last executing test programs: 30.633965743s ago: executing program 1 (id=22): io_pgetevents(0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={[0x8000000000005a]}, 0x8}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000e00)={0x2c, 0x0, 0x7, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20048054) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800600050088a8000006000100010000000c000200130000001000000008000500", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x71bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x8000}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9b0d}, @TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x50}}, 0x2000000) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x11a, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x40) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005940)=@newtfilter={0x30, 0x2c, 0xf35, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x440}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x1, 0x20, 0xd, 0x2, {{0x36, 0x4, 0x1, 0x3, 0xd8, 0x64, 0x0, 0xa7, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, {[@cipso={0x86, 0x1c, 0x3, [{0x5, 0xd, "3a6df9f4617c9bb2523684"}, {0x6, 0x4, "9a1d"}, {0x7, 0x5, "3a45c7"}]}, @timestamp_prespec={0x44, 0x14, 0x26, 0x3, 0x8, [{@loopback, 0x5ce}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}]}, @rr={0x7, 0x17, 0x9e, [@remote, @multicast1, @rand_addr=0x64010102, @multicast2, @multicast1]}, @noop, @timestamp_addr={0x44, 0x3c, 0x80, 0x1, 0xa, [{@multicast2, 0x9}, {@remote, 0x6}, {@local, 0x6964}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@local, 0x7d74}, {@rand_addr=0x64010101, 0x3bf}, {@remote, 0x4}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x5f, 0x3, 0x8, [{@private=0xa010101, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x3}, {@rand_addr=0x64010100, 0x9}, {@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010101, 0xf2}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250f000000700d000000000184", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="140002006e657470636930000000000000000000080003000200000014000200766972745f7769666930000000000000080003000200000008000300020000001400020069703667726530000000000000000000080003000300000020000180080003000300000014000200626174616476300000000000000000003c000180140002007465616d5f736c6176655f310000000014000200766c616e31000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000300010000000c00018008000100", @ANYRES32=r10, @ANYBLOB="2000018008000300000000001400020067656e65766530000000000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x404c04c) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd9}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x9}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xc}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xfffffffb}]}]}, 0x60}}, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="cf0401000000ecffffff1400000008000300", @ANYRES32=r13, @ANYBLOB="040013000a000600ffffffffffff000006001200040800000600b500c90200000500c20008"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r14, &(0x7f0000002200)=ANY=[], 0xff2e) ioctl$TIOCSTI(r14, 0x5412, &(0x7f0000000180)=0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r13, @ANYRESHEX=r1, @ANYRESOCT=r15, @ANYRES64, @ANYRESDEC=r0, @ANYRES8], 0x6f4}, 0x1, 0x0, 0x0, 0x20048004}, 0x80) 29.812449512s ago: executing program 1 (id=24): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x532]}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x800000002}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x20, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x4, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x4, 0x0, 0x4c3], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.53852486s ago: executing program 1 (id=28): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 29.227724189s ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20040014) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) (fail_nth: 3) 29.055486782s ago: executing program 1 (id=34): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/scsi_host/host1/scan\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/scsi_host/host0/link_power_management_policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='max_performance', 0xf) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r2, &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800) connect$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0x2711, @host}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x2000007, 0x40090, 0xffffffffffffffff, 0x0) r4 = semget$private(0x0, 0x5, 0x108) semtimedop(r4, &(0x7f0000000000)=[{0x2, 0xfffa, 0x800}], 0x1, 0x0) waitid(0x1, 0x0, 0x0, 0x2, 0x0) socket(0x0, 0x3, 0x8) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000040)={0x0, "63785d1f46317055029ce9d187b4ac811d32330798048aaa4d02ff4bebd3d91a", 0x7}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0x67, 0x0, &(0x7f0000000700)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0xfffffe7d, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000040000000000000200000a"], 0x28}, 0x1, 0x0, 0x0, 0x4008851}, 0x20008050) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) 25.434711212s ago: executing program 1 (id=54): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 10.392594404s ago: executing program 32 (id=54): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 1.755673655s ago: executing program 0 (id=345): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x43c00, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f00000023c0)={0x8, &(0x7f0000002380)=[{}, {}, {}, {}]}) 1.695304017s ago: executing program 0 (id=346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.644890859s ago: executing program 0 (id=347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xfec00000, 0x0, 0x8}) (async) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x13, r2, 0x3000) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0", @ANYRESDEC=r0], 0x57) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7d, 0x8, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0x1]}}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.495513836s ago: executing program 0 (id=348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09000000000000000000002d4a2168f79d98decddf3009fc6b057274fb03d1a6bb7b058bf4118b8d7d2fc4af4bfeaa9696a77949097fbdf055c49834b848557e212af0ffff4852595a7cae6261f71364371641265515ac8acd50ced9ff589c4586b212faad527323d9dc26d3d6e7a9131b18caef654628b3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESDEC=r4, @ANYRESOCT, @ANYRES8, @ANYRES16=r4, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x404a004}, 0x0) 1.375827771s ago: executing program 0 (id=349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x4000, 0x0, 0xff, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) 1.375420993s ago: executing program 0 (id=351): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES32=r0], 0x1c}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fstat(r2, &(0x7f0000019680)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000001000)=0xffffffffffffffff, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) 673.350362ms ago: executing program 4 (id=371): syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0xf5, @rand_addr=0x64010101, @multicast1}}}}}}, 0x0) 582.945025ms ago: executing program 3 (id=373): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x60, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xa6, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x11}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xc8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xa00965, 0x1}) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="fedbdf2516000000ffffffffffff00"/32], 0x34}, 0x1, 0x0, 0x0, 0xc044}, 0x20008000) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r11, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params]}, 0x30}, 0x1, 0x0, 0x0, 0x4011}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00032bbd7000fbdbdf252700000008000300", @ANYRES32=r12, @ANYBLOB="000a00060003a5d34120d5f5206b7ed3ec7f4b0cca138e1e6e2f2bcac0efc8d3da20c4c1de346300"/50], 0x34}, 0x1, 0x0, 0x0, 0x842}, 0x4000000) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x29, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@remote, 0x0, 0x3, 0x400, 0x0, 0x2, 0x0, 0x80, 0x32}, {0xa5, 0x7fd, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x200, 0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x7f}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r15, 0x4}, &(0x7f00000000c0)=0x8) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r16, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 582.74472ms ago: executing program 4 (id=374): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x1) write$vhost_msg(r2, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r2, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r2, &(0x7f0000000a00)={0x1, {&(0x7f0000000ac0)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x880, 0x29) fchownat(r4, &(0x7f0000000380)='./file0\x00', 0x0, 0xee01, 0x1000) write$vhost_msg_v2(r2, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000200)=""/66, 0x42, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r6, @ANYRES16=r5, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000808000c00a60a0000", @ANYRESOCT=r6, @ANYRES32, @ANYRES16=r6], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 512.781181ms ago: executing program 4 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b00)='ubifs\x00', 0x20000, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000000000000000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) chdir(&(0x7f0000000100)='./file0\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20040014) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) 512.260143ms ago: executing program 3 (id=376): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000100), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r0, r5, 0x2) r6 = io_uring_setup(0x2f39, &(0x7f0000000440)={0x0, 0xe7b5, 0x2, 0x4, 0x12}) r7 = dup3(r0, r5, 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x25, 0x0, 0x0) r10 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, {0xa, 0x4c23, 0x80, @remote, 0x8}, 0x0, {[0x8, 0x65, 0x1000d, 0x9, 0x83, 0x0, 0x0, 0xffffffc0]}}, 0x5c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x3, 0x0, 0x0, 0xb, 0x0, 0x100, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}]}, &(0x7f0000000580)='syzkaller\x00', 0x8b7c, 0xbc, &(0x7f0000000700)=""/188, 0xe4bfe473ca070d57, 0x21, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000007c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x2, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0xffffffffffffffff, r8, r9, r2, 0xffffffffffffffff, r8, r7], &(0x7f00000008c0)=[{0x2, 0x2, 0x6, 0x5}, {0x5, 0x1, 0x10, 0x9}, {0x5, 0x2, 0xd, 0x5}, {0x1, 0x4, 0xf, 0x6}, {0x4, 0x4, 0x0, 0x8}], 0x10, 0x2}, 0x94) symlinkat(&(0x7f0000000280)='./sec\x00', r11, &(0x7f00000000c0)='./file0\x00') fchdir(r5) r12 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x113081, 0x0) ioctl$CDROMREADAUDIO(r12, 0x5392, &(0x7f0000000000)={@lba=0x8, 0x0, 0xfffffffffffffe3e, 0x0}) r13 = memfd_secret(0x0) r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r14, 0x5412, &(0x7f0000000040)=0xba) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r13, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r6}}, './file0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r15, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r16, &(0x7f0000000340)="650a41440f59bee143b710d8e4393528770a41d470579d188e29adc341311500e33bfcd7c1c9beaaa6180491e086debf1222137efe89d4119673a365baf6cf90ec2420f8ab02045f9091f977fbe63ec61bb73848b9771fb2aa7b9afedc97b45463fb4a56a44442f6116a", &(0x7f00000003c0)=@udp=r11, 0x2}, 0x20) unlinkat(r11, &(0x7f0000000040)='./file0\x00', 0x0) 506.633392ms ago: executing program 2 (id=377): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x250, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x7000000, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x394) 410.979906ms ago: executing program 2 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd0000ffdbdf251300000008000300", @ANYRES32=r3, @ANYBLOB="1400118004000600040005000400020004000400"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x2000c004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000440)={r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r10 = fanotify_init(0x200, 0x2) fanotify_mark(r10, 0x201, 0x40000021, r9, 0x0) r11 = fanotify_init(0x40, 0x101000) fanotify_mark(r11, 0x441, 0x8000001, r9, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) r12 = syz_open_procfs(0x0, &(0x7f0000002180)='net/xfrm_stat\x00') r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@flushpolicy={0x18, 0x12, 0x105, 0x70bd28, 0x25dfdc01, "", [@proto={0x5, 0x19, 0x6c}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x20040044) read$FUSE(r12, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r14, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000080027"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) 410.736868ms ago: executing program 4 (id=379): socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) socket$inet(0x2, 0x80000, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000002000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x20) 410.010088ms ago: executing program 3 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 325.078062ms ago: executing program 2 (id=381): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002340)='/dev/comedi4\x00', 0x43c00, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, 0x0) 324.759699ms ago: executing program 2 (id=382): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x80ff, 0x0, 0xff, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) 319.938422ms ago: executing program 2 (id=383): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 225.402345ms ago: executing program 2 (id=384): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x105089, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="000000000000000002000000000000001e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x81, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x105}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006121e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x5, 0xbc, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x8, 0x7, 0x6}}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x6}]}}]}, 0x38}}, 0x4048000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x3, 0x680, 0x14, @private1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8, 0x80, 0x9, 0x10000}}) getsockname$packet(r6, &(0x7f0000000940)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x2, 0x2, 0x4852326168b5b67c, @mcast2, @private1, 0x8, 0x10, 0x3, 0x8}}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000b40)={'gretap0\x00', 0x0, 0x10, 0x700, 0x8, 0x5fd, {{0xe, 0x4, 0x1, 0x1, 0x38, 0x66, 0x0, 0x2, 0x29, 0x0, @empty, @loopback, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xc0, 0x3, 0x0, [{@empty}, {@remote, 0x8}, {@broadcast, 0xa}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f0000000c00)={0x698, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x1, 0x3, 0x8}]}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0xa, 0x3, 0x3ff}, {0x2a, 0x5, 0x2, 0x2}, {0x4, 0x1b, 0x6, 0x2}]}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf0}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6ba6}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x1d0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x8, 0x6, 0x599a}, {0x3, 0x9, 0x3}]}}}]}}]}, 0x698}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004005) 155.721124ms ago: executing program 3 (id=385): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020afc000700000028bdc16bafccdf2505001a0000000080ffffff000000000000000000ac14bf194c2f815114890000000000000a00"], 0x38}}, 0x40408c0) 155.489243ms ago: executing program 3 (id=386): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x30}, 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 154.367226ms ago: executing program 4 (id=387): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x6, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x63, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001c0001000000000004086aa42d"], 0x30}}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {0x2, 0xc, 0x3, 0x6}, 0x17, [0x5, 0x4885, 0x9, 0x4fc, 0x9c, 0xac, 0x4, 0x3, 0x8000000, 0x6, 0x9, 0x800, 0x0, 0x9, 0x9, 0x2, 0xf, 0x18000000, 0x8, 0x0, 0x1, 0x7f, 0xb, 0x9, 0x6, 0x4, 0x2b230794, 0x401, 0xfffffff9, 0x51a4, 0x8, 0x3, 0x5, 0x400, 0x0, 0x7, 0x3ff, 0x101, 0xa71f, 0x7, 0x2, 0x7, 0x8, 0x3, 0x2, 0x8, 0x0, 0xfffff801, 0x0, 0x5, 0x7, 0x80, 0x5e, 0x0, 0x1, 0x6, 0x7, 0x5, 0xffff7124, 0x5, 0x3, 0x8, 0x4, 0x7], [0x4, 0x7a, 0xd27d, 0x6, 0x2, 0x6, 0x1, 0x8, 0x3, 0x2, 0xfff, 0x0, 0x0, 0x6, 0x5, 0x8, 0x69, 0x2, 0x16df, 0x7, 0x591, 0x3, 0xf1, 0x2, 0x8, 0x5, 0xbcc, 0x48b, 0x2, 0x401, 0x1, 0x4, 0xfffffff6, 0x6, 0x4, 0x1, 0x10000, 0x9c4, 0x5, 0x2, 0xd, 0x10001, 0x5, 0x7ff, 0x7fe, 0x9, 0x8, 0x1000, 0x1, 0x101, 0xfff, 0x0, 0x80, 0xcb, 0xe, 0x4, 0x8, 0xc, 0x9, 0x1f8d, 0x8, 0x6, 0x5, 0x6], [0x5, 0x5, 0xaa, 0x2, 0x9, 0xf11, 0x2, 0x6, 0x1, 0x7e22, 0x3, 0x2, 0x1, 0x0, 0x19fe, 0x7, 0x4, 0x10, 0x101, 0xffffffff, 0x9fc1, 0x1, 0x10001, 0x9b87, 0x0, 0x0, 0x0, 0x1, 0x7a, 0x3b, 0x5840, 0x4ba, 0x8, 0x7, 0x1, 0x10001, 0xfff, 0x1e, 0xfffffffe, 0x1, 0x4, 0xd, 0x5, 0xf214, 0x1, 0x3b0, 0x7f, 0x3, 0x101, 0x4, 0x6, 0x5, 0x0, 0x5, 0x52, 0x1, 0x2, 0x9, 0x800, 0x1, 0xffff, 0xffff, 0x2, 0x8], [0x0, 0x7, 0x6, 0x3d3, 0x8, 0x1, 0x656, 0xe, 0x7, 0x101, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2ef, 0x6, 0x2, 0x7, 0x8, 0x313, 0x6, 0x4, 0x3, 0x4, 0x101, 0x10, 0x6, 0x4, 0x9, 0x100, 0x7ff, 0xe364, 0x0, 0xd, 0x332f, 0x7, 0x6, 0x0, 0xfffffffe, 0x96e, 0x1, 0xa26b, 0xfff, 0x4, 0x2, 0x6, 0x4, 0x4160, 0x400, 0x2, 0x9, 0x0, 0xfffffff6, 0x8, 0x6, 0x6, 0x800, 0x2, 0x6, 0x100, 0x3, 0x4]}, 0x45c) syz_emit_ethernet(0x66, &(0x7f0000000380)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x8e, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x19, 0x1, "909f50c21562"}]}}}}}}, 0x0) 307.668µs ago: executing program 3 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20040014) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) (fail_nth: 11) 0s ago: executing program 4 (id=389): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000080ffffff000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000003fc0100000000000000000000000000130700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): 9_tag_alloc+0x10/0x10 [ 54.112424][ T5983] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 54.112449][ T5983] ? v9fs_xattr_handler_get+0x6b/0x120 [ 54.112472][ T5983] ? __vfs_getxattr+0x13d/0x1a0 [ 54.112491][ T5983] ? cap_inode_need_killpriv+0x40/0x60 [ 54.112515][ T5983] ? security_inode_need_killpriv+0x87/0x1e0 [ 54.112531][ T5983] ? file_remove_privs_flags+0x2b8/0x590 [ 54.112554][ T5983] ? netfs_unbuffered_write_iter+0x1c9/0x720 [ 54.112573][ T5983] ? v9fs_file_write_iter+0xbf/0x100 [ 54.112590][ T5983] ? do_iter_readv_writev+0x6f7/0x930 [ 54.112619][ T5983] p9_client_prepare_req+0x19b/0x4d0 [ 54.112645][ T5983] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 54.112671][ T5983] ? __lock_acquire+0x4c5/0x1ec0 [ 54.112696][ T5983] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 54.112717][ T5983] p9_client_rpc+0x1c4/0xd60 [ 54.112745][ T5983] ? __pfx_p9_client_rpc+0x10/0x10 [ 54.112769][ T5983] ? idr_alloc_u32+0x22b/0x320 [ 54.112792][ T5983] ? __pfx_idr_alloc_u32+0x10/0x10 [ 54.112811][ T5983] ? do_raw_spin_lock+0x128/0x260 [ 54.112855][ T5983] ? find_held_lock+0x2b/0x80 [ 54.112879][ T5983] ? p9_fid_create+0x26d/0x460 [ 54.112902][ T5983] ? rcu_is_watching+0x13/0xc0 [ 54.112926][ T5983] ? trace_9p_fid_ref+0x72/0x1f0 [ 54.112952][ T5983] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 54.112974][ T5983] p9_client_xattrwalk+0xc0/0x2a0 [ 54.113004][ T5983] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 54.113025][ T5983] v9fs_fid_xattr_get+0x10f/0x300 [ 54.113046][ T5983] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 54.113072][ T5983] ? __lock_acquire+0x4c5/0x1ec0 [ 54.113094][ T5983] ? v9fs_fid_lookup+0xec/0xf50 [ 54.113120][ T5983] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 54.113141][ T5983] v9fs_xattr_handler_get+0x6b/0x120 [ 54.113165][ T5983] __vfs_getxattr+0x13d/0x1a0 [ 54.113187][ T5983] ? __pfx___vfs_getxattr+0x10/0x10 [ 54.113210][ T5983] ? lock_acquire+0x1d1/0x380 [ 54.113231][ T5983] cap_inode_need_killpriv+0x40/0x60 [ 54.113262][ T5983] security_inode_need_killpriv+0x87/0x1e0 [ 54.113281][ T5983] file_remove_privs_flags+0x2b8/0x590 [ 54.113309][ T5983] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 54.113335][ T5983] ? generic_write_checks+0x321/0x490 [ 54.113362][ T5983] ? __pfx_generic_write_checks+0x10/0x10 [ 54.113396][ T5983] netfs_unbuffered_write_iter+0x1c9/0x720 [ 54.113418][ T5983] ? __lock_acquire+0x4c5/0x1ec0 [ 54.113437][ T5983] v9fs_file_write_iter+0xbf/0x100 [ 54.113455][ T5983] do_iter_readv_writev+0x6f7/0x930 [ 54.113478][ T5983] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 54.113501][ T5983] ? lock_acquire+0x1d1/0x380 [ 54.113527][ T5983] vfs_writev+0x360/0xdd0 [ 54.113553][ T5983] ? __lock_acquire+0x4c5/0x1ec0 [ 54.113570][ T5983] ? __pfx_vfs_writev+0x10/0x10 [ 54.113594][ T5983] ? find_held_lock+0x2b/0x80 [ 54.113622][ T5983] ? lock_acquire+0x1d1/0x380 [ 54.113639][ T5983] ? __fget_files+0x34/0x3d0 [ 54.113667][ T5983] ? __fget_files+0x21f/0x3d0 [ 54.113693][ T5983] ? do_pwritev+0x1ac/0x270 [ 54.113718][ T5983] do_pwritev+0x1ac/0x270 [ 54.113744][ T5983] ? __pfx_do_pwritev+0x10/0x10 [ 54.113769][ T5983] ? ksys_write+0x1ac/0x250 [ 54.113789][ T5983] ? __pfx_ksys_write+0x10/0x10 [ 54.113808][ T5983] __x64_sys_pwritev2+0xef/0x160 [ 54.113829][ T5983] do_syscall_64+0x123/0x790 [ 54.113852][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.113870][ T5983] RIP: 0033:0x7f13b359e159 [ 54.113884][ T5983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.113900][ T5983] RSP: 002b:00007f13b17f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 54.113917][ T5983] RAX: ffffffffffffffda RBX: 00007f13b3825fa0 RCX: 00007f13b359e159 [ 54.113929][ T5983] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000003 [ 54.113939][ T5983] RBP: 00007f13b17f6090 R08: 000000000000000a R09: 0000000000000014 [ 54.113952][ T5983] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 54.113963][ T5983] R13: 00007f13b3826038 R14: 00007f13b3825fa0 R15: 00007ffe469f1988 [ 54.113985][ T5983] [ 54.142485][ T5987] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 54.399011][ T6004] Bluetooth: MGMT ver 1.23 [ 54.428582][ T6004] block device autoloading is deprecated and will be removed. [ 54.431961][ T6004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.38'. [ 54.438169][ T6009] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 54.502668][ T6014] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 54.641414][ T5739] Bluetooth: hci0: command tx timeout [ 54.719723][ T5739] Bluetooth: hci2: command tx timeout [ 54.719808][ T5739] Bluetooth: hci3: command tx timeout [ 54.720342][ T67] Bluetooth: hci1: command tx timeout [ 54.749341][ T6027] openvswitch: netlink: Message has 4 unknown bytes. [ 54.969543][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 55.049558][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.151922][ T30] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 55.152969][ T30] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.154530][ T30] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.157020][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.157042][ T30] usb 8-1: Product: syz [ 55.157054][ T30] usb 8-1: Manufacturer: syz [ 55.157066][ T30] usb 8-1: SerialNumber: syz [ 55.166548][ T30] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 55.172171][ T30] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 55.183409][ T30] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 55.217551][ T9] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 55.218471][ T9] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.219510][ T9] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.221063][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.221075][ T9] usb 5-1: Product: syz [ 55.221082][ T9] usb 5-1: Manufacturer: syz [ 55.221089][ T9] usb 5-1: SerialNumber: syz [ 55.232407][ T9] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 55.235610][ T9] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 55.238525][ T9] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 56.719663][ T5733] Bluetooth: hci0: command tx timeout [ 56.799337][ T5733] Bluetooth: hci1: command tx timeout [ 56.799362][ T5739] Bluetooth: hci2: command tx timeout [ 56.810407][ T5733] Bluetooth: hci3: command tx timeout [ 57.290092][ T6023] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 57.294942][ T6029] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -32 [ 57.298096][ C1] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 57.298273][ T6029] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -71 [ 57.298300][ T6029] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -71 [ 57.298978][ T931] usb 8-1: USB disconnect, device number 3 [ 57.301256][ C1] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 57.301271][ C1] usb 8-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 57.301375][ T6029] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -71 [ 57.320821][ T931] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 57.332213][ T931] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 57.334788][ T931] ti_usb_3410_5052 8-1:2.0: device disconnected [ 57.896856][ T6046] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 57.912621][ T6046] picdev_read: 30 callbacks suppressed [ 57.912684][ T6046] kvm: pic: non byte read [ 57.914471][ T6046] pic_ioport_write: 23 callbacks suppressed [ 57.914482][ T6046] kvm: pic: level sensitive irq not supported [ 57.915233][ T6046] kvm: pic: non byte read [ 57.916638][ T6046] kvm: pic: level sensitive irq not supported [ 57.916971][ T6046] kvm: pic: non byte read [ 57.918022][ T6046] kvm: pic: level sensitive irq not supported [ 57.918296][ T6046] kvm: pic: non byte read [ 58.004566][ T6056] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.013029][ T6056] kvm: pic: non byte read [ 58.016402][ T6056] kvm: pic: level sensitive irq not supported [ 58.017405][ T6056] kvm: pic: non byte read [ 58.024785][ T6056] kvm: pic: level sensitive irq not supported [ 58.026153][ T6056] kvm: pic: non byte read [ 58.034560][ T6056] kvm: pic: level sensitive irq not supported [ 58.035003][ T6056] kvm: pic: non byte read [ 58.118835][ T6062] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.127755][ T6062] kvm: pic: level sensitive irq not supported [ 58.128197][ T6062] kvm: pic: non byte read [ 58.134434][ T6062] kvm: pic: level sensitive irq not supported [ 58.135083][ T6062] kvm: pic: non byte read [ 58.143358][ T6062] kvm: pic: level sensitive irq not supported [ 58.146440][ T6062] kvm: pic: level sensitive irq not supported [ 58.230179][ T6068] openvswitch: netlink: Duplicate or invalid key (type 0). [ 58.293306][ T5733] Bluetooth: hci2: failed to read key size for handle 200 [ 58.311416][ T6070] ovs-system: entered promiscuous mode [ 58.335250][ T30] usb 5-1: USB disconnect, device number 2 [ 58.362275][ T6072] FAULT_INJECTION: forcing a failure. [ 58.362275][ T6072] name failslab, interval 1, probability 0, space 0, times 0 [ 58.362369][ T6072] CPU: 2 UID: 0 PID: 6072 Comm: syz.3.57 Not tainted syzkaller #0 PREEMPT(full) [ 58.362397][ T6072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.362411][ T6072] Call Trace: [ 58.362419][ T6072] [ 58.362429][ T6072] dump_stack_lvl+0x100/0x190 [ 58.362485][ T6072] should_fail_ex.cold+0x5/0xa [ 58.362518][ T6072] ? __pfx_cryptomgr_probe+0x10/0x10 [ 58.362556][ T6072] should_failslab+0xc2/0x120 [ 58.362585][ T6072] __kmalloc_cache_noprof+0x91/0x6d0 [ 58.362622][ T6072] ? __kthread_create_on_node+0xce/0x3f0 [ 58.362656][ T6072] ? __pfx_cryptomgr_probe+0x10/0x10 [ 58.362694][ T6072] __kthread_create_on_node+0xce/0x3f0 [ 58.362727][ T6072] ? __pfx___kthread_create_on_node+0x10/0x10 [ 58.362771][ T6072] ? __pfx_cryptomgr_probe+0x10/0x10 [ 58.362804][ T6072] kthread_create_on_node+0xc7/0x100 [ 58.362833][ T6072] ? __pfx_kthread_create_on_node+0x10/0x10 [ 58.362866][ T6072] ? __kasan_kmalloc+0xaa/0xb0 [ 58.362890][ T6072] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 58.362924][ T6072] ? cryptomgr_notify+0xa4/0xb40 [ 58.362961][ T6072] cryptomgr_notify+0x953/0xb40 [ 58.362999][ T6072] notifier_call_chain+0x99/0x3f0 [ 58.363064][ T6072] blocking_notifier_call_chain+0x69/0xa0 [ 58.363102][ T6072] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 58.363136][ T6072] crypto_alloc_tfm_node+0xd3/0x260 [ 58.363170][ T6072] esp_init_authenc.constprop.0+0x1df/0xb50 [ 58.363209][ T6072] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 58.363249][ T6072] ? find_held_lock+0x2b/0x80 [ 58.363283][ T6072] esp6_init_state+0x3a6/0x500 [ 58.363309][ T6072] __xfrm_init_state+0x842/0x1dc0 [ 58.363341][ T6072] xfrm_init_state+0x1c/0xa0 [ 58.363364][ T6072] pfkey_add+0x1c88/0x2f10 [ 58.363397][ T6072] ? __pfx_pfkey_add+0x10/0x10 [ 58.363418][ T6072] ? kfree_skbmem+0x19f/0x210 [ 58.363446][ T6072] ? sk_skb_reason_drop+0x114/0x1b0 [ 58.363469][ T6072] ? pfkey_broadcast+0x28c/0x420 [ 58.363495][ T6072] ? __pfx_pfkey_add+0x10/0x10 [ 58.363517][ T6072] pfkey_process+0x5c3/0x810 [ 58.363545][ T6072] ? __pfx_pfkey_process+0x10/0x10 [ 58.363569][ T6072] ? pfkey_sendmsg+0x41a/0x840 [ 58.363608][ T6072] ? __pfx___alloc_skb+0x10/0x10 [ 58.363648][ T6072] pfkey_sendmsg+0x428/0x840 [ 58.363685][ T6072] ____sys_sendmsg+0xa4d/0xbe0 [ 58.363711][ T6072] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 58.363739][ T6072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.363777][ T6072] ? plist_check_list+0x1b8/0x280 [ 58.363815][ T6072] ? plist_del+0x308/0x510 [ 58.363849][ T6072] ___sys_sendmsg+0x190/0x1e0 [ 58.363879][ T6072] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.363908][ T6072] ? futex_wake+0x220/0x5e0 [ 58.363951][ T6072] ? find_held_lock+0x2b/0x80 [ 58.363996][ T6072] __sys_sendmsg+0x160/0x210 [ 58.364017][ T6072] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.364054][ T6072] do_syscall_64+0x123/0x790 [ 58.364080][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.364102][ T6072] RIP: 0033:0x7fb62699e159 [ 58.364120][ T6072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.364139][ T6072] RSP: 002b:00007fb6278d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.364178][ T6072] RAX: ffffffffffffffda RBX: 00007fb626c25fa0 RCX: 00007fb62699e159 [ 58.364193][ T6072] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 58.364206][ T6072] RBP: 00007fb626a35024 R08: 0000000000000000 R09: 0000000000000000 [ 58.364219][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.364232][ T6072] R13: 00007fb626c26038 R14: 00007fb626c25fa0 R15: 00007ffc6515c4e8 [ 58.364262][ T6072] [ 58.373923][ T30] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 58.379400][ T30] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 58.379798][ T30] ti_usb_3410_5052 5-1:2.0: device disconnected [ 58.425362][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 58.425375][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 58.425555][ T6078] netlink: 'syz.3.59': attribute type 7 has an invalid length. [ 58.425562][ T6078] netlink: 'syz.3.59': attribute type 13 has an invalid length. [ 58.552361][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 58.552407][ T42] audit: type=1400 audit(1788587901.195:278): avc: denied { write } for pid=6083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.552446][ T42] audit: type=1400 audit(1788587901.195:279): avc: denied { create } for pid=6083 comm="dhcpcd-run-hook" name="resolv.conf.ovs-system.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.552601][ T42] audit: type=1400 audit(1788587901.195:280): avc: denied { write } for pid=6083 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ovs-system.link" dev="tmpfs" ino=2249 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.552806][ T42] audit: type=1400 audit(1788587901.195:281): avc: denied { append } for pid=6083 comm="dhcpcd-run-hook" name="resolv.conf.ovs-system.link" dev="tmpfs" ino=2249 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.612982][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 58.653394][ T42] audit: type=1400 audit(1788587901.295:282): avc: denied { write } for pid=6089 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.653550][ T42] audit: type=1400 audit(1788587901.295:283): avc: denied { unlink } for pid=6089 comm="rm" name="resolv.conf.ovs-system.link" dev="tmpfs" ino=2249 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.673616][ T6094] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 58.674795][ T6094] @0Ù: renamed from bond_slave_1 (while UP) [ 58.704799][ T6096] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.796361][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 58.833736][ T42] audit: type=1400 audit(1788587901.475:284): avc: denied { write } for pid=6102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.898180][ T42] audit: type=1400 audit(1788587901.535:285): avc: denied { write } for pid=6107 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.986388][ T42] audit: type=1400 audit(1788587901.625:286): avc: denied { write } for pid=6111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.060676][ T42] audit: type=1400 audit(1788587901.705:287): avc: denied { write } for pid=6117 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.209282][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 59.335667][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 59.335863][ T6128] FAULT_INJECTION: forcing a failure. [ 59.335863][ T6128] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.335885][ T6128] CPU: 2 UID: 0 PID: 6128 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT(full) [ 59.335903][ T6128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.335913][ T6128] Call Trace: [ 59.335919][ T6128] [ 59.335927][ T6128] dump_stack_lvl+0x100/0x190 [ 59.335974][ T6128] should_fail_ex.cold+0x5/0xa [ 59.335999][ T6128] _copy_from_user+0x2e/0xd0 [ 59.336033][ T6128] kstrtouint_from_user+0xd6/0x1d0 [ 59.336055][ T6128] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 59.336082][ T6128] ? lock_acquire+0x1d1/0x380 [ 59.336113][ T6128] proc_fail_nth_write+0x83/0x220 [ 59.336135][ T6128] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.336164][ T6128] vfs_write+0x2aa/0x1050 [ 59.336183][ T6128] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.336202][ T6128] ? lock_acquire+0x1d1/0x380 [ 59.336219][ T6128] ? __fget_files+0x34/0x3d0 [ 59.336241][ T6128] ? __pfx_vfs_write+0x10/0x10 [ 59.336256][ T6128] ? find_held_lock+0x2b/0x80 [ 59.336282][ T6128] ? __fget_files+0x215/0x3d0 [ 59.336307][ T6128] ? __fget_files+0x21f/0x3d0 [ 59.336335][ T6128] ksys_write+0x12a/0x250 [ 59.336352][ T6128] ? __pfx_ksys_write+0x10/0x10 [ 59.336375][ T6128] do_syscall_64+0x123/0x790 [ 59.336408][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.336427][ T6128] RIP: 0033:0x7fe58cd5e98e [ 59.336442][ T6128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.336458][ T6128] RSP: 002b:00007fe58dc85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.336476][ T6128] RAX: ffffffffffffffda RBX: 00007fe58dc866c0 RCX: 00007fe58cd5e98e [ 59.336486][ T6128] RDX: 0000000000000001 RSI: 00007fe58dc860a0 RDI: 0000000000000005 [ 59.336495][ T6128] RBP: 00007fe58dc86090 R08: 0000000000000000 R09: 0000000000000000 [ 59.336505][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.336517][ T6128] R13: 00007fe58d026038 R14: 00007fe58d025fa0 R15: 00007fff38aad788 [ 59.336541][ T6128] [ 59.383146][ T9] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 59.384043][ T9] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.384986][ T9] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.386610][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.386623][ T9] usb 8-1: Product: syz [ 59.386630][ T9] usb 8-1: Manufacturer: syz [ 59.386637][ T9] usb 8-1: SerialNumber: syz [ 59.394555][ T9] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 59.409232][ T9] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 59.417393][ T9] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 59.728135][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 59.855155][ T6158] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 59.963294][ T6165] netlink: 64 bytes leftover after parsing attributes in process `syz.0.74'. [ 59.980329][ T1163] IPVS: starting estimator thread 0... [ 59.990282][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 60.080076][ T6167] IPVS: using max 43 ests per chain, 103200 per kthread [ 60.243334][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 60.244417][ T5929] block nbd1: Receive control failed (result -107) [ 60.269311][ T5801] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.284075][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 60.419737][ T5801] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 60.421785][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.719999][ T6110] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 60.720119][ T6110] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 60.721068][ T6110] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 60.723910][ T5883] usb 8-1: USB disconnect, device number 4 [ 60.734946][ T5883] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 60.745514][ T5883] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 60.746107][ T5883] ti_usb_3410_5052 8-1:2.0: device disconnected [ 60.965179][ T6188] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.249408][ T6197] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 61.316160][ T6204] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 61.438321][ T5801] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 61.438460][ T5801] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 61.438519][ T5801] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 61.438547][ T5801] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 61.438559][ T5801] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 61.438570][ T5801] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 61.438582][ T5801] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 61.438595][ T5801] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 61.438612][ T5801] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 61.438627][ T5801] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 61.443971][ T5801] ryos 0003:1E7D:3138.0002: hidraw1: USB HID v1.11 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 61.524290][ T6217] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.751227][ T6221] FAULT_INJECTION: forcing a failure. [ 61.751227][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 61.751289][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.3.92 Not tainted syzkaller #0 PREEMPT(full) [ 61.751314][ T6221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.751323][ T6221] Call Trace: [ 61.751327][ T6221] [ 61.751332][ T6221] dump_stack_lvl+0x100/0x190 [ 61.751364][ T6221] should_fail_ex.cold+0x5/0xa [ 61.751381][ T6221] should_failslab+0xc2/0x120 [ 61.751400][ T6221] __kmalloc_noprof+0xfc/0x840 [ 61.751413][ T6221] ? trace_kmem_cache_alloc+0xdd/0x100 [ 61.751427][ T6221] ? p9_fcall_init+0x101/0x420 [ 61.751450][ T6221] p9_fcall_init+0x101/0x420 [ 61.751467][ T6221] p9_tag_alloc+0x20d/0x860 [ 61.751485][ T6221] ? __pfx_p9_tag_alloc+0x10/0x10 [ 61.751502][ T6221] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 61.751530][ T6221] ? v9fs_xattr_handler_get+0x6b/0x120 [ 61.751551][ T6221] ? __vfs_getxattr+0x13d/0x1a0 [ 61.751568][ T6221] ? cap_inode_need_killpriv+0x40/0x60 [ 61.751590][ T6221] ? security_inode_need_killpriv+0x87/0x1e0 [ 61.751608][ T6221] ? file_remove_privs_flags+0x2b8/0x590 [ 61.751627][ T6221] ? netfs_unbuffered_write_iter+0x1c9/0x720 [ 61.751647][ T6221] ? v9fs_file_write_iter+0xbf/0x100 [ 61.751659][ T6221] ? do_iter_readv_writev+0x6f7/0x930 [ 61.751679][ T6221] p9_client_prepare_req+0x19b/0x4d0 [ 61.751697][ T6221] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 61.751716][ T6221] ? __lock_acquire+0x4c5/0x1ec0 [ 61.751732][ T6221] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 61.751747][ T6221] p9_client_rpc+0x1c4/0xd60 [ 61.751766][ T6221] ? __pfx_p9_client_rpc+0x10/0x10 [ 61.751783][ T6221] ? idr_alloc_u32+0x22b/0x320 [ 61.751799][ T6221] ? __pfx_idr_alloc_u32+0x10/0x10 [ 61.751812][ T6221] ? do_raw_spin_lock+0x128/0x260 [ 61.751828][ T6221] ? find_held_lock+0x2b/0x80 [ 61.751844][ T6221] ? p9_fid_create+0x26d/0x460 [ 61.751860][ T6221] ? rcu_is_watching+0x13/0xc0 [ 61.751876][ T6221] ? trace_9p_fid_ref+0x72/0x1f0 [ 61.751893][ T6221] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 61.751909][ T6221] p9_client_xattrwalk+0xc0/0x2a0 [ 61.751929][ T6221] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 61.751943][ T6221] v9fs_fid_xattr_get+0x10f/0x300 [ 61.751958][ T6221] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 61.751976][ T6221] ? __lock_acquire+0x4c5/0x1ec0 [ 61.751991][ T6221] ? v9fs_fid_lookup+0xec/0xf50 [ 61.752008][ T6221] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 61.752022][ T6221] v9fs_xattr_handler_get+0x6b/0x120 [ 61.752039][ T6221] __vfs_getxattr+0x13d/0x1a0 [ 61.752054][ T6221] ? __pfx___vfs_getxattr+0x10/0x10 [ 61.752070][ T6221] ? lock_acquire+0x1d1/0x380 [ 61.752084][ T6221] cap_inode_need_killpriv+0x40/0x60 [ 61.752117][ T6221] security_inode_need_killpriv+0x87/0x1e0 [ 61.752133][ T6221] file_remove_privs_flags+0x2b8/0x590 [ 61.752152][ T6221] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 61.752171][ T6221] ? generic_write_checks+0x321/0x490 [ 61.752190][ T6221] ? __pfx_generic_write_checks+0x10/0x10 [ 61.752213][ T6221] netfs_unbuffered_write_iter+0x1c9/0x720 [ 61.752228][ T6221] ? __lock_acquire+0x4c5/0x1ec0 [ 61.752242][ T6221] v9fs_file_write_iter+0xbf/0x100 [ 61.752255][ T6221] do_iter_readv_writev+0x6f7/0x930 [ 61.752276][ T6221] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 61.752295][ T6221] ? lock_acquire+0x1d1/0x380 [ 61.752313][ T6221] vfs_writev+0x360/0xdd0 [ 61.752332][ T6221] ? __lock_acquire+0x4c5/0x1ec0 [ 61.752346][ T6221] ? __pfx_vfs_writev+0x10/0x10 [ 61.752364][ T6221] ? find_held_lock+0x2b/0x80 [ 61.752383][ T6221] ? lock_acquire+0x1d1/0x380 [ 61.752394][ T6221] ? __fget_files+0x34/0x3d0 [ 61.752414][ T6221] ? __fget_files+0x21f/0x3d0 [ 61.752432][ T6221] ? do_pwritev+0x1ac/0x270 [ 61.752449][ T6221] do_pwritev+0x1ac/0x270 [ 61.752468][ T6221] ? __pfx_do_pwritev+0x10/0x10 [ 61.752486][ T6221] ? ksys_write+0x1ac/0x250 [ 61.752498][ T6221] ? __pfx_ksys_write+0x10/0x10 [ 61.752511][ T6221] __x64_sys_pwritev2+0xef/0x160 [ 61.752526][ T6221] do_syscall_64+0x123/0x790 [ 61.752542][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.752555][ T6221] RIP: 0033:0x7fb62699e159 [ 61.752566][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.752577][ T6221] RSP: 002b:00007fb6278d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 61.752590][ T6221] RAX: ffffffffffffffda RBX: 00007fb626c25fa0 RCX: 00007fb62699e159 [ 61.752597][ T6221] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000003 [ 61.752604][ T6221] RBP: 00007fb6278d4090 R08: 000000000000000a R09: 0000000000000014 [ 61.752612][ T6221] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 61.752619][ T6221] R13: 00007fb626c26038 R14: 00007fb626c25fa0 R15: 00007ffc6515c4e8 [ 61.752639][ T6221] [ 62.068781][ T6232] syzkaller0: entered promiscuous mode [ 62.068836][ T6232] syzkaller0: entered allmulticast mode [ 62.138839][ T5801] usb 5-1: USB disconnect, device number 3 [ 62.309372][ T5820] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 62.370156][ T6240] openvswitch: netlink: Message has 4 unknown bytes. [ 62.470652][ T5820] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 62.471913][ T5820] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 62.472822][ T5820] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 62.474712][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.474732][ T5820] usb 8-1: Product: syz [ 62.474745][ T5820] usb 8-1: Manufacturer: syz [ 62.474758][ T5820] usb 8-1: SerialNumber: syz [ 62.482821][ T5820] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 62.488785][ T5820] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 62.498603][ T5820] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 62.506791][ T6245] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.966125][ T6262] FAULT_INJECTION: forcing a failure. [ 62.966125][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 62.966209][ T6262] CPU: 0 UID: 0 PID: 6262 Comm: syz.0.108 Not tainted syzkaller #0 PREEMPT(full) [ 62.966235][ T6262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.966244][ T6262] Call Trace: [ 62.966250][ T6262] [ 62.966255][ T6262] dump_stack_lvl+0x100/0x190 [ 62.966276][ T6262] should_fail_ex.cold+0x5/0xa [ 62.966307][ T6262] should_failslab+0xc2/0x120 [ 62.966328][ T6262] kmem_cache_alloc_noprof+0x92/0x6a0 [ 62.966341][ T6262] ? __pfx_map_id_range_down+0x10/0x10 [ 62.966356][ T6262] ? security_inode_alloc+0x3b/0x2c0 [ 62.966378][ T6262] security_inode_alloc+0x3b/0x2c0 [ 62.966397][ T6262] inode_init_always_gfp+0xc6f/0xfb0 [ 62.966414][ T6262] alloc_inode+0x8e/0x250 [ 62.966431][ T6262] new_inode+0x22/0x1c0 [ 62.966449][ T6262] debugfs_create_symlink+0xb4/0x1f0 [ 62.966466][ T6262] ref_tracker_dir_symlink+0x257/0x3b0 [ 62.966481][ T6262] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 62.966507][ T6262] ? rcu_is_watching+0x13/0xc0 [ 62.966522][ T6262] ? ida_alloc_range+0x70d/0x830 [ 62.966536][ T6262] ? kfree+0x1e5/0x6d0 [ 62.966550][ T6262] ? xas_nomem+0x189/0x2c0 [ 62.966566][ T6262] ? __pfx_net_ns_net_init+0x10/0x10 [ 62.966588][ T6262] net_ns_net_init+0x7e/0x120 [ 62.966602][ T6262] ops_init+0x1e2/0x5f0 [ 62.966616][ T6262] setup_net+0x118/0x3a0 [ 62.966629][ T6262] ? __pfx_setup_net+0x10/0x10 [ 62.966647][ T6262] copy_net_ns+0x345/0x7a0 [ 62.966664][ T6262] create_new_namespaces+0x3ea/0xac0 [ 62.966684][ T6262] unshare_nsproxy_namespaces+0xf2/0x220 [ 62.966701][ T6262] ksys_unshare+0x4a2/0xa70 [ 62.966716][ T6262] ? __pfx_ksys_unshare+0x10/0x10 [ 62.966736][ T6262] __x64_sys_unshare+0x31/0x40 [ 62.966748][ T6262] do_syscall_64+0x123/0x790 [ 62.966762][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.966774][ T6262] RIP: 0033:0x7fe58cd9e159 [ 62.966785][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.966796][ T6262] RSP: 002b:00007fe58dc86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 62.966808][ T6262] RAX: ffffffffffffffda RBX: 00007fe58d025fa0 RCX: 00007fe58cd9e159 [ 62.966873][ T6262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062000000 [ 62.966880][ T6262] RBP: 00007fe58ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 62.966888][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.966895][ T6262] R13: 00007fe58d026038 R14: 00007fe58d025fa0 R15: 00007fff38aad788 [ 62.966911][ T6262] [ 62.967113][ T6262] debugfs: out of free dentries, can not create symlink 'netns-29-4026533779-refcnt' [ 63.141189][ T6266] openvswitch: netlink: Duplicate or invalid key (type 0). [ 63.237444][ T6268] FAULT_INJECTION: forcing a failure. [ 63.237444][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 63.237499][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.0.110 Not tainted syzkaller #0 PREEMPT(full) [ 63.237523][ T6268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.237532][ T6268] Call Trace: [ 63.237536][ T6268] [ 63.237541][ T6268] dump_stack_lvl+0x100/0x190 [ 63.237562][ T6268] should_fail_ex.cold+0x5/0xa [ 63.237579][ T6268] should_failslab+0xc2/0x120 [ 63.237594][ T6268] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 63.237608][ T6268] ? __kthread_create_on_node+0x186/0x3f0 [ 63.237624][ T6268] kvasprintf+0xbc/0x150 [ 63.237642][ T6268] ? __pfx_kvasprintf+0x10/0x10 [ 63.237659][ T6268] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 63.237675][ T6268] ? __kthread_create_on_node+0xce/0x3f0 [ 63.237690][ T6268] ? __pfx_cryptomgr_probe+0x10/0x10 [ 63.237713][ T6268] __kthread_create_on_node+0x186/0x3f0 [ 63.237728][ T6268] ? __pfx___kthread_create_on_node+0x10/0x10 [ 63.237750][ T6268] ? __pfx_cryptomgr_probe+0x10/0x10 [ 63.237766][ T6268] kthread_create_on_node+0xc7/0x100 [ 63.237780][ T6268] ? __pfx_kthread_create_on_node+0x10/0x10 [ 63.237799][ T6268] ? __kasan_kmalloc+0xaa/0xb0 [ 63.237814][ T6268] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 63.237831][ T6268] ? cryptomgr_notify+0xa4/0xb40 [ 63.237850][ T6268] cryptomgr_notify+0x953/0xb40 [ 63.237866][ T6268] ? __kasan_kmalloc+0xaa/0xb0 [ 63.237878][ T6268] notifier_call_chain+0x99/0x3f0 [ 63.237896][ T6268] blocking_notifier_call_chain+0x69/0xa0 [ 63.237912][ T6268] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 63.237927][ T6268] crypto_alloc_tfm_node+0xd3/0x260 [ 63.237942][ T6268] esp_init_authenc.constprop.0+0x1df/0xb50 [ 63.237957][ T6268] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 63.237977][ T6268] ? find_held_lock+0x2b/0x80 [ 63.237993][ T6268] esp6_init_state+0x3a6/0x500 [ 63.238005][ T6268] __xfrm_init_state+0x842/0x1dc0 [ 63.238021][ T6268] xfrm_init_state+0x1c/0xa0 [ 63.238033][ T6268] pfkey_add+0x1c88/0x2f10 [ 63.238049][ T6268] ? __pfx_pfkey_add+0x10/0x10 [ 63.238062][ T6268] ? kfree_skbmem+0x19f/0x210 [ 63.238078][ T6268] ? sk_skb_reason_drop+0x114/0x1b0 [ 63.238092][ T6268] ? pfkey_broadcast+0x28c/0x420 [ 63.238107][ T6268] ? __pfx_pfkey_add+0x10/0x10 [ 63.238120][ T6268] pfkey_process+0x5c3/0x810 [ 63.238134][ T6268] ? __pfx_pfkey_process+0x10/0x10 [ 63.238147][ T6268] ? pfkey_sendmsg+0x41a/0x840 [ 63.238167][ T6268] ? __pfx___alloc_skb+0x10/0x10 [ 63.238188][ T6268] pfkey_sendmsg+0x428/0x840 [ 63.238203][ T6268] ____sys_sendmsg+0xa4d/0xbe0 [ 63.238215][ T6268] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 63.238229][ T6268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.238249][ T6268] ___sys_sendmsg+0x190/0x1e0 [ 63.238265][ T6268] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.238279][ T6268] ? futex_wait+0x11e/0x370 [ 63.238301][ T6268] ? find_held_lock+0x2b/0x80 [ 63.238324][ T6268] __sys_sendmsg+0x160/0x210 [ 63.238336][ T6268] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.238359][ T6268] do_syscall_64+0x123/0x790 [ 63.238381][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.238399][ T6268] RIP: 0033:0x7fe58cd9e159 [ 63.238413][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.238427][ T6268] RSP: 002b:00007fe58dc86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.238443][ T6268] RAX: ffffffffffffffda RBX: 00007fe58d025fa0 RCX: 00007fe58cd9e159 [ 63.238453][ T6268] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 63.238463][ T6268] RBP: 00007fe58ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 63.238472][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.238480][ T6268] R13: 00007fe58d026038 R14: 00007fe58d025fa0 R15: 00007fff38aad788 [ 63.238502][ T6268] [ 63.306340][ T6274] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 63.473059][ T6284] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 63.483774][ T6284] bridge_slave_0: left allmulticast mode [ 63.483863][ T6284] bridge_slave_0: left promiscuous mode [ 63.485491][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.495641][ T6284] bridge_slave_1: left allmulticast mode [ 63.495684][ T6284] bridge_slave_1: left promiscuous mode [ 63.495812][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.500177][ T6286] __nla_validate_parse: 1 callbacks suppressed [ 63.500189][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 63.512564][ T6284] bond0: (slave bond_slave_0): Releasing backup interface [ 63.517263][ T6284] bond0: (slave c@0Ù): Releasing backup interface [ 63.525238][ T6284] team0: Port device team_slave_0 removed [ 63.531627][ T6284] team0: Port device team_slave_1 removed [ 63.532464][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.532484][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.536285][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.536310][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.539129][ T6284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.549882][ T6287] team0: Port device xfrm0 added [ 63.565445][ T6284] tipc: Started in network mode [ 63.565484][ T6284] tipc: Node identity 22ff8d84a05c, cluster identity 4711 [ 63.566058][ T6284] tipc: Enabled bearer , priority 0 [ 63.612533][ T6289] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 63.614732][ T6289] syzkaller1: linktype set to 776 [ 63.633628][ T6289] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 63.770727][ T6234] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 63.770793][ T6234] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 63.773477][ T6234] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 63.778171][ T5820] usb 8-1: USB disconnect, device number 5 [ 63.786801][ T5820] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 63.802804][ T5820] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 63.808495][ T5820] ti_usb_3410_5052 8-1:2.0: device disconnected [ 63.816026][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 63.816121][ T42] audit: type=1400 audit(1788587906.455:305): avc: denied { remount } for pid=6294 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.817941][ T6295] binder: Unknown parameter 'euid>00000000000000000000' [ 63.819406][ T42] audit: type=1400 audit(1788587906.455:306): avc: denied { create } for pid=6294 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.839650][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 64.005450][ T6308] warning: `syz.0.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.005703][ T42] audit: type=1400 audit(1788587906.645:307): avc: denied { setopt } for pid=6307 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.046711][ T42] audit: type=1400 audit(1788587906.685:308): avc: denied { create } for pid=6311 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.047874][ T6312] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 64.092033][ T6312] bond1: entered promiscuous mode [ 64.094587][ T6312] bond1: entered allmulticast mode [ 64.096802][ T6312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.126996][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 64.131395][ T5929] block nbd2: Receive control failed (result -107) [ 64.154070][ T42] audit: type=1400 audit(1788587906.795:309): avc: denied { write } for pid=6321 comm="syz.2.132" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 64.157268][ T42] audit: type=1400 audit(1788587906.795:310): avc: denied { open } for pid=6321 comm="syz.2.132" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 64.193333][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 64.343462][ T42] audit: type=1400 audit(1788587906.985:311): avc: denied { write } for pid=6337 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.343692][ T42] audit: type=1400 audit(1788587906.985:312): avc: denied { nlmsg_write } for pid=6337 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.412509][ T42] audit: type=1400 audit(1788587907.055:313): avc: denied { shutdown } for pid=6333 comm="syz.2.135" laddr=fe80::11 lport=58647 faddr=fe80::bb fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.412887][ T42] audit: type=1400 audit(1788587907.055:314): avc: denied { read } for pid=6333 comm="syz.2.135" laddr=fe80::11 lport=58647 faddr=fe80::bb fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.507490][ T6349] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 64.560012][ T25] tipc: Node number set to 2191756676 [ 65.369092][ T6362] Zero length message leads to an empty skb [ 65.549386][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 65.709922][ T30] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 65.715861][ T30] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.722614][ T30] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.729988][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.737628][ T30] usb 8-1: Product: syz [ 65.740339][ T30] usb 8-1: Manufacturer: syz [ 65.742459][ T30] usb 8-1: SerialNumber: syz [ 65.752729][ T30] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 65.757352][ T6387] openvswitch: netlink: Message has 4 unknown bytes. [ 65.760969][ T30] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 65.766397][ T30] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 65.844734][ T6391] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 65.951763][ T6395] qrtr: Invalid version 169 [ 65.954540][ T6395] Unsupported ieee802154 address type: 0 [ 66.119379][ T25] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 66.219354][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.291823][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 66.291892][ T25] usb 5-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=30.f2 [ 66.299862][ T25] usb 5-1: config 9 has an invalid interface number: 140 but max is 0 [ 66.299908][ T25] usb 5-1: config 9 has no interface number 0 [ 66.300127][ T25] usb 5-1: config 9 interface 140 altsetting 244 endpoint 0x9 has invalid maxpacket 991, setting to 64 [ 66.300142][ T25] usb 5-1: config 9 interface 140 altsetting 244 has an endpoint descriptor with address 0x5E, changing to 0xE [ 66.300154][ T25] usb 5-1: config 9 interface 140 altsetting 244 endpoint 0xE has invalid maxpacket 57101, setting to 64 [ 66.300167][ T25] usb 5-1: config 9 interface 140 altsetting 244 endpoint 0xA has invalid maxpacket 40479, setting to 64 [ 66.300180][ T25] usb 5-1: config 9 interface 140 altsetting 244 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 66.300193][ T25] usb 5-1: config 9 interface 140 altsetting 244 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 66.300206][ T25] usb 5-1: config 9 interface 140 altsetting 244 has a duplicate endpoint with address 0x4, skipping [ 66.300217][ T25] usb 5-1: config 9 interface 140 altsetting 244 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 66.300230][ T25] usb 5-1: config 9 interface 140 altsetting 244 endpoint 0x84 has invalid maxpacket 512, setting to 64 [ 66.300243][ T25] usb 5-1: config 9 interface 140 altsetting 244 has a duplicate endpoint with address 0x4, skipping [ 66.300254][ T25] usb 5-1: config 9 interface 140 altsetting 244 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 66.300266][ T25] usb 5-1: config 9 interface 140 altsetting 244 has a duplicate endpoint with address 0xE, skipping [ 66.300278][ T25] usb 5-1: config 9 interface 140 altsetting 244 endpoint 0x1 has invalid maxpacket 1072, setting to 64 [ 66.300290][ T25] usb 5-1: config 9 interface 140 altsetting 244 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 66.300304][ T25] usb 5-1: config 9 interface 140 altsetting 244 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 66.300317][ T25] usb 5-1: config 9 interface 140 has no altsetting 0 [ 66.301984][ T25] usb 5-1: Dual-Role OTG device on HNP port [ 66.302251][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.302265][ T25] usb 5-1: Product: syz [ 66.302272][ T25] usb 5-1: Manufacturer: syz [ 66.302279][ T25] usb 5-1: SerialNumber: syz [ 66.313017][ T6385] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 66.313282][ T6385] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 66.313427][ T6385] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 66.313549][ T6385] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 66.313703][ T6385] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 66.390840][ T5883] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.391778][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.391794][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.391804][ T5883] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.391823][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.394735][ T5883] usb 7-1: config 0 descriptor?? [ 66.810801][ T5883] hid_parser_main: 40 callbacks suppressed [ 66.810953][ T5883] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.811014][ T5883] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.811051][ T5883] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.811120][ T5883] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.811139][ T5883] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.811156][ T5883] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.823661][ T5883] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 67.041091][ T6360] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 67.041252][ T6360] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 67.045848][ T6360] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 67.047975][ T5820] usb 8-1: USB disconnect, device number 6 [ 67.063351][ T5883] usb 7-1: USB disconnect, device number 2 [ 67.076522][ T5820] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 67.089519][ T5820] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 67.090682][ T5820] ti_usb_3410_5052 8-1:2.0: device disconnected [ 67.583975][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 67.584050][ T6401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.153'. [ 67.815336][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.817453][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.875516][ T6415] overlayfs: failed to resolve './file0': -2 [ 67.879498][ T64] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 67.936353][ T6417] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.329480][ T5599] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.391520][ T6423] openvswitch: netlink: Duplicate or invalid key (type 0). [ 68.481996][ T5599] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 68.485698][ T5599] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.487633][ T5599] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.491044][ T5599] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.491067][ T5599] usb 7-1: Product: syz [ 68.491081][ T5599] usb 7-1: Manufacturer: syz [ 68.491095][ T5599] usb 7-1: SerialNumber: syz [ 68.494297][ T6425] FAULT_INJECTION: forcing a failure. [ 68.494297][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 68.494329][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT(full) [ 68.494354][ T6425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.494367][ T6425] Call Trace: [ 68.494374][ T6425] [ 68.494383][ T6425] dump_stack_lvl+0x100/0x190 [ 68.494435][ T6425] should_fail_ex.cold+0x5/0xa [ 68.494467][ T6425] should_failslab+0xc2/0x120 [ 68.494499][ T6425] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 68.494525][ T6425] ? __kthread_create_on_node+0x186/0x3f0 [ 68.494557][ T6425] kvasprintf+0xbc/0x150 [ 68.494589][ T6425] ? __pfx_kvasprintf+0x10/0x10 [ 68.494641][ T6425] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 68.494676][ T6425] ? __kthread_create_on_node+0xce/0x3f0 [ 68.494707][ T6425] ? __pfx_cryptomgr_probe+0x10/0x10 [ 68.494737][ T6425] __kthread_create_on_node+0x186/0x3f0 [ 68.494765][ T6425] ? __pfx___kthread_create_on_node+0x10/0x10 [ 68.494807][ T6425] ? __pfx_cryptomgr_probe+0x10/0x10 [ 68.494836][ T6425] kthread_create_on_node+0xc7/0x100 [ 68.494861][ T6425] ? __pfx_kthread_create_on_node+0x10/0x10 [ 68.494889][ T6425] ? __kasan_kmalloc+0xaa/0xb0 [ 68.494913][ T6425] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 68.494943][ T6425] ? cryptomgr_notify+0xa4/0xb40 [ 68.494976][ T6425] cryptomgr_notify+0x953/0xb40 [ 68.495035][ T6425] ? __kasan_kmalloc+0xaa/0xb0 [ 68.495060][ T6425] notifier_call_chain+0x99/0x3f0 [ 68.495102][ T6425] blocking_notifier_call_chain+0x69/0xa0 [ 68.495135][ T6425] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 68.495161][ T6425] crypto_alloc_tfm_node+0xd3/0x260 [ 68.495187][ T6425] esp_init_authenc.constprop.0+0x1df/0xb50 [ 68.495219][ T6425] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 68.495255][ T6425] ? find_held_lock+0x2b/0x80 [ 68.495286][ T6425] esp6_init_state+0x3a6/0x500 [ 68.495308][ T6425] __xfrm_init_state+0x842/0x1dc0 [ 68.495334][ T6425] xfrm_init_state+0x1c/0xa0 [ 68.495355][ T6425] pfkey_add+0x1c88/0x2f10 [ 68.495382][ T6425] ? __pfx_pfkey_add+0x10/0x10 [ 68.495402][ T6425] ? kfree_skbmem+0x19f/0x210 [ 68.495426][ T6425] ? sk_skb_reason_drop+0x114/0x1b0 [ 68.495448][ T6425] ? pfkey_broadcast+0x28c/0x420 [ 68.495470][ T6425] ? __pfx_pfkey_add+0x10/0x10 [ 68.495491][ T6425] pfkey_process+0x5c3/0x810 [ 68.495517][ T6425] ? __pfx_pfkey_process+0x10/0x10 [ 68.495539][ T6425] ? pfkey_sendmsg+0x41a/0x840 [ 68.495575][ T6425] ? __pfx___alloc_skb+0x10/0x10 [ 68.495608][ T6425] pfkey_sendmsg+0x428/0x840 [ 68.495634][ T6425] ____sys_sendmsg+0xa4d/0xbe0 [ 68.495656][ T6425] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 68.495683][ T6425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.495719][ T6425] ___sys_sendmsg+0x190/0x1e0 [ 68.495745][ T6425] ? __pfx____sys_sendmsg+0x10/0x10 [ 68.495766][ T6425] ? futex_wait+0x11e/0x370 [ 68.495803][ T6425] ? find_held_lock+0x2b/0x80 [ 68.495844][ T6425] __sys_sendmsg+0x160/0x210 [ 68.495863][ T6425] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.495894][ T6425] do_syscall_64+0x123/0x790 [ 68.495925][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.495945][ T6425] RIP: 0033:0x7fb62699e159 [ 68.495961][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.495980][ T6425] RSP: 002b:00007fb6278d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.495997][ T6425] RAX: ffffffffffffffda RBX: 00007fb626c25fa0 RCX: 00007fb62699e159 [ 68.496010][ T6425] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 68.496021][ T6425] RBP: 00007fb626a35024 R08: 0000000000000000 R09: 0000000000000000 [ 68.496033][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.496044][ T6425] R13: 00007fb626c26038 R14: 00007fb626c25fa0 R15: 00007ffc6515c4e8 [ 68.496068][ T6425] [ 68.502018][ T5599] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 68.506485][ T5599] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 68.512826][ T5599] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 68.559702][ T6429] FAULT_INJECTION: forcing a failure. [ 68.559702][ T6429] name failslab, interval 1, probability 0, space 0, times 0 [ 68.559722][ T6429] CPU: 2 UID: 0 PID: 6429 Comm: syz.3.164 Not tainted syzkaller #0 PREEMPT(full) [ 68.559735][ T6429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.559742][ T6429] Call Trace: [ 68.559746][ T6429] [ 68.559751][ T6429] dump_stack_lvl+0x100/0x190 [ 68.559771][ T6429] should_fail_ex.cold+0x5/0xa [ 68.559801][ T6429] should_failslab+0xc2/0x120 [ 68.559815][ T6429] __kmalloc_noprof+0xfc/0x840 [ 68.559825][ T6429] ? rcu_is_watching+0x13/0xc0 [ 68.559840][ T6429] ? tomoyo_realpath_from_path+0xb6/0x690 [ 68.559856][ T6429] tomoyo_realpath_from_path+0xb6/0x690 [ 68.559871][ T6429] tomoyo_check_open_permission+0x2af/0x3c0 [ 68.559887][ T6429] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 68.559908][ T6429] ? hook_file_open+0x248/0x8e0 [ 68.559930][ T6429] ? path_get+0x61/0x80 [ 68.559946][ T6429] tomoyo_file_open+0x6b/0x90 [ 68.559960][ T6429] security_file_open+0xb5/0x1e0 [ 68.559972][ T6429] do_dentry_open+0x588/0x14d0 [ 68.559986][ T6429] vfs_open+0x82/0x3f0 [ 68.560001][ T6429] path_openat+0x19fa/0x2440 [ 68.560015][ T6429] ? __pfx_path_openat+0x10/0x10 [ 68.560032][ T6429] do_file_open+0x20e/0x430 [ 68.560046][ T6429] ? __pfx_do_file_open+0x10/0x10 [ 68.560067][ T6429] ? _raw_spin_unlock+0x28/0x50 [ 68.560078][ T6429] ? alloc_fd+0x471/0x7a0 [ 68.560095][ T6429] do_sys_openat2+0x10f/0x1e0 [ 68.560109][ T6429] ? __pfx_do_sys_openat2+0x10/0x10 [ 68.560122][ T6429] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 68.560138][ T6429] __x64_sys_openat+0x12d/0x210 [ 68.560153][ T6429] ? __pfx___x64_sys_openat+0x10/0x10 [ 68.560172][ T6429] do_syscall_64+0x123/0x790 [ 68.560186][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.560198][ T6429] RIP: 0033:0x7fb62695e98e [ 68.560207][ T6429] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.560218][ T6429] RSP: 002b:00007fb6278d1ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.560229][ T6429] RAX: ffffffffffffffda RBX: 00007fb6278d46c0 RCX: 00007fb62695e98e [ 68.560236][ T6429] RDX: 0000000000000002 RSI: 00007fb626a343aa RDI: ffffffffffffff9c [ 68.560242][ T6429] RBP: 00007fb626a35024 R08: 0000000000000000 R09: 0000000000000000 [ 68.560248][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000034 [ 68.560255][ T6429] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffc6515c4e8 [ 68.560268][ T6429] [ 68.560309][ T6429] ERROR: Out of memory at tomoyo_realpath_from_path. [ 68.834635][ T25] ti_usb_3410_5052 5-1:9.140: TI USB 3410 1 port adapter converter detected [ 68.835157][ T25] ti_usb_3410_5052 5-1:9.140: missing endpoints [ 68.843809][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 68.843920][ T42] audit: type=1400 audit(1788587911.485:325): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.853431][ T25] usb 5-1: USB disconnect, device number 4 [ 68.927028][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 68.959443][ T64] usb 8-1: device descriptor read/64, error -71 [ 69.196074][ T6441] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 69.202789][ T64] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 69.338174][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 69.351338][ T64] usb 8-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 69.352335][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.565249][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 69.771123][ T6421] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 69.771167][ T6421] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 69.778734][ T6421] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 69.784821][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 69.786867][ T64] hid-sensor-hub 0003:8086:0000.0004: hiddev0,hidraw1: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.3-1/input0 [ 69.789325][ T5842] usb 7-1: USB disconnect, device number 3 [ 69.801786][ T5842] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 69.813397][ T5842] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 69.814021][ T5842] ti_usb_3410_5052 7-1:2.0: device disconnected [ 69.877954][ T42] audit: type=1400 audit(1788587912.515:326): avc: denied { create } for pid=6465 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.878705][ T42] audit: type=1400 audit(1788587912.515:327): avc: denied { bind } for pid=6465 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.879553][ T42] audit: type=1400 audit(1788587912.525:328): avc: denied { setopt } for pid=6465 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.880349][ T42] audit: type=1400 audit(1788587912.525:329): avc: denied { accept } for pid=6465 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.880663][ T42] audit: type=1400 audit(1788587912.525:330): avc: denied { write } for pid=6465 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.070010][ T6468] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 70.156198][ T42] audit: type=1400 audit(1788587912.795:331): avc: denied { search } for pid=6471 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.156313][ T42] audit: type=1400 audit(1788587912.795:332): avc: denied { search } for pid=6471 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.162431][ T42] audit: type=1400 audit(1788587912.795:333): avc: denied { search } for pid=6471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.162463][ T42] audit: type=1400 audit(1788587912.805:334): avc: denied { search } for pid=6471 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.206138][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 70.395904][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 70.401976][ T5929] block nbd3: Receive control failed (result -107) [ 70.524342][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 70.575422][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 70.681987][ T6521] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 70.823793][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 70.840281][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 70.849548][ T5875] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.855172][ T5875] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.858342][ T5875] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.863615][ T5875] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.170051][ T5599] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.320585][ T5599] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 71.321573][ T5599] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 71.323948][ T5599] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 71.325613][ T5599] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.325626][ T5599] usb 7-1: Product: syz [ 71.325633][ T5599] usb 7-1: Manufacturer: syz [ 71.325640][ T5599] usb 7-1: SerialNumber: syz [ 71.333162][ T5599] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 71.342234][ T5599] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 71.344848][ T5599] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 71.443128][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.443243][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.462750][ T6573] FAULT_INJECTION: forcing a failure. [ 71.462750][ T6573] name failslab, interval 1, probability 0, space 0, times 0 [ 71.462802][ T6573] CPU: 3 UID: 0 PID: 6573 Comm: syz.0.197 Not tainted syzkaller #0 PREEMPT(full) [ 71.462827][ T6573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.462841][ T6573] Call Trace: [ 71.462849][ T6573] [ 71.462857][ T6573] dump_stack_lvl+0x100/0x190 [ 71.462892][ T6573] should_fail_ex.cold+0x5/0xa [ 71.462923][ T6573] should_failslab+0xc2/0x120 [ 71.462949][ T6573] __kmalloc_noprof+0xfc/0x840 [ 71.462999][ T6573] ? virtqueue_add_split+0x25c/0x1d30 [ 71.463045][ T6573] virtqueue_add_split+0x25c/0x1d30 [ 71.463077][ T6573] ? __lock_acquire+0x4c5/0x1ec0 [ 71.463102][ T6573] ? p9pdu_vwritef+0x57f/0x1dc0 [ 71.463132][ T6573] ? __pfx_virtqueue_add_split+0x10/0x10 [ 71.463165][ T6573] ? __virt_addr_valid+0x161/0x430 [ 71.463187][ T6573] ? find_held_lock+0x2b/0x80 [ 71.463215][ T6573] ? __virt_addr_valid+0x22a/0x430 [ 71.463234][ T6573] ? __virt_addr_valid+0x22a/0x430 [ 71.463259][ T6573] virtqueue_add_sgs+0x207/0x2b0 [ 71.463301][ T6573] p9_virtio_request+0x26d/0x6d0 [ 71.463336][ T6573] ? __pfx_p9_virtio_request+0x10/0x10 [ 71.463360][ T6573] ? p9_client_prepare_req+0x112/0x4d0 [ 71.463389][ T6573] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 71.463429][ T6573] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 71.463455][ T6573] p9_client_rpc+0x359/0xd60 [ 71.463504][ T6573] ? __pfx_p9_client_rpc+0x10/0x10 [ 71.463536][ T6573] ? idr_alloc_u32+0x22b/0x320 [ 71.463564][ T6573] ? __pfx_idr_alloc_u32+0x10/0x10 [ 71.463588][ T6573] ? do_raw_spin_lock+0x128/0x260 [ 71.463614][ T6573] ? find_held_lock+0x2b/0x80 [ 71.463641][ T6573] ? p9_fid_create+0x26d/0x460 [ 71.463670][ T6573] ? rcu_is_watching+0x13/0xc0 [ 71.463697][ T6573] ? trace_9p_fid_ref+0x72/0x1f0 [ 71.463728][ T6573] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 71.463752][ T6573] p9_client_xattrwalk+0xc0/0x2a0 [ 71.463784][ T6573] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 71.463810][ T6573] v9fs_fid_xattr_get+0x10f/0x300 [ 71.463835][ T6573] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 71.463866][ T6573] ? __lock_acquire+0x4c5/0x1ec0 [ 71.463891][ T6573] ? v9fs_fid_lookup+0xec/0xf50 [ 71.463923][ T6573] ? __pfx_v9fs_xattr_handler_get+0x10/0x10 [ 71.463948][ T6573] v9fs_xattr_handler_get+0x6b/0x120 [ 71.463978][ T6573] __vfs_getxattr+0x13d/0x1a0 [ 71.464005][ T6573] ? __pfx___vfs_getxattr+0x10/0x10 [ 71.464034][ T6573] ? lock_acquire+0x1d1/0x380 [ 71.464064][ T6573] cap_inode_need_killpriv+0x40/0x60 [ 71.464094][ T6573] security_inode_need_killpriv+0x87/0x1e0 [ 71.464118][ T6573] file_remove_privs_flags+0x2b8/0x590 [ 71.464151][ T6573] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 71.464182][ T6573] ? generic_write_checks+0x321/0x490 [ 71.464218][ T6573] ? __pfx_generic_write_checks+0x10/0x10 [ 71.464258][ T6573] netfs_unbuffered_write_iter+0x1c9/0x720 [ 71.464286][ T6573] ? __lock_acquire+0x4c5/0x1ec0 [ 71.464310][ T6573] v9fs_file_write_iter+0xbf/0x100 [ 71.464333][ T6573] do_iter_readv_writev+0x6f7/0x930 [ 71.464368][ T6573] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 71.464399][ T6573] ? lock_acquire+0x1d1/0x380 [ 71.464434][ T6573] vfs_writev+0x360/0xdd0 [ 71.464468][ T6573] ? __lock_acquire+0x4c5/0x1ec0 [ 71.464493][ T6573] ? __pfx_vfs_writev+0x10/0x10 [ 71.464521][ T6573] ? find_held_lock+0x2b/0x80 [ 71.464549][ T6573] ? lock_acquire+0x1d1/0x380 [ 71.464566][ T6573] ? __fget_files+0x34/0x3d0 [ 71.464596][ T6573] ? __fget_files+0x21f/0x3d0 [ 71.464624][ T6573] ? do_pwritev+0x1ac/0x270 [ 71.464649][ T6573] do_pwritev+0x1ac/0x270 [ 71.464678][ T6573] ? __pfx_do_pwritev+0x10/0x10 [ 71.464706][ T6573] ? ksys_write+0x1ac/0x250 [ 71.464723][ T6573] ? __pfx_ksys_write+0x10/0x10 [ 71.464744][ T6573] __x64_sys_pwritev2+0xef/0x160 [ 71.464767][ T6573] do_syscall_64+0x123/0x790 [ 71.464791][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.464810][ T6573] RIP: 0033:0x7fe58cd9e159 [ 71.464826][ T6573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.464843][ T6573] RSP: 002b:00007fe58dc86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 71.464862][ T6573] RAX: ffffffffffffffda RBX: 00007fe58d025fa0 RCX: 00007fe58cd9e159 [ 71.464874][ T6573] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000003 [ 71.464885][ T6573] RBP: 00007fe58dc86090 R08: 000000000000000a R09: 0000000000000014 [ 71.464896][ T6573] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 71.464907][ T6573] R13: 00007fe58d026038 R14: 00007fe58d025fa0 R15: 00007fff38aad788 [ 71.464933][ T6573] [ 71.631536][ T5599] usb 8-1: USB disconnect, device number 8 [ 71.849957][ T6583] openvswitch: netlink: Message has 4 unknown bytes. [ 72.156362][ T6598] FAULT_INJECTION: forcing a failure. [ 72.156362][ T6598] name failslab, interval 1, probability 0, space 0, times 0 [ 72.156418][ T6598] CPU: 0 UID: 0 PID: 6598 Comm: syz.3.207 Not tainted syzkaller #0 PREEMPT(full) [ 72.156449][ T6598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.156460][ T6598] Call Trace: [ 72.156467][ T6598] [ 72.156473][ T6598] dump_stack_lvl+0x100/0x190 [ 72.156499][ T6598] should_fail_ex.cold+0x5/0xa [ 72.156522][ T6598] should_failslab+0xc2/0x120 [ 72.156542][ T6598] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 72.156561][ T6598] ? __kthread_create_on_node+0x186/0x3f0 [ 72.156583][ T6598] kvasprintf+0xbc/0x150 [ 72.156605][ T6598] ? __pfx_kvasprintf+0x10/0x10 [ 72.156627][ T6598] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 72.156649][ T6598] ? __kthread_create_on_node+0xce/0x3f0 [ 72.156669][ T6598] ? __pfx_cryptomgr_probe+0x10/0x10 [ 72.156690][ T6598] __kthread_create_on_node+0x186/0x3f0 [ 72.156710][ T6598] ? __pfx___kthread_create_on_node+0x10/0x10 [ 72.156739][ T6598] ? __pfx_cryptomgr_probe+0x10/0x10 [ 72.156760][ T6598] kthread_create_on_node+0xc7/0x100 [ 72.156778][ T6598] ? __pfx_kthread_create_on_node+0x10/0x10 [ 72.156799][ T6598] ? __kasan_kmalloc+0xaa/0xb0 [ 72.156816][ T6598] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 72.156838][ T6598] ? cryptomgr_notify+0xa4/0xb40 [ 72.156862][ T6598] cryptomgr_notify+0x953/0xb40 [ 72.156884][ T6598] ? __kasan_kmalloc+0xaa/0xb0 [ 72.156901][ T6598] notifier_call_chain+0x99/0x3f0 [ 72.156925][ T6598] blocking_notifier_call_chain+0x69/0xa0 [ 72.156948][ T6598] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 72.156969][ T6598] crypto_alloc_tfm_node+0xd3/0x260 [ 72.156990][ T6598] esp_init_authenc.constprop.0+0x1df/0xb50 [ 72.157012][ T6598] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 72.157039][ T6598] ? find_held_lock+0x2b/0x80 [ 72.157068][ T6598] esp6_init_state+0x3a6/0x500 [ 72.157085][ T6598] __xfrm_init_state+0x842/0x1dc0 [ 72.157107][ T6598] xfrm_init_state+0x1c/0xa0 [ 72.157124][ T6598] pfkey_add+0x1c88/0x2f10 [ 72.157149][ T6598] ? __pfx_pfkey_add+0x10/0x10 [ 72.157166][ T6598] ? kfree_skbmem+0x19f/0x210 [ 72.157188][ T6598] ? sk_skb_reason_drop+0x114/0x1b0 [ 72.157221][ T6598] ? pfkey_broadcast+0x28c/0x420 [ 72.157240][ T6598] ? __pfx_pfkey_add+0x10/0x10 [ 72.157257][ T6598] pfkey_process+0x5c3/0x810 [ 72.157278][ T6598] ? __pfx_pfkey_process+0x10/0x10 [ 72.157294][ T6598] ? pfkey_sendmsg+0x41a/0x840 [ 72.157324][ T6598] ? __pfx___alloc_skb+0x10/0x10 [ 72.157353][ T6598] pfkey_sendmsg+0x428/0x840 [ 72.157377][ T6598] ____sys_sendmsg+0xa4d/0xbe0 [ 72.157397][ T6598] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 72.157418][ T6598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.157448][ T6598] ___sys_sendmsg+0x190/0x1e0 [ 72.157469][ T6598] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.157490][ T6598] ? futex_wait+0x11e/0x370 [ 72.157520][ T6598] ? find_held_lock+0x2b/0x80 [ 72.157554][ T6598] __sys_sendmsg+0x160/0x210 [ 72.157569][ T6598] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.157595][ T6598] do_syscall_64+0x123/0x790 [ 72.157616][ T6598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.157632][ T6598] RIP: 0033:0x7fb62699e159 [ 72.157645][ T6598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.157660][ T6598] RSP: 002b:00007fb6278d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.157676][ T6598] RAX: ffffffffffffffda RBX: 00007fb626c25fa0 RCX: 00007fb62699e159 [ 72.157686][ T6598] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 72.157695][ T6598] RBP: 00007fb626a35024 R08: 0000000000000000 R09: 0000000000000000 [ 72.157704][ T6598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.157712][ T6598] R13: 00007fb626c26038 R14: 00007fb626c25fa0 R15: 00007ffc6515c4e8 [ 72.157734][ T6598] [ 72.396355][ T6611] gfs2: gfs2 mount does not exist [ 72.641286][ T6550] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 72.641424][ T6550] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 72.649385][ T6550] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 72.652029][ T5599] usb 7-1: USB disconnect, device number 4 [ 72.665348][ T5599] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 72.676565][ T5599] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 72.677499][ T5599] ti_usb_3410_5052 7-1:2.0: device disconnected [ 72.789473][ T30] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 72.919544][ T30] usb 8-1: device descriptor read/64, error -71 [ 72.972352][ T5739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.973516][ T5739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.974117][ T5739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.975862][ T5739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.977174][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.179288][ T30] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 73.310299][ T30] usb 8-1: device descriptor read/64, error -71 [ 73.368166][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.368349][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.368414][ T6627] bridge_slave_0: entered allmulticast mode [ 73.369160][ T6627] bridge_slave_0: entered promiscuous mode [ 73.370499][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.370574][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.370634][ T6627] bridge_slave_1: entered allmulticast mode [ 73.371368][ T6627] bridge_slave_1: entered promiscuous mode [ 73.386002][ T6627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.387357][ T6627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.400382][ T6627] team0: Port device team_slave_0 added [ 73.401967][ T6627] team0: Port device team_slave_1 added [ 73.413402][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.413446][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.413488][ T6627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.414391][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.414399][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.414412][ T6627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.421439][ T30] usb usb8-port1: attempt power cycle [ 73.436341][ T6627] hsr_slave_0: entered promiscuous mode [ 73.436758][ T6627] hsr_slave_1: entered promiscuous mode [ 73.437044][ T6627] debugfs: 'hsr0' already exists in 'hsr' [ 73.437055][ T6627] Cannot create hsr debugfs directory [ 73.561451][ T6627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.567928][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.568741][ T6627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.575118][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.576254][ T6627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.582517][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.583412][ T6627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.587696][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.607694][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.607767][ T6627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.607903][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.607960][ T6627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.663076][ T6627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.680335][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.683556][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.698026][ T6627] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.704913][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.705972][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.712415][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.712539][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.762486][ T30] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 73.792157][ T30] usb 8-1: device descriptor read/8, error -71 [ 74.021798][ T6627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.029339][ T30] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 74.050990][ T30] usb 8-1: device descriptor read/8, error -71 [ 74.170148][ T30] usb usb8-port1: unable to enumerate USB device [ 74.208474][ T6627] veth0_vlan: entered promiscuous mode [ 74.214665][ T6627] veth1_vlan: entered promiscuous mode [ 74.228468][ T6627] veth0_macvtap: entered promiscuous mode [ 74.236104][ T6627] veth1_macvtap: entered promiscuous mode [ 74.242804][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.248490][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.290390][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.313555][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.313641][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.345576][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.345635][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.359540][ T5875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.361184][ T5875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.361227][ T5875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.414703][ T6686] tipc: Enabling of bearer rejected, failed to enable media [ 74.426066][ T6688] __nla_validate_parse: 5 callbacks suppressed [ 74.426193][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 74.477553][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 74.480772][ T5929] block nbd4: Receive control failed (result -107) [ 74.506984][ T6694] e1000e 0000:00:02.0 eth1: removed PHC [ 74.569368][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 74.569483][ T42] audit: type=1400 audit(1788587917.205:390): avc: denied { write } for pid=6695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.594119][ T6701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.594948][ T42] audit: type=1400 audit(1788587917.235:391): avc: denied { getopt } for pid=6692 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.648324][ T6694] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 74.662140][ T42] audit: type=1400 audit(1788587917.305:392): avc: denied { write } for pid=6704 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.710837][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 74.732976][ T5820] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 74.831997][ T42] audit: type=1400 audit(1788587917.475:393): avc: denied { write } for pid=6711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.861919][ T6698] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 74.870412][ T6698] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 74.870501][ T6698] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 74.870579][ T6698] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 74.870679][ T6698] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 74.870890][ T6698] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 74.871280][ T6698] pci 0000:00:02.0: enabling Extended Tags [ 74.890768][ T5820] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 74.893875][ T5820] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.897870][ T5820] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.908502][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.908582][ T5820] usb 7-1: Product: syz [ 74.908664][ T5820] usb 7-1: Manufacturer: syz [ 74.908677][ T5820] usb 7-1: SerialNumber: syz [ 74.917109][ T5820] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 74.929478][ T5820] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 74.935675][ T5820] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 74.940842][ T42] audit: type=1400 audit(1788587917.575:394): avc: denied { write } for pid=6714 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.953257][ T6698] pci 0000:00:02.0: Adding to iommu group 2 [ 74.964778][ T6698] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 74.967249][ T6698] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 74.968746][ T6698] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 74.975618][ T6698] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 74.978660][ T6698] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 75.041035][ T5733] Bluetooth: hci4: command tx timeout [ 75.049075][ T6698] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 75.064894][ T42] audit: type=1400 audit(1788587917.705:395): avc: denied { write } for pid=6721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.115041][ T42] audit: type=1400 audit(1788587917.755:396): avc: denied { write } for pid=6725 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.124792][ T6698] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 75.187266][ T42] audit: type=1400 audit(1788587917.825:397): avc: denied { write } for pid=6727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.198367][ T42] audit: type=1400 audit(1788587917.835:398): avc: denied { ioctl } for pid=6729 comm="syz.4.234" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17853 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.212733][ T42] audit: type=1400 audit(1788587917.855:399): avc: denied { mount } for pid=6729 comm="syz.4.234" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 75.240663][ T6698] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 75.240739][ T6698] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 75.241284][ T6698] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 75.637841][ T6777] openvswitch: netlink: Message has 4 unknown bytes. [ 75.637939][ T6765] FAULT_INJECTION: forcing a failure. [ 75.637939][ T6765] name failslab, interval 1, probability 0, space 0, times 0 [ 75.637959][ T6765] CPU: 2 UID: 0 PID: 6765 Comm: syz.3.243 Not tainted syzkaller #0 PREEMPT(full) [ 75.637975][ T6765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.637982][ T6765] Call Trace: [ 75.637986][ T6765] [ 75.637991][ T6765] dump_stack_lvl+0x100/0x190 [ 75.638025][ T6765] should_fail_ex.cold+0x5/0xa [ 75.638043][ T6765] should_failslab+0xc2/0x120 [ 75.638067][ T6765] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 75.638088][ T6765] ? __kthread_create_on_node+0x186/0x3f0 [ 75.638113][ T6765] kvasprintf+0xbc/0x150 [ 75.638138][ T6765] ? __pfx_kvasprintf+0x10/0x10 [ 75.638158][ T6765] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 75.638174][ T6765] ? __kthread_create_on_node+0xce/0x3f0 [ 75.638190][ T6765] ? __pfx_cryptomgr_probe+0x10/0x10 [ 75.638205][ T6765] __kthread_create_on_node+0x186/0x3f0 [ 75.638220][ T6765] ? __pfx___kthread_create_on_node+0x10/0x10 [ 75.638240][ T6765] ? __pfx_cryptomgr_probe+0x10/0x10 [ 75.638255][ T6765] kthread_create_on_node+0xc7/0x100 [ 75.638268][ T6765] ? __pfx_kthread_create_on_node+0x10/0x10 [ 75.638283][ T6765] ? __kasan_kmalloc+0xaa/0xb0 [ 75.638296][ T6765] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 75.638312][ T6765] ? cryptomgr_notify+0xa4/0xb40 [ 75.638329][ T6765] cryptomgr_notify+0x953/0xb40 [ 75.638345][ T6765] ? __kasan_kmalloc+0xaa/0xb0 [ 75.638358][ T6765] notifier_call_chain+0x99/0x3f0 [ 75.638376][ T6765] blocking_notifier_call_chain+0x69/0xa0 [ 75.638393][ T6765] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 75.638408][ T6765] crypto_alloc_tfm_node+0xd3/0x260 [ 75.638423][ T6765] esp_init_authenc.constprop.0+0x1df/0xb50 [ 75.638445][ T6765] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 75.638464][ T6765] ? find_held_lock+0x2b/0x80 [ 75.638500][ T6765] esp6_init_state+0x3a6/0x500 [ 75.638514][ T6765] __xfrm_init_state+0x842/0x1dc0 [ 75.638531][ T6765] xfrm_init_state+0x1c/0xa0 [ 75.638548][ T6765] pfkey_add+0x1c88/0x2f10 [ 75.638565][ T6765] ? __pfx_pfkey_add+0x10/0x10 [ 75.638578][ T6765] ? kfree_skbmem+0x19f/0x210 [ 75.638593][ T6765] ? sk_skb_reason_drop+0x114/0x1b0 [ 75.638608][ T6765] ? pfkey_broadcast+0x28c/0x420 [ 75.638623][ T6765] ? __pfx_pfkey_add+0x10/0x10 [ 75.638637][ T6765] pfkey_process+0x5c3/0x810 [ 75.638654][ T6765] ? __pfx_pfkey_process+0x10/0x10 [ 75.638668][ T6765] ? pfkey_sendmsg+0x41a/0x840 [ 75.638691][ T6765] ? __pfx___alloc_skb+0x10/0x10 [ 75.638713][ T6765] pfkey_sendmsg+0x428/0x840 [ 75.638728][ T6765] ____sys_sendmsg+0xa4d/0xbe0 [ 75.638741][ T6765] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 75.638756][ T6765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.638776][ T6765] ___sys_sendmsg+0x190/0x1e0 [ 75.638792][ T6765] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.638808][ T6765] ? futex_wait+0x11e/0x370 [ 75.638830][ T6765] ? find_held_lock+0x2b/0x80 [ 75.638853][ T6765] __sys_sendmsg+0x160/0x210 [ 75.638864][ T6765] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.638883][ T6765] do_syscall_64+0x123/0x790 [ 75.638901][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.638914][ T6765] RIP: 0033:0x7fb62699e159 [ 75.638924][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.638936][ T6765] RSP: 002b:00007fb6278d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.638974][ T6765] RAX: ffffffffffffffda RBX: 00007fb626c25fa0 RCX: 00007fb62699e159 [ 75.638982][ T6765] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 75.638990][ T6765] RBP: 00007fb626a35024 R08: 0000000000000000 R09: 0000000000000000 [ 75.638997][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.639005][ T6765] R13: 00007fb626c26038 R14: 00007fb626c25fa0 R15: 00007ffc6515c4e8 [ 75.639020][ T6765] [ 75.703494][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 75.796802][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 75.839959][ T6795] netlink: 64 bytes leftover after parsing attributes in process `syz.3.251'. [ 75.844450][ T43] IPVS: starting estimator thread 0... [ 75.907338][ T6800] capability: warning: `syz.3.252' uses deprecated v2 capabilities in a way that may be insecure [ 75.950692][ T6796] IPVS: using max 44 ests per chain, 105600 per kthread [ 76.014998][ T6803] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 76.028357][ T6812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.104791][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 76.239626][ T6690] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 76.239753][ T6690] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 76.239965][ T6690] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 76.248106][ T5820] usb 7-1: USB disconnect, device number 5 [ 76.266316][ T5820] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 76.272705][ T5820] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 76.275527][ T5820] ti_usb_3410_5052 7-1:2.0: device disconnected [ 76.308440][ T5441] 8021q: adding VLAN 0 to HW filter on device eth1 [ 76.377110][ T6847] openvswitch: netlink: Duplicate or invalid key (type 0). [ 76.432550][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.266'. [ 76.438134][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 76.485870][ T6855] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 76.563882][ T2339] cfg80211: failed to load regulatory.db [ 76.687359][ T6868] FAULT_INJECTION: forcing a failure. [ 76.687359][ T6868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.687416][ T6868] CPU: 1 UID: 0 PID: 6868 Comm: syz.3.272 Not tainted syzkaller #0 PREEMPT(full) [ 76.687441][ T6868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.687449][ T6868] Call Trace: [ 76.687453][ T6868] [ 76.687458][ T6868] dump_stack_lvl+0x100/0x190 [ 76.687478][ T6868] should_fail_ex.cold+0x5/0xa [ 76.687495][ T6868] strncpy_from_user+0x3b/0x2d0 [ 76.687508][ T6868] do_getname+0x78/0x390 [ 76.687530][ T6868] do_sys_openat2+0xc7/0x1e0 [ 76.687547][ T6868] ? __pfx_do_sys_openat2+0x10/0x10 [ 76.687569][ T6868] __x64_sys_openat+0x12d/0x210 [ 76.687589][ T6868] ? __pfx___x64_sys_openat+0x10/0x10 [ 76.687616][ T6868] do_syscall_64+0x123/0x790 [ 76.687641][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.687662][ T6868] RIP: 0033:0x7fb62699e159 [ 76.687674][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.687684][ T6868] RSP: 002b:00007fb6278d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.687696][ T6868] RAX: ffffffffffffffda RBX: 00007fb626c25fa0 RCX: 00007fb62699e159 [ 76.687702][ T6868] RDX: 0000000000002c41 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 76.687709][ T6868] RBP: 00007fb626a35024 R08: 0000000000000000 R09: 0000000000000000 [ 76.687715][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.687722][ T6868] R13: 00007fb626c26038 R14: 00007fb626c25fa0 R15: 00007ffc6515c4e8 [ 76.687735][ T6868] [ 76.744648][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 76.898228][ T6883] openvswitch: netlink: Message has 4 unknown bytes. [ 76.931245][ T6880] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.018903][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 77.119332][ T5733] Bluetooth: hci4: command tx timeout [ 77.309424][ T5820] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.434171][ T6908] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.459060][ T6908] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 77.462581][ T6908] bond1: (slave sit1): Error -95 calling set_mac_address [ 77.464665][ T5820] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 77.474206][ T5820] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.480712][ T5820] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.483620][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.483647][ T5820] usb 7-1: Product: syz [ 77.483660][ T5820] usb 7-1: Manufacturer: syz [ 77.483673][ T5820] usb 7-1: SerialNumber: syz [ 77.492055][ T5820] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 77.496531][ T5820] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 77.499269][ T5820] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 77.969333][ T5820] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 78.120092][ T5820] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 78.121647][ T5820] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 78.121666][ T5820] usb 8-1: config 1 has no interface number 0 [ 78.123539][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.123555][ T5820] usb 8-1: Product: syz [ 78.123567][ T5820] usb 8-1: Manufacturer: syz [ 78.123578][ T5820] usb 8-1: SerialNumber: syz [ 78.140856][ T5820] usb 8-1: 3:1 : does not exist [ 78.140964][ T5820] usb 8-1: 3:2 : does not exist [ 78.340164][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.340488][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.800497][ T6893] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 78.803178][ T6893] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 78.803526][ T6893] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 78.807777][ T5842] usb 7-1: USB disconnect, device number 6 [ 78.820819][ T5842] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 78.825540][ T5842] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 78.826426][ T5842] ti_usb_3410_5052 7-1:2.0: device disconnected [ 78.881260][ T6948] openvswitch: netlink: Duplicate or invalid key (type 0). [ 78.954472][ T6950] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 79.068771][ T6954] openvswitch: netlink: Message has 4 unknown bytes. [ 79.161924][ T6958] loop2: detected capacity change from 0 to 7 [ 79.167221][ T6958] Dev loop2: unable to read RDB block 7 [ 79.168929][ T6958] loop2: unable to read partition table [ 79.169073][ T6958] loop2: partition table beyond EOD, truncated [ 79.169130][ T6958] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 79.209328][ T5733] Bluetooth: hci4: command tx timeout [ 79.291492][ T6963] overlayfs: failed lookup in lower (newroot/94, name='file0', err=-40): overlapping layers [ 79.413596][ T6972] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 79.481329][ T6978] netlink: 'syz.4.316': attribute type 10 has an invalid length. [ 79.493844][ T6978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.496284][ T6978] team0: Port device netdevsim1 added [ 79.498673][ T6978] netlink: 'syz.4.316': attribute type 10 has an invalid length. [ 79.507794][ T6978] team0: Port device netdevsim1 removed [ 79.513999][ T6978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.515267][ T6978] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 79.533289][ T6980] __nla_validate_parse: 6 callbacks suppressed [ 79.533565][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 79.568587][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 79.618623][ T42] kauditd_printk_skb: 60 callbacks suppressed [ 79.618721][ T42] audit: type=1400 audit(1788587922.255:460): avc: denied { mount } for pid=6987 comm="syz.4.321" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.624219][ T42] audit: type=1400 audit(1788587922.265:461): avc: denied { setopt } for pid=6988 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.632510][ T42] audit: type=1400 audit(1788587922.275:462): avc: denied { read } for pid=6988 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.720836][ T6997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.910383][ T5842] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 80.070015][ T5842] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 80.071066][ T5842] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.071997][ T5842] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.074613][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.074633][ T5842] usb 7-1: Product: syz [ 80.074644][ T5842] usb 7-1: Manufacturer: syz [ 80.074657][ T5842] usb 7-1: SerialNumber: syz [ 80.094437][ T5842] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 80.095245][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 80.098227][ T5842] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 80.110609][ T5842] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 80.130430][ T931] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 80.280200][ T931] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.281159][ T931] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.281180][ T931] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.281193][ T931] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.281226][ T931] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.282629][ T931] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.282648][ T931] usb 9-1: Product: syz [ 80.282659][ T931] usb 9-1: Manufacturer: syz [ 80.294241][ T931] cdc_wdm 9-1:1.0: skipping garbage [ 80.294258][ T931] cdc_wdm 9-1:1.0: skipping garbage [ 80.311696][ T931] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 80.311714][ T931] cdc_wdm 9-1:1.0: Unknown control protocol [ 80.491806][ T931] usb 9-1: USB disconnect, device number 2 [ 80.810286][ T5842] usb 8-1: USB disconnect, device number 13 [ 80.845635][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'. [ 80.959505][ T931] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 81.011373][ T42] audit: type=1400 audit(1788587923.655:463): avc: denied { name_bind } for pid=7043 comm="syz.3.343" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 81.045452][ T7046] 9pnet_virtio: no channels available for device [ 81.045452][ T7046] [ 81.045746][ T7046] 9pnet_virtio: no channels available for device [ 81.045746][ T7046] [ 81.046029][ T7046] 9pnet_virtio: no channels available for device [ 81.046029][ T7046] [ 81.046254][ T7046] 9pnet_virtio: no channels available for device [ 81.046254][ T7046] [ 81.046560][ T7046] 9pnet_virtio: no channels available for device [ 81.046560][ T7046] [ 81.046787][ T7046] 9pnet_virtio: no channels available for device [ 81.046787][ T7046] [ 81.047046][ T7046] 9pnet_virtio: no channels available for device [ 81.047046][ T7046] [ 81.047280][ T7046] 9pnet_virtio: no channels available for device [ 81.047280][ T7046] [ 81.047514][ T7046] 9pnet_virtio: no channels available for device [ 81.047514][ T7046] [ 81.047743][ T7046] 9pnet_virtio: no channels available for device [ 81.047743][ T7046] [ 81.047978][ T7046] 9pnet_virtio: no channels available for device [ 81.047978][ T7046] [ 81.048213][ T7046] 9pnet_virtio: no channels available for device [ 81.048213][ T7046] [ 81.048469][ T7046] 9pnet_virtio: no channels available for device [ 81.048469][ T7046] [ 81.048762][ T7046] 9pnet_virtio: no channels available for device [ 81.048762][ T7046] [ 81.049080][ T7046] 9pnet_virtio: no channels available for device [ 81.049080][ T7046] [ 81.054051][ T7046] 9pnet_virtio: no channels available for device [ 81.054051][ T7046] [ 81.054346][ T7046] 9pnet_virtio: no channels available for device [ 81.054346][ T7046] [ 81.054622][ T7046] 9pnet_virtio: no channels available for device [ 81.054622][ T7046] [ 81.054863][ T7046] 9pnet_virtio: no channels available for device [ 81.054863][ T7046] [ 81.055113][ T7046] 9pnet_virtio: no channels available for device [ 81.055113][ T7046] [ 81.055379][ T7046] 9pnet_virtio: no channels available for device [ 81.055379][ T7046] [ 81.055601][ T7046] 9pnet_virtio: no channels available for device [ 81.055601][ T7046] [ 81.055828][ T7046] 9pnet_virtio: no channels available for device [ 81.055828][ T7046] [ 81.056055][ T7046] 9pnet_virtio: no channels available for device [ 81.056055][ T7046] [ 81.056281][ T7046] 9pnet_virtio: no channels available for device [ 81.056281][ T7046] [ 81.056505][ T7046] 9pnet_virtio: no channels available for device [ 81.056505][ T7046] [ 81.056835][ T7046] 9pnet_virtio: no channels available for device [ 81.056835][ T7046] [ 81.057068][ T7046] 9pnet_virtio: no channels available for device [ 81.057068][ T7046] [ 81.057291][ T7046] 9pnet_virtio: no channels available for device [ 81.057291][ T7046] [ 81.057514][ T7046] 9pnet_virtio: no channels available for device [ 81.057514][ T7046] [ 81.057738][ T7046] 9pnet_virtio: no channels available for device [ 81.057738][ T7046] [ 81.058014][ T7046] 9pnet_virtio: no channels available for device [ 81.058014][ T7046] [ 81.058243][ T7046] 9pnet_virtio: no channels available for device [ 81.058243][ T7046] [ 81.058484][ T7046] 9pnet_virtio: no channels available for device [ 81.058484][ T7046] [ 81.058713][ T7046] 9pnet_virtio: no channels available for device [ 81.058713][ T7046] [ 81.058958][ T7046] 9pnet_virtio: no channels available for device [ 81.058958][ T7046] [ 81.059282][ T7046] 9pnet_virtio: no channels available for device [ 81.059282][ T7046] [ 81.059514][ T7046] 9pnet_virtio: no channels available for device [ 81.059514][ T7046] [ 81.059813][ T7046] 9pnet_virtio: no channels available for device [ 81.059813][ T7046] [ 81.060042][ T7046] 9pnet_virtio: no channels available for device [ 81.060042][ T7046] [ 81.060265][ T7046] 9pnet_virtio: no channels available for device [ 81.060265][ T7046] [ 81.060486][ T7046] 9pnet_virtio: no channels available for device [ 81.060486][ T7046] [ 81.060748][ T7046] 9pnet_virtio: no channels available for device [ 81.060748][ T7046] [ 81.060971][ T7046] 9pnet_virtio: no channels available for device [ 81.060971][ T7046] [ 81.061199][ T7046] 9pnet_virtio: no channels available for device [ 81.061199][ T7046] [ 81.061420][ T7046] 9pnet_virtio: no channels available for device [ 81.061420][ T7046] [ 81.061653][ T7046] 9pnet_virtio: no channels available for device [ 81.061653][ T7046] [ 81.061882][ T7046] 9pnet_virtio: no channels available for device [ 81.061882][ T7046] [ 81.062133][ T7046] 9pnet_virtio: no channels available for device [ 81.062133][ T7046] [ 81.062361][ T7046] 9pnet_virtio: no channels available for device [ 81.062361][ T7046] [ 81.062595][ T7046] 9pnet_virtio: no channels available for device [ 81.062595][ T7046] [ 81.062821][ T7046] 9pnet_virtio: no channels available for device [ 81.062821][ T7046] [ 81.063082][ T7046] 9pnet_virtio: no channels available for device [ 81.063082][ T7046] [ 81.063308][ T7046] 9pnet_virtio: no channels available for device [ 81.063308][ T7046] [ 81.063539][ T7046] 9pnet_virtio: no channels available for device [ 81.063539][ T7046] [ 81.063760][ T7046] 9pnet_virtio: no channels available for device [ 81.063760][ T7046] [ 81.063988][ T7046] 9pnet_virtio: no channels available for device [ 81.063988][ T7046] [ 81.064216][ T7046] 9pnet_virtio: no channels available for device [ 81.064216][ T7046] [ 81.064449][ T7046] 9pnet_virtio: no channels available for device [ 81.064449][ T7046] [ 81.064673][ T7046] 9pnet_virtio: no channels available for device [ 81.064673][ T7046] [ 81.064898][ T7046] 9pnet_virtio: no channels available for device [ 81.064898][ T7046] [ 81.065129][ T7046] 9pnet_virtio: no channels available for device [ 81.065129][ T7046] [ 81.065374][ T7046] 9pnet_virtio: no channels available for device [ 81.065374][ T7046] [ 81.065603][ T7046] 9pnet_virtio: no channels available for device [ 81.065603][ T7046] [ 81.150297][ T931] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.202836][ T931] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.202854][ T931] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.202864][ T931] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.202885][ T931] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.204113][ T931] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.204127][ T931] usb 9-1: Product: syz [ 81.204134][ T931] usb 9-1: Manufacturer: syz [ 81.207028][ T931] cdc_wdm 9-1:1.0: skipping garbage [ 81.207038][ T931] cdc_wdm 9-1:1.0: skipping garbage [ 81.213552][ T931] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 81.213620][ T931] cdc_wdm 9-1:1.0: Unknown control protocol [ 81.279432][ T5733] Bluetooth: hci4: command tx timeout [ 81.360170][ T6993] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 81.360239][ T6993] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 81.362806][ T6993] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 81.372495][ T5842] usb 7-1: USB disconnect, device number 7 [ 81.379366][ T5842] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 81.386532][ T5842] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 81.390612][ T5842] ti_usb_3410_5052 7-1:2.0: device disconnected [ 81.479515][ T42] audit: type=1800 audit(1788587924.115:464): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.344" name="(" dev="sda1" ino=2039 res=0 errno=0 [ 81.553835][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 81.598173][ T42] audit: type=1400 audit(1788587924.235:465): avc: denied { append } for pid=7061 comm="syz.0.347" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.607791][ T42] audit: type=1400 audit(1788587924.245:466): avc: denied { read write } for pid=7007 comm="syz.4.329" name="cdc-wdm0" dev="devtmpfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 81.610373][ T42] audit: type=1400 audit(1788587924.245:467): avc: denied { open } for pid=7007 comm="syz.4.329" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 81.664923][ C2] cdc_wdm 9-1:1.0: Unexpected error -71 [ 81.665487][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 81.665525][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 81.665743][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 81.665755][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 81.666569][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 81.666580][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 81.666772][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 81.666781][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 81.666990][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 81.667000][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 81.667174][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 81.667183][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 81.667354][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 81.667364][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 81.667537][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 81.667547][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 81.667655][ T931] usb 9-1: USB disconnect, device number 3 [ 81.667724][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 81.667733][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 81.667740][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 81.906192][ T42] audit: type=1400 audit(1788587924.545:468): avc: denied { bind } for pid=7073 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.040395][ T42] audit: type=1400 audit(1788587924.685:469): avc: denied { write } for pid=7085 comm="syz.2.356" name="/" dev="9p" ino=72377401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.082996][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 82.086313][ T7086] FAULT_INJECTION: forcing a failure. [ 82.086313][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 82.086346][ T7086] CPU: 0 UID: 0 PID: 7086 Comm: syz.2.356 Not tainted syzkaller #0 PREEMPT(full) [ 82.086366][ T7086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.086376][ T7086] Call Trace: [ 82.086382][ T7086] [ 82.086390][ T7086] dump_stack_lvl+0x100/0x190 [ 82.086421][ T7086] should_fail_ex.cold+0x5/0xa [ 82.086447][ T7086] should_failslab+0xc2/0x120 [ 82.086468][ T7086] __kvmalloc_node_noprof+0x113/0x9b0 [ 82.086488][ T7086] ? netfs_extract_user_iter+0x161/0x690 [ 82.086513][ T7086] netfs_extract_user_iter+0x161/0x690 [ 82.086531][ T7086] ? __kmalloc_noprof+0x350/0x840 [ 82.086549][ T7086] ? rcu_is_watching+0x13/0xc0 [ 82.086571][ T7086] ? trace_netfs_folioq+0x72/0x220 [ 82.086594][ T7086] ? __pfx_netfs_extract_user_iter+0x10/0x10 [ 82.086615][ T7086] ? rolling_buffer_init+0x8d/0xc0 [ 82.086660][ T7086] ? netfs_create_write_req+0x54c/0x7b0 [ 82.086688][ T7086] netfs_unbuffered_write_iter_locked+0x36f/0xa80 [ 82.086711][ T7086] netfs_unbuffered_write_iter+0x442/0x720 [ 82.086730][ T7086] ? __lock_acquire+0x4c5/0x1ec0 [ 82.086750][ T7086] v9fs_file_write_iter+0xbf/0x100 [ 82.086770][ T7086] do_iter_readv_writev+0x6f7/0x930 [ 82.086810][ T7086] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 82.086833][ T7086] ? lock_acquire+0x1d1/0x380 [ 82.086859][ T7086] vfs_writev+0x360/0xdd0 [ 82.086884][ T7086] ? __lock_acquire+0x4c5/0x1ec0 [ 82.086903][ T7086] ? __pfx_vfs_writev+0x10/0x10 [ 82.086961][ T7086] ? find_held_lock+0x2b/0x80 [ 82.086989][ T7086] ? lock_acquire+0x1d1/0x380 [ 82.087004][ T7086] ? __fget_files+0x34/0x3d0 [ 82.087033][ T7086] ? __fget_files+0x21f/0x3d0 [ 82.087058][ T7086] ? do_pwritev+0x1ac/0x270 [ 82.087080][ T7086] do_pwritev+0x1ac/0x270 [ 82.087104][ T7086] ? __pfx_do_pwritev+0x10/0x10 [ 82.087127][ T7086] ? ksys_write+0x1ac/0x250 [ 82.087142][ T7086] ? __pfx_ksys_write+0x10/0x10 [ 82.087160][ T7086] __x64_sys_pwritev2+0xef/0x160 [ 82.087180][ T7086] do_syscall_64+0x123/0x790 [ 82.087203][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.087221][ T7086] RIP: 0033:0x7f6750d9e159 [ 82.087236][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.087253][ T7086] RSP: 002b:00007f6751d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 82.087271][ T7086] RAX: ffffffffffffffda RBX: 00007f6751025fa0 RCX: 00007f6750d9e159 [ 82.087282][ T7086] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000003 [ 82.087292][ T7086] RBP: 00007f6751d16090 R08: 000000000000000a R09: 0000000000000014 [ 82.087302][ T7086] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000002 [ 82.087312][ T7086] R13: 00007f6751026038 R14: 00007f6751025fa0 R15: 00007fff2e533d98 [ 82.087336][ T7086] [ 82.149338][ T931] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.216454][ T7091] FAULT_INJECTION: forcing a failure. [ 82.216454][ T7091] name failslab, interval 1, probability 0, space 0, times 0 [ 82.216518][ T7091] CPU: 0 UID: 0 PID: 7091 Comm: syz.2.358 Not tainted syzkaller #0 PREEMPT(full) [ 82.216546][ T7091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.216558][ T7091] Call Trace: [ 82.216563][ T7091] [ 82.216568][ T7091] dump_stack_lvl+0x100/0x190 [ 82.216593][ T7091] should_fail_ex.cold+0x5/0xa [ 82.216612][ T7091] should_failslab+0xc2/0x120 [ 82.216629][ T7091] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 82.216645][ T7091] ? __kthread_create_on_node+0x186/0x3f0 [ 82.216663][ T7091] kvasprintf+0xbc/0x150 [ 82.216683][ T7091] ? __pfx_kvasprintf+0x10/0x10 [ 82.216701][ T7091] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 82.216718][ T7091] ? __kthread_create_on_node+0xce/0x3f0 [ 82.216735][ T7091] ? __pfx_cryptomgr_probe+0x10/0x10 [ 82.216751][ T7091] __kthread_create_on_node+0x186/0x3f0 [ 82.216767][ T7091] ? __pfx___kthread_create_on_node+0x10/0x10 [ 82.216790][ T7091] ? __pfx_cryptomgr_probe+0x10/0x10 [ 82.216808][ T7091] kthread_create_on_node+0xc7/0x100 [ 82.216823][ T7091] ? __pfx_kthread_create_on_node+0x10/0x10 [ 82.216840][ T7091] ? __kasan_kmalloc+0xaa/0xb0 [ 82.216853][ T7091] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 82.216870][ T7091] ? cryptomgr_notify+0xa4/0xb40 [ 82.216888][ T7091] cryptomgr_notify+0x953/0xb40 [ 82.216905][ T7091] ? __kasan_kmalloc+0xaa/0xb0 [ 82.216918][ T7091] notifier_call_chain+0x99/0x3f0 [ 82.216937][ T7091] blocking_notifier_call_chain+0x69/0xa0 [ 82.216955][ T7091] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 82.216971][ T7091] crypto_alloc_tfm_node+0xd3/0x260 [ 82.216987][ T7091] esp_init_authenc.constprop.0+0x1df/0xb50 [ 82.217003][ T7091] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 82.217024][ T7091] ? find_held_lock+0x2b/0x80 [ 82.217042][ T7091] esp6_init_state+0x3a6/0x500 [ 82.217061][ T7091] __xfrm_init_state+0x842/0x1dc0 [ 82.217079][ T7091] xfrm_init_state+0x1c/0xa0 [ 82.217093][ T7091] pfkey_add+0x1c88/0x2f10 [ 82.217112][ T7091] ? __pfx_pfkey_add+0x10/0x10 [ 82.217125][ T7091] ? kfree_skbmem+0x19f/0x210 [ 82.217141][ T7091] ? sk_skb_reason_drop+0x114/0x1b0 [ 82.217155][ T7091] ? pfkey_broadcast+0x28c/0x420 [ 82.217171][ T7091] ? __pfx_pfkey_add+0x10/0x10 [ 82.217185][ T7091] pfkey_process+0x5c3/0x810 [ 82.217201][ T7091] ? __pfx_pfkey_process+0x10/0x10 [ 82.217215][ T7091] ? pfkey_sendmsg+0x41a/0x840 [ 82.217237][ T7091] ? __pfx___alloc_skb+0x10/0x10 [ 82.217259][ T7091] pfkey_sendmsg+0x428/0x840 [ 82.217275][ T7091] ____sys_sendmsg+0xa4d/0xbe0 [ 82.217291][ T7091] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 82.217306][ T7091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.217327][ T7091] ___sys_sendmsg+0x190/0x1e0 [ 82.217344][ T7091] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.217359][ T7091] ? futex_wait+0x11e/0x370 [ 82.217382][ T7091] ? find_held_lock+0x2b/0x80 [ 82.217407][ T7091] __sys_sendmsg+0x160/0x210 [ 82.217419][ T7091] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.217439][ T7091] do_syscall_64+0x123/0x790 [ 82.217455][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.217467][ T7091] RIP: 0033:0x7f6750d9e159 [ 82.217478][ T7091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.217490][ T7091] RSP: 002b:00007f6751d16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.217503][ T7091] RAX: ffffffffffffffda RBX: 00007f6751025fa0 RCX: 00007f6750d9e159 [ 82.217510][ T7091] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 82.217517][ T7091] RBP: 00007f6750e35024 R08: 0000000000000000 R09: 0000000000000000 [ 82.217524][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.217531][ T7091] R13: 00007f6751026038 R14: 00007f6751025fa0 R15: 00007fff2e533d98 [ 82.217547][ T7091] [ 82.299369][ T931] usb 5-1: Using ep0 maxpacket: 16 [ 82.304246][ T931] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 82.306511][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.306541][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.306561][ T931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 82.306596][ T931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.308902][ T931] usb 5-1: config 0 descriptor?? [ 82.400203][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.400656][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.401016][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.401498][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.401917][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.408231][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.408613][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.409035][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.413072][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.413236][ T7106] openvswitch: netlink: Duplicate or invalid key (type 0). [ 82.418906][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.419530][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.419987][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.420410][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.420841][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.425229][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.425488][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.425996][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.426224][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.426404][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.426601][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.426827][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.427026][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.427217][ T7097] gfs2: Unknown parameter 'debugÿÿÿyÐHÇÂ`' [ 82.445006][ T7108] openvswitch: netlink: Message has 4 unknown bytes. [ 82.614762][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 82.642151][ T1163] IPVS: starting estimator thread 0... [ 82.645485][ T7127] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.645565][ T7127] tipc: Enabled bearer , priority 10 [ 82.661565][ T7133] qrtr: Invalid version 0 [ 82.672602][ T7133] netlink: 36 bytes leftover after parsing attributes in process `syz.3.373'. [ 82.675366][ T7133] sctp: [Deprecated]: syz.3.373 (pid 7133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.675366][ T7133] Use struct sctp_sack_info instead [ 82.717998][ T931] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 82.718118][ T931] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 82.718176][ T931] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 82.718204][ T931] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 82.718228][ T931] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 82.725066][ T931] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 82.730569][ T7130] IPVS: using max 43 ests per chain, 103200 per kthread [ 82.767577][ T7145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.785558][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 82.810279][ T931] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 82.810703][ T931] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 82.858819][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 82.925022][ T25] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 82.926040][ T5820] usb 5-1: USB disconnect, device number 5 [ 82.928009][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 82.928528][ T25] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 82.928585][ T25] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 82.928631][ T25] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 83.049316][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 83.161 ** replaying previous printk message ** [ 83.161446][ T7175] FAULT_INJECTION: forcing a failure. [ 83.161446][ T7175] name failslab, interval 1, probability 0, space 0, times 0 [ 83.161520][ T7175] CPU: 3 UID: 0 PID: 7175 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 83.161557][ T7175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.161571][ T7175] Call Trace: [ 83.161579][ T7175] [ 83.161587][ T7175] dump_stack_lvl+0x100/0x190 [ 83.161620][ T7175] should_fail_ex.cold+0x5/0xa [ 83.161648][ T7175] should_failslab+0xc2/0x120 [ 83.161675][ T7175] kmem_cache_alloc_noprof+0x92/0x6a0 [ 83.161699][ T7175] ? netfs_alloc_subrequest+0x116/0x3f0 [ 83.161731][ T7175] netfs_alloc_subrequest+0x116/0x3f0 [ 83.161750][ T7175] netfs_prepare_write+0x76/0x7b0 [ 83.161774][ T7175] netfs_unbuffered_write+0x75c/0x2020 [ 83.161794][ T7175] ? rolling_buffer_init+0x8d/0xc0 [ 83.161817][ T7175] netfs_unbuffered_write_iter_locked+0x7d6/0xa80 [ 83.161838][ T7175] netfs_unbuffered_write_iter+0x442/0x720 [ 83.161856][ T7175] ? __lock_acquire+0x4c5/0x1ec0 [ 83.161872][ T7175] v9fs_file_write_iter+0xbf/0x100 [ 83.161889][ T7175] do_iter_readv_writev+0x6f7/0x930 [ 83.161912][ T7175] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 83.161933][ T7175] ? lock_acquire+0x1d1/0x380 [ 83.161954][ T7175] vfs_writev+0x360/0xdd0 [ 83.161977][ T7175] ? __lock_acquire+0x4c5/0x1ec0 [ 83.161993][ T7175] ? __pfx_vfs_writev+0x10/0x10 [ 83.162013][ T7175] ? find_held_lock+0x2b/0x80 [ 83.162042][ T7175] ? lock_acquire+0x1d1/0x380 [ 83.162055][ T7175] ? __fget_files+0x34/0x3d0 [ 83.162079][ T7175] ? __fget_files+0x21f/0x3d0 [ 83.162100][ T7175] ? do_pwritev+0x1ac/0x270 [ 83.162121][ T7175] do_pwritev+0x1ac/0x270 [ 83.162143][ T7175] ? __pfx_do_pwritev+0x10/0x10 [ 83.162165][ T7175] ? ksys_write+0x1ac/0x250 [ 83.162178][ T7175] ? __pfx_ksys_write+0x10/0x10 [ 83.162194][ T7175] __x64_sys_pwritev2+0xef/0x160 [ 83.162211][ T7175] do_syscall_64+0x123/0x790 [ 83.162248][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.162265][ T7175] RIP: 0033:0x7fb62699e159 [ 83.162277][ T7175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.162292][ T7175] RSP: 002b:00007fb6278d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 83.162307][ T7175] RAX: ffffffffffffffda RBX: 00007fb626c25fa0 RCX: 00007fb62699e159 [ 83.162316][ T7175] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000003 [ 83.162324][ T7175] RBP: 00007fb6278d4090 R08: 000000000000000a R09: 0000000000000014 [ 83.162333][ T7175] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000002 [ 83.162341][ T7175] R13: 00007fb626c26038 R14: 00007fb626c25fa0 R15: 00007ffc6515c4e8 [ 83.162359][ T7175] [ 83.162461][ T7175] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] SMP KASAN NOPTI [ 83.212528][ T7178] FAULT_INJECTION: forcing a failure. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 83.212528][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 83.212565][ T7178] CPU: 2 UID: 0 PID: 7178 Comm: syz.4.389 Not tainted syzkaller #0 PREEMPT(full) [ 83.212590][ T7178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.212602][ T7178] Call Trace: [ 83.212609][ T7178] [ 83.212618][ T7178] dump_stack_lvl+0x100/0x190 [ 83.212661][ T7178] should_fail_ex.cold+0x5/0xa [ 83.212687][ T7178] ? __kmalloc_node_track_caller_noprof+0xd4/0x870 [ 83.212709][ T7178] should_failslab+0xc2/0x120 [ 83.212732][ T7178] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 83.212755][ T7178] ? __kthread_create_on_node+0x186/0x3f0 [ 83.212782][ T7178] kvasprintf+0xbc/0x150 [ 83.212812][ T7178] ? __pfx_kvasprintf+0x10/0x10 [ 83.212842][ T7178] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 83.212870][ T7178] ? __kthread_create_on_node+0xce/0x3f0 [ 83.212895][ T7178] ? __pfx_cryptomgr_probe+0x10/0x10 [ 83.212923][ T7178] __kthread_create_on_node+0x186/0x3f0 [ 83.212948][ T7178] ? __pfx___kthread_create_on_node+0x10/0x10 [ 83.212976][ T7178] ? __pfx_cryptomgr_probe+0x10/0x10 [ 83.213003][ T7178] kthread_create_on_node+0xc7/0x100 [ 83.213027][ T7178] ? __pfx_kthread_create_on_node+0x10/0x10 [ 83.213050][ T7178] ? __kasan_kmalloc+0xaa/0xb0 [ 83.213071][ T7178] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 83.213095][ T7178] ? cryptomgr_notify+0xa4/0xb40 [ 83.213121][ T7178] cryptomgr_notify+0x953/0xb40 [ 83.213146][ T7178] ? __kasan_kmalloc+0xaa/0xb0 [ 83.213167][ T7178] notifier_call_chain+0x99/0x3f0 [ 83.213193][ T7178] blocking_notifier_call_chain+0x69/0xa0 [ 83.213220][ T7178] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 83.213243][ T7178] crypto_alloc_tfm_node+0xd3/0x260 [ 83.213268][ T7178] esp_init_authenc.constprop.0+0x1df/0xb50 [ 83.213290][ T7178] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 83.213314][ T7178] ? rcu_is_watching+0x13/0xc0 [ 83.213336][ T7178] ? lock_acquire+0x31e/0x380 [ 83.213356][ T7178] esp6_init_state+0x3a6/0x500 [ 83.213376][ T7178] __xfrm_init_state+0x842/0x1dc0 [ 83.213398][ T7178] xfrm_init_state+0x1c/0xa0 [ 83.213420][ T7178] pfkey_add+0x1c88/0x2f10 [ 83.213444][ T7178] ? __pfx_pfkey_add+0x10/0x10 [ 83.213464][ T7178] ? kfree_skbmem+0x19f/0x210 [ 83.213491][ T7178] ? sk_skb_reason_drop+0x114/0x1b0 [ 83.213511][ T7178] ? pfkey_broadcast+0x28c/0x420 [ 83.213535][ T7178] ? __pfx_pfkey_add+0x10/0x10 [ 83.213556][ T7178] pfkey_process+0x5c3/0x810 [ 83.213580][ T7178] ? __pfx_pfkey_process+0x10/0x10 [ 83.213603][ T7178] ? pfkey_sendmsg+0x41a/0x840 [ 83.213708][ T7178] ? __pfx___alloc_skb+0x10/0x10 [ 83.213785][ T7178] pfkey_sendmsg+0x428/0x840 [ 83.213819][ T7178] ____sys_sendmsg+0xa4d/0xbe0 [ 83.213845][ T7178] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 83.213870][ T7178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.213893][ T7178] ___sys_sendmsg+0x190/0x1e0 [ 83.213914][ T7178] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.213933][ T7178] ? futex_wait+0x11e/0x370 [ 83.213964][ T7178] ? rcu_is_watching+0x13/0xc0 [ 83.213990][ T7178] __sys_sendmsg+0x160/0x210 [ 83.214006][ T7178] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.214025][ T7178] ? rcu_is_watching+0x13/0xc0 [ 83.214048][ T7178] do_syscall_64+0x123/0x790 [ 83.214072][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.214092][ T7178] RIP: 0033:0x7f801e79e159 [ 83.214112][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.214130][ T7178] RSP: 002b:00007f801f64f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.214150][ T7178] RAX: ffffffffffffffda RBX: 00007f801ea25fa0 RCX: 00007f801e79e159 [ 83.214160][ T7178] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 83.214170][ T7178] RBP: 00007f801e835024 R08: 0000000000000000 R09: 0000000000000000 [ 83.214179][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.214188][ T7178] R13: 00007f801ea26038 R14: 00007f801ea25fa0 R15: 00007ffe62e7dea8 [ 83.214201][ T7178] [ 83.414761][ T7175] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 83.417274][ T7175] CPU: 3 UID: 0 PID: 7175 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 83.420219][ T7175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.423435][ T7175] RIP: 0010:netfs_prepare_write+0xbc/0x7b0 [ 83.425413][ T7175] Code: e1 07 38 ca 7f 08 84 d2 0f 85 04 06 00 00 48 8d bb ad 00 00 00 0f b6 45 52 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <0f> b6 14 11 48 89 f9 83 e1 07 38 ca 7f 08 84 d2 0f 85 c1 05 00 00 [ 83.432251][ T7175] RSP: 0018:ffffc90003537958 EFLAGS: 00010203 [ 83.434207][ T7175] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000015 [ 83.436676][ T7175] RDX: dffffc0000000000 RSI: ffffffff82d0d2d9 RDI: 00000000000000ad [ 83.439025][ T7175] RBP: ffff888054a004a0 R08: 00000000ffffffff R09: fffffbfff1dffe9a [ 83.441470][ T7175] R10: ffffffff8efff4d3 R11: 0000000000000001 R12: ffff888054a003c0 [ 83.443929][ T7175] R13: ffff888054a00578 R14: 0000000000000000 R15: ffff888054a004f2 [ 83.446405][ T7175] FS: 00007fb6278d46c0(0000) GS:ffff8880d5e5f000(0000) knlGS:0000000000000000 [ 83.449430][ T7175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.451787][ T7175] CR2: 0000200000533fa0 CR3: 000000003cdb7000 CR4: 0000000000352ef0 [ 83.454651][ T7175] Call Trace: [ 83.455854][ T7175] [ 83.456792][ T7175] netfs_unbuffered_write+0x75c/0x2020 [ 83.458540][ T7175] ? rolling_buffer_init+0x8d/0xc0 [ 83.460124][ T7175] netfs_unbuffered_write_iter_locked+0x7d6/0xa80 [ 83.462120][ T7175] netfs_unbuffered_write_iter+0x442/0x720 [ 83.463892][ T7175] ? __lock_acquire+0x4c5/0x1ec0 [ 83.465439][ T7175] v9fs_file_write_iter+0xbf/0x100 [ 83.467064][ T7175] do_iter_readv_writev+0x6f7/0x930 [ 83.468805][ T7175] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 83.470816][ T7175] ? lock_acquire+0x1d1/0x380 [ 83.472513][ T7175] vfs_writev+0x360/0xdd0 [ 83.474056][ T7175] ? __lock_acquire+0x4c5/0x1ec0 [ 83.475642][ T7175] ? __pfx_vfs_writev+0x10/0x10 [ 83.477183][ T7175] ? find_held_lock+0x2b/0x80 [ 83.478702][ T7175] ? lock_acquire+0x1d1/0x380 [ 83.480195][ T7175] ? __fget_files+0x34/0x3d0 [ 83.481653][ T7175] ? __fget_files+0x21f/0x3d0 [ 83.483387][ T7175] ? do_pwritev+0x1ac/0x270 [ 83.485123][ T7175] do_pwritev+0x1ac/0x270 [ 83.486870][ T7175] ? __pfx_do_pwritev+0x10/0x10 [ 83.488555][ T7175] ? ksys_write+0x1ac/0x250 [ 83.490024][ T7175] ? __pfx_ksys_write+0x10/0x10 [ 83.491559][ T7175] __x64_sys_pwritev2+0xef/0x160 [ 83.493104][ T7175] do_syscall_64+0x123/0x790 [ 83.494556][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.496403][ T7175] RIP: 0033:0x7fb62699e159 [ 83.497805][ T7175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.503776][ T7175] RSP: 002b:00007fb6278d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 83.506366][ T7175] RAX: ffffffffffffffda RBX: 00007fb626c25fa0 RCX: 00007fb62699e159 [ 83.509349][ T7175] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000003 [ 83.512283][ T7175] RBP: 00007fb6278d4090 R08: 000000000000000a R09: 0000000000000014 [ 83.514966][ T7175] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000002 [ 83.517412][ T7175] R13: 00007fb626c26038 R14: 00007fb626c25fa0 R15: 00007ffc6515c4e8 [ 83.519955][ T7175] [ 83.520928][ T7175] Modules linked in: [ 83.522757][ T7175] ---[ end trace 0000000000000000 ]--- ** replaying previous printk message ** [ 83.526761][ T7175] RIP: 0010:netfs_prepare_write+0xbc/0x7b0 [ 83.526822][ T7175] Code: e1 07 38 ca 7f 08 84 d2 0f 85 04 06 00 00 48 8d bb ad 00 00 00 0f b6 45 52 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <0f> b6 14 11 48 89 f9 83 e1 07 38 ca 7f 08 84 d2 0f 85 c1 05 00 00 [ 83.526855][ T7175] RSP: 0018:ffffc90003537958 EFLAGS: 00010203 [ 83.526901][ T7175] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000015 [ 83.526950][ T7175] RDX: dffffc0000000000 RSI: ffffffff82d0d2d9 RDI: 00000000000000ad [ 83.526978][ T7175] RBP: ffff888054a004a0 R08: 00000000ffffffff R09: fffffbfff1dffe9a [ 83.527018][ T7175] R10: ffffffff8efff4d3 R11: 0000000000000001 R12: ffff888054a003c0 [ 83.527031][ T7175] R13: ffff888054a00578 R14: 0000000000000000 R15: ffff888054a004f2 [ 83.527070][ T7175] FS: 00007fb6278d46c0(0000) GS:ffff8880d5d5f000(0000) knlGS:0000000000000000 [ 83.527104][ T7175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.527117][ T7175] CR2: 00007f137aac7e9c CR3: 000000003cdb7000 CR4: 0000000000352ef0 [ 83.527130][ T7175] Kernel panic - not syncing: Fatal exception [ 83.575989][ T7175] Kernel Offset: disabled [ 83.577902][ T7175] Rebooting in 86400 seconds..