last executing test programs: 2.101906446s ago: executing program 1 (id=144): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000080)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="17", 0x1}], 0x1}, 0x48c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x193a, 0x4) sendmmsg$unix(r0, &(0x7f0000000200)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000300)="d3870d2cdbd2914381dc1e5c564bafe530ad2cf47801a3e353fdb8b426df77657d90f56f93979c97333b489b90873fe2798531664c2b4e2c41", 0x39}, {&(0x7f0000000340)}, {0x0}, {0x0}], 0x4, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x28, 0x4044004}}], 0x1, 0x40080) 2.101543953s ago: executing program 1 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = dup(r1) execveat(r2, &(0x7f0000000400)='\x00', 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x3, 0x0, 0x0, {0xd6f66ffc4943d442, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x11, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xffffffffffffffad, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0xb4, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x5c, 0x6, "df442dc33aa62f049b2516f882f94ac90890c4b5d40fcc8ccd0c9fd436e48f95f0b395137a0e487a1b468f394eccf0e33e08bcfa8ddc2ee0542a05fe0827282c7dd1a7dbe22cf10050f64f34ae553ae51992afb695aeaa04"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x144}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000240), 0x0, 0x8000) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000480)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10100, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 2.032149561s ago: executing program 1 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000) 1.981969855s ago: executing program 1 (id=147): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='plat', 0x4) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0xffff) (async) poll(&(0x7f0000000080)=[{r0, 0xe1}], 0x1, 0x80) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000100)={0x8, 'veth1_to_bond\x00', {'veth0\x00'}, 0x4}) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) (async) sendto$inet(r2, 0x0, 0x0, 0x4000000, &(0x7f00000009c0)={0x2, 0x4e20, @loopback}, 0x10) 1.820012925s ago: executing program 1 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) futex_waitv(&(0x7f0000000040)=[{0x0, &(0x7f00000000c0), 0x2}, {0x0, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (fail_nth: 9) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r2, 0xe) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_io_uring_setup(0xf08, &(0x7f00000001c0)={0x0, 0x2d85, 0x40000, 0x3, 0x800000c3}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000300)=@IORING_OP_FUTEX_WAKE={0x34, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10a, 0x0, 0x1}]}) 1.129005822s ago: executing program 0 (id=158): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) 1.12875667s ago: executing program 0 (id=159): add_key(0x0, 0x0, &(0x7f0000000080)="f1fe4a3b8809c5", 0x7, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x8a, 0x7fffffffffffe, 0x81, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x7, 0x10, 0x6, 0x4, 0x7, 0x3], 0x10000, 0x2100}) ioctl$KVM_RUN(r2, 0xae80, 0x500) 1.12862228s ago: executing program 1 (id=160): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x582, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl(r0, 0x8922, 0x0) 1.000773947s ago: executing program 0 (id=165): r0 = socket(0x10, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r2, 0x801, 0x2, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_SEQ={0x4}]}]}, 0x38}}, 0x0) open(&(0x7f00000014c0)='.\x00', 0x0, 0x0) symlink(&(0x7f0000001500)='.\x00', &(0x7f0000001540)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = open(&(0x7f0000001580)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, &(0x7f00000015c0)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001600)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/filesystems\x00', 0x28100, 0x0) read(r7, &(0x7f00000004c0)=""/4096, 0x1000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x68}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x8010) 942.476564ms ago: executing program 0 (id=167): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x12200, 0x0) epoll_pwait2(r5, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r1, r3, 0x0) 872.597744ms ago: executing program 2 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x6, 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f0000001d40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r1, 0x0, 0xff53, 0x0, &(0x7f0000001e00)="b88fd8698b791f9cea0efaca8a7ffabf40a1540000c96029998161373610748d37213bed8a8e4f51effc55512a3d645d1d691c04f669e9c78189c8", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10010, r0, 0xa727e000) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x134, 0x134, 0x3, [@func={0x6, 0x0, 0x0, 0xc, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0x0, 0x4}, {0xc, 0x5}, {0x5}]}, @struct={0x1, 0x6, 0x0, 0x4, 0x1, 0xfffff000, [{0xd, 0x5, 0x4}, {0x0, 0x5, 0x5}, {0x8, 0x5, 0x1d6}, {0xc, 0x1, 0x8}, {0xc, 0x1, 0x800}, {0x5, 0x5, 0x4}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5}, {0xb}, {0x10, 0x4}, {0x5, 0x1}]}, @struct={0x9, 0x4, 0x0, 0x4, 0x1, 0x8001, [{0x4, 0x3, 0x9}, {0x10, 0x5, 0x9}, {0x0, 0x2, 0x9}, {0xc, 0x0, 0x5}]}, @int={0x9, 0x0, 0x0, 0x1, 0x17, 0x17}, @restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/50, 0x14f, 0x32, 0x0, 0xffffffa7, 0x10000, @value=r2}, 0x28) 872.439456ms ago: executing program 2 (id=169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) futex_waitv(&(0x7f0000000040)=[{0x0, &(0x7f00000000c0), 0x2}, {0x0, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r2, 0xe) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_io_uring_setup(0xf08, &(0x7f00000001c0)={0x0, 0x2d85, 0x40000, 0x3, 0x800000c3}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000300)=@IORING_OP_FUTEX_WAKE={0x34, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000380)=0x6, 0xa) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000400)=0x80000004, 0x4) bind$inet6(r9, &(0x7f0000000440)={0xa, 0x4e20, 0x1, @mcast2, 0x8}, 0x1c) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10a, 0x0, 0x1}]}) 782.003689ms ago: executing program 0 (id=171): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/core_pattern\x00', 0x2, 0x102) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="03cada9e"], 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x60, 0xe, 0x301, 0xb8e, 0x0, 0x1, 0x0}) 662.28114ms ago: executing program 0 (id=172): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000010010000010000000200000000000000100000000000000010"], 0x28}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/206, 0x584}], 0x1}, 0xffffffff}], 0x1, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f00000008c0)={&(0x7f0000000900)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000980)=[{&(0x7f00000009c0), 0x1000}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 600.595317ms ago: executing program 3 (id=173): ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000080)={0xb, "308bd9c3b9c8cf16facb14dc8e3742e2a0f07c01ccf7846882908a9acf1ca04d", 0x3}) 542.490248ms ago: executing program 3 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f00000001c0)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000002c0)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380)={r4, 0x7ff}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 542.354233ms ago: executing program 3 (id=175): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x42, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x1, 0xc68, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x4}}}, &(0x7f00000004c0)) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000500)=@ublk_get_queue_affinity_sqe={0x2e, 0x40, 0x0, r6, 0x80207501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, '\x00', {r5, 0xffff, 0x0, 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) (fail_nth: 2) 458.817406ms ago: executing program 3 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 259.730418ms ago: executing program 3 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x1ef) mount(&(0x7f00000007c0)=@filename='mtd0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000880)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet(0x2, 0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x108}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='xfrm0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12214, 0x30000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x20048010) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003cc0)='./file1\x00', 0x3f) 219.527856ms ago: executing program 2 (id=178): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x84200, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/uprobe_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='p:mygroup/myevent ./dummy:0x2', 0x1d) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='!:mod:', 0x6) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0xaa01, 0x0, 0x0, @by_dev={r2}, [@flakey={0x0, 0x418, 0x0, 0x80, 'flakey\x00', {{@ram_num={'1:', 0x1}, 0x20, '128'}, 0x20, 0x4, 0x20, 0x1, ' 1 error_reads'}}]}) 219.19619ms ago: executing program 3 (id=179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "24fe6af693998d69483159e54ff0bb16ee80d4bbc479"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x94, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4d716031}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x323e6acc}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x791aa39c}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffff0001}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0xc4, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x5b, 0x8, "0fe760cc9860e02f6fbcf397e1f18b9e2339f7da7b67917e4f9a54e3cb7732a788fb216b22dd156d335c0aa8acc624f7af269e32e1b2a32074c52de27e0405191951f852b65d24df7c82d33332c04a2a15aa3404f384ee"}, @NFTA_OBJ_USERDATA={0x47, 0x8, "d817987c00852ad6673de4436c9a5fe4e7c9b2ba81c1d8394f5af4664ea9dec6973c62d3a5134df514d10f55f86160ccdf72daa7b468e6d3d34f601c19456cd5aed7a5"}]}, @NFT_MSG_DELSETELEM={0x138, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x110, 0x3, 0x0, 0x1, [{0x4}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x101}, @NFTA_SET_ELEM_USERDATA={0x71, 0x6, 0x1, 0x0, "39c918bfe2e60f031101618085541b18157889838d16785267e8fa85e6fc71e7acf0f487575c0b5895559a9304aa2c02234b038a66b1dc33fbf7582601889f6f42bbda4a760f48ce1d75a9c14e99a37b1a123b06e992efca1411cbbff6a524fcc254231be193da0e37ba8d217f"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x300}}, 0x80c0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x42) syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0xffeffffffffffffa]}, 0x8, 0x800) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000780)={0x2, 0x4e22, @local}, 0x10) listen(r6, 0x5) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f00000007c0)={0x2, 0x4e22, @local}, 0x10) close(0x3) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000680)=""/163, 0x30a000, 0x1400, 0x8, 0x1}, 0x20) pause() r8 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x11, 0x4, @tid=r8}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 131.360586ms ago: executing program 2 (id=180): clock_gettime(0x4, &(0x7f0000000000)) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x83, 0x20000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000ac0)={0x0, 0x8, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000940)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000500)={{0x80000000, 0x0, 0x3, [0xb, 0x6]}, {0x80000000, r1, 0x4, [0x2, 0x3]}, 0x0, [0x8, 0x6]}) 131.020338ms ago: executing program 2 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) r1 = add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000840)='asymmetric\x00', &(0x7f0000000880)=@chain={'key_or_keyring:', r1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000540)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000003, 0x0, 0x2], [0x2, 0x3ff, 0xfffffffd, 0xffffff7f, 0x0, 0x0, 0x7], [0x0, 0x20000232, 0x200006, 0x0, 0x6, 0xffffffff, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x5}, {0xffffffff}, {0x4000000, 0x6}, {0x400000}, {0x0, 0x5}, {0x4, 0x4}, {0x40000001}, {0x0, 0x9}, {0xfffffffc, 0x7fffffff}, {0x8}, {0x804000, 0x3}]}) write(r0, &(0x7f00000004c0)='1', 0x1) mount$bind(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000140)='./file1/file0\x00', 0x0, 0x108d448, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) move_pages(0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000900)={0x90, 0x200, 0x0, 0x5, 0xf34}) mknod$loop(&(0x7f0000000100)='./file0/file1\x00', 0x100, 0x1) lstat(&(0x7f0000000940)='./sys\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r5, 0x101ea5b763733d17, r6, &(0x7f0000000a00)={0xe8f, 0x81, 0x1, 0x4}) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000240)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r7, 0x400452c8, &(0x7f0000000000)) 0s ago: executing program 2 (id=182): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000640), 0x4) kernel console output (not intermixed with test programs): dir permissive=1 [ 42.534600][ T42] audit: type=1400 audit(1793523960.187:142): avc: denied { mount } for pid=5771 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.536746][ T5771] cgroup: Unknown subsys name 'net' [ 42.538091][ T42] audit: type=1400 audit(1793523960.187:143): avc: denied { unmount } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.687469][ T5771] cgroup: Unknown subsys name 'cpuset' [ 42.693036][ T5771] cgroup: Unknown subsys name 'rlimit' [ 42.836095][ T42] audit: type=1400 audit(1793523960.487:144): avc: denied { setattr } for pid=5771 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.836779][ T42] audit: type=1400 audit(1793523960.487:145): avc: denied { create } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.837181][ T42] audit: type=1400 audit(1793523960.487:146): avc: denied { write } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.837534][ T42] audit: type=1400 audit(1793523960.487:147): avc: denied { read } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.900268][ T5776] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.654783][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.875166][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 46.875181][ T42] audit: type=1400 audit(1793523964.517:154): avc: denied { execmem } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.120371][ T42] audit: type=1400 audit(1793523964.767:155): avc: denied { create } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.120424][ T42] audit: type=1400 audit(1793523964.767:156): avc: denied { read write } for pid=5782 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.120718][ T42] audit: type=1400 audit(1793523964.767:157): avc: denied { open } for pid=5782 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.129223][ T42] audit: type=1400 audit(1793523964.777:158): avc: denied { ioctl } for pid=5782 comm="syz-executor" path="socket:[2803]" dev="sockfs" ino=2803 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.162619][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.162632][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.164472][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.164586][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.164972][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.165469][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.165649][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.167966][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.167988][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.168765][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.170419][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.170710][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.171202][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.171828][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.172005][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.172658][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.173265][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.173506][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.174688][ T68] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.174721][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.176734][ T42] audit: type=1400 audit(1793523964.827:159): avc: denied { read } for pid=5786 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.177265][ T42] audit: type=1400 audit(1793523964.827:160): avc: denied { open } for pid=5786 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.181504][ T42] audit: type=1400 audit(1793523964.827:161): avc: denied { mounton } for pid=5786 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.188515][ T42] audit: type=1400 audit(1793523964.837:162): avc: denied { module_request } for pid=5786 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.220427][ T42] audit: type=1400 audit(1793523964.867:163): avc: denied { sys_module } for pid=5786 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.370948][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.371579][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.372384][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.381498][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.385472][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.392467][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.483013][ T5791] infiniband rxe0: set active [ 47.483027][ T5791] infiniband rxe0: added rxe_eth0 [ 47.491833][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.492606][ T5791] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.492627][ T5791] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.492646][ T5791] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.507715][ T5791] RDS/IB: rxe0: added [ 47.507887][ T5791] smc: adding ib device rxe0 with port count 1 [ 47.507926][ T5791] smc: ib device rxe0 port 1 has no pnetid [ 47.517364][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.533546][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.651839][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.719733][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.719792][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.719868][ T5782] bridge_slave_0: entered allmulticast mode [ 47.720803][ T5782] bridge_slave_0: entered promiscuous mode [ 47.753426][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.753472][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.753543][ T5782] bridge_slave_1: entered allmulticast mode [ 47.754340][ T5782] bridge_slave_1: entered promiscuous mode [ 47.759337][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.804600][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.812332][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.813199][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.813275][ T5786] bridge_slave_0: entered allmulticast mode [ 47.814440][ T5786] bridge_slave_0: entered promiscuous mode [ 47.817748][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.817822][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.817864][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.817937][ T5786] bridge_slave_1: entered allmulticast mode [ 47.818772][ T5786] bridge_slave_1: entered promiscuous mode [ 47.826490][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.826536][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.826590][ T5790] bridge_slave_0: entered allmulticast mode [ 47.827431][ T5790] bridge_slave_0: entered promiscuous mode [ 47.829142][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.829189][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.829347][ T5790] bridge_slave_1: entered allmulticast mode [ 47.830117][ T5790] bridge_slave_1: entered promiscuous mode [ 47.859205][ T5782] team0: Port device team_slave_0 added [ 47.860646][ T5782] team0: Port device team_slave_1 added [ 47.861727][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.876863][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.878527][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.910402][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.910419][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.910439][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.913488][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.920961][ T5791] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.922773][ T5786] team0: Port device team_slave_0 added [ 47.924536][ T5786] team0: Port device team_slave_1 added [ 47.925101][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.925110][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.925122][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.957529][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.957542][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.957554][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.966158][ T5790] team0: Port device team_slave_0 added [ 47.968457][ T5790] team0: Port device team_slave_1 added [ 47.968983][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.968994][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.969013][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.004681][ T5782] hsr_slave_0: entered promiscuous mode [ 48.006726][ T5782] hsr_slave_1: entered promiscuous mode [ 48.050226][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.050238][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.050250][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.062329][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.062341][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.062353][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.071168][ T5786] hsr_slave_0: entered promiscuous mode [ 48.071725][ T5786] hsr_slave_1: entered promiscuous mode [ 48.072080][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 48.072090][ T5786] Cannot create hsr debugfs directory [ 48.125542][ T5790] hsr_slave_0: entered promiscuous mode [ 48.126329][ T5790] hsr_slave_1: entered promiscuous mode [ 48.127004][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 48.127017][ T5790] Cannot create hsr debugfs directory [ 48.431270][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.435843][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.436376][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.439093][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.443322][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.446648][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.451762][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.454999][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.586622][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.586813][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.586917][ T5791] bridge_slave_0: entered allmulticast mode [ 48.587838][ T5791] bridge_slave_0: entered promiscuous mode [ 48.589458][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.589497][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.589555][ T5791] bridge_slave_1: entered allmulticast mode [ 48.590338][ T5791] bridge_slave_1: entered promiscuous mode [ 48.618190][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.620227][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.623788][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.624984][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.630731][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.632655][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.632687][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.636232][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.637069][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.643699][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.711360][ T5791] team0: Port device team_slave_0 added [ 48.731853][ T5791] team0: Port device team_slave_1 added [ 48.754797][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.754811][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.754824][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.758299][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.758309][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.758321][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.782782][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.796915][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.809069][ T5791] hsr_slave_0: entered promiscuous mode [ 48.809553][ T5791] hsr_slave_1: entered promiscuous mode [ 48.809898][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 48.809907][ T5791] Cannot create hsr debugfs directory [ 48.810084][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.814141][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.814939][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.821183][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.827573][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.832848][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.013503][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.033811][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.078414][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.098619][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.098889][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.105916][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.106308][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.112156][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.112868][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.119049][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.121370][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.126994][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.133173][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.133239][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.134149][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.139184][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.157309][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.157359][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.174502][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.174549][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.193776][ T5784] Bluetooth: hci0: command tx timeout [ 49.194581][ T5794] Bluetooth: hci2: command tx timeout [ 49.194588][ T68] Bluetooth: hci1: command tx timeout [ 49.209541][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.225581][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.244538][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.244589][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.255297][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.255411][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.274016][ T68] Bluetooth: hci3: command tx timeout [ 49.309965][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.336697][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.341124][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.341171][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.348705][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.348751][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.541274][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.566009][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.575741][ T5782] veth0_vlan: entered promiscuous mode [ 49.596770][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.598874][ T5782] veth1_vlan: entered promiscuous mode [ 49.623154][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.637147][ T5786] veth0_vlan: entered promiscuous mode [ 49.650724][ T5786] veth1_vlan: entered promiscuous mode [ 49.652234][ T5782] veth0_macvtap: entered promiscuous mode [ 49.663289][ T5782] veth1_macvtap: entered promiscuous mode [ 49.666986][ T5790] veth0_vlan: entered promiscuous mode [ 49.691389][ T5790] veth1_vlan: entered promiscuous mode [ 49.695422][ T5791] veth0_vlan: entered promiscuous mode [ 49.698312][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.705650][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.707368][ T5786] veth0_macvtap: entered promiscuous mode [ 49.715738][ T5786] veth1_macvtap: entered promiscuous mode [ 49.717995][ T5791] veth1_vlan: entered promiscuous mode [ 49.741198][ T5790] veth0_macvtap: entered promiscuous mode [ 49.746631][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.747687][ T5790] veth1_macvtap: entered promiscuous mode [ 49.755320][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.788411][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.788426][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.793008][ T5791] veth0_macvtap: entered promiscuous mode [ 49.806192][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.814819][ T5791] veth1_macvtap: entered promiscuous mode [ 49.819217][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.819230][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.833196][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.849708][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.863431][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.871762][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.871777][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.885087][ T5896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885339][ T5896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885360][ T5896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885378][ T5896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885395][ T5896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885412][ T5896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885429][ T5896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885446][ T5896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885463][ T5896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885480][ T5896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885497][ T5896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885514][ T5896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.903494][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.903670][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.903836][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.903997][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.922267][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.922281][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.947146][ T5782] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.961256][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.961271][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.007252][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.007268][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.035525][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.035539][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.050032][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.050047][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.230199][ T5959] FAULT_INJECTION: forcing a failure. [ 50.230199][ T5959] name failslab, interval 1, probability 0, space 0, times 1 [ 50.230268][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 50.230282][ T5959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.230289][ T5959] Call Trace: [ 50.230293][ T5959] [ 50.230298][ T5959] dump_stack_lvl+0x100/0x190 [ 50.230320][ T5959] should_fail_ex.cold+0x5/0xa [ 50.230337][ T5959] should_failslab+0xc2/0x120 [ 50.230351][ T5959] __kmalloc_noprof+0xfc/0x840 [ 50.230367][ T5959] ? lsm_blob_alloc+0x68/0x90 [ 50.230382][ T5959] lsm_blob_alloc+0x68/0x90 [ 50.230393][ T5959] security_sk_alloc+0x2d/0x290 [ 50.230407][ T5959] sk_prot_alloc+0x1d1/0x2a0 [ 50.230422][ T5959] sk_alloc+0x36/0xe80 [ 50.230434][ T5959] inet6_create+0x385/0x12b0 [ 50.230451][ T5959] ? inet6_create+0x7f/0x12b0 [ 50.230467][ T5959] __sock_create+0x339/0x860 [ 50.230484][ T5959] inet_ctl_sock_create+0x94/0x230 [ 50.230497][ T5959] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 50.230509][ T5959] ? ndisc_net_init+0x148/0x3e0 [ 50.230520][ T5959] ? __pfx_ndisc_net_init+0x10/0x10 [ 50.230532][ T5959] ? __pfx_igmp6_net_init+0x10/0x10 [ 50.230542][ T5959] igmp6_net_init+0x35/0x430 [ 50.230552][ T5959] ? __pfx_igmp6_net_init+0x10/0x10 [ 50.230561][ T5959] ops_init+0x1e2/0x5f0 [ 50.230575][ T5959] setup_net+0x118/0x3a0 [ 50.230588][ T5959] ? __pfx_setup_net+0x10/0x10 [ 50.230600][ T5959] ? bpf_lsm_namespace_init+0x9/0x10 [ 50.230615][ T5959] copy_net_ns+0x340/0x7a0 [ 50.230629][ T5959] create_new_namespaces+0x3ea/0xac0 [ 50.230648][ T5959] unshare_nsproxy_namespaces+0xf6/0x210 [ 50.230663][ T5959] ksys_unshare+0x44f/0x980 [ 50.230676][ T5959] ? __pfx_ksys_unshare+0x10/0x10 [ 50.230696][ T5959] __x64_sys_unshare+0x31/0x40 [ 50.230708][ T5959] do_syscall_64+0x123/0x790 [ 50.230721][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.230732][ T5959] RIP: 0033:0x7f48b179f559 [ 50.230741][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.230751][ T5959] RSP: 002b:00007f48b2697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 50.230762][ T5959] RAX: ffffffffffffffda RBX: 00007f48b1a25fa0 RCX: 00007f48b179f559 [ 50.230768][ T5959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 50.230773][ T5959] RBP: 00007f48b1836b50 R08: 0000000000000000 R09: 0000000000000000 [ 50.230779][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.230785][ T5959] R13: 00007f48b1a26038 R14: 00007f48b1a25fa0 R15: 00007fff909ccce8 [ 50.230799][ T5959] [ 50.230876][ T5959] Failed to initialize the IGMP6 control socket (err -105) [ 50.280074][ T5961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 50.291545][ T5956] Zero length message leads to an empty skb [ 50.713956][ T76] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 50.876621][ T76] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 50.878745][ T76] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 50.878766][ T76] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 50.878778][ T76] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 50.879673][ T76] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.879689][ T76] usb 6-1: SerialNumber: syz [ 50.884296][ T5981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.884410][ T5981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.084952][ T5981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.085005][ T5981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.156055][ T6006] random: crng reseeded on system resumption [ 51.284613][ T68] Bluetooth: hci0: command tx timeout [ 51.284637][ T68] Bluetooth: hci2: command tx timeout [ 51.499419][ T76] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 51.625830][ T6019] FAULT_INJECTION: forcing a failure. [ 51.625830][ T6019] name failslab, interval 1, probability 0, space 0, times 0 [ 51.625853][ T6019] CPU: 2 UID: 0 PID: 6019 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 51.625868][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.625875][ T6019] Call Trace: [ 51.625879][ T6019] [ 51.625885][ T6019] dump_stack_lvl+0x100/0x190 [ 51.625911][ T6019] should_fail_ex.cold+0x5/0xa [ 51.625932][ T6019] should_failslab+0xc2/0x120 [ 51.625947][ T6019] kmem_cache_alloc_noprof+0x92/0x6a0 [ 51.625966][ T6019] ? netlink_deliver_tap+0x103/0xb50 [ 51.625981][ T6019] ? skb_clone+0x187/0x3f0 [ 51.625999][ T6019] skb_clone+0x187/0x3f0 [ 51.626014][ T6019] netlink_deliver_tap+0x82f/0xb50 [ 51.626032][ T6019] netlink_dump+0x97d/0xd30 [ 51.626048][ T6019] ? __pfx_netlink_dump+0x10/0x10 [ 51.626068][ T6019] ? __asan_memset+0x23/0x50 [ 51.626087][ T6019] ? genl_start+0x67a/0x970 [ 51.626106][ T6019] __netlink_dump_start+0x6d6/0x990 [ 51.626124][ T6019] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 51.626144][ T6019] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 51.626162][ T6019] ? hook_capable+0x1bc/0x500 [ 51.626182][ T6019] ? rcu_is_watching+0x13/0xc0 [ 51.626196][ T6019] ? __pfx_genl_start+0x10/0x10 [ 51.626212][ T6019] ? __pfx_genl_dumpit+0x10/0x10 [ 51.626228][ T6019] ? __pfx_genl_done+0x10/0x10 [ 51.626246][ T6019] ? bpf_lsm_capable+0x9/0x10 [ 51.626258][ T6019] ? security_capable+0x80/0x260 [ 51.626282][ T6019] genl_rcv_msg+0x471/0x800 [ 51.626302][ T6019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 51.626319][ T6019] ? __lock_acquire+0x5c0/0x1f40 [ 51.626337][ T6019] ? __pfx_ip_vs_genl_dump_services+0x10/0x10 [ 51.626359][ T6019] netlink_rcv_skb+0x159/0x420 [ 51.626375][ T6019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 51.626393][ T6019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 51.626416][ T6019] ? netlink_deliver_tap+0x1ae/0xb50 [ 51.626433][ T6019] genl_rcv+0x28/0x40 [ 51.626449][ T6019] netlink_unicast+0x668/0x950 [ 51.626469][ T6019] ? __pfx_netlink_unicast+0x10/0x10 [ 51.626490][ T6019] netlink_sendmsg+0x9ac/0x10c0 [ 51.626509][ T6019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.626529][ T6019] ? selinux_socket_sendmsg+0x198/0x2f0 [ 51.626548][ T6019] ? ____sys_sendmsg+0xa99/0xc30 [ 51.626565][ T6019] ____sys_sendmsg+0xa99/0xc30 [ 51.626582][ T6019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.626599][ T6019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.626622][ T6019] ? lock_acquire+0x1d1/0x380 [ 51.626639][ T6019] ? get_pid_task+0x2a/0x250 [ 51.626653][ T6019] ___sys_sendmsg+0x190/0x1e0 [ 51.626694][ T6019] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.626716][ T6019] ? get_pid_task+0x106/0x250 [ 51.626735][ T6019] ? find_held_lock+0x2b/0x80 [ 51.626761][ T6019] __sys_sendmsg+0x160/0x210 [ 51.626781][ T6019] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.626806][ T6019] do_syscall_64+0x123/0x790 [ 51.626821][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.626835][ T6019] RIP: 0033:0x7fea6019f559 [ 51.626846][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.626858][ T6019] RSP: 002b:00007fea610f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.626871][ T6019] RAX: ffffffffffffffda RBX: 00007fea60425fa0 RCX: 00007fea6019f559 [ 51.626879][ T6019] RDX: 0000000000008490 RSI: 0000200000000580 RDI: 0000000000000003 [ 51.626886][ T6019] RBP: 00007fea610f1090 R08: 0000000000000000 R09: 0000000000000000 [ 51.626893][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.626901][ T6019] R13: 00007fea60426038 R14: 00007fea60425fa0 R15: 00007ffd1c8d8e98 [ 51.626928][ T6019] [ 51.684641][ T6022] input: syz0 as /devices/virtual/input/input6 [ 51.692784][ T5981] FAULT_INJECTION: forcing a failure. [ 51.692784][ T5981] name failslab, interval 1, probability 0, space 0, times 0 [ 51.692801][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT(full) [ 51.692812][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.692819][ T5981] Call Trace: [ 51.692823][ T5981] [ 51.692827][ T5981] dump_stack_lvl+0x100/0x190 [ 51.692848][ T5981] should_fail_ex.cold+0x5/0xa [ 51.692866][ T5981] should_failslab+0xc2/0x120 [ 51.692878][ T5981] __kmalloc_noprof+0xfc/0x840 [ 51.692893][ T5981] ? __pfx_dynamic_dname+0x10/0x10 [ 51.692904][ T5981] ? tomoyo_encode2+0xfb/0x3c0 [ 51.692916][ T5981] tomoyo_encode2+0xfb/0x3c0 [ 51.692946][ T5981] tomoyo_encode+0x29/0x50 [ 51.692955][ T5981] tomoyo_realpath_from_path+0x18c/0x690 [ 51.692969][ T5981] tomoyo_path_number_perm+0x23c/0x580 [ 51.692983][ T5981] ? tomoyo_path_number_perm+0x22e/0x580 [ 51.692999][ T5981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 51.693019][ T5981] ? __lock_acquire+0x5c0/0x1f40 [ 51.693039][ T5981] ? __fget_files+0x34/0x3d0 [ 51.693052][ T5981] ? find_held_lock+0x2b/0x80 [ 51.693062][ T5981] ? hook_file_ioctl_common+0x140/0x440 [ 51.693077][ T5981] ? __fget_files+0x21f/0x3d0 [ 51.693091][ T5981] security_file_ioctl+0xd3/0x230 [ 51.693107][ T5981] __x64_sys_ioctl+0xb7/0x210 [ 51.693125][ T5981] do_syscall_64+0x123/0x790 [ 51.693138][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.693149][ T5981] RIP: 0033:0x7f99faf9f559 [ 51.693158][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.693167][ T5981] RSP: 002b:00007f99fbe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.693178][ T5981] RAX: ffffffffffffffda RBX: 00007f99fb225fa0 RCX: 00007f99faf9f559 [ 51.693184][ T5981] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 51.693190][ T5981] RBP: 00007f99fbe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 51.693196][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.693202][ T5981] R13: 00007f99fb226038 R14: 00007f99fb225fa0 R15: 00007ffd1f54e7c8 [ 51.693216][ T5981] [ 51.693385][ T5981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 51.709031][ T5889] usb 6-1: USB disconnect, device number 2 [ 51.715338][ T5889] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 51.773449][ T6028] netlink: 256 bytes leftover after parsing attributes in process `syz.2.21'. [ 51.774161][ T6028] FAULT_INJECTION: forcing a failure. [ 51.774161][ T6028] name failslab, interval 1, probability 0, space 0, times 0 [ 51.774184][ T6028] CPU: 3 UID: 0 PID: 6028 Comm: syz.2.21 Not tainted syzkaller #0 PREEMPT(full) [ 51.774204][ T6028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.774213][ T6028] Call Trace: [ 51.774221][ T6028] [ 51.774228][ T6028] dump_stack_lvl+0x100/0x190 [ 51.774263][ T6028] should_fail_ex.cold+0x5/0xa [ 51.774291][ T6028] should_failslab+0xc2/0x120 [ 51.774313][ T6028] __kmalloc_cache_node_noprof+0x94/0x710 [ 51.774343][ T6028] ? __alloc_workqueue+0xa4f/0x1900 [ 51.774374][ T6028] __alloc_workqueue+0xa4f/0x1900 [ 51.774416][ T6028] alloc_workqueue_noprof+0xc7/0x130 [ 51.774443][ T6028] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 51.774482][ T6028] ieee802154_register_hw+0x10b/0xa60 [ 51.774508][ T6028] ? __pfx_ieee802154_register_hw+0x10/0x10 [ 51.774532][ T6028] ? put_online_mems+0x110/0x140 [ 51.774557][ T6028] ? lockdep_init_map_type+0x5c/0x250 [ 51.774586][ T6028] hwsim_add_one+0x6c7/0x13c0 [ 51.774619][ T6028] ? __pfx_hwsim_add_one+0x10/0x10 [ 51.774646][ T6028] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 51.774671][ T6028] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 51.774719][ T6028] genl_family_rcv_msg_doit+0x214/0x300 [ 51.774751][ T6028] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 51.774785][ T6028] ? bpf_lsm_capable+0x9/0x10 [ 51.774803][ T6028] ? security_capable+0x80/0x260 [ 51.774826][ T6028] ? ns_capable+0xcd/0xf0 [ 51.774849][ T6028] genl_rcv_msg+0x560/0x800 [ 51.774877][ T6028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 51.774902][ T6028] ? __lock_acquire+0x5c0/0x1f40 [ 51.774925][ T6028] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 51.774953][ T6028] ? __lock_acquire+0x5c0/0x1f40 [ 51.774983][ T6028] netlink_rcv_skb+0x159/0x420 [ 51.775005][ T6028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 51.775030][ T6028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 51.775061][ T6028] ? netlink_deliver_tap+0x1ae/0xb50 [ 51.775088][ T6028] genl_rcv+0x28/0x40 [ 51.775109][ T6028] netlink_unicast+0x668/0x950 [ 51.775134][ T6028] ? __pfx_netlink_unicast+0x10/0x10 [ 51.775163][ T6028] netlink_sendmsg+0x9ac/0x10c0 [ 51.775190][ T6028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.775217][ T6028] ? selinux_socket_sendmsg+0x198/0x2f0 [ 51.775244][ T6028] ? ____sys_sendmsg+0xa99/0xc30 [ 51.775267][ T6028] ____sys_sendmsg+0xa99/0xc30 [ 51.775289][ T6028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.775310][ T6028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.775344][ T6028] ? lock_acquire+0x1d1/0x380 [ 51.775367][ T6028] ? get_pid_task+0x2a/0x250 [ 51.775387][ T6028] ___sys_sendmsg+0x190/0x1e0 [ 51.775413][ T6028] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.775438][ T6028] ? get_pid_task+0x106/0x250 [ 51.775467][ T6028] ? find_held_lock+0x2b/0x80 [ 51.775501][ T6028] __sys_sendmsg+0x160/0x210 [ 51.775521][ T6028] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.775557][ T6028] do_syscall_64+0x123/0x790 [ 51.775579][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.775598][ T6028] RIP: 0033:0x7fea6019f559 [ 51.775614][ T6028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.775631][ T6028] RSP: 002b:00007fea610f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.775649][ T6028] RAX: ffffffffffffffda RBX: 00007fea60425fa0 RCX: 00007fea6019f559 [ 51.775660][ T6028] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000004 [ 51.775672][ T6028] RBP: 00007fea610f1090 R08: 0000000000000000 R09: 0000000000000000 [ 51.775681][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.775692][ T6028] R13: 00007fea60426038 R14: 00007fea60425fa0 R15: 00007ffd1c8d8e98 [ 51.775718][ T6028] [ 51.863860][ T6032] FAULT_INJECTION: forcing a failure. [ 51.863860][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 51.863885][ T6032] CPU: 2 UID: 0 PID: 6032 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 51.863902][ T6032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.863911][ T6032] Call Trace: [ 51.863917][ T6032] [ 51.863923][ T6032] dump_stack_lvl+0x100/0x190 [ 51.863954][ T6032] should_fail_ex.cold+0x5/0xa [ 51.863980][ T6032] should_failslab+0xc2/0x120 [ 51.863994][ T6032] __kmalloc_noprof+0xfc/0x840 [ 51.864018][ T6032] ? __pfx_dynamic_dname+0x10/0x10 [ 51.864034][ T6032] ? tomoyo_encode2+0xfb/0x3c0 [ 51.864055][ T6032] tomoyo_encode2+0xfb/0x3c0 [ 51.864073][ T6032] tomoyo_encode+0x29/0x50 [ 51.864082][ T6032] tomoyo_realpath_from_path+0x18c/0x690 [ 51.864132][ T6032] tomoyo_path_number_perm+0x23c/0x580 [ 51.864156][ T6032] ? tomoyo_path_number_perm+0x22e/0x580 [ 51.864179][ T6032] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 51.864206][ T6032] ? __lock_acquire+0x5c0/0x1f40 [ 51.864239][ T6032] ? __fget_files+0x34/0x3d0 [ 51.864258][ T6032] ? find_held_lock+0x2b/0x80 [ 51.864275][ T6032] ? hook_file_ioctl_common+0x140/0x440 [ 51.864296][ T6032] ? __fget_files+0x21f/0x3d0 [ 51.864318][ T6032] security_file_ioctl+0xd3/0x230 [ 51.864343][ T6032] __x64_sys_ioctl+0xb7/0x210 [ 51.864370][ T6032] do_syscall_64+0x123/0x790 [ 51.864390][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.864407][ T6032] RIP: 0033:0x7fea6019f559 [ 51.864421][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.864436][ T6032] RSP: 002b:00007fea610f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.864452][ T6032] RAX: ffffffffffffffda RBX: 00007fea60425fa0 RCX: 00007fea6019f559 [ 51.864459][ T6032] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 51.864467][ T6032] RBP: 00007fea610f1090 R08: 0000000000000000 R09: 0000000000000000 [ 51.864477][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.864486][ T6032] R13: 00007fea60426038 R14: 00007fea60425fa0 R15: 00007ffd1c8d8e98 [ 51.864509][ T6032] [ 51.864525][ T6032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 51.885429][ T42] kauditd_printk_skb: 103 callbacks suppressed [ 51.885446][ T42] audit: type=1400 audit(1793523969.537:267): avc: denied { write } for pid=6036 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.982889][ T42] audit: type=1400 audit(1793523969.627:268): avc: denied { read } for pid=6038 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.167555][ T42] audit: type=1400 audit(1793523969.817:269): avc: denied { create } for pid=6062 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.233449][ T5794] Bluetooth: hci1: command tx timeout [ 52.239587][ T42] audit: type=1400 audit(1793523969.887:270): avc: denied { setopt } for pid=6067 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.240004][ T42] audit: type=1400 audit(1793523969.887:271): avc: denied { ioctl } for pid=6067 comm="syz.1.28" path="socket:[11407]" dev="sockfs" ino=11407 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.240156][ T42] audit: type=1400 audit(1793523969.887:272): avc: denied { write } for pid=6067 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.241488][ T42] audit: type=1400 audit(1793523969.887:273): avc: denied { read } for pid=6067 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.272397][ T42] audit: type=1400 audit(1793523969.927:274): avc: denied { create } for pid=6069 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.273918][ T42] audit: type=1400 audit(1793523969.927:275): avc: denied { bind } for pid=6069 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.276949][ T42] audit: type=1400 audit(1793523969.927:276): avc: denied { listen } for pid=6069 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.300478][ T6073] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 52.402249][ T6073] md/raid0:md0: chunk size must be set. [ 52.402266][ T6073] md: pers->run() failed ... [ 52.443076][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.494664][ T6081] process 'syz.3.32' launched './file0' with NULL argv: empty string added [ 52.561114][ T6083] FAULT_INJECTION: forcing a failure. [ 52.561114][ T6083] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.561134][ T6083] CPU: 1 UID: 0 PID: 6083 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT(full) [ 52.561146][ T6083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.561152][ T6083] Call Trace: [ 52.561156][ T6083] [ 52.561160][ T6083] dump_stack_lvl+0x100/0x190 [ 52.561181][ T6083] should_fail_ex.cold+0x5/0xa [ 52.561198][ T6083] _copy_from_user+0x2e/0xd0 [ 52.561211][ T6083] copy_msghdr_from_user+0x9f/0x4c0 [ 52.561227][ T6083] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 52.561246][ T6083] ? lock_acquire+0x1d1/0x380 [ 52.561260][ T6083] ? get_pid_task+0x2a/0x250 [ 52.561280][ T6083] ___sys_sendmsg+0x106/0x1e0 [ 52.561296][ T6083] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.561311][ T6083] ? get_pid_task+0x106/0x250 [ 52.561325][ T6083] ? find_held_lock+0x2b/0x80 [ 52.561344][ T6083] __sys_sendmsg+0x160/0x210 [ 52.561356][ T6083] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.561375][ T6083] do_syscall_64+0x123/0x790 [ 52.561387][ T6083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.561397][ T6083] RIP: 0033:0x7f01acb9f559 [ 52.561406][ T6083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.561415][ T6083] RSP: 002b:00007f01adb1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.561427][ T6083] RAX: ffffffffffffffda RBX: 00007f01ace25fa0 RCX: 00007f01acb9f559 [ 52.561433][ T6083] RDX: 0000000004040000 RSI: 0000200000000440 RDI: 0000000000000003 [ 52.561439][ T6083] RBP: 00007f01adb1b090 R08: 0000000000000000 R09: 0000000000000000 [ 52.561444][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.561450][ T6083] R13: 00007f01ace26038 R14: 00007f01ace25fa0 R15: 00007ffea061e0c8 [ 52.561479][ T6083] [ 52.594119][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 52.595079][ T10] usb 7-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 52.595877][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 52.595952][ T10] usb 7-1: config 0 has no interface number 0 [ 52.595971][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 52.595990][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.605459][ T10] usb 7-1: config 0 descriptor?? [ 52.611204][ T10] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 52.633398][ T5794] Bluetooth: hci3: command tx timeout [ 52.673834][ T5880] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 52.823656][ T5880] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 52.824519][ T5880] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.825284][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.825296][ T5880] usb 6-1: SerialNumber: syz [ 52.835448][ T6066] usb usb1: usbfs: process 6066 (syz.2.27) did not claim interface 0 before use [ 52.842284][ T9] usb 7-1: USB disconnect, device number 2 [ 52.943080][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.095029][ T34] usb 8-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 53.095957][ T34] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 53.095975][ T34] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 53.095992][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.098394][ T6091] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 53.101624][ T34] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 53.304198][ T34] usb 8-1: USB disconnect, device number 2 [ 53.363995][ T5794] Bluetooth: hci2: command tx timeout [ 53.364029][ T5794] Bluetooth: hci0: command tx timeout [ 53.387926][ T6104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'. [ 53.387994][ T6104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'. [ 53.393908][ T6104] geneve2: entered promiscuous mode [ 53.401757][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.40'. [ 53.469971][ T5880] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 53.472528][ T5880] usb 6-1: USB disconnect, device number 3 [ 53.594000][ T76] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.743947][ T76] usb 5-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 53.744848][ T76] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.744884][ T76] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 53.744901][ T76] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.746216][ T76] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 53.746233][ T76] usb 5-1: Product: syz [ 53.746244][ T76] usb 5-1: Manufacturer: syz [ 53.749047][ T6102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.750562][ T76] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 53.761159][ T76] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 53.963799][ T6102] random: crng reseeded on system resumption [ 53.974768][ T5888] usb 5-1: USB disconnect, device number 2 [ 53.978663][ T5888] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 53.978982][ T5888] garmin_gps 5-1:1.0: device disconnected [ 54.077410][ T6135] FAULT_INJECTION: forcing a failure. [ 54.077410][ T6135] name failslab, interval 1, probability 0, space 0, times 0 [ 54.077430][ T6135] CPU: 1 UID: 0 PID: 6135 Comm: syz.3.49 Not tainted syzkaller #0 PREEMPT(full) [ 54.077442][ T6135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.077448][ T6135] Call Trace: [ 54.077452][ T6135] [ 54.077456][ T6135] dump_stack_lvl+0x100/0x190 [ 54.077480][ T6135] should_fail_ex.cold+0x5/0xa [ 54.077497][ T6135] should_failslab+0xc2/0x120 [ 54.077509][ T6135] __kmalloc_cache_noprof+0x91/0x6d0 [ 54.077523][ T6135] ? sctp_add_bind_addr+0xae/0x3e0 [ 54.077540][ T6135] sctp_add_bind_addr+0xae/0x3e0 [ 54.077555][ T6135] sctp_copy_local_addr_list+0x349/0x550 [ 54.077572][ T6135] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 54.077590][ T6135] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 54.077606][ T6135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.077626][ T6135] sctp_bind_addr_copy+0xe0/0x530 [ 54.077643][ T6135] sctp_connect_new_asoc+0x1c9/0x770 [ 54.077655][ T6135] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 54.077672][ T6135] sctp_sendmsg+0x1743/0x22e0 [ 54.077687][ T6135] ? __pfx_sctp_sendmsg+0x10/0x10 [ 54.077698][ T6135] ? __lock_acquire+0x560/0x1f40 [ 54.077719][ T6135] ? __pfx_sock_has_perm+0x10/0x10 [ 54.077738][ T6135] ? import_ubuf+0x1b6/0x220 [ 54.077753][ T6135] ? __pfx_sctp_sendmsg+0x10/0x10 [ 54.077765][ T6135] inet_sendmsg+0x11c/0x140 [ 54.077778][ T6135] ____sys_sendmsg+0xa23/0xc30 [ 54.077792][ T6135] ? __pfx_inet_sendmsg+0x10/0x10 [ 54.077805][ T6135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.077822][ T6135] ? _kstrtoull+0x144/0x200 [ 54.077836][ T6135] ? __pfx__kstrtoull+0x10/0x10 [ 54.077852][ T6135] ___sys_sendmsg+0x190/0x1e0 [ 54.077868][ T6135] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.077889][ T6135] ? __fget_files+0x34/0x3d0 [ 54.077911][ T6135] __sys_sendmmsg+0x20c/0x440 [ 54.077925][ T6135] ? __pfx___sys_sendmmsg+0x10/0x10 [ 54.077936][ T6135] ? ksys_write+0x190/0x250 [ 54.077956][ T6135] ? fput+0x7c/0x100 [ 54.077968][ T6135] ? ksys_write+0x1ac/0x250 [ 54.077977][ T6135] ? __pfx_ksys_write+0x10/0x10 [ 54.077989][ T6135] __x64_sys_sendmmsg+0x9c/0x100 [ 54.078001][ T6135] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.078012][ T6135] do_syscall_64+0x123/0x790 [ 54.078023][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.078034][ T6135] RIP: 0033:0x7f01acb9f559 [ 54.078044][ T6135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.078053][ T6135] RSP: 002b:00007f01adb1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.078064][ T6135] RAX: ffffffffffffffda RBX: 00007f01ace25fa0 RCX: 00007f01acb9f559 [ 54.078070][ T6135] RDX: 0000000000000001 RSI: 0000200000004400 RDI: 0000000000000003 [ 54.078076][ T6135] RBP: 00007f01adb1b090 R08: 0000000000000000 R09: 0000000000000000 [ 54.078082][ T6135] R10: 0000000020002845 R11: 0000000000000246 R12: 0000000000000002 [ 54.078088][ T6135] R13: 00007f01ace26038 R14: 00007f01ace25fa0 R15: 00007ffea061e0c8 [ 54.078102][ T6135] [ 54.115734][ T6138] deleting an unspecified loop device is not supported. [ 54.270524][ T6143] FAULT_INJECTION: forcing a failure. [ 54.270524][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 54.270543][ T6143] CPU: 3 UID: 0 PID: 6143 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) [ 54.270555][ T6143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.270561][ T6143] Call Trace: [ 54.270565][ T6143] [ 54.270569][ T6143] dump_stack_lvl+0x100/0x190 [ 54.270590][ T6143] should_fail_ex.cold+0x5/0xa [ 54.270607][ T6143] should_failslab+0xc2/0x120 [ 54.270620][ T6143] __kmalloc_noprof+0xfc/0x840 [ 54.270638][ T6143] ? __xfrm_init_state+0x1198/0x1dc0 [ 54.270650][ T6143] ? xfrm_add_sa+0x2528/0x5c50 [ 54.270662][ T6143] xfrm_add_sa+0x2528/0x5c50 [ 54.270677][ T6143] ? __pfx_xfrm_add_sa+0x10/0x10 [ 54.270689][ T6143] ? __nla_parse+0x40/0x60 [ 54.270700][ T6143] ? __pfx_xfrm_add_sa+0x10/0x10 [ 54.270711][ T6143] xfrm_user_rcv_msg+0x483/0xd70 [ 54.270730][ T6143] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 54.270747][ T6143] ? kfree_skbmem+0x19f/0x210 [ 54.270762][ T6143] ? look_up_lock_class+0x55/0x120 [ 54.270773][ T6143] ? register_lock_class+0x3f/0x7b0 [ 54.270789][ T6143] ? find_held_lock+0x2b/0x80 [ 54.270813][ T6143] ? rcu_is_watching+0x13/0xc0 [ 54.270825][ T6143] ? trace_contention_end+0x126/0x160 [ 54.270840][ T6143] ? __mutex_lock+0x267/0x1c10 [ 54.270852][ T6143] netlink_rcv_skb+0x159/0x420 [ 54.270866][ T6143] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 54.270883][ T6143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 54.270901][ T6143] ? netlink_deliver_tap+0x1ae/0xb50 [ 54.270915][ T6143] xfrm_netlink_rcv+0x71/0x90 [ 54.270930][ T6143] netlink_unicast+0x668/0x950 [ 54.270945][ T6143] ? __pfx_netlink_unicast+0x10/0x10 [ 54.270961][ T6143] netlink_sendmsg+0x9ac/0x10c0 [ 54.270976][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.270992][ T6143] ? selinux_socket_sendmsg+0x198/0x2f0 [ 54.271008][ T6143] ? ____sys_sendmsg+0xa99/0xc30 [ 54.271022][ T6143] ____sys_sendmsg+0xa99/0xc30 [ 54.271036][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.271049][ T6143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.271067][ T6143] ? lock_acquire+0x1d1/0x380 [ 54.271081][ T6143] ? get_pid_task+0x2a/0x250 [ 54.271092][ T6143] ___sys_sendmsg+0x190/0x1e0 [ 54.271108][ T6143] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.271129][ T6143] ? get_pid_task+0x106/0x250 [ 54.271144][ T6143] ? find_held_lock+0x2b/0x80 [ 54.271164][ T6143] __sys_sendmsg+0x160/0x210 [ 54.271176][ T6143] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.271195][ T6143] do_syscall_64+0x123/0x790 [ 54.271207][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.271217][ T6143] RIP: 0033:0x7f01acb9f559 [ 54.271226][ T6143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.271235][ T6143] RSP: 002b:00007f01adb1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.271246][ T6143] RAX: ffffffffffffffda RBX: 00007f01ace25fa0 RCX: 00007f01acb9f559 [ 54.271252][ T6143] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 54.271258][ T6143] RBP: 00007f01adb1b090 R08: 0000000000000000 R09: 0000000000000000 [ 54.271264][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.271269][ T6143] R13: 00007f01ace26038 R14: 00007f01ace25fa0 R15: 00007ffea061e0c8 [ 54.271283][ T6143] [ 54.323235][ T68] Bluetooth: hci1: command tx timeout [ 54.422142][ T6146] CIFS: VFS: Unknown vers= option specified: -òBÓÑ]Ä…RB š,éûˆØgâúWyø‚ã‹ 2"/›­>å4Z Ò„Fö¹YcßIGQ B±*0Ðâ‘’ãÔV&‹S…«“ÉåØmZîÓö)`sååÓAík!OwëìØåë¶zª»ôª‰"õ°RãLÆLñ°|ZuWG4&Þº²á[G [ 54.723514][ T68] Bluetooth: hci3: command tx timeout [ 54.778386][ T6156] FAULT_INJECTION: forcing a failure. [ 54.778386][ T6156] name failslab, interval 1, probability 0, space 0, times 0 [ 54.778407][ T6156] CPU: 2 UID: 0 PID: 6156 Comm: syz.2.57 Not tainted syzkaller #0 PREEMPT(full) [ 54.778420][ T6156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.778426][ T6156] Call Trace: [ 54.778430][ T6156] [ 54.778435][ T6156] dump_stack_lvl+0x100/0x190 [ 54.778457][ T6156] should_fail_ex.cold+0x5/0xa [ 54.778475][ T6156] should_failslab+0xc2/0x120 [ 54.778488][ T6156] __kmalloc_cache_noprof+0x91/0x6d0 [ 54.778502][ T6156] ? ww_mutex_lock+0x32/0x150 [ 54.778513][ T6156] ? drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 54.778534][ T6156] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 54.778551][ T6156] drm_atomic_get_crtc_state+0x1de/0x690 [ 54.778570][ T6156] drm_atomic_get_plane_state+0x4a3/0x7d0 [ 54.778589][ T6156] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 54.778606][ T6156] ? __mutex_lock+0x267/0x1c10 [ 54.778618][ T6156] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 54.778632][ T6156] ? drm_master_internal_acquire+0x21/0x80 [ 54.778644][ T6156] ? __mutex_lock+0x267/0x1c10 [ 54.778663][ T6156] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.778678][ T6156] drm_client_modeset_commit_locked+0x14d/0x580 [ 54.778694][ T6156] drm_fb_helper_pan_display+0x32d/0xa40 [ 54.778716][ T6156] fb_pan_display+0x195/0x820 [ 54.778727][ T6156] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 54.778743][ T6156] ? queue_delayed_work_on+0x122/0x1e0 [ 54.778759][ T6156] bit_update_start+0x48/0x1f0 [ 54.778773][ T6156] fbcon_switch+0x1119/0x19f0 [ 54.778788][ T6156] ? __pfx_fbcon_switch+0x10/0x10 [ 54.778807][ T6156] ? __pfx_bit_cursor+0x10/0x10 [ 54.778818][ T6156] ? fbcon_cursor+0x24c/0x5e0 [ 54.778828][ T6156] ? __mutex_unlock_slowpath+0x35d/0x930 [ 54.778839][ T6156] ? is_console_locked+0x9/0x20 [ 54.778852][ T6156] ? con_is_visible+0x65/0x150 [ 54.778868][ T6156] redraw_screen+0x2c1/0x760 [ 54.778882][ T6156] ? mark_held_locks+0x40/0x70 [ 54.778896][ T6156] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.778912][ T6156] ? __pfx_redraw_screen+0x10/0x10 [ 54.778926][ T6156] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.778946][ T6156] vc_do_resize+0xc3d/0xeb0 [ 54.778966][ T6156] ? __pfx_vc_do_resize+0x10/0x10 [ 54.778982][ T6156] ? save_fpregs_to_fpstate+0x19c/0x270 [ 54.778999][ T6156] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.779019][ T6156] fbcon_do_set_font+0x4b9/0x1090 [ 54.779036][ T6156] ? __pfx_crc32+0x10/0x10 [ 54.779047][ T6156] fbcon_set_font+0x4be/0x730 [ 54.779059][ T6156] ? __pfx_fbcon_set_font+0x10/0x10 [ 54.779069][ T6156] con_font_op+0x991/0x1020 [ 54.779082][ T6156] ? __pfx_con_font_op+0x10/0x10 [ 54.779108][ T6156] ? __might_fault+0xc5/0x140 [ 54.779121][ T6156] ? __might_fault+0xc5/0x140 [ 54.779138][ T6156] vt_ioctl+0xe00/0x3170 [ 54.779153][ T6156] ? __pfx_vt_ioctl+0x10/0x10 [ 54.779166][ T6156] ? tomoyo_path_number_perm+0x28f/0x580 [ 54.779184][ T6156] ? tomoyo_path_number_perm+0x188/0x580 [ 54.779203][ T6156] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.779221][ T6156] ? tty_jobctrl_ioctl+0x152/0xce0 [ 54.779234][ T6156] ? __pfx_vt_ioctl+0x10/0x10 [ 54.779247][ T6156] tty_ioctl+0x26a/0x1870 [ 54.779262][ T6156] ? __pfx_tty_ioctl+0x10/0x10 [ 54.779270][ T6156] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 54.779289][ T6156] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 54.779308][ T6156] ? __fget_files+0x34/0x3d0 [ 54.779327][ T6156] ? selinux_file_ioctl+0x1e0/0x290 [ 54.779342][ T6156] ? selinux_file_ioctl+0x1e7/0x290 [ 54.779358][ T6156] ? __pfx_tty_ioctl+0x10/0x10 [ 54.779371][ T6156] __x64_sys_ioctl+0x18e/0x210 [ 54.779389][ T6156] do_syscall_64+0x123/0x790 [ 54.779402][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.779413][ T6156] RIP: 0033:0x7fea6019f559 [ 54.779422][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.779432][ T6156] RSP: 002b:00007fea610f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.779442][ T6156] RAX: ffffffffffffffda RBX: 00007fea60425fa0 RCX: 00007fea6019f559 [ 54.779449][ T6156] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003 [ 54.779455][ T6156] RBP: 00007fea610f1090 R08: 0000000000000000 R09: 0000000000000000 [ 54.779460][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.779466][ T6156] R13: 00007fea60426038 R14: 00007fea60425fa0 R15: 00007ffd1c8d8e98 [ 54.779481][ T6156] [ 54.796481][ T6002] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.898670][ T5888] hid-generic 0003:0001:0001.0002: hidraw1: USB HID v0.01 Mouse [syz1] on syz0 [ 54.932408][ T6161] fido_id[6161]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.967789][ T6002] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 54.968617][ T6002] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.969432][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 54.969443][ T6002] usb 5-1: SerialNumber: syz [ 55.020455][ T6170] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 55.047288][ T5782] cgroup: fork rejected by pids controller in /syz1 [ 55.060776][ T6175] trusted_key: syz.2.66 sent an empty control message without MSG_MORE. [ 55.316084][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 55.316214][ T6184] bridge_slave_1: left allmulticast mode [ 55.316234][ T6184] bridge_slave_1: left promiscuous mode [ 55.318064][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.318387][ T6184] FAULT_INJECTION: forcing a failure. [ 55.318387][ T6184] name failslab, interval 1, probability 0, space 0, times 0 [ 55.318410][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT(full) [ 55.318432][ T6184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.318442][ T6184] Call Trace: [ 55.318449][ T6184] [ 55.318456][ T6184] dump_stack_lvl+0x100/0x190 [ 55.318494][ T6184] should_fail_ex.cold+0x5/0xa [ 55.318522][ T6184] should_failslab+0xc2/0x120 [ 55.318544][ T6184] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 55.318572][ T6184] ? __alloc_skb+0x140/0x710 [ 55.318597][ T6184] __alloc_skb+0x140/0x710 [ 55.318614][ T6184] ? __alloc_skb+0x5b7/0x710 [ 55.318632][ T6184] ? __pfx___alloc_skb+0x10/0x10 [ 55.318653][ T6184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.318687][ T6184] __br_mdb_notify+0x91/0x860 [ 55.318708][ T6184] __br_multicast_del_pg+0x231/0x1ce0 [ 55.318723][ T6184] ? br_mdb_ip_get+0x546/0xad0 [ 55.318739][ T6184] br_multicast_find_del_pg.part.0+0x132/0x190 [ 55.318755][ T6184] __br_multicast_disable_port_ctx+0x40d/0x5f0 [ 55.318772][ T6184] br_multicast_disable_port+0x15a/0x1f0 [ 55.318788][ T6184] br_stp_disable_port+0x124/0x1e0 [ 55.318806][ T6184] del_nbp+0x14e/0xe30 [ 55.318823][ T6184] br_dev_delete+0x96/0x1c0 [ 55.318839][ T6184] rtnl_dellink+0x460/0xb30 [ 55.318854][ T6184] ? __pfx_br_dev_delete+0x10/0x10 [ 55.318867][ T6184] ? kasan_save_free_info+0x3b/0x70 [ 55.318883][ T6184] ? __kasan_slab_free+0x5f/0x80 [ 55.318894][ T6184] ? kmem_cache_free+0x127/0x6c0 [ 55.318910][ T6184] ? __pfx_rtnl_dellink+0x10/0x10 [ 55.318924][ T6184] ? dev_hard_start_xmit+0x121/0x760 [ 55.318943][ T6184] ? netlink_unicast+0x708/0x950 [ 55.318957][ T6184] ? netlink_sendmsg+0x9ac/0x10c0 [ 55.318998][ T6184] ? __lock_acquire+0x5c0/0x1f40 [ 55.319016][ T6184] ? hook_capable+0x1bc/0x500 [ 55.319038][ T6184] ? lock_acquire+0x1d1/0x380 [ 55.319054][ T6184] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 55.319070][ T6184] ? find_held_lock+0x2b/0x80 [ 55.319083][ T6184] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 55.319098][ T6184] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 55.319115][ T6184] ? __pfx_rtnl_dellink+0x10/0x10 [ 55.319130][ T6184] rtnetlink_rcv_msg+0x95e/0xe90 [ 55.319154][ T6184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.319178][ T6184] netlink_rcv_skb+0x159/0x420 [ 55.319193][ T6184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.319210][ T6184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 55.319230][ T6184] ? netlink_deliver_tap+0x1ae/0xb50 [ 55.319247][ T6184] netlink_unicast+0x668/0x950 [ 55.319265][ T6184] ? __pfx_netlink_unicast+0x10/0x10 [ 55.319284][ T6184] netlink_sendmsg+0x9ac/0x10c0 [ 55.319301][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.319320][ T6184] ? selinux_socket_sendmsg+0x198/0x2f0 [ 55.319339][ T6184] ? sock_write_iter+0x560/0x5d0 [ 55.319356][ T6184] sock_write_iter+0x560/0x5d0 [ 55.319375][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.319390][ T6184] ? __pfx_sock_write_iter+0x10/0x10 [ 55.319411][ T6184] ? bpf_lsm_file_permission+0x9/0x10 [ 55.319429][ T6184] ? security_file_permission+0x76/0x210 [ 55.319449][ T6184] ? rw_verify_area+0xce/0x6d0 [ 55.319469][ T6184] vfs_write+0x6af/0x1050 [ 55.319481][ T6184] ? __pfx_sock_write_iter+0x10/0x10 [ 55.319500][ T6184] ? __pfx_vfs_write+0x10/0x10 [ 55.319510][ T6184] ? find_held_lock+0x2b/0x80 [ 55.319533][ T6184] ksys_write+0x1f8/0x250 [ 55.319544][ T6184] ? __pfx_ksys_write+0x10/0x10 [ 55.319560][ T6184] do_syscall_64+0x123/0x790 [ 55.319575][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.319588][ T6184] RIP: 0033:0x7fea6019f559 [ 55.319599][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.319628][ T6184] RSP: 002b:00007fea610f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.319641][ T6184] RAX: ffffffffffffffda RBX: 00007fea60425fa0 RCX: 00007fea6019f559 [ 55.319651][ T6184] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 55.319659][ T6184] RBP: 00007fea610f1090 R08: 0000000000000000 R09: 0000000000000000 [ 55.319666][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.319673][ T6184] R13: 00007fea60426038 R14: 00007fea60425fa0 R15: 00007ffd1c8d8e98 [ 55.319689][ T6184] [ 55.326782][ T6184] bridge_slave_0: left allmulticast mode [ 55.326800][ T6184] bridge_slave_0: left promiscuous mode [ 55.327000][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.397986][ T5896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.435025][ T68] Bluetooth: hci2: command tx timeout [ 55.472643][ T5896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.538108][ T5896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.548627][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.549468][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.550008][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.550855][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.551383][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.596706][ T5896] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.624918][ T6002] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 55.627921][ T6002] usb 5-1: USB disconnect, device number 3 [ 55.708515][ T5896] bridge_slave_1: left allmulticast mode [ 55.708540][ T5896] bridge_slave_1: left promiscuous mode [ 55.709516][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.716478][ T5896] bridge_slave_0: left allmulticast mode [ 55.716496][ T5896] bridge_slave_0: left promiscuous mode [ 55.716759][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.826802][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.829134][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.830152][ T5896] bond0 (unregistering): Released all slaves [ 55.892808][ T6190] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.018031][ T5497] 8021q: adding VLAN 0 to HW filter on device eth2 [ 56.044684][ T6221] FAULT_INJECTION: forcing a failure. [ 56.044684][ T6221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.044706][ T6221] CPU: 2 UID: 0 PID: 6221 Comm: syz.2.76 Not tainted syzkaller #0 PREEMPT(full) [ 56.044718][ T6221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.044724][ T6221] Call Trace: [ 56.044728][ T6221] [ 56.044733][ T6221] dump_stack_lvl+0x100/0x190 [ 56.044755][ T6221] should_fail_ex.cold+0x5/0xa [ 56.044787][ T6221] _copy_to_user+0x32/0xd0 [ 56.044801][ T6221] do_sock_getsockopt+0x4d3/0x570 [ 56.044815][ T6221] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 56.044829][ T6221] ? __fget_files+0x34/0x3d0 [ 56.044842][ T6221] ? find_held_lock+0x2b/0x80 [ 56.044857][ T6221] ? __fget_files+0x21f/0x3d0 [ 56.044873][ T6221] __sys_getsockopt+0x148/0x260 [ 56.044887][ T6221] ? __x64_sys_getsockopt+0xbd/0x160 [ 56.044898][ T6221] __x64_sys_getsockopt+0xbd/0x160 [ 56.044908][ T6221] ? do_syscall_64+0xae/0x790 [ 56.044919][ T6221] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.044929][ T6221] do_syscall_64+0x123/0x790 [ 56.044940][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.044951][ T6221] RIP: 0033:0x7fea6019f559 [ 56.044960][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.044970][ T6221] RSP: 002b:00007fea610f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 56.044980][ T6221] RAX: ffffffffffffffda RBX: 00007fea60425fa0 RCX: 00007fea6019f559 [ 56.044986][ T6221] RDX: 0000000000000002 RSI: 0000000000000012 RDI: 0000000000000004 [ 56.044992][ T6221] RBP: 00007fea610f1090 R08: 0000200000000080 R09: 0000000000000000 [ 56.044998][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.045004][ T6221] R13: 00007fea60426038 R14: 00007fea60425fa0 R15: 00007ffd1c8d8e98 [ 56.045017][ T6221] [ 56.059285][ T6223] usb 2-1: USB disconnect, device number 2 [ 56.100267][ T6227] netlink: 64 bytes leftover after parsing attributes in process `syz.2.78'. [ 56.100400][ T6227] netlink: 64 bytes leftover after parsing attributes in process `syz.2.78'. [ 56.100471][ T6227] netlink: 64 bytes leftover after parsing attributes in process `syz.2.78'. [ 56.100539][ T6227] netlink: 64 bytes leftover after parsing attributes in process `syz.2.78'. [ 56.100614][ T6227] netlink: 64 bytes leftover after parsing attributes in process `syz.2.78'. [ 56.179435][ T6226] sg_read: process 87 (syz.2.78) changed security contexts after opening file descriptor, this is not allowed. [ 56.315587][ T5896] hsr_slave_0: left promiscuous mode [ 56.316461][ T5896] hsr_slave_1: left promiscuous mode [ 56.316913][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.316930][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.320133][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.320145][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.332740][ T5896] veth1_macvtap: left promiscuous mode [ 56.332772][ T5896] veth0_macvtap: left promiscuous mode [ 56.333929][ T5896] veth1_vlan: left promiscuous mode [ 56.333977][ T5896] veth0_vlan: left promiscuous mode [ 56.349999][ T6251] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 56.487771][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 56.500634][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 56.527852][ T6261] FAULT_INJECTION: forcing a failure. [ 56.527852][ T6261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.527874][ T6261] CPU: 2 UID: 0 PID: 6261 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT(full) [ 56.527887][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.527893][ T6261] Call Trace: [ 56.527897][ T6261] [ 56.527902][ T6261] dump_stack_lvl+0x100/0x190 [ 56.527926][ T6261] should_fail_ex.cold+0x5/0xa [ 56.527944][ T6261] _copy_from_user+0x2e/0xd0 [ 56.527958][ T6261] copy_msghdr_from_user+0x9f/0x4c0 [ 56.527976][ T6261] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 56.527997][ T6261] ? lock_acquire+0x1d1/0x380 [ 56.528012][ T6261] ? get_pid_task+0x2a/0x250 [ 56.528025][ T6261] ___sys_sendmsg+0x106/0x1e0 [ 56.528042][ T6261] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.528059][ T6261] ? get_pid_task+0x106/0x250 [ 56.528074][ T6261] ? find_held_lock+0x2b/0x80 [ 56.528132][ T6261] __sys_sendmsg+0x160/0x210 [ 56.528153][ T6261] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.528187][ T6261] do_syscall_64+0x123/0x790 [ 56.528211][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.528229][ T6261] RIP: 0033:0x7f48b179f559 [ 56.528246][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.528261][ T6261] RSP: 002b:00007f48b2697028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.528276][ T6261] RAX: ffffffffffffffda RBX: 00007f48b1a25fa0 RCX: 00007f48b179f559 [ 56.528283][ T6261] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 56.528289][ T6261] RBP: 00007f48b2697090 R08: 0000000000000000 R09: 0000000000000000 [ 56.528296][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.528302][ T6261] R13: 00007f48b1a26038 R14: 00007f48b1a25fa0 R15: 00007fff909ccce8 [ 56.528317][ T6261] [ 56.594250][ T5497] 8021q: adding VLAN 0 to HW filter on device eth3 [ 56.625719][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.625783][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.625864][ T6190] bridge_slave_0: entered allmulticast mode [ 56.627082][ T6190] bridge_slave_0: entered promiscuous mode [ 56.628739][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.628783][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.628895][ T6190] bridge_slave_1: entered allmulticast mode [ 56.629702][ T6190] bridge_slave_1: entered promiscuous mode [ 56.630831][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.630842][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.650332][ T6190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.655638][ T6190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.678045][ T6190] team0: Port device team_slave_0 added [ 56.679325][ T6190] team0: Port device team_slave_1 added [ 56.699768][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.699781][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.699796][ T6190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.700947][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.700957][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.700972][ T6190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.746552][ T6190] hsr_slave_0: entered promiscuous mode [ 56.747009][ T6190] hsr_slave_1: entered promiscuous mode [ 56.810388][ T5497] 8021q: adding VLAN 0 to HW filter on device eth4 [ 56.899417][ T42] kauditd_printk_skb: 83 callbacks suppressed [ 56.899432][ T42] audit: type=1400 audit(1793523974.547:360): avc: denied { write } for pid=6277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.931214][ T42] audit: type=1400 audit(1793523974.577:361): avc: denied { mount } for pid=6280 comm="syz.3.89" name="/" dev="9p" ino=71827601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.938718][ T42] audit: type=1400 audit(1793523974.587:362): avc: denied { write } for pid=6280 comm="syz.3.89" name="/" dev="9p" ino=71827601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.939388][ T42] audit: type=1400 audit(1793523974.587:363): avc: denied { add_name } for pid=6280 comm="syz.3.89" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.940279][ T42] audit: type=1400 audit(1793523974.587:364): avc: denied { create } for pid=6280 comm="syz.3.89" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.940401][ T42] audit: type=1400 audit(1793523974.587:365): avc: denied { associate } for pid=6280 comm="syz.3.89" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.944957][ T42] audit: type=1400 audit(1793523974.597:366): avc: denied { read write } for pid=6280 comm="syz.3.89" name="file1" dev="9p" ino=71827723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.944986][ T42] audit: type=1400 audit(1793523974.597:367): avc: denied { open } for pid=6280 comm="syz.3.89" path="/19/file0/file1" dev="9p" ino=71827723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.948312][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.961468][ T42] audit: type=1400 audit(1793523974.607:368): avc: denied { write } for pid=6282 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.968640][ T42] audit: type=1400 audit(1793523974.617:369): avc: denied { ioctl } for pid=6266 comm="syz.0.87" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x40085503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.157225][ T24] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 57.160470][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.163780][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 57.163803][ T24] usb 5-1: SerialNumber: syz [ 57.208895][ T6291] device-mapper: table: 248:0: raid: RAID device lookup failure (-ENOENT) [ 57.208922][ T6291] device-mapper: ioctl: error adding target to table [ 57.274249][ T6190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.277664][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.278551][ T6190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.283174][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.290177][ T6190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.295204][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.296073][ T6190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.299419][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.361334][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.370546][ T6190] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.376482][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.376529][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.383186][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.383233][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.424614][ T6308] __nla_validate_parse: 34 callbacks suppressed [ 57.424682][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 57.439908][ T6308] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 57.594448][ T68] Bluetooth: hci0: command tx timeout [ 57.659624][ T6326] support for cryptoloop has been removed. Use dm-crypt instead. [ 57.703451][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.707093][ T6334] team0: entered allmulticast mode [ 57.707109][ T6334] team_slave_0: entered allmulticast mode [ 57.707120][ T6334] team_slave_1: entered allmulticast mode [ 57.707584][ T6334] team0: Cannot enslave team device to itself [ 57.727167][ T6190] veth0_vlan: entered promiscuous mode [ 57.730939][ T6190] veth1_vlan: entered promiscuous mode [ 57.746544][ T6190] veth0_macvtap: entered promiscuous mode [ 57.749653][ T6190] veth1_macvtap: entered promiscuous mode [ 57.762640][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.777832][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.822598][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.822613][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.850169][ T6055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.850184][ T6055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.858488][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 57.862544][ T24] usb 5-1: USB disconnect, device number 4 [ 57.865469][ T5896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.933413][ T5896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.933489][ T5896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.933549][ T5896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.939078][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 57.991126][ T6353] gadgetfs: bound to dummy_udc driver [ 58.088094][ T6358] kvm: MONITOR instruction emulated as NOP! [ 58.215955][ T6372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6372 comm=syz.1.102 [ 58.313075][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.313399][ C2] gadgetfs: connected [ 58.313817][ T24] gadgetfs: disconnected [ 58.414124][ T63] Bluetooth: hci4: Frame reassembly failed (-84) [ 58.456889][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 58.456931][ T6382] FAULT_INJECTION: forcing a failure. [ 58.456931][ T6382] name failslab, interval 1, probability 0, space 0, times 0 [ 58.456948][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.1.104 Not tainted syzkaller #0 PREEMPT(full) [ 58.456966][ T6382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.456974][ T6382] Call Trace: [ 58.456989][ T6382] [ 58.456997][ T6382] dump_stack_lvl+0x100/0x190 [ 58.457038][ T6382] should_fail_ex.cold+0x5/0xa [ 58.457062][ T6382] should_failslab+0xc2/0x120 [ 58.457095][ T6382] kmem_cache_alloc_noprof+0x92/0x6a0 [ 58.457128][ T6382] ? netlink_deliver_tap+0x103/0xb50 [ 58.457158][ T6382] ? skb_clone+0x187/0x3f0 [ 58.457189][ T6382] skb_clone+0x187/0x3f0 [ 58.457208][ T6382] netlink_deliver_tap+0x82f/0xb50 [ 58.457231][ T6382] netlink_unicast+0x784/0x950 [ 58.457253][ T6382] ? __pfx_netlink_unicast+0x10/0x10 [ 58.457279][ T6382] netlink_ack+0x660/0xba0 [ 58.457304][ T6382] netlink_rcv_skb+0x333/0x420 [ 58.457323][ T6382] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 58.457359][ T6382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 58.457389][ T6382] ? ns_capable+0xcd/0xf0 [ 58.457410][ T6382] nfnetlink_rcv+0x1b3/0x440 [ 58.457433][ T6382] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 58.457455][ T6382] ? netlink_deliver_tap+0x1ae/0xb50 [ 58.457478][ T6382] netlink_unicast+0x668/0x950 [ 58.457500][ T6382] ? __pfx_netlink_unicast+0x10/0x10 [ 58.457525][ T6382] netlink_sendmsg+0x9ac/0x10c0 [ 58.457549][ T6382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.457574][ T6382] ? selinux_socket_sendmsg+0x198/0x2f0 [ 58.457608][ T6382] ? ____sys_sendmsg+0xa99/0xc30 [ 58.457628][ T6382] ____sys_sendmsg+0xa99/0xc30 [ 58.457647][ T6382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.457669][ T6382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.457695][ T6382] ? lock_acquire+0x1d1/0x380 [ 58.457730][ T6382] ? get_pid_task+0x2a/0x250 [ 58.457758][ T6382] ___sys_sendmsg+0x190/0x1e0 [ 58.457781][ T6382] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.457803][ T6382] ? get_pid_task+0x106/0x250 [ 58.457828][ T6382] ? find_held_lock+0x2b/0x80 [ 58.457861][ T6382] __sys_sendmsg+0x160/0x210 [ 58.457879][ T6382] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.457910][ T6382] do_syscall_64+0x123/0x790 [ 58.457935][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.457952][ T6382] RIP: 0033:0x7f853e19f559 [ 58.457967][ T6382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.457982][ T6382] RSP: 002b:00007f853f0b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.457998][ T6382] RAX: ffffffffffffffda RBX: 00007f853e425fa0 RCX: 00007f853e19f559 [ 58.458007][ T6382] RDX: 0000000000000040 RSI: 0000200000000380 RDI: 0000000000000003 [ 58.458017][ T6382] RBP: 00007f853f0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 58.458025][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.458034][ T6382] R13: 00007f853e426038 R14: 00007f853e425fa0 R15: 00007ffdcfb6e188 [ 58.458057][ T6382] [ 58.471474][ C2] gadgetfs: connected [ 58.475807][ T24] usb 5-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 58.488503][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.492406][ C2] gadgetfs: configuration #1 [ 58.497196][ T6383] netlink: 'syz.0.103': attribute type 3 has an invalid length. [ 58.497214][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.103'. [ 58.498215][ T24] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input8 [ 58.501987][ T6386] syz.1.105 uses obsolete (PF_INET,SOCK_PACKET) [ 58.510196][ C2] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 58.576611][ T6360] gadgetfs: suspended from state 3 [ 58.577663][ T34] usb 5-1: USB disconnect, device number 5 [ 58.579048][ T6360] gadgetfs: disconnected [ 58.600488][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.629908][ T6390] capability: warning: `syz.3.106' uses 32-bit capabilities (legacy support in use) [ 58.631013][ T6390] 9pnet_fd: p9_fd_create_tcp (6390): problem binding to privport [ 58.707374][ T6405] FAULT_INJECTION: forcing a failure. [ 58.707374][ T6405] name failslab, interval 1, probability 0, space 0, times 0 [ 58.707392][ T6405] CPU: 1 UID: 0 PID: 6405 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT(full) [ 58.707404][ T6405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.707410][ T6405] Call Trace: [ 58.707414][ T6405] [ 58.707418][ T6405] dump_stack_lvl+0x100/0x190 [ 58.707441][ T6405] should_fail_ex.cold+0x5/0xa [ 58.707457][ T6405] should_failslab+0xc2/0x120 [ 58.707469][ T6405] __kmalloc_noprof+0xfc/0x840 [ 58.707485][ T6405] ? tomoyo_encode2+0xfb/0x3c0 [ 58.707513][ T6405] tomoyo_encode2+0xfb/0x3c0 [ 58.707524][ T6405] tomoyo_encode+0x29/0x50 [ 58.707533][ T6405] tomoyo_realpath_from_path+0x18c/0x690 [ 58.707546][ T6405] tomoyo_path_number_perm+0x23c/0x580 [ 58.707561][ T6405] ? tomoyo_path_number_perm+0x22e/0x580 [ 58.707576][ T6405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 58.707596][ T6405] ? __lock_acquire+0x5c0/0x1f40 [ 58.707617][ T6405] ? __fget_files+0x34/0x3d0 [ 58.707638][ T6405] ? find_held_lock+0x2b/0x80 [ 58.707648][ T6405] ? hook_file_ioctl_common+0x140/0x440 [ 58.707663][ T6405] ? __fget_files+0x21f/0x3d0 [ 58.707677][ T6405] security_file_ioctl+0xd3/0x230 [ 58.707700][ T6405] __x64_sys_ioctl+0xb7/0x210 [ 58.707726][ T6405] do_syscall_64+0x123/0x790 [ 58.707738][ T6405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.707749][ T6405] RIP: 0033:0x7f01acb9f559 [ 58.707757][ T6405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.707766][ T6405] RSP: 002b:00007f01adb1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.707777][ T6405] RAX: ffffffffffffffda RBX: 00007f01ace25fa0 RCX: 00007f01acb9f559 [ 58.707784][ T6405] RDX: 0000200000000580 RSI: 00000000c01864cd RDI: 0000000000000004 [ 58.707790][ T6405] RBP: 00007f01adb1b090 R08: 0000000000000000 R09: 0000000000000000 [ 58.707796][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.707801][ T6405] R13: 00007f01ace26038 R14: 00007f01ace25fa0 R15: 00007ffea061e0c8 [ 58.707815][ T6405] [ 58.707824][ T6405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 58.753376][ T6410] veth1_macvtap: left promiscuous mode [ 58.753401][ T6410] macsec0: entered promiscuous mode [ 58.753413][ T6410] macsec0: entered allmulticast mode [ 58.763897][ T6410] veth1_macvtap: entered promiscuous mode [ 58.763917][ T6410] veth1_macvtap: entered allmulticast mode [ 58.764135][ T6410] macsec0: left promiscuous mode [ 58.764353][ T6410] macsec0: left allmulticast mode [ 58.764365][ T6410] veth1_macvtap: left allmulticast mode [ 58.871589][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.872061][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.872295][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.923128][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.994853][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 59.040246][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.043942][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.043976][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.044010][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.044030][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.044050][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.044117][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.044135][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.044169][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.044187][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.046723][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 59.081646][ T6428] fido_id[6428]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.123695][ T10] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 59.128667][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 59.129672][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 59.129691][ T10] usb 6-1: SerialNumber: syz [ 59.199630][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 2 < 9 [ 59.250684][ T6434] Bluetooth: ISO socket layer initialized [ 59.252601][ T6434] Bluetooth: MGMT ver 1.23 [ 59.508662][ T6436] cgroup: fork rejected by pids controller in /syz3 [ 59.683949][ T5794] Bluetooth: hci0: command tx timeout [ 59.789844][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 59.795693][ T10] usb 6-1: USB disconnect, device number 4 [ 60.484293][ T5794] Bluetooth: hci4: command 0x1003 tx timeout [ 60.484631][ T68] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 60.573742][ T6528] tap0: tun_chr_ioctl cmd 1074025675 [ 60.573766][ T6528] tap0: persist enabled [ 60.573902][ T6528] tap0: tun_chr_ioctl cmd 1074025675 [ 60.573910][ T6528] tap0: persist enabled [ 60.705439][ T6531] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 60.913108][ T41] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.066394][ T41] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 61.067315][ T41] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 61.068416][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 61.068436][ T41] usb 8-1: SerialNumber: syz [ 61.104814][ T6543] ucma_write: process 55 (syz.0.136) changed security contexts after opening file descriptor, this is not allowed. [ 61.273594][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.325755][ T6549] FAULT_INJECTION: forcing a failure. [ 61.325755][ T6549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.325784][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.0.139 Not tainted syzkaller #0 PREEMPT(full) [ 61.325797][ T6549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.325804][ T6549] Call Trace: [ 61.325808][ T6549] [ 61.325812][ T6549] dump_stack_lvl+0x100/0x190 [ 61.325834][ T6549] should_fail_ex.cold+0x5/0xa [ 61.325851][ T6549] should_fail_alloc_page+0xeb/0x140 [ 61.325865][ T6549] prepare_alloc_pages+0x1f0/0x5b0 [ 61.325879][ T6549] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 61.325895][ T6549] ? __pfx_get_page_from_freelist+0x10/0x10 [ 61.325912][ T6549] ? rcu_is_watching+0x13/0xc0 [ 61.325939][ T6549] ? trace_mm_page_alloc+0x164/0x1c0 [ 61.325951][ T6549] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 61.325968][ T6549] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 61.325986][ T6549] ? stack_trace_save+0x8e/0xc0 [ 61.326012][ T6549] ? __pfx_stack_trace_save+0x10/0x10 [ 61.326027][ T6549] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 61.326046][ T6549] ? __kasan_slab_alloc+0x89/0x90 [ 61.326057][ T6549] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 61.326072][ T6549] ? alloc_vmap_area+0x643/0x2bc0 [ 61.326088][ T6549] ? __get_vm_area_node+0x1ed/0x350 [ 61.326097][ T6549] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 61.326108][ T6549] ? __vmalloc_node_noprof+0xad/0xf0 [ 61.326118][ T6549] ? copy_process+0x80b/0x8510 [ 61.326130][ T6549] ? vhost_task_create+0x1db/0x370 [ 61.326142][ T6549] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 61.326157][ T6549] ? kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 61.326172][ T6549] ? kvm_vcpu_ioctl+0x735/0x17b0 [ 61.326187][ T6549] ? __x64_sys_ioctl+0x18e/0x210 [ 61.326204][ T6549] ? do_syscall_64+0x123/0x790 [ 61.326214][ T6549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.326229][ T6549] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 61.326248][ T6549] ? policy_nodemask+0xed/0x5e0 [ 61.326262][ T6549] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 61.326286][ T6549] __kasan_populate_vmalloc+0xf0/0x210 [ 61.326306][ T6549] alloc_vmap_area+0x963/0x2bc0 [ 61.326327][ T6549] ? kasan_save_track+0x14/0x30 [ 61.326337][ T6549] ? __kasan_kmalloc+0xaa/0xb0 [ 61.326347][ T6549] ? __pfx_alloc_vmap_area+0x10/0x10 [ 61.326364][ T6549] ? __get_vm_area_node+0x124/0x350 [ 61.326376][ T6549] __get_vm_area_node+0x1ed/0x350 [ 61.326389][ T6549] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 61.326401][ T6549] ? vhost_task_create+0x1db/0x370 [ 61.326414][ T6549] ? lock_acquire+0x1d1/0x380 [ 61.326433][ T6549] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 61.326454][ T6549] ? find_held_lock+0x2b/0x80 [ 61.326470][ T6549] ? rcu_read_unlock+0x17/0x60 [ 61.326490][ T6549] ? vhost_task_create+0x1db/0x370 [ 61.326511][ T6549] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 61.326530][ T6549] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 61.326543][ T6549] ? rcu_is_watching+0x13/0xc0 [ 61.326554][ T6549] ? trace_kmem_cache_alloc+0xdd/0x100 [ 61.326567][ T6549] ? vhost_task_create+0x1db/0x370 [ 61.326579][ T6549] __vmalloc_node_noprof+0xad/0xf0 [ 61.326591][ T6549] ? vhost_task_create+0x1db/0x370 [ 61.326605][ T6549] copy_process+0x80b/0x8510 [ 61.326626][ T6549] ? __pfx_copy_process+0x10/0x10 [ 61.326639][ T6549] ? kasan_save_track+0x14/0x30 [ 61.326649][ T6549] ? __kasan_kmalloc+0xaa/0xb0 [ 61.326659][ T6549] ? lockdep_init_map_type+0x5c/0x250 [ 61.326675][ T6549] ? lockdep_init_map_type+0x5c/0x250 [ 61.326691][ T6549] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 61.326703][ T6549] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 61.326721][ T6549] vhost_task_create+0x1db/0x370 [ 61.326734][ T6549] ? __pfx_vhost_task_create+0x10/0x10 [ 61.326751][ T6549] ? __pfx_vhost_task_fn+0x10/0x10 [ 61.326772][ T6549] ? register_lock_class+0x3f/0x7b0 [ 61.326793][ T6549] ? rcu_is_watching+0x13/0xc0 [ 61.326807][ T6549] ? trace_contention_end+0x126/0x160 [ 61.326826][ T6549] kvm_mmu_post_init_vm+0x1b3/0x360 [ 61.326842][ T6549] kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 61.326865][ T6549] ? __pfx___mutex_lock+0x10/0x10 [ 61.326881][ T6549] ? kasan_quarantine_put+0x104/0x240 [ 61.326901][ T6549] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 61.326916][ T6549] ? lock_acquire+0x1d1/0x380 [ 61.326936][ T6549] ? do_raw_write_lock+0x11e/0x260 [ 61.326949][ T6549] ? find_held_lock+0x2b/0x80 [ 61.326965][ T6549] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 61.326989][ T6549] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 61.327008][ T6549] kvm_vcpu_ioctl+0x735/0x17b0 [ 61.327027][ T6549] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 61.327044][ T6549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.327073][ T6549] ? do_vfs_ioctl+0x226/0x13e0 [ 61.327090][ T6549] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 61.327106][ T6549] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 61.327125][ T6549] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 61.327144][ T6549] ? __fget_files+0x34/0x3d0 [ 61.327164][ T6549] ? selinux_file_ioctl+0x1e0/0x290 [ 61.327179][ T6549] ? selinux_file_ioctl+0x1e7/0x290 [ 61.327196][ T6549] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 61.327214][ T6549] __x64_sys_ioctl+0x18e/0x210 [ 61.327232][ T6549] do_syscall_64+0x123/0x790 [ 61.327244][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.327255][ T6549] RIP: 0033:0x7f48b179f559 [ 61.327267][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.327277][ T6549] RSP: 002b:00007f48b2697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.327288][ T6549] RAX: ffffffffffffffda RBX: 00007f48b1a25fa0 RCX: 00007f48b179f559 [ 61.327295][ T6549] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 61.327301][ T6549] RBP: 00007f48b2697090 R08: 0000000000000000 R09: 0000000000000000 [ 61.327307][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.327314][ T6549] R13: 00007f48b1a26038 R14: 00007f48b1a25fa0 R15: 00007fff909ccce8 [ 61.327328][ T6549] [ 61.327706][ T6549] syz.0.139: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 61.327758][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.0.139 Not tainted syzkaller #0 PREEMPT(full) [ 61.327777][ T6549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.327783][ T6549] Call Trace: [ 61.327788][ T6549] [ 61.327793][ T6549] dump_stack_lvl+0x100/0x190 [ 61.327814][ T6549] warn_alloc.cold+0x9e/0xb2 [ 61.327827][ T6549] ? __pfx_warn_alloc+0x10/0x10 [ 61.327843][ T6549] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.327856][ T6549] ? __get_vm_area_node+0x2f0/0x350 [ 61.327871][ T6549] ? __get_vm_area_node+0x22b/0x350 [ 61.327885][ T6549] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 61.327898][ T6549] ? lock_acquire+0x1d1/0x380 [ 61.327914][ T6549] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 61.327932][ T6549] ? find_held_lock+0x2b/0x80 [ 61.327945][ T6549] ? rcu_read_unlock+0x17/0x60 [ 61.327961][ T6549] ? vhost_task_create+0x1db/0x370 [ 61.327976][ T6549] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 61.327994][ T6549] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 61.328008][ T6549] ? rcu_is_watching+0x13/0xc0 [ 61.328021][ T6549] ? trace_kmem_cache_alloc+0xdd/0x100 [ 61.328035][ T6549] ? vhost_task_create+0x1db/0x370 [ 61.328048][ T6549] __vmalloc_node_noprof+0xad/0xf0 [ 61.328086][ T6549] ? vhost_task_create+0x1db/0x370 [ 61.328104][ T6549] copy_process+0x80b/0x8510 [ 61.328128][ T6549] ? __pfx_copy_process+0x10/0x10 [ 61.328142][ T6549] ? kasan_save_track+0x14/0x30 [ 61.328152][ T6549] ? __kasan_kmalloc+0xaa/0xb0 [ 61.328164][ T6549] ? lockdep_init_map_type+0x5c/0x250 [ 61.328181][ T6549] ? lockdep_init_map_type+0x5c/0x250 [ 61.328199][ T6549] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 61.328213][ T6549] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 61.328231][ T6549] vhost_task_create+0x1db/0x370 [ 61.328245][ T6549] ? __pfx_vhost_task_create+0x10/0x10 [ 61.328265][ T6549] ? __pfx_vhost_task_fn+0x10/0x10 [ 61.328283][ T6549] ? register_lock_class+0x3f/0x7b0 [ 61.328299][ T6549] ? rcu_is_watching+0x13/0xc0 [ 61.328312][ T6549] ? trace_contention_end+0x126/0x160 [ 61.328331][ T6549] kvm_mmu_post_init_vm+0x1b3/0x360 [ 61.328348][ T6549] kvm_arch_vcpu_ioctl_run+0xb5/0x1de0 [ 61.328366][ T6549] ? __pfx___mutex_lock+0x10/0x10 [ 61.328377][ T6549] ? kasan_quarantine_put+0x104/0x240 [ 61.328397][ T6549] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 61.328413][ T6549] ? lock_acquire+0x1d1/0x380 [ 61.328431][ T6549] ? do_raw_write_lock+0x11e/0x260 [ 61.328442][ T6549] ? find_held_lock+0x2b/0x80 [ 61.328455][ T6549] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 61.328473][ T6549] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 61.328495][ T6549] kvm_vcpu_ioctl+0x735/0x17b0 [ 61.328516][ T6549] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 61.328536][ T6549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.328557][ T6549] ? do_vfs_ioctl+0x226/0x13e0 [ 61.328577][ T6549] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 61.328595][ T6549] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 61.328617][ T6549] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 61.328640][ T6549] ? __fget_files+0x34/0x3d0 [ 61.328661][ T6549] ? selinux_file_ioctl+0x1e0/0x290 [ 61.328680][ T6549] ? selinux_file_ioctl+0x1e7/0x290 [ 61.328700][ T6549] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 61.328720][ T6549] __x64_sys_ioctl+0x18e/0x210 [ 61.328741][ T6549] do_syscall_64+0x123/0x790 [ 61.328755][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.328773][ T6549] RIP: 0033:0x7f48b179f559 [ 61.328783][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.328794][ T6549] RSP: 002b:00007f48b2697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.328806][ T6549] RAX: ffffffffffffffda RBX: 00007f48b1a25fa0 RCX: 00007f48b179f559 [ 61.328814][ T6549] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 61.328821][ T6549] RBP: 00007f48b2697090 R08: 0000000000000000 R09: 0000000000000000 [ 61.328828][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.328835][ T6549] R13: 00007f48b1a26038 R14: 00007f48b1a25fa0 R15: 00007fff909ccce8 [ 61.328851][ T6549] [ 61.328856][ T6549] Mem-Info: [ 61.328862][ T6549] active_anon:16753 inactive_anon:0 isolated_anon:0 [ 61.328862][ T6549] active_file:0 inactive_file:59202 isolated_file:0 [ 61.328862][ T6549] unevictable:1000 dirty:2311 writeback:0 [ 61.328862][ T6549] slab_reclaimable:12403 slab_unreclaimable:69131 [ 61.328862][ T6549] mapped:29214 shmem:8517 pagetables:1263 [ 61.328862][ T6549] sec_pagetables:298 bounce:0 [ 61.328862][ T6549] kernel_misc_reclaimable:0 [ 61.328862][ T6549] free:433056 free_pcp:17859 free_cma:0 [ 61.328892][ T6549] Node 0 active_anon:67012kB inactive_anon:0kB active_file:0kB inactive_file:236616kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:116856kB dirty:9240kB writeback:0kB shmem:32068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13984kB pagetables:4864kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 61.328922][ T6549] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 61.328950][ T6549] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.328983][ T6549] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 61.329004][ T6549] Node 0 DMA32 free:70308kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:67012kB inactive_anon:0kB active_file:0kB inactive_file:236616kB unevictable:2000kB writepending:9240kB zspages:0kB present:2080628kB managed:1230740kB mlocked:0kB bounce:0kB free_pcp:69632kB local_pcp:16156kB free_cma:0kB [ 61.329038][ T6549] lowmem_reserve[]: 0 0 0 0 0 [ 61.329058][ T6549] Node 1 Normal free:1646556kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:1804kB local_pcp:0kB free_cma:0kB [ 61.329091][ T6549] lowmem_reserve[]: 0 0 0 0 0 [ 61.329111][ T6549] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 61.329190][ T6549] Node 0 DMA32: 75*4kB (UM) 25*8kB (UE) 17*16kB (UME) 2*32kB (UE) 2*64kB (ME) 3*128kB (UE) 5*256kB (UME) 2*512kB (E) 1*1024kB (M) 2*2048kB (ME) 15*4096kB (U) = 70212kB [ 61.329284][ T6549] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 7*16kB (UM) 10*32kB (UM) 6*64kB (UM) 7*128kB (UM) 3*256kB (U) 3*512kB (M) 2*1024kB (U) 3*2048kB (UM) 399*4096kB (UM) = 1646556kB [ 61.329378][ T6549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.329387][ T6549] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.329396][ T6549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.329405][ T6549] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.329414][ T6549] 67715 total pagecache pages [ 61.329437][ T6549] 0 pages in swap cache [ 61.329441][ T6549] Free swap = 124996kB [ 61.329446][ T6549] Total swap = 124996kB [ 61.329450][ T6549] 1048443 pages RAM [ 61.329454][ T6549] 0 pages HighMem/MovableOnly [ 61.329458][ T6549] 291448 pages reserved [ 61.329462][ T6549] 0 pages cma reserved [ 61.693290][ T41] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 61.753055][ T68] Bluetooth: hci0: command tx timeout [ 61.835364][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.837404][ T6557] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 61.884238][ T24] usb 8-1: USB disconnect, device number 3 [ 61.902364][ T24] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 61.968987][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 61.969007][ T42] audit: type=1400 audit(1793523979.617:432): avc: denied { write } for pid=6569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.021465][ T42] audit: type=1400 audit(1793523979.667:433): avc: denied { write } for pid=6575 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.093186][ T41] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.245953][ T41] usb 7-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 62.247165][ T41] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 62.247193][ T41] usb 7-1: config 1 has no interface number 0 [ 62.249438][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.249460][ T41] usb 7-1: Product: syz [ 62.249473][ T41] usb 7-1: Manufacturer: syz [ 62.249488][ T41] usb 7-1: SerialNumber: syz [ 62.250733][ T68] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 62.250758][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) [ 62.250784][ T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.250800][ T68] Workqueue: hci0 hci_rx_work [ 62.250843][ T68] Call Trace: [ 62.250851][ T68] [ 62.250861][ T68] dump_stack_lvl+0x100/0x190 [ 62.250900][ T68] sysfs_warn_dup.cold+0x1c/0x28 [ 62.250937][ T68] sysfs_create_dir_ns+0x24b/0x2b0 [ 62.250983][ T68] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 62.251011][ T68] ? find_held_lock+0x2b/0x80 [ 62.251032][ T68] ? kobject_add_internal+0x25f/0x930 [ 62.251057][ T68] ? kobject_add_internal+0x25f/0x930 [ 62.251082][ T68] ? do_raw_spin_unlock+0x145/0x1e0 [ 62.251105][ T68] kobject_add_internal+0x2c8/0x930 [ 62.251119][ T6587] FAULT_INJECTION: forcing a failure. [ 62.251119][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 62.251145][ T68] kobject_add+0x16a/0x1e0 [ 62.251171][ T68] ? __pfx_kobject_add+0x10/0x10 [ 62.251197][ T68] ? class_to_subsys+0x10f/0x150 [ 62.251240][ T68] ? kobject_put+0xb9/0x640 [ 62.251262][ T68] ? _raw_spin_unlock+0x28/0x50 [ 62.251297][ T68] device_add+0x294/0x1970 [ 62.251324][ T68] ? __pfx_dev_set_name+0x10/0x10 [ 62.251353][ T68] ? __pfx_device_add+0x10/0x10 [ 62.251379][ T68] ? mgmt_send_event_skb+0x2fb/0x460 [ 62.251420][ T68] hci_conn_add_sysfs+0x1a3/0x260 [ 62.251447][ T68] le_conn_complete_evt+0x12f9/0x2200 [ 62.251477][ T68] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 62.251496][ T68] ? hci_event_packet+0x186/0xcd0 [ 62.251515][ T68] ? hci_event_packet+0x186/0xcd0 [ 62.251542][ T68] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 62.251566][ T68] ? skb_pull_data+0x15f/0x1e0 [ 62.251595][ T68] hci_le_meta_evt+0x34a/0x5f0 [ 62.251617][ T68] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 62.251641][ T68] hci_event_packet+0x51c/0xcd0 [ 62.251660][ T68] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 62.251677][ T68] ? __pfx_hci_event_packet+0x10/0x10 [ 62.251703][ T68] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.251728][ T68] hci_rx_work+0x6ea/0x10c0 [ 62.251752][ T68] process_one_work+0xac7/0x1b10 [ 62.251786][ T68] ? __pfx_process_one_work+0x10/0x10 [ 62.251808][ T68] ? lock_acquire+0x1d1/0x380 [ 62.251841][ T68] ? __pfx_hci_rx_work+0x10/0x10 [ 62.251861][ T68] worker_thread+0x5ef/0xe50 [ 62.251891][ T68] ? kthread+0x13a/0x450 [ 62.251906][ T68] ? __pfx_worker_thread+0x10/0x10 [ 62.251924][ T68] kthread+0x373/0x450 [ 62.251939][ T68] ? __pfx_kthread+0x10/0x10 [ 62.251957][ T68] ret_from_fork+0x730/0xd60 [ 62.251981][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 62.252005][ T68] ? __switch_to+0x800/0x10e0 [ 62.252021][ T68] ? __pfx_kthread+0x10/0x10 [ 62.252041][ T68] ret_from_fork_asm+0x1a/0x30 [ 62.252112][ T68] [ 62.252129][ T6587] CPU: 3 UID: 0 PID: 6587 Comm: syz.1.149 Not tainted syzkaller #0 PREEMPT(full) [ 62.252142][ T68] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 62.252151][ T6587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.252162][ T6587] Call Trace: [ 62.252168][ T6587] [ 62.252173][ T68] Bluetooth: hci0: failed to register connection device [ 62.252175][ T6587] dump_stack_lvl+0x100/0x190 [ 62.252208][ T6587] should_fail_ex.cold+0x5/0xa [ 62.252235][ T6587] should_failslab+0xc2/0x120 [ 62.252257][ T6587] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 62.252284][ T6587] ? sidtab_sid2str_get+0x84/0x670 [ 62.252303][ T6587] ? sidtab_sid2str_get+0x17a/0x670 [ 62.252325][ T6587] kmemdup_noprof+0x29/0x60 [ 62.252360][ T6587] sidtab_sid2str_get+0x17a/0x670 [ 62.252380][ T6587] security_sid_to_context_core+0x373/0x700 [ 62.252412][ T6587] avc_audit_post_callback+0x109/0x910 [ 62.252432][ T6587] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 62.252451][ T6587] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 62.252469][ T6587] ? skb_put+0x138/0x180 [ 62.252493][ T6587] ? audit_log_n_string+0x2ac/0x5b0 [ 62.252525][ T6587] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 62.252544][ T6587] common_lsm_audit+0x23f/0x2b0 [ 62.252572][ T6587] ? __pfx_common_lsm_audit+0x10/0x10 [ 62.252612][ T6587] slow_avc_audit+0x186/0x210 [ 62.252633][ T6587] ? __pfx_slow_avc_audit+0x10/0x10 [ 62.252651][ T6587] ? preempt_schedule_thunk+0x16/0x40 [ 62.252682][ T6587] ? avc_update_node.isra.0+0x578/0xb90 [ 62.252707][ T6587] audit_inode_permission+0x1df/0x2b0 [ 62.252729][ T6587] ? __pfx_audit_inode_permission+0x10/0x10 [ 62.252750][ T6587] ? avc_has_perm_noaudit+0x3a2/0x470 [ 62.252770][ T6587] ? avc_has_perm_noaudit+0x145/0x470 [ 62.252793][ T6587] selinux_inode_permission+0x7e3/0x1110 [ 62.252820][ T6587] ? lock_acquire+0x1d1/0x380 [ 62.252842][ T6587] ? __pfx_selinux_inode_permission+0x10/0x10 [ 62.252867][ T6587] ? devcgroup_check_permission+0x174/0x440 [ 62.252891][ T6587] ? match_exception_partial+0x239/0x2d0 [ 62.252937][ T6587] security_inode_permission+0xe4/0x280 [ 62.252966][ T6587] inode_permission+0x36f/0x630 [ 62.253012][ T6587] may_open+0x2be/0x490 [ 62.253036][ T6587] path_openat+0x523/0x23f0 [ 62.253062][ T6587] ? __pfx_path_openat+0x10/0x10 [ 62.253088][ T6587] do_file_open+0x20e/0x430 [ 62.253111][ T6587] ? __pfx_do_file_open+0x10/0x10 [ 62.253148][ T6587] ? _raw_spin_unlock+0x28/0x50 [ 62.253174][ T6587] ? alloc_fd+0x471/0x7a0 [ 62.253204][ T6587] do_sys_openat2+0x163/0x1d0 [ 62.253229][ T6587] ? __pfx_do_sys_openat2+0x10/0x10 [ 62.253251][ T6587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 62.253270][ T6587] ? __fget_files+0x21f/0x3d0 [ 62.253294][ T6587] __x64_sys_openat+0x12d/0x210 [ 62.253317][ T6587] ? __pfx___x64_sys_openat+0x10/0x10 [ 62.253337][ T6587] ? ksys_write+0x1ac/0x250 [ 62.253361][ T6587] do_syscall_64+0x123/0x790 [ 62.253382][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.253401][ T6587] RIP: 0033:0x7f853e19f559 [ 62.253417][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.253433][ T6587] RSP: 002b:00007f853f0b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.253452][ T6587] RAX: ffffffffffffffda RBX: 00007f853e425fa0 RCX: 00007f853e19f559 [ 62.253464][ T6587] RDX: 0000000000000400 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 62.253475][ T6587] RBP: 00007f853f0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 62.253485][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.253495][ T6587] R13: 00007f853e426038 R14: 00007f853e425fa0 R15: 00007ffdcfb6e188 [ 62.253519][ T6587] [ 62.259733][ T42] audit: type=1400 audit(1793523979.897:434): avc: denied { read append } for pid=6586 comm="syz.1.149" name="snapshot" dev="devtmpfs" ino=98 ssid=147 tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.264102][ T41] usb 7-1: 3:0 : does not exist [ 62.264124][ T41] usb 7-1: 3:0 : does not exist [ 62.308696][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 62.308764][ T6589] bridge_slave_1: left allmulticast mode [ 62.308783][ T6589] bridge_slave_1: left promiscuous mode [ 62.308973][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.318703][ T6587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.318771][ T6587] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.324310][ T6589] bridge_slave_0: left allmulticast mode [ 62.324329][ T6589] bridge_slave_0: left promiscuous mode [ 62.324544][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.325173][ T6055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.326794][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.330739][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.344865][ T6587] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.354924][ T6587] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.354959][ T6587] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.360091][ T6587] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.371366][ T6587] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.371423][ T6587] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.385482][ T6587] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.392535][ T6587] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.392602][ T6587] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.398089][ T6587] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.404157][ T6587] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.454665][ T10] usb 7-1: USB disconnect, device number 3 [ 62.473969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.478588][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.481118][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.482540][ T1499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.547860][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.600395][ T6596] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 62.729326][ T6609] FAULT_INJECTION: forcing a failure. [ 62.729326][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 62.729352][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.3.156 Not tainted syzkaller #0 PREEMPT(full) [ 62.729364][ T6609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.729371][ T6609] Call Trace: [ 62.729375][ T6609] [ 62.729380][ T6609] dump_stack_lvl+0x100/0x190 [ 62.729405][ T6609] should_fail_ex.cold+0x5/0xa [ 62.729424][ T6609] should_failslab+0xc2/0x120 [ 62.729439][ T6609] __kmalloc_noprof+0xfc/0x840 [ 62.729456][ T6609] ? tomoyo_encode2+0xfb/0x3c0 [ 62.729470][ T6609] tomoyo_encode2+0xfb/0x3c0 [ 62.729482][ T6609] tomoyo_encode+0x29/0x50 [ 62.729491][ T6609] tomoyo_realpath_from_path+0x18c/0x690 [ 62.729505][ T6609] tomoyo_path_number_perm+0x23c/0x580 [ 62.729520][ T6609] ? tomoyo_path_number_perm+0x22e/0x580 [ 62.729535][ T6609] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 62.729555][ T6609] ? __lock_acquire+0x5c0/0x1f40 [ 62.729598][ T6609] ? __fget_files+0x34/0x3d0 [ 62.729614][ T6609] ? find_held_lock+0x2b/0x80 [ 62.729625][ T6609] ? hook_file_ioctl_common+0x140/0x440 [ 62.729641][ T6609] ? __fget_files+0x21f/0x3d0 [ 62.729656][ T6609] security_file_ioctl+0xd3/0x230 [ 62.729673][ T6609] __x64_sys_ioctl+0xb7/0x210 [ 62.729691][ T6609] do_syscall_64+0x123/0x790 [ 62.729705][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.729716][ T6609] RIP: 0033:0x7f01acb9f559 [ 62.729726][ T6609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.729736][ T6609] RSP: 002b:00007f01adb1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.729748][ T6609] RAX: ffffffffffffffda RBX: 00007f01ace25fa0 RCX: 00007f01acb9f559 [ 62.729754][ T6609] RDX: 0000200000000500 RSI: 00000000c0347c03 RDI: 0000000000000003 [ 62.729760][ T6609] RBP: 00007f01adb1b090 R08: 0000000000000000 R09: 0000000000000000 [ 62.729767][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.729773][ T6609] R13: 00007f01ace26038 R14: 00007f01ace25fa0 R15: 00007ffea061e0c8 [ 62.729787][ T6609] [ 62.729824][ T6609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 62.810128][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.810622][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.810811][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.937649][ T6611] capability: warning: `syz.3.157' uses deprecated v2 capabilities in a way that may be insecure [ 62.938516][ T42] audit: type=1400 audit(1793523980.587:435): avc: denied { read } for pid=6610 comm="syz.3.157" name="0:0:0:0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.938911][ T42] audit: type=1400 audit(1793523980.587:436): avc: denied { open } for pid=6610 comm="syz.3.157" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.939967][ T42] audit: type=1400 audit(1793523980.587:437): avc: denied { ioctl } for pid=6610 comm="syz.3.157" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=722 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.001427][ T6622] netlink: 192 bytes leftover after parsing attributes in process `syz.3.161'. [ 63.024882][ T42] audit: type=1400 audit(1793523980.677:438): avc: denied { create } for pid=6623 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.027095][ T42] audit: type=1400 audit(1793523980.677:439): avc: denied { bind } for pid=6623 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.027534][ T42] audit: type=1400 audit(1793523980.677:440): avc: denied { connect } for pid=6623 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.030397][ T42] audit: type=1400 audit(1793523980.677:441): avc: denied { write } for pid=6623 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.079881][ T6630] tipc: MTU too low for tipc bearer [ 63.233149][ T65] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 63.287876][ T6641] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.288139][ T6641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.288217][ T6641] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.299070][ T6641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.299289][ T6641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 63.383947][ T65] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 63.385097][ T65] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.386169][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 63.386187][ T65] usb 6-1: SerialNumber: syz [ 63.820352][ T6668] jffs2: notice: (6668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.849223][ T6668] raw_sendmsg: syz.3.177 forgot to set AF_INET. Fix it! [ 63.999168][ T65] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 64.010589][ T6680] ======================================================= [ 64.010589][ T6680] WARNING: The mand mount option has been deprecated and [ 64.010589][ T6680] and is ignored by this kernel. Remove the mand [ 64.010589][ T6680] option from the mount to silence this warning. [ 64.010589][ T6680] ======================================================= [ 64.014434][ T6680] overlayfs: overlapping lowerdir path [ 64.057505][ T12] smpboot: CPU 1 is now offline [ 64.094210][ T12] [ 64.095038][ T12] ====================================================== [ 64.097501][ T12] WARNING: possible circular locking dependency detected [ 64.099649][ T12] syzkaller #0 Not tainted SYZFAIL: failed to recv rpc [ 64.101516][ T12] ------------------------------------------------------ fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.104456][ T12] kworker/u32:0/12 is trying to acquire lock: [ 64.107121][ T12] ffff88801e72e5a8 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x34c/0xbc0 [ 64.110753][ T12] [ 64.110753][ T12] but task is already holding lock: [ 64.113314][ T12] ffffffff8fe7a670 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 64.116515][ T12] [ 64.116515][ T12] which lock already depends on the new lock. [ 64.116515][ T12] [ 64.120299][ T12] [ 64.120299][ T12] the existing dependency chain (in reverse order) is: [ 64.123623][ T12] [ 64.123623][ T12] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 64.126292][ T12] lock_acquire+0x1d1/0x380 [ 64.127780][ T12] percpu_down_write+0x4e/0x3d0 [ 64.129359][ T12] _cpu_up+0x68/0x960 [ 64.130800][ T12] cpu_up+0x1ba/0x230 [ 64.132434][ T12] cpuhp_bringup_mask+0xf8/0x180 [ 64.134367][ T12] bringup_nonboot_cpus+0xd9/0x1b0 [ 64.136378][ T12] smp_init+0x32/0x150 [ 64.137922][ T12] kernel_init_freeable+0x44b/0x7b0 [ 64.139801][ T12] kernel_init+0x21/0x1e0 [ 64.141325][ T12] ret_from_fork+0x730/0xd60 [ 64.143899][ T12] ret_from_fork_asm+0x1a/0x30 [ 64.145589][ T12] [ 64.145589][ T12] -> #2 (cpu_add_remove_lock){+.+.}-{4:4}: [ 64.148012][ T12] lock_acquire+0x1d1/0x380 [ 64.149609][ T12] __mutex_lock+0x19f/0x1c10 [ 64.151401][ T12] cpu_device_down+0x46/0xc0 [ 64.153526][ T12] device_offline+0x2f4/0x400 [ 64.155734][ T12] acpi_bus_offline+0x3c7/0x550 [ 64.157860][ T12] acpi_device_hotplug+0x627/0xbe0 [ 64.159994][ T12] acpi_hotplug_work_fn+0x5e/0x90 [ 64.161927][ T12] process_one_work+0xac7/0x1b10 [ 64.163894][ T12] worker_thread+0x5ef/0xe50 [ 64.165622][ T12] kthread+0x373/0x450 [ 64.167266][ T12] ret_from_fork+0x730/0xd60 [ 64.169106][ T12] ret_from_fork_asm+0x1a/0x30 [ 64.171031][ T12] [ 64.171031][ T12] -> #1 (&device->physical_node_lock){+.+.}-{4:4}: [ 64.174044][ T12] lock_acquire+0x1d1/0x380 [ 64.175836][ T12] __mutex_lock+0x19f/0x1c10 [ 64.177701][ T12] acpi_companion_match+0xc0/0x180 [ 64.179709][ T12] acpi_device_uevent_modalias+0x19/0x30 [ 64.181826][ T12] platform_uevent+0x51/0xc0 [ 64.183626][ T12] dev_uevent+0x1de/0x870 [ 64.185318][ T12] kobject_uevent_env+0x6eb/0x18b0 [ 64.187274][ T12] kobject_synth_uevent+0x6f1/0x830 [ 64.189326][ T12] uevent_store+0x24/0x90 [ 64.191110][ T12] dev_attr_store+0x58/0x80 [ 64.193073][ T12] sysfs_kf_write+0xf2/0x150 [ 64.195271][ T12] kernfs_fop_write_iter+0x3e0/0x5f0 [ 64.197654][ T12] vfs_write+0x6af/0x1050 [ 64.198299][ T10] usb 6-1: USB disconnect, device number 5 [ 64.199021][ T10] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 64.205352][ T12] ksys_write+0x12a/0x250 [ 64.207098][ T12] do_syscall_64+0x123/0x790 [ 64.208979][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.211342][ T12] [ 64.211342][ T12] -> #0 (kn->active#5){++++}-{0:0}: [ 64.214131][ T12] check_prev_add+0xeb/0xe60 [ 64.216300][ T12] __lock_acquire+0x1528/0x1f40 [ 64.218647][ T12] lock_acquire+0x1d1/0x380 [ 64.220846][ T12] kernfs_drain+0x4eb/0x600 [ 64.222364][ T12] __kernfs_remove+0x34c/0xbc0 [ 64.223977][ T12] kernfs_remove_by_name_ns+0x7c/0x120 [ 64.225769][ T12] device_del+0x361/0x9b0 [ 64.227214][ T12] device_unregister+0x1d/0xe0 [ 64.228956][ T12] unregister_cpu+0xa0/0x140 [ 64.230763][ T12] acpi_processor_post_eject+0x16f/0x390 [ 64.233088][ T12] acpi_device_hotplug+0x9df/0xbe0 [ 64.235291][ T12] acpi_hotplug_work_fn+0x5e/0x90 [ 64.237677][ T12] process_one_work+0xac7/0x1b10 [ 64.239921][ T12] worker_thread+0x5ef/0xe50 [ 64.241954][ T12] kthread+0x373/0x450 [ 64.243808][ T12] ret_from_fork+0x730/0xd60 [ 64.245694][ T12] ret_from_fork_asm+0x1a/0x30 [ 64.247372][ T12] [ 64.247372][ T12] other info that might help us debug this: [ 64.247372][ T12] [ 64.250561][ T12] Chain exists of: [ 64.250561][ T12] kn->active#5 --> cpu_add_remove_lock --> cpu_hotplug_lock [ 64.250561][ T12] [ 64.254708][ T12] Possible unsafe locking scenario: [ 64.254708][ T12] [ 64.257406][ T12] CPU0 CPU1 [ 64.259440][ T12] ---- ---- [ 64.261346][ T12] lock(cpu_hotplug_lock); [ 64.262996][ T12] lock(cpu_add_remove_lock); [ 64.265320][ T12] lock(cpu_hotplug_lock); [ 64.267859][ T12] lock(kn->active#5); [ 64.269438][ T12] [ 64.269438][ T12] *** DEADLOCK *** [ 64.269438][ T12] [ 64.272080][ T12] locks held by kworker/u32:0/12: 6, last CPU#3: [ 64.274528][ T12] #0: ffff88801ef42948 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 64.278722][ T12] #1: ffffc900000f7d08 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 64.282261][ T12] #2: ffffffff9104f320 (device_hotplug_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x7e/0xbe0 [ 64.285460][ T12] #3: ffffffff90d1dac0 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x8c/0xbe0 [ 64.288535][ T12] #4: ffffffff8fe7a720 (cpu_add_remove_lock){+.+.}-{4:4}, at: acpi_processor_post_eject+0x141/0x390 [ 64.291936][ T12] #5: ffffffff8fe7a670 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 64.295574][ T12] [ 64.295574][ T12] stack backtrace: [ 64.297513][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 64.300438][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.303617][ T12] Workqueue: kacpi_hotplug acpi_hotplug_work_fn [ 64.305675][ T12] Call Trace: [ 64.306808][ T12] [ 64.307828][ T12] dump_stack_lvl+0x100/0x190 [ 64.309394][ T12] print_circular_bug.cold+0x178/0x1be [ 64.311174][ T12] check_noncircular+0x146/0x160 [ 64.312780][ T12] check_prev_add+0xeb/0xe60 [ 64.314276][ T12] __lock_acquire+0x1528/0x1f40 [ 64.315823][ T12] lock_acquire+0x1d1/0x380 [ 64.317279][ T12] ? __kernfs_remove+0x34c/0xbc0 [ 64.318851][ T12] ? kernfs_drain+0x4c2/0x600 [ 64.320358][ T12] kernfs_drain+0x4eb/0x600 [ 64.321810][ T12] ? __kernfs_remove+0x34c/0xbc0 [ 64.323426][ T12] ? __pfx_kernfs_drain+0x10/0x10 [ 64.325266][ T12] ? find_held_lock+0x2b/0x80 [ 64.326921][ T12] ? __kernfs_remove+0x224/0xbc0 [ 64.328633][ T12] ? __kernfs_remove+0x224/0xbc0 [ 64.330324][ T12] ? up_write+0x2dc/0x5b0 [ 64.331803][ T12] __kernfs_remove+0x34c/0xbc0 [ 64.333396][ T12] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 64.335331][ T12] kernfs_remove_by_name_ns+0x7c/0x120 [ 64.337056][ T12] device_del+0x361/0x9b0 [ 64.338422][ T12] ? __pfx_device_del+0x10/0x10 [ 64.339973][ T12] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 64.341905][ T12] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 64.343675][ T12] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 64.345609][ T12] device_unregister+0x1d/0xe0 [ 64.347128][ T12] unregister_cpu+0xa0/0x140 [ 64.348680][ T12] acpi_processor_post_eject+0x16f/0x390 [ 64.350548][ T12] acpi_device_hotplug+0x9df/0xbe0 [ 64.352256][ T12] ? __pfx_acpi_device_hotplug+0x10/0x10 [ 64.354076][ T12] acpi_hotplug_work_fn+0x5e/0x90 [ 64.355659][ T12] process_one_work+0xac7/0x1b10 [ 64.357238][ T12] ? __pfx_process_one_work+0x10/0x10 [ 64.358918][ T12] ? lock_acquire+0x1d1/0x380 [ 64.360467][ T12] ? __pfx_acpi_hotplug_work_fn+0x10/0x10 [ 64.362322][ T12] worker_thread+0x5ef/0xe50 [ 64.363851][ T12] ? kthread+0x13a/0x450 [ 64.365239][ T12] ? __pfx_worker_thread+0x10/0x10 [ 64.366852][ T12] kthread+0x373/0x450 [ 64.368163][ T12] ? __pfx_kthread+0x10/0x10 [ 64.369601][ T12] ret_from_fork+0x730/0xd60 [ 64.371056][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 64.372755][ T12] ? __switch_to+0x800/0x10e0 [ 64.374373][ T12] ? __pfx_kthread+0x10/0x10 [ 64.375982][ T12] ret_from_fork_asm+0x1a/0x30 [ 64.377780][ T12] [ 64.730011][ T5896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.777079][ T5896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.806679][ T5896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.857115][ T5896] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.920628][ T5896] bridge_slave_1: left allmulticast mode [ 64.920645][ T5896] bridge_slave_1: left promiscuous mode [ 64.920728][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.921677][ T5896] bridge_slave_0: left allmulticast mode [ 64.921704][ T5896] bridge_slave_0: left promiscuous mode [ 64.921891][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.976262][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.977951][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.979160][ T5896] bond0 (unregistering): Released all slaves [ 65.125873][ T5497] 8021q: adding VLAN 0 to HW filter on device eth2 [ 65.219673][ T5896] hsr_slave_0: left promiscuous mode [ 65.220212][ T5896] hsr_slave_1: left promiscuous mode [ 65.220648][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.220664][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.221379][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.221392][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.226236][ T5896] veth1_macvtap: left promiscuous mode [ 65.226264][ T5896] veth0_macvtap: left promiscuous mode [ 65.226313][ T5896] veth1_vlan: left promiscuous mode [ 65.226355][ T5896] veth0_vlan: left promiscuous mode [ 65.311089][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 65.318586][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 65.358050][ T5497] 8021q: adding VLAN 0 to HW filter on device eth3 [ 65.511846][ T5497] 8021q: adding VLAN 0 to HW filter on device eth4 [ 65.631090][ T5896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.641758][ T5497] 8021q: adding VLAN 0 to HW filter on device eth5 [ 65.677151][ T5896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.717091][ T5896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.776271][ T5896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.840252][ T5896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.898531][ T5896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.938776][ T5497] 8021q: adding VLAN 0 to HW filter on device eth6 [ 65.942292][ T5896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.020251][ T5896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.072690][ T5896] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.078691][ T5497] 8021q: adding VLAN 0 to HW filter on device eth7 [ 66.107624][ T5896] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.128720][ T5896] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.170676][ T5896] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.207266][ T5497] 8021q: adding VLAN 0 to HW filter on device eth8 [ 66.212810][ T5896] bridge_slave_1: left allmulticast mode [ 66.212828][ T5896] bridge_slave_1: left promiscuous mode [ 66.212978][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.222662][ T5896] bridge_slave_0: left allmulticast mode [ 66.222679][ T5896] bridge_slave_0: left promiscuous mode [ 66.222851][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.278914][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.279857][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.280558][ T5896] bond0 (unregistering): Released all slaves [ 66.302837][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.307508][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.308186][ T5896] bond0 (unregistering): Released all slaves [ 66.309277][ T5896] bond1 (unregistering): Released all slaves [ 66.331272][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.332519][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.336118][ T5896] bond0 (unregistering): Released all slaves [ 66.438422][ T5497] 8021q: adding VLAN 0 to HW filter on device eth9 [ 66.562624][ T5497] 8021q: adding VLAN 0 to HW filter on device eth10 [ 66.683102][ T5497] 8021q: adding VLAN 0 to HW filter on device eth11 [ 66.804272][ T5497] 8021q: adding VLAN 0 to HW filter on device eth12 [ 66.902392][ T5896] hsr_slave_0: left promiscuous mode [ 66.902671][ T5896] hsr_slave_1: left promiscuous mode [ 66.902887][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.902897][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.926659][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.927157][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.935312][ T5896] hsr_slave_0: left promiscuous mode [ 66.935614][ T5896] hsr_slave_1: left promiscuous mode [ 66.935836][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.935846][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.936199][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.936211][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.938297][ T5896] hsr_slave_0: left promiscuous mode [ 66.938544][ T5896] hsr_slave_1: left promiscuous mode [ 66.938857][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.938868][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.939177][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.939186][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.945773][ T5896] veth1_macvtap: left promiscuous mode [ 66.945800][ T5896] veth0_macvtap: left promiscuous mode [ 66.945858][ T5896] veth1_vlan: left promiscuous mode [ 66.945892][ T5896] veth0_vlan: left promiscuous mode [ 66.956314][ T5896] veth1_macvtap: left promiscuous mode [ 66.956354][ T5896] veth0_macvtap: left promiscuous mode [ 66.956401][ T5896] veth1_vlan: left promiscuous mode [ 66.956439][ T5896] veth0_vlan: left promiscuous mode [ 66.964402][ T5896] veth1_macvtap: left promiscuous mode [ 66.964430][ T5896] veth0_macvtap: left promiscuous mode [ 66.964493][ T5896] veth1_vlan: left promiscuous mode [ 66.964532][ T5896] veth0_vlan: left promiscuous mode [ 67.086114][ T5896] team_slave_1 (unregistering): left allmulticast mode [ 67.086489][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 67.088280][ T5896] team_slave_0 (unregistering): left allmulticast mode [ 67.088622][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 67.157682][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 67.160209][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 67.255298][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 67.257554][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 67.302348][ T5497] 8021q: adding VLAN 0 to HW filter on device eth13 [ 67.384799][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 67.384818][ T42] audit: type=1400 audit(1793523985.037:483): avc: denied { write } for pid=6780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.461257][ T42] audit: type=1400 audit(1793523985.107:484): avc: denied { write } for pid=6783 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.490067][ T5497] 8021q: adding VLAN 0 to HW filter on device eth14 [ 67.572280][ T42] audit: type=1400 audit(1793523985.217:485): avc: denied { write } for pid=6786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.620095][ T42] audit: type=1400 audit(1793523985.267:486): avc: denied { write } for pid=6789 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.651734][ T5497] 8021q: adding VLAN 0 to HW filter on device eth15 [ 67.754239][ T42] audit: type=1400 audit(1793523985.397:487): avc: denied { write } for pid=6794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.795678][ T42] audit: type=1400 audit(1793523985.447:488): avc: denied { write } for pid=6797 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.821049][ T5497] 8021q: adding VLAN 0 to HW filter on device eth16 [ 67.869154][ T42] audit: type=1400 audit(1793523985.517:489): avc: denied { write } for pid=6800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.909799][ T42] audit: type=1400 audit(1793523985.557:490): avc: denied { write } for pid=6803 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.938446][ T5497] 8021q: adding VLAN 0 to HW filter on device eth17 [ 71.433392][ T1500] cfg80211: failed to load regulatory.db [ 71.434283][ T1448] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.434320][ T1448] ieee802154 phy1 wpan1: encryption failed: -22