNumber: syz [ 108.223577][ T35] usb 8-1: config 0 descriptor?? [ 108.229268][ T35] rndis_host 8-1:0.0: rndis: master #0/ffff888035df5000 slave #1/0000000000000000 [ 108.635222][ T10] usb 8-1: USB disconnect, device number 8 [ 108.745278][ T6152] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 108.874682][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.874893][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.905347][ T6152] usb 7-1: Using ep0 maxpacket: 32 [ 108.905869][ T6152] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 108.906705][ T6152] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 108.906719][ T6152] usb 7-1: config 0 has no interface number 0 [ 108.908303][ T6152] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.908316][ T6152] usb 7-1: Product: syz [ 108.908323][ T6152] usb 7-1: Manufacturer: syz [ 108.908331][ T6152] usb 7-1: SerialNumber: syz [ 108.988431][ T6152] usb 7-1: config 0 descriptor?? [ 109.928306][ T8094] binfmt_misc: register: failed to install interpreter ./file0 [ 110.255543][ T6152] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 110.255571][ T6152] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 110.952210][ T8103] Failed to initialize the IGMP autojoin socket (err -2) [ 111.059240][ T43] audit: type=1400 audit(1790244190.928:589): avc: denied { create } for pid=8105 comm="syz.4.720" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.528396][ T6152] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 111.528596][ T6152] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 111.541824][ T6152] usb 7-1: USB disconnect, device number 6 [ 111.629618][ T8120] input: syz1 as /devices/virtual/input/input6 [ 111.642417][ T43] audit: type=1400 audit(1790244191.508:590): avc: denied { read } for pid=5129 comm="acpid" name="event4" dev="devtmpfs" ino=3074 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.642934][ T43] audit: type=1400 audit(1790244191.508:591): avc: denied { open } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3074 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.643433][ T43] audit: type=1400 audit(1790244191.508:592): avc: denied { ioctl } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3074 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.837164][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.837622][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.945725][ T43] audit: type=1400 audit(1790244193.808:593): avc: denied { mount } for pid=8158 comm="syz.2.742" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.985769][ T5092] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 114.469600][ T8169] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 114.511741][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 114.511764][ T8171] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 114.832172][ T8187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.754'. [ 114.832285][ T8187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.754'. [ 114.841984][ T8189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.755'. [ 114.899399][ T43] audit: type=1326 audit(1790244194.768:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.4.757" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938f19e159 code=0x7ffc0000 [ 114.901122][ T43] audit: type=1326 audit(1790244194.768:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.4.757" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938f19e159 code=0x7ffc0000 [ 114.901271][ T43] audit: type=1326 audit(1790244194.768:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.4.757" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f938f19e159 code=0x7ffc0000 [ 114.901398][ T43] audit: type=1326 audit(1790244194.768:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.4.757" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938f19e159 code=0x7ffc0000 [ 114.901585][ T43] audit: type=1326 audit(1790244194.768:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz.4.757" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938f19e159 code=0x7ffc0000 [ 115.046206][ T8200] kvm [8197]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xcc00 [ 115.048279][ T8200] kvm [8197]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x8732 [ 115.074427][ T8200] kvm [8197]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xe730 [ 115.728354][ T8217] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 116.032536][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 116.460628][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 116.460674][ T43] audit: type=1400 audit(1790244196.248:615): avc: denied { read } for pid=8238 comm="syz.3.775" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.460706][ T43] audit: type=1400 audit(1790244196.248:616): avc: denied { read open } for pid=8238 comm="syz.3.775" path="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.460734][ T43] audit: type=1400 audit(1790244196.248:617): avc: denied { setattr } for pid=8238 comm="syz.3.775" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.955252][ T1036] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 117.106286][ T1036] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.107293][ T1036] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.107329][ T1036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 117.107346][ T1036] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.109147][ T1036] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.109160][ T1036] usb 7-1: Product: syz [ 117.109167][ T1036] usb 7-1: Manufacturer: syz [ 117.109174][ T1036] usb 7-1: SerialNumber: syz [ 117.110748][ T1036] usb 7-1: config 0 descriptor?? [ 117.177080][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 117.252000][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.252201][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.832508][ T5836] usb 7-1: USB disconnect, device number 7 [ 118.466344][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.789'. [ 118.571948][ T43] audit: type=1326 audit(1790244198.438:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.0.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb936d9e159 code=0x7ffc0000 [ 118.571983][ T43] audit: type=1326 audit(1790244198.438:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.0.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb936d9e159 code=0x7ffc0000 [ 118.573344][ T43] audit: type=1326 audit(1790244198.438:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.0.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb936d9e159 code=0x7ffc0000 [ 118.573371][ T43] audit: type=1326 audit(1790244198.438:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.0.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb936d9e159 code=0x7ffc0000 [ 118.574611][ T43] audit: type=1326 audit(1790244198.438:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.0.791" exe="/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fb936d9e159 code=0x7ffc0000 [ 118.574827][ T43] audit: type=1326 audit(1790244198.438:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.0.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb936d9e159 code=0x7ffc0000 [ 118.574972][ T43] audit: type=1326 audit(1790244198.438:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="syz.0.791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb936d9e159 code=0x7ffc0000 [ 123.362853][ T8362] binfmt_misc: register: failed to install interpreter ./file2 [ 123.363347][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 123.363360][ T43] audit: type=1400 audit(1790244203.228:631): avc: denied { remount } for pid=8361 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.701085][ T8378] syz.2.830(8378): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 123.987374][ T8391] Failed to initialize the IGMP autojoin socket (err -2) [ 124.135641][ T6152] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 124.845304][ T6152] usb 7-1: Using ep0 maxpacket: 16 [ 124.846696][ T6152] usb 7-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 0.00 [ 124.847554][ T6152] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.847570][ T6152] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.847581][ T6152] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.847599][ T6152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.848986][ T6152] usb 7-1: config 0 descriptor?? [ 124.893243][ T8401] wireguard: wg1: Could not create IPv4 socket [ 124.893264][ T8401] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 125.010919][ T8405] usb usb1: check_ctrlrecip: process 8405 (syz.4.840) requesting ep 01 but needs 81 [ 125.010939][ T8405] usb usb1: usbfs: process 8405 (syz.4.840) did not claim interface 0 before use [ 126.144361][ T6152] hid-multitouch 0003:0004:0000.0006: unknown main item tag 0x0 [ 126.144381][ T6152] hid-multitouch 0003:0004:0000.0006: unknown main item tag 0x0 [ 126.144393][ T6152] hid-multitouch 0003:0004:0000.0006: unknown main item tag 0x0 [ 126.144405][ T6152] hid-multitouch 0003:0004:0000.0006: unknown main item tag 0x0 [ 126.144417][ T6152] hid-multitouch 0003:0004:0000.0006: unknown main item tag 0x0 [ 126.144429][ T6152] hid-multitouch 0003:0004:0000.0006: unknown main item tag 0x0 [ 126.144441][ T6152] hid-multitouch 0003:0004:0000.0006: unknown main item tag 0x0 [ 126.144453][ T6152] hid-multitouch 0003:0004:0000.0006: unknown main item tag 0x0 [ 126.144465][ T6152] hid-multitouch 0003:0004:0000.0006: unknown main item tag 0x0 [ 126.144477][ T6152] hid-multitouch 0003:0004:0000.0006: unknown main item tag 0x0 [ 126.167547][ T6152] hid-multitouch 0003:0004:0000.0006: hidraw1: USB HID v0.00 Device [HID 0004:0000] on usb-dummy_hcd.2-1/input0 [ 126.168908][ T6152] usb 7-1: USB disconnect, device number 8 [ 126.282492][ T8428] fido_id[8428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 126.905273][ T5809] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 127.067118][ T5809] usb 9-1: not running at top speed; connect to a high speed hub [ 127.067181][ T5809] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 127.068146][ T5809] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 127.070270][ T5809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.070331][ T5809] usb 9-1: Product: syz [ 127.070339][ T5809] usb 9-1: Manufacturer: syz [ 127.070380][ T5809] usb 9-1: SerialNumber: syz [ 127.082557][ T5809] oti6858 9-1:1.0: oti6858 converter detected [ 127.097854][ T43] audit: type=1400 audit(1790244206.968:632): avc: denied { create } for pid=8453 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 127.098695][ T5809] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 127.528906][ T5836] usb 9-1: USB disconnect, device number 8 [ 127.923574][ T5836] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 127.923909][ T5836] oti6858 9-1:1.0: device disconnected [ 128.101953][ T43] audit: type=1400 audit(1790244207.968:633): avc: denied { ioctl } for pid=8456 comm="syz.2.861" path="socket:[21674]" dev="sockfs" ino=21674 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.139171][ T43] audit: type=1400 audit(1790244208.008:634): avc: denied { mounton } for pid=8465 comm="syz.4.863" path="/183/file0" dev="tmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 128.323946][ T5092] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 128.326151][ T5092] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 128.425979][ T8471] UDC core: g1: couldn't find an available UDC or it's busy [ 128.498228][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.498920][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.533794][ T8477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.542851][ T8477] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 128.542867][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: syz.2.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.542883][ T8477] Tainted: [L]=SOFTLOCKUP [ 128.542886][ T8477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.542893][ T8477] Call Trace: [ 128.542897][ T8477] [ 128.542901][ T8477] dump_stack_lvl+0x100/0x190 [ 128.542936][ T8477] sysfs_warn_dup.cold+0x1c/0x28 [ 128.542954][ T8477] sysfs_create_dir_ns+0x24b/0x2b0 [ 128.542973][ T8477] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 128.542988][ T8477] ? find_held_lock+0x2b/0x80 [ 128.543005][ T8477] ? kobject_add_internal+0x25f/0x930 [ 128.543021][ T8477] ? kobject_add_internal+0x25f/0x930 [ 128.543035][ T8477] ? do_raw_spin_unlock+0x145/0x1e0 [ 128.543050][ T8477] kobject_add_internal+0x2c8/0x930 [ 128.543065][ T8477] kobject_add+0x16a/0x1e0 [ 128.543077][ T8477] ? __pfx_kobject_add+0x10/0x10 [ 128.543091][ T8477] ? __kasan_kmalloc+0xaa/0xb0 [ 128.543105][ T8477] ? lockdep_init_map_type+0x5c/0x250 [ 128.543119][ T8477] ? class_to_subsys+0x114/0x150 [ 128.543138][ T8477] device_add+0x294/0x1970 [ 128.543154][ T8477] ? lockdep_init_map_type+0x5c/0x250 [ 128.543167][ T8477] ? __pfx_device_add+0x10/0x10 [ 128.543182][ T8477] ? lockdep_init_map_type+0x5c/0x250 [ 128.543194][ T8477] ? __init_waitqueue_head+0xca/0x150 [ 128.543211][ T8477] i2c_new_client_device+0x660/0xd30 [ 128.543230][ T8477] new_device_store+0x20f/0x420 [ 128.543245][ T8477] ? __pfx_new_device_store+0x10/0x10 [ 128.543261][ T8477] ? find_held_lock+0x2b/0x80 [ 128.543276][ T8477] ? sysfs_file_kobj+0xe4/0x290 [ 128.543289][ T8477] ? sysfs_file_kobj+0xe4/0x290 [ 128.543303][ T8477] ? __pfx_new_device_store+0x10/0x10 [ 128.543313][ T8477] dev_attr_store+0x58/0x80 [ 128.543329][ T8477] ? __pfx_dev_attr_store+0x10/0x10 [ 128.543343][ T8477] sysfs_kf_write+0xf2/0x150 [ 128.543359][ T8477] kernfs_fop_write_iter+0x3e0/0x5f0 [ 128.543389][ T8477] ? __pfx_sysfs_kf_write+0x10/0x10 [ 128.543407][ T8477] vfs_write+0x6af/0x1050 [ 128.543420][ T8477] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 128.543435][ T8477] ? __pfx_vfs_write+0x10/0x10 [ 128.543446][ T8477] ? find_held_lock+0x2b/0x80 [ 128.543472][ T8477] ksys_write+0x12a/0x250 [ 128.543484][ T8477] ? __pfx_ksys_write+0x10/0x10 [ 128.543501][ T8477] do_syscall_64+0x123/0x790 [ 128.543521][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.543533][ T8477] RIP: 0033:0x7f3b11f9e159 [ 128.543544][ T8477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.543554][ T8477] RSP: 002b:00007f3b12ec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.543565][ T8477] RAX: ffffffffffffffda RBX: 00007f3b12225fa0 RCX: 00007f3b11f9e159 [ 128.543572][ T8477] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000003 [ 128.543578][ T8477] RBP: 00007f3b1203506b R08: 0000000000000000 R09: 0000000000000000 [ 128.543585][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.543591][ T8477] R13: 00007f3b12226038 R14: 00007f3b12225fa0 R15: 00007ffed0d2d698 [ 128.543606][ T8477] [ 128.544704][ T8477] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.544733][ T8477] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 128.871157][ T8483] overlay: Unknown parameter 'dont_appraise' [ 128.895398][ T5092] Bluetooth: hci3: unexpected event for opcode 0x040d [ 129.146324][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 129.223808][ T5092] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 129.224089][ T5092] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 129.259046][ T8509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.264486][ T8509] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 129.264504][ T8509] CPU: 0 UID: 0 PID: 8509 Comm: syz.2.878 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.264537][ T8509] Tainted: [L]=SOFTLOCKUP [ 129.264543][ T8509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.264559][ T8509] Call Trace: [ 129.264566][ T8509] [ 129.264575][ T8509] dump_stack_lvl+0x100/0x190 [ 129.264612][ T8509] sysfs_warn_dup.cold+0x1c/0x28 [ 129.264638][ T8509] sysfs_create_dir_ns+0x24b/0x2b0 [ 129.264663][ T8509] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 129.264689][ T8509] ? find_held_lock+0x2b/0x80 [ 129.264722][ T8509] ? kobject_add_internal+0x25f/0x930 [ 129.264750][ T8509] ? kobject_add_internal+0x25f/0x930 [ 129.264774][ T8509] ? do_raw_spin_unlock+0x145/0x1e0 [ 129.264796][ T8509] kobject_add_internal+0x2c8/0x930 [ 129.264813][ T8509] kobject_add+0x16a/0x1e0 [ 129.264828][ T8509] ? __pfx_kobject_add+0x10/0x10 [ 129.264844][ T8509] ? __kasan_kmalloc+0xaa/0xb0 [ 129.264860][ T8509] ? lockdep_init_map_type+0x5c/0x250 [ 129.264875][ T8509] ? class_to_subsys+0x114/0x150 [ 129.264897][ T8509] device_add+0x294/0x1970 [ 129.264915][ T8509] ? lockdep_init_map_type+0x5c/0x250 [ 129.264930][ T8509] ? __pfx_device_add+0x10/0x10 [ 129.264946][ T8509] ? lockdep_init_map_type+0x5c/0x250 [ 129.264961][ T8509] ? __init_waitqueue_head+0xca/0x150 [ 129.264981][ T8509] i2c_new_client_device+0x660/0xd30 [ 129.265027][ T8509] new_device_store+0x20f/0x420 [ 129.265045][ T8509] ? __pfx_new_device_store+0x10/0x10 [ 129.265064][ T8509] ? find_held_lock+0x2b/0x80 [ 129.265081][ T8509] ? sysfs_file_kobj+0xe4/0x290 [ 129.265097][ T8509] ? sysfs_file_kobj+0xe4/0x290 [ 129.265114][ T8509] ? __pfx_new_device_store+0x10/0x10 [ 129.265129][ T8509] dev_attr_store+0x58/0x80 [ 129.265147][ T8509] ? __pfx_dev_attr_store+0x10/0x10 [ 129.265180][ T8509] sysfs_kf_write+0xf2/0x150 [ 129.265197][ T8509] kernfs_fop_write_iter+0x3e0/0x5f0 [ 129.265210][ T8509] ? __pfx_sysfs_kf_write+0x10/0x10 [ 129.265228][ T8509] vfs_write+0x6af/0x1050 [ 129.265241][ T8509] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 129.265257][ T8509] ? __pfx_vfs_write+0x10/0x10 [ 129.265268][ T8509] ? find_held_lock+0x2b/0x80 [ 129.265297][ T8509] ksys_write+0x12a/0x250 [ 129.265310][ T8509] ? __pfx_ksys_write+0x10/0x10 [ 129.265328][ T8509] do_syscall_64+0x123/0x790 [ 129.265349][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.265362][ T8509] RIP: 0033:0x7f3b11f9e159 [ 129.265374][ T8509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.265386][ T8509] RSP: 002b:00007f3b12ec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.265399][ T8509] RAX: ffffffffffffffda RBX: 00007f3b12225fa0 RCX: 00007f3b11f9e159 [ 129.265407][ T8509] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000003 [ 129.265414][ T8509] RBP: 00007f3b1203506b R08: 0000000000000000 R09: 0000000000000000 [ 129.265422][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.265429][ T8509] R13: 00007f3b12226038 R14: 00007f3b12225fa0 R15: 00007ffed0d2d698 [ 129.265565][ T8509] [ 129.266931][ T8509] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 129.266959][ T8509] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 129.625417][ T6152] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 129.775852][ T6152] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 129.786023][ T6152] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 129.786042][ T6152] usb 7-1: can't read configurations, error -61 [ 129.915316][ T6152] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 130.075641][ T6152] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 130.076831][ T6152] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 130.076848][ T6152] usb 7-1: can't read configurations, error -61 [ 130.077037][ T6152] usb usb7-port1: attempt power cycle [ 130.465391][ T6152] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 130.506784][ T43] audit: type=1400 audit(1790244210.378:635): avc: denied { create } for pid=8523 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.507244][ T43] audit: type=1400 audit(1790244210.378:636): avc: denied { getopt } for pid=8523 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.555536][ T6152] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 130.556943][ T6152] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 130.556970][ T6152] usb 7-1: can't read configurations, error -61 [ 130.636532][ T43] audit: type=1400 audit(1790244210.508:637): avc: denied { bpf } for pid=8530 comm="syz.0.886" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.678216][ T8533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.685382][ T6152] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 130.693185][ T8533] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 130.693207][ T8533] CPU: 2 UID: 0 PID: 8533 Comm: syz.0.887 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.693231][ T8533] Tainted: [L]=SOFTLOCKUP [ 130.693237][ T8533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.693248][ T8533] Call Trace: [ 130.693255][ T8533] [ 130.693262][ T8533] dump_stack_lvl+0x100/0x190 [ 130.693292][ T8533] sysfs_warn_dup.cold+0x1c/0x28 [ 130.693319][ T8533] sysfs_create_dir_ns+0x24b/0x2b0 [ 130.693343][ T8533] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 130.693366][ T8533] ? find_held_lock+0x2b/0x80 [ 130.693392][ T8533] ? kobject_add_internal+0x25f/0x930 [ 130.693413][ T8533] ? kobject_add_internal+0x25f/0x930 [ 130.693434][ T8533] ? do_raw_spin_unlock+0x145/0x1e0 [ 130.693460][ T8533] kobject_add_internal+0x2c8/0x930 [ 130.693484][ T8533] kobject_add+0x16a/0x1e0 [ 130.693504][ T8533] ? __pfx_kobject_add+0x10/0x10 [ 130.693525][ T8533] ? __kasan_kmalloc+0xaa/0xb0 [ 130.693546][ T8533] ? lockdep_init_map_type+0x5c/0x250 [ 130.693565][ T8533] ? class_to_subsys+0x114/0x150 [ 130.693594][ T8533] device_add+0x294/0x1970 [ 130.693618][ T8533] ? lockdep_init_map_type+0x5c/0x250 [ 130.693638][ T8533] ? __pfx_device_add+0x10/0x10 [ 130.693659][ T8533] ? lockdep_init_map_type+0x5c/0x250 [ 130.693678][ T8533] ? __init_waitqueue_head+0xca/0x150 [ 130.693705][ T8533] i2c_new_client_device+0x660/0xd30 [ 130.693730][ T8533] new_device_store+0x20f/0x420 [ 130.693751][ T8533] ? __pfx_new_device_store+0x10/0x10 [ 130.693777][ T8533] ? find_held_lock+0x2b/0x80 [ 130.693916][ T8533] ? sysfs_file_kobj+0xe4/0x290 [ 130.693939][ T8533] ? sysfs_file_kobj+0xe4/0x290 [ 130.693962][ T8533] ? __pfx_new_device_store+0x10/0x10 [ 130.693979][ T8533] dev_attr_store+0x58/0x80 [ 130.694002][ T8533] ? __pfx_dev_attr_store+0x10/0x10 [ 130.694024][ T8533] sysfs_kf_write+0xf2/0x150 [ 130.694046][ T8533] kernfs_fop_write_iter+0x3e0/0x5f0 [ 130.694064][ T8533] ? __pfx_sysfs_kf_write+0x10/0x10 [ 130.694086][ T8533] vfs_write+0x6af/0x1050 [ 130.694106][ T8533] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 130.694135][ T8533] ? __pfx_vfs_write+0x10/0x10 [ 130.694152][ T8533] ? find_held_lock+0x2b/0x80 [ 130.694207][ T8533] ksys_write+0x12a/0x250 [ 130.694228][ T8533] ? __pfx_ksys_write+0x10/0x10 [ 130.694253][ T8533] do_syscall_64+0x123/0x790 [ 130.694282][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.694308][ T8533] RIP: 0033:0x7fb936d9e159 [ 130.694324][ T8533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.694340][ T8533] RSP: 002b:00007fb937cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.694360][ T8533] RAX: ffffffffffffffda RBX: 00007fb937025fa0 RCX: 00007fb936d9e159 [ 130.694371][ T8533] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000007 [ 130.694381][ T8533] RBP: 00007fb936e3506b R08: 0000000000000000 R09: 0000000000000000 [ 130.694392][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.694402][ T8533] R13: 00007fb937026038 R14: 00007fb937025fa0 R15: 00007fff6ea2ac18 [ 130.694426][ T8533] [ 130.694451][ T8533] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 130.694479][ T8533] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 130.736192][ T6152] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 130.765879][ T6152] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 130.765911][ T6152] usb 7-1: can't read configurations, error -61 [ 130.808082][ T6152] usb usb7-port1: unable to enumerate USB device [ 130.874195][ T5092] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 130.874263][ T5092] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 131.430990][ T43] audit: type=1400 audit(1790244211.298:638): avc: denied { module_request } for pid=8540 comm="syz.3.890" kmod="algif-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 131.445321][ T43] audit: type=1400 audit(1790244211.298:639): avc: denied { perfmon } for pid=8540 comm="syz.3.890" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.598681][ T8554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.599769][ T8554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.658188][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.658493][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.691492][ T8557] xt_nfacct: accounting object `' does not exist [ 131.727589][ T8554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.770294][ T8562] No source specified [ 131.810029][ T8564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.866852][ T8565] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 131.866878][ T8565] CPU: 0 UID: 0 PID: 8565 Comm: syz.3.897 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.866906][ T8565] Tainted: [L]=SOFTLOCKUP [ 131.866915][ T8565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.866926][ T8565] Call Trace: [ 131.866935][ T8565] [ 131.866943][ T8565] dump_stack_lvl+0x100/0x190 [ 131.866978][ T8565] sysfs_warn_dup.cold+0x1c/0x28 [ 131.867009][ T8565] sysfs_create_dir_ns+0x24b/0x2b0 [ 131.867040][ T8565] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 131.867067][ T8565] ? find_held_lock+0x2b/0x80 [ 131.867094][ T8565] ? kobject_add_internal+0x25f/0x930 [ 131.867140][ T8565] ? kobject_add_internal+0x25f/0x930 [ 131.867167][ T8565] ? do_raw_spin_unlock+0x145/0x1e0 [ 131.867198][ T8565] kobject_add_internal+0x2c8/0x930 [ 131.867234][ T8565] kobject_add+0x16a/0x1e0 [ 131.867257][ T8565] ? __pfx_kobject_add+0x10/0x10 [ 131.867287][ T8565] ? __kasan_kmalloc+0xaa/0xb0 [ 131.867316][ T8565] ? lockdep_init_map_type+0x5c/0x250 [ 131.867344][ T8565] ? class_to_subsys+0x114/0x150 [ 131.867383][ T8565] device_add+0x294/0x1970 [ 131.867414][ T8565] ? lockdep_init_map_type+0x5c/0x250 [ 131.867438][ T8565] ? __pfx_device_add+0x10/0x10 [ 131.867464][ T8565] ? lockdep_init_map_type+0x5c/0x250 [ 131.867487][ T8565] ? __init_waitqueue_head+0xca/0x150 [ 131.867521][ T8565] i2c_new_client_device+0x660/0xd30 [ 131.867550][ T8565] new_device_store+0x20f/0x420 [ 131.867576][ T8565] ? __pfx_new_device_store+0x10/0x10 [ 131.867607][ T8565] ? find_held_lock+0x2b/0x80 [ 131.867635][ T8565] ? sysfs_file_kobj+0xe4/0x290 [ 131.867658][ T8565] ? sysfs_file_kobj+0xe4/0x290 [ 131.867685][ T8565] ? __pfx_new_device_store+0x10/0x10 [ 131.867706][ T8565] dev_attr_store+0x58/0x80 [ 131.867733][ T8565] ? __pfx_dev_attr_store+0x10/0x10 [ 131.867761][ T8565] sysfs_kf_write+0xf2/0x150 [ 131.867789][ T8565] kernfs_fop_write_iter+0x3e0/0x5f0 [ 131.867810][ T8565] ? __pfx_sysfs_kf_write+0x10/0x10 [ 131.867838][ T8565] vfs_write+0x6af/0x1050 [ 131.867862][ T8565] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 131.867887][ T8565] ? __pfx_vfs_write+0x10/0x10 [ 131.867907][ T8565] ? find_held_lock+0x2b/0x80 [ 131.867954][ T8565] ksys_write+0x12a/0x250 [ 131.867976][ T8565] ? __pfx_ksys_write+0x10/0x10 [ 131.868006][ T8565] do_syscall_64+0x123/0x790 [ 131.868039][ T8565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.868061][ T8565] RIP: 0033:0x7fbdec19e159 [ 131.868079][ T8565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.868100][ T8565] RSP: 002b:00007fbdecfab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.868121][ T8565] RAX: ffffffffffffffda RBX: 00007fbdec426090 RCX: 00007fbdec19e159 [ 131.868133][ T8565] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000007 [ 131.868145][ T8565] RBP: 00007fbdec23506b R08: 0000000000000000 R09: 0000000000000000 [ 131.868157][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.868168][ T8565] R13: 00007fbdec426128 R14: 00007fbdec426090 R15: 00007ffc6931d898 [ 131.868197][ T8565] [ 131.868263][ T8565] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 131.868295][ T8565] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 131.885570][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.885599][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.885618][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.885636][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.976839][ T5092] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 131.976891][ T5092] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 132.381398][ T8575] nfs: Bad value for 'retrans' [ 132.407354][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 132.407374][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 132.428008][ T8579] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9236 sclass=netlink_xfrm_socket pid=8579 comm=syz.2.903 [ 132.461199][ T43] audit: type=1400 audit(1790244212.328:640): avc: denied { set_context_mgr } for pid=8583 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.463351][ T43] audit: type=1400 audit(1790244212.328:641): avc: denied { call } for pid=8583 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.463379][ T43] audit: type=1400 audit(1790244212.328:642): avc: denied { transfer } for pid=8583 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.490592][ T8586] No source specified [ 132.501068][ T8588] overlay: Unknown parameter 'dont_appraise' [ 132.507464][ T5092] Bluetooth: hci2: unexpected event for opcode 0x040d [ 132.536175][ T8592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.543947][ T8592] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 132.543962][ T8592] CPU: 3 UID: 0 PID: 8592 Comm: syz.4.908 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.543977][ T8592] Tainted: [L]=SOFTLOCKUP [ 132.543981][ T8592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.543987][ T8592] Call Trace: [ 132.543992][ T8592] [ 132.543997][ T8592] dump_stack_lvl+0x100/0x190 [ 132.544018][ T8592] sysfs_warn_dup.cold+0x1c/0x28 [ 132.544047][ T8592] sysfs_create_dir_ns+0x24b/0x2b0 [ 132.544065][ T8592] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 132.544080][ T8592] ? find_held_lock+0x2b/0x80 [ 132.544096][ T8592] ? kobject_add_internal+0x25f/0x930 [ 132.544110][ T8592] ? kobject_add_internal+0x25f/0x930 [ 132.544124][ T8592] ? do_raw_spin_unlock+0x145/0x1e0 [ 132.544140][ T8592] kobject_add_internal+0x2c8/0x930 [ 132.544154][ T8592] kobject_add+0x16a/0x1e0 [ 132.544167][ T8592] ? __pfx_kobject_add+0x10/0x10 [ 132.544180][ T8592] ? __kasan_kmalloc+0xaa/0xb0 [ 132.544194][ T8592] ? lockdep_init_map_type+0x5c/0x250 [ 132.544206][ T8592] ? class_to_subsys+0x114/0x150 [ 132.544226][ T8592] device_add+0x294/0x1970 [ 132.544241][ T8592] ? lockdep_init_map_type+0x5c/0x250 [ 132.544254][ T8592] ? __pfx_device_add+0x10/0x10 [ 132.544268][ T8592] ? lockdep_init_map_type+0x5c/0x250 [ 132.544281][ T8592] ? __init_waitqueue_head+0xca/0x150 [ 132.544298][ T8592] i2c_new_client_device+0x660/0xd30 [ 132.544314][ T8592] new_device_store+0x20f/0x420 [ 132.544327][ T8592] ? __pfx_new_device_store+0x10/0x10 [ 132.544342][ T8592] ? find_held_lock+0x2b/0x80 [ 132.544357][ T8592] ? sysfs_file_kobj+0xe4/0x290 [ 132.544369][ T8592] ? sysfs_file_kobj+0xe4/0x290 [ 132.544383][ T8592] ? __pfx_new_device_store+0x10/0x10 [ 132.544394][ T8592] dev_attr_store+0x58/0x80 [ 132.544409][ T8592] ? __pfx_dev_attr_store+0x10/0x10 [ 132.544423][ T8592] sysfs_kf_write+0xf2/0x150 [ 132.544437][ T8592] kernfs_fop_write_iter+0x3e0/0x5f0 [ 132.544449][ T8592] ? __pfx_sysfs_kf_write+0x10/0x10 [ 132.544463][ T8592] vfs_write+0x6af/0x1050 [ 132.544475][ T8592] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 132.544488][ T8592] ? __pfx_vfs_write+0x10/0x10 [ 132.544499][ T8592] ? find_held_lock+0x2b/0x80 [ 132.544523][ T8592] ksys_write+0x12a/0x250 [ 132.544534][ T8592] ? __pfx_ksys_write+0x10/0x10 [ 132.544549][ T8592] do_syscall_64+0x123/0x790 [ 132.544573][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.544585][ T8592] RIP: 0033:0x7f938f19e159 [ 132.544595][ T8592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.544607][ T8592] RSP: 002b:00007f9390104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.544620][ T8592] RAX: ffffffffffffffda RBX: 00007f938f425fa0 RCX: 00007f938f19e159 [ 132.544627][ T8592] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000007 [ 132.544634][ T8592] RBP: 00007f938f23506b R08: 0000000000000000 R09: 0000000000000000 [ 132.544640][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.544646][ T8592] R13: 00007f938f426038 R14: 00007f938f425fa0 R15: 00007ffc37ef6d78 [ 132.544661][ T8592] [ 132.544755][ T8592] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 132.544774][ T8592] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 132.696330][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.697290][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.805296][ T5488] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 132.955899][ T5488] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.956848][ T5488] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.956864][ T5488] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.956883][ T5488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.160765][ T5488] usb 7-1: GET_CAPABILITIES returned 0 [ 133.160788][ T5488] usbtmc 7-1:16.0: can't read capabilities [ 133.255347][ T5932] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 133.405957][ T5932] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 133.407343][ T5932] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 133.407361][ T5932] usb 9-1: can't read configurations, error -61 [ 133.535252][ T5932] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 133.685898][ T5932] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 133.687438][ T5932] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 133.687457][ T5932] usb 9-1: can't read configurations, error -61 [ 133.687668][ T5932] usb usb9-port1: attempt power cycle [ 134.025296][ T5932] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 134.046287][ T5932] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 134.047601][ T5932] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 134.047618][ T5932] usb 9-1: can't read configurations, error -61 [ 134.175391][ T5932] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 134.196676][ T5932] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 134.198031][ T5932] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 134.198049][ T5932] usb 9-1: can't read configurations, error -61 [ 134.198383][ T5932] usb usb9-port1: unable to enumerate USB device [ 134.691911][ T8607] jffs2: notice: (8607) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 134.694832][ T43] audit: type=1400 audit(1790244214.558:643): avc: denied { write } for pid=8606 comm="syz.0.914" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.698675][ T43] audit: type=1400 audit(1790244214.568:644): avc: denied { read write open } for pid=8606 comm="syz.0.914" path="/234/mnt/fillfile" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.700382][ T8607] comedi comedi1: dt2801: I/O port conflict (0x300,2) [ 134.741829][ T8610] FAULT_INJECTION: forcing a failure. [ 134.741829][ T8610] name fail_futex, interval 1, probability 0, space 0, times 0 [ 134.741895][ T8610] CPU: 3 UID: 0 PID: 8610 Comm: syz.0.915 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.741911][ T8610] Tainted: [L]=SOFTLOCKUP [ 134.741915][ T8610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.741921][ T8610] Call Trace: [ 134.741925][ T8610] [ 134.741929][ T8610] dump_stack_lvl+0x100/0x190 [ 134.741963][ T8610] should_fail_ex.cold+0x5/0xa [ 134.741982][ T8610] get_futex_key+0x1d0/0x14f0 [ 134.741999][ T8610] ? __pfx_get_futex_key+0x10/0x10 [ 134.742024][ T8610] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 134.742038][ T8610] ? __smp_call_single_queue+0x17e/0x450 [ 134.742053][ T8610] ? __pfx___smp_call_single_queue+0x10/0x10 [ 134.742070][ T8610] futex_wait_setup+0x91/0x540 [ 134.742084][ T8610] __futex_wait+0x19f/0x300 [ 134.742096][ T8610] ? __pfx___futex_wait+0x10/0x10 [ 134.742105][ T8610] ? __pfx_try_to_wake_up+0x10/0x10 [ 134.742118][ T8610] ? futex_hash+0x311/0x400 [ 134.742133][ T8610] ? __pfx_futex_wake_mark+0x10/0x10 [ 134.742154][ T8610] ? find_held_lock+0x2b/0x80 [ 134.742169][ T8610] ? futex_wake+0x4ea/0x5e0 [ 134.742182][ T8610] futex_wait+0xe6/0x370 [ 134.742193][ T8610] ? __pfx_futex_wait+0x10/0x10 [ 134.742206][ T8610] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.742219][ T8610] ? do_vfs_ioctl+0x226/0x13e0 [ 134.742232][ T8610] do_futex+0x265/0x440 [ 134.742247][ T8610] ? __pfx_do_futex+0x10/0x10 [ 134.742265][ T8610] __x64_sys_futex+0x34f/0x4d0 [ 134.742282][ T8610] ? __pfx___x64_sys_futex+0x10/0x10 [ 134.742296][ T8610] ? selinux_file_ioctl+0xb6/0x290 [ 134.742314][ T8610] do_syscall_64+0x123/0x790 [ 134.742333][ T8610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.742344][ T8610] RIP: 0033:0x7fb936d9e159 [ 134.742354][ T8610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.742365][ T8610] RSP: 002b:00007fb937cdb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.742378][ T8610] RAX: ffffffffffffffda RBX: 00007fb937025fa8 RCX: 00007fb936d9e159 [ 134.742385][ T8610] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb937025fa8 [ 134.742391][ T8610] RBP: 00007fb937025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 134.742397][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.742404][ T8610] R13: 00007fb937026038 R14: 00007fff6ea2ab30 R15: 00007fff6ea2ac18 [ 134.742418][ T8610] [ 134.781848][ T5092] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 134.782270][ T5092] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 135.257201][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 135.257287][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 135.258498][ T1036] usb 5-1: USB disconnect, device number 7 [ 135.259108][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 135.259120][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 135.259128][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 135.268468][ T5488] usb 7-1: USB disconnect, device number 13 [ 135.314293][ T8614] No source specified [ 135.360915][ T8616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.368375][ T8616] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 135.368391][ T8616] CPU: 3 UID: 0 PID: 8616 Comm: syz.0.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.368406][ T8616] Tainted: [L]=SOFTLOCKUP [ 135.368409][ T8616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.368416][ T8616] Call Trace: [ 135.368421][ T8616] [ 135.368426][ T8616] dump_stack_lvl+0x100/0x190 [ 135.368447][ T8616] sysfs_warn_dup.cold+0x1c/0x28 [ 135.368466][ T8616] sysfs_create_dir_ns+0x24b/0x2b0 [ 135.368482][ T8616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 135.368498][ T8616] ? find_held_lock+0x2b/0x80 [ 135.368523][ T8616] ? kobject_add_internal+0x25f/0x930 [ 135.368536][ T8616] ? kobject_add_internal+0x25f/0x930 [ 135.368551][ T8616] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.368568][ T8616] kobject_add_internal+0x2c8/0x930 [ 135.368583][ T8616] kobject_add+0x16a/0x1e0 [ 135.368597][ T8616] ? __pfx_kobject_add+0x10/0x10 [ 135.368612][ T8616] ? __kasan_kmalloc+0xaa/0xb0 [ 135.368626][ T8616] ? lockdep_init_map_type+0x5c/0x250 [ 135.368639][ T8616] ? class_to_subsys+0x114/0x150 [ 135.368659][ T8616] device_add+0x294/0x1970 [ 135.368675][ T8616] ? lockdep_init_map_type+0x5c/0x250 [ 135.368688][ T8616] ? __pfx_device_add+0x10/0x10 [ 135.368702][ T8616] ? lockdep_init_map_type+0x5c/0x250 [ 135.368715][ T8616] ? __init_waitqueue_head+0xca/0x150 [ 135.368732][ T8616] i2c_new_client_device+0x660/0xd30 [ 135.368748][ T8616] new_device_store+0x20f/0x420 [ 135.368761][ T8616] ? __pfx_new_device_store+0x10/0x10 [ 135.368778][ T8616] ? find_held_lock+0x2b/0x80 [ 135.368793][ T8616] ? sysfs_file_kobj+0xe4/0x290 [ 135.368806][ T8616] ? sysfs_file_kobj+0xe4/0x290 [ 135.368820][ T8616] ? __pfx_new_device_store+0x10/0x10 [ 135.368831][ T8616] dev_attr_store+0x58/0x80 [ 135.368845][ T8616] ? __pfx_dev_attr_store+0x10/0x10 [ 135.368860][ T8616] sysfs_kf_write+0xf2/0x150 [ 135.368874][ T8616] kernfs_fop_write_iter+0x3e0/0x5f0 [ 135.368885][ T8616] ? __pfx_sysfs_kf_write+0x10/0x10 [ 135.368900][ T8616] vfs_write+0x6af/0x1050 [ 135.368911][ T8616] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 135.368925][ T8616] ? __pfx_vfs_write+0x10/0x10 [ 135.368935][ T8616] ? find_held_lock+0x2b/0x80 [ 135.368959][ T8616] ksys_write+0x12a/0x250 [ 135.369005][ T8616] ? __pfx_ksys_write+0x10/0x10 [ 135.369022][ T8616] do_syscall_64+0x123/0x790 [ 135.369042][ T8616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.369066][ T8616] RIP: 0033:0x7fb936d9e159 [ 135.369078][ T8616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.369089][ T8616] RSP: 002b:00007fb937cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.369100][ T8616] RAX: ffffffffffffffda RBX: 00007fb937025fa0 RCX: 00007fb936d9e159 [ 135.369107][ T8616] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000006 [ 135.369113][ T8616] RBP: 00007fb936e3506b R08: 0000000000000000 R09: 0000000000000000 [ 135.369120][ T8616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.369126][ T8616] R13: 00007fb937026038 R14: 00007fb937025fa0 R15: 00007fff6ea2ac18 [ 135.369141][ T8616] [ 135.369179][ T8616] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 135.369198][ T8616] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 135.639648][ T43] audit: type=1400 audit(1790244215.508:645): avc: denied { shutdown } for pid=8621 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.709289][ T8629] netlink: 'syz.2.922': attribute type 1 has an invalid length. [ 135.717968][ T8629] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 135.720535][ T8627] binder: 8621:8627 ioctl c0306201 2000000001c0 returned -14 [ 135.781161][ T43] audit: type=1400 audit(1790244215.648:646): avc: denied { append } for pid=8634 comm="syz.2.924" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.784960][ T43] audit: type=1400 audit(1790244215.648:647): avc: denied { write } for pid=8633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.838713][ T43] audit: type=1400 audit(1790244215.708:648): avc: denied { write } for pid=8638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.840611][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 135.840761][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 135.931823][ T43] audit: type=1400 audit(1790244215.798:649): avc: denied { write } for pid=8643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.974218][ T43] audit: type=1400 audit(1790244215.838:650): avc: denied { write } for pid=8646 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.047400][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.926'. [ 136.187853][ T8655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.193886][ T8655] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 136.193903][ T8655] CPU: 3 UID: 0 PID: 8655 Comm: syz.4.929 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.193918][ T8655] Tainted: [L]=SOFTLOCKUP [ 136.193922][ T8655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.193929][ T8655] Call Trace: [ 136.193934][ T8655] [ 136.193938][ T8655] dump_stack_lvl+0x100/0x190 [ 136.193960][ T8655] sysfs_warn_dup.cold+0x1c/0x28 [ 136.193977][ T8655] sysfs_create_dir_ns+0x24b/0x2b0 [ 136.193993][ T8655] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 136.194014][ T8655] ? find_held_lock+0x2b/0x80 [ 136.194032][ T8655] ? kobject_add_internal+0x25f/0x930 [ 136.194046][ T8655] ? kobject_add_internal+0x25f/0x930 [ 136.194061][ T8655] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.194077][ T8655] kobject_add_internal+0x2c8/0x930 [ 136.194092][ T8655] kobject_add+0x16a/0x1e0 [ 136.194105][ T8655] ? __pfx_kobject_add+0x10/0x10 [ 136.194119][ T8655] ? __kasan_kmalloc+0xaa/0xb0 [ 136.194133][ T8655] ? lockdep_init_map_type+0x5c/0x250 [ 136.194145][ T8655] ? class_to_subsys+0x114/0x150 [ 136.194164][ T8655] device_add+0x294/0x1970 [ 136.194180][ T8655] ? lockdep_init_map_type+0x5c/0x250 [ 136.194192][ T8655] ? __pfx_device_add+0x10/0x10 [ 136.194206][ T8655] ? lockdep_init_map_type+0x5c/0x250 [ 136.194219][ T8655] ? __init_waitqueue_head+0xca/0x150 [ 136.194236][ T8655] i2c_new_client_device+0x660/0xd30 [ 136.194251][ T8655] new_device_store+0x20f/0x420 [ 136.194264][ T8655] ? __pfx_new_device_store+0x10/0x10 [ 136.194279][ T8655] ? find_held_lock+0x2b/0x80 [ 136.194295][ T8655] ? sysfs_file_kobj+0xe4/0x290 [ 136.194309][ T8655] ? sysfs_file_kobj+0xe4/0x290 [ 136.194323][ T8655] ? __pfx_new_device_store+0x10/0x10 [ 136.194334][ T8655] dev_attr_store+0x58/0x80 [ 136.194349][ T8655] ? __pfx_dev_attr_store+0x10/0x10 [ 136.194364][ T8655] sysfs_kf_write+0xf2/0x150 [ 136.194378][ T8655] kernfs_fop_write_iter+0x3e0/0x5f0 [ 136.194389][ T8655] ? __pfx_sysfs_kf_write+0x10/0x10 [ 136.194404][ T8655] vfs_write+0x6af/0x1050 [ 136.194416][ T8655] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 136.194429][ T8655] ? __pfx_vfs_write+0x10/0x10 [ 136.194440][ T8655] ? find_held_lock+0x2b/0x80 [ 136.194464][ T8655] ksys_write+0x12a/0x250 [ 136.194475][ T8655] ? __pfx_ksys_write+0x10/0x10 [ 136.194490][ T8655] do_syscall_64+0x123/0x790 [ 136.194508][ T8655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.194522][ T8655] RIP: 0033:0x7f938f19e159 [ 136.194532][ T8655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.194542][ T8655] RSP: 002b:00007f9390104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.194554][ T8655] RAX: ffffffffffffffda RBX: 00007f938f425fa0 RCX: 00007f938f19e159 [ 136.194561][ T8655] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000006 [ 136.194568][ T8655] RBP: 00007f938f23506b R08: 0000000000000000 R09: 0000000000000000 [ 136.194574][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.194580][ T8655] R13: 00007f938f426038 R14: 00007f938f425fa0 R15: 00007ffc37ef6d78 [ 136.194594][ T8655] [ 136.194605][ T8655] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 136.194622][ T8655] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 136.303041][ T8657] overlay: Unknown parameter 'dont_appraise' [ 136.308722][ T5741] Bluetooth: hci3: unexpected event for opcode 0x040d [ 136.398805][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.933'. [ 136.800193][ T5741] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 136.802432][ T5741] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 137.042202][ T8699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.047119][ T8699] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 137.047133][ T8699] CPU: 2 UID: 0 PID: 8699 Comm: syz.4.941 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.047148][ T8699] Tainted: [L]=SOFTLOCKUP [ 137.047152][ T8699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.047158][ T8699] Call Trace: [ 137.047162][ T8699] [ 137.047167][ T8699] dump_stack_lvl+0x100/0x190 [ 137.047189][ T8699] sysfs_warn_dup.cold+0x1c/0x28 [ 137.047207][ T8699] sysfs_create_dir_ns+0x24b/0x2b0 [ 137.047223][ T8699] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 137.047237][ T8699] ? find_held_lock+0x2b/0x80 [ 137.047254][ T8699] ? kobject_add_internal+0x25f/0x930 [ 137.047267][ T8699] ? kobject_add_internal+0x25f/0x930 [ 137.047280][ T8699] ? do_raw_spin_unlock+0x145/0x1e0 [ 137.047296][ T8699] kobject_add_internal+0x2c8/0x930 [ 137.047310][ T8699] kobject_add+0x16a/0x1e0 [ 137.047345][ T8699] ? __pfx_kobject_add+0x10/0x10 [ 137.047359][ T8699] ? __kasan_kmalloc+0xaa/0xb0 [ 137.047374][ T8699] ? lockdep_init_map_type+0x5c/0x250 [ 137.047387][ T8699] ? class_to_subsys+0x114/0x150 [ 137.047407][ T8699] device_add+0x294/0x1970 [ 137.047424][ T8699] ? lockdep_init_map_type+0x5c/0x250 [ 137.047436][ T8699] ? __pfx_device_add+0x10/0x10 [ 137.047450][ T8699] ? lockdep_init_map_type+0x5c/0x250 [ 137.047463][ T8699] ? __init_waitqueue_head+0xca/0x150 [ 137.047480][ T8699] i2c_new_client_device+0x660/0xd30 [ 137.047497][ T8699] new_device_store+0x20f/0x420 [ 137.047516][ T8699] ? __pfx_new_device_store+0x10/0x10 [ 137.047533][ T8699] ? find_held_lock+0x2b/0x80 [ 137.047547][ T8699] ? sysfs_file_kobj+0xe4/0x290 [ 137.047561][ T8699] ? sysfs_file_kobj+0xe4/0x290 [ 137.047575][ T8699] ? __pfx_new_device_store+0x10/0x10 [ 137.047588][ T8699] dev_attr_store+0x58/0x80 [ 137.047603][ T8699] ? __pfx_dev_attr_store+0x10/0x10 [ 137.047619][ T8699] sysfs_kf_write+0xf2/0x150 [ 137.047635][ T8699] kernfs_fop_write_iter+0x3e0/0x5f0 [ 137.047647][ T8699] ? __pfx_sysfs_kf_write+0x10/0x10 [ 137.047662][ T8699] vfs_write+0x6af/0x1050 [ 137.047674][ T8699] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 137.047687][ T8699] ? __pfx_vfs_write+0x10/0x10 [ 137.047697][ T8699] ? find_held_lock+0x2b/0x80 [ 137.047722][ T8699] ksys_write+0x12a/0x250 [ 137.047733][ T8699] ? __pfx_ksys_write+0x10/0x10 [ 137.047748][ T8699] do_syscall_64+0x123/0x790 [ 137.047766][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.047777][ T8699] RIP: 0033:0x7f938f19e159 [ 137.047787][ T8699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.047797][ T8699] RSP: 002b:00007f9390104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.047808][ T8699] RAX: ffffffffffffffda RBX: 00007f938f425fa0 RCX: 00007f938f19e159 [ 137.047815][ T8699] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000006 [ 137.047822][ T8699] RBP: 00007f938f23506b R08: 0000000000000000 R09: 0000000000000000 [ 137.047828][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.047835][ T8699] R13: 00007f938f426038 R14: 00007f938f425fa0 R15: 00007ffc37ef6d78 [ 137.047849][ T8699] [ 137.047890][ T8699] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 137.047909][ T8699] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 137.332110][ T8715] netlink: 'syz.2.948': attribute type 3 has an invalid length. [ 137.362690][ T8718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.364363][ T8719] overlay: Unknown parameter 'dont_appraise' [ 137.377174][ T5741] Bluetooth: hci0: unexpected event for opcode 0x040d [ 137.381889][ T8718] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 137.381906][ T8718] CPU: 3 UID: 0 PID: 8718 Comm: syz.0.950 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.381922][ T8718] Tainted: [L]=SOFTLOCKUP [ 137.381926][ T8718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.381933][ T8718] Call Trace: [ 137.381937][ T8718] [ 137.381941][ T8718] dump_stack_lvl+0x100/0x190 [ 137.381963][ T8718] sysfs_warn_dup.cold+0x1c/0x28 [ 137.381979][ T8718] sysfs_create_dir_ns+0x24b/0x2b0 [ 137.381995][ T8718] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 137.382010][ T8718] ? find_held_lock+0x2b/0x80 [ 137.382026][ T8718] ? kobject_add_internal+0x25f/0x930 [ 137.382040][ T8718] ? kobject_add_internal+0x25f/0x930 [ 137.382055][ T8718] ? do_raw_spin_unlock+0x145/0x1e0 [ 137.382071][ T8718] kobject_add_internal+0x2c8/0x930 [ 137.382086][ T8718] kobject_add+0x16a/0x1e0 [ 137.382099][ T8718] ? __pfx_kobject_add+0x10/0x10 [ 137.382112][ T8718] ? __kasan_kmalloc+0xaa/0xb0 [ 137.382126][ T8718] ? lockdep_init_map_type+0x5c/0x250 [ 137.382138][ T8718] ? class_to_subsys+0x114/0x150 [ 137.382157][ T8718] device_add+0x294/0x1970 [ 137.382173][ T8718] ? lockdep_init_map_type+0x5c/0x250 [ 137.382185][ T8718] ? __pfx_device_add+0x10/0x10 [ 137.382199][ T8718] ? lockdep_init_map_type+0x5c/0x250 [ 137.382212][ T8718] ? __init_waitqueue_head+0xca/0x150 [ 137.382228][ T8718] i2c_new_client_device+0x660/0xd30 [ 137.382244][ T8718] new_device_store+0x20f/0x420 [ 137.382256][ T8718] ? __pfx_new_device_store+0x10/0x10 [ 137.382272][ T8718] ? find_held_lock+0x2b/0x80 [ 137.382287][ T8718] ? sysfs_file_kobj+0xe4/0x290 [ 137.382300][ T8718] ? sysfs_file_kobj+0xe4/0x290 [ 137.382314][ T8718] ? __pfx_new_device_store+0x10/0x10 [ 137.382324][ T8718] dev_attr_store+0x58/0x80 [ 137.382339][ T8718] ? __pfx_dev_attr_store+0x10/0x10 [ 137.382356][ T8718] sysfs_kf_write+0xf2/0x150 [ 137.382370][ T8718] kernfs_fop_write_iter+0x3e0/0x5f0 [ 137.382382][ T8718] ? __pfx_sysfs_kf_write+0x10/0x10 [ 137.382396][ T8718] vfs_write+0x6af/0x1050 [ 137.382408][ T8718] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 137.382421][ T8718] ? __pfx_vfs_write+0x10/0x10 [ 137.382432][ T8718] ? find_held_lock+0x2b/0x80 [ 137.382456][ T8718] ksys_write+0x12a/0x250 [ 137.382467][ T8718] ? __pfx_ksys_write+0x10/0x10 [ 137.382483][ T8718] do_syscall_64+0x123/0x790 [ 137.382500][ T8718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.382511][ T8718] RIP: 0033:0x7fb936d9e159 [ 137.382522][ T8718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.382532][ T8718] RSP: 002b:00007fb937cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.382544][ T8718] RAX: ffffffffffffffda RBX: 00007fb937025fa0 RCX: 00007fb936d9e159 [ 137.382552][ T8718] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000006 [ 137.382558][ T8718] RBP: 00007fb936e3506b R08: 0000000000000000 R09: 0000000000000000 [ 137.382564][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.382570][ T8718] R13: 00007fb937026038 R14: 00007fb937025fa0 R15: 00007fff6ea2ac18 [ 137.382585][ T8718] [ 137.382596][ T8718] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 137.382613][ T8718] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 137.552889][ T5741] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 137.553360][ T5741] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 137.695411][ T35] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 137.825357][ T35] usb 5-1: device descriptor read/64, error -71 [ 138.065360][ T35] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 138.098760][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 138.099048][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 138.099124][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 138.099195][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 138.099267][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 138.099337][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 138.099406][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 138.099480][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 138.195319][ T35] usb 5-1: device descriptor read/64, error -71 [ 138.315593][ T35] usb usb5-port1: attempt power cycle [ 138.435310][ T5932] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 138.544481][ T8750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.549576][ T8750] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 138.549592][ T8750] CPU: 2 UID: 0 PID: 8750 Comm: syz.2.961 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.549608][ T8750] Tainted: [L]=SOFTLOCKUP [ 138.549612][ T8750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.549618][ T8750] Call Trace: [ 138.549622][ T8750] [ 138.549627][ T8750] dump_stack_lvl+0x100/0x190 [ 138.549647][ T8750] sysfs_warn_dup.cold+0x1c/0x28 [ 138.549665][ T8750] sysfs_create_dir_ns+0x24b/0x2b0 [ 138.549681][ T8750] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 138.549696][ T8750] ? find_held_lock+0x2b/0x80 [ 138.549713][ T8750] ? kobject_add_internal+0x25f/0x930 [ 138.549727][ T8750] ? kobject_add_internal+0x25f/0x930 [ 138.549742][ T8750] ? do_raw_spin_unlock+0x145/0x1e0 [ 138.549758][ T8750] kobject_add_internal+0x2c8/0x930 [ 138.549772][ T8750] kobject_add+0x16a/0x1e0 [ 138.549785][ T8750] ? __pfx_kobject_add+0x10/0x10 [ 138.549798][ T8750] ? __kasan_kmalloc+0xaa/0xb0 [ 138.549811][ T8750] ? lockdep_init_map_type+0x5c/0x250 [ 138.549824][ T8750] ? class_to_subsys+0x114/0x150 [ 138.549845][ T8750] device_add+0x294/0x1970 [ 138.549860][ T8750] ? lockdep_init_map_type+0x5c/0x250 [ 138.549873][ T8750] ? __pfx_device_add+0x10/0x10 [ 138.549887][ T8750] ? lockdep_init_map_type+0x5c/0x250 [ 138.549899][ T8750] ? __init_waitqueue_head+0xca/0x150 [ 138.549917][ T8750] i2c_new_client_device+0x660/0xd30 [ 138.549933][ T8750] new_device_store+0x20f/0x420 [ 138.549946][ T8750] ? __pfx_new_device_store+0x10/0x10 [ 138.549961][ T8750] ? find_held_lock+0x2b/0x80 [ 138.549976][ T8750] ? sysfs_file_kobj+0xe4/0x290 [ 138.549989][ T8750] ? sysfs_file_kobj+0xe4/0x290 [ 138.550002][ T8750] ? __pfx_new_device_store+0x10/0x10 [ 138.550022][ T8750] dev_attr_store+0x58/0x80 [ 138.550039][ T8750] ? __pfx_dev_attr_store+0x10/0x10 [ 138.550055][ T8750] sysfs_kf_write+0xf2/0x150 [ 138.550069][ T8750] kernfs_fop_write_iter+0x3e0/0x5f0 [ 138.550081][ T8750] ? __pfx_sysfs_kf_write+0x10/0x10 [ 138.550098][ T8750] vfs_write+0x6af/0x1050 [ 138.550110][ T8750] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 138.550124][ T8750] ? __pfx_vfs_write+0x10/0x10 [ 138.550135][ T8750] ? find_held_lock+0x2b/0x80 [ 138.550161][ T8750] ksys_write+0x12a/0x250 [ 138.550172][ T8750] ? __pfx_ksys_write+0x10/0x10 [ 138.550187][ T8750] do_syscall_64+0x123/0x790 [ 138.550205][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.550216][ T8750] RIP: 0033:0x7f3b11f9e159 [ 138.550225][ T8750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.550236][ T8750] RSP: 002b:00007f3b12ec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.550247][ T8750] RAX: ffffffffffffffda RBX: 00007f3b12225fa0 RCX: 00007f3b11f9e159 [ 138.550254][ T8750] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000006 [ 138.550260][ T8750] RBP: 00007f3b1203506b R08: 0000000000000000 R09: 0000000000000000 [ 138.550266][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.550272][ T8750] R13: 00007f3b12226038 R14: 00007f3b12225fa0 R15: 00007ffed0d2d698 [ 138.550286][ T8750] [ 138.550298][ T8750] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 138.550315][ T8750] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 138.565909][ T5932] usb 9-1: device descriptor read/64, error -71 [ 138.597595][ T43] audit: type=1400 audit(1790244218.458:651): avc: denied { read write } for pid=8751 comm="syz.2.962" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 138.599770][ T43] audit: type=1400 audit(1790244218.468:652): avc: denied { open } for pid=8751 comm="syz.2.962" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 138.665251][ T35] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 138.674747][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 138.677018][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 138.696516][ T35] usb 5-1: device descriptor read/8, error -71 [ 138.815298][ T5932] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 138.955326][ T5932] usb 9-1: device descriptor read/64, error -71 [ 138.955397][ T35] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 138.976131][ T35] usb 5-1: device descriptor read/8, error -71 [ 139.065498][ T5932] usb usb9-port1: attempt power cycle [ 139.085606][ T35] usb usb5-port1: unable to enumerate USB device [ 139.405266][ T5932] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 139.425719][ T5932] usb 9-1: device descriptor read/8, error -71 [ 139.442711][ T8766] overlay: Unknown parameter 'dont_appraise' [ 139.444842][ T5741] Bluetooth: hci2: unexpected event for opcode 0x040d [ 139.475947][ T5809] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 139.625275][ T5809] usb 7-1: Using ep0 maxpacket: 32 [ 139.625845][ T5809] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 139.626761][ T5809] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 139.628614][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.628626][ T5809] usb 7-1: Product: syz [ 139.628633][ T5809] usb 7-1: Manufacturer: syz [ 139.628640][ T5809] usb 7-1: SerialNumber: syz [ 139.630254][ T5809] usb 7-1: config 0 descriptor?? [ 139.632401][ T8764] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 139.633177][ T5809] hub 7-1:0.0: bad descriptor, ignoring hub [ 139.633189][ T5809] hub 7-1:0.0: probe with driver hub failed with error -5 [ 139.636280][ T5809] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input11 [ 139.665374][ T5932] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 139.687533][ T5932] usb 9-1: device descriptor read/8, error -71 [ 139.795442][ T5932] usb usb9-port1: unable to enumerate USB device [ 139.890727][ T852] usb 7-1: USB disconnect, device number 14 [ 139.890773][ C2] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 140.427334][ T8777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.430311][ T8777] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 140.430328][ T8777] CPU: 3 UID: 0 PID: 8777 Comm: syz.2.970 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.430344][ T8777] Tainted: [L]=SOFTLOCKUP [ 140.430348][ T8777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.430354][ T8777] Call Trace: [ 140.430358][ T8777] [ 140.430362][ T8777] dump_stack_lvl+0x100/0x190 [ 140.430383][ T8777] sysfs_warn_dup.cold+0x1c/0x28 [ 140.430402][ T8777] sysfs_create_dir_ns+0x24b/0x2b0 [ 140.430418][ T8777] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 140.430433][ T8777] ? find_held_lock+0x2b/0x80 [ 140.430452][ T8777] ? kobject_add_internal+0x25f/0x930 [ 140.430472][ T8777] ? kobject_add_internal+0x25f/0x930 [ 140.430492][ T8777] ? do_raw_spin_unlock+0x145/0x1e0 [ 140.430518][ T8777] kobject_add_internal+0x2c8/0x930 [ 140.430541][ T8777] kobject_add+0x16a/0x1e0 [ 140.430555][ T8777] ? __pfx_kobject_add+0x10/0x10 [ 140.430569][ T8777] ? __kasan_kmalloc+0xaa/0xb0 [ 140.430601][ T8777] ? lockdep_init_map_type+0x5c/0x250 [ 140.430619][ T8777] ? class_to_subsys+0x114/0x150 [ 140.430664][ T8777] device_add+0x294/0x1970 [ 140.430690][ T8777] ? lockdep_init_map_type+0x5c/0x250 [ 140.430704][ T8777] ? __pfx_device_add+0x10/0x10 [ 140.430720][ T8777] ? lockdep_init_map_type+0x5c/0x250 [ 140.430733][ T8777] ? __init_waitqueue_head+0xca/0x150 [ 140.430753][ T8777] i2c_new_client_device+0x660/0xd30 [ 140.430768][ T8777] new_device_store+0x20f/0x420 [ 140.430781][ T8777] ? __pfx_new_device_store+0x10/0x10 [ 140.430805][ T8777] ? find_held_lock+0x2b/0x80 [ 140.430828][ T8777] ? sysfs_file_kobj+0xe4/0x290 [ 140.430848][ T8777] ? sysfs_file_kobj+0xe4/0x290 [ 140.430869][ T8777] ? __pfx_new_device_store+0x10/0x10 [ 140.430887][ T8777] dev_attr_store+0x58/0x80 [ 140.430909][ T8777] ? __pfx_dev_attr_store+0x10/0x10 [ 140.430933][ T8777] sysfs_kf_write+0xf2/0x150 [ 140.430956][ T8777] kernfs_fop_write_iter+0x3e0/0x5f0 [ 140.430970][ T8777] ? __pfx_sysfs_kf_write+0x10/0x10 [ 140.430985][ T8777] vfs_write+0x6af/0x1050 [ 140.430997][ T8777] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 140.431010][ T8777] ? __pfx_vfs_write+0x10/0x10 [ 140.431020][ T8777] ? find_held_lock+0x2b/0x80 [ 140.431061][ T8777] ksys_write+0x12a/0x250 [ 140.431079][ T8777] ? __pfx_ksys_write+0x10/0x10 [ 140.431103][ T8777] do_syscall_64+0x123/0x790 [ 140.431121][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.431135][ T8777] RIP: 0033:0x7f3b11f9e159 [ 140.431144][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.431154][ T8777] RSP: 002b:00007f3b12ec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.431165][ T8777] RAX: ffffffffffffffda RBX: 00007f3b12225fa0 RCX: 00007f3b11f9e159 [ 140.431172][ T8777] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000005 [ 140.431179][ T8777] RBP: 00007f3b1203506b R08: 0000000000000000 R09: 0000000000000000 [ 140.431185][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.431191][ T8777] R13: 00007f3b12226038 R14: 00007f3b12225fa0 R15: 00007ffed0d2d698 [ 140.431206][ T8777] [ 140.431259][ T8777] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 140.431286][ T8777] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 140.485075][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 140.485512][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 140.533124][ T8789] overlay: Unknown parameter 'dont_appraise' [ 140.537813][ T5741] Bluetooth: hci1: unexpected event for opcode 0x040d [ 141.019975][ T8793] bridge2: port 1(dummy0) entered blocking state [ 141.020061][ T8793] bridge2: port 1(dummy0) entered disabled state [ 141.020123][ T8793] dummy0: entered allmulticast mode [ 141.020878][ T8793] dummy0: entered promiscuous mode [ 141.022796][ T8793] netlink: 'syz.2.977': attribute type 10 has an invalid length. [ 141.023625][ T8793] bridge2: port 1(dummy0) entered blocking state [ 141.023674][ T8793] bridge2: port 1(dummy0) entered forwarding state [ 141.023993][ T8793] dummy0: left allmulticast mode [ 141.024098][ T8793] bridge2: port 1(dummy0) entered disabled state [ 141.096619][ T8798] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 141.110003][ T8801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.113131][ T8801] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 141.113146][ T8801] CPU: 0 UID: 0 PID: 8801 Comm: syz.0.980 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.113160][ T8801] Tainted: [L]=SOFTLOCKUP [ 141.113164][ T8801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.113171][ T8801] Call Trace: [ 141.113175][ T8801] [ 141.113179][ T8801] dump_stack_lvl+0x100/0x190 [ 141.113199][ T8801] sysfs_warn_dup.cold+0x1c/0x28 [ 141.113216][ T8801] sysfs_create_dir_ns+0x24b/0x2b0 [ 141.113232][ T8801] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 141.113247][ T8801] ? find_held_lock+0x2b/0x80 [ 141.113264][ T8801] ? kobject_add_internal+0x25f/0x930 [ 141.113278][ T8801] ? kobject_add_internal+0x25f/0x930 [ 141.113291][ T8801] ? do_raw_spin_unlock+0x145/0x1e0 [ 141.113306][ T8801] kobject_add_internal+0x2c8/0x930 [ 141.113321][ T8801] kobject_add+0x16a/0x1e0 [ 141.113334][ T8801] ? __pfx_kobject_add+0x10/0x10 [ 141.113347][ T8801] ? __kasan_kmalloc+0xaa/0xb0 [ 141.113360][ T8801] ? lockdep_init_map_type+0x5c/0x250 [ 141.113373][ T8801] ? class_to_subsys+0x114/0x150 [ 141.113392][ T8801] device_add+0x294/0x1970 [ 141.113408][ T8801] ? lockdep_init_map_type+0x5c/0x250 [ 141.113420][ T8801] ? __pfx_device_add+0x10/0x10 [ 141.113434][ T8801] ? lockdep_init_map_type+0x5c/0x250 [ 141.113447][ T8801] ? __init_waitqueue_head+0xca/0x150 [ 141.113464][ T8801] i2c_new_client_device+0x660/0xd30 [ 141.113480][ T8801] new_device_store+0x20f/0x420 [ 141.113495][ T8801] ? __pfx_new_device_store+0x10/0x10 [ 141.113510][ T8801] ? find_held_lock+0x2b/0x80 [ 141.113525][ T8801] ? sysfs_file_kobj+0xe4/0x290 [ 141.113538][ T8801] ? sysfs_file_kobj+0xe4/0x290 [ 141.113552][ T8801] ? __pfx_new_device_store+0x10/0x10 [ 141.113563][ T8801] dev_attr_store+0x58/0x80 [ 141.113577][ T8801] ? __pfx_dev_attr_store+0x10/0x10 [ 141.113592][ T8801] sysfs_kf_write+0xf2/0x150 [ 141.113606][ T8801] kernfs_fop_write_iter+0x3e0/0x5f0 [ 141.113617][ T8801] ? __pfx_sysfs_kf_write+0x10/0x10 [ 141.113631][ T8801] vfs_write+0x6af/0x1050 [ 141.113643][ T8801] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 141.113656][ T8801] ? __pfx_vfs_write+0x10/0x10 [ 141.113667][ T8801] ? find_held_lock+0x2b/0x80 [ 141.113693][ T8801] ksys_write+0x12a/0x250 [ 141.113705][ T8801] ? __pfx_ksys_write+0x10/0x10 [ 141.113720][ T8801] do_syscall_64+0x123/0x790 [ 141.113738][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.113749][ T8801] RIP: 0033:0x7fb936d9e159 [ 141.113759][ T8801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.113769][ T8801] RSP: 002b:00007fb937cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.113780][ T8801] RAX: ffffffffffffffda RBX: 00007fb937025fa0 RCX: 00007fb936d9e159 [ 141.113786][ T8801] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000004 [ 141.113794][ T8801] RBP: 00007fb936e3506b R08: 0000000000000000 R09: 0000000000000000 [ 141.113800][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.113806][ T8801] R13: 00007fb937026038 R14: 00007fb937025fa0 R15: 00007fff6ea2ac18 [ 141.113823][ T8801] [ 141.113840][ T8801] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.113864][ T8801] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 141.137326][ T8798] veth3: entered allmulticast mode [ 141.145688][ T8798] bond2: (slave veth3): Enslaving as an active interface with a down link [ 141.151644][ T8798] macvlan2: entered promiscuous mode [ 141.151656][ T8798] macvlan2: entered allmulticast mode [ 141.151951][ T8798] bond2: entered promiscuous mode [ 141.152266][ T8798] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.152600][ T8798] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 141.153508][ T8798] bond2: left promiscuous mode [ 141.248664][ T8810] IPv6: Can't replace route, no match found [ 141.272776][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 141.273016][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 141.279452][ T43] audit: type=1400 audit(1790244221.148:653): avc: denied { setopt } for pid=8813 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.281459][ T43] audit: type=1400 audit(1790244221.148:654): avc: denied { read } for pid=8813 comm="syz.4.986" dev="nsfs" ino=4026533474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.281487][ T43] audit: type=1400 audit(1790244221.148:655): avc: denied { open } for pid=8813 comm="syz.4.986" path="net:[4026533474]" dev="nsfs" ino=4026533474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.483565][ T8822] jffs2: notice: (8822) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 141.533230][ T8825] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 141.533247][ T8825] CPU: 3 UID: 0 PID: 8825 Comm: syz.0.989 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.533262][ T8825] Tainted: [L]=SOFTLOCKUP [ 141.533266][ T8825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.533273][ T8825] Call Trace: [ 141.533277][ T8825] [ 141.533281][ T8825] dump_stack_lvl+0x100/0x190 [ 141.533302][ T8825] sysfs_warn_dup.cold+0x1c/0x28 [ 141.533319][ T8825] sysfs_create_dir_ns+0x24b/0x2b0 [ 141.533335][ T8825] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 141.533351][ T8825] ? find_held_lock+0x2b/0x80 [ 141.533367][ T8825] ? kobject_add_internal+0x25f/0x930 [ 141.533381][ T8825] ? kobject_add_internal+0x25f/0x930 [ 141.533395][ T8825] ? do_raw_spin_unlock+0x145/0x1e0 [ 141.533411][ T8825] kobject_add_internal+0x2c8/0x930 [ 141.533425][ T8825] kobject_add+0x16a/0x1e0 [ 141.533438][ T8825] ? __pfx_kobject_add+0x10/0x10 [ 141.533453][ T8825] ? __kasan_kmalloc+0xaa/0xb0 [ 141.533466][ T8825] ? lockdep_init_map_type+0x5c/0x250 [ 141.533479][ T8825] ? class_to_subsys+0x114/0x150 [ 141.533499][ T8825] device_add+0x294/0x1970 [ 141.533515][ T8825] ? lockdep_init_map_type+0x5c/0x250 [ 141.533527][ T8825] ? __pfx_device_add+0x10/0x10 [ 141.533541][ T8825] ? lockdep_init_map_type+0x5c/0x250 [ 141.533554][ T8825] ? __init_waitqueue_head+0xca/0x150 [ 141.533571][ T8825] i2c_new_client_device+0x660/0xd30 [ 141.533586][ T8825] new_device_store+0x20f/0x420 [ 141.533599][ T8825] ? __pfx_new_device_store+0x10/0x10 [ 141.533615][ T8825] ? find_held_lock+0x2b/0x80 [ 141.533629][ T8825] ? sysfs_file_kobj+0xe4/0x290 [ 141.533642][ T8825] ? sysfs_file_kobj+0xe4/0x290 [ 141.533655][ T8825] ? __pfx_new_device_store+0x10/0x10 [ 141.533666][ T8825] dev_attr_store+0x58/0x80 [ 141.533681][ T8825] ? __pfx_dev_attr_store+0x10/0x10 [ 141.533695][ T8825] sysfs_kf_write+0xf2/0x150 [ 141.533709][ T8825] kernfs_fop_write_iter+0x3e0/0x5f0 [ 141.533720][ T8825] ? __pfx_sysfs_kf_write+0x10/0x10 [ 141.533737][ T8825] vfs_write+0x6af/0x1050 [ 141.533750][ T8825] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 141.533763][ T8825] ? __pfx_vfs_write+0x10/0x10 [ 141.533773][ T8825] ? find_held_lock+0x2b/0x80 [ 141.533798][ T8825] ksys_write+0x12a/0x250 [ 141.533809][ T8825] ? __pfx_ksys_write+0x10/0x10 [ 141.533825][ T8825] do_syscall_64+0x123/0x790 [ 141.533843][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.533854][ T8825] RIP: 0033:0x7fb936d9e159 [ 141.533864][ T8825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.533874][ T8825] RSP: 002b:00007fb937cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.533886][ T8825] RAX: ffffffffffffffda RBX: 00007fb937025fa0 RCX: 00007fb936d9e159 [ 141.533893][ T8825] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000004 [ 141.533899][ T8825] RBP: 00007fb936e3506b R08: 0000000000000000 R09: 0000000000000000 [ 141.533905][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.533911][ T8825] R13: 00007fb937026038 R14: 00007fb937025fa0 R15: 00007fff6ea2ac18 [ 141.533925][ T8825] [ 141.533937][ T8825] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.533954][ T8825] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 141.570112][ T8827] overlay: Unknown parameter 'dont_appraise' [ 141.574581][ T5741] Bluetooth: hci1: unexpected event for opcode 0x040d [ 141.798988][ T8831] netlink: 'syz.2.991': attribute type 4 has an invalid length. [ 141.825628][ T43] audit: type=1400 audit(1790244221.688:656): avc: denied { setcurrent } for pid=8832 comm="syz.2.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 141.827660][ T8833] FAULT_INJECTION: forcing a failure. [ 141.827660][ T8833] name failslab, interval 1, probability 0, space 0, times 0 [ 141.827683][ T8833] CPU: 3 UID: 0 PID: 8833 Comm: syz.2.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.827698][ T8833] Tainted: [L]=SOFTLOCKUP [ 141.827702][ T8833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.827708][ T8833] Call Trace: [ 141.827712][ T8833] [ 141.827716][ T8833] dump_stack_lvl+0x100/0x190 [ 141.827737][ T8833] should_fail_ex.cold+0x5/0xa [ 141.827755][ T8833] should_failslab+0xc2/0x120 [ 141.827770][ T8833] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 141.827783][ T8833] ? do_syscall_64+0x123/0x790 [ 141.827800][ T8833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.827812][ T8833] ? __d_alloc+0x35/0xa50 [ 141.827830][ T8833] __d_alloc+0x35/0xa50 [ 141.827847][ T8833] d_alloc_parallel+0x105/0x14c0 [ 141.827861][ T8833] ? lock_acquire+0x1d1/0x380 [ 141.827874][ T8833] ? __d_lookup+0x73/0x4a0 [ 141.827887][ T8833] ? __pfx_d_alloc_parallel+0x10/0x10 [ 141.827900][ T8833] ? __d_lookup+0x25c/0x4a0 [ 141.827913][ T8833] ? __d_lookup+0x266/0x4a0 [ 141.827928][ T8833] lookup_open+0x6bb/0x1990 [ 141.827944][ T8833] path_openat+0xa2c/0x2440 [ 141.827960][ T8833] ? __pfx_path_openat+0x10/0x10 [ 141.827978][ T8833] do_file_open+0x20e/0x430 [ 141.827992][ T8833] ? __pfx_do_file_open+0x10/0x10 [ 141.828016][ T8833] ? _raw_spin_unlock+0x28/0x50 [ 141.828030][ T8833] ? alloc_fd+0x471/0x7a0 [ 141.828048][ T8833] do_sys_openat2+0x10f/0x1e0 [ 141.828063][ T8833] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.828078][ T8833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.828103][ T8833] __x64_sys_openat+0x12d/0x210 [ 141.828125][ T8833] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.828144][ T8833] ? ksys_write+0x1ac/0x250 [ 141.828177][ T8833] do_syscall_64+0x123/0x790 [ 141.828209][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.828229][ T8833] RIP: 0033:0x7f3b11f9e159 [ 141.828242][ T8833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.828254][ T8833] RSP: 002b:00007f3b12ec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.828270][ T8833] RAX: ffffffffffffffda RBX: 00007f3b12225fa0 RCX: 00007f3b11f9e159 [ 141.828284][ T8833] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 141.828312][ T8833] RBP: 00007f3b1203506b R08: 0000000000000000 R09: 0000000000000000 [ 141.828323][ T8833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.828334][ T8833] R13: 00007f3b12226038 R14: 00007f3b12225fa0 R15: 00007ffed0d2d698 [ 141.828350][ T8833] [ 141.869653][ T8839] __nla_validate_parse: 63 callbacks suppressed [ 141.869666][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 141.869682][ T8839] netlink: 'syz.4.995': attribute type 10 has an invalid length. [ 141.869689][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 141.873042][ T8839] geneve2: entered promiscuous mode [ 141.873054][ T8839] geneve2: entered allmulticast mode [ 141.976508][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 142.069119][ T8849] jffs2: notice: (8849) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 142.113407][ T5741] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 142.113840][ T5741] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 142.125477][ T8854] sysfs: cannot create duplicate filename '/devices/pci0000:00/0000:00:1f.3/i2c-0/0-0002' [ 142.125503][ T8854] CPU: 1 UID: 0 PID: 8854 Comm: syz.2.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.125530][ T8854] Tainted: [L]=SOFTLOCKUP [ 142.125537][ T8854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.125548][ T8854] Call Trace: [ 142.125556][ T8854] [ 142.125564][ T8854] dump_stack_lvl+0x100/0x190 [ 142.125598][ T8854] sysfs_warn_dup.cold+0x1c/0x28 [ 142.125627][ T8854] sysfs_create_dir_ns+0x24b/0x2b0 [ 142.125653][ T8854] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 142.125677][ T8854] ? find_held_lock+0x2b/0x80 [ 142.125706][ T8854] ? kobject_add_internal+0x25f/0x930 [ 142.125728][ T8854] ? kobject_add_internal+0x25f/0x930 [ 142.125753][ T8854] ? do_raw_spin_unlock+0x145/0x1e0 [ 142.125780][ T8854] kobject_add_internal+0x2c8/0x930 [ 142.125806][ T8854] kobject_add+0x16a/0x1e0 [ 142.125829][ T8854] ? __pfx_kobject_add+0x10/0x10 [ 142.125853][ T8854] ? __kasan_kmalloc+0xaa/0xb0 [ 142.125877][ T8854] ? lockdep_init_map_type+0x5c/0x250 [ 142.125899][ T8854] ? class_to_subsys+0x114/0x150 [ 142.125931][ T8854] device_add+0x294/0x1970 [ 142.125958][ T8854] ? lockdep_init_map_type+0x5c/0x250 [ 142.125980][ T8854] ? __pfx_device_add+0x10/0x10 [ 142.126003][ T8854] ? lockdep_init_map_type+0x5c/0x250 [ 142.126028][ T8854] ? __init_waitqueue_head+0xca/0x150 [ 142.126058][ T8854] i2c_new_client_device+0x660/0xd30 [ 142.126087][ T8854] new_device_store+0x20f/0x420 [ 142.126110][ T8854] ? __pfx_new_device_store+0x10/0x10 [ 142.126139][ T8854] ? find_held_lock+0x2b/0x80 [ 142.126166][ T8854] ? sysfs_file_kobj+0xe4/0x290 [ 142.126190][ T8854] ? sysfs_file_kobj+0xe4/0x290 [ 142.126214][ T8854] ? __pfx_new_device_store+0x10/0x10 [ 142.126232][ T8854] dev_attr_store+0x58/0x80 [ 142.126259][ T8854] ? __pfx_dev_attr_store+0x10/0x10 [ 142.126284][ T8854] sysfs_kf_write+0xf2/0x150 [ 142.126310][ T8854] kernfs_fop_write_iter+0x3e0/0x5f0 [ 142.126331][ T8854] ? __pfx_sysfs_kf_write+0x10/0x10 [ 142.126357][ T8854] vfs_write+0x6af/0x1050 [ 142.126378][ T8854] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 142.126400][ T8854] ? __pfx_vfs_write+0x10/0x10 [ 142.126418][ T8854] ? find_held_lock+0x2b/0x80 [ 142.126468][ T8854] ksys_write+0x12a/0x250 [ 142.126490][ T8854] ? __pfx_ksys_write+0x10/0x10 [ 142.126521][ T8854] do_syscall_64+0x123/0x790 [ 142.126554][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.126575][ T8854] RIP: 0033:0x7f3b11f9e159 [ 142.126592][ T8854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.126609][ T8854] RSP: 002b:00007f3b12ec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.126631][ T8854] RAX: ffffffffffffffda RBX: 00007f3b12225fa0 RCX: 00007f3b11f9e159 [ 142.126643][ T8854] RDX: 000000000000000b RSI: 0000200000000140 RDI: 0000000000000003 [ 142.126654][ T8854] RBP: 00007f3b1203506b R08: 0000000000000000 R09: 0000000000000000 [ 142.126665][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.126675][ T8854] R13: 00007f3b12226038 R14: 00007f3b12225fa0 R15: 00007ffed0d2d698 [ 142.126702][ T8854] [ 142.126726][ T8854] kobject: kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 142.126758][ T8854] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 142.196425][ T8865] FAULT_INJECTION: forcing a failure. [ 142.196425][ T8865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.196446][ T8865] CPU: 3 UID: 0 PID: 8865 Comm: syz.2.1003 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.196462][ T8865] Tainted: [L]=SOFTLOCKUP [ 142.196466][ T8865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.196472][ T8865] Call Trace: [ 142.196476][ T8865] [ 142.196480][ T8865] dump_stack_lvl+0x100/0x190 [ 142.196500][ T8865] should_fail_ex.cold+0x5/0xa [ 142.196516][ T8865] _copy_from_user+0x2e/0xd0 [ 142.196530][ T8865] kstrtouint_from_user+0xd6/0x1d0 [ 142.196545][ T8865] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 142.196564][ T8865] ? lock_acquire+0x1d1/0x380 [ 142.196579][ T8865] proc_fail_nth_write+0x83/0x220 [ 142.196594][ T8865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 142.196612][ T8865] vfs_write+0x2aa/0x1050 [ 142.196624][ T8865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 142.196638][ T8865] ? lock_acquire+0x1d1/0x380 [ 142.196649][ T8865] ? __fget_files+0x34/0x3d0 [ 142.196665][ T8865] ? __pfx_vfs_write+0x10/0x10 [ 142.196675][ T8865] ? find_held_lock+0x2b/0x80 [ 142.196723][ T8865] ? __fget_files+0x215/0x3d0 [ 142.196740][ T8865] ? __fget_files+0x21f/0x3d0 [ 142.196757][ T8865] ksys_write+0x12a/0x250 [ 142.196769][ T8865] ? __pfx_ksys_write+0x10/0x10 [ 142.196779][ T8865] ? v4l2_ioctl+0x1c5/0x250 [ 142.196801][ T8865] do_syscall_64+0x123/0x790 [ 142.196819][ T8865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.196830][ T8865] RIP: 0033:0x7f3b11f5e98e [ 142.196839][ T8865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.196850][ T8865] RSP: 002b:00007f3b12ec0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.196861][ T8865] RAX: ffffffffffffffda RBX: 00007f3b12ec16c0 RCX: 00007f3b11f5e98e [ 142.196868][ T8865] RDX: 0000000000000001 RSI: 00007f3b12ec10a0 RDI: 0000000000000004 [ 142.196875][ T8865] RBP: 00007f3b12ec1090 R08: 0000000000000000 R09: 0000000000000000 [ 142.196881][ T8865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.196887][ T8865] R13: 00007f3b12226038 R14: 00007f3b12225fa0 R15: 00007ffed0d2d698 [ 142.196902][ T8865] [ 142.198434][ T8864] binder: 8855:8864 ioctl c0306201 0 returned -14 [ 142.198460][ T8864] FAULT_INJECTION: forcing a failure. [ 142.198460][ T8864] name fail_futex, interval 1, probability 0, space 0, times 0 [ 142.198486][ T8864] CPU: 1 UID: 0 PID: 8864 Comm: syz.0.1001 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.198511][ T8864] Tainted: [L]=SOFTLOCKUP [ 142.198518][ T8864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.198530][ T8864] Call Trace: [ 142.198538][ T8864] [ 142.198545][ T8864] dump_stack_lvl+0x100/0x190 [ 142.198575][ T8864] should_fail_ex.cold+0x5/0xa [ 142.198620][ T8864] get_futex_key+0x1d0/0x14f0 [ 142.198648][ T8864] ? __pfx_get_futex_key+0x10/0x10 [ 142.198683][ T8864] futex_wake+0xf4/0x5e0 [ 142.198706][ T8864] ? __pfx_futex_wake+0x10/0x10 [ 142.198729][ T8864] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.198754][ T8864] ? do_vfs_ioctl+0x226/0x13e0 [ 142.198776][ T8864] do_futex+0x2b2/0x440 [ 142.198804][ T8864] ? __pfx_do_futex+0x10/0x10 [ 142.198828][ T8864] ? __fget_files+0x34/0x3d0 [ 142.198858][ T8864] __x64_sys_futex+0x34f/0x4d0 [ 142.198888][ T8864] ? __pfx___x64_sys_futex+0x10/0x10 [ 142.198911][ T8864] ? selinux_file_ioctl+0xb6/0x290 [ 142.198943][ T8864] do_syscall_64+0x123/0x790 [ 142.198975][ T8864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.198996][ T8864] RIP: 0033:0x7fb936d9e159 [ 142.199011][ T8864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.199028][ T8864] RSP: 002b:00007fb937cba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 142.199047][ T8864] RAX: ffffffffffffffda RBX: 00007fb937026098 RCX: 00007fb936d9e159 [ 142.199059][ T8864] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb93702609c [ 142.199078][ T8864] RBP: 00007fb937026090 R08: 0000000000000001 R09: 0000000000000000 [ 142.199089][ T8864] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 142.199100][ T8864] R13: 00007fb937026128 R14: 00007fff6ea2ab30 R15: 00007fff6ea2ac18 [ 142.199128][ T8864] [ 142.242971][ T43] audit: type=1400 audit(1790244222.108:657): avc: denied { listen } for pid=8866 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.248773][ T8864] binder: 8855:8864 ioctl 5307 0 returned -22 [ 142.460248][ T8873] jffs2: notice: (8873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 142.639875][ T8879] netlink: 'syz.4.1009': attribute type 1 has an invalid length. [ 142.650810][ T8879] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 142.681778][ T8883] overlay: Unknown parameter 'dont_appraise' [ 142.684034][ T5741] Bluetooth: hci3: unexpected event for opcode 0x040d [ 142.726464][ T43] audit: type=1400 audit(1790244222.598:658): avc: denied { write } for pid=8885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.774360][ T43] audit: type=1400 audit(1790244222.638:659): avc: denied { write } for pid=8891 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.799675][ T8898] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1014'. [ 142.799699][ T8898] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1014'. [ 142.799714][ T8898] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1014'. [ 142.885337][ T43] audit: type=1400 audit(1790244222.748:660): avc: denied { write } for pid=8905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.929270][ T43] audit: type=1400 audit(1790244222.798:661): avc: denied { write } for pid=8909 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.116680][ T5741] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 143.117072][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 143.163972][ T8918] jffs2: notice: (8918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 143.251906][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1020'. [ 143.251939][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1020'. [ 143.421514][ T8939] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 143.457537][ T8939] veth7: entered allmulticast mode [ 143.460973][ T8939] bond3: (slave veth7): Enslaving as an active interface with a down link [ 143.468570][ T8939] macvlan2: entered promiscuous mode [ 143.468585][ T8939] macvlan2: entered allmulticast mode [ 143.468903][ T8939] bond3: entered promiscuous mode [ 143.469244][ T8939] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.469583][ T8939] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 143.471392][ T8939] bond3: left promiscuous mode [ 143.603974][ T8953] jffs2: notice: (8953) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 143.609515][ T8956] overlay: Unknown parameter 'dont_appraise' [ 143.614110][ T5741] Bluetooth: hci1: unexpected event for opcode 0x040d [ 143.663573][ T8964] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 143.663601][ T8964] SELinux: failed to load policy [ 143.718694][ T8972] [ 143.719518][ T8972] ============================= [ 143.722206][ T8972] WARNING: suspicious RCU usage [ 143.723766][ T8972] syzkaller #0 Tainted: G L [ 143.725931][ T8972] ----------------------------- [ 143.727508][ T8972] net/netfilter/nf_conntrack_netlink.c:3395 suspicious rcu_dereference_check() usage! [ 143.730497][ T8972] [ 143.730497][ T8972] other info that might help us debug this: [ 143.730497][ T8972] [ 143.733657][ T8972] [ 143.733657][ T8972] rcu_scheduler_active = 2, debug_locks = 1 [ 143.736173][ T8972] locks held by syz.2.1036/8972: 2, last CPU#1: [ 143.738170][ T8972] #0: ffffffff9be05c20 (nfnl_subsys_ctnetlink_exp){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 143.741508][ T8972] #1: ffffffff8ea64d58 (nf_conntrack_expect_lock){+...}-{3:3}, at: nf_ct_expect_iterate_net+0x38/0x1a0 [ 143.744976][ T8972] [ 143.744976][ T8972] stack backtrace: [ 143.746883][ T8972] CPU: 1 UID: 0 PID: 8972 Comm: syz.2.1036 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.750275][ T8972] Tainted: [L]=SOFTLOCKUP [ 143.751625][ T8972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.754781][ T8972] Call Trace: [ 143.755870][ T8972] [ 143.756818][ T8972] dump_stack_lvl+0x100/0x190 [ 143.758349][ T8972] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 143.760110][ T8972] expect_iter_name+0x102/0x130 [ 143.761663][ T8972] nf_ct_expect_iterate_net+0x141/0x1a0 [ 143.763438][ T8972] ? __pfx_expect_iter_name+0x10/0x10 [ 143.765154][ T8972] ctnetlink_del_expect+0x4ec/0x6c0 [ 143.766788][ T8972] ? __pfx_ctnetlink_del_expect+0x10/0x10 [ 143.768583][ T8972] ? net_generic+0x25/0x2a0 [ 143.770150][ T8972] ? find_held_lock+0x2b/0x80 [ 143.771659][ T8972] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 143.773299][ T8972] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.775116][ T8972] ? __lock_acquire+0x5c0/0x1f40 [ 143.776710][ T8972] ? avc_has_perm_noaudit+0x145/0x470 [ 143.778458][ T8972] netlink_rcv_skb+0x159/0x420 [ 143.779958][ T8972] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.781683][ T8972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.783473][ T8972] ? ns_capable+0xd2/0xf0 [ 143.784837][ T8972] nfnetlink_rcv+0x1b3/0x440 [ 143.786420][ T8972] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 143.788069][ T8972] ? netlink_deliver_tap+0x1ae/0xcc0 [ 143.789783][ T8972] netlink_unicast+0x585/0x850 [ 143.791296][ T8972] ? __pfx_netlink_unicast+0x10/0x10 [ 143.792982][ T8972] netlink_sendmsg+0x8b0/0xda0 [ 143.794555][ T8972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.796234][ T8972] ? selinux_socket_sendmsg+0x198/0x2f0 [ 143.798181][ T8972] ____sys_sendmsg+0xa4d/0xbe0 [ 143.799717][ T8972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.801421][ T8972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.803120][ T8972] ___sys_sendmsg+0x190/0x1e0 [ 143.804643][ T8972] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.806290][ T8972] ? futex_wait+0x11e/0x370 [ 143.807751][ T8972] ? find_held_lock+0x2b/0x80 [ 143.809312][ T8972] __sys_sendmsg+0x160/0x210 [ 143.810778][ T8972] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.812385][ T8972] do_syscall_64+0x123/0x790 [ 143.813905][ T8972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.815748][ T8972] RIP: 0033:0x7f3b11f9e159 [ 143.817182][ T8972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.823351][ T8972] RSP: 002b:00007f3b12ec1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.826095][ T8972] RAX: ffffffffffffffda RBX: 00007f3b12225fa0 RCX: 00007f3b11f9e159 [ 143.828605][ T8972] RDX: 0000000000008010 RSI: 0000200000000540 RDI: 0000000000000004 [ 143.831100][ T8972] RBP: 00007f3b1203506b R08: 0000000000000000 R09: 0000000000000000 [ 143.833721][ T8972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.836212][ T8972] R13: 00007f3b12226038 R14: 00007f3b12225fa0 R15: 00007ffed0d2d698 [ 143.838714][ T8972] [ 143.973411][ T8976] SELinux: failed to load policy