last executing test programs: 12.396086161s ago: executing program 3 (id=487): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 12.367794531s ago: executing program 3 (id=488): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) 11.780887829s ago: executing program 0 (id=511): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f00000003c0)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 11.780244334s ago: executing program 0 (id=512): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) connect$inet6(r2, &(0x7f0000006c80)={0xa, 0x4e22, 0x5793, @private1, 0x7fff}, 0x1c) 11.524842095s ago: executing program 0 (id=516): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) 10.536758384s ago: executing program 0 (id=517): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 10.533490749s ago: executing program 3 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', 0x0, 0x20, 0x0) 10.531122568s ago: executing program 0 (id=519): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10.524997564s ago: executing program 3 (id=520): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00158008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10.523503567s ago: executing program 3 (id=521): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x2) write$binfmt_format(r0, &(0x7f0000000a00)='1\x00', 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 10.521079115s ago: executing program 3 (id=522): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x5, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, 0x0, 0x0, 0x1, 0x1}}, {0x20000000000000, 0x537, 0x2b, 0x8000, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r0, 0x400c4d07, &(0x7f0000000a00)) 9.713226596s ago: executing program 0 (id=532): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x2) write$binfmt_format(r0, &(0x7f0000000a00)='1\x00', 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 9.639507812s ago: executing program 32 (id=532): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x2) write$binfmt_format(r0, &(0x7f0000000a00)='1\x00', 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 6.960215985s ago: executing program 1 (id=569): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x128}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x1, 0x18100}) 6.890738477s ago: executing program 2 (id=564): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xe, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f00000000c0)) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x42000004, 0x0, 0x5c) 6.890468456s ago: executing program 1 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.890182213s ago: executing program 2 (id=566): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2}) 6.815775618s ago: executing program 2 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000000)="102128f9074ab6b94adb8d3b2f", 0xd) 6.796377405s ago: executing program 2 (id=568): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) 6.382364628s ago: executing program 2 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 6.185551638s ago: executing program 1 (id=571): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d1", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 1.678047437s ago: executing program 1 (id=572): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x800) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/203, 0xcb}], 0x1}, 0x40012102) 1.42945139s ago: executing program 2 (id=573): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2000}}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x4, r0, 0x6, {0x4, 0x8}, 0x5}, 0x1) 689.915303ms ago: executing program 1 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) listxattr(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=575): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) kernel console output (not intermixed with test programs): [ 28.868532][ T43] audit: type=1400 audit(1789264147.626:113): avc: denied { write } for pid=5629 comm="sh" path="pipe:[6639]" dev="pipefs" ino=6639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 28.868816][ T43] audit: type=1400 audit(1789264147.626:114): avc: denied { rlimitinh } for pid=5629 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.868949][ T43] audit: type=1400 audit(1789264147.626:115): avc: denied { siginh } for pid=5629 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:57980' (ED25519) to the list of known hosts. [ 31.051161][ T43] audit: type=1400 audit(1789264149.806:116): avc: denied { name_bind } for pid=5645 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.079565][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 33.079578][ T43] audit: type=1400 audit(1789264151.836:119): avc: denied { write } for pid=5647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.134390][ T43] audit: type=1400 audit(1789264151.886:120): avc: denied { write } for pid=5650 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.213409][ T43] audit: type=1400 audit(1789264151.966:121): avc: denied { write } for pid=5653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.282218][ T43] audit: type=1400 audit(1789264152.036:122): avc: denied { write } for pid=5656 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.362882][ T43] audit: type=1400 audit(1789264152.116:123): avc: denied { write } for pid=5659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.423914][ T43] audit: type=1400 audit(1789264152.176:124): avc: denied { write } for pid=5662 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.475069][ T43] audit: type=1400 audit(1789264152.226:125): avc: denied { mounton } for pid=5646 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.478774][ T43] audit: type=1400 audit(1789264152.236:126): avc: denied { mount } for pid=5646 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.480149][ T5646] cgroup: Unknown subsys name 'net' [ 33.482775][ T43] audit: type=1400 audit(1789264152.236:127): avc: denied { unmount } for pid=5646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.679535][ T5646] cgroup: Unknown subsys name 'cpuset' [ 33.683621][ T5646] cgroup: Unknown subsys name 'rlimit' [ 33.732340][ T43] audit: type=1400 audit(1789264152.486:128): avc: denied { write } for pid=5666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.925163][ T5672] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.722743][ T5646] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.428924][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 38.428940][ T43] audit: type=1400 audit(1789264157.186:161): avc: denied { execmem } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.611441][ T43] audit: type=1400 audit(1789264157.366:162): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.611916][ T43] audit: type=1400 audit(1789264157.366:163): avc: denied { read write } for pid=5730 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.612376][ T43] audit: type=1400 audit(1789264157.366:164): avc: denied { open } for pid=5730 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.621021][ T43] audit: type=1400 audit(1789264157.376:165): avc: denied { ioctl } for pid=5730 comm="syz-executor" path="socket:[6689]" dev="sockfs" ino=6689 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.643550][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.648863][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.649857][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.650642][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.651532][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.651718][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.652599][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.654191][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.655431][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.655557][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.656922][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.657048][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.658317][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.658794][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.659392][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.659574][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.659889][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.659976][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.668632][ T43] audit: type=1400 audit(1789264157.426:166): avc: denied { read } for pid=5737 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.668674][ T43] audit: type=1400 audit(1789264157.426:167): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.676527][ T43] audit: type=1400 audit(1789264157.426:168): avc: denied { mounton } for pid=5742 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.683600][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.686812][ T43] audit: type=1400 audit(1789264157.446:169): avc: denied { module_request } for pid=5737 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.696221][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.710040][ T43] audit: type=1400 audit(1789264157.466:170): avc: denied { sys_module } for pid=5730 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 39.258956][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.259776][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.259878][ T5742] bridge_slave_0: entered allmulticast mode [ 39.261332][ T5742] bridge_slave_0: entered promiscuous mode [ 39.298512][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.298558][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.298625][ T5742] bridge_slave_1: entered allmulticast mode [ 39.299566][ T5742] bridge_slave_1: entered promiscuous mode [ 39.390926][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.392756][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.412436][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.412482][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.412574][ T5731] bridge_slave_0: entered allmulticast mode [ 39.413325][ T5731] bridge_slave_0: entered promiscuous mode [ 39.420736][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.420791][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.420870][ T5731] bridge_slave_1: entered allmulticast mode [ 39.422076][ T5731] bridge_slave_1: entered promiscuous mode [ 39.424316][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.424397][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.424773][ T5730] bridge_slave_0: entered allmulticast mode [ 39.426157][ T5730] bridge_slave_0: entered promiscuous mode [ 39.427609][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.427703][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.427939][ T5737] bridge_slave_0: entered allmulticast mode [ 39.429601][ T5737] bridge_slave_0: entered promiscuous mode [ 39.431665][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.431755][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.431909][ T5737] bridge_slave_1: entered allmulticast mode [ 39.433172][ T5737] bridge_slave_1: entered promiscuous mode [ 39.455745][ T5742] team0: Port device team_slave_0 added [ 39.455880][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.455978][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.456239][ T5730] bridge_slave_1: entered allmulticast mode [ 39.457282][ T5730] bridge_slave_1: entered promiscuous mode [ 39.470375][ T5742] team0: Port device team_slave_1 added [ 39.528367][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.545049][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.546395][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.553584][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.553596][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.553610][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.564456][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.566079][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.568694][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.569555][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.569569][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.569592][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.581811][ T5731] team0: Port device team_slave_0 added [ 39.584498][ T5731] team0: Port device team_slave_1 added [ 39.624452][ T5730] team0: Port device team_slave_0 added [ 39.641043][ T5737] team0: Port device team_slave_0 added [ 39.642165][ T5730] team0: Port device team_slave_1 added [ 39.667533][ T5737] team0: Port device team_slave_1 added [ 39.684642][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.684654][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.684668][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.686000][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.686013][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.686034][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.686628][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.686636][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.686649][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.705771][ T5742] hsr_slave_0: entered promiscuous mode [ 39.706798][ T5742] hsr_slave_1: entered promiscuous mode [ 39.708362][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.708372][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.708388][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.717648][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.717658][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.717671][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.718724][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.718731][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.718744][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.794898][ T5730] hsr_slave_0: entered promiscuous mode [ 39.797032][ T5730] hsr_slave_1: entered promiscuous mode [ 39.797570][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 39.797644][ T5730] Cannot create hsr debugfs directory [ 39.826016][ T5731] hsr_slave_0: entered promiscuous mode [ 39.826803][ T5731] hsr_slave_1: entered promiscuous mode [ 39.827609][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 39.827624][ T5731] Cannot create hsr debugfs directory [ 39.842743][ T5737] hsr_slave_0: entered promiscuous mode [ 39.843541][ T5737] hsr_slave_1: entered promiscuous mode [ 39.844150][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 39.844167][ T5737] Cannot create hsr debugfs directory [ 40.106199][ T5742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.110401][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.111758][ T5742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.116391][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.117223][ T5742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.121487][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.130714][ T5742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.132579][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.177446][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.181659][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.182505][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.185681][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.191560][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.195476][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.195906][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.198675][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.254129][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.257159][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.257807][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.261173][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.261601][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.266148][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.266590][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.270708][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.346268][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.346410][ T5730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.349689][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.356066][ T5730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.360668][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.361111][ T5730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.363506][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.372782][ T5730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.376721][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.401341][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.415705][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.417335][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.417970][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.433182][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.433570][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.466930][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.492741][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.492789][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.497958][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.509164][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.509250][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.539921][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.549365][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.549417][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.568874][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.568925][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.588804][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.619714][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.635241][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.635325][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.648252][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.648339][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.691962][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.707603][ T5748] Bluetooth: hci3: command tx timeout [ 40.715092][ T5748] Bluetooth: hci2: command tx timeout [ 40.715262][ T5094] Bluetooth: hci0: command tx timeout [ 40.715303][ T5748] Bluetooth: hci1: command tx timeout [ 40.854530][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.869000][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.921442][ T5731] veth0_vlan: entered promiscuous mode [ 40.935505][ T5742] veth0_vlan: entered promiscuous mode [ 40.939624][ T5731] veth1_vlan: entered promiscuous mode [ 40.951216][ T5742] veth1_vlan: entered promiscuous mode [ 40.956210][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.958742][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.969110][ T5731] veth0_macvtap: entered promiscuous mode [ 40.976604][ T5731] veth1_macvtap: entered promiscuous mode [ 41.008512][ T5742] veth0_macvtap: entered promiscuous mode [ 41.016052][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.020028][ T5742] veth1_macvtap: entered promiscuous mode [ 41.033794][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.073272][ T5730] veth0_vlan: entered promiscuous mode [ 41.079273][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.092448][ T5737] veth0_vlan: entered promiscuous mode [ 41.093272][ T5730] veth1_vlan: entered promiscuous mode [ 41.097204][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.110379][ T5737] veth1_vlan: entered promiscuous mode [ 41.175596][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.176240][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.176252][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.186427][ T5737] veth0_macvtap: entered promiscuous mode [ 41.200395][ T5730] veth0_macvtap: entered promiscuous mode [ 41.211416][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.211437][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.213449][ T5737] veth1_macvtap: entered promiscuous mode [ 41.230828][ T5730] veth1_macvtap: entered promiscuous mode [ 41.247329][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.247351][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.260328][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.263898][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.278725][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.281101][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.281122][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.292097][ T5731] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.292479][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.306909][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.307285][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.398671][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.398686][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.434774][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 41.435368][ T5884] Zero length message leads to an empty skb [ 41.436348][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.436365][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.441596][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.441613][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.477603][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.477618][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.486984][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487282][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487311][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487337][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487397][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487424][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487450][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487476][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487503][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487528][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487554][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487580][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487603][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.594229][ T5897] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 41.683858][ T55] Bluetooth: hci4: Frame reassembly failed (-84) [ 41.689939][ T55] Bluetooth: hci4: Frame reassembly failed (-84) [ 41.689976][ T55] Bluetooth: hci4: Frame reassembly failed (-84) [ 41.690005][ T55] Bluetooth: hci4: Frame reassembly failed (-84) [ 41.690033][ T55] Bluetooth: hci4: Frame reassembly failed (-84) [ 41.693271][ T5909] size and base must be multiples of 4 kiB [ 41.693282][ T5909] CPU: 0 UID: 0 PID: 5909 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 41.693294][ T5909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.693300][ T5909] Call Trace: [ 41.693304][ T5909] [ 41.693309][ T5909] dump_stack_lvl+0x100/0x190 [ 41.693330][ T5909] mtrr_del.cold+0x72/0x85 [ 41.693344][ T5909] mtrr_ioctl+0xbc8/0xcf0 [ 41.693358][ T5909] ? __pfx_mtrr_ioctl+0x10/0x10 [ 41.693369][ T5909] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 41.693386][ T5909] ? __fget_files+0x34/0x3d0 [ 41.693406][ T5909] ? __pfx_mtrr_ioctl+0x10/0x10 [ 41.693417][ T5909] proc_reg_unlocked_ioctl+0x229/0x320 [ 41.693435][ T5909] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 41.693452][ T5909] __x64_sys_ioctl+0x18e/0x210 [ 41.693464][ T5909] do_syscall_64+0x123/0x790 [ 41.693480][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.693491][ T5909] RIP: 0033:0x7f7fa039e159 [ 41.693500][ T5909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.693510][ T5909] RSP: 002b:00007f7fa128c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.693521][ T5909] RAX: ffffffffffffffda RBX: 00007f7fa0625fa0 RCX: 00007f7fa039e159 [ 41.693528][ T5909] RDX: 0000200000000a00 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 41.693534][ T5909] RBP: 00007f7fa043503b R08: 0000000000000000 R09: 0000000000000000 [ 41.693540][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.693547][ T5909] R13: 00007f7fa0626038 R14: 00007f7fa0625fa0 R15: 00007ffea592fa28 [ 41.693560][ T5909] [ 41.702982][ T5911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14'. [ 41.703133][ T5911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14'. [ 41.961213][ T5933] gadgetfs: bound to dummy_udc driver [ 41.987054][ T5936] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 42.206089][ T1043] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 42.207175][ C2] gadgetfs: connected [ 42.207767][ T1043] gadgetfs: disconnected [ 42.246611][ T5952] bond0: invalid NS target ff00:: specified for addition [ 42.246637][ T5952] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 42.272458][ T5955] jffs2: notice: (5955) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 42.442339][ T5974] bonding: unable to delete non-existent b [ 42.444123][ T5976] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 42.785601][ T5748] Bluetooth: hci1: command tx timeout [ 42.785639][ T5748] Bluetooth: hci0: command tx timeout [ 42.785675][ T5738] Bluetooth: hci3: command tx timeout [ 42.785742][ T5094] Bluetooth: hci2: command tx timeout [ 43.459241][ T43] kauditd_printk_skb: 106 callbacks suppressed [ 43.459258][ T43] audit: type=1400 audit(1789264162.216:277): avc: denied { write } for pid=6012 comm="syz.1.63" name="instances" dev="tracefs" ino=6236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.459594][ T43] audit: type=1400 audit(1789264162.216:278): avc: denied { add_name } for pid=6012 comm="syz.1.63" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.459855][ T43] audit: type=1400 audit(1789264162.216:279): avc: denied { create } for pid=6012 comm="syz.1.63" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 43.510860][ T43] audit: type=1400 audit(1789264162.266:280): avc: denied { write } for pid=6012 comm="syz.1.63" name="instances" dev="tracefs" ino=6236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.511430][ T43] audit: type=1400 audit(1789264162.266:281): avc: denied { remove_name } for pid=6012 comm="syz.1.63" name="foo" dev="tracefs" ino=9766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.511559][ T43] audit: type=1400 audit(1789264162.266:282): avc: denied { rmdir } for pid=6012 comm="syz.1.63" name="foo" dev="tracefs" ino=9766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.740576][ T6019] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 43.745702][ T5743] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 43.813013][ T43] audit: type=1400 audit(1789264162.566:283): avc: denied { mounton } for pid=6022 comm="syz.3.66" path="" dev="cgroup2" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.934167][ T43] audit: type=1400 audit(1789264162.686:284): avc: denied { create } for pid=6029 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.937105][ T43] audit: type=1400 audit(1789264162.696:285): avc: denied { setopt } for pid=6029 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.969926][ T6035] lo: entered promiscuous mode [ 43.971075][ T6035] lo: left promiscuous mode [ 43.980319][ T43] audit: type=1400 audit(1789264162.736:286): avc: denied { connect } for pid=6031 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.999853][ T6038] netlink: 348 bytes leftover after parsing attributes in process `syz.1.72'. [ 44.145983][ T6046] FAULT_INJECTION: forcing a failure. [ 44.145983][ T6046] name failslab, interval 1, probability 0, space 0, times 1 [ 44.146004][ T6046] CPU: 3 UID: 0 PID: 6046 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(full) [ 44.146018][ T6046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.146025][ T6046] Call Trace: [ 44.146030][ T6046] [ 44.146035][ T6046] dump_stack_lvl+0x100/0x190 [ 44.146056][ T6046] should_fail_ex.cold+0x5/0xa [ 44.146072][ T6046] should_failslab+0xc2/0x120 [ 44.146086][ T6046] kmem_cache_alloc_noprof+0x92/0x6a0 [ 44.146100][ T6046] ? key_alloc+0x3c5/0x1310 [ 44.146115][ T6046] key_alloc+0x3c5/0x1310 [ 44.146130][ T6046] ? __kasan_kmalloc+0xaa/0xb0 [ 44.146142][ T6046] ? __pfx_key_alloc+0x10/0x10 [ 44.146157][ T6046] keyring_alloc+0x44/0xc0 [ 44.146172][ T6046] install_session_keyring_to_cred+0x190/0x230 [ 44.146186][ T6046] join_session_keyring+0x1bc/0x350 [ 44.146198][ T6046] lookup_user_key+0xbf9/0x1300 [ 44.146211][ T6046] ? __pfx_lookup_user_key+0x10/0x10 [ 44.146221][ T6046] ? futex_wait+0x11e/0x370 [ 44.146234][ T6046] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 44.146247][ T6046] ? ksys_write+0x190/0x250 [ 44.146261][ T6046] keyctl_get_persistent+0x197/0x8b0 [ 44.146276][ T6046] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 44.146292][ T6046] ? __x64_sys_futex+0x34f/0x4d0 [ 44.146306][ T6046] ? __x64_sys_futex+0x358/0x4d0 [ 44.146322][ T6046] ? xfd_validate_state+0x129/0x190 [ 44.146336][ T6046] __do_sys_keyctl+0x3b2/0x5a0 [ 44.146347][ T6046] do_syscall_64+0x123/0x790 [ 44.146363][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.146375][ T6046] RIP: 0033:0x7f761739e159 [ 44.146384][ T6046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.146402][ T6046] RSP: 002b:00007f76182bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 44.146414][ T6046] RAX: ffffffffffffffda RBX: 00007f7617625fa0 RCX: 00007f761739e159 [ 44.146423][ T6046] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 44.146430][ T6046] RBP: 00007f761743503b R08: 0000000000000000 R09: 0000000000000000 [ 44.146438][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.146445][ T6046] R13: 00007f7617626038 R14: 00007f7617625fa0 R15: 00007fffe8854b98 [ 44.146459][ T6046] [ 44.237757][ T6054] binder: 6053:6054 ioctl 4018620d 0 returned -22 [ 44.516603][ T5730] svc: failed to register nfsdv3 RPC service (errno 111). [ 44.517582][ T5730] svc: failed to register nfsaclv3 RPC service (errno 111). [ 44.517595][ T5730] failed to unregister udp with rpcbind [ 44.517832][ T5730] svc: failed to register nfsdv3 RPC service (errno 97). [ 44.517841][ T5730] svc: failed to register nfsaclv3 RPC service (errno 97). [ 44.517847][ T5730] failed to unregister udp with rpcbind [ 44.865284][ T5746] Bluetooth: hci2: command tx timeout [ 44.865305][ T5746] Bluetooth: hci0: command tx timeout [ 44.875575][ T5743] Bluetooth: hci3: command tx timeout [ 44.875598][ T5743] Bluetooth: hci1: command tx timeout [ 44.950355][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.106'. [ 44.950374][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.106'. [ 44.950479][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.106'. [ 44.950488][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.106'. [ 45.030873][ T6119] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 45.367610][ T6155] warning: `syz.2.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 45.375538][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 45.505743][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 46.498677][ T6181] device-mapper: ioctl: Unable to rename non-existent device, to § [ 46.589103][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.636882][ T6194] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 46.689210][ T6200] Bluetooth: MGMT ver 1.23 [ 46.693904][ T6198] binder: 6197:6198 ioctl c018620c 200000000240 returned -22 [ 46.761617][ T6208] kernel read not supported for file /sg0 (pid: 6208 comm: syz.2.152) [ 46.936221][ T6225] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 46.955674][ T5743] Bluetooth: hci3: command tx timeout [ 46.955701][ T5743] Bluetooth: hci0: command tx timeout [ 46.955713][ T5743] Bluetooth: hci2: command tx timeout [ 46.955747][ T5746] Bluetooth: hci1: command tx timeout [ 47.040805][ T6238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.166'. [ 47.068456][ T6240] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 47.085231][ T6240] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 47.178031][ T6249] netlink: 'syz.3.172': attribute type 11 has an invalid length. [ 47.282394][ T6260] device-mapper: ioctl: name not supplied when creating device [ 47.545323][ T6297] capability: warning: `syz.0.195' uses 32-bit capabilities (legacy support in use) [ 47.620617][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 47.620633][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 47.725179][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 47.734208][ T6320] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 47.734224][ T6320] netlink: 'syz.2.198': attribute type 2 has an invalid length. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 48.320038][ T6374] SELinux: ebitmap start bit (16580607) is not a multiple of the map unit size (64) [ 48.320237][ T6374] SELinux: invalid class [ 48.323666][ T6374] SELinux: failed to load policy [ 48.370242][ T6380] sda1: Can't mount, would change RO state [ 48.576795][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 48.576807][ T43] audit: type=1400 audit(1789264168.339:403): avc: denied { mount } for pid=6394 comm="syz.0.240" name="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.577663][ T43] audit: type=1400 audit(1789264168.339:404): avc: denied { search } for pid=6394 comm="syz.0.240" name="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.577839][ T43] audit: type=1400 audit(1789264168.339:405): avc: denied { search } for pid=6394 comm="syz.0.240" name="dlm" dev="configfs" ino=2096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.580117][ T43] audit: type=1400 audit(1789264168.339:406): avc: denied { write search } for pid=6394 comm="syz.0.240" name="dlm" dev="configfs" ino=2096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.580444][ T43] audit: type=1400 audit(1789264168.339:407): avc: denied { add_name } for pid=6394 comm="syz.0.240" name="cl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.580635][ T43] audit: type=1400 audit(1789264168.339:408): avc: denied { create } for pid=6394 comm="syz.0.240" name="cl1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 48.583718][ T43] audit: type=1400 audit(1789264168.339:409): avc: denied { search } for pid=6394 comm="syz.0.240" name="/" dev="configfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.583828][ T43] audit: type=1400 audit(1789264168.339:410): avc: denied { search } for pid=6394 comm="syz.0.240" name="dlm" dev="configfs" ino=2096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.583978][ T43] audit: type=1400 audit(1789264168.339:411): avc: denied { write search } for pid=6394 comm="syz.0.240" name="dlm" dev="configfs" ino=2096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.586428][ T43] audit: type=1400 audit(1789264168.349:412): avc: denied { remove_name } for pid=6394 comm="syz.0.240" name="cl1" dev="configfs" ino=13640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.138921][ T6436] input: syz0 as /devices/virtual/input/input6 [ 49.355691][ T6457] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 49.440639][ T5088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.440683][ T6465] 9pnet_virtio: no channels available for device syz [ 49.443453][ T6465] overlayfs: overlapping lowerdir path [ 49.450632][ T6469] 9pnet_virtio: no channels available for device syz [ 49.626773][ T6489] ======================================================= [ 49.626773][ T6489] WARNING: The mand mount option has been deprecated and [ 49.626773][ T6489] and is ignored by this kernel. Remove the mand [ 49.626773][ T6489] option from the mount to silence this warning. [ 49.626773][ T6489] ======================================================= [ 49.629238][ T6489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 49.630851][ T6489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 49.770793][ T6503] capability: warning: `syz.0.285' uses deprecated v2 capabilities in a way that may be insecure [ 49.862885][ T6515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.863194][ T6515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.863543][ T6515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.863902][ T6515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.864036][ T6515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.868505][ T6514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.920831][ T6520] binder: 6519:6520 ioctl 4018620d 0 returned -22 [ 50.179671][ T6551] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 50.288126][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 50.467308][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.532735][ T6598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.325'. [ 50.533055][ T6602] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 50.540700][ T6603] jffs2: notice: (6603) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.564282][ T6606] process 'syz.2.326' launched '/dev/fd/5' with NULL argv: empty string added [ 50.634142][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 50.972207][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'. [ 50.972223][ T6649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.347'. [ 50.972232][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'. [ 51.045189][ T6657] loop6: detected capacity change from 0 to 2640 [ 51.049245][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.049569][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.049796][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.050005][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.050543][ T5749] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.067604][ T6657] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.067665][ T6657] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.067683][ T6657] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.067699][ T6657] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.067716][ T6657] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.067766][ T6657] ldm_validate_partition_table(): Disk read failed. [ 51.067805][ T6657] Dev loop6: unable to read RDB block 0 [ 51.070736][ T6657] loop6: unable to read partition table [ 51.070893][ T6657] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 51.275114][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 51.275249][ T5478] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 51.275266][ T5478] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 51.433483][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.438151][ T5088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.515513][ T5088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.646487][ T6689] FAULT_INJECTION: forcing a failure. [ 51.646487][ T6689] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 51.646510][ T6689] CPU: 0 UID: 0 PID: 6689 Comm: syz.0.368 Not tainted syzkaller #0 PREEMPT(full) [ 51.646527][ T6689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.646534][ T6689] Call Trace: [ 51.646538][ T6689] [ 51.646545][ T6689] dump_stack_lvl+0x100/0x190 [ 51.646567][ T6689] should_fail_ex.cold+0x5/0xa [ 51.646581][ T6689] ? prepare_alloc_pages+0x16d/0x5b0 [ 51.646599][ T6689] should_fail_alloc_page+0xeb/0x140 [ 51.646614][ T6689] prepare_alloc_pages+0x1f0/0x5b0 [ 51.646631][ T6689] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 51.646652][ T6689] ? stack_trace_save+0x8e/0xc0 [ 51.646663][ T6689] ? __pfx_stack_trace_save+0x10/0x10 [ 51.646673][ T6689] ? stack_depot_save_flags+0x27/0x9f0 [ 51.646691][ T6689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 51.646712][ T6689] ? kasan_save_track+0x14/0x30 [ 51.646724][ T6689] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 51.646742][ T6689] ? create_new_namespaces+0x48a/0xac0 [ 51.646756][ T6689] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 51.646770][ T6689] ? ksys_unshare+0x4a2/0xa70 [ 51.646783][ T6689] ? __x64_sys_unshare+0x31/0x40 [ 51.646796][ T6689] ? do_syscall_64+0x123/0x790 [ 51.646810][ T6689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.646831][ T6689] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.646845][ T6689] ? policy_nodemask+0xed/0x4f0 [ 51.646861][ T6689] alloc_pages_mpol+0x201/0x550 [ 51.646875][ T6689] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 51.646888][ T6689] ? kasan_save_track+0x14/0x30 [ 51.646900][ T6689] ? __kasan_kmalloc+0xaa/0xb0 [ 51.646913][ T6689] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 51.646932][ T6689] alloc_pages_noprof+0x1a/0x160 [ 51.646949][ T6689] timens_vdso_alloc_vvar_page+0x1d/0x70 [ 51.646963][ T6689] copy_time_ns+0x10b/0x790 [ 51.646975][ T6689] create_new_namespaces+0x48a/0xac0 [ 51.646991][ T6689] unshare_nsproxy_namespaces+0xf2/0x220 [ 51.647005][ T6689] ksys_unshare+0x4a2/0xa70 [ 51.647018][ T6689] ? __pfx_ksys_unshare+0x10/0x10 [ 51.647035][ T6689] __x64_sys_unshare+0x31/0x40 [ 51.647048][ T6689] do_syscall_64+0x123/0x790 [ 51.647064][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.647075][ T6689] RIP: 0033:0x7f7fa039e159 [ 51.647084][ T6689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.647094][ T6689] RSP: 002b:00007f7fa128c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 51.647105][ T6689] RAX: ffffffffffffffda RBX: 00007f7fa0625fa0 RCX: 00007f7fa039e159 [ 51.647112][ T6689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 51.647118][ T6689] RBP: 00007f7fa043503b R08: 0000000000000000 R09: 0000000000000000 [ 51.647124][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.647130][ T6689] R13: 00007f7fa0626038 R14: 00007f7fa0625fa0 R15: 00007ffea592fa28 [ 51.647144][ T6689] [ 52.097848][ T6735] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 52.487387][ T6766] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 52.487420][ T6766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.556025][ T5088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.589257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 52.989756][ T6789] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 52.989850][ T6789] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 53.158258][ T6805] faux_driver vgem: [drm] Unknown color mode 52; guessing buffer size. [ 53.355036][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 53.382153][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.382952][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.383379][ T5478] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 53.383399][ T5478] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 53.433849][ T6818] FAULT_INJECTION: forcing a failure. [ 53.433849][ T6818] name failslab, interval 1, probability 0, space 0, times 0 [ 53.433879][ T6818] CPU: 2 UID: 0 PID: 6818 Comm: syz.0.424 Not tainted syzkaller #0 PREEMPT(full) [ 53.433899][ T6818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.433911][ T6818] Call Trace: [ 53.433918][ T6818] [ 53.433926][ T6818] dump_stack_lvl+0x100/0x190 [ 53.433957][ T6818] should_fail_ex.cold+0x5/0xa [ 53.433983][ T6818] should_failslab+0xc2/0x120 [ 53.434007][ T6818] kmem_cache_alloc_noprof+0x92/0x6a0 [ 53.434028][ T6818] ? __send_signal_locked+0x155/0x12d0 [ 53.434062][ T6818] __send_signal_locked+0x155/0x12d0 [ 53.434091][ T6818] send_signal_locked+0x15e/0xa00 [ 53.434113][ T6818] ? __pfx_send_signal_locked+0x10/0x10 [ 53.434131][ T6818] ? do_raw_spin_lock+0x128/0x260 [ 53.434169][ T6818] ? _raw_spin_lock_irqsave+0x52/0x60 [ 53.434194][ T6818] force_sig_info_to_task+0x450/0x660 [ 53.434220][ T6818] force_sig_fault+0xc3/0x100 [ 53.434240][ T6818] ? __pfx_force_sig_fault+0x10/0x10 [ 53.434266][ T6818] ? __pfx___up_read+0x10/0x10 [ 53.434287][ T6818] ? fixup_vdso_exception+0x2d1/0x370 [ 53.434310][ T6818] __bad_area_nosemaphore+0x31b/0x3f0 [ 53.434335][ T6818] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 53.434363][ T6818] do_user_addr_fault+0x8ca/0x12f0 [ 53.434394][ T6818] exc_page_fault+0x6f/0xd0 [ 53.434417][ T6818] asm_exc_page_fault+0x26/0x30 [ 53.434431][ T6818] RIP: 0033:0x7f7fa03877a1 [ 53.434446][ T6818] Code: 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c ef 04 00 00 62 a1 c5 00 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 e0 04 00 00 <62> e1 fe 28 6f 06 62 b2 7e 20 26 c0 c5 fb 93 c8 48 89 f8 48 83 fa [ 53.434462][ T6818] RSP: 002b:00007f7fa128bbd8 EFLAGS: 00010283 [ 53.434479][ T6818] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 53.434491][ T6818] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f7fa128bc00 [ 53.434502][ T6818] RBP: 00007f7fa128bc00 R08: 0000000000000000 R09: 0000000000000000 [ 53.434513][ T6818] R10: 0000000000000000 R11: 0000000000000801 R12: cccccccccccccccd [ 53.434524][ T6818] R13: 00007f7fa0626038 R14: 00007f7fa0625fa0 R15: 00007ffea592fa28 [ 53.434545][ T6818] [ 53.543087][ T6827] __nla_validate_parse: 2 callbacks suppressed [ 53.543104][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'. [ 53.618276][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 53.618294][ T43] audit: type=1400 audit(1789264173.379:503): avc: denied { write } for pid=6834 comm="syz.0.432" name="/" dev="9p" ino=73941743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.623689][ T43] audit: type=1400 audit(1789264173.379:504): avc: denied { write } for pid=6834 comm="syz.0.432" name="/" dev="9p" ino=73941743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.699920][ T43] audit: type=1400 audit(1789264173.459:505): avc: denied { bind } for pid=6844 comm="syz.2.438" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.700763][ T43] audit: type=1400 audit(1789264173.459:506): avc: denied { name_bind } for pid=6844 comm="syz.2.438" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 53.700788][ T43] audit: type=1400 audit(1789264173.459:507): avc: denied { node_bind } for pid=6844 comm="syz.2.438" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 53.777192][ T6851] mtrr: base(0x573be70b8fa6cd88000) is not aligned on a size(0xb1f7e145000) boundary [ 53.881260][ T43] audit: type=1400 audit(1789264173.639:508): avc: denied { relabelfrom } for pid=6861 comm="syz.3.445" name="" dev="pipefs" ino=14250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 53.892853][ T6862] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 53.913638][ T43] audit: type=1400 audit(1789264173.669:509): avc: denied { read } for pid=6866 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 53.983645][ T43] audit: type=1400 audit(1789264173.739:510): avc: denied { create } for pid=6868 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.986773][ T43] audit: type=1400 audit(1789264173.749:511): avc: denied { setopt } for pid=6868 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.990745][ T43] audit: type=1400 audit(1789264173.749:512): avc: denied { connect } for pid=6868 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.066861][ T6878] netlink: 'syz.3.452': attribute type 33 has an invalid length. [ 54.112155][ T6882] Format for deleting device is "id" (uint). [ 54.156533][ T6888] netlink: 'syz.0.458': attribute type 2 has an invalid length. [ 54.196836][ T6892] binder: 6891:6892 ioctl c0306201 200000000040 returned -22 [ 54.234994][ T6896] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 54.819457][ T1132] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 54.822255][ T1132] ata1.00: configured for UDMA/100 [ 55.419408][ T6963] netlink: 'syz.1.491': attribute type 11 has an invalid length. [ 55.425146][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 55.432330][ T5478] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 55.432349][ T5478] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 55.675655][ T5088] net_ratelimit: 11 callbacks suppressed [ 55.675676][ T5088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.165691][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 56.213435][ T7021] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 56.258526][ T7024] openvswitch: netlink: IPv4 tunnel dst address is zero [ 56.258556][ T7024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.299905][ T7026] cgroup: fork rejected by pids controller in /syz3 [ 56.396991][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.717426][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.505050][ T5478] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 57.505068][ T5478] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 57.505083][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 57.670970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.746924][ T5088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.813556][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.971217][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.051634][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.133032][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.153781][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.154588][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.160940][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.179605][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.181370][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.194051][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.207831][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.208218][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.212060][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.213328][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.213985][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.214069][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.218259][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.218654][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.220870][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.391733][ T13] bridge_slave_1: left allmulticast mode [ 58.391758][ T13] bridge_slave_1: left promiscuous mode [ 58.393277][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.401546][ T13] bridge_slave_0: left allmulticast mode [ 58.401564][ T13] bridge_slave_0: left promiscuous mode [ 58.401692][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.541119][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.544141][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.551622][ T13] bond0 (unregistering): Released all slaves [ 58.562340][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.690627][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 58.690642][ T43] audit: type=1400 audit(1789264178.449:550): avc: denied { write } for pid=7102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.705518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.759432][ T43] audit: type=1400 audit(1789264178.519:551): avc: denied { write } for pid=7107 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.785905][ T5088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.831246][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 58.982585][ T13] hsr_slave_0: left promiscuous mode [ 58.984867][ T13] hsr_slave_1: left promiscuous mode [ 58.985885][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.985913][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.988172][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.988188][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.004378][ T13] veth1_macvtap: left promiscuous mode [ 59.004470][ T13] veth0_macvtap: left promiscuous mode [ 59.004548][ T13] veth1_vlan: left promiscuous mode [ 59.004613][ T13] veth0_vlan: left promiscuous mode [ 59.227450][ T13] team0 (unregistering): Port device team_slave_1 removed [ 59.227943][ T7081] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.234103][ T13] team0 (unregistering): Port device team_slave_0 removed [ 59.323196][ T43] audit: type=1400 audit(1789264179.079:552): avc: denied { setopt } for pid=7125 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.427076][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.524541][ T43] audit: type=1400 audit(1789264179.279:553): avc: denied { write } for pid=7132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.603803][ T7058] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.603884][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.603989][ T7058] bridge_slave_0: entered allmulticast mode [ 59.608084][ T7058] bridge_slave_0: entered promiscuous mode [ 59.622048][ T43] audit: type=1400 audit(1789264179.379:554): avc: denied { write } for pid=7148 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.661055][ T7058] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.662695][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.662832][ T7058] bridge_slave_1: entered allmulticast mode [ 59.665053][ T7058] bridge_slave_1: entered promiscuous mode [ 59.709389][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 59.710821][ T7058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.719654][ T7058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.738326][ T43] audit: type=1400 audit(1789264179.499:555): avc: denied { read } for pid=7155 comm="syz.1.556" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.752646][ T43] audit: type=1400 audit(1789264179.509:556): avc: denied { ioctl } for pid=7155 comm="syz.1.556" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.760460][ T7156] input: syz1 as /devices/virtual/input/input7 [ 59.767957][ T43] audit: type=1400 audit(1789264179.529:557): avc: denied { read } for pid=5130 comm="acpid" name="event4" dev="devtmpfs" ino=2849 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.767987][ T43] audit: type=1400 audit(1789264179.529:558): avc: denied { open } for pid=5130 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2849 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.768007][ T43] audit: type=1400 audit(1789264179.529:559): avc: denied { ioctl } for pid=5130 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2849 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.788358][ T7058] team0: Port device team_slave_0 added [ 59.790737][ T7058] team0: Port device team_slave_1 added [ 59.791487][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.791647][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.791706][ T7057] bridge_slave_0: entered allmulticast mode [ 59.792473][ T7057] bridge_slave_0: entered promiscuous mode [ 59.811702][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.811748][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.811802][ T7057] bridge_slave_1: entered allmulticast mode [ 59.812681][ T7057] bridge_slave_1: entered promiscuous mode [ 59.816120][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.816130][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.816142][ T7058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.824673][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.824683][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.824696][ T7058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.845669][ T7057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.875548][ T7057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.886296][ T7058] hsr_slave_0: entered promiscuous mode [ 59.886861][ T7058] hsr_slave_1: entered promiscuous mode [ 59.887256][ T7058] debugfs: 'hsr0' already exists in 'hsr' [ 59.887272][ T7058] Cannot create hsr debugfs directory [ 59.938004][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.948956][ T7057] team0: Port device team_slave_0 added [ 59.961646][ T7057] team0: Port device team_slave_1 added [ 59.993349][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.993359][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.993372][ T7057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.003453][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.003466][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.003481][ T7057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.049709][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.099638][ T7057] hsr_slave_0: entered promiscuous mode [ 60.100450][ T7057] hsr_slave_1: entered promiscuous mode [ 60.100832][ T7057] debugfs: 'hsr0' already exists in 'hsr' [ 60.100849][ T7057] Cannot create hsr debugfs directory [ 60.101655][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 60.211606][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.225114][ T5746] Bluetooth: hci0: command tx timeout [ 60.306649][ T5746] Bluetooth: hci1: command tx timeout [ 60.309576][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.424706][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 60.491606][ T13] bridge_slave_1: left promiscuous mode [ 60.491726][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.493911][ T13] bridge_slave_0: left allmulticast mode [ 60.493927][ T13] bridge_slave_0: left promiscuous mode [ 60.494038][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.594740][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.603673][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.605224][ T13] bond0 (unregistering): Released all slaves [ 60.852189][ T7205] jffs2: notice: (7205) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 60.871864][ T7057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.873890][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.874324][ T7057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.879856][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.881388][ T7057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.889702][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.892115][ T7057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.910594][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.044562][ T13] hsr_slave_0: left promiscuous mode [ 61.063490][ T13] hsr_slave_1: left promiscuous mode [ 61.079707][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.079751][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.093302][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.093337][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.159411][ T13] veth1_macvtap: left promiscuous mode [ 61.159656][ T13] veth0_macvtap: left promiscuous mode [ 61.160527][ T13] veth1_vlan: left promiscuous mode [ 61.160933][ T13] veth0_vlan: left promiscuous mode [ 62.316321][ T5746] Bluetooth: hci0: command 0x041b tx timeout [ 62.395897][ T5746] Bluetooth: hci1: command tx timeout [ 63.890897][ T13] team0 (unregistering): Port device team_slave_1 removed [ 64.063358][ T13] team0 (unregistering): Port device team_slave_0 removed [ 64.385655][ T5746] Bluetooth: hci0: command 0x041b tx timeout [ 64.465690][ T5746] Bluetooth: hci1: command tx timeout [ 66.468008][ T5746] Bluetooth: hci0: command 0x041b tx timeout [ 66.545326][ T5746] Bluetooth: hci1: command tx timeout [ 66.714669][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 66.714697][ T43] audit: type=1326 audit(1789264186.469:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.2.573" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a3339e159 code=0x0 [ 66.811598][ T7058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.889296][ T7058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.949738][ T7058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.072302][ T7058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.121286][ T7058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.170690][ T7058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.211181][ T7058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.299726][ T7058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.392548][ T43] audit: type=1400 audit(1789264187.139:573): avc: denied { write } for pid=7235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.480902][ T43] audit: type=1400 audit(1789264188.239:574): avc: denied { write } for pid=7247 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.545275][ C2] ------------[ cut here ]------------ [ 68.545308][ C2] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 68.545387][ C2] WARNING: kernel/workqueue.c:2352 at __queue_work+0xdb7/0x1370, CPU#2: syz.1.575/7249 [ 68.552831][ C2] Modules linked in: [ 68.554098][ C2] CPU: 2 UID: 0 PID: 7249 Comm: syz.1.575 Not tainted syzkaller #0 PREEMPT(full) [ 68.558315][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc [ 68.562467][ C2] RIP: 0010:__queue_work+0xdbb/0x1370 [ 68.564655][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d c9 6e 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 68.572304][ C2] RSP: 0018:ffffc90000658b68 EFLAGS: 00010046 [ 68.574438][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100959094e [ 68.577011][ C2] RDX: ffff88805b5d1970 RSI: ffffffff8ac2ef90 RDI: ffffffff91480ff0 [ 68.579821][ C2] RBP: ffff88804ac84a58 R08: 0000000000000007 R09: 0000000000000000 [ 68.583160][ C2] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88805b5d1800 [ 68.586752][ C2] R13: 1ffff920000cb177 R14: 0000000000000000 R15: ffffffff81d0a6f0 [ 68.589851][ C2] FS: 00007f6ee18276c0(0000) GS:ffff8880d5d59000(0000) knlGS:0000000000000000 [ 68.593601][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.597297][ C2] CR2: 000000110c327215 CR3: 0000000058f7a000 CR4: 0000000000352ef0 [ 68.601558][ C2] Call Trace: [ 68.603029][ C2] [ 68.604486][ C2] ? lock_acquire+0x1d1/0x380 [ 68.606545][ C2] ? call_timer_fn+0x11d/0x5f0 [ 68.608684][ C2] ? __pfx___queue_work+0x10/0x10 [ 68.611153][ C2] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 68.613940][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 68.616399][ C2] call_timer_fn+0x198/0x5f0 [ 68.618514][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 68.620924][ C2] ? lock_acquire+0x1d1/0x380 [ 68.623558][ C2] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 68.627028][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 68.629511][ C2] __run_timers+0x570/0xb00 [ 68.631760][ C2] ? __pfx___run_timers+0x10/0x10 [ 68.634117][ C2] ? lock_acquire+0x1d1/0x380 [ 68.636512][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 68.639497][ C2] run_timer_base+0x114/0x190 [ 68.642426][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 68.645290][ C2] run_timer_softirq+0x1a/0x50 [ 68.647279][ C2] handle_softirqs+0x1e6/0x9d0 [ 68.649559][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 68.651813][ C2] ? _raw_spin_unlock+0x28/0x50 [ 68.654035][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 68.656577][ C2] __irq_exit_rcu+0x16a/0x210 [ 68.658786][ C2] irq_exit_rcu+0x9/0x30 [ 68.660936][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 68.663803][ C2] [ 68.665179][ C2] [ 68.666540][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 68.668957][ C2] RIP: 0010:lock_acquire+0x5e/0x380 [ 68.671142][ C2] Code: 05 8f 27 a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e e0 5d 0f 0f 82 c9 02 00 00 8b 35 3e 12 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 27 a5 12 0f 85 09 03 00 00 48 83 c4 [ 68.679110][ C2] RSP: 0018:ffffc90003777868 EFLAGS: 00000206 [ 68.682008][ C2] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 68.686318][ C2] RDX: 0000000000000000 RSI: ffffffff8e36558f RDI: ffffffff8c622d80 [ 68.689998][ C2] RBP: ffff88805b5d1940 R08: 0000000000000001 R09: 000000000000001b [ 68.693298][ C2] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 68.696599][ C2] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 68.700440][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 68.702841][ C2] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 68.705185][ C2] touch_wq_lockdep_map+0xad/0x1c0 [ 68.707509][ C2] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 68.710131][ C2] __flush_workqueue+0x131/0x1200 [ 68.712691][ C2] ? __mutex_lock+0x26c/0x1bd0 [ 68.714813][ C2] ? drain_workqueue+0x29/0x3b0 [ 68.716944][ C2] ? find_held_lock+0x2b/0x80 [ 68.718998][ C2] ? drain_workqueue+0xd1/0x3b0 [ 68.721063][ C2] ? drain_workqueue+0xd1/0x3b0 [ 68.723202][ C2] ? __pfx___flush_workqueue+0x10/0x10 [ 68.725533][ C2] ? __mutex_unlock_slowpath+0x35d/0x930 [ 68.728820][ C2] drain_workqueue+0x175/0x3b0 [ 68.731623][ C2] hci_dev_close_sync+0x36b/0x13e0 [ 68.734140][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.736520][ C2] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 68.738928][ C2] ? __pfx___might_resched+0x10/0x10 [ 68.741387][ C2] hci_dev_do_close+0x2e/0xb0 [ 68.743462][ C2] hci_dev_close+0x1a1/0x200 [ 68.745672][ C2] hci_sock_ioctl+0x1d7/0x7e0 [ 68.747975][ C2] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 68.750943][ C2] sock_do_ioctl+0x118/0x280 [ 68.753423][ C2] ? __pfx_sock_do_ioctl+0x10/0x10 [ 68.755560][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.758300][ C2] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.760475][ C2] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 68.763230][ C2] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.766325][ C2] sock_ioctl+0x599/0x6b0 [ 68.768673][ C2] ? __pfx_sock_ioctl+0x10/0x10 [ 68.771170][ C2] ? selinux_file_ioctl+0x13b/0x290 [ 68.773476][ C2] ? selinux_file_ioctl+0xb6/0x290 [ 68.775801][ C2] ? __pfx_sock_ioctl+0x10/0x10 [ 68.777930][ C2] __x64_sys_ioctl+0x18e/0x210 [ 68.780357][ C2] do_syscall_64+0x123/0x790 [ 68.782901][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.785913][ C2] RIP: 0033:0x7f6ee099e159 [ 68.788013][ C2] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.791006][ T7057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.798936][ C2] RSP: 002b:00007f6ee1827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.802971][ C2] RAX: ffffffffffffffda RBX: 00007f6ee0c25fa0 RCX: 00007f6ee099e159 [ 68.806668][ C2] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 68.809847][ C2] RBP: 00007f6ee0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 68.812970][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.816489][ C2] R13: 00007f6ee0c26038 R14: 00007f6ee0c25fa0 R15: 00007ffdbc963998 [ 68.820419][ C2] [ 68.822001][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.825867][ C2] CPU: 2 UID: 0 PID: 7249 Comm: syz.1.575 Not tainted syzkaller #0 PREEMPT(full) [ 68.829803][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.834004][ C2] Call Trace: [ 68.835457][ C2] [ 68.836720][ C2] dump_stack_lvl+0x100/0x190 [ 68.839114][ C2] vpanic+0x553/0x970 [ 68.841539][ C2] ? __pfx_vpanic+0x10/0x10 [ 68.844602][ C2] panic+0xd1/0xe0 [ 68.846310][ C2] ? __pfx_panic+0x10/0x10 [ 68.848805][ C2] check_panic_on_warn.cold+0x19/0x34 [ 68.851104][ C2] ? __queue_work+0xdb7/0x1370 [ 68.853193][ C2] __warn.cold+0x191/0x318 [ 68.855258][ C2] __report_bug+0x30f/0x440 [ 68.857357][ C2] ? __queue_work+0xdb7/0x1370 [ 68.859851][ C2] ? __pfx___report_bug+0x10/0x10 [ 68.862454][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 68.864914][ C2] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 68.867649][ C2] report_bug_entry+0xe2/0x290 [ 68.869728][ C2] ? __queue_work+0xdbb/0x1370 [ 68.871837][ C2] handle_bug+0x1cd/0x2a0 [ 68.873996][ C2] exc_invalid_op+0x17/0x50 [ 68.876522][ C2] asm_exc_invalid_op+0x1a/0x20 [ 68.878978][ C2] RIP: 0010:__queue_work+0xdbb/0x1370 [ 68.881330][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d c9 6e 77 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 68.889222][ C2] RSP: 0018:ffffc90000658b68 EFLAGS: 00010046 [ 68.891770][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100959094e [ 68.895008][ C2] RDX: ffff88805b5d1970 RSI: ffffffff8ac2ef90 RDI: ffffffff91480ff0 [ 68.898100][ C2] RBP: ffff88804ac84a58 R08: 0000000000000007 R09: 0000000000000000 [ 68.901569][ C2] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88805b5d1800 [ 68.905518][ C2] R13: 1ffff920000cb177 R14: 0000000000000000 R15: ffffffff81d0a6f0 [ 68.909283][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 68.912048][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 68.914404][ C2] ? __queue_work+0xd89/0x1370 [ 68.916637][ C2] ? lock_acquire+0x1d1/0x380 [ 68.918778][ C2] ? call_timer_fn+0x11d/0x5f0 [ 68.920979][ C2] ? __pfx___queue_work+0x10/0x10 [ 68.923337][ C2] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 68.926490][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 68.929372][ C2] call_timer_fn+0x198/0x5f0 [ 68.931810][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 68.933973][ C2] ? lock_acquire+0x1d1/0x380 [ 68.936090][ C2] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 68.940124][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 68.943449][ C2] __run_timers+0x570/0xb00 [ 68.945996][ C2] ? __pfx___run_timers+0x10/0x10 [ 68.948657][ C2] ? lock_acquire+0x1d1/0x380 [ 68.950968][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 68.953455][ C2] run_timer_base+0x114/0x190 [ 68.955573][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 68.958048][ C2] run_timer_softirq+0x1a/0x50 [ 68.960303][ C2] handle_softirqs+0x1e6/0x9d0 [ 68.962979][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 68.965680][ C2] ? _raw_spin_unlock+0x28/0x50 [ 68.967808][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 68.970371][ C2] __irq_exit_rcu+0x16a/0x210 [ 68.972448][ C2] irq_exit_rcu+0x9/0x30 [ 68.974276][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 68.976699][ C2] [ 68.977972][ C2] [ 68.979339][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 68.982397][ C2] RIP: 0010:lock_acquire+0x5e/0x380 [ 68.985043][ C2] Code: 05 8f 27 a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 9e e0 5d 0f 0f 82 c9 02 00 00 8b 35 3e 12 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 2d 27 a5 12 0f 85 09 03 00 00 48 83 c4 [ 68.993172][ C2] RSP: 0018:ffffc90003777868 EFLAGS: 00000206 [ 68.995732][ C2] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 68.998993][ C2] RDX: 0000000000000000 RSI: ffffffff8e36558f RDI: ffffffff8c622d80 [ 69.002417][ C2] RBP: ffff88805b5d1940 R08: 0000000000000001 R09: 000000000000001b [ 69.006418][ C2] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 69.009938][ C2] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 69.013823][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 69.015984][ C2] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 69.018265][ C2] touch_wq_lockdep_map+0xad/0x1c0 [ 69.020573][ C2] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 69.023050][ C2] __flush_workqueue+0x131/0x1200 [ 69.025514][ C2] ? __mutex_lock+0x26c/0x1bd0 [ 69.027657][ C2] ? drain_workqueue+0x29/0x3b0 [ 69.029577][ C2] ? find_held_lock+0x2b/0x80 [ 69.031583][ C2] ? drain_workqueue+0xd1/0x3b0 [ 69.033586][ C2] ? drain_workqueue+0xd1/0x3b0 [ 69.035826][ C2] ? __pfx___flush_workqueue+0x10/0x10 [ 69.038216][ C2] ? __mutex_unlock_slowpath+0x35d/0x930 [ 69.041162][ C2] drain_workqueue+0x175/0x3b0 [ 69.043557][ C2] hci_dev_close_sync+0x36b/0x13e0 [ 69.046023][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.048832][ C2] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 69.051291][ C2] ? __pfx___might_resched+0x10/0x10 [ 69.053824][ C2] hci_dev_do_close+0x2e/0xb0 [ 69.055867][ C2] hci_dev_close+0x1a1/0x200 [ 69.057895][ C2] hci_sock_ioctl+0x1d7/0x7e0 [ 69.060012][ C2] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 69.062488][ C2] sock_do_ioctl+0x118/0x280 [ 69.064856][ C2] ? __pfx_sock_do_ioctl+0x10/0x10 [ 69.067674][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.070458][ C2] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 69.072660][ C2] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 69.075349][ C2] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 69.078333][ C2] sock_ioctl+0x599/0x6b0 [ 69.080293][ C2] ? __pfx_sock_ioctl+0x10/0x10 [ 69.082715][ C2] ? selinux_file_ioctl+0x13b/0x290 [ 69.085009][ C2] ? selinux_file_ioctl+0xb6/0x290 [ 69.087350][ C2] ? __pfx_sock_ioctl+0x10/0x10 [ 69.089599][ C2] __x64_sys_ioctl+0x18e/0x210 [ 69.092008][ C2] do_syscall_64+0x123/0x790 [ 69.094172][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.096655][ C2] RIP: 0033:0x7f6ee099e159 [ 69.098595][ C2] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.107153][ C2] RSP: 002b:00007f6ee1827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.110397][ C2] RAX: ffffffffffffffda RBX: 00007f6ee0c25fa0 RCX: 00007f6ee099e159 [ 69.113600][ C2] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 69.116938][ C2] RBP: 00007f6ee0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 69.120486][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.124982][ C2] R13: 00007f6ee0c26038 R14: 00007f6ee0c25fa0 R15: 00007ffdbc963998 [ 69.129265][ C2] [ 69.131268][ C2] Kernel Offset: disabled [ 69.133033][ C2] Rebooting in 86400 seconds..