last executing test programs: 42.392897426s ago: executing program 3 (id=2015): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = add_key$keyring(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static'}}}]}) r2 = add_key$user(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x2}, &(0x7f00000014c0)="d5ed", 0x2, r1) r3 = add_key$user(&(0x7f00000016c0), &(0x7f0000001700)={'syz', 0x2}, &(0x7f0000001740)="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", 0x801, r1) keyctl$dh_compute(0x17, &(0x7f0000002740)={r2, r3, r2}, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 41.838708963s ago: executing program 3 (id=2021): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) utimensat(r0, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}}, 0x0) getsockname$unix(r0, &(0x7f0000000180), &(0x7f0000000240)=0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_getsetattr(r3, 0x0, &(0x7f00000000c0)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, 0x0) shutdown(r1, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000100)={0x1f, @any, 0xb}, 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000540)='0', 0x1) 41.837604271s ago: executing program 3 (id=2022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket(0x10, 0x80002, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x5}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 41.720086805s ago: executing program 3 (id=2024): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x3}) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) socketpair$unix(0x1, 0x1, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, &(0x7f0000000000)=0x2c) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 41.64453358s ago: executing program 3 (id=2025): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x1ff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) sendfile(r1, r1, 0x0, 0xb) socket(0x15, 0x5, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r3, &(0x7f0000009b40)="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", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x100) socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCGETD(r0, 0x5424, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4020744f, &(0x7f0000000040)=0x80) write(r5, &(0x7f0000000280)='{*', 0x2) 41.567603265s ago: executing program 3 (id=2026): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x6, 0x8ae83) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007a40)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20040815}, 0xc4) 26.574901342s ago: executing program 32 (id=2026): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x6, 0x8ae83) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007a40)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20040815}, 0xc4) 6.239173026s ago: executing program 0 (id=2476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f001600060004fca8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775", 0x82}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 3.047844376s ago: executing program 0 (id=2492): r0 = add_key(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xf8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x16) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000140)={0x8, {0x10000, 0x8, 0xb, 0x81}}) mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9, 0x0, 0x0, 0x6, 0x808, 0x4006}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.042761334s ago: executing program 0 (id=2495): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0605250c"], 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev/ttyS0\x00', 0x2, 0x20) ioctl$TCSBRKP(r0, 0x5425, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x80000000, 0x18}, 0xc) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 2.689696543s ago: executing program 4 (id=2499): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.55114765s ago: executing program 4 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, r1, 0x121, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x180d0}, 0x4008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e13010042000000aaaaaaaaaa2010000000000100"], 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e0c0400420000000000"], 0xf) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) llistxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0), 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x4, {0x200dd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="050026bd7000000000002100000008000300", @ANYRES32=r3], 0x4c}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x404400c) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) 2.549071942s ago: executing program 1 (id=2503): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_io_uring_setup(0x2b83, 0x0, 0x0, 0x0, &(0x7f0000000200)) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0xbb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x0, 0x13) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x6d, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='p', 0x1) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="3000000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000300000008001b0000"], 0x30}}, 0x0) 2.11725921s ago: executing program 1 (id=2505): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x5, 0xfffffffffffffffd, 0xc595, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.890016953s ago: executing program 1 (id=2507): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0xc1c2, 0x1000, 0xfffffffd, 0x5, 0x0, r4}) syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0xcd, 0x3}}}, 0x7) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, 0x0, 0x0) 1.889763136s ago: executing program 4 (id=2508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x10, 0x2, 0x8, 0x3, 0x0, 0x1, 0x8, 0x1, 0x5, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.738670718s ago: executing program 4 (id=2509): r0 = socket$alg(0x26, 0x5, 0x0) setns(0xc9, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) fanotify_mark(0xffffffffffffffff, 0x201, 0x30, r2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='X', 0x1}], 0x1) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000002c0)='.\x00', 0xa40007c1) readv(r3, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/68, 0x44}], 0x1) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000440)={'security\x00', 0x0, [0x3, 0x8, 0x4, 0xfff, 0xd]}, &(0x7f0000000540)=0x54) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048818}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) getpeername$tipc(r2, 0x0, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bind$alg(r0, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000580), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xfffffffc, 0xffffffff, 0xffffffff, 0xffffffff, 0xf8000000, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x10000006, 0xffffffff, 0x200, 0xffffffff, 0xffffffff]], '\x00', [{0x40d, 0x14, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x8, 0x0, 0x0, 0x1}, {0xff, 0xc, 0x0, 0x0, 0x1}, {0x2710, 0xf4248, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000040)=0x7) 1.6397383s ago: executing program 4 (id=2510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 1.639439678s ago: executing program 0 (id=2511): socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1}, 0x2}], 0x2, 0x10160, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = getpgrp(0x0) capget(0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2d, 0x2, 0x0) bind(r2, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80) r3 = socket(0x2d, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) r4 = socket(0x2d, 0x2, 0x0) bind(r4, &(0x7f0000000500)=@generic={0x2d, "00000100008b080108000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000647400"}, 0x80) r5 = socket(0x2d, 0x2, 0x0) sendto(r5, 0x0, 0x0, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) 1.589774753s ago: executing program 4 (id=2512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x81, 0x7fffffff, 0x7, 0x4}, 0x7, 0xd}, [{0x4, 0xc, 0x1, 0x0, 0x8, 0xa517}, {0x9, 0x6283, 0x4, 0x7ff, 0x6, 0x5}, {0x7fff, 0x9, 0x1, 0x7, 0x680, 0x80}, {0x6, 0xe62, 0x0, 0x10, 0x7, 0x7c}, {0x1, 0x0, 0x8, 0x2, 0x0, 0x487}, {0x6235, 0x4, 0x6408, 0x7, 0x3, 0x7}, {0xa10, 0x6, 0x7, 0x7, 0x3, 0xefe3}, {0x9, 0x3, 0x400, 0xff, 0x8, 0xd}, {0x5, 0x6fb, 0x6, 0xc, 0x7, 0x8}, {0x0, 0x8001, 0x1, 0x101, 0x7}, {0x6, 0x1, 0xfa5b, 0x9, 0x78d7, 0x4}, {0x9, 0x7, 0x6, 0x6, 0x1, 0x7}, {0x8, 0x4, 0xfffffffa, 0x401, 0xff}, {0x7, 0x1, 0xbf5, 0xd42, 0xfbe, 0x10000}, {0xffffffff, 0x1, 0xe, 0x5, 0x7, 0x2}, {0xe8d, 0x9, 0x3, 0x2, 0x2, 0x5}, {0x7fa, 0x2a, 0x1, 0x3, 0x5, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x9, 0x9}, {0x81, 0x2, 0x5547, 0x7, 0x4, 0x3}, {0x2000005, 0x4, 0x65b97795, 0x9, 0x4, 0x4d}, {0xaea, 0x83b2, 0x7, 0xa, 0x3, 0x1}, {0xff, 0x3ff, 0x0, 0x6, 0x100, 0xc0000000}, {0x3ff, 0x9, 0xf, 0x1000}, {0x40, 0x7e23, 0x1, 0x10000, 0x9, 0x8}, {0xffffffff, 0x17, 0x9, 0x7fffffff, 0x59, 0x80000001}, {0x8, 0x8, 0x0, 0x9, 0x2, 0x9}, {0x6, 0x80000001, 0x5, 0x80000001, 0x6, 0x1}, {0x3, 0x1, 0x9, 0x8ab6, 0x7, 0xc}, {0x80, 0x9, 0x2, 0x5, 0x9, 0x1}, {0x83ae, 0xf, 0x5, 0x2, 0xffff, 0xffffffac}, {0x31, 0x5, 0x80000000, 0x80, 0xc3}, {0x7, 0x5, 0x8000, 0x7, 0x8, 0x3}, {0x1, 0xfffffff7, 0x8, 0x5, 0xffffff90, 0x101}, {0x8, 0x3, 0x4, 0x2, 0x4, 0x1ff}, {0x6, 0xd, 0x2, 0x3f, 0xfff, 0x2}, {0x8001, 0x2, 0x0, 0x5fe2, 0xb80, 0xebc2}, {0x6, 0x80, 0xb, 0x59, 0x8, 0x5}, {0x91, 0x0, 0xba, 0x8080, 0xe, 0xfffff4e2}, {0x0, 0x38e3, 0x7, 0xffffffff, 0xdf, 0x79}, {0x5, 0x80f, 0x3, 0x6, 0x80e, 0x4}, {0x200, 0x6, 0x5, 0xd3, 0x0, 0x7}, {0x3, 0x8, 0xf, 0x8, 0x5, 0xfffffff7}, {0x9, 0x0, 0x9, 0x80, 0x9, 0x3}, {0x1, 0x81, 0x401, 0x98b, 0x2, 0xe}, {0x1, 0x8, 0x3ff, 0x2, 0x200, 0x7}, {0x3, 0x5, 0xc, 0xe9f, 0x3, 0x4}, {0x6, 0x890, 0x8, 0x1ff, 0xff, 0xf579}, {0x1, 0x3, 0x6, 0x80, 0x0, 0x7ff}, {0x5, 0x7, 0x1, 0x1000, 0x4642, 0x10000}, {0x80, 0x8, 0xfffffff7, 0xfff, 0x23, 0x5ee6}, {0x7f, 0x4, 0x24, 0x9, 0x1, 0x1}, {0xbc, 0x5, 0x1, 0x1ff, 0x3, 0x5291}, {0xc, 0x4, 0x4, 0x2, 0x4, 0x2}, {0x9, 0x8, 0x3, 0x0, 0x0, 0xfffffff7}, {0x8, 0x4, 0x9, 0x7, 0x8, 0x3000000}, {0x2, 0x9, 0x3ff, 0x7f, 0xffffffff, 0x4772}, {0xa, 0x5, 0x56e, 0x7, 0x60, 0x8}, {0x1, 0x0, 0x4, 0x3, 0xb56, 0x3}, {0xe, 0x3, 0xfffffff7, 0x8, 0xfffffffc, 0x401}, {0x29, 0x1, 0x3, 0x7, 0x9, 0x69}, {0xe, 0x77, 0x779, 0x2, 0x4, 0x81}, {0x6, 0x6, 0xbe, 0x1, 0x8, 0x3}, {0x9, 0x6, 0x9, 0x3, 0x10001, 0x9}, {0x5cc, 0x8000, 0x3, 0x3b55, 0x3, 0x4}, {0x9, 0x1, 0x0, 0x2, 0x4, 0x9}, {0x9, 0x4000, 0x3, 0x8fd, 0x10001, 0x2}, {0xfe, 0x4, 0x3, 0x1, 0xdd, 0x2}, {0x7, 0x7, 0x7fff, 0x8001, 0xfffffffd, 0x4}, {0xa95, 0xd, 0x1, 0x7, 0x10000, 0x3}, {0x8702, 0x81, 0x2, 0x400, 0x0, 0x5}, {0x2, 0x7f, 0x3ff, 0x2, 0x9262, 0x4}, {0xd255, 0x0, 0x1, 0x4, 0x1, 0xf}, {0x0, 0x3, 0x8, 0xffff, 0xf161, 0x2}, {0x7f, 0xd82, 0xd4d, 0x7, 0x80000001}, {0x1, 0x7, 0x9, 0x4, 0x10000, 0x7}, {0x65, 0x6, 0x4, 0x3, 0x4e7, 0xfffff952}, {0x1, 0x2b3, 0xfd, 0x10001, 0x5, 0x401}, {0x6, 0x600, 0xb9c, 0xf8b, 0x7}, {0x1, 0x3, 0x7, 0x892a4e08, 0x8b4, 0x5}, {0xffffffff, 0xfffffff8, 0x4be, 0x15, 0x80000001, 0x6}, {0x6, 0x37fc, 0x4, 0x3ff, 0x5, 0x5}, {0x5, 0x8, 0x6, 0x7fff, 0xfffffffc, 0x10}, {0x7, 0x8, 0x728, 0x3, 0x2, 0xb}, {0xfffffff7, 0x1, 0x7, 0x33a, 0x4c, 0xfc000000}, {0x3720, 0xffff0000, 0x4, 0x100, 0x7, 0x80000000}, {0xc, 0x7f, 0x0, 0x222d, 0x4, 0xa7fc}, {0x4, 0xe4bf, 0x6, 0x9, 0x2}, {0x2, 0x3, 0x6, 0x6, 0x6, 0xd}, {0xffffffeb, 0x7920, 0x4, 0x7, 0x1, 0x3}, {0xf05, 0x1, 0x1, 0x9, 0x4, 0x1}, {0x2, 0x5, 0x8000, 0xffffffff, 0xfffffff0, 0x1}, {0x3, 0x2, 0x1, 0x5, 0x7, 0x1}, {0xfffffffc, 0x5, 0x0, 0x5, 0x6, 0x6}, {0x2, 0x65, 0xf4ea, 0x7fffffff, 0x8, 0x4}, {0x8001, 0x7, 0x9, 0xfff, 0x6, 0x7f}, {0xb5b5, 0xffffffff, 0x40, 0x2, 0xfffff535, 0x9}, {0xf79, 0x0, 0x40, 0x0, 0xffff, 0x200}, {0x278424d5, 0xffffffff, 0x5, 0x7, 0x3f3b5b77, 0x9}, {0x5, 0xb, 0x1, 0x7, 0x0, 0x2}, {0x1, 0x101, 0x7f, 0x0, 0xc81, 0x3}, {0x10000, 0x9d3, 0x7, 0x6, 0x3, 0xbd}, {0x9, 0x7, 0xb33e, 0xa, 0x6, 0x6}, {0xafd6, 0x19a0, 0x2, 0xdaa, 0x401, 0x8}, {0x2, 0x9, 0x8, 0x200, 0x3, 0xa5a}, {0x5, 0x11, 0x6, 0x1, 0x4, 0xfffffff9}, {0x81, 0x4, 0x4, 0xffffb72c, 0x1, 0x2}, {0x1, 0xffff, 0xd, 0xb, 0x9, 0x5}, {0x240, 0xd3db, 0xffff8000, 0x409, 0x80000001, 0x401}, {0x8, 0x2, 0x4, 0x7ff, 0x754200, 0x2}, {0x7, 0x8, 0x2, 0x0, 0x5, 0x10001}, {0x7b7, 0x5, 0xffff, 0x0, 0x10001, 0x9}, {0x5, 0x4, 0x9, 0x10, 0x8e, 0x8e}, {0x16, 0x4, 0x4, 0x2, 0x2, 0x9}, {0x7, 0x4, 0x8, 0x10001, 0x8000, 0x1}, {0x1d62, 0x4, 0x9, 0xf3a, 0x7fffffff, 0x9ad}, {0x7, 0xe4, 0x6, 0x9e, 0x7, 0xf059}, {0x3, 0x6, 0x8, 0x1400000, 0xed9, 0x6}, {0xfffffffb, 0x6, 0x10000, 0x7, 0x0, 0x6}, {0xe06, 0x8, 0x3, 0x7, 0x10001, 0x3}, {0x101, 0x8, 0x101, 0x30, 0x4, 0x6}, {0x2, 0x7fff, 0x2d, 0x0, 0x4, 0x2}, {0x0, 0x2, 0xf, 0x1, 0x80, 0xc}, {0x0, 0x6, 0x4, 0xad, 0x40, 0x6}, {0x1000, 0x4, 0x1, 0x6, 0x4}, {0xe38, 0x5, 0x5, 0x3, 0x3, 0x4}, {0x1, 0xff, 0x6, 0x41fb, 0x200, 0x200}, {0x6, 0x55460a17, 0x54, 0x9, 0x6, 0x5}, {0x401, 0x10, 0x4, 0x74c8bacd, 0x5, 0x6}], [{0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x3}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x5}, {0x1, 0x83b0069cb76b49f3}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0xd779dfac818b8296, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) 1.231191598s ago: executing program 1 (id=2521): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="700000000002010300000000000000000200001040000a8008000140000000013400028006000340000100000c000280050001003a000000060003400000000006000340000400000c00028005000100010008001c000a801800028014000180080001000a01010108000200ffff"], 0x70}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r0], 0x48}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.104240188s ago: executing program 2 (id=2514): socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2bb, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x9, 0xf9a2, 0xa6, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x3fd, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x54, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0xa8b, 0x1]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000280)={0x0, 0x5ae5, 0x20000, 0x2, 0x2d7}, 0x0, 0x4, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x8, 0x400000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.103551875s ago: executing program 0 (id=2515): socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x3622, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 988.978561ms ago: executing program 0 (id=2516): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@getqdisc={0x34, 0x26, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xe, 0xfff1}, {0xffff, 0x10}, {0xfff2, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40895}, 0x2004c804) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f00000004c0)={0x11, 0x300, r7, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r9, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) r10 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x183000) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x7, 0x5, 0x2, 0x1000000, 0xa, "b4e9e6d700", "7ca24a13", '\x00', '\x00', ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "700a00a9ba073ab000"]}) 843.596084ms ago: executing program 2 (id=2517): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x200004d, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x200, 0x51, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x52a1, 0x1e}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608}) close_range(r8, 0xffffffffffffffff, 0x0) 800.908933ms ago: executing program 1 (id=2518): pipe2$9p(&(0x7f0000000080), 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x3622, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 748.816521ms ago: executing program 1 (id=2519): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000880), 0x80001, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup2(r0, r1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) pipe(0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x2, 0x5c, 0x0, "0bb828c66b9ffe1eac8b8aff2d3a0f27ccddccb04559a573e03463034670dd84436bbea44240bb7a53971631cb77e7e50b051195cdb9b6e5d17b6cdce551ce", 0x2a}, 0x60) r4 = fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:02.0/driver\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000100)='unbind\x00', 0x1, 0x0) getdents64(r5, &(0x7f0000002280)=""/227, 0xe3) write(r6, &(0x7f0000000140)='0000:00:02.0', 0xc) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) fsopen(0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 728.808774ms ago: executing program 2 (id=2520): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x9, 0xb7b, {0xffffffffffffffff}, {}, 0x8, 0x800}) setpriority(0x0, r0, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r1) inotify_init1(0x800) inotify_add_watch(r1, 0x0, 0x40000c17) rmdir(0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x1, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x74ebdffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, &(0x7f0000000180), 0x0}, 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, 0x0) r5 = socket$kcm(0x21, 0x0, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x7, 0x0, 0x4) open_by_handle_at(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000002"], 0x513300) openat(r2, &(0x7f0000000000)='./dev/file0\x00', 0x400000, 0x0) 408.954119ms ago: executing program 2 (id=2522): socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x2, 0x122, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 243.056712ms ago: executing program 2 (id=2523): migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x7, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002090101000000000000000001000001200002001400018008000100ac14141d08"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 2 (id=2524): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000980)='1\n\x00', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='./img\n\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000ac0)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000b40)='1\n\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r5, &(0x7f0000000bc0)='1\n\x00', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r6, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r6) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r7, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) close(r7) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r8, &(0x7f0000000e40)=""/2000, 0x7d0) close(r8) kernel console output (not intermixed with test programs): ding xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 142.215653][ T43] audit: type=1800 audit(1790140725.487:1677): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 142.240379][ T43] audit: type=1800 audit(1790140725.507:1678): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152719 res=0 errno=0 [ 142.306363][ T5090] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 142.347915][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1800'. [ 142.387680][T10553] bond5: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 142.387701][T10553] bond5: entered allmulticast mode [ 142.401090][T10553] bridge1: entered promiscuous mode [ 142.412989][T10553] bridge1: entered allmulticast mode [ 142.413962][T10553] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 142.461109][ T43] audit: type=1800 audit(1790140725.727:1679): pid=10555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1795" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 142.900049][T10583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 142.905096][T10585] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 1597403241 (only 8 groups) [ 143.037222][T10595] syzkaller1: entered promiscuous mode [ 143.037242][T10595] syzkaller1: entered allmulticast mode [ 143.063559][T10593] netlink: 'syz.3.1816': attribute type 1 has an invalid length. [ 143.084726][T10593] bond6: entered promiscuous mode [ 143.085129][T10593] 8021q: adding VLAN 0 to HW filter on device bond6 [ 143.113298][T10593] 8021q: adding VLAN 0 to HW filter on device bond6 [ 143.113619][T10593] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 143.113635][T10593] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 143.116627][T10593] bond6: (slave ip6gre2): making interface the new active one [ 143.116648][T10593] ip6gre2: entered promiscuous mode [ 143.118022][T10593] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 143.673918][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 143.799511][ T5725] gretap1: entered promiscuous mode [ 143.808503][ T9] syz2: Port: 1 Link ACTIVE [ 143.864032][T10643] cdns2-pci 0000:00:1f.3: probe with driver cdns2-pci failed with error -22 [ 143.956929][T10652] UDC core: g1: couldn't find an available UDC or it's busy [ 143.972951][ T5783] net_ratelimit: 31 callbacks suppressed [ 143.972967][ T5783] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 144.075376][ T6684] IPVS: starting estimator thread 0... [ 144.093618][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 144.162730][T10665] IPVS: using max 44 ests per chain, 105600 per kthread [ 144.203104][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 144.306781][T10675] syzkaller0: entered promiscuous mode [ 144.306804][T10675] syzkaller0: entered allmulticast mode [ 144.336709][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 144.442933][ T13] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 144.491795][T10685] syzkaller0: entered promiscuous mode [ 144.491808][T10685] syzkaller0: entered allmulticast mode [ 144.508878][T10687] netlink: 'syz.0.1850': attribute type 1 has an invalid length. [ 144.538335][T10687] bond6: entered promiscuous mode [ 144.538755][T10687] 8021q: adding VLAN 0 to HW filter on device bond6 [ 144.566869][T10687] macvtap1: entered allmulticast mode [ 144.592400][T10687] bond6: (slave bridge0): making interface the new active one [ 144.592421][T10687] bridge0: entered promiscuous mode [ 144.598228][T10687] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 144.629757][T10694] overlayfs: failed to clone upperpath [ 144.703140][ T13] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 144.762714][T10707] netlink: 'syz.3.1859': attribute type 1 has an invalid length. [ 144.797050][T10707] bridge2: entered promiscuous mode [ 144.800153][T10707] bond7: (slave bridge2): making interface the new active one [ 144.801005][T10707] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 144.825230][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 144.942778][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 145.053133][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 145.121428][T10741] tipc: New replicast peer: 172.20.20.187 [ 145.121761][T10741] tipc: Enabled bearer , priority 3 [ 145.132442][T10742] io-wq is not configured for unbound workers [ 145.164430][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 145.214698][T10747] FAULT_INJECTION: forcing a failure. [ 145.214698][T10747] name failslab, interval 1, probability 0, space 0, times 0 [ 145.214738][T10747] CPU: 3 UID: 0 PID: 10747 Comm: syz.2.1871 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.214768][T10747] Tainted: [L]=SOFTLOCKUP [ 145.214776][T10747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.214789][T10747] Call Trace: [ 145.214797][T10747] [ 145.214806][T10747] dump_stack_lvl+0x100/0x190 [ 145.214857][T10747] should_fail_ex.cold+0x5/0xa [ 145.214889][T10747] should_failslab+0xc2/0x120 [ 145.214922][T10747] __kmalloc_cache_node_noprof+0x94/0x720 [ 145.214947][T10747] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 145.214974][T10747] ? elevator_alloc+0x81/0x270 [ 145.215001][T10747] elevator_alloc+0x81/0x270 [ 145.215024][T10747] blk_mq_init_sched+0xb2/0x6c0 [ 145.215054][T10747] elevator_switch+0x1e3/0x7e0 [ 145.215076][T10747] elevator_change+0x352/0x530 [ 145.215101][T10747] elv_iosched_store+0x3be/0x460 [ 145.215124][T10747] ? __pfx_elv_iosched_store+0x10/0x10 [ 145.215154][T10747] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 145.215179][T10747] ? __pfx_elv_iosched_store+0x10/0x10 [ 145.215201][T10747] queue_attr_store+0x25f/0x2f0 [ 145.215232][T10747] ? __pfx_queue_attr_store+0x10/0x10 [ 145.215260][T10747] ? __lock_acquire+0x5c0/0x1f40 [ 145.215287][T10747] ? lock_acquire+0x1d1/0x380 [ 145.215304][T10747] ? sysfs_file_kobj+0x21/0x290 [ 145.215327][T10747] ? find_held_lock+0x2b/0x80 [ 145.215350][T10747] ? sysfs_file_kobj+0xe4/0x290 [ 145.215371][T10747] ? sysfs_file_kobj+0xe4/0x290 [ 145.215397][T10747] ? __pfx_queue_attr_store+0x10/0x10 [ 145.215426][T10747] sysfs_kf_write+0xf2/0x150 [ 145.215452][T10747] kernfs_fop_write_iter+0x3e0/0x5f0 [ 145.215472][T10747] ? __pfx_sysfs_kf_write+0x10/0x10 [ 145.215499][T10747] vfs_write+0x6af/0x1050 [ 145.215521][T10747] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 145.215546][T10747] ? __pfx_vfs_write+0x10/0x10 [ 145.215572][T10747] ? find_held_lock+0x2b/0x80 [ 145.215620][T10747] ksys_write+0x12a/0x250 [ 145.215642][T10747] ? __pfx_ksys_write+0x10/0x10 [ 145.215671][T10747] do_syscall_64+0x123/0x790 [ 145.215712][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.215753][T10747] RIP: 0033:0x7f2466f9e159 [ 145.215772][T10747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.215791][T10747] RSP: 002b:00007f2467e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.215811][T10747] RAX: ffffffffffffffda RBX: 00007f2467225fa0 RCX: 00007f2466f9e159 [ 145.215824][T10747] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004 [ 145.215837][T10747] RBP: 00007f246703506b R08: 0000000000000000 R09: 0000000000000000 [ 145.215850][T10747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.215862][T10747] R13: 00007f2467226038 R14: 00007f2467225fa0 R15: 00007ffdf661bcd8 [ 145.215891][T10747] [ 145.218201][T10747] elv: switch to "kyber" failed, falling back to "none" [ 145.305637][ T5090] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 145.306773][T10752] binder: 10751:10752 ioctl c0306201 2000000003c0 returned -14 [ 146.004351][T10774] overlayfs: failed to clone upperpath [ 146.046709][T10777] capability: warning: `syz.3.1882' uses 32-bit capabilities (legacy support in use) [ 146.182893][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 146.257413][T10783] kvm [10782]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 146.445229][T10793] netlink: 'syz.1.1889': attribute type 1 has an invalid length. [ 146.463036][T10793] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.885655][T10821] fuse: fd is not a fuse device [ 147.048134][ T43] kauditd_printk_skb: 79 callbacks suppressed [ 147.048149][ T43] audit: type=1800 audit(1790140730.307:1759): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 147.087706][ T43] audit: type=1800 audit(1790140730.357:1760): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 147.127365][ T43] audit: type=1800 audit(1790140730.397:1761): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155472 res=0 errno=0 [ 147.128818][ T43] audit: type=1800 audit(1790140730.397:1762): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=155476 res=0 errno=0 [ 147.148837][ T43] audit: type=1400 audit(1790140730.417:1763): avc: denied { accept } for pid=10826 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 147.150948][ T43] audit: type=1400 audit(1790140730.417:1764): avc: denied { write } for pid=10826 comm="syz.0.1899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=x25_socket permissive=1 [ 147.158884][ T43] audit: type=1800 audit(1790140730.427:1765): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 147.170566][ T43] audit: type=1800 audit(1790140730.437:1766): pid=5443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=155504 res=0 errno=0 [ 147.219749][T10829] syzkaller0: entered promiscuous mode [ 147.219770][T10829] syzkaller0: entered allmulticast mode [ 147.258446][ T43] audit: type=1800 audit(1790140730.527:1767): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 147.411704][ T43] audit: type=1800 audit(1790140730.677:1768): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 147.916739][T10887] overlayfs: failed to clone upperpath [ 148.013138][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 148.183556][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 148.184491][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 148.185228][ T25] usb 7-1: config 0 has no interfaces? [ 148.188059][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.188078][ T25] usb 7-1: Product: syz [ 148.188089][ T25] usb 7-1: Manufacturer: syz [ 148.188100][ T25] usb 7-1: SerialNumber: syz [ 148.192791][ T25] usb 7-1: config 0 descriptor?? [ 148.321700][T10913] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 148.416897][ T5725] usb 7-1: USB disconnect, device number 6 [ 148.467228][T10918] netlink: 'syz.0.1926': attribute type 1 has an invalid length. [ 148.506915][T10918] 8021q: adding VLAN 0 to HW filter on device bond7 [ 148.517129][T10918] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 148.562406][T10924] binder: 10923:10924 ioctl c0306201 2000000003c0 returned -14 [ 148.991425][T10933] netfs: Cache "CacheFiles" added (type cachefiles) [ 148.991458][T10933] CacheFiles: File cache on CacheFiles registered [ 148.992077][T10932] CacheFiles: File cache on CacheFiles unregistering [ 148.992097][T10932] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 148.993271][ T8621] net_ratelimit: 32 callbacks suppressed [ 148.993285][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 149.112855][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 149.198350][T10940] kvm: pic: single mode not supported [ 149.206097][T10940] kvm: pic: single mode not supported [ 149.206112][T10940] kvm: pic: level sensitive irq not supported [ 149.207156][T10940] kvm: pic: non byte read [ 149.207616][T10940] kvm: pic: single mode not supported [ 149.207624][T10940] kvm: pic: level sensitive irq not supported [ 149.223181][T10940] kvm: pic: non byte read [ 149.225959][T10940] kvm: pic: non byte read [ 149.227747][T10940] kvm: pic: single mode not supported [ 149.227755][T10940] kvm: pic: level sensitive irq not supported [ 149.230790][T10940] kvm: pic: non byte read [ 149.232505][T10940] kvm: pic: non byte read [ 149.233362][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 149.234561][T10940] kvm: pic: single mode not supported [ 149.236334][T10940] kvm: pic: non byte read [ 149.237720][T10940] kvm: pic: non byte read [ 149.342833][ T5783] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 149.432187][T10951] syzkaller0: entered promiscuous mode [ 149.432200][T10951] syzkaller0: entered allmulticast mode [ 149.472762][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 149.592719][ T13] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 149.702804][ T5783] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 149.741838][T10964] bond1: (slave .`): Releasing active interface [ 149.762250][T10964] bond7: (slave veth0_to_bond): Releasing backup interface [ 149.766520][T10964] .`: (slave bond_slave_0): Releasing backup interface [ 149.769018][T10964] .`: (slave bond_slave_1): Releasing backup interface [ 149.774557][T10964] team0: Port device team_slave_0 removed [ 149.779011][T10964] team0: Port device team_slave_1 removed [ 149.781540][T10964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.781555][T10964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.783518][T10964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.783529][T10964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.786221][T10964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.812740][ T5783] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 149.923164][ T13] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 150.221593][T10982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1951'. [ 150.221615][T10982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1951'. [ 150.231859][T10982] syz_tun: entered promiscuous mode [ 150.238812][T10982] syz_tun: left promiscuous mode [ 150.338083][T10985] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 150.425882][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.426259][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.795202][T10999] syzkaller0: entered promiscuous mode [ 150.795261][T10999] syzkaller0: entered allmulticast mode [ 150.946744][T11005] gadgetfs: bound to dummy_udc driver [ 151.019355][T11011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.019547][T11010] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 151.019695][T11011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.038672][T11010] bond6: entered promiscuous mode [ 151.039031][T11010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 151.071086][T11010] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 151.071103][T11010] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 151.071110][T11010] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 151.101833][T11011] lo speed is unknown, defaulting to 1000 [ 151.124743][T11014] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 151.124758][T11014] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 151.248330][T11020] loop0: detected capacity change from 0 to 32768 [ 151.464085][T11039] binder_alloc: 11038: binder_alloc_buf, no vma [ 151.519196][T11044] netlink: 'syz.1.1968': attribute type 1 has an invalid length. [ 152.101954][ T43] kauditd_printk_skb: 98 callbacks suppressed [ 152.101972][ T43] audit: type=1800 audit(1790140735.367:1867): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 152.132702][ T43] audit: type=1800 audit(1790140735.397:1868): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 152.178983][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1978'. [ 152.265886][ T43] audit: type=1800 audit(1790140735.537:1869): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 152.338594][ T43] audit: type=1800 audit(1790140735.607:1870): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 152.387750][ T43] audit: type=1800 audit(1790140735.657:1871): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 152.394049][T11098] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 152.398019][T11098] syzkaller0: entered promiscuous mode [ 152.398039][T11098] syzkaller0: entered allmulticast mode [ 152.434601][ T43] audit: type=1800 audit(1790140735.707:1872): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20019 res=0 errno=0 [ 152.454602][ T43] audit: type=1800 audit(1790140735.727:1873): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 152.480467][ T43] audit: type=1800 audit(1790140735.747:1874): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 152.497046][T11109] overlayfs: failed to clone upperpath [ 152.497456][ T43] audit: type=1800 audit(1790140735.767:1875): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 152.530801][ T43] audit: type=1800 audit(1790140735.797:1876): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=19882 res=0 errno=0 [ 152.581500][T11112] UDC core: g1: couldn't find an available UDC or it's busy [ 152.618879][T11120] UDC core: g1: couldn't find an available UDC or it's busy [ 152.696633][T11133] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 152.809093][T11142] sg_write: process 1024 (syz.0.1997) changed security contexts after opening file descriptor, this is not allowed. [ 152.821178][T11142] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 152.821824][T11142] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 153.120835][T11169] syzkaller0: entered promiscuous mode [ 153.120858][T11169] syzkaller0: entered allmulticast mode [ 153.435894][T11190] netlink: 'syz.1.2011': attribute type 1 has an invalid length. [ 153.454880][T11190] 8021q: adding VLAN 0 to HW filter on device bond7 [ 153.509352][T11195] syzkaller0: entered promiscuous mode [ 153.509373][T11195] syzkaller0: entered allmulticast mode [ 153.593737][T11199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2014'. [ 153.596098][ T5783] syzkaller0: tun_net_xmit 76 [ 153.596244][ T5783] syzkaller0: tun_net_xmit 48 [ 153.599162][T11199] syzkaller0: create flow: hash 57667608 index 0 [ 153.602689][T11201] MPI: mpi too large (16392 bits) [ 153.606452][T11201] overlayfs: failed to clone upperpath [ 153.683662][T11199] syzkaller0 (unregistered): delete flow: hash 57667608 index 0 [ 153.923295][T11207] gretap1: left promiscuous mode [ 153.998248][T11211] 8021q: adding VLAN 0 to HW filter on device .` [ 153.999665][T11211] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.003595][T11211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.029712][T11211] veth1_vlan: left promiscuous mode [ 154.030533][T11211] veth0_vlan: left promiscuous mode [ 154.031641][T11211] veth0_vlan: entered promiscuous mode [ 154.033543][T11211] veth1_vlan: entered promiscuous mode [ 154.036780][T11211] veth1_macvtap: left promiscuous mode [ 154.037255][T11211] veth0_macvtap: left promiscuous mode [ 154.038099][T11211] veth0_macvtap: entered promiscuous mode [ 154.039105][T11211] veth1_macvtap: entered promiscuous mode [ 154.045815][T11211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.046282][T11211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.046709][T11211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.047141][T11211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.049565][T11211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.050932][T11211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.052866][T11211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.053680][T11211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.054493][T11211] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.055462][T11211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.070287][T11211] syzkaller0: left promiscuous mode [ 154.070952][T11211] bond6: left promiscuous mode [ 154.070962][T11211] bridge0: left promiscuous mode [ 154.071636][T11211] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.072065][T11211] bond6: entered allmulticast mode [ 154.072078][T11211] bridge0: entered allmulticast mode [ 154.073388][T11211] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 154.074376][T11211] bridge0: entered promiscuous mode [ 154.075054][T11211] 8021q: adding VLAN 0 to HW filter on device bond7 [ 154.103068][ T7116] gretap1: entered promiscuous mode [ 154.132863][ T5783] net_ratelimit: 32 callbacks suppressed [ 154.132883][ T5783] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 154.197187][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2022'. [ 154.213287][T11221] vlan8: entered allmulticast mode [ 154.213300][T11221] bridge3: entered allmulticast mode [ 154.217961][T11221] bridge3: port 1(erspan0) entered blocking state [ 154.218098][T11221] bridge3: port 1(erspan0) entered disabled state [ 154.218198][T11221] erspan0: entered allmulticast mode [ 154.219782][T11221] erspan0: left allmulticast mode [ 154.242735][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 154.356393][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 154.462821][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 154.473655][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 154.583121][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 154.692727][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 154.804172][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 154.912821][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 155.023995][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 155.039304][ T5090] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 155.041374][T11245] binder: 11244:11245 ioctl c0306201 2000000003c0 returned -14 [ 155.142755][ T5783] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 156.483753][ T5880] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 156.637657][ T5880] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 156.674109][ T5880] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.687120][ T5880] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.696714][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.696904][ T5880] usb 7-1: Product: syz [ 156.700978][ T5880] usb 7-1: Manufacturer: syz [ 156.701096][ T5880] usb 7-1: SerialNumber: syz [ 156.778428][ T5880] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 156.812786][ T5880] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 156.840119][ T5880] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 157.114798][T11260] tipc: Enabled bearer , priority 0 [ 157.117708][T11259] tipc: Resetting bearer [ 157.139642][T11259] tipc: Disabling bearer [ 157.153420][ T43] kauditd_printk_skb: 81 callbacks suppressed [ 157.153432][ T43] audit: type=1800 audit(1790140740.427:1958): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 157.293878][ T43] audit: type=1800 audit(1790140740.557:1959): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 157.346460][T11266] tc action pedit offset must be on 32 bit boundaries [ 157.536362][ T43] audit: type=1800 audit(1790140740.807:1960): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 157.547489][ T43] audit: type=1400 audit(1790140740.817:1961): avc: denied { write } for pid=11267 comm="syz.1.2037" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 157.562609][ T43] audit: type=1800 audit(1790140740.827:1962): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 157.585087][T11270] jffs2: notice: (11270) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 157.595763][T11270] FAULT_INJECTION: forcing a failure. [ 157.595763][T11270] name failslab, interval 1, probability 0, space 0, times 0 [ 157.595795][T11270] CPU: 0 UID: 0 PID: 11270 Comm: syz.0.2038 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.595823][T11270] Tainted: [L]=SOFTLOCKUP [ 157.595830][T11270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.595842][T11270] Call Trace: [ 157.595848][T11270] [ 157.595857][T11270] dump_stack_lvl+0x100/0x190 [ 157.595901][T11270] should_fail_ex.cold+0x5/0xa [ 157.595920][ T43] audit: type=1400 audit(1790140740.867:1963): avc: denied { write } for pid=11269 comm="syz.0.2038" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.595930][T11270] should_failslab+0xc2/0x120 [ 157.595990][ T43] audit: type=1400 audit(1790140740.867:1964): avc: denied { read write } for pid=11269 comm="syz.0.2038" name="file2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 157.595991][T11270] __kmalloc_noprof+0xfc/0x840 [ 157.596014][T11270] ? tomoyo_encode2+0xfb/0x3c0 [ 157.596045][T11270] tomoyo_encode2+0xfb/0x3c0 [ 157.596074][T11270] tomoyo_encode+0x29/0x50 [ 157.596097][T11270] tomoyo_realpath_from_path+0x18c/0x690 [ 157.596128][T11270] tomoyo_check_open_permission+0x2af/0x3c0 [ 157.596153][T11270] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 157.596200][T11270] ? hook_file_open+0x248/0x8e0 [ 157.596251][T11270] tomoyo_file_open+0x6b/0x90 [ 157.596280][T11270] security_file_open+0xb5/0x1e0 [ 157.596305][T11270] do_dentry_open+0x588/0x14d0 [ 157.596334][T11270] vfs_open+0x82/0x3f0 [ 157.596364][T11270] path_openat+0x19fa/0x2440 [ 157.596393][T11270] ? __pfx_path_openat+0x10/0x10 [ 157.596425][T11270] do_file_open+0x20e/0x430 [ 157.596452][T11270] ? __pfx_do_file_open+0x10/0x10 [ 157.596494][T11270] ? _raw_spin_unlock+0x28/0x50 [ 157.596525][T11270] ? alloc_fd+0x471/0x7a0 [ 157.596557][T11270] do_sys_openat2+0x10f/0x1e0 [ 157.596585][T11270] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.596623][T11270] __x64_sys_openat+0x12d/0x210 [ 157.596653][T11270] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.596691][T11270] do_syscall_64+0x123/0x790 [ 157.596723][T11270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.596743][T11270] RIP: 0033:0x7fc22519e159 [ 157.596759][T11270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.596777][T11270] RSP: 002b:00007fc226008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.596797][T11270] RAX: ffffffffffffffda RBX: 00007fc225425fa0 RCX: 00007fc22519e159 [ 157.596809][T11270] RDX: 0000000000101042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 157.596822][T11270] RBP: 00007fc22523506b R08: 0000000000000000 R09: 0000000000000000 [ 157.596835][T11270] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000 [ 157.596847][T11270] R13: 00007fc225426038 R14: 00007fc225425fa0 R15: 00007ffe6aa0e268 [ 157.596875][T11270] [ 157.597026][T11270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.597739][ T43] audit: type=1400 audit(1790140740.867:1965): avc: denied { open } for pid=11269 comm="syz.0.2038" path="/437/file0/file2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 157.622152][ T43] audit: type=1800 audit(1790140740.887:1966): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 157.652028][ T43] audit: type=1800 audit(1790140740.917:1967): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 158.042443][T11289] se_dev->se_dev_ptr already set for storage object [ 158.161693][T11295] binder: 11294:11295 ioctl c0306201 2000000003c0 returned -14 [ 158.448392][T11304] se_dev->se_dev_ptr already set for storage object [ 159.016155][T11318] gretap1: left promiscuous mode [ 159.076378][T11323] syz.0.2057 (11323): drop_caches: 2 [ 159.079732][T11319] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.124944][T11319] veth1_vlan: left promiscuous mode [ 159.129035][T11319] veth1_vlan: entered promiscuous mode [ 159.137385][T11319] veth0_macvtap: left promiscuous mode [ 159.138701][T11319] veth0_macvtap: entered promiscuous mode [ 159.144467][T11319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.145800][T11319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.147373][T11319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.148242][T11319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.150812][T11319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.151798][T11319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.155330][T11319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.157074][T11319] 8021q: adding VLAN 0 to HW filter on device eth0 [ 159.159107][T11319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.161732][T11319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.167801][T11319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.172106][T11319] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.173267][T11319] bond6: left promiscuous mode [ 159.173505][T11319] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.174326][T11319] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.226275][ T851] gretap1: entered promiscuous mode [ 159.253083][ T8621] net_ratelimit: 28 callbacks suppressed [ 159.253103][ T8621] bond1: (slave ip6gretap0): link status up again after 0 ms [ 159.273003][ T5835] bond1: (slave ip6gretap0): link status up again after 0 ms [ 159.273036][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 159.383023][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 159.493140][ T13] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 159.603557][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 159.723243][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 159.834454][T11339] binder: 11338:11339 ioctl c0306201 2000000003c0 returned -14 [ 159.838981][T11337] UDC core: g1: couldn't find an available UDC or it's busy [ 159.843371][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 159.952908][ T13] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 160.073035][ T13] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 160.073129][T11255] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 160.076373][T11255] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 160.079511][ T1722] usb 7-1: USB disconnect, device number 7 [ 160.136653][ T1722] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 160.149736][ T1722] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 160.150541][ T1722] ti_usb_3410_5052 7-1:2.0: device disconnected [ 160.153277][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 160.273639][ T5090] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 160.383859][T11348] se_dev->se_dev_ptr already set for storage object [ 160.816054][ T5090] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 160.817934][T11368] binder: 11367:11368 ioctl c0306201 2000000003c0 returned -14 [ 161.343914][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.344375][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.359897][T11379] jffs2: notice: (11379) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 161.416126][T11384] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 162.238873][ T43] kauditd_printk_skb: 96 callbacks suppressed [ 162.238890][ T43] audit: type=1800 audit(1790140745.507:2064): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 162.274752][ T43] audit: type=1800 audit(1790140745.547:2065): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 162.304522][ T43] audit: type=1800 audit(1790140745.577:2066): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 162.347100][ T43] audit: type=1800 audit(1790140745.617:2067): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 162.570171][ T5734] syz1: Port: 1 Link DOWN [ 162.592772][ T5809] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.592818][ T5809] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.592847][ T5809] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.592876][ T5809] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.619412][ T43] audit: type=1400 audit(1790140745.887:2068): avc: denied { write } for pid=11419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.688382][ T43] audit: type=1400 audit(1790140745.957:2069): avc: denied { write } for pid=11422 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.787426][ T43] audit: type=1400 audit(1790140746.057:2070): avc: denied { write } for pid=11424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.849352][ T43] audit: type=1400 audit(1790140746.117:2071): avc: denied { write } for pid=11427 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.929501][ T43] audit: type=1400 audit(1790140746.197:2072): avc: denied { write } for pid=11429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.974998][ T43] audit: type=1400 audit(1790140746.247:2073): avc: denied { write } for pid=11432 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.663465][T11462] program syz.2.2109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.804236][T11468] tipc: Enabled bearer , priority 0 [ 163.807396][T11467] tipc: Resetting bearer [ 163.833597][T11467] tipc: Disabling bearer [ 164.038473][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 164.038487][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 164.302764][ T8621] net_ratelimit: 39 callbacks suppressed [ 164.302785][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 164.390770][T11500] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.412946][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 164.430038][T11504] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 164.472256][T11504] 8021q: adding VLAN 0 to HW filter on device bond8 [ 164.489935][T11504] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2129'. [ 164.489994][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 164.522748][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 164.634515][T11254] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 164.753790][T11254] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 164.864950][T11254] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 164.982739][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 165.102736][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 165.224999][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 165.675010][T11578] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 165.853023][T11584] jffs2: notice: (11584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 166.368172][T11612] se_dev->se_dev_ptr already set for storage object [ 166.453347][T11621] syzkaller0: left allmulticast mode [ 166.455386][T11621] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 166.476308][T11621] tipc: Started in network mode [ 166.476325][T11621] tipc: Node identity 72d7e877bee, cluster identity 4711 [ 166.477801][T11621] tipc: Enabled bearer , priority 0 [ 166.541618][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2187'. [ 166.759340][T11648] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 166.761586][T11648] tipc: Enabling of bearer rejected, already enabled [ 166.872760][ T7111] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 167.043580][ T7111] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 167.044909][ T7111] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.044936][ T7111] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 167.046154][ T7111] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.046179][ T7111] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 167.048633][ T7111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.048656][ T7111] usb 7-1: Product: syz [ 167.048671][ T7111] usb 7-1: Manufacturer: syz [ 167.048685][ T7111] usb 7-1: SerialNumber: syz [ 167.056601][ T7111] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 167.066142][ T7111] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 167.068837][ T7111] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 167.258045][T11638] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 167.259403][ T7111] usb 7-1: USB disconnect, device number 8 [ 167.272163][ T7111] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 167.281025][ T7111] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 167.281751][ T7111] ti_usb_3410_5052 7-1:2.0: device disconnected [ 167.472743][ T7111] tipc: Node number set to 3426216055 [ 167.503617][ T43] kauditd_printk_skb: 134 callbacks suppressed [ 167.503635][ T43] audit: type=1800 audit(1790140750.777:2208): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 167.546784][ T43] audit: type=1800 audit(1790140750.817:2209): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 167.583705][ T43] audit: type=1800 audit(1790140750.857:2210): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 167.623211][ T5835] netdevsim netdevsim120 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.623252][ T5835] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.623281][ T5835] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.623309][ T5835] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.623336][ T5835] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.633715][ T43] audit: type=1800 audit(1790140750.907:2211): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 167.737781][ T43] audit: type=1800 audit(1790140751.007:2212): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 167.772682][ T43] audit: type=1800 audit(1790140751.037:2213): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 167.789380][ T43] audit: type=1800 audit(1790140751.057:2214): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 167.829574][ T43] audit: type=1800 audit(1790140751.097:2215): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 167.859389][ T43] audit: type=1800 audit(1790140751.127:2216): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 167.860368][ T43] audit: type=1800 audit(1790140751.127:2217): pid=11676 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2206" name="max_speed" dev="configfs" ino=47730 res=0 errno=0 [ 167.886356][T11677] ima: policy update failed [ 168.076057][T11697] se_dev->se_dev_ptr already set for storage object [ 168.366643][ T1349] lg-g15 0003:046D:0A07.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 168.370377][ T1349] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0003/input/input11 [ 168.414072][ T7111] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 168.508241][T11724] random: crng reseeded on system resumption [ 168.573563][ T7111] usb 6-1: Using ep0 maxpacket: 8 [ 168.574341][ T7111] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 168.575267][ T7111] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 168.575286][ T7111] usb 6-1: config 0 has no interface number 0 [ 168.575321][ T7111] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.575339][ T7111] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.575357][ T7111] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 168.575376][ T7111] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 168.575397][ T7111] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.577370][ T7111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.577388][ T7111] usb 6-1: Product: syz [ 168.577400][ T7111] usb 6-1: Manufacturer: syz [ 168.577411][ T7111] usb 6-1: SerialNumber: syz [ 168.579582][ T7111] usb 6-1: config 0 descriptor?? [ 168.721546][T11734] syzkaller1: entered promiscuous mode [ 168.721566][T11734] syzkaller1: entered allmulticast mode [ 168.797807][ T7111] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 168.836093][T11736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.836281][T11736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.013466][T11704] jffs2: notice: (11704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 169.322946][T11257] net_ratelimit: 36 callbacks suppressed [ 169.322967][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 169.433303][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 169.526939][T11748] Invalid argument reading file caps for ./file0 [ 169.576240][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.588349][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.591125][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.593430][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.594164][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.624846][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 169.687034][T11762] Invalid logical block size (4) [ 169.716681][ T5090] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 169.718046][T11764] binder: 11763:11764 ioctl c0306201 2000000003c0 returned -14 [ 169.732741][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 169.842726][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 169.895316][T11750] lo speed is unknown, defaulting to 1000 [ 169.952717][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 169.965367][T11775] input: syz0 as /devices/virtual/input/input12 [ 170.014433][T11777] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 170.016617][T11777] tipc: Enabling of bearer rejected, already enabled [ 170.064759][T11254] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 170.192823][T11254] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 170.253952][T11788] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 170.320197][T11750] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.320269][T11750] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.320325][T11750] bridge_slave_0: entered allmulticast mode [ 170.321122][T11750] bridge_slave_0: entered promiscuous mode [ 170.322196][T11750] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.322238][T11750] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.322288][T11750] bridge_slave_1: entered allmulticast mode [ 170.323170][T11750] bridge_slave_1: entered promiscuous mode [ 170.353233][T11750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.354996][T11750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.374378][T11795] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 170.390600][T11750] team0: Port device team_slave_0 added [ 170.398129][T11750] team0: Port device team_slave_1 added [ 170.435331][T11750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.435347][T11750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.435369][T11750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.437210][T11750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.437223][T11750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.437244][T11750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.491292][T11750] hsr_slave_0: entered promiscuous mode [ 170.492099][T11750] hsr_slave_1: entered promiscuous mode [ 170.493839][T11750] debugfs: 'hsr0' already exists in 'hsr' [ 170.493858][T11750] Cannot create hsr debugfs directory [ 170.598771][T11801] tipc: Resetting bearer [ 170.628877][T11801] tipc: Disabling bearer [ 170.644326][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 170.752856][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 170.832189][T11810] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 170.844105][T11750] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.847216][T11750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.848236][T11750] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.852315][T11750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.855250][T11750] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.859585][T11750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.860141][T11750] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.865852][T11750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.888910][T11750] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.889004][T11750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.890166][T11750] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.890254][T11750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.935362][T11750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.947635][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.948308][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.965096][ T1722] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 170.965814][ T1722] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 170.968848][T11750] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.975442][ T1722] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 170.976144][ T1722] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 170.976154][ T1722] rtc rtc0: __rtc_set_alarm: err=-22 [ 170.985051][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.985148][ T6684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.997946][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.998023][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.111219][ C3] iowarrior 6-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 171.113952][ T25] usb 6-1: USB disconnect, device number 6 [ 171.394022][T11750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.469751][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'. [ 171.624806][T11750] veth0_vlan: entered promiscuous mode [ 171.631603][T11750] veth1_vlan: entered promiscuous mode [ 171.655512][T11750] veth0_macvtap: entered promiscuous mode [ 171.664848][T11750] veth1_macvtap: entered promiscuous mode [ 171.666171][ T5090] Bluetooth: hci4: command tx timeout [ 171.681224][T11750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.693016][T11750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.762866][T11254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.763390][T11254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.763639][T11254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.763670][T11254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.791947][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.791968][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.884819][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.884839][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.013932][T11882] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.039927][T11882] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 172.040031][T11882] overlayfs: failed to look up (tracing) for ino (-66) [ 172.519708][ T43] kauditd_printk_skb: 205 callbacks suppressed [ 172.519725][ T43] audit: type=1800 audit(1790140755.787:2423): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16270 res=0 errno=0 [ 172.521627][ T43] audit: type=1400 audit(1790140755.787:2424): avc: denied { read append } for pid=11901 comm="syz.4.2286" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.573075][ T43] audit: type=1800 audit(1790140755.847:2425): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 172.599566][T11902] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.599811][T11902] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.606862][ T43] audit: type=1800 audit(1790140755.877:2426): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 172.620238][T11902] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 172.620294][T11902] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 172.627419][T11902] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 172.648219][ T43] audit: type=1800 audit(1790140755.917:2427): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174973 res=0 errno=0 [ 172.989484][ T43] audit: type=1800 audit(1790140756.257:2428): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 173.016311][ T43] audit: type=1800 audit(1790140756.287:2429): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174984 res=0 errno=0 [ 173.057305][ T43] audit: type=1800 audit(1790140756.327:2430): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 173.108849][ T43] audit: type=1800 audit(1790140756.377:2431): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 173.125610][T11915] FAULT_INJECTION: forcing a failure. [ 173.125610][T11915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.125646][T11915] CPU: 1 UID: 0 PID: 11915 Comm: syz.1.2291 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.125673][T11915] Tainted: [L]=SOFTLOCKUP [ 173.125680][T11915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.125692][T11915] Call Trace: [ 173.125698][T11915] [ 173.125706][T11915] dump_stack_lvl+0x100/0x190 [ 173.125737][T11915] should_fail_ex.cold+0x5/0xa [ 173.125759][T11915] ? prepare_alloc_pages+0x16d/0x5b0 [ 173.125785][T11915] should_fail_alloc_page+0xeb/0x140 [ 173.125812][T11915] prepare_alloc_pages+0x1f0/0x5b0 [ 173.125839][T11915] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 173.125868][T11915] ? stack_trace_save+0x8e/0xc0 [ 173.125888][T11915] ? __pfx_stack_trace_save+0x10/0x10 [ 173.125907][T11915] ? stack_depot_save_flags+0x27/0x9f0 [ 173.125935][T11915] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.125957][T11915] ? kasan_save_stack+0x3f/0x50 [ 173.125979][T11915] ? kasan_save_stack+0x30/0x50 [ 173.126000][T11915] ? kasan_save_track+0x14/0x30 [ 173.126020][T11915] ? __kasan_kmalloc+0xaa/0xb0 [ 173.126040][T11915] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 173.126064][T11915] ? mon_bin_open+0x1a8/0x470 [ 173.126082][T11915] ? chrdev_open+0x234/0x6a0 [ 173.126103][T11915] ? do_dentry_open+0x6ab/0x14d0 [ 173.126121][T11915] ? vfs_open+0x82/0x3f0 [ 173.126141][T11915] ? path_openat+0x19fa/0x2440 [ 173.126163][T11915] ? do_file_open+0x20e/0x430 [ 173.126183][T11915] ? do_sys_openat2+0x10f/0x1e0 [ 173.126205][T11915] ? __x64_sys_openat+0x12d/0x210 [ 173.126230][T11915] ? do_syscall_64+0x123/0x790 [ 173.126254][T11915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.126288][T11915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.126309][T11915] ? policy_nodemask+0xed/0x4f0 [ 173.126334][T11915] alloc_pages_mpol+0x201/0x550 [ 173.126358][T11915] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 173.126390][T11915] alloc_pages_noprof+0x1a/0x160 [ 173.126418][T11915] get_zeroed_page_noprof+0x18/0xb0 [ 173.126441][T11915] mon_alloc_buff+0xce/0x1b0 [ 173.126488][T11915] mon_bin_open+0x207/0x470 [ 173.126513][T11915] ? __pfx_mon_bin_open+0x10/0x10 [ 173.126535][T11915] chrdev_open+0x234/0x6a0 [ 173.126562][T11915] ? __pfx_chrdev_open+0x10/0x10 [ 173.126594][T11915] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 173.126632][T11915] do_dentry_open+0x6ab/0x14d0 [ 173.126656][T11915] ? __pfx_chrdev_open+0x10/0x10 [ 173.126687][T11915] vfs_open+0x82/0x3f0 [ 173.126718][T11915] path_openat+0x19fa/0x2440 [ 173.126750][T11915] ? __pfx_path_openat+0x10/0x10 [ 173.126783][T11915] do_file_open+0x20e/0x430 [ 173.126811][T11915] ? __pfx_do_file_open+0x10/0x10 [ 173.126854][T11915] ? _raw_spin_unlock+0x28/0x50 [ 173.126880][T11915] ? alloc_fd+0x471/0x7a0 [ 173.126913][T11915] do_sys_openat2+0x10f/0x1e0 [ 173.126941][T11915] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.126966][T11915] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 173.127001][T11915] __x64_sys_openat+0x12d/0x210 [ 173.127029][T11915] ? __pfx___x64_sys_openat+0x10/0x10 [ 173.127065][T11915] do_syscall_64+0x123/0x790 [ 173.127095][T11915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.127114][T11915] RIP: 0033:0x7f72b3d5e98e [ 173.127129][T11915] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.127146][T11915] RSP: 002b:00007f72b4bf5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.127167][T11915] RAX: ffffffffffffffda RBX: 00007f72b4bf66c0 RCX: 00007f72b3d5e98e [ 173.127177][T11915] RDX: 0000000000000000 RSI: 00007f72b4bf5c00 RDI: ffffffffffffff9c [ 173.127189][T11915] RBP: 00007f72b4bf5c00 R08: 0000000000000000 R09: 0000000000000000 [ 173.127200][T11915] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 173.127209][T11915] R13: 00007f72b4026038 R14: 00007f72b4025fa0 R15: 00007ffd724df9f8 [ 173.127233][T11915] [ 173.156840][ T43] audit: type=1800 audit(1790140756.427:2432): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 173.331477][T11923] Failure starting scanning (-16) [ 173.399059][T11925] lo speed is unknown, defaulting to 1000 [ 174.402815][ T5835] net_ratelimit: 29 callbacks suppressed [ 174.402836][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 174.512801][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 174.622710][ T5090] Bluetooth: hci4: command 0x040f tx timeout [ 174.622865][ T5735] Bluetooth: hci3: command 0x0406 tx timeout [ 174.628603][T11254] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 174.732935][T11254] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 174.790187][T11947] ip_tables: iptables: counters copy to user failed while replacing table [ 174.843552][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 174.876268][T11957] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 174.953485][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 175.063002][T11254] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 175.093927][T11973] input: syz0 as /devices/virtual/input/input16 [ 175.182747][T11254] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 175.201653][T11975] gre1: entered promiscuous mode [ 175.302958][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 175.482697][ T1722] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 175.635139][ T1722] usb 9-1: Using ep0 maxpacket: 8 [ 175.635718][ T1722] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.640330][ T1722] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 175.640370][ T1722] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.640390][ T1722] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.640410][ T1722] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.640430][ T1722] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.640462][ T1722] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.671672][T11995] clocksource: Switched to clocksource acpi_pm [ 175.680041][T11995] clocksource: Switched to clocksource tsc [ 175.782018][ T5835] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 175.857231][ T1722] usb 9-1: usb_control_msg returned -32 [ 175.857257][ T1722] usbtmc 9-1:16.0: can't read capabilities [ 175.975272][T12007] aoe: unknown AoE command type 0x23 [ 176.224214][T12023] se_dev->se_dev_ptr already set for storage object [ 176.284617][T12029] binder: 12028:12029 ioctl c0306201 2000000003c0 returned -14 [ 176.324760][ T6684] Bluetooth: hci5: Frame reassembly failed (-84) [ 176.637149][T12037] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 176.705015][ T5742] Bluetooth: hci4: command 0x040f tx timeout [ 176.705721][ T5735] Bluetooth: hci3: command 0x0406 tx timeout [ 176.836169][ T851] usb 9-1: USB disconnect, device number 2 [ 176.884795][T12046] tipc: Enabled bearer , priority 0 [ 176.898266][T12045] tipc: Disabling bearer [ 177.671107][ T43] kauditd_printk_skb: 107 callbacks suppressed [ 177.671125][ T43] audit: type=1800 audit(1790140760.933:2540): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 177.769011][ T43] audit: type=1800 audit(1790140761.033:2541): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 177.831019][ T43] audit: type=1800 audit(1790140761.093:2542): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 177.930306][ T43] audit: type=1800 audit(1790140761.193:2543): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 178.080143][ T43] audit: type=1800 audit(1790140761.343:2544): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 178.271450][ T43] audit: type=1800 audit(1790140761.533:2545): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16270 res=0 errno=0 [ 178.321017][ T43] audit: type=1800 audit(1790140761.583:2546): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 178.338897][ T43] audit: type=1326 audit(1790140761.603:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12077 comm="syz.2.2347" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2466f9e159 code=0x0 [ 178.382993][ T66] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 178.458436][ T43] audit: type=1800 audit(1790140761.723:2548): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 178.545850][ T43] audit: type=1800 audit(1790140761.813:2549): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16270 res=0 errno=0 [ 178.600326][T12089] input: syz0 as /devices/virtual/input/input17 [ 178.793101][ T5090] Bluetooth: hci4: command 0x040f tx timeout [ 179.009725][T12096] FAULT_INJECTION: forcing a failure. [ 179.009725][T12096] name failslab, interval 1, probability 0, space 0, times 0 [ 179.009747][T12096] CPU: 0 UID: 0 PID: 12096 Comm: syz.4.2353 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.009764][T12096] Tainted: [L]=SOFTLOCKUP [ 179.009768][T12096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.009775][T12096] Call Trace: [ 179.009779][T12096] [ 179.009783][T12096] dump_stack_lvl+0x100/0x190 [ 179.009815][T12096] should_fail_ex.cold+0x5/0xa [ 179.009832][T12096] should_failslab+0xc2/0x120 [ 179.009849][T12096] kmem_cache_alloc_noprof+0x92/0x6a0 [ 179.009861][T12096] ? __asan_memcpy+0x3c/0x60 [ 179.009871][T12096] ? __kernfs_new_node+0xd2/0xa10 [ 179.009892][T12096] __kernfs_new_node+0xd2/0xa10 [ 179.009910][T12096] ? __pfx___kernfs_new_node+0x10/0x10 [ 179.009929][T12096] ? lock_acquire+0x1d1/0x380 [ 179.009962][T12096] ? kernfs_root+0x23/0x2a0 [ 179.009979][T12096] ? find_held_lock+0x2b/0x80 [ 179.009995][T12096] ? kernfs_root+0xee/0x2a0 [ 179.010011][T12096] ? kernfs_root+0xee/0x2a0 [ 179.010030][T12096] kernfs_create_dir_ns+0xa6/0x2b0 [ 179.010043][T12096] sysfs_create_dir_ns+0x13a/0x2b0 [ 179.010059][T12096] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 179.010074][T12096] ? find_held_lock+0x2b/0x80 [ 179.010089][T12096] ? kobject_add_internal+0x25f/0x930 [ 179.010107][T12096] ? kobject_add_internal+0x25f/0x930 [ 179.010120][T12096] ? do_raw_spin_unlock+0x145/0x1e0 [ 179.010135][T12096] kobject_add_internal+0x2c8/0x930 [ 179.010149][T12096] kobject_init_and_add+0x121/0x180 [ 179.010163][T12096] ? __pfx_kobject_init_and_add+0x10/0x10 [ 179.010177][T12096] ? __kasan_kmalloc+0xaa/0xb0 [ 179.010191][T12096] ? lockdep_init_map_type+0x5c/0x250 [ 179.010205][T12096] ? __raw_spin_lock_init+0x3a/0x110 [ 179.010234][T12096] bus_add_driver+0x186/0x5b0 [ 179.010251][T12096] driver_register+0x1e2/0x360 [ 179.010264][T12096] ? rcu_is_watching+0x13/0xc0 [ 179.010280][T12096] usb_gadget_register_driver_owner+0x132/0x210 [ 179.010299][T12096] raw_ioctl+0x1a85/0x2b80 [ 179.010313][T12096] ? __pfx_raw_ioctl+0x10/0x10 [ 179.010324][T12096] ? selinux_file_ioctl+0x13b/0x290 [ 179.010336][T12096] ? selinux_file_ioctl+0xb6/0x290 [ 179.010350][T12096] ? __pfx_raw_ioctl+0x10/0x10 [ 179.010362][T12096] __x64_sys_ioctl+0x18e/0x210 [ 179.010376][T12096] do_syscall_64+0x123/0x790 [ 179.010397][T12096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.010408][T12096] RIP: 0033:0x7f0040b9ddeb [ 179.010417][T12096] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 179.010428][T12096] RSP: 002b:00007f00419a0f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.010439][T12096] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0040b9ddeb [ 179.010446][T12096] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 179.010463][T12096] RBP: 00007f00419a1fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 179.010470][T12096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.010478][T12096] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000000 [ 179.010492][T12096] [ 179.010620][T12096] kobject: kobject_add_internal failed for raw-gadget.1 (error: -12 parent: drivers) [ 179.010641][T12096] UDC core: USB Raw Gadget: driver registration failed: -12 [ 179.010656][T12096] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 179.178131][T12098] FAULT_INJECTION: forcing a failure. [ 179.178131][T12098] name failslab, interval 1, probability 0, space 0, times 0 [ 179.178164][T12098] CPU: 0 UID: 0 PID: 12098 Comm: syz.0.2354 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.178189][T12098] Tainted: [L]=SOFTLOCKUP [ 179.178196][T12098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.178207][T12098] Call Trace: [ 179.178214][T12098] [ 179.178222][T12098] dump_stack_lvl+0x100/0x190 [ 179.178256][T12098] should_fail_ex.cold+0x5/0xa [ 179.178284][T12098] should_failslab+0xc2/0x120 [ 179.178310][T12098] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 179.178331][T12098] ? start_dirop+0x79/0xb0 [ 179.178354][T12098] ? alloc_inode+0x68/0x250 [ 179.178374][T12098] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 179.178402][T12098] alloc_inode+0x68/0x250 [ 179.178419][T12098] new_inode+0x22/0x1c0 [ 179.178445][T12098] debugfs_create_dir+0x9d/0x420 [ 179.178477][T12098] ptp_open+0x2fd/0x510 [ 179.178501][T12098] ? __pfx_ptp_open+0x10/0x10 [ 179.178522][T12098] ? kobject_get_unless_zero+0x156/0x200 [ 179.178545][T12098] ? posix_clock_open+0xc8/0x290 [ 179.178573][T12098] ? __pfx_ptp_open+0x10/0x10 [ 179.178592][T12098] posix_clock_open+0x17b/0x290 [ 179.178615][T12098] ? __pfx_posix_clock_open+0x10/0x10 [ 179.178637][T12098] chrdev_open+0x234/0x6a0 [ 179.178661][T12098] ? __pfx_chrdev_open+0x10/0x10 [ 179.178684][T12098] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 179.178717][T12098] do_dentry_open+0x6ab/0x14d0 [ 179.178736][T12098] ? __pfx_chrdev_open+0x10/0x10 [ 179.178771][T12098] vfs_open+0x82/0x3f0 [ 179.178798][T12098] path_openat+0x19fa/0x2440 [ 179.178826][T12098] ? __pfx_path_openat+0x10/0x10 [ 179.178857][T12098] do_file_open+0x20e/0x430 [ 179.178884][T12098] ? __pfx_do_file_open+0x10/0x10 [ 179.178926][T12098] ? _raw_spin_unlock+0x28/0x50 [ 179.178950][T12098] ? alloc_fd+0x471/0x7a0 [ 179.178986][T12098] do_sys_openat2+0x10f/0x1e0 [ 179.179013][T12098] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.179041][T12098] ? fd_install+0x252/0x580 [ 179.179068][T12098] __x64_sys_openat+0x12d/0x210 [ 179.179095][T12098] ? __pfx___x64_sys_openat+0x10/0x10 [ 179.179132][T12098] do_syscall_64+0x123/0x790 [ 179.179161][T12098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.179180][T12098] RIP: 0033:0x7fc22519e159 [ 179.179197][T12098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.179215][T12098] RSP: 002b:00007fc226008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.179235][T12098] RAX: ffffffffffffffda RBX: 00007fc225425fa0 RCX: 00007fc22519e159 [ 179.179249][T12098] RDX: 0000000000082001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 179.179261][T12098] RBP: 00007fc22523506b R08: 0000000000000000 R09: 0000000000000000 [ 179.179273][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.179284][T12098] R13: 00007fc225426038 R14: 00007fc225425fa0 R15: 00007ffe6aa0e268 [ 179.179308][T12098] [ 179.179315][T12098] debugfs: out of free dentries, can not create directory '0xffff8880599a0000' [ 179.272279][T12102] FAULT_INJECTION: forcing a failure. [ 179.272279][T12102] name failslab, interval 1, probability 0, space 0, times 0 [ 179.272308][T12102] CPU: 0 UID: 0 PID: 12102 Comm: syz.0.2356 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.272333][T12102] Tainted: [L]=SOFTLOCKUP [ 179.272340][T12102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.272351][T12102] Call Trace: [ 179.272357][T12102] [ 179.272365][T12102] dump_stack_lvl+0x100/0x190 [ 179.272397][T12102] should_fail_ex.cold+0x5/0xa [ 179.272427][T12102] should_failslab+0xc2/0x120 [ 179.272453][T12102] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 179.272476][T12102] ? kasan_save_track+0x14/0x30 [ 179.272497][T12102] ? media_pipeline_add_pad+0x6b8/0xa00 [ 179.272527][T12102] krealloc_node_align_noprof+0x321/0x3e0 [ 179.272552][T12102] media_pipeline_add_pad+0x6b8/0xa00 [ 179.272580][T12102] __media_pipeline_start+0x2e6/0x22b0 [ 179.272627][T12102] ? lock_acquire+0x1d1/0x380 [ 179.272654][T12102] ? __pfx___media_pipeline_start+0x10/0x10 [ 179.272682][T12102] ? __mutex_lock+0x26c/0x1bd0 [ 179.272715][T12102] media_pipeline_start+0x49/0x70 [ 179.272741][T12102] video_device_pipeline_start+0x79/0xa0 [ 179.272769][T12102] vimc_capture_start_streaming+0x7d/0x130 [ 179.272800][T12102] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 179.272830][T12102] vb2_start_streaming+0x162/0x570 [ 179.272851][T12102] ? __bitmap_weight+0xd7/0x110 [ 179.272884][T12102] vb2_core_streamon+0x26a/0x3c0 [ 179.272906][T12102] vb2_ioctl_streamon+0xd9/0x150 [ 179.272924][T12102] ? v4l_streamon+0x1a/0xa0 [ 179.272954][T12102] __video_do_ioctl+0xb2a/0xdf0 [ 179.272982][T12102] ? __might_fault+0xc5/0x140 [ 179.273009][T12102] ? __pfx___video_do_ioctl+0x10/0x10 [ 179.273045][T12102] video_usercopy+0x47a/0x1730 [ 179.273075][T12102] ? __pfx___video_do_ioctl+0x10/0x10 [ 179.273104][T12102] ? __pfx_video_usercopy+0x10/0x10 [ 179.273147][T12102] v4l2_ioctl+0x1bd/0x250 [ 179.273174][T12102] ? __pfx_v4l2_ioctl+0x10/0x10 [ 179.273203][T12102] __x64_sys_ioctl+0x18e/0x210 [ 179.273225][T12102] do_syscall_64+0x123/0x790 [ 179.273254][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.273273][T12102] RIP: 0033:0x7fc22519e159 [ 179.273288][T12102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.273305][T12102] RSP: 002b:00007fc226008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.273323][T12102] RAX: ffffffffffffffda RBX: 00007fc225425fa0 RCX: 00007fc22519e159 [ 179.273335][T12102] RDX: 0000200000000700 RSI: 0000000040045612 RDI: 0000000000000003 [ 179.273346][T12102] RBP: 00007fc22523506b R08: 0000000000000000 R09: 0000000000000000 [ 179.273357][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.273368][T12102] R13: 00007fc225426038 R14: 00007fc225425fa0 R15: 00007ffe6aa0e268 [ 179.273392][T12102] [ 179.423620][T11257] net_ratelimit: 35 callbacks suppressed [ 179.423639][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 179.535583][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 179.587915][T12109] FAULT_INJECTION: forcing a failure. [ 179.587915][T12109] name failslab, interval 1, probability 0, space 0, times 0 [ 179.587945][T12109] CPU: 0 UID: 0 PID: 12109 Comm: syz.4.2359 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.587970][T12109] Tainted: [L]=SOFTLOCKUP [ 179.587977][T12109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.587987][T12109] Call Trace: [ 179.587994][T12109] [ 179.588001][T12109] dump_stack_lvl+0x100/0x190 [ 179.588039][T12109] should_fail_ex.cold+0x5/0xa [ 179.588064][T12109] should_failslab+0xc2/0x120 [ 179.588085][T12109] kmem_cache_alloc_noprof+0x92/0x6a0 [ 179.588102][T12109] ? d_instantiate+0x8a/0xb0 [ 179.588126][T12109] ? alloc_empty_file+0x5b/0x1c0 [ 179.588155][T12109] alloc_empty_file+0x5b/0x1c0 [ 179.588182][T12109] alloc_file_pseudo+0x183/0x290 [ 179.588210][T12109] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 179.588244][T12109] __anon_inode_getfile+0xe8/0x280 [ 179.588267][T12109] bpf_link_prime+0x200/0x4c0 [ 179.588289][T12109] bpf_xdp_link_attach+0x27a/0x8f0 [ 179.588316][T12109] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 179.588359][T12109] ? find_held_lock+0x2b/0x80 [ 179.588388][T12109] ? __fget_files+0x215/0x3d0 [ 179.588423][T12109] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.588450][T12109] __sys_bpf+0x3cbf/0x4a30 [ 179.588475][T12109] ? __pfx___sys_bpf+0x10/0x10 [ 179.588493][T12109] ? find_held_lock+0x2b/0x80 [ 179.588517][T12109] ? futex_wake+0x4ea/0x5e0 [ 179.588554][T12109] ? rcu_read_lock_any_held+0x6a/0x90 [ 179.588581][T12109] ? find_held_lock+0x2b/0x80 [ 179.588605][T12109] ? ksys_write+0x190/0x250 [ 179.588624][T12109] ? ksys_write+0x190/0x250 [ 179.588659][T12109] ? __x64_sys_futex+0x34f/0x4d0 [ 179.588683][T12109] ? __x64_sys_futex+0x358/0x4d0 [ 179.588711][T12109] ? xfd_validate_state+0x129/0x190 [ 179.588735][T12109] ? __x64_sys_bpf+0xce/0x140 [ 179.588756][T12109] __x64_sys_bpf+0xce/0x140 [ 179.588776][T12109] ? do_syscall_64+0xae/0x790 [ 179.588803][T12109] do_syscall_64+0x123/0x790 [ 179.588833][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.588850][T12109] RIP: 0033:0x7f0040b9e159 [ 179.588865][T12109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.588883][T12109] RSP: 002b:00007f00419a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.588901][T12109] RAX: ffffffffffffffda RBX: 00007f0040e25fa0 RCX: 00007f0040b9e159 [ 179.588913][T12109] RDX: 000000000000001c RSI: 0000200000000300 RDI: 000000000000001c [ 179.588925][T12109] RBP: 00007f0040c3506b R08: 0000000000000000 R09: 0000000000000000 [ 179.588935][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.588946][T12109] R13: 00007f0040e26038 R14: 00007f0040e25fa0 R15: 00007ffcd1629bc8 [ 179.588972][T12109] [ 179.643257][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 179.755409][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 179.799024][T12122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2364'. [ 179.862854][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 179.891862][T12126] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 179.973262][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 180.083133][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 180.103156][T12133] FAULT_INJECTION: forcing a failure. [ 180.103156][T12133] name failslab, interval 1, probability 0, space 0, times 0 [ 180.103188][T12133] CPU: 2 UID: 0 PID: 12133 Comm: syz.2.2368 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.103216][T12133] Tainted: [L]=SOFTLOCKUP [ 180.103223][T12133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.103235][T12133] Call Trace: [ 180.103241][T12133] [ 180.103249][T12133] dump_stack_lvl+0x100/0x190 [ 180.103283][T12133] should_fail_ex.cold+0x5/0xa [ 180.103309][T12133] should_failslab+0xc2/0x120 [ 180.103335][T12133] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 180.103358][T12133] ? kasan_save_stack+0x30/0x50 [ 180.103376][T12133] ? kasan_save_track+0x14/0x30 [ 180.103394][T12133] ? __kasan_kmalloc+0xaa/0xb0 [ 180.103413][T12133] ? kstrdup_const+0x63/0x80 [ 180.103434][T12133] kstrdup+0x51/0xe0 [ 180.103452][T12133] kstrdup_const+0x63/0x80 [ 180.103468][T12133] __kernfs_new_node+0x9b/0xa10 [ 180.103500][T12133] ? __pfx___kernfs_new_node+0x10/0x10 [ 180.103531][T12133] ? lock_acquire+0x1d1/0x380 [ 180.103550][T12133] ? kernfs_root+0x23/0x2a0 [ 180.103575][T12133] ? find_held_lock+0x2b/0x80 [ 180.103598][T12133] ? kernfs_root+0xee/0x2a0 [ 180.103620][T12133] ? kernfs_root+0xee/0x2a0 [ 180.103650][T12133] kernfs_create_dir_ns+0xa6/0x2b0 [ 180.103672][T12133] sysfs_create_dir_ns+0x13a/0x2b0 [ 180.103697][T12133] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 180.103719][T12133] ? find_held_lock+0x2b/0x80 [ 180.103737][T12133] ? kobject_add_internal+0x25f/0x930 [ 180.103754][T12133] ? kobject_add_internal+0x25f/0x930 [ 180.103771][T12133] ? do_raw_spin_unlock+0x145/0x1e0 [ 180.103790][T12133] kobject_add_internal+0x2c8/0x930 [ 180.103815][T12133] kobject_init_and_add+0x121/0x180 [ 180.103862][T12133] ? __pfx_kobject_init_and_add+0x10/0x10 [ 180.103893][T12133] ? __kasan_kmalloc+0xaa/0xb0 [ 180.103913][T12133] ? lockdep_init_map_type+0x5c/0x250 [ 180.103928][T12133] ? __raw_spin_lock_init+0x3a/0x110 [ 180.103946][T12133] bus_add_driver+0x186/0x5b0 [ 180.103961][T12133] driver_register+0x1e2/0x360 [ 180.103976][T12133] ? rcu_is_watching+0x13/0xc0 [ 180.103992][T12133] usb_gadget_register_driver_owner+0x132/0x210 [ 180.104008][T12133] raw_ioctl+0x1a85/0x2b80 [ 180.104022][T12133] ? __pfx_raw_ioctl+0x10/0x10 [ 180.104032][T12133] ? selinux_file_ioctl+0x13b/0x290 [ 180.104044][T12133] ? selinux_file_ioctl+0xb6/0x290 [ 180.104057][T12133] ? __pfx_raw_ioctl+0x10/0x10 [ 180.104069][T12133] __x64_sys_ioctl+0x18e/0x210 [ 180.104083][T12133] do_syscall_64+0x123/0x790 [ 180.104100][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.104112][T12133] RIP: 0033:0x7f2466f9ddeb [ 180.104121][T12133] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 180.104131][T12133] RSP: 002b:00007f2467e41f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.104142][T12133] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2466f9ddeb [ 180.104149][T12133] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 180.104155][T12133] RBP: 00007f2467e42fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 180.104161][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.104168][T12133] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000000 [ 180.104182][T12133] [ 180.104189][T12133] kobject: kobject_add_internal failed for raw-gadget.2 (error: -12 parent: drivers) [ 180.104210][T12133] UDC core: USB Raw Gadget: driver registration failed: -12 [ 180.104221][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 180.193145][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 180.224337][ T5725] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 180.303502][ T5809] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 180.373741][ T5725] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 180.374782][ T5725] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 180.375347][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 180.375369][ T5725] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.375387][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 180.375407][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 180.376391][ T5725] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 180.376423][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 180.376442][ T5725] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.376461][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 180.376479][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 180.377409][ T5725] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 180.377442][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 180.377462][ T5725] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.377481][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 180.377507][ T5725] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 180.380363][ T5725] usb 6-1: string descriptor 0 read error: -22 [ 180.380428][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.393109][ T5725] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 180.413872][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 180.651950][T12139] FAULT_INJECTION: forcing a failure. [ 180.651950][T12139] name failslab, interval 1, probability 0, space 0, times 0 [ 180.651977][T12139] CPU: 0 UID: 0 PID: 12139 Comm: syz.2.2370 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.651994][T12139] Tainted: [L]=SOFTLOCKUP [ 180.651998][T12139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.652004][T12139] Call Trace: [ 180.652008][T12139] [ 180.652013][T12139] dump_stack_lvl+0x100/0x190 [ 180.652033][T12139] should_fail_ex.cold+0x5/0xa [ 180.652051][T12139] should_failslab+0xc2/0x120 [ 180.652066][T12139] __kmalloc_noprof+0xfc/0x840 [ 180.652079][T12139] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 180.652094][T12139] blk_rq_map_user_iov+0x2a5/0x1440 [ 180.652106][T12139] ? blk_mq_rq_ctx_init.isra.0+0x67c/0x820 [ 180.652128][T12139] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 180.652143][T12139] ? rcu_is_watching+0x13/0xc0 [ 180.652158][T12139] ? trace_contention_end+0x126/0x160 [ 180.652175][T12139] ? __mutex_lock+0x26c/0x1bd0 [ 180.652193][T12139] ? sg_common_write.isra.0+0xb79/0x1b90 [ 180.652207][T12139] ? find_held_lock+0x2b/0x80 [ 180.652221][T12139] ? sg_common_write.isra.0+0xe26/0x1b90 [ 180.652234][T12139] ? import_ubuf+0x1b6/0x220 [ 180.652246][T12139] blk_rq_map_user_io+0x1ff/0x230 [ 180.652259][T12139] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 180.652278][T12139] sg_common_write.isra.0+0xf74/0x1b90 [ 180.652300][T12139] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 180.652319][T12139] sg_write+0x7eb/0xdb0 [ 180.652333][T12139] ? __pfx_sg_write+0x10/0x10 [ 180.652358][T12139] ? __pfx___futex_wait+0x10/0x10 [ 180.652385][T12139] ? bpf_lsm_file_permission+0x9/0x10 [ 180.652401][T12139] ? security_file_permission+0x76/0x210 [ 180.652417][T12139] ? rw_verify_area+0xce/0x6d0 [ 180.652438][T12139] vfs_write+0x2aa/0x1050 [ 180.652450][T12139] ? __pfx_sg_write+0x10/0x10 [ 180.652463][T12139] ? lock_acquire+0x1d1/0x380 [ 180.652491][T12139] ? __fget_files+0x34/0x3d0 [ 180.652507][T12139] ? __pfx_vfs_write+0x10/0x10 [ 180.652518][T12139] ? find_held_lock+0x2b/0x80 [ 180.652534][T12139] ? __fget_files+0x215/0x3d0 [ 180.652547][T12139] ? __fget_files+0x215/0x3d0 [ 180.652564][T12139] ? __fget_files+0x21f/0x3d0 [ 180.652583][T12139] ksys_write+0x12a/0x250 [ 180.652595][T12139] ? __pfx_ksys_write+0x10/0x10 [ 180.652611][T12139] do_syscall_64+0x123/0x790 [ 180.652629][T12139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.652641][T12139] RIP: 0033:0x7f2466f9e159 [ 180.652650][T12139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.652660][T12139] RSP: 002b:00007f2467e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.652671][T12139] RAX: ffffffffffffffda RBX: 00007f2467225fa0 RCX: 00007f2466f9e159 [ 180.652678][T12139] RDX: 0000000000000103 RSI: 0000200000000040 RDI: 0000000000000004 [ 180.652685][T12139] RBP: 00007f246703506b R08: 0000000000000000 R09: 0000000000000000 [ 180.652691][T12139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.652697][T12139] R13: 00007f2467226038 R14: 00007f2467225fa0 R15: 00007ffdf661bcd8 [ 180.652711][T12139] [ 180.872818][ T5090] Bluetooth: hci4: command 0x040f tx timeout [ 180.989607][T12152] netlink: 'syz.4.2377': attribute type 1 has an invalid length. [ 180.994596][T12152] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2377'. [ 181.198643][T12159] FAULT_INJECTION: forcing a failure. [ 181.198643][T12159] name failslab, interval 1, probability 0, space 0, times 0 [ 181.198677][T12159] CPU: 2 UID: 0 PID: 12159 Comm: syz.0.2380 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.198703][T12159] Tainted: [L]=SOFTLOCKUP [ 181.198711][T12159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.198738][T12159] Call Trace: [ 181.198750][T12159] [ 181.198757][T12159] dump_stack_lvl+0x100/0x190 [ 181.198795][T12159] should_fail_ex.cold+0x5/0xa [ 181.198825][T12159] should_failslab+0xc2/0x120 [ 181.198850][T12159] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 181.198873][T12159] ? __alloc_skb+0x140/0x710 [ 181.198900][T12159] __alloc_skb+0x140/0x710 [ 181.198922][T12159] ? __alloc_skb+0x5b7/0x710 [ 181.198945][T12159] ? __pfx___alloc_skb+0x10/0x10 [ 181.198969][T12159] ? find_held_lock+0x2b/0x80 [ 181.198997][T12159] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 181.199027][T12159] __inet6_rt_notify+0x1d8/0x4c0 [ 181.199058][T12159] fib6_add_rt2node+0x1c1d/0x3df0 [ 181.199093][T12159] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 181.199117][T12159] ? fib6_add_1+0xe1c/0x1700 [ 181.199148][T12159] ? fib6_add+0x60e/0x1eb0 [ 181.199168][T12159] fib6_add+0x60e/0x1eb0 [ 181.199192][T12159] ? do_raw_spin_lock+0x128/0x260 [ 181.199216][T12159] ? __pfx_fib6_add+0x10/0x10 [ 181.199236][T12159] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 181.199267][T12159] ip6_ins_rt+0xb5/0x110 [ 181.199292][T12159] ? __pfx_ip6_ins_rt+0x10/0x10 [ 181.199322][T12159] ? __local_bh_enable_ip+0xa5/0x120 [ 181.199343][T12159] ? lockdep_hardirqs_on+0x7d/0x110 [ 181.199393][T12159] __ipv6_dev_ac_inc+0x912/0xdb0 [ 181.199425][T12159] ipv6_sock_ac_join+0x67c/0xd80 [ 181.199451][T12159] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 181.199474][T12159] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 181.199502][T12159] ? __local_bh_enable_ip+0xa5/0x120 [ 181.199522][T12159] ? lockdep_hardirqs_on+0x7d/0x110 [ 181.199554][T12159] do_ipv6_setsockopt+0x3874/0x44a0 [ 181.199577][T12159] ? avc_has_perm_noaudit+0x56/0x470 [ 181.199610][T12159] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 181.199638][T12159] ? avc_has_perm_noaudit+0x145/0x470 [ 181.199671][T12159] ? avc_has_perm+0x135/0x1e0 [ 181.199697][T12159] ? __pfx_avc_has_perm+0x10/0x10 [ 181.199727][T12159] ? futex_wait+0x11e/0x370 [ 181.199751][T12159] ? sock_has_perm+0x25a/0x2f0 [ 181.199769][T12159] ? __pfx_sock_has_perm+0x10/0x10 [ 181.199789][T12159] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 181.199816][T12159] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 181.199873][T12159] ? ipv6_setsockopt+0xcb/0x170 [ 181.199898][T12159] ipv6_setsockopt+0xcb/0x170 [ 181.199926][T12159] tcp_setsockopt+0xa7/0x100 [ 181.199949][T12159] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 181.199981][T12159] do_sock_setsockopt+0xf3/0x1d0 [ 181.200013][T12159] __sys_setsockopt+0x195/0x220 [ 181.200042][T12159] __x64_sys_setsockopt+0xbd/0x160 [ 181.200063][T12159] ? do_syscall_64+0xae/0x790 [ 181.200090][T12159] ? lockdep_hardirqs_on+0x7d/0x110 [ 181.200118][T12159] do_syscall_64+0x123/0x790 [ 181.200148][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.200169][T12159] RIP: 0033:0x7fc22519e159 [ 181.200186][T12159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.200203][T12159] RSP: 002b:00007fc226008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.200225][T12159] RAX: ffffffffffffffda RBX: 00007fc225425fa0 RCX: 00007fc22519e159 [ 181.200237][T12159] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 181.200248][T12159] RBP: 00007fc22523506b R08: 0000000000000020 R09: 0000000000000000 [ 181.200260][T12159] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 181.200271][T12159] R13: 00007fc225426038 R14: 00007fc225425fa0 R15: 00007ffe6aa0e268 [ 181.200296][T12159] [ 181.392587][T12166] configfs-gadget.g1 gadget.32: HOST MAC 4e:92:87:07:0a:2a [ 181.393067][T12166] configfs-gadget.g1 gadget.32: MAC 5e:6f:11:5e:89:32 [ 181.444527][T12170] FAULT_INJECTION: forcing a failure. [ 181.444527][T12170] name failslab, interval 1, probability 0, space 0, times 0 [ 181.444563][T12170] CPU: 0 UID: 0 PID: 12170 Comm: syz.2.2384 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.444589][T12170] Tainted: [L]=SOFTLOCKUP [ 181.444597][T12170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.444608][T12170] Call Trace: [ 181.444614][T12170] [ 181.444622][T12170] dump_stack_lvl+0x100/0x190 [ 181.444654][T12170] should_fail_ex.cold+0x5/0xa [ 181.444682][T12170] should_failslab+0xc2/0x120 [ 181.444706][T12170] __kmalloc_cache_noprof+0x91/0x6d0 [ 181.444736][T12170] ? create_filter_start.constprop.0+0x1c4/0x310 [ 181.444764][T12170] create_filter_start.constprop.0+0x1c4/0x310 [ 181.444789][T12170] apply_subsystem_event_filter+0x188/0x17a0 [ 181.444809][T12170] ? __might_fault+0xc5/0x140 [ 181.444838][T12170] ? __might_fault+0xc5/0x140 [ 181.444867][T12170] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 181.444895][T12170] ? _copy_from_user+0x59/0xd0 [ 181.444918][T12170] subsystem_filter_write+0x95/0x120 [ 181.444942][T12170] vfs_write+0x2aa/0x1050 [ 181.444961][T12170] ? __pfx_subsystem_filter_write+0x10/0x10 [ 181.444982][T12170] ? lock_acquire+0x1d1/0x380 [ 181.445001][T12170] ? __fget_files+0x34/0x3d0 [ 181.445025][T12170] ? __pfx_vfs_write+0x10/0x10 [ 181.445050][T12170] ? find_held_lock+0x2b/0x80 [ 181.445079][T12170] ? __fget_files+0x215/0x3d0 [ 181.445108][T12170] ? __fget_files+0x21f/0x3d0 [ 181.445139][T12170] ksys_write+0x12a/0x250 [ 181.445157][T12170] ? __pfx_ksys_write+0x10/0x10 [ 181.445184][T12170] do_syscall_64+0x123/0x790 [ 181.445214][T12170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.445234][T12170] RIP: 0033:0x7f2466f9e159 [ 181.445249][T12170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.445266][T12170] RSP: 002b:00007f2467e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.445285][T12170] RAX: ffffffffffffffda RBX: 00007f2467225fa0 RCX: 00007f2466f9e159 [ 181.445297][T12170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 181.445308][T12170] RBP: 00007f246703506b R08: 0000000000000000 R09: 0000000000000000 [ 181.445319][T12170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.445331][T12170] R13: 00007f2467226038 R14: 00007f2467225fa0 R15: 00007ffdf661bcd8 [ 181.445358][T12170] [ 182.122831][ T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 182.293303][ T25] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 182.294317][ T25] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.295145][ T25] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.296901][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.296918][ T25] usb 7-1: Product: syz [ 182.296928][ T25] usb 7-1: Manufacturer: syz [ 182.296938][ T25] usb 7-1: SerialNumber: syz [ 182.302180][ T25] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 182.316200][ T25] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 182.318796][ T25] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 182.786732][ T25] usb 6-1: USB disconnect, device number 7 [ 182.837387][ T43] kauditd_printk_skb: 94 callbacks suppressed [ 182.837406][ T43] audit: type=1800 audit(1790140766.103:2644): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 182.942030][ T43] audit: type=1800 audit(1790140766.203:2645): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 182.942921][ T5090] Bluetooth: hci4: command 0x040f tx timeout [ 183.121094][T12230] FAULT_INJECTION: forcing a failure. [ 183.121094][T12230] name failslab, interval 1, probability 0, space 0, times 0 [ 183.121128][T12230] CPU: 2 UID: 0 PID: 12230 Comm: syz.4.2402 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.121153][T12230] Tainted: [L]=SOFTLOCKUP [ 183.121160][T12230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.121185][T12230] Call Trace: [ 183.121194][T12230] [ 183.121202][T12230] dump_stack_lvl+0x100/0x190 [ 183.121237][T12230] should_fail_ex.cold+0x5/0xa [ 183.121267][T12230] should_failslab+0xc2/0x120 [ 183.121293][T12230] __kmalloc_noprof+0xfc/0x840 [ 183.121315][T12230] ? asymmetric_key_generate_id+0x7e/0x180 [ 183.121349][T12230] asymmetric_key_generate_id+0x7e/0x180 [ 183.121382][T12230] x509_process_extension+0x4d8/0xad0 [ 183.121409][T12230] asn1_ber_decoder+0x12b3/0x2170 [ 183.121447][T12230] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 183.121481][T12230] ? kasan_save_track+0x14/0x30 [ 183.121505][T12230] ? __kasan_kmalloc+0xaa/0xb0 [ 183.121526][T12230] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 183.121555][T12230] ? x509_cert_parse+0x162/0x910 [ 183.121578][T12230] x509_cert_parse+0x1c9/0x910 [ 183.121600][T12230] x509_key_preparse+0x65/0x9c0 [ 183.121626][T12230] asymmetric_key_preparse+0xce/0x1d0 [ 183.121653][T12230] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 183.121683][T12230] __key_create_or_update+0x463/0xe30 [ 183.121712][T12230] ? __pfx___key_create_or_update+0x10/0x10 [ 183.121738][T12230] ? lookup_user_key+0x3f3/0x1300 [ 183.121772][T12230] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 183.121795][T12230] ? __pfx_keyring_search_iterator+0x10/0x10 [ 183.121824][T12230] key_create_or_update+0x42/0x60 [ 183.121852][T12230] __do_sys_add_key+0x2e8/0x460 [ 183.121882][T12230] ? __pfx___do_sys_add_key+0x10/0x10 [ 183.121921][T12230] do_syscall_64+0x123/0x790 [ 183.121959][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.121980][T12230] RIP: 0033:0x7f0040b9e159 [ 183.121997][T12230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.122015][T12230] RSP: 002b:00007f00419a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 183.122034][T12230] RAX: ffffffffffffffda RBX: 00007f0040e25fa0 RCX: 00007f0040b9e159 [ 183.122047][T12230] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 183.122059][T12230] RBP: 00007f0040c3506b R08: 000000003b2e68b0 R09: 0000000000000000 [ 183.122070][T12230] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 183.122082][T12230] R13: 00007f0040e26038 R14: 00007f0040e25fa0 R15: 00007ffcd1629bc8 [ 183.122109][T12230] [ 183.177859][ T43] audit: type=1800 audit(1790140766.443:2646): pid=12232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2403" name="multicast_router" dev="sysfs" ino=168754 res=0 errno=0 [ 183.493819][ T43] audit: type=1800 audit(1790140766.763:2647): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 183.529654][T12238] binder: 12237:12238 ioctl c0306201 2000000003c0 returned -14 [ 183.545609][T12240] FAULT_INJECTION: forcing a failure. [ 183.545609][T12240] name failslab, interval 1, probability 0, space 0, times 0 [ 183.545632][T12240] CPU: 1 UID: 0 PID: 12240 Comm: syz.4.2406 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.545648][T12240] Tainted: [L]=SOFTLOCKUP [ 183.545652][T12240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.545658][T12240] Call Trace: [ 183.545662][T12240] [ 183.545666][T12240] dump_stack_lvl+0x100/0x190 [ 183.545687][T12240] should_fail_ex.cold+0x5/0xa [ 183.545703][T12240] should_failslab+0xc2/0x120 [ 183.545720][T12240] __kmalloc_cache_noprof+0x91/0x6d0 [ 183.545738][T12240] ? create_filter_start.constprop.0+0x81/0x310 [ 183.545754][T12240] create_filter_start.constprop.0+0x81/0x310 [ 183.545768][T12240] apply_subsystem_event_filter+0x188/0x17a0 [ 183.545782][T12240] ? __might_fault+0xc5/0x140 [ 183.545799][T12240] ? __might_fault+0xc5/0x140 [ 183.545817][T12240] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 183.545833][T12240] ? _copy_from_user+0x59/0xd0 [ 183.545848][T12240] subsystem_filter_write+0x95/0x120 [ 183.545865][T12240] vfs_write+0x2aa/0x1050 [ 183.545879][T12240] ? __pfx_subsystem_filter_write+0x10/0x10 [ 183.545892][T12240] ? lock_acquire+0x1d1/0x380 [ 183.545904][T12240] ? __fget_files+0x34/0x3d0 [ 183.545919][T12240] ? __pfx_vfs_write+0x10/0x10 [ 183.545934][T12240] ? find_held_lock+0x2b/0x80 [ 183.545950][T12240] ? __fget_files+0x215/0x3d0 [ 183.545967][T12240] ? __fget_files+0x21f/0x3d0 [ 183.545985][T12240] ksys_write+0x12a/0x250 [ 183.545996][T12240] ? __pfx_ksys_write+0x10/0x10 [ 183.546012][T12240] do_syscall_64+0x123/0x790 [ 183.546029][T12240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.546041][T12240] RIP: 0033:0x7f0040b9e159 [ 183.546050][T12240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.546061][T12240] RSP: 002b:00007f00419a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.546071][T12240] RAX: ffffffffffffffda RBX: 00007f0040e25fa0 RCX: 00007f0040b9e159 [ 183.546078][T12240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 183.546085][T12240] RBP: 00007f0040c3506b R08: 0000000000000000 R09: 0000000000000000 [ 183.546092][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.546098][T12240] R13: 00007f0040e26038 R14: 00007f0040e25fa0 R15: 00007ffcd1629bc8 [ 183.546113][T12240] [ 183.614636][T12242] tipc: Started in network mode [ 183.614662][T12242] tipc: Node identity ea2d30554f4, cluster identity 4711 [ 183.614812][T12242] tipc: Enabled bearer , priority 0 [ 183.619490][T12241] tipc: Resetting bearer [ 183.633892][T12241] tipc: Disabling bearer [ 183.810426][ T43] audit: type=1800 audit(1790140767.073:2648): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 183.960001][ T43] audit: type=1800 audit(1790140767.223:2649): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 184.067959][ T43] audit: type=1800 audit(1790140767.333:2650): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 184.079541][ T43] audit: type=1800 audit(1790140767.343:2651): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 184.109200][T12256] lo speed is unknown, defaulting to 1000 [ 184.289238][ T43] audit: type=1800 audit(1790140767.553:2652): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 184.372794][ T43] audit: type=1800 audit(1790140767.633:2653): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 184.386608][T12201] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 184.389878][ T5734] usb 7-1: USB disconnect, device number 9 [ 184.434918][ T5734] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 184.444949][ T8621] net_ratelimit: 36 callbacks suppressed [ 184.444968][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 184.456436][ T5734] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 184.457156][ T5734] ti_usb_3410_5052 7-1:2.0: device disconnected [ 184.519569][T12271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.524586][T12271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.552932][ T5783] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 184.662995][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 184.772870][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 184.903955][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 185.022801][ T5090] Bluetooth: hci4: command 0x040f tx timeout [ 185.023182][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 185.075393][T12278] se_dev->se_dev_ptr already set for storage object [ 185.082870][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.083226][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.132803][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 185.243116][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 185.278037][ T5090] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 185.279174][T12290] binder: 12289:12290 ioctl c0306201 2000000003c0 returned -14 [ 185.352816][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 185.462901][T11257] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 185.786345][T12302] se_dev->se_dev_ptr already set for storage object [ 186.002798][ T5734] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 186.153909][ T5734] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.154827][ T5734] usb 9-1: config 0 has no interfaces? [ 186.154859][ T5734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.163612][ T5734] usb 9-1: config 0 descriptor?? [ 186.399979][ T5734] usb 9-1: USB disconnect, device number 3 [ 186.550085][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'. [ 186.564589][T12319] bond8: entered promiscuous mode [ 186.564898][T12319] 8021q: adding VLAN 0 to HW filter on device bond8 [ 186.587920][T12319] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.587935][T12319] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 186.588185][T12319] bond8: (slave ipvlan2): Error -95 calling set_mac_address [ 186.629559][T12321] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.629575][T12321] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 186.629858][T12321] bond8: (slave ipvlan2): Error -95 calling set_mac_address [ 187.034172][T12332] se_dev->se_dev_ptr already set for storage object [ 187.104260][ T5090] Bluetooth: hci4: command 0x040f tx timeout [ 187.290978][T12343] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 187.632495][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.638352][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.725261][ T5090] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 187.732338][T12362] binder: 12361:12362 ioctl c0306201 2000000003c0 returned -14 [ 187.942835][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 187.942848][ T43] audit: type=1800 audit(1790140771.213:2701): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 187.962448][ T5734] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 187.963939][ T5734] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 187.965083][ T5734] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 187.966180][ T5734] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 187.966192][ T5734] rtc rtc0: __rtc_set_alarm: err=-22 [ 188.129331][ T43] audit: type=1800 audit(1790140771.393:2702): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 188.207546][ T43] audit: type=1800 audit(1790140771.463:2703): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149121 res=0 errno=0 [ 188.215299][ T43] audit: type=1400 audit(1790140771.483:2704): avc: denied { write } for pid=12369 comm="syz.2.2457" name="functions" dev="configfs" ino=11483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.216267][ T43] audit: type=1800 audit(1790140771.483:2705): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2457" name="control" dev="configfs" ino=54857 res=0 errno=0 [ 188.217208][ T43] audit: type=1800 audit(1790140771.483:2706): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2457" name="enable" dev="configfs" ino=54858 res=0 errno=0 [ 188.217617][T12370] se_dev->se_dev_ptr already set for storage object [ 188.218627][ T43] audit: type=1800 audit(1790140771.483:2707): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2457" name="nexus" dev="configfs" ino=54859 res=0 errno=0 [ 188.234058][ T43] audit: type=1800 audit(1790140771.493:2708): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 188.264386][ T43] audit: type=1400 audit(1790140771.523:2709): avc: denied { write } for pid=12373 comm="syz.1.2456" name="functions" dev="configfs" ino=11483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.265486][ T43] audit: type=1800 audit(1790140771.523:2710): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2456" name="control" dev="configfs" ino=55601 res=0 errno=0 [ 188.271281][T12374] se_dev->se_dev_ptr already set for storage object [ 188.336812][T12378] syzkaller0: entered promiscuous mode [ 188.336832][T12378] syzkaller0: entered allmulticast mode [ 188.351684][T12378] tipc: Enabled bearer , priority 0 [ 188.358591][T12377] tipc: Resetting bearer [ 188.374641][T12377] tipc: Disabling bearer [ 188.537556][T12392] netlink: 'syz.1.2465': attribute type 1 has an invalid length. [ 188.553345][T12392] 8021q: adding VLAN 0 to HW filter on device bond9 [ 188.568677][T12392] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 188.676326][T12401] FAULT_INJECTION: forcing a failure. [ 188.676326][T12401] name failslab, interval 1, probability 0, space 0, times 0 [ 188.676357][T12401] CPU: 3 UID: 0 PID: 12401 Comm: syz.0.2469 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.676391][T12401] Tainted: [L]=SOFTLOCKUP [ 188.676398][T12401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.676409][T12401] Call Trace: [ 188.676416][T12401] [ 188.676424][T12401] dump_stack_lvl+0x100/0x190 [ 188.676455][T12401] should_fail_ex.cold+0x5/0xa [ 188.676480][T12401] should_failslab+0xc2/0x120 [ 188.676502][T12401] __kmalloc_cache_noprof+0x91/0x6d0 [ 188.676527][T12401] ? __might_fault+0xc5/0x140 [ 188.676571][T12401] ? alloc_bprm+0x86/0x9e0 [ 188.676598][T12401] alloc_bprm+0x86/0x9e0 [ 188.676620][T12401] do_execveat_common.isra.0+0x19c/0x580 [ 188.676641][T12401] ? do_getname+0x191/0x390 [ 188.676670][T12401] __x64_sys_execve+0x93/0xd0 [ 188.676693][T12401] do_syscall_64+0x123/0x790 [ 188.676721][T12401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.676740][T12401] RIP: 0033:0x7fc22519e159 [ 188.676755][T12401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.676770][T12401] RSP: 002b:00007fc226008028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 188.676788][T12401] RAX: ffffffffffffffda RBX: 00007fc225425fa0 RCX: 00007fc22519e159 [ 188.676800][T12401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 188.676811][T12401] RBP: 00007fc22523506b R08: 0000000000000000 R09: 0000000000000000 [ 188.676822][T12401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.676833][T12401] R13: 00007fc225426038 R14: 00007fc225425fa0 R15: 00007ffe6aa0e268 [ 188.676859][T12401] [ 188.683505][ T5734] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 188.834029][ T5734] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.834676][ T5734] usb 7-1: config 0 has no interfaces? [ 188.834706][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.838938][ T5734] usb 7-1: config 0 descriptor?? [ 188.988077][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2473'. [ 189.069673][T12414] netfs: Cache "CacheFiles" added (type cachefiles) [ 189.069688][T12414] CacheFiles: File cache on CacheFiles registered [ 189.070405][T12412] CacheFiles: File cache on CacheFiles unregistering [ 189.070418][T12412] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 190.585020][ T5725] usb 7-1: USB disconnect, device number 10 [ 190.640311][T12430] syzkaller0: entered promiscuous mode [ 190.640330][T12430] syzkaller0: entered allmulticast mode [ 190.642862][T11254] net_ratelimit: 28 callbacks suppressed [ 190.642874][T11254] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 190.668932][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2477'. [ 191.953514][T12469] FAULT_INJECTION: forcing a failure. [ 191.953514][T12469] name failslab, interval 1, probability 0, space 0, times 0 [ 191.953550][T12469] CPU: 3 UID: 0 PID: 12469 Comm: syz.4.2486 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.953579][T12469] Tainted: [L]=SOFTLOCKUP [ 191.953587][T12469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.953599][T12469] Call Trace: [ 191.953610][T12469] [ 191.953618][T12469] dump_stack_lvl+0x100/0x190 [ 191.953669][T12469] should_fail_ex.cold+0x5/0xa [ 191.953700][T12469] should_failslab+0xc2/0x120 [ 191.953731][T12469] __kmalloc_cache_noprof+0x91/0x6d0 [ 191.953762][T12469] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 191.953784][T12469] ? blk_alloc_queue_stats+0x3f/0x110 [ 191.953810][T12469] blk_alloc_queue_stats+0x3f/0x110 [ 191.953830][T12469] blk_alloc_queue+0xda/0x790 [ 191.953856][T12469] __blk_alloc_disk+0xa0/0x170 [ 191.953886][T12469] ? __pfx___blk_alloc_disk+0x10/0x10 [ 191.953915][T12469] ? __pfx___debug_object_init+0x10/0x10 [ 191.953951][T12469] ? lockdep_init_map_type+0x5c/0x250 [ 191.953975][T12469] ? lockdep_init_map_type+0x5c/0x250 [ 191.954002][T12469] dm_create+0x5e8/0x1530 [ 191.954036][T12469] dev_create+0x121/0x2a0 [ 191.954054][T12469] ? __pfx_dev_create+0x10/0x10 [ 191.954080][T12469] ctl_ioctl+0x4d2/0xcc0 [ 191.954099][T12469] ? __pfx_dev_create+0x10/0x10 [ 191.954120][T12469] ? __pfx_ctl_ioctl+0x10/0x10 [ 191.954170][T12469] ? selinux_file_ioctl+0x13b/0x290 [ 191.954192][T12469] ? selinux_file_ioctl+0xb6/0x290 [ 191.954218][T12469] dm_ctl_ioctl+0x22/0x30 [ 191.954234][T12469] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 191.954252][T12469] __x64_sys_ioctl+0x18e/0x210 [ 191.954275][T12469] do_syscall_64+0x123/0x790 [ 191.954313][T12469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.954333][T12469] RIP: 0033:0x7f0040b9e159 [ 191.954349][T12469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.954369][T12469] RSP: 002b:00007f00419a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.954391][T12469] RAX: ffffffffffffffda RBX: 00007f0040e25fa0 RCX: 00007f0040b9e159 [ 191.954405][T12469] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 191.954424][T12469] RBP: 00007f0040c3506b R08: 0000000000000000 R09: 0000000000000000 [ 191.954436][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.954449][T12469] R13: 00007f0040e26038 R14: 00007f0040e25fa0 R15: 00007ffcd1629bc8 [ 191.954475][T12469] [ 192.875722][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 192.936153][T12496] se_dev->se_dev_ptr already set for storage object [ 192.943089][ T8621] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.943128][ T8621] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.943158][ T8621] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.943187][ T8621] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.995474][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 192.995641][ T43] kauditd_printk_skb: 44 callbacks suppressed [ 192.995653][ T43] audit: type=1800 audit(1790140776.263:2755): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 193.030211][ T43] audit: type=1800 audit(1790140776.293:2756): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16012 res=0 errno=0 [ 193.113869][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 193.159267][ T43] audit: type=1800 audit(1790140776.423:2757): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 193.207946][ T43] audit: type=1800 audit(1790140776.473:2758): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 193.229407][ T43] audit: type=1800 audit(1790140776.493:2759): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20019 res=0 errno=0 [ 193.234626][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 193.242772][ T43] audit: type=1800 audit(1790140776.513:2760): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20019 res=0 errno=0 [ 193.342952][ T8621] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 193.347883][ T43] audit: type=1800 audit(1790140776.613:2761): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 193.409251][ T43] audit: type=1800 audit(1790140776.673:2762): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 193.464049][ T43] audit: type=1800 audit(1790140776.703:2763): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20019 res=0 errno=0 [ 193.465269][ T5835] bond1: (slave ip6gretap0): failed to get link speed/duplex [ 193.471359][ T43] audit: type=1800 audit(1790140776.733:2764): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15883 res=0 errno=0 [ 193.496079][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 193.777333][T12525] gretap1: left promiscuous mode [ 193.810592][ T5734] syz2: Port: 1 Link DOWN [ 193.812878][ T8621] netdevsim netdevsim120 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.812907][ T8621] netdevsim netdevsim120 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.813065][ T8621] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.813088][ T8621] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.813116][ T8621] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.813138][ T8621] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.813166][ T8621] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.813187][ T8621] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.813214][ T8621] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.813236][ T8621] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.081046][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.129025][T12558] syzkaller0: entered promiscuous mode [ 194.129047][T12558] syzkaller0: entered allmulticast mode [ 194.151297][T12558] tipc: Enabled bearer , priority 0 [ 194.152451][T12554] tipc: Resetting bearer [ 194.166344][T12554] tipc: Disabling bearer [ 195.386343][T12606] e1000e 0000:00:02.0 eth1: removed PHC [ 195.516162][ T66] Bluetooth: hci4: command 0x040f tx timeout [ 196.023843][T12622] nvmet: adding nsid 1 to subsystem testsubsys [ 196.068636][T12622] [ 196.069559][T12622] ====================================================== [ 196.072193][T12622] WARNING: possible circular locking dependency detected [ 196.074931][T12622] syzkaller #0 Tainted: G L [ 196.077313][T12622] ------------------------------------------------------ [ 196.079775][T12622] syz.2.2524/12622 is trying to acquire lock: [ 196.081997][T12622] ffff888026b992f0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 196.085357][T12622] [ 196.085357][T12622] but task is already holding lock: [ 196.087685][T12622] ffff88805db6a068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x650 [ 196.090534][T12622] [ 196.090534][T12622] which lock already depends on the new lock. [ 196.090534][T12622] [ 196.093764][T12622] [ 196.093764][T12622] the existing dependency chain (in reverse order) is: [ 196.096565][T12622] [ 196.096565][T12622] -> #2 (&subsys->lock){+.+.}-{4:4}: [ 196.098905][T12622] lock_acquire+0x1d1/0x380 [ 196.100541][T12622] __mutex_lock+0x1a4/0x1bd0 [ 196.102172][T12622] nvmet_ns_device_path_store+0x57/0x1c0 [ 196.104181][T12622] configfs_write_iter+0x302/0x4e0 [ 196.105951][T12622] vfs_write+0x6af/0x1050 [ 196.107555][T12622] ksys_write+0x12a/0x250 [ 196.109101][T12622] do_syscall_64+0x123/0x790 [ 196.110721][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.112723][T12622] [ 196.112723][T12622] -> #1 (&p->frag_sem){.+.+}-{4:4}: [ 196.115055][T12622] lock_acquire+0x1d1/0x380 [ 196.116669][T12622] down_read+0x99/0x4c0 [ 196.118175][T12622] __configfs_open_file+0xe8/0x9c0 [ 196.119978][T12622] do_dentry_open+0x6ab/0x14d0 [ 196.121651][T12622] vfs_open+0x82/0x3f0 [ 196.123159][T12622] dentry_open+0x71/0xd0 [ 196.124707][T12622] ima_calc_file_hash+0xe1/0x380 [ 196.126427][T12622] ima_collect_measurement+0x94f/0xb30 [ 196.128350][T12622] process_measurement+0xdfe/0x2350 [ 196.130145][T12622] ima_file_check+0xc3/0x110 [ 196.131753][T12622] security_file_post_open+0xc4/0x210 [ 196.133642][T12622] path_openat+0x5cd/0x2440 [ 196.135228][T12622] do_file_open+0x20e/0x430 [ 196.136838][T12622] do_sys_openat2+0x10f/0x1e0 [ 196.138483][T12622] __x64_sys_openat+0x12d/0x210 [ 196.140175][T12622] do_syscall_64+0x123/0x790 [ 196.141738][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.143730][T12622] [ 196.143730][T12622] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 196.146341][T12622] check_prev_add+0xeb/0xe60 [ 196.147948][T12622] __lock_acquire+0x1528/0x1f40 [ 196.149582][T12622] lock_acquire+0x1d1/0x380 [ 196.151117][T12622] __mutex_lock+0x1a4/0x1bd0 [ 196.152677][T12622] process_measurement+0x5ab/0x2350 [ 196.154449][T12622] ima_file_check+0xc3/0x110 [ 196.156074][T12622] security_file_post_open+0xc4/0x210 [ 196.157960][T12622] path_openat+0x5cd/0x2440 [ 196.159559][T12622] do_file_open+0x20e/0x430 [ 196.161159][T12622] file_open_name+0x1c3/0x3e0 [ 196.162801][T12622] filp_open+0x2e/0x50 [ 196.164300][T12622] nvmet_file_ns_enable+0x95/0x420 [ 196.166003][ T1163] nvmet: connect request for invalid subsystem testsubsys! [ 196.166908][T12624] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 196.170825][T12622] nvmet_ns_enable+0x43b/0x650 [ 196.172488][T12622] nvmet_ns_enable_store+0x11e/0x160 [ 196.174348][T12622] configfs_write_iter+0x302/0x4e0 [ 196.176112][T12622] vfs_write+0x6af/0x1050 [ 196.177650][T12622] ksys_write+0x12a/0x250 [ 196.179184][T12622] do_syscall_64+0x123/0x790 [ 196.180813][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.182822][T12622] [ 196.182822][T12622] other info that might help us debug this: [ 196.182822][T12622] [ 196.185998][T12622] Chain exists of: [ 196.185998][T12622] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &subsys->lock [ 196.185998][T12622] [ 196.190170][T12622] Possible unsafe locking scenario: [ 196.190170][T12622] [ 196.192496][T12622] CPU0 CPU1 [ 196.194181][T12622] ---- ---- [ 196.195864][T12622] lock(&subsys->lock); [ 196.197225][T12622] lock(&p->frag_sem); [ 196.199302][T12622] lock(&subsys->lock); [ 196.201420][T12622] lock(&ima_iint_mutex_key[depth]); [ 196.203143][T12622] [ 196.203143][T12622] *** DEADLOCK *** [ 196.203143][T12622] [ 196.205680][T12622] locks held by syz.2.2524/12622: 6, last CPU#2: [ 196.207700][T12622] #0: ffff88803805ab70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 196.210542][T12622] #1: ffff888024226460 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 196.213386][T12622] #2: ffff888061d43a80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 196.216432][T12622] #3: ffff888062799870 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 196.219473][T12622] #4: ffffffff8ff5b308 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 196.222913][T12622] #5: ffff88805db6a068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x650 [ 196.226180][T12622] [ 196.226180][T12622] stack backtrace: [ 196.228115][T12622] CPU: 2 UID: 0 PID: 12622 Comm: syz.2.2524 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.231515][T12622] Tainted: [L]=SOFTLOCKUP [ 196.233986][T12622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.237482][T12622] Call Trace: [ 196.238505][T12622] [ 196.239435][T12622] dump_stack_lvl+0x100/0x190 [ 196.240971][T12622] print_circular_bug.cold+0x178/0x1be [ 196.242712][T12622] check_noncircular+0x146/0x160 [ 196.244316][T12622] ? __schedule+0x126b/0x6920 [ 196.245810][T12622] check_prev_add+0xeb/0xe60 [ 196.247318][T12622] __lock_acquire+0x1528/0x1f40 [ 196.248894][T12622] ? __pfx___schedule+0x10/0x10 [ 196.250430][T12622] lock_acquire+0x1d1/0x380 [ 196.251835][T12622] ? process_measurement+0x5ab/0x2350 [ 196.253502][T12622] ? __pfx___might_resched+0x10/0x10 [ 196.255125][T12622] __mutex_lock+0x1a4/0x1bd0 [ 196.256564][T12622] ? process_measurement+0x5ab/0x2350 [ 196.258277][T12622] ? process_measurement+0x5ab/0x2350 [ 196.259998][T12622] ? __pfx___mutex_lock+0x10/0x10 [ 196.261588][T12622] ? __pfx___might_resched+0x10/0x10 [ 196.263274][T12622] ? down_write+0x146/0x1f0 [ 196.264728][T12622] ? process_measurement+0x5ab/0x2350 [ 196.266419][T12622] process_measurement+0x5ab/0x2350 [ 196.268109][T12622] ? avc_has_perm_noaudit+0x56/0x470 [ 196.269780][T12622] ? find_held_lock+0x2b/0x80 [ 196.271283][T12622] ? avc_has_perm_noaudit+0x11e/0x470 [ 196.272978][T12622] ? __pfx_process_measurement+0x10/0x10 [ 196.274792][T12622] ? avc_has_perm+0x135/0x1e0 [ 196.276406][T12622] ? __pfx_avc_has_perm+0x10/0x10 [ 196.278416][T12622] ? hook_file_open+0x248/0x8e0 [ 196.280374][T12622] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 196.282880][T12622] ima_file_check+0xc3/0x110 [ 196.284760][T12622] ? __pfx_ima_file_check+0x10/0x10 [ 196.286775][T12622] security_file_post_open+0xc4/0x210 [ 196.289058][T12622] path_openat+0x5cd/0x2440 [ 196.290900][T12622] ? __pfx_path_openat+0x10/0x10 [ 196.292900][T12622] ? kasan_save_stack+0x3f/0x50 [ 196.294872][T12622] ? kasan_save_stack+0x30/0x50 [ 196.296793][T12622] ? kasan_save_track+0x14/0x30 [ 196.298349][T12622] ? __kasan_slab_alloc+0x89/0x90 [ 196.299958][T12622] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 196.301865][T12622] ? do_getname_kernel+0x5d/0x250 [ 196.303917][T12622] ? filp_open+0x1d/0x50 [ 196.305618][T12622] ? nvmet_file_ns_enable+0x95/0x420 [ 196.307740][T12622] do_file_open+0x20e/0x430 [ 196.309584][T12622] ? __pfx_do_file_open+0x10/0x10 [ 196.311568][T12622] ? rcu_is_watching+0x13/0xc0 [ 196.313481][T12622] file_open_name+0x1c3/0x3e0 [ 196.315364][T12622] ? __pfx_file_open_name+0x10/0x10 [ 196.317426][T12622] ? do_getname_kernel+0x5d/0x250 [ 196.319431][T12622] ? __asan_memcpy+0x3c/0x60 [ 196.321284][T12622] ? do_getname_kernel+0x1be/0x250 [ 196.323340][T12622] filp_open+0x2e/0x50 [ 196.325002][T12622] nvmet_file_ns_enable+0x95/0x420 [ 196.327037][T12622] nvmet_ns_enable+0x43b/0x650 [ 196.329005][T12622] nvmet_ns_enable_store+0x11e/0x160 [ 196.331107][T12622] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 196.333475][T12622] ? lock_acquire+0x1d1/0x380 [ 196.335376][T12622] configfs_write_iter+0x302/0x4e0 [ 196.337485][T12622] vfs_write+0x6af/0x1050 [ 196.339225][T12622] ? __pfx_configfs_write_iter+0x10/0x10 [ 196.341580][T12622] ? __pfx_vfs_write+0x10/0x10 [ 196.343606][T12622] ? find_held_lock+0x2b/0x80 [ 196.345520][T12622] ksys_write+0x12a/0x250 [ 196.347261][T12622] ? __pfx_ksys_write+0x10/0x10 [ 196.349261][T12622] do_syscall_64+0x123/0x790 [ 196.351121][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.353510][T12622] RIP: 0033:0x7f2466f9e159 [ 196.355302][T12622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.362794][T12622] RSP: 002b:00007f2467e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.366044][T12622] RAX: ffffffffffffffda RBX: 00007f2467225fa0 RCX: 00007f2466f9e159 [ 196.369170][T12622] RDX: 0000000000000002 RSI: 0000200000000bc0 RDI: 0000000000000004 [ 196.372269][T12622] RBP: 00007f246703506b R08: 0000000000000000 R09: 0000000000000000 [ 196.375061][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.378112][T12622] R13: 00007f2467226038 R14: 00007f2467225fa0 R15: 00007ffdf661bcd8 [ 196.381248][T12622] [ 196.853905][T12606] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 199.662753][ T66] Bluetooth: hci4: command 0x040f tx timeout