last executing test programs: 2.510557218s ago: executing program 3 (id=329): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x48, r0, 0xb97534d5fe9704cf, 0x70bd29, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x40000000) 2.370837344s ago: executing program 3 (id=330): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r0, 0xfefffff8) personality(0x87bf5ac905ea0f7f) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x759400, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000200)={0x0, 0x9}, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) connect$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x10, @none, 0x5, 0x2}, 0xe) recvmsg$can_raw(r3, &(0x7f0000000680)={&(0x7f00000002c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000000a00)=""/251, 0xfb}, {&(0x7f0000000340)=""/99, 0x63}], 0x7, &(0x7f0000000580)=""/244, 0xf4}, 0x40000020) r4 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/features/transaction_report\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000900)={&(0x7f00000006c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x18}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_LINK={0x8, 0x1, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x80) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e130100c900", @ANYRES32=r0], 0x16) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.365890858s ago: executing program 2 (id=332): r0 = socket(0x2, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001cc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000002680)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet(r0, &(0x7f0000002180)="8ce2ad4d4f95e087a7846d3f81", 0xfdef, 0x0, &(0x7f00000021c0)={0x2, 0x13, @multicast2}, 0x10) 2.31102071s ago: executing program 2 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040) 2.24189603s ago: executing program 2 (id=336): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) vmsplice(r0, &(0x7f0000000780)=[{&(0x7f0000000200)="dc95a29ade5003ca601070868a6f3bd4292251569d90ad3e51a7cd903440832bddf081434ea0e19726680b54926720c0ed75913a1dad5982f3822a006c7721eebe1c25052701ff392fe7ee08182bcfa649106985853fe27b1c02abf424eae6a7918c41591db1cf9370ded9df6787aabf5cd1c6401b98b1743a4089968d7a760c08144446d5d54d7840b8b58c55e0265fa036109e5111b391d1d5038cd598dcf3a9dfb92ee4a8eba12bf280a7bed561db69e087beab39dd2dbc3f0a643ef9e33bd3d717a58ceae6386bbe560048920a873574d95ab111ff2d39d1aa8740d1b983818a26afb1833b0a", 0xe8}, {&(0x7f0000000300)="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", 0xfa}, {&(0x7f0000000400)="f770a7092c5620276f091e8d48a885ddd5ca8ff464f2f3374a08b23b7094c1e83f95cf73487a049182ec51f2d24cbbe803d39c117c340935ba253831ff1e74a8a9cc59d9cc25d25e8b2b7dd452833af177d7c79d1817ad4b3a34dc2031b94c075e6549a0f7979cb53eadea2e65358d997fb70692e009e47e35440c25c175890b4f6646b6cb88b24cac9ea458ff483fd5a39b2c1fe0f605b7b70bfcb8db5f306531af5fd3bcab1a72815c5628dc12c0939fba", 0xb2}, {&(0x7f00000004c0)="3e14d68582c0c984470b4374c0fad89cba1a4b634094601a4631391443bcca97f1c3f12c9b0fd08252fd87a7985fb9eeba", 0x31}, {&(0x7f0000000500)="bc4a1ee697288c2ddffca02c2649b40b8525fee763b2d6df252a9a570e7b47b5f2876612e921a388fafc7da10849c90728370236334ab0cf56724dcac5cd5c18d2c65e744ec17d274afa0d6c2cb5d7689a91deddb98426a759d3e4a487bb3eaa937fe943ff4bad79535499aa85a953e8b1da2e578e8dd69a727682a2ee4708", 0x7f}, {&(0x7f0000000580)="bf6c101d46ccfa66b45d6f0c6a7ea0599e8d305d55ba4e7d267847d206c601920ef9621ccbf677717443e894398a60af87e31206479eebba251017635e82194a760eebb9054e3f057ae332183e608e590301c7186ee36e13746bd4deb548ccf332872f870103a01c46b6bf4366981faf30609e42ffd5ffe42fa471b84dab96d78e68c01aa292e9edea1373c6da7a8aeb025c86b4b7fb319819c5438fa66fad086cd0fbef84c7a095150e5962515790cdeb1b2ffaba6b2ea8089801a8a47fbaf9ba6c4dfc093021bd819dcc73c3661b20ac11c7", 0xd3}, {&(0x7f0000000680)="3afcaa4a1823f6b591aca71773e0f4c5ecd0bb014b059d28be94b57a15b2431e215d80f0caad185c063f22d7dc6b63a12967db7495259211d99d44542df95cdc9b6eaf2f61008f56d0932cea481860285660fa5b827d8c2bfe33922d6d0bc59750513e9a15461f640735010a1d037e1f6689d33cbd629d925f397b305bf3176b97e0fd1280e757ec4abdbe398e619825ea00f37d505314fa55f2b5a7103bd7674a57e8cf690bef053c77af78a073e59b011ec425a9286f59a74eb3ee98254c52f2bcaa962ee64836d0b2c8141d1953726ba1c958d919142930768cb4db3e6344c17831", 0xe3}], 0x7, 0x4) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) 2.241569546s ago: executing program 2 (id=338): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x8) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) syz_emit_vhci(0x0, 0x16) 1.542134855s ago: executing program 1 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001980)='./proc\x00', &(0x7f00000019c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001a40)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x2c3) mount$overlay(0xf401, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.541951977s ago: executing program 1 (id=344): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1b6) write$binfmt_aout(r0, &(0x7f0000000500)={{0x107, 0x9, 0x7, 0x321, 0x2ce, 0x8, 0x12, 0xfff}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1620) 1.470920386s ago: executing program 1 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x60, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty=0x7000000, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 1.361068527s ago: executing program 1 (id=346): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="120000001c0000010011223344556600140101010101010101010101010101010100", 0x22) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x7, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x7, 0x5f, [@local]}]}}, "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"}}, 0xfce) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000140)='.\x00', 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f00000000c0)={0x0, 0x0, r2}) 1.251294601s ago: executing program 1 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='c:::\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f000001be80)='./file0/file0\x00', 0x1000, 0x400, 0x0) read$FUSE(r0, &(0x7f0000000e00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002e40)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x100, 0x7, 0xa15, 0x0, 0x0, 0x4}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002ec0)='./file0/file0\x00', 0x64) syz_fuse_handle_req(r0, &(0x7f0000002f40)="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", 0x2000, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005000)={0x90, 0x0, 0x0, {0x0, 0x80000, 0x0, 0x0, 0x0, 0x401, {0x3, 0x0, 0x0, 0x3ff, 0x0, 0xde, 0x1, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 912.15613ms ago: executing program 3 (id=350): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) write(r0, &(0x7f0000000040)="05000000010001", 0x7) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000002240)={0xf2, 0x0, 0x34, "aa79b56a321efddfcb80900db83eeb421c125e34076eaec0f8d7dca6ad9d84c161d3f565e412a71ab943bd62354675c02842a1b1109b8d57aa8f5874", 0xd, "e26aa46550d4b9e487c04ac2f9938cf368c1702cf821e3992a89e8fae484c5be6d14385c9d07a7516bd742cdbb670a3b990e26ee12de5194b3a46473", 0xd0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000140), 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x20, 0x4) 911.54832ms ago: executing program 3 (id=352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000300)={0x1000200001ee0000, 0x3}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="43000000000000001c001202800500010004000000000000000000000000000000000000fdf184df417390442c68e7726610deea205188db605abdfa04465836a3e6ddd7a5e091acc33ce95716bf53ccb5bdf7f6a3f1741a3b9dfcb6a163abd233d738d3194efb98af79781be807dd0a045d356df5f1e9783019958792877fcd3a762eba92405a7fa794a9e0b3c40173107d5a1c481505600b6f8cf74d1443a675f75f2a64d240e1"], 0x3c}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 861.224441ms ago: executing program 0 (id=353): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1b6) write$binfmt_aout(r0, &(0x7f0000000500)={{0x107, 0x9, 0x7, 0x321, 0x2ce, 0x8, 0x12, 0xfff}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1620) 860.894087ms ago: executing program 2 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f00000019c0)='proc\x00', 0x4010, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r1, 0x0) accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r0, &(0x7f0000001a40)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x2c3) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x80000001, 0x1, 0x5, 0xb, 0x3}) 855.56526ms ago: executing program 0 (id=355): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x79, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0xffffffffffffffb5) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xd0000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="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", 0x17e}, {&(0x7f0000000680)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000200)=0xdf8, 0x4) writev(r0, &(0x7f0000000780), 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x8) unlinkat(0xffffffffffffffff, &(0x7f0000003240)='./config\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000ec0)=ANY=[@ANYRES8, @ANYRESDEC=r0, @ANYRESDEC, @ANYRES16=r0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES32]) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./config\x00', &(0x7f0000000cc0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)="3341fa1e1d", 0x5) chdir(&(0x7f0000000d80)='./config\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1b6) pwrite64(r2, &(0x7f0000000280)="000001", 0x3, 0x1be) write(r0, &(0x7f00000008c0)="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", 0x3db) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(r3, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000001140)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000001180)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000011c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000840)) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24068000) 741.480603ms ago: executing program 0 (id=356): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='uid', &(0x7f0000000080)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) prctl$PR_SET_THP_DISABLE(0x51, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 662.121098ms ago: executing program 0 (id=357): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (fail_nth: 14) 601.555521ms ago: executing program 3 (id=358): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000680)="4490000100", 0x5}], 0x1}}], 0x1, 0x2090) writev(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="396cf87d08c5a180ab47bb5bf073f8", 0xf}, {0x0}], 0x2) write(r0, &(0x7f00000008c0)="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", 0x2fd) 601.327463ms ago: executing program 3 (id=359): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xfb, "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"}, &(0x7f0000000180)=0x103) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r1, 0x7, 0xe}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="760a00008000000061115000000000001800000000000000000000000000000095"], &(0x7f0000000600)='GPL\x00'}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000680)=0x7ffff, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) mq_open(&(0x7f0000000280)='\xd0O\xe4\xde!\xbd!|]\x85\xf3\xde\xebR76\xf1\xeb\xe9\x8e%q\xc4\xf7\x91\xc52\xf9Z\x04\x9d\x11\xcbv*\xe1\x98d\xa0\xb5\xf3;\x87\x1b\xfdG\xfd\xdb\xf5\xe8[@\xd6\xa7\x9c\xb7\xff\f\xb1\xdd\x9b\xa1f\x89[\x04\xab8\x0e\x86\xd5\xce\xda\x06\n\xd3\xd86q^\x91}r\x87\xf6\xdb5b\x90\x83*\xe94\xf0\xbd\x0f\xb4c\x8ec\xf4o0D#Y', 0x3, 0x181, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000400)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x6, 0x10001, 0x7e, 0x4, 0x4, 0x80000, 0x2, 0x5, 0x100, 0x0, 0x9, 0x2000000000000, 0x5, 0x6, 0x80000000b, 0x4000000000200, 0x0, 0x2, 0x100000, 0x10000000000f48, 0x8, 0x29}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) 450.530811ms ago: executing program 0 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='./dev/mtdblock0\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='xfs\x00', 0x3000000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 401.98591ms ago: executing program 1 (id=361): setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4) get_mempolicy(0x0, &(0x7f0000000040), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x42, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x6}}}, 0xe) 401.731043ms ago: executing program 0 (id=362): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xe, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="fb", 0xfdf8}], 0x1}, 0x4084850) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/60, 0x3c}], 0xd, 0x0, 0x300}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x1, 0x70bc2c, 0x8000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "6e000b000000002000000000000000007ffffffe00001818"}}]}, 0x150}}, 0x44050) 0s ago: executing program 2 (id=363): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1b6) write$binfmt_aout(r0, &(0x7f0000000500)={{0x107, 0x9, 0x7, 0x321, 0x2ce, 0x8, 0x12, 0xfff}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1820) kernel console output (not intermixed with test programs): udit+0x11e/0x470 [ 52.785627][ T6011] ? avc_has_perm_noaudit+0x11e/0x470 [ 52.785665][ T6011] ? xfd_validate_state+0x129/0x190 [ 52.785696][ T6011] __x64_sys_io_uring_setup+0xc2/0x170 [ 52.785719][ T6011] do_syscall_64+0x123/0x790 [ 52.785740][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.785759][ T6011] RIP: 0033:0x7f6e6eb9f559 [ 52.785775][ T6011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.785791][ T6011] RSP: 002b:00007f6e6fb25fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 52.785811][ T6011] RAX: ffffffffffffffda RBX: 00002000000002c0 RCX: 00007f6e6eb9f559 [ 52.785823][ T6011] RDX: 0000200000000380 RSI: 00002000000002c0 RDI: 0000000000000efe [ 52.785836][ T6011] RBP: 00007f6e6ec36b20 R08: 0000000000000000 R09: 0000000000000000 [ 52.785847][ T6011] R10: 00002000000003c0 R11: 0000000000000206 R12: 0000200000000380 [ 52.785858][ T6011] R13: 00002000000003c0 R14: 0000200000000340 R15: 00007fffdaf621f8 [ 52.785883][ T6011] [ 52.789223][ T42] audit: type=1400 audit(1793338522.064:248): avc: denied { mount } for pid=6010 comm="syz.1.27" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 52.793695][ T6010] ima: policy update failed [ 52.795570][ T42] audit: type=1802 audit(1793338522.074:249): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.27" res=0 errno=-22 [ 52.815766][ T42] audit: type=1400 audit(1793338522.094:250): avc: denied { unmount } for pid=5789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 52.982038][ T42] audit: type=1400 audit(1793338522.264:251): avc: denied { create } for pid=6012 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.983953][ T42] audit: type=1400 audit(1793338522.264:252): avc: denied { setopt } for pid=6012 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.986388][ T42] audit: type=1400 audit(1793338522.264:253): avc: denied { setopt } for pid=6012 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.987237][ T42] audit: type=1400 audit(1793338522.264:254): avc: denied { write } for pid=6012 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.988097][ T42] audit: type=1400 audit(1793338522.264:255): avc: denied { setattr } for pid=6012 comm="syz.1.28" name="video9" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 52.991908][ T41] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.083657][ T6017] Bluetooth: hci0: unsupported parameter 12815 [ 53.083672][ T6017] Bluetooth: hci0: unsupported parameter 8192 [ 53.083679][ T6017] Bluetooth: hci0: unsupported parameter 12815 [ 53.083685][ T6017] Bluetooth: hci0: unsupported parameter 8192 [ 53.089601][ T6017] ip_tables: iptables: counters copy to user failed while replacing table [ 53.092049][ T42] audit: type=1400 audit(1793338522.374:256): avc: denied { mount } for pid=6016 comm="syz.3.30" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 53.112604][ T6017] raw_sendmsg: syz.3.30 forgot to set AF_INET. Fix it! [ 53.151917][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 53.155317][ T41] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.157687][ T41] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 53.157712][ T41] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.157723][ T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.157734][ T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.157745][ T41] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.157764][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.279802][ T6024] support for cryptoloop has been removed. Use dm-crypt instead. [ 53.352628][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 53.355068][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'. [ 53.382233][ T6009] process 'syz.0.26' launched '/dev/fd/7' with NULL argv: empty string added [ 53.389577][ T6009] openvswitch: netlink: EtherType 50a is less than min 600 [ 53.411295][ T41] usb 5-1: GET_CAPABILITIES returned 0 [ 53.411334][ T41] usbtmc 5-1:16.0: can't read capabilities [ 53.620122][ T5885] usb 5-1: USB disconnect, device number 2 [ 54.042237][ T5143] Bluetooth: hci2: command tx timeout [ 54.042267][ T5143] Bluetooth: hci1: command tx timeout [ 54.042287][ T5143] Bluetooth: hci0: command tx timeout [ 54.076624][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 54.076650][ T5798] CPU: 1 UID: 0 PID: 5798 Comm: kworker/u34:7 Tainted: G Y syzkaller #0 PREEMPT(full) [ 54.076690][ T5798] Tainted: [Y]=FORCED_BIND [ 54.076698][ T5798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.076712][ T5798] Workqueue: hci2 hci_rx_work [ 54.076748][ T5798] Call Trace: [ 54.076755][ T5798] [ 54.076763][ T5798] dump_stack_lvl+0x100/0x190 [ 54.076804][ T5798] sysfs_warn_dup.cold+0x1c/0x28 [ 54.076837][ T5798] sysfs_create_dir_ns+0x24b/0x2b0 [ 54.076871][ T5798] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 54.076895][ T5798] ? find_held_lock+0x2b/0x80 [ 54.076921][ T5798] ? kobject_add_internal+0x25f/0x930 [ 54.076947][ T5798] ? kobject_add_internal+0x25f/0x930 [ 54.076984][ T5798] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.077006][ T5798] kobject_add_internal+0x2c8/0x930 [ 54.077051][ T5798] kobject_add+0x16a/0x1e0 [ 54.077086][ T5798] ? __pfx_kobject_add+0x10/0x10 [ 54.077112][ T5798] ? class_to_subsys+0x10f/0x150 [ 54.077152][ T5798] ? kobject_put+0xb9/0x640 [ 54.077176][ T5798] ? _raw_spin_unlock+0x28/0x50 [ 54.077217][ T5798] device_add+0x294/0x1970 [ 54.077251][ T5798] ? __pfx_dev_set_name+0x10/0x10 [ 54.077280][ T5798] ? __pfx_device_add+0x10/0x10 [ 54.077315][ T5798] ? mgmt_send_event_skb+0x2fb/0x460 [ 54.077346][ T5798] hci_conn_add_sysfs+0x1a3/0x260 [ 54.077380][ T5798] le_conn_complete_evt+0x12f9/0x2200 [ 54.077435][ T5798] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 54.077466][ T5798] ? hci_event_packet+0x186/0xcd0 [ 54.077493][ T5798] hci_le_conn_complete_evt+0x23c/0x3a0 [ 54.077523][ T5798] ? skb_pull_data+0x15f/0x1e0 [ 54.077553][ T5798] hci_le_meta_evt+0x34a/0x5f0 [ 54.077583][ T5798] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 54.077607][ T5798] hci_event_packet+0x51c/0xcd0 [ 54.077627][ T5798] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 54.077657][ T5798] ? __pfx_hci_event_packet+0x10/0x10 [ 54.077682][ T5798] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.077715][ T5798] hci_rx_work+0x6ea/0x10c0 [ 54.077737][ T5798] process_one_work+0xac7/0x1b10 [ 54.077778][ T5798] ? __pfx_process_one_work+0x10/0x10 [ 54.077801][ T5798] ? lock_acquire+0x1d1/0x380 [ 54.077842][ T5798] ? __pfx_hci_rx_work+0x10/0x10 [ 54.077864][ T5798] worker_thread+0x5ef/0xe50 [ 54.077905][ T5798] ? kthread+0x13a/0x450 [ 54.077923][ T5798] ? __pfx_worker_thread+0x10/0x10 [ 54.077942][ T5798] kthread+0x373/0x450 [ 54.077967][ T5798] ? __pfx_kthread+0x10/0x10 [ 54.077986][ T5798] ret_from_fork+0x730/0xd60 [ 54.078021][ T5798] ? __pfx_ret_from_fork+0x10/0x10 [ 54.078052][ T5798] ? __switch_to+0x800/0x10e0 [ 54.078080][ T5798] ? __pfx_kthread+0x10/0x10 [ 54.078099][ T5798] ret_from_fork_asm+0x1a/0x30 [ 54.078144][ T5798] [ 54.079079][ T5798] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 54.079115][ T5798] Bluetooth: hci2: failed to register connection device [ 54.192260][ T6040] ======================================================= [ 54.192260][ T6040] WARNING: The mand mount option has been deprecated and [ 54.192260][ T6040] and is ignored by this kernel. Remove the mand [ 54.192260][ T6040] option from the mount to silence this warning. [ 54.192260][ T6040] ======================================================= [ 54.192338][ T6040] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 54.194162][ T6040] cramfs: wrong magic [ 54.298829][ T6044] comedi comedi3: comedi_config --init_data is deprecated [ 54.348034][ T6046] FAULT_INJECTION: forcing a failure. [ 54.348034][ T6046] name failslab, interval 1, probability 0, space 0, times 0 [ 54.348065][ T6046] CPU: 2 UID: 0 PID: 6046 Comm: syz.3.40 Tainted: G Y syzkaller #0 PREEMPT(full) [ 54.348090][ T6046] Tainted: [Y]=FORCED_BIND [ 54.348097][ T6046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.348108][ T6046] Call Trace: [ 54.348115][ T6046] [ 54.348122][ T6046] dump_stack_lvl+0x100/0x190 [ 54.348189][ T6046] should_fail_ex.cold+0x5/0xa [ 54.348219][ T6046] should_failslab+0xc2/0x120 [ 54.348240][ T6046] __kmalloc_noprof+0xfc/0x840 [ 54.348268][ T6046] ? jffs2_do_mount_fs+0x845/0x22f0 [ 54.348297][ T6046] jffs2_do_mount_fs+0x845/0x22f0 [ 54.348324][ T6046] ? rcu_is_watching+0x13/0xc0 [ 54.348344][ T6046] ? trace_kmalloc+0xeb/0x110 [ 54.348363][ T6046] ? lockdep_init_map_type+0x5c/0x250 [ 54.348389][ T6046] ? __pfx_jffs2_do_mount_fs+0x10/0x10 [ 54.348411][ T6046] ? __raw_spin_lock_init+0x3a/0x110 [ 54.348441][ T6046] ? __init_rwsem+0x10e/0x180 [ 54.348471][ T6046] jffs2_do_fill_super+0x3d4/0xa50 [ 54.348507][ T6046] jffs2_fill_super+0x283/0x370 [ 54.348531][ T6046] ? __pfx_get_mtd_device+0x10/0x10 [ 54.348557][ T6046] ? __pfx_jffs2_fill_super+0x10/0x10 [ 54.348584][ T6046] mtd_get_sb+0x2f0/0x4d0 [ 54.348613][ T6046] ? __pfx_jffs2_fill_super+0x10/0x10 [ 54.348640][ T6046] get_tree_mtd+0x6f9/0x8a0 [ 54.348670][ T6046] ? __pfx_get_tree_mtd+0x10/0x10 [ 54.348697][ T6046] ? cap_capable+0x107/0x430 [ 54.348724][ T6046] ? bpf_lsm_capable+0x9/0x10 [ 54.348741][ T6046] ? security_capable+0x80/0x260 [ 54.348767][ T6046] vfs_get_tree+0x92/0x320 [ 54.348794][ T6046] path_mount+0x7d0/0x2850 [ 54.348825][ T6046] ? __pfx_path_mount+0x10/0x10 [ 54.348849][ T6046] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.348871][ T6046] ? putname+0xb1/0x110 [ 54.348893][ T6046] ? kmem_cache_free+0x127/0x6c0 [ 54.348925][ T6046] ? __x64_sys_mount+0x293/0x310 [ 54.348951][ T6046] __x64_sys_mount+0x293/0x310 [ 54.348978][ T6046] ? __pfx___x64_sys_mount+0x10/0x10 [ 54.349011][ T6046] do_syscall_64+0x123/0x790 [ 54.349033][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.349052][ T6046] RIP: 0033:0x7fc5cdd9f559 [ 54.349068][ T6046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.349085][ T6046] RSP: 002b:00007fc5cbfee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.349104][ T6046] RAX: ffffffffffffffda RBX: 00007fc5ce025fa0 RCX: 00007fc5cdd9f559 [ 54.349116][ T6046] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000200000000280 [ 54.349128][ T6046] RBP: 00007fc5cde36b20 R08: 0000000000000000 R09: 0000000000000000 [ 54.349139][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.349151][ T6046] R13: 00007fc5ce026038 R14: 00007fc5ce025fa0 R15: 00007ffd54ccef88 [ 54.349179][ T6046] [ 54.353934][ T6046] No control pipe specified [ 54.392448][ T6051] support for cryptoloop has been removed. Use dm-crypt instead. [ 54.441001][ T6054] netlink: 14 bytes leftover after parsing attributes in process `syz.2.43'. [ 54.442153][ T5143] Bluetooth: hci3: command tx timeout [ 54.484357][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.494585][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.496355][ T6054] bond0 (unregistering): Released all slaves [ 54.500993][ T6061] FAULT_INJECTION: forcing a failure. [ 54.500993][ T6061] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.501018][ T6061] CPU: 2 UID: 0 PID: 6061 Comm: syz.3.45 Tainted: G Y syzkaller #0 PREEMPT(full) [ 54.501042][ T6061] Tainted: [Y]=FORCED_BIND [ 54.501049][ T6061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.501060][ T6061] Call Trace: [ 54.501067][ T6061] [ 54.501074][ T6061] dump_stack_lvl+0x100/0x190 [ 54.501106][ T6061] should_fail_ex.cold+0x5/0xa [ 54.501134][ T6061] _copy_from_user+0x2e/0xd0 [ 54.501156][ T6061] drm_ioctl+0x520/0xc60 [ 54.501180][ T6061] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 54.501212][ T6061] ? __pfx_drm_ioctl+0x10/0x10 [ 54.501231][ T6061] ? __fget_files+0x34/0x3d0 [ 54.501266][ T6061] ? selinux_file_ioctl+0x1e0/0x290 [ 54.501296][ T6061] ? selinux_file_ioctl+0x1e7/0x290 [ 54.501326][ T6061] ? __pfx_drm_ioctl+0x10/0x10 [ 54.501347][ T6061] __x64_sys_ioctl+0x18e/0x210 [ 54.501378][ T6061] do_syscall_64+0x123/0x790 [ 54.501399][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.501447][ T6061] RIP: 0033:0x7fc5cdd9f559 [ 54.501464][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.501481][ T6061] RSP: 002b:00007fc5cbfee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.501508][ T6061] RAX: ffffffffffffffda RBX: 00007fc5ce025fa0 RCX: 00007fc5cdd9f559 [ 54.501520][ T6061] RDX: 0000200000000780 RSI: 00000000c02064b9 RDI: 0000000000000007 [ 54.501532][ T6061] RBP: 00007fc5cde36b20 R08: 0000000000000000 R09: 0000000000000000 [ 54.501543][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.501555][ T6061] R13: 00007fc5ce026038 R14: 00007fc5ce025fa0 R15: 00007ffd54ccef88 [ 54.501583][ T6061] [ 54.524348][ T6062] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 54.537450][ T6056] FAULT_INJECTION: forcing a failure. [ 54.537450][ T6056] name fail_futex, interval 1, probability 0, space 0, times 1 [ 54.537481][ T6056] CPU: 2 UID: 0 PID: 6056 Comm: syz.0.44 Tainted: G Y syzkaller #0 PREEMPT(full) [ 54.537513][ T6056] Tainted: [Y]=FORCED_BIND [ 54.537520][ T6056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.537531][ T6056] Call Trace: [ 54.537538][ T6056] [ 54.537546][ T6056] dump_stack_lvl+0x100/0x190 [ 54.537581][ T6056] should_fail_ex.cold+0x5/0xa [ 54.537604][ T6056] get_futex_key+0x1c9/0x13e0 [ 54.537627][ T6056] ? __pfx_get_futex_key+0x10/0x10 [ 54.537650][ T6056] futex_wait_setup+0x91/0x540 [ 54.537680][ T6056] __futex_wait+0x19f/0x360 [ 54.537704][ T6056] ? __pfx___futex_wait+0x10/0x10 [ 54.537725][ T6056] ? __pfx_try_to_wake_up+0x10/0x10 [ 54.537747][ T6056] ? futex_hash+0x311/0x400 [ 54.537765][ T6056] ? __pfx_futex_wake_mark+0x10/0x10 [ 54.537789][ T6056] ? find_held_lock+0x2b/0x80 [ 54.537807][ T6056] ? futex_wake+0x4ea/0x5e0 [ 54.537838][ T6056] futex_wait+0xe6/0x370 [ 54.537864][ T6056] ? __pfx_futex_wait+0x10/0x10 [ 54.537904][ T6056] do_futex+0x265/0x440 [ 54.537927][ T6056] ? __pfx_do_futex+0x10/0x10 [ 54.537950][ T6056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.537975][ T6056] __x64_sys_futex+0x34f/0x4d0 [ 54.538000][ T6056] ? __pfx___x64_sys_futex+0x10/0x10 [ 54.538031][ T6056] do_syscall_64+0x123/0x790 [ 54.538052][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.538072][ T6056] RIP: 0033:0x7fd69c39f559 [ 54.538089][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.538106][ T6056] RSP: 002b:00007fd69d2040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 54.538125][ T6056] RAX: ffffffffffffffda RBX: 00007fd69c625fa8 RCX: 00007fd69c39f559 [ 54.538137][ T6056] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd69c625fa8 [ 54.538149][ T6056] RBP: 00007fd69c625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 54.538160][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.538171][ T6056] R13: 00007fd69c626038 R14: 00007ffc9fe309d0 R15: 00007ffc9fe30ab8 [ 54.538196][ T6056] [ 54.666271][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 54.666388][ T6067] Zero length message leads to an empty skb [ 54.666914][ T6067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=6067 comm=syz.3.47 [ 54.676622][ T6064] bonding: no command found in bonding_masters - use +ifname or -ifname [ 54.680070][ T6064] xt_MASQUERADE: bad MAP_IPS. [ 54.865197][ T6082] support for cryptoloop has been removed. Use dm-crypt instead. [ 55.349790][ T6103] vlan2: entered promiscuous mode [ 55.349809][ T6103] hsr0: entered promiscuous mode [ 55.372253][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 55.374833][ T6103] hsr_slave_0: left promiscuous mode [ 55.375872][ T6103] hsr_slave_1: left promiscuous mode [ 55.381215][ T6107] i2c i2c-0: delete_device: Can't find device in list [ 55.642263][ T1650] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.802411][ T1650] usb 7-1: Using ep0 maxpacket: 32 [ 55.803172][ T1650] usb 7-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 55.804075][ T1650] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 55.804088][ T1650] usb 7-1: config 0 has no interface number 0 [ 55.804105][ T1650] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 55.804117][ T1650] usb 7-1: config 0 interface 196 has no altsetting 0 [ 55.806054][ T1650] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.806065][ T1650] usb 7-1: Product: syz [ 55.806072][ T1650] usb 7-1: Manufacturer: syz [ 55.806079][ T1650] usb 7-1: SerialNumber: syz [ 55.807725][ T1650] usb 7-1: config 0 descriptor?? [ 55.808652][ T6109] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.879167][ T6137] netlink: 'syz.1.72': attribute type 12 has an invalid length. [ 56.122042][ T5143] Bluetooth: hci0: command tx timeout [ 56.122077][ T5143] Bluetooth: hci1: command tx timeout [ 56.418626][ T6140] ip_tables: iptables: counters copy to user failed while replacing table [ 56.501717][ T1650] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 56.508943][ T1650] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 56.514043][ T1650] usb 7-1: USB disconnect, device number 2 [ 56.531709][ T6145] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 56.593248][ T1650] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 56.602478][ T6146] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 56.685771][ T6154] syzkaller1: entered promiscuous mode [ 56.685792][ T6154] syzkaller1: entered allmulticast mode [ 57.052011][ T6174] 9pnet_virtio: no channels available for device syz [ 57.078308][ T5798] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 57.618225][ T6191] kAFS: No cell specified [ 57.636804][ T6187] ip_tables: iptables: counters copy to user failed while replacing table [ 57.671718][ T6194] warning: `syz.2.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.676685][ T42] kauditd_printk_skb: 72 callbacks suppressed [ 57.676698][ T42] audit: type=1400 audit(1793338526.954:329): avc: denied { wake_alarm } for pid=6193 comm="syz.2.91" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.888320][ T42] audit: type=1400 audit(1793338527.164:330): avc: denied { create } for pid=6193 comm="syz.2.91" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.949374][ T42] audit: type=1400 audit(1793338527.224:331): avc: denied { create } for pid=6202 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.980690][ T42] audit: type=1400 audit(1793338527.254:332): avc: denied { open } for pid=6202 comm="syz.0.94" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 57.983099][ T42] audit: type=1400 audit(1793338527.264:333): avc: denied { ioctl } for pid=6202 comm="syz.0.94" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x80285442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 58.144225][ T6208] ptrace attach of "/syz-executor exec"[5781] was attempted by "/syz-executor exec"[6208] [ 58.147770][ T42] audit: type=1400 audit(1793338527.424:334): avc: denied { bind } for pid=6207 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.169614][ T6210] overlay: Unknown parameter 'hash' [ 58.189092][ T6210] FAULT_INJECTION: forcing a failure. [ 58.189092][ T6210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.189122][ T6210] CPU: 2 UID: 0 PID: 6210 Comm: syz.3.97 Tainted: G Y syzkaller #0 PREEMPT(full) [ 58.189147][ T6210] Tainted: [Y]=FORCED_BIND [ 58.189154][ T6210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.189166][ T6210] Call Trace: [ 58.189172][ T6210] [ 58.189180][ T6210] dump_stack_lvl+0x100/0x190 [ 58.189224][ T6210] should_fail_ex.cold+0x5/0xa [ 58.189254][ T6210] should_fail_alloc_page+0xeb/0x140 [ 58.189286][ T6210] prepare_alloc_pages+0x1f0/0x5b0 [ 58.189319][ T6210] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 58.189364][ T6210] ? __pfx_get_page_from_freelist+0x10/0x10 [ 58.189413][ T6210] ? rcu_is_watching+0x13/0xc0 [ 58.189444][ T6210] ? trace_mm_page_alloc+0x164/0x1c0 [ 58.189465][ T6210] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 58.189491][ T6210] ? is_bpf_text_address+0x8a/0x1a0 [ 58.189521][ T6210] ? lock_release+0x24d/0x310 [ 58.189552][ T6210] ? bpf_ksym_find+0x128/0x1c0 [ 58.189577][ T6210] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 58.189601][ T6210] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 58.189636][ T6210] ? is_bpf_text_address+0x94/0x1a0 [ 58.189658][ T6210] ? kernel_text_address+0x8d/0x100 [ 58.189687][ T6210] ? mark_held_locks+0x40/0x70 [ 58.189711][ T6210] ? __kernel_text_address+0xd/0x30 [ 58.189730][ T6210] ? unwind_get_return_address+0x59/0xa0 [ 58.189750][ T6210] ? arch_stack_walk+0xa6/0xf0 [ 58.189778][ T6210] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 58.189813][ T6210] ? stack_trace_save+0x8e/0xc0 [ 58.189838][ T6210] ? __pfx_stack_trace_save+0x10/0x10 [ 58.189876][ T6210] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 58.189909][ T6210] ? policy_nodemask+0xed/0x5e0 [ 58.189933][ T6210] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 58.189975][ T6210] __kasan_populate_vmalloc+0xf0/0x210 [ 58.190014][ T6210] alloc_vmap_area+0x963/0x2bc0 [ 58.190060][ T6210] ? kasan_save_track+0x14/0x30 [ 58.190076][ T6210] ? __kasan_kmalloc+0xaa/0xb0 [ 58.190104][ T6210] ? __pfx_alloc_vmap_area+0x10/0x10 [ 58.190134][ T6210] ? kasan_save_track+0x14/0x30 [ 58.190152][ T6210] ? __get_vm_area_node+0x124/0x350 [ 58.190183][ T6210] __get_vm_area_node+0x1ed/0x350 [ 58.190211][ T6210] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 58.190231][ T6210] ? comedi_buf_alloc+0x2fe/0xa00 [ 58.190269][ T6210] ? comedi_buf_alloc+0x2fe/0xa00 [ 58.190300][ T6210] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 58.190324][ T6210] ? kasan_save_track+0x14/0x30 [ 58.190340][ T6210] ? __kasan_kmalloc+0xaa/0xb0 [ 58.190371][ T6210] ? comedi_buf_alloc+0x2fe/0xa00 [ 58.190395][ T6210] __vmalloc_node_noprof+0xad/0xf0 [ 58.190415][ T6210] ? comedi_buf_alloc+0x2fe/0xa00 [ 58.190443][ T6210] comedi_buf_alloc+0x2fe/0xa00 [ 58.190471][ T6210] ? __init_swait_queue_head+0xca/0x150 [ 58.190501][ T6210] comedi_device_postconfig+0x3dc/0xbc0 [ 58.190529][ T6210] comedi_device_attach+0x42a/0x6b0 [ 58.190559][ T6210] do_devconfig_ioctl+0x1b3/0x6d0 [ 58.190590][ T6210] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 58.190629][ T6210] ? kasan_quarantine_put+0x104/0x240 [ 58.190659][ T6210] ? find_held_lock+0x2b/0x80 [ 58.190683][ T6210] comedi_unlocked_ioctl+0x860/0x3310 [ 58.190704][ T6210] ? tomoyo_path_number_perm+0x188/0x580 [ 58.190747][ T6210] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 58.190773][ T6210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.190812][ T6210] ? do_vfs_ioctl+0x226/0x13e0 [ 58.190846][ T6210] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 58.190870][ T6210] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 58.190897][ T6210] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 58.190922][ T6210] ? __fget_files+0x34/0x3d0 [ 58.190949][ T6210] ? selinux_file_ioctl+0x1e0/0x290 [ 58.190971][ T6210] ? selinux_file_ioctl+0x1e7/0x290 [ 58.191002][ T6210] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 58.191022][ T6210] __x64_sys_ioctl+0x18e/0x210 [ 58.191051][ T6210] do_syscall_64+0x123/0x790 [ 58.191076][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.191093][ T6210] RIP: 0033:0x7fc5cdd9f559 [ 58.191108][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.191122][ T6210] RSP: 002b:00007fc5cbfee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.191141][ T6210] RAX: ffffffffffffffda RBX: 00007fc5ce025fa0 RCX: 00007fc5cdd9f559 [ 58.191153][ T6210] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000005 [ 58.191165][ T6210] RBP: 00007fc5cde36b20 R08: 0000000000000000 R09: 0000000000000000 [ 58.191173][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.191182][ T6210] R13: 00007fc5ce026038 R14: 00007fc5ce025fa0 R15: 00007ffd54ccef88 [ 58.191205][ T6210] [ 58.192527][ T6210] syz.3.97: vmalloc error: size 8192, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 58.192648][ T6210] CPU: 2 UID: 0 PID: 6210 Comm: syz.3.97 Tainted: G Y syzkaller #0 PREEMPT(full) [ 58.192674][ T6210] Tainted: [Y]=FORCED_BIND [ 58.192681][ T6210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.192691][ T6210] Call Trace: [ 58.192698][ T6210] [ 58.192705][ T6210] dump_stack_lvl+0x100/0x190 [ 58.192737][ T6210] warn_alloc.cold+0x9e/0xb2 [ 58.192759][ T6210] ? __pfx_warn_alloc+0x10/0x10 [ 58.192784][ T6210] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.192804][ T6210] ? __get_vm_area_node+0x2f0/0x350 [ 58.192838][ T6210] ? __get_vm_area_node+0x22b/0x350 [ 58.192872][ T6210] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 58.192901][ T6210] ? comedi_buf_alloc+0x2fe/0xa00 [ 58.192934][ T6210] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 58.192959][ T6210] ? kasan_save_track+0x14/0x30 [ 58.192976][ T6210] ? __kasan_kmalloc+0xaa/0xb0 [ 58.193016][ T6210] ? comedi_buf_alloc+0x2fe/0xa00 [ 58.193039][ T6210] __vmalloc_node_noprof+0xad/0xf0 [ 58.193059][ T6210] ? comedi_buf_alloc+0x2fe/0xa00 [ 58.193087][ T6210] comedi_buf_alloc+0x2fe/0xa00 [ 58.193115][ T6210] ? __init_swait_queue_head+0xca/0x150 [ 58.193147][ T6210] comedi_device_postconfig+0x3dc/0xbc0 [ 58.193178][ T6210] comedi_device_attach+0x42a/0x6b0 [ 58.193208][ T6210] do_devconfig_ioctl+0x1b3/0x6d0 [ 58.193238][ T6210] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 58.193278][ T6210] ? kasan_quarantine_put+0x104/0x240 [ 58.193308][ T6210] ? find_held_lock+0x2b/0x80 [ 58.193333][ T6210] comedi_unlocked_ioctl+0x860/0x3310 [ 58.193353][ T6210] ? tomoyo_path_number_perm+0x188/0x580 [ 58.193384][ T6210] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 58.193440][ T6210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.193472][ T6210] ? do_vfs_ioctl+0x226/0x13e0 [ 58.193501][ T6210] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 58.193527][ T6210] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 58.193558][ T6210] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 58.193591][ T6210] ? __fget_files+0x34/0x3d0 [ 58.193625][ T6210] ? selinux_file_ioctl+0x1e0/0x290 [ 58.193652][ T6210] ? selinux_file_ioctl+0x1e7/0x290 [ 58.193681][ T6210] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 58.193702][ T6210] __x64_sys_ioctl+0x18e/0x210 [ 58.193733][ T6210] do_syscall_64+0x123/0x790 [ 58.193754][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.193772][ T6210] RIP: 0033:0x7fc5cdd9f559 [ 58.193788][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.193805][ T6210] RSP: 002b:00007fc5cbfee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.193822][ T6210] RAX: ffffffffffffffda RBX: 00007fc5ce025fa0 RCX: 00007fc5cdd9f559 [ 58.193833][ T6210] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000005 [ 58.193845][ T6210] RBP: 00007fc5cde36b20 R08: 0000000000000000 R09: 0000000000000000 [ 58.193855][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.193866][ T6210] R13: 00007fc5ce026038 R14: 00007fc5ce025fa0 R15: 00007ffd54ccef88 [ 58.193892][ T6210] [ 58.193900][ T6210] Mem-Info: [ 58.193908][ T6210] active_anon:7969 inactive_anon:0 isolated_anon:0 [ 58.193908][ T6210] active_file:0 inactive_file:55089 isolated_file:0 [ 58.193908][ T6210] unevictable:1000 dirty:1907 writeback:0 [ 58.193908][ T6210] slab_reclaimable:13041 slab_unreclaimable:69335 [ 58.193908][ T6210] mapped:25637 shmem:1556 pagetables:1156 [ 58.193908][ T6210] sec_pagetables:296 bounce:0 [ 58.193908][ T6210] kernel_misc_reclaimable:0 [ 58.193908][ T6210] free:441564 free_pcp:21421 free_cma:0 [ 58.193951][ T6210] Node 0 active_anon:31876kB inactive_anon:0kB active_file:0kB inactive_file:220152kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:102548kB dirty:7624kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13120kB pagetables:4412kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 58.194002][ T6210] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 58.194045][ T6210] Node 0 DMA free:15328kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 58.194091][ T6210] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 58.194124][ T6210] Node 0 DMA32 free:110012kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31876kB inactive_anon:0kB active_file:0kB inactive_file:220152kB unevictable:2000kB writepending:7624kB zspages:0kB present:2080628kB managed:1230944kB mlocked:0kB bounce:0kB free_pcp:80016kB local_pcp:24644kB free_cma:0kB [ 58.194173][ T6210] lowmem_reserve[]: 0 0 0 0 0 [ 58.194201][ T6210] Node 1 Normal free:1640916kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:5668kB local_pcp:2240kB free_cma:0kB [ 58.194248][ T6210] lowmem_reserve[]: 0 0 0 0 0 [ 58.194277][ T6210] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 58.194419][ T6210] Node 0 DMA32: 1*4kB (U) 180*8kB (UME) 127*16kB (UM) 82*32kB (ME) 38*64kB (ME) 22*128kB (UME) 15*256kB (UME) 7*512kB (UM) 9*1024kB (UME) 6*2048kB (UME) 17*4096kB (M) = 109908kB [ 58.194564][ T6210] Node 1 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 4*32kB (UM) 3*64kB (UM) 3*128kB (M) 3*256kB (U) 4*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 398*4096kB (M) = 1640916kB [ 58.194699][ T6210] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.194713][ T6210] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 58.194726][ T6210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.194739][ T6210] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 58.194752][ T6210] 56641 total pagecache pages [ 58.194770][ T6210] 0 pages in swap cache [ 58.194776][ T6210] Free swap = 124996kB [ 58.194783][ T6210] Total swap = 124996kB [ 58.194789][ T6210] 1048443 pages RAM [ 58.194796][ T6210] 0 pages HighMem/MovableOnly [ 58.194802][ T6210] 291397 pages reserved [ 58.194808][ T6210] 0 pages cma reserved [ 58.194840][ T6210] comedi comedi2: Buffer allocation failed [ 58.320391][ T42] audit: type=1400 audit(1793338527.594:335): avc: denied { read write } for pid=6211 comm="syz.0.98" name="dm0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.320930][ T42] audit: type=1400 audit(1793338527.594:336): avc: denied { open } for pid=6211 comm="syz.0.98" path="/32/dm0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.386949][ T42] audit: type=1400 audit(1793338527.664:337): avc: denied { unlink } for pid=5781 comm="syz-executor" name="dm0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.417959][ T42] audit: type=1400 audit(1793338527.694:338): avc: denied { write } for pid=6218 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.650186][ T6229] netlink: 88 bytes leftover after parsing attributes in process `syz.2.101'. [ 58.672539][ T6232] ip_tables: iptables: counters copy to user failed while replacing table [ 58.735104][ T5886] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.932854][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 59.008279][ T6254] 9p: Bad value for 'rfdno' [ 59.481903][ T5143] Bluetooth: hci0: command 0x0c13 tx timeout [ 59.484096][ T5798] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 59.619943][ T6287] XFS (mtdblock0): Invalid superblock magic number [ 59.775912][ T6304] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 59.775931][ T6304] overlayfs: missing 'lowerdir' [ 59.889837][ T6317] FAULT_INJECTION: forcing a failure. [ 59.889837][ T6317] name failslab, interval 1, probability 0, space 0, times 0 [ 59.889869][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.1.118 Tainted: G Y syzkaller #0 PREEMPT(full) [ 59.889895][ T6317] Tainted: [Y]=FORCED_BIND [ 59.889901][ T6317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.889911][ T6317] Call Trace: [ 59.889918][ T6317] [ 59.889925][ T6317] dump_stack_lvl+0x100/0x190 [ 59.889961][ T6317] should_fail_ex.cold+0x5/0xa [ 59.889989][ T6317] should_failslab+0xc2/0x120 [ 59.890008][ T6317] kmem_cache_alloc_noprof+0x92/0x6a0 [ 59.890033][ T6317] ? __pfx_map_id_range_down+0x10/0x10 [ 59.890059][ T6317] ? security_inode_alloc+0x3b/0x2c0 [ 59.890088][ T6317] security_inode_alloc+0x3b/0x2c0 [ 59.890110][ T6317] inode_init_always_gfp+0xc6f/0xfb0 [ 59.890134][ T6317] alloc_inode+0x8e/0x250 [ 59.890158][ T6317] new_inode+0x22/0x1c0 [ 59.890183][ T6317] shmem_get_inode+0x1e3/0xfe0 [ 59.890225][ T6317] ? __pfx_shmem_get_inode+0x10/0x10 [ 59.890243][ T6317] ? selinux_determine_inode_label+0x1ab/0x400 [ 59.890269][ T6317] shmem_mknod+0x217/0x480 [ 59.890294][ T6317] ? __pfx_shmem_mknod+0x10/0x10 [ 59.890317][ T6317] ? inode_permission+0x377/0x630 [ 59.890348][ T6317] shmem_mkdir+0x31/0x80 [ 59.890370][ T6317] vfs_mkdir+0x367/0x850 [ 59.890400][ T6317] ovl_workdir_create+0x447/0xaa0 [ 59.890458][ T6317] ? lock_acquire+0x1d1/0x380 [ 59.890486][ T6317] ? __pfx_ovl_workdir_create+0x10/0x10 [ 59.890509][ T6317] ? mnt_get_write_access+0x52/0x2f0 [ 59.890544][ T6317] ? mnt_get_write_access+0x1ec/0x2f0 [ 59.890578][ T6317] ovl_fill_super+0xec2/0x5d30 [ 59.890623][ T6317] ? __pfx_ovl_fill_super+0x10/0x10 [ 59.890653][ T6317] ? __pfx_sget_fc+0x10/0x10 [ 59.890670][ T6317] ? hook_capable+0x1bc/0x500 [ 59.890707][ T6317] ? rcu_is_watching+0x13/0xc0 [ 59.890737][ T6317] ? cap_capable+0x107/0x430 [ 59.890775][ T6317] ? __pfx_ovl_fill_super+0x10/0x10 [ 59.890797][ T6317] get_tree_nodev+0xdd/0x190 [ 59.890818][ T6317] vfs_get_tree+0x92/0x320 [ 59.890845][ T6317] path_mount+0x7d0/0x2850 [ 59.890887][ T6317] ? __pfx_path_mount+0x10/0x10 [ 59.890912][ T6317] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.890934][ T6317] ? putname+0xb1/0x110 [ 59.890952][ T6317] ? kmem_cache_free+0x127/0x6c0 [ 59.890981][ T6317] ? __x64_sys_mount+0x293/0x310 [ 59.891006][ T6317] __x64_sys_mount+0x293/0x310 [ 59.891029][ T6317] ? __pfx___x64_sys_mount+0x10/0x10 [ 59.891059][ T6317] do_syscall_64+0x123/0x790 [ 59.891076][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.891094][ T6317] RIP: 0033:0x7f6e6eb9f559 [ 59.891110][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.891125][ T6317] RSP: 002b:00007f6e6fb26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.891142][ T6317] RAX: ffffffffffffffda RBX: 00007f6e6ee25fa0 RCX: 00007f6e6eb9f559 [ 59.891154][ T6317] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000 [ 59.891165][ T6317] RBP: 00007f6e6ec36b20 R08: 0000200000000580 R09: 0000000000000000 [ 59.891175][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.891185][ T6317] R13: 00007f6e6ee26038 R14: 00007f6e6ee25fa0 R15: 00007fffdaf621f8 [ 59.891211][ T6317] [ 59.891692][ T6317] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only [ 59.965937][ T6322] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 59.978901][ T6322] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 60.224439][ T6370] overlayfs: failed to verify index (index/00fb210001cef428fa1ff34331a15caedbeb509de72fc12a70fa00000000000000, ftype=8000, err=-61) [ 60.224480][ T6370] overlayfs: failed index dir cleanup (-61) [ 60.224485][ T6370] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 60.250244][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880571d6c00: rx timeout, send abort [ 60.456777][ T6381] batadv_slave_0: entered promiscuous mode [ 60.457782][ T6379] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 60.750622][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880571d6800: rx timeout, send abort [ 60.751091][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880571d6c00: abort rx timeout. Force session deactivation [ 60.907513][ T6385] syz_tun: entered allmulticast mode [ 60.914429][ T6384] syz_tun: left allmulticast mode [ 60.982552][ T6390] FAULT_INJECTION: forcing a failure. [ 60.982552][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 60.982582][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.0.128 Tainted: G Y syzkaller #0 PREEMPT(full) [ 60.982605][ T6390] Tainted: [Y]=FORCED_BIND [ 60.982611][ T6390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.982621][ T6390] Call Trace: [ 60.982627][ T6390] [ 60.982634][ T6390] dump_stack_lvl+0x100/0x190 [ 60.982668][ T6390] should_fail_ex.cold+0x5/0xa [ 60.982695][ T6390] should_failslab+0xc2/0x120 [ 60.982714][ T6390] __kmalloc_cache_noprof+0x91/0x6d0 [ 60.982738][ T6390] ? xfs_init_fs_context+0x45/0x620 [ 60.982779][ T6390] xfs_init_fs_context+0x45/0x620 [ 60.982798][ T6390] alloc_fs_context+0x607/0xf40 [ 60.982829][ T6390] path_mount+0xf59/0x2850 [ 60.982858][ T6390] ? __pfx_path_mount+0x10/0x10 [ 60.982881][ T6390] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.982902][ T6390] ? putname+0xb1/0x110 [ 60.982921][ T6390] ? kmem_cache_free+0x127/0x6c0 [ 60.982950][ T6390] ? __x64_sys_mount+0x293/0x310 [ 60.982974][ T6390] __x64_sys_mount+0x293/0x310 [ 60.982999][ T6390] ? __pfx___x64_sys_mount+0x10/0x10 [ 60.983031][ T6390] do_syscall_64+0x123/0x790 [ 60.983051][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.983069][ T6390] RIP: 0033:0x7fd69c39f559 [ 60.983083][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.983099][ T6390] RSP: 002b:00007fd69d204028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.983116][ T6390] RAX: ffffffffffffffda RBX: 00007fd69c625fa0 RCX: 00007fd69c39f559 [ 60.983128][ T6390] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000200000000200 [ 60.983138][ T6390] RBP: 00007fd69d204090 R08: 0000000000000000 R09: 0000000000000000 [ 60.983149][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.983159][ T6390] R13: 00007fd69c626038 R14: 00007fd69c625fa0 R15: 00007ffc9fe30ab8 [ 60.983183][ T6390] [ 61.028452][ T6395] FAULT_INJECTION: forcing a failure. [ 61.028452][ T6395] name failslab, interval 1, probability 0, space 0, times 0 [ 61.028478][ T6395] CPU: 1 UID: 0 PID: 6395 Comm: syz.0.129 Tainted: G Y syzkaller #0 PREEMPT(full) [ 61.028487][ T1044] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 61.028502][ T6395] Tainted: [Y]=FORCED_BIND [ 61.028508][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.028518][ T6395] Call Trace: [ 61.028524][ T6395] [ 61.028531][ T6395] dump_stack_lvl+0x100/0x190 [ 61.028563][ T6395] should_fail_ex.cold+0x5/0xa [ 61.028590][ T6395] should_failslab+0xc2/0x120 [ 61.028610][ T6395] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 61.028636][ T6395] ? trace_kmalloc+0xeb/0x110 [ 61.028653][ T6395] ? __kasan_kmalloc+0xaa/0xb0 [ 61.028680][ T6395] ? ovl_mount_dir+0x26/0x1c0 [ 61.028707][ T6395] kstrdup+0x51/0xe0 [ 61.028727][ T6395] ovl_mount_dir+0x26/0x1c0 [ 61.028751][ T6395] ovl_parse_param+0xe74/0x1580 [ 61.028778][ T6395] ? __pfx_ovl_parse_param+0x10/0x10 [ 61.028805][ T6395] ? static_key_count+0x5a/0x70 [ 61.028826][ T6395] ? __pfx_ovl_parse_param+0x10/0x10 [ 61.028847][ T6395] vfs_parse_fs_param+0x200/0x3b0 [ 61.028875][ T6395] vfs_parse_fs_qstr+0x138/0x1c0 [ 61.028901][ T6395] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 61.028933][ T6395] ? ovl_next_opt+0x143/0x1c0 [ 61.028954][ T6395] ? __pfx_ovl_next_opt+0x10/0x10 [ 61.028975][ T6395] vfs_parse_monolithic_sep+0x195/0x210 [ 61.029003][ T6395] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 61.029030][ T6395] ? alloc_fs_context+0x655/0xf40 [ 61.029060][ T6395] path_mount+0x77f/0x2850 [ 61.029089][ T6395] ? __pfx_path_mount+0x10/0x10 [ 61.029112][ T6395] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.029133][ T6395] ? putname+0xb1/0x110 [ 61.029154][ T6395] ? kmem_cache_free+0x127/0x6c0 [ 61.029185][ T6395] ? __x64_sys_mount+0x293/0x310 [ 61.029208][ T6395] __x64_sys_mount+0x293/0x310 [ 61.029233][ T6395] ? __pfx___x64_sys_mount+0x10/0x10 [ 61.029266][ T6395] do_syscall_64+0x123/0x790 [ 61.029286][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.029303][ T6395] RIP: 0033:0x7fd69c39f559 [ 61.029319][ T6395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.029335][ T6395] RSP: 002b:00007fd69d204028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 61.029353][ T6395] RAX: ffffffffffffffda RBX: 00007fd69c625fa0 RCX: 00007fd69c39f559 [ 61.029364][ T6395] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000 [ 61.029398][ T6395] RBP: 00007fd69d204090 R08: 0000200000000580 R09: 0000000000000000 [ 61.029410][ T6395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.029420][ T6395] R13: 00007fd69c626038 R14: 00007fd69c625fa0 R15: 00007ffc9fe30ab8 [ 61.029453][ T6395] [ 61.037280][ T1044] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 61.250681][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880571d6800: abort rx timeout. Force session deactivation [ 61.269655][ T6377] batadv_slave_0: left promiscuous mode [ 61.293628][ T9] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 61.317600][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 61.317625][ T5798] CPU: 0 UID: 0 PID: 5798 Comm: kworker/u34:7 Tainted: G Y syzkaller #0 PREEMPT(full) [ 61.317664][ T5798] Tainted: [Y]=FORCED_BIND [ 61.317671][ T5798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.317685][ T5798] Workqueue: hci3 hci_rx_work [ 61.317714][ T5798] Call Trace: [ 61.317721][ T5798] [ 61.317729][ T5798] dump_stack_lvl+0x100/0x190 [ 61.317773][ T5798] sysfs_warn_dup.cold+0x1c/0x28 [ 61.317802][ T5798] sysfs_create_dir_ns+0x24b/0x2b0 [ 61.317847][ T5798] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 61.317873][ T5798] ? find_held_lock+0x2b/0x80 [ 61.317902][ T5798] ? kobject_add_internal+0x25f/0x930 [ 61.317928][ T5798] ? kobject_add_internal+0x25f/0x930 [ 61.317962][ T5798] ? do_raw_spin_unlock+0x145/0x1e0 [ 61.317982][ T5798] kobject_add_internal+0x2c8/0x930 [ 61.318024][ T5798] kobject_add+0x16a/0x1e0 [ 61.318056][ T5798] ? __pfx_kobject_add+0x10/0x10 [ 61.318081][ T5798] ? class_to_subsys+0x10f/0x150 [ 61.318120][ T5798] ? kobject_put+0xb9/0x640 [ 61.318142][ T5798] ? _raw_spin_unlock+0x28/0x50 [ 61.318198][ T5798] device_add+0x294/0x1970 [ 61.318232][ T5798] ? __pfx_dev_set_name+0x10/0x10 [ 61.318261][ T5798] ? __pfx_device_add+0x10/0x10 [ 61.318294][ T5798] ? mgmt_send_event_skb+0x2fb/0x460 [ 61.318327][ T5798] hci_conn_add_sysfs+0x1a3/0x260 [ 61.318360][ T5798] le_conn_complete_evt+0x12f9/0x2200 [ 61.318388][ T5798] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 61.318415][ T5798] ? hci_event_packet+0x186/0xcd0 [ 61.318442][ T5798] hci_le_conn_complete_evt+0x23c/0x3a0 [ 61.318472][ T5798] ? skb_pull_data+0x15f/0x1e0 [ 61.318501][ T5798] hci_le_meta_evt+0x34a/0x5f0 [ 61.318531][ T5798] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 61.318556][ T5798] hci_event_packet+0x51c/0xcd0 [ 61.318586][ T5798] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 61.318608][ T5798] ? __pfx_hci_event_packet+0x10/0x10 [ 61.318646][ T5798] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.318669][ T5798] hci_rx_work+0x6ea/0x10c0 [ 61.318692][ T5798] process_one_work+0xac7/0x1b10 [ 61.318734][ T5798] ? __pfx_process_one_work+0x10/0x10 [ 61.318758][ T5798] ? lock_acquire+0x1d1/0x380 [ 61.318798][ T5798] ? __pfx_hci_rx_work+0x10/0x10 [ 61.318820][ T5798] worker_thread+0x5ef/0xe50 [ 61.318860][ T5798] ? kthread+0x13a/0x450 [ 61.318877][ T5798] ? __pfx_worker_thread+0x10/0x10 [ 61.318904][ T5798] kthread+0x373/0x450 [ 61.318922][ T5798] ? __pfx_kthread+0x10/0x10 [ 61.318942][ T5798] ret_from_fork+0x730/0xd60 [ 61.318976][ T5798] ? __pfx_ret_from_fork+0x10/0x10 [ 61.319015][ T5798] ? __switch_to+0x800/0x10e0 [ 61.319034][ T5798] ? __pfx_kthread+0x10/0x10 [ 61.319056][ T5798] ret_from_fork_asm+0x1a/0x30 [ 61.319102][ T5798] [ 61.319171][ T5798] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 61.319201][ T5798] Bluetooth: hci3: failed to register connection device [ 61.758160][ T6420] tmpfs: Bad value for 'huge' [ 61.802357][ T9] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 62.045202][ T6391] ceph: No mds server is up or the cluster is laggy [ 62.193905][ T6430] usb usb9: usbfs: process 6430 (syz.3.144) did not claim interface 0 before use [ 62.253590][ T6432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.145'. [ 62.266318][ T6435] Bluetooth: MGMT ver 1.23 [ 62.268383][ T6435] mmap: syz.1.142 (6435) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.772468][ T6438] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 62.806977][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 62.806990][ T42] audit: type=1400 audit(1793338532.084:389): avc: denied { write } for pid=6439 comm="syz.3.147" name="qrtr-tun" dev="devtmpfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.883884][ T6441] device-mapper: table: 248:0: crypt: Error decoding and setting key (-ENOKEY) [ 62.883900][ T6441] device-mapper: ioctl: error adding target to table [ 62.926817][ T6440] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 62.981062][ T6444] vlan2: entered promiscuous mode [ 62.981077][ T6444] hsr0: entered promiscuous mode [ 62.994390][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 62.994406][ T5798] CPU: 0 UID: 0 PID: 5798 Comm: kworker/u34:7 Tainted: G Y syzkaller #0 PREEMPT(full) [ 62.994422][ T5798] Tainted: [Y]=FORCED_BIND [ 62.994426][ T5798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.994434][ T5798] Workqueue: hci1 hci_rx_work [ 62.994449][ T5798] Call Trace: [ 62.994453][ T5798] [ 62.994459][ T5798] dump_stack_lvl+0x100/0x190 [ 62.994480][ T5798] sysfs_warn_dup.cold+0x1c/0x28 [ 62.994498][ T5798] sysfs_create_dir_ns+0x24b/0x2b0 [ 62.994512][ T5798] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 62.994526][ T5798] ? find_held_lock+0x2b/0x80 [ 62.994537][ T5798] ? kobject_add_internal+0x25f/0x930 [ 62.994552][ T5798] ? kobject_add_internal+0x25f/0x930 [ 62.994568][ T5798] ? do_raw_spin_unlock+0x145/0x1e0 [ 62.994579][ T5798] kobject_add_internal+0x2c8/0x930 [ 62.994610][ T5798] kobject_add+0x16a/0x1e0 [ 62.994626][ T5798] ? __pfx_kobject_add+0x10/0x10 [ 62.994640][ T5798] ? class_to_subsys+0x10f/0x150 [ 62.994658][ T5798] ? kobject_put+0xb9/0x640 [ 62.994671][ T5798] ? _raw_spin_unlock+0x28/0x50 [ 62.994691][ T5798] device_add+0x294/0x1970 [ 62.994705][ T5798] ? __pfx_dev_set_name+0x10/0x10 [ 62.994721][ T5798] ? __pfx_device_add+0x10/0x10 [ 62.994734][ T5798] ? mgmt_send_event_skb+0x2fb/0x460 [ 62.994751][ T5798] hci_conn_add_sysfs+0x1a3/0x260 [ 62.994765][ T5798] le_conn_complete_evt+0x12f9/0x2200 [ 62.994782][ T5798] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 62.994793][ T5798] ? hci_event_packet+0x186/0xcd0 [ 62.994807][ T5798] hci_le_conn_complete_evt+0x23c/0x3a0 [ 62.994819][ T5798] ? skb_pull_data+0x15f/0x1e0 [ 62.994838][ T5798] hci_le_meta_evt+0x34a/0x5f0 [ 62.994851][ T5798] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 62.994864][ T5798] hci_event_packet+0x51c/0xcd0 [ 62.994875][ T5798] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 62.994886][ T5798] ? __pfx_hci_event_packet+0x10/0x10 [ 62.994900][ T5798] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.994913][ T5798] hci_rx_work+0x6ea/0x10c0 [ 62.994927][ T5798] process_one_work+0xac7/0x1b10 [ 62.994945][ T5798] ? __pfx_process_one_work+0x10/0x10 [ 62.994956][ T5798] ? lock_acquire+0x1d1/0x380 [ 62.994980][ T5798] ? __pfx_hci_rx_work+0x10/0x10 [ 62.994992][ T5798] worker_thread+0x5ef/0xe50 [ 62.995011][ T5798] ? kthread+0x13a/0x450 [ 62.995021][ T5798] ? __pfx_worker_thread+0x10/0x10 [ 62.995032][ T5798] kthread+0x373/0x450 [ 62.995043][ T5798] ? __pfx_kthread+0x10/0x10 [ 62.995055][ T5798] ret_from_fork+0x730/0xd60 [ 62.995071][ T5798] ? __pfx_ret_from_fork+0x10/0x10 [ 62.995085][ T5798] ? __switch_to+0x800/0x10e0 [ 62.995095][ T5798] ? __pfx_kthread+0x10/0x10 [ 62.995105][ T5798] ret_from_fork_asm+0x1a/0x30 [ 62.995125][ T5798] [ 62.995161][ T5798] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 62.995178][ T5798] Bluetooth: hci1: failed to register connection device [ 63.001660][ T6407] netlink: 64 bytes leftover after parsing attributes in process `syz.0.135'. [ 63.054277][ T42] audit: type=1400 audit(1793338532.334:390): avc: denied { create } for pid=6447 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.054318][ T42] audit: type=1400 audit(1793338532.334:391): avc: denied { bind } for pid=6447 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.054349][ T42] audit: type=1400 audit(1793338532.334:392): avc: denied { name_bind } for pid=6447 comm="syz.3.150" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 63.054379][ T42] audit: type=1400 audit(1793338532.334:393): avc: denied { node_bind } for pid=6447 comm="syz.3.150" saddr=ff01::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 63.059911][ T6448] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 63.076926][ T42] audit: type=1400 audit(1793338532.354:394): avc: denied { name_connect } for pid=6406 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 63.087341][ T42] audit: type=1400 audit(1793338532.364:395): avc: denied { read } for pid=5790 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.089276][ T42] audit: type=1400 audit(1793338532.364:396): avc: denied { open } for pid=5790 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.090301][ T42] audit: type=1400 audit(1793338532.364:397): avc: denied { ioctl } for pid=5790 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.148038][ T42] audit: type=1400 audit(1793338532.424:398): avc: denied { create } for pid=6449 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.568662][ T6468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.157'. [ 63.777639][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 63.800854][ T6475] netlink: 72 bytes leftover after parsing attributes in process `syz.2.159'. [ 64.006007][ T6485] program syz.3.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.036728][ T6489] ip_tables: iptables: counters copy to user failed while replacing table [ 64.078122][ T5143] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 64.095823][ T6495] ip_tables: iptables: counters copy to user failed while replacing table [ 64.130254][ T6497] input: syz1 as /devices/virtual/input/input5 [ 64.171871][ T1044] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.178162][ T6499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'. [ 64.259515][ T6509] pim6reg99999999: entered allmulticast mode [ 64.274229][ T6515] syzkaller1: entered promiscuous mode [ 64.274242][ T6515] syzkaller1: entered allmulticast mode [ 64.321867][ T1044] usb 7-1: Using ep0 maxpacket: 32 [ 64.322468][ T1044] usb 7-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 64.323421][ T1044] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 64.323438][ T1044] usb 7-1: config 0 has no interface number 0 [ 64.323466][ T1044] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 64.323481][ T1044] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 64.323499][ T1044] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 64.323517][ T1044] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 64.323536][ T1044] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.325429][ T1044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.325445][ T1044] usb 7-1: Product: syz [ 64.325456][ T1044] usb 7-1: Manufacturer: syz [ 64.325467][ T1044] usb 7-1: SerialNumber: syz [ 64.329043][ T1044] usb 7-1: config 0 descriptor?? [ 64.329993][ T6479] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 64.336354][ T1044] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input6 [ 64.495880][ T6526] 9pnet_virtio: no channels available for device syz [ 64.790409][ T6549] syzkaller1: entered promiscuous mode [ 64.790423][ T6549] syzkaller1: entered allmulticast mode [ 64.930269][ T6552] [U] [ 64.930299][ T6552] [U] [ 64.930322][ T6552] [U] [ 64.930337][ T6552] [U] [ 64.930604][ T6552] [U] [ 64.930619][ T6552] [U] [ 64.930632][ T6552] [U] [ 64.930645][ T6552] [U] [ 64.930755][ T6552] [U] [ 64.930770][ T6552] [U] [ 64.930783][ T6552] [U] [ 64.930796][ T6552] [U] [ 64.930917][ T6552] [U] [ 64.930932][ T6552] [U] [ 64.930945][ T6552] [U] [ 64.930958][ T6552] [U] cing [ 64.936887][ T6552] netlink: 64 bytes leftover after parsing attributes in process `syz.3.181'. [ 65.426266][ T6561] kAFS: No cell specified [ 65.476597][ T6563] capability: warning: `syz.0.184' uses deprecated v2 capabilities in a way that may be insecure [ 65.795549][ T6571] device-mapper: table: 248:1: multipath: invalid initial priority group (-EINVAL) [ 65.795583][ T6571] device-mapper: ioctl: error adding target to table [ 65.943434][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 65.943461][ T5798] CPU: 1 UID: 0 PID: 5798 Comm: kworker/u34:7 Tainted: G Y syzkaller #0 PREEMPT(full) [ 65.943489][ T5798] Tainted: [Y]=FORCED_BIND [ 65.943496][ T5798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.943509][ T5798] Workqueue: hci0 hci_rx_work [ 65.943547][ T5798] Call Trace: [ 65.943554][ T5798] [ 65.943562][ T5798] dump_stack_lvl+0x100/0x190 [ 65.943596][ T5798] sysfs_warn_dup.cold+0x1c/0x28 [ 65.943625][ T5798] sysfs_create_dir_ns+0x24b/0x2b0 [ 65.943664][ T5798] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 65.943684][ T5798] ? find_held_lock+0x2b/0x80 [ 65.943708][ T5798] ? kobject_add_internal+0x25f/0x930 [ 65.943727][ T5798] ? kobject_add_internal+0x25f/0x930 [ 65.943744][ T5798] ? do_raw_spin_unlock+0x145/0x1e0 [ 65.943757][ T5798] kobject_add_internal+0x2c8/0x930 [ 65.943776][ T5798] kobject_add+0x16a/0x1e0 [ 65.943791][ T5798] ? __pfx_kobject_add+0x10/0x10 [ 65.943806][ T5798] ? class_to_subsys+0x10f/0x150 [ 65.943824][ T5798] ? kobject_put+0xb9/0x640 [ 65.943835][ T5798] ? _raw_spin_unlock+0x28/0x50 [ 65.943854][ T5798] device_add+0x294/0x1970 [ 65.943868][ T5798] ? __pfx_dev_set_name+0x10/0x10 [ 65.943883][ T5798] ? __pfx_device_add+0x10/0x10 [ 65.943896][ T5798] ? mgmt_send_event_skb+0x2fb/0x460 [ 65.943914][ T5798] hci_conn_add_sysfs+0x1a3/0x260 [ 65.943929][ T5798] le_conn_complete_evt+0x12f9/0x2200 [ 65.943943][ T5798] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 65.943953][ T5798] ? hci_event_packet+0x186/0xcd0 [ 65.943968][ T5798] hci_le_conn_complete_evt+0x23c/0x3a0 [ 65.943985][ T5798] ? skb_pull_data+0x15f/0x1e0 [ 65.944010][ T5798] hci_le_meta_evt+0x34a/0x5f0 [ 65.944031][ T5798] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 65.944054][ T5798] hci_event_packet+0x51c/0xcd0 [ 65.944082][ T5798] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 65.944104][ T5798] ? __pfx_hci_event_packet+0x10/0x10 [ 65.944130][ T5798] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.944154][ T5798] hci_rx_work+0x6ea/0x10c0 [ 65.944179][ T5798] process_one_work+0xac7/0x1b10 [ 65.944224][ T5798] ? __pfx_process_one_work+0x10/0x10 [ 65.944246][ T5798] ? lock_acquire+0x1d1/0x380 [ 65.944279][ T5798] ? __pfx_hci_rx_work+0x10/0x10 [ 65.944299][ T5798] worker_thread+0x5ef/0xe50 [ 65.944329][ T5798] ? kthread+0x13a/0x450 [ 65.944346][ T5798] ? __pfx_worker_thread+0x10/0x10 [ 65.944365][ T5798] kthread+0x373/0x450 [ 65.944382][ T5798] ? __pfx_kthread+0x10/0x10 [ 65.944402][ T5798] ret_from_fork+0x730/0xd60 [ 65.944428][ T5798] ? __pfx_ret_from_fork+0x10/0x10 [ 65.944452][ T5798] ? __switch_to+0x800/0x10e0 [ 65.944469][ T5798] ? __pfx_kthread+0x10/0x10 [ 65.944488][ T5798] ret_from_fork_asm+0x1a/0x30 [ 65.944520][ T5798] [ 65.944535][ T5798] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 65.944554][ T5798] Bluetooth: hci0: failed to register connection device [ 65.994265][ T6578] ecryptfs_get_tree: kern_path() failed [ 65.997047][ T6578] Reading sb failed; rc = [-2] [ 66.055724][ T6580] ip_tables: iptables: counters copy to user failed while replacing table [ 66.607452][ T6591] xt_l2tp: wrong L2TP version: 4 [ 66.637468][ T6594] FAULT_INJECTION: forcing a failure. [ 66.637468][ T6594] name failslab, interval 1, probability 0, space 0, times 0 [ 66.637488][ T6594] CPU: 0 UID: 0 PID: 6594 Comm: syz.0.195 Tainted: G Y syzkaller #0 PREEMPT(full) [ 66.637513][ T6594] Tainted: [Y]=FORCED_BIND [ 66.637519][ T6594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.637525][ T6594] Call Trace: [ 66.637529][ T6594] [ 66.637542][ T6594] dump_stack_lvl+0x100/0x190 [ 66.637563][ T6594] should_fail_ex.cold+0x5/0xa [ 66.637580][ T6594] should_failslab+0xc2/0x120 [ 66.637600][ T6594] __kmalloc_cache_noprof+0x91/0x6d0 [ 66.637621][ T6594] ? do_raw_spin_lock+0x128/0x260 [ 66.637631][ T6594] ? alloc_fdtable+0xbd/0x2d0 [ 66.637652][ T6594] alloc_fdtable+0xbd/0x2d0 [ 66.637665][ T6594] dup_fd+0xa1e/0xd90 [ 66.637679][ T6594] ? __pfx_do_futex+0x10/0x10 [ 66.637702][ T6594] unshare_fd+0xd6/0x140 [ 66.637714][ T6594] ksys_unshare+0x3fd/0x980 [ 66.637729][ T6594] ? __pfx_ksys_unshare+0x10/0x10 [ 66.637749][ T6594] __x64_sys_unshare+0x31/0x40 [ 66.637763][ T6594] do_syscall_64+0x123/0x790 [ 66.637776][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.637788][ T6594] RIP: 0033:0x7fd69c39f559 [ 66.637798][ T6594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.637808][ T6594] RSP: 002b:00007fd69d204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 66.637819][ T6594] RAX: ffffffffffffffda RBX: 00007fd69c625fa0 RCX: 00007fd69c39f559 [ 66.637826][ T6594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 66.637832][ T6594] RBP: 00007fd69c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 66.637838][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.637844][ T6594] R13: 00007fd69c626038 R14: 00007fd69c625fa0 R15: 00007ffc9fe30ab8 [ 66.637858][ T6594] [ 66.639373][ T6594] overlay: Unknown parameter 'subj_user' [ 66.678562][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.679578][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.708709][ T6601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.196'. [ 66.709172][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 66.710283][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 66.710294][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 66.749619][ T5798] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 66.756402][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.759497][ T6597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.842633][ T5857] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.842661][ T5857] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.842809][ T5857] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.842828][ T5857] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.880991][ T1044] usb 7-1: USB disconnect, device number 3 [ 66.903080][ T6607] ip_tables: iptables: counters copy to user failed while replacing table [ 67.063958][ T6606] FAULT_INJECTION: forcing a failure. [ 67.063958][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.063983][ T6606] CPU: 0 UID: 0 PID: 6606 Comm: syz.1.199 Tainted: G Y syzkaller #0 PREEMPT(full) [ 67.063998][ T6606] Tainted: [Y]=FORCED_BIND [ 67.064002][ T6606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.064009][ T6606] Call Trace: [ 67.064013][ T6606] [ 67.064018][ T6606] dump_stack_lvl+0x100/0x190 [ 67.064040][ T6606] should_fail_ex.cold+0x5/0xa [ 67.064056][ T6606] copy_fpstate_to_sigframe+0x871/0xb60 [ 67.064070][ T6606] ? kmem_cache_free+0x127/0x6c0 [ 67.064084][ T6606] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 67.064099][ T6606] ? collect_signal+0x271/0x550 [ 67.064114][ T6606] ? x86_task_fpu+0x5f/0x90 [ 67.064131][ T6606] get_sigframe+0x3fb/0x940 [ 67.064144][ T6606] ? __pfx_get_sigframe+0x10/0x10 [ 67.064154][ T6606] ? rcu_is_watching+0x13/0xc0 [ 67.064177][ T6606] ? siginfo_layout+0x156/0x290 [ 67.064190][ T6606] x64_setup_rt_frame+0x12f/0xce0 [ 67.064204][ T6606] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 67.064215][ T6606] ? __pfx___sys_recvfrom+0x10/0x10 [ 67.064229][ T6606] arch_do_signal_or_restart+0x5ee/0x7e0 [ 67.064240][ T6606] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 67.064259][ T6606] exit_to_user_mode_loop+0x139/0x700 [ 67.064269][ T6606] ? rcu_is_watching+0x13/0xc0 [ 67.064281][ T6606] do_syscall_64+0x661/0x790 [ 67.064293][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.064304][ T6606] RIP: 0033:0x7f6e6eb5fd8e [ 67.064313][ T6606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.064323][ T6606] RSP: 002b:00007f6e6fb24e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 67.064334][ T6606] RAX: fffffffffffffffc RBX: 00007f6e6fb266c0 RCX: 00007f6e6eb5fd8e [ 67.064341][ T6606] RDX: 0000000000001000 RSI: 00007f6e6fb25000 RDI: 0000000000000004 [ 67.064347][ T6606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.064353][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 67.064359][ T6606] R13: 00007f6e6fb24f58 R14: 00007f6e6fb25000 R15: 0000000000000000 [ 67.064373][ T6606] [ 67.608856][ T6644] bridge0: port 3(syz_tun) entered blocking state [ 67.608970][ T6644] bridge0: port 3(syz_tun) entered disabled state [ 67.609093][ T6644] syz_tun: entered allmulticast mode [ 67.610328][ T6644] syz_tun: entered promiscuous mode [ 67.611063][ T6642] CUSE: info not properly terminated [ 67.625144][ T6644] bridge0: port 3(syz_tun) entered blocking state [ 67.625224][ T6644] bridge0: port 3(syz_tun) entered forwarding state [ 67.673098][ T5798] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 67.678374][ T6656] FAULT_INJECTION: forcing a failure. [ 67.678374][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 67.678392][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz.0.216 Tainted: G Y syzkaller #0 PREEMPT(full) [ 67.678407][ T6656] Tainted: [Y]=FORCED_BIND [ 67.678410][ T6656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.678416][ T6656] Call Trace: [ 67.678420][ T6656] [ 67.678424][ T6656] dump_stack_lvl+0x100/0x190 [ 67.678447][ T6656] should_fail_ex.cold+0x5/0xa [ 67.678464][ T6656] should_failslab+0xc2/0x120 [ 67.678477][ T6656] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 67.678496][ T6656] ? __d_alloc+0x34/0xad0 [ 67.678512][ T6656] __d_alloc+0x34/0xad0 [ 67.678526][ T6656] d_alloc_pseudo+0x1c/0xc0 [ 67.678536][ T6656] alloc_file_pseudo+0x118/0x290 [ 67.678551][ T6656] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 67.678564][ T6656] ? alloc_fd+0x471/0x7a0 [ 67.678579][ T6656] sock_alloc_file+0x50/0x210 [ 67.678592][ T6656] __sys_socket+0x1c0/0x260 [ 67.678607][ T6656] ? __pfx___sys_socket+0x10/0x10 [ 67.678625][ T6656] __x64_sys_socket+0x72/0xb0 [ 67.678638][ T6656] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.678649][ T6656] do_syscall_64+0x123/0x790 [ 67.678662][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.678673][ T6656] RIP: 0033:0x7fd69c39f559 [ 67.678682][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.678691][ T6656] RSP: 002b:00007fd69d204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 67.678702][ T6656] RAX: ffffffffffffffda RBX: 00007fd69c625fa0 RCX: 00007fd69c39f559 [ 67.678708][ T6656] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 67.678714][ T6656] RBP: 00007fd69c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 67.678720][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.678726][ T6656] R13: 00007fd69c626038 R14: 00007fd69c625fa0 R15: 00007ffc9fe30ab8 [ 67.678741][ T6656] [ 67.833388][ T6664] i2c i2c-0: delete_device: Extra parameters [ 68.046293][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803001d000: rx timeout, send abort [ 68.053514][ T42] kauditd_printk_skb: 101 callbacks suppressed [ 68.053527][ T42] audit: type=1400 audit(1793338537.334:500): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.067182][ T42] audit: type=1400 audit(1793338537.344:501): avc: denied { mount } for pid=6667 comm="syz.1.220" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 68.067888][ T42] audit: type=1400 audit(1793338537.344:502): avc: denied { read } for pid=6667 comm="syz.1.220" name="trace" dev="tracefs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 68.068155][ T42] audit: type=1400 audit(1793338537.344:503): avc: denied { ioctl } for pid=6667 comm="syz.1.220" path="/54/trace/trace" dev="tracefs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 68.090071][ T42] audit: type=1400 audit(1793338537.364:504): avc: denied { unmount } for pid=5789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 68.108871][ T6557] [U] [ 68.128991][ T6670] dvmrp6: entered allmulticast mode [ 68.202606][ T42] audit: type=1400 audit(1793338537.484:505): avc: denied { getopt } for pid=6673 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.212233][ T6679] FAULT_INJECTION: forcing a failure. [ 68.212233][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 68.212252][ T6679] CPU: 0 UID: 0 PID: 6679 Comm: syz.2.225 Tainted: G Y syzkaller #0 PREEMPT(full) [ 68.212266][ T6679] Tainted: [Y]=FORCED_BIND [ 68.212269][ T6679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.212276][ T6679] Call Trace: [ 68.212279][ T6679] [ 68.212283][ T6679] dump_stack_lvl+0x100/0x190 [ 68.212304][ T6679] should_fail_ex.cold+0x5/0xa [ 68.212320][ T6679] should_failslab+0xc2/0x120 [ 68.212332][ T6679] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 68.212349][ T6679] ? ovl_do_parse_layer+0x30/0x12b0 [ 68.212380][ T6679] kstrdup+0x51/0xe0 [ 68.212399][ T6679] ovl_do_parse_layer+0x30/0x12b0 [ 68.212416][ T6679] ovl_parse_param+0xea2/0x1580 [ 68.212432][ T6679] ? __pfx_ovl_parse_param+0x10/0x10 [ 68.212447][ T6679] ? static_key_count+0x5a/0x70 [ 68.212468][ T6679] ? __pfx_ovl_parse_param+0x10/0x10 [ 68.212486][ T6679] vfs_parse_fs_param+0x200/0x3b0 [ 68.212502][ T6679] vfs_parse_fs_qstr+0x138/0x1c0 [ 68.212517][ T6679] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 68.212536][ T6679] ? ovl_next_opt+0x143/0x1c0 [ 68.212549][ T6679] ? __pfx_ovl_next_opt+0x10/0x10 [ 68.212562][ T6679] vfs_parse_monolithic_sep+0x195/0x210 [ 68.212578][ T6679] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 68.212594][ T6679] ? alloc_fs_context+0x655/0xf40 [ 68.212612][ T6679] path_mount+0x77f/0x2850 [ 68.212629][ T6679] ? __pfx_path_mount+0x10/0x10 [ 68.212642][ T6679] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.212654][ T6679] ? putname+0xb1/0x110 [ 68.212666][ T6679] ? kmem_cache_free+0x127/0x6c0 [ 68.212684][ T6679] ? __x64_sys_mount+0x293/0x310 [ 68.212697][ T6679] __x64_sys_mount+0x293/0x310 [ 68.212712][ T6679] ? __pfx___x64_sys_mount+0x10/0x10 [ 68.212730][ T6679] do_syscall_64+0x123/0x790 [ 68.212742][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.212752][ T6679] RIP: 0033:0x7f5dd399f559 [ 68.212762][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.212772][ T6679] RSP: 002b:00007f5dd48da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.212782][ T6679] RAX: ffffffffffffffda RBX: 00007f5dd3c25fa0 RCX: 00007f5dd399f559 [ 68.212788][ T6679] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000 [ 68.212794][ T6679] RBP: 00007f5dd48da090 R08: 0000200000000580 R09: 0000000000000000 [ 68.212800][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.212806][ T6679] R13: 00007f5dd3c26038 R14: 00007f5dd3c25fa0 R15: 00007ffe8d1e9f68 [ 68.212819][ T6679] [ 68.223559][ T6680] FAULT_INJECTION: forcing a failure. [ 68.223559][ T6680] name failslab, interval 1, probability 0, space 0, times 0 [ 68.223577][ T6680] CPU: 0 UID: 0 PID: 6680 Comm: syz.1.224 Tainted: G Y syzkaller #0 PREEMPT(full) [ 68.223591][ T6680] Tainted: [Y]=FORCED_BIND [ 68.223594][ T6680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.223601][ T6680] Call Trace: [ 68.223605][ T6680] [ 68.223609][ T6680] dump_stack_lvl+0x100/0x190 [ 68.223630][ T6680] should_fail_ex.cold+0x5/0xa [ 68.223646][ T6680] should_failslab+0xc2/0x120 [ 68.223658][ T6680] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 68.223674][ T6680] ? __pfx___debug_object_init+0x10/0x10 [ 68.223697][ T6680] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 68.223715][ T6680] kmemdup_nul+0x49/0xd0 [ 68.223727][ T6680] vfs_parse_fs_qstr+0x112/0x1c0 [ 68.223759][ T6680] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 68.223776][ T6680] ? __init_rwsem+0x10e/0x180 [ 68.223794][ T6680] ? alloc_fs_context+0x655/0xf40 [ 68.223811][ T6680] path_mount+0x75a/0x2850 [ 68.223828][ T6680] ? __pfx_path_mount+0x10/0x10 [ 68.223842][ T6680] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.223854][ T6680] ? putname+0xb1/0x110 [ 68.223866][ T6680] ? kmem_cache_free+0x127/0x6c0 [ 68.223883][ T6680] ? __x64_sys_mount+0x293/0x310 [ 68.223897][ T6680] __x64_sys_mount+0x293/0x310 [ 68.223912][ T6680] ? __pfx___x64_sys_mount+0x10/0x10 [ 68.223931][ T6680] do_syscall_64+0x123/0x790 [ 68.223942][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.223953][ T6680] RIP: 0033:0x7f6e6eb9f559 [ 68.223962][ T6680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.223984][ T6680] RSP: 002b:00007f6e6fb26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.223994][ T6680] RAX: ffffffffffffffda RBX: 00007f6e6ee25fa0 RCX: 00007f6e6eb9f559 [ 68.224001][ T6680] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000200000000200 [ 68.224007][ T6680] RBP: 00007f6e6fb26090 R08: 0000000000000000 R09: 0000000000000000 [ 68.224013][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.224019][ T6680] R13: 00007f6e6ee26038 R14: 00007f6e6ee25fa0 R15: 00007fffdaf621f8 [ 68.224033][ T6680] [ 68.457148][ T6693] comedi comedi1: 8255: I/O base address not correctly aligned [ 68.546358][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803001d000: abort rx timeout. Force session deactivation [ 68.546525][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803f60e800: rx timeout, send abort [ 68.677755][ T42] audit: type=1400 audit(1793338537.954:506): avc: denied { create } for pid=6702 comm="syz.1.236" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.683529][ T6705] FAULT_INJECTION: forcing a failure. [ 68.683529][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 68.683555][ T6705] CPU: 1 UID: 0 PID: 6705 Comm: syz.2.235 Tainted: G Y syzkaller #0 PREEMPT(full) [ 68.683579][ T6705] Tainted: [Y]=FORCED_BIND [ 68.683586][ T6705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.683596][ T6705] Call Trace: [ 68.683603][ T6705] [ 68.683611][ T6705] dump_stack_lvl+0x100/0x190 [ 68.683643][ T6705] should_fail_ex.cold+0x5/0xa [ 68.683671][ T6705] should_failslab+0xc2/0x120 [ 68.683692][ T6705] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.683722][ T6705] ? mempool_init_node+0x2f7/0x6f0 [ 68.683744][ T6705] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 68.683764][ T6705] mempool_init_node+0x2f7/0x6f0 [ 68.683788][ T6705] ? __pfx_mempool_free_slab+0x10/0x10 [ 68.683824][ T6705] mempool_create_node_noprof+0xe9/0x1b0 [ 68.683844][ T6705] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 68.683866][ T6705] ceph_osdc_init+0x48b/0xa00 [ 68.683894][ T6705] ceph_create_client+0x281/0x370 [ 68.683919][ T6705] ceph_get_tree+0x1a4/0x1fd0 [ 68.683941][ T6705] ? bpf_lsm_capable+0x9/0x10 [ 68.683967][ T6705] ? security_capable+0x80/0x260 [ 68.684002][ T6705] vfs_get_tree+0x92/0x320 [ 68.684027][ T6705] vfs_cmd_create+0xd7/0x2a0 [ 68.684047][ T6705] __do_sys_fsconfig+0x55a/0xcb0 [ 68.684066][ T6705] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 68.684083][ T6705] ? fput+0x7c/0x100 [ 68.684116][ T6705] do_syscall_64+0x123/0x790 [ 68.684137][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.684156][ T6705] RIP: 0033:0x7f5dd399f559 [ 68.684171][ T6705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.684188][ T6705] RSP: 002b:00007f5dd48da028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 68.684207][ T6705] RAX: ffffffffffffffda RBX: 00007f5dd3c25fa0 RCX: 00007f5dd399f559 [ 68.684219][ T6705] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 68.684229][ T6705] RBP: 00007f5dd48da090 R08: 0000000000000000 R09: 0000000000000000 [ 68.684240][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.684251][ T6705] R13: 00007f5dd3c26038 R14: 00007f5dd3c25fa0 R15: 00007ffe8d1e9f68 [ 68.684278][ T6705] [ 68.727208][ T6707] 9pnet_virtio: no channels available for device syz [ 68.731632][ T42] audit: type=1400 audit(1793338538.004:507): avc: denied { mounton } for pid=6702 comm="syz.1.236" path="/60/file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.781922][ T41] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.784252][ T6711] FAULT_INJECTION: forcing a failure. [ 68.784252][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 68.784276][ T6711] CPU: 0 UID: 0 PID: 6711 Comm: syz.2.238 Tainted: G Y syzkaller #0 PREEMPT(full) [ 68.784298][ T6711] Tainted: [Y]=FORCED_BIND [ 68.784304][ T6711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.784313][ T6711] Call Trace: [ 68.784319][ T6711] [ 68.784326][ T6711] dump_stack_lvl+0x100/0x190 [ 68.784355][ T6711] should_fail_ex.cold+0x5/0xa [ 68.784389][ T6711] should_failslab+0xc2/0x120 [ 68.784408][ T6711] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.784432][ T6711] ? do_getname_kernel+0x5d/0x250 [ 68.784458][ T6711] do_getname_kernel+0x5d/0x250 [ 68.784480][ T6711] kern_path+0x1f/0x50 [ 68.784497][ T6711] ovl_mount_dir+0x142/0x1c0 [ 68.784520][ T6711] ovl_parse_param+0xe74/0x1580 [ 68.784545][ T6711] ? __pfx_ovl_parse_param+0x10/0x10 [ 68.784569][ T6711] ? static_key_count+0x5a/0x70 [ 68.784589][ T6711] ? __pfx_ovl_parse_param+0x10/0x10 [ 68.784606][ T6711] vfs_parse_fs_param+0x200/0x3b0 [ 68.784630][ T6711] vfs_parse_fs_qstr+0x138/0x1c0 [ 68.784654][ T6711] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 68.784684][ T6711] ? ovl_next_opt+0x143/0x1c0 [ 68.784703][ T6711] ? __pfx_ovl_next_opt+0x10/0x10 [ 68.784721][ T6711] vfs_parse_monolithic_sep+0x195/0x210 [ 68.784745][ T6711] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 68.784770][ T6711] ? alloc_fs_context+0x655/0xf40 [ 68.784796][ T6711] path_mount+0x77f/0x2850 [ 68.784820][ T6711] ? __pfx_path_mount+0x10/0x10 [ 68.784840][ T6711] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.784859][ T6711] ? putname+0xb1/0x110 [ 68.784886][ T6711] ? kmem_cache_free+0x127/0x6c0 [ 68.784912][ T6711] ? __x64_sys_mount+0x293/0x310 [ 68.784932][ T6711] __x64_sys_mount+0x293/0x310 [ 68.784954][ T6711] ? __pfx___x64_sys_mount+0x10/0x10 [ 68.784982][ T6711] do_syscall_64+0x123/0x790 [ 68.785000][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.785016][ T6711] RIP: 0033:0x7f5dd399f559 [ 68.785030][ T6711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.785045][ T6711] RSP: 002b:00007f5dd48da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.785061][ T6711] RAX: ffffffffffffffda RBX: 00007f5dd3c25fa0 RCX: 00007f5dd399f559 [ 68.785072][ T6711] RDX: 0000200000000700 RSI: 00002000000006c0 RDI: 0000000000000000 [ 68.785082][ T6711] RBP: 00007f5dd48da090 R08: 0000200000000740 R09: 0000000000000000 [ 68.785091][ T6711] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 68.785101][ T6711] R13: 00007f5dd3c26038 R14: 00007f5dd3c25fa0 R15: 00007ffe8d1e9f68 [ 68.785124][ T6711] [ 68.785131][ T6711] overlayfs: failed to resolve '.': -12 [ 68.826148][ T42] audit: type=1400 audit(1793338538.104:508): avc: denied { map } for pid=6713 comm="syz.2.239" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 68.931879][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 68.932537][ T41] usb 8-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 68.933143][ T41] usb 8-1: config 0 has no interfaces? [ 68.936347][ T41] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 68.936367][ T41] usb 8-1: Product: syz [ 68.936379][ T41] usb 8-1: Manufacturer: syz [ 68.936391][ T41] usb 8-1: SerialNumber: syz [ 68.939288][ T41] usb 8-1: config 0 descriptor?? [ 68.979641][ T42] audit: type=1400 audit(1793338538.254:509): avc: denied { watch watch_reads } for pid=6717 comm="syz.2.241" path="/proc/103/net/dev_snmp6" dev="proc" ino=4026533483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 69.046615][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803f60e800: abort rx timeout. Force session deactivation [ 69.057129][ T5143] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 69.057154][ T5143] CPU: 1 UID: 0 PID: 5143 Comm: kworker/u34:1 Tainted: G Y syzkaller #0 PREEMPT(full) [ 69.057182][ T5143] Tainted: [Y]=FORCED_BIND [ 69.057190][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.057203][ T5143] Workqueue: hci1 hci_rx_work [ 69.057225][ T5143] Call Trace: [ 69.057232][ T5143] [ 69.057241][ T5143] dump_stack_lvl+0x100/0x190 [ 69.057275][ T5143] sysfs_warn_dup.cold+0x1c/0x28 [ 69.057305][ T5143] sysfs_create_dir_ns+0x24b/0x2b0 [ 69.057332][ T5143] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 69.057380][ T5143] ? find_held_lock+0x2b/0x80 [ 69.057403][ T5143] ? kobject_add_internal+0x25f/0x930 [ 69.057428][ T5143] ? kobject_add_internal+0x25f/0x930 [ 69.057456][ T5143] ? do_raw_spin_unlock+0x145/0x1e0 [ 69.057476][ T5143] kobject_add_internal+0x2c8/0x930 [ 69.057505][ T5143] kobject_add+0x16a/0x1e0 [ 69.057530][ T5143] ? __pfx_kobject_add+0x10/0x10 [ 69.057553][ T5143] ? class_to_subsys+0x10f/0x150 [ 69.057585][ T5143] ? kobject_put+0xb9/0x640 [ 69.057607][ T5143] ? _raw_spin_unlock+0x28/0x50 [ 69.057646][ T5143] device_add+0x294/0x1970 [ 69.057673][ T5143] ? __pfx_dev_set_name+0x10/0x10 [ 69.057703][ T5143] ? __pfx_device_add+0x10/0x10 [ 69.057730][ T5143] ? mgmt_send_event_skb+0x2fb/0x460 [ 69.057761][ T5143] hci_conn_add_sysfs+0x1a3/0x260 [ 69.057786][ T5143] le_conn_complete_evt+0x12f9/0x2200 [ 69.057813][ T5143] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 69.057832][ T5143] ? hci_event_packet+0x186/0xcd0 [ 69.057858][ T5143] hci_le_conn_complete_evt+0x23c/0x3a0 [ 69.057880][ T5143] ? skb_pull_data+0x15f/0x1e0 [ 69.057910][ T5143] hci_le_meta_evt+0x34a/0x5f0 [ 69.057931][ T5143] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 69.057955][ T5143] hci_event_packet+0x51c/0xcd0 [ 69.057975][ T5143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 69.058003][ T5143] ? __pfx_hci_event_packet+0x10/0x10 [ 69.058026][ T5143] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.058050][ T5143] hci_rx_work+0x6ea/0x10c0 [ 69.058074][ T5143] process_one_work+0xac7/0x1b10 [ 69.058108][ T5143] ? __pfx_process_one_work+0x10/0x10 [ 69.058130][ T5143] ? lock_acquire+0x1d1/0x380 [ 69.058162][ T5143] ? __pfx_hci_rx_work+0x10/0x10 [ 69.058183][ T5143] worker_thread+0x5ef/0xe50 [ 69.058216][ T5143] ? kthread+0x13a/0x450 [ 69.058233][ T5143] ? __pfx_worker_thread+0x10/0x10 [ 69.058254][ T5143] kthread+0x373/0x450 [ 69.058272][ T5143] ? __pfx_kthread+0x10/0x10 [ 69.058292][ T5143] ret_from_fork+0x730/0xd60 [ 69.058318][ T5143] ? __pfx_ret_from_fork+0x10/0x10 [ 69.058344][ T5143] ? __switch_to+0x800/0x10e0 [ 69.058362][ T5143] ? __pfx_kthread+0x10/0x10 [ 69.058381][ T5143] ret_from_fork_asm+0x1a/0x30 [ 69.058436][ T5143] [ 69.058491][ T5143] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 69.058524][ T5143] Bluetooth: hci1: failed to register connection device [ 69.096749][ T5798] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 69.147250][ T6697] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 18005 (only 8 groups) [ 69.161867][ T5885] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 69.168702][ T5886] usb 8-1: USB disconnect, device number 2 [ 69.311860][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 69.312602][ T5885] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.313576][ T5885] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 69.313616][ T5885] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.313634][ T5885] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.313653][ T5885] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.313685][ T5885] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.313717][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.521362][ T5885] usb 6-1: GET_CAPABILITIES returned 0 [ 69.521387][ T5885] usbtmc 6-1:16.0: can't read capabilities [ 69.602691][ T6727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.245'. [ 69.640982][ T6729] 9pnet_virtio: no channels available for device syz [ 69.724971][ T5885] usb 6-1: USB disconnect, device number 2 [ 69.786666][ T5798] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 69.898458][ T6742] netlink: 'syz.0.250': attribute type 21 has an invalid length. [ 69.898474][ T6742] netlink: 128 bytes leftover after parsing attributes in process `syz.0.250'. [ 69.898514][ T6742] netlink: 'syz.0.250': attribute type 4 has an invalid length. [ 69.898521][ T6742] netlink: 3 bytes leftover after parsing attributes in process `syz.0.250'. [ 70.271440][ T5143] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 70.271458][ T5143] CPU: 0 UID: 0 PID: 5143 Comm: kworker/u34:1 Tainted: G Y syzkaller #0 PREEMPT(full) [ 70.271490][ T5143] Tainted: [Y]=FORCED_BIND [ 70.271495][ T5143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.271503][ T5143] Workqueue: hci2 hci_rx_work [ 70.271525][ T5143] Call Trace: [ 70.271530][ T5143] [ 70.271536][ T5143] dump_stack_lvl+0x100/0x190 [ 70.271564][ T5143] sysfs_warn_dup.cold+0x1c/0x28 [ 70.271584][ T5143] sysfs_create_dir_ns+0x24b/0x2b0 [ 70.271606][ T5143] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 70.271621][ T5143] ? find_held_lock+0x2b/0x80 [ 70.271639][ T5143] ? kobject_add_internal+0x25f/0x930 [ 70.271654][ T5143] ? kobject_add_internal+0x25f/0x930 [ 70.271677][ T5143] ? do_raw_spin_unlock+0x145/0x1e0 [ 70.271689][ T5143] kobject_add_internal+0x2c8/0x930 [ 70.271712][ T5143] kobject_add+0x16a/0x1e0 [ 70.271732][ T5143] ? __pfx_kobject_add+0x10/0x10 [ 70.271761][ T5143] ? class_to_subsys+0x10f/0x150 [ 70.271786][ T5143] ? kobject_put+0xb9/0x640 [ 70.271798][ T5143] ? _raw_spin_unlock+0x28/0x50 [ 70.271823][ T5143] device_add+0x294/0x1970 [ 70.271844][ T5143] ? __pfx_dev_set_name+0x10/0x10 [ 70.271861][ T5143] ? __pfx_device_add+0x10/0x10 [ 70.271880][ T5143] ? mgmt_send_event_skb+0x2fb/0x460 [ 70.271898][ T5143] hci_conn_add_sysfs+0x1a3/0x260 [ 70.271918][ T5143] le_conn_complete_evt+0x12f9/0x2200 [ 70.271933][ T5143] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 70.271950][ T5143] ? hci_event_packet+0x186/0xcd0 [ 70.271965][ T5143] hci_le_conn_complete_evt+0x23c/0x3a0 [ 70.271983][ T5143] ? skb_pull_data+0x15f/0x1e0 [ 70.272013][ T5143] hci_le_meta_evt+0x34a/0x5f0 [ 70.272033][ T5143] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 70.272047][ T5143] hci_event_packet+0x51c/0xcd0 [ 70.272064][ T5143] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 70.272077][ T5143] ? __pfx_hci_event_packet+0x10/0x10 [ 70.272097][ T5143] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.272111][ T5143] hci_rx_work+0x6ea/0x10c0 [ 70.272126][ T5143] process_one_work+0xac7/0x1b10 [ 70.272151][ T5143] ? __pfx_process_one_work+0x10/0x10 [ 70.272164][ T5143] ? lock_acquire+0x1d1/0x380 [ 70.272188][ T5143] ? __pfx_hci_rx_work+0x10/0x10 [ 70.272200][ T5143] worker_thread+0x5ef/0xe50 [ 70.272223][ T5143] ? kthread+0x13a/0x450 [ 70.272234][ T5143] ? __pfx_worker_thread+0x10/0x10 [ 70.272252][ T5143] kthread+0x373/0x450 [ 70.272262][ T5143] ? __pfx_kthread+0x10/0x10 [ 70.272279][ T5143] ret_from_fork+0x730/0xd60 [ 70.272295][ T5143] ? __pfx_ret_from_fork+0x10/0x10 [ 70.272316][ T5143] ? __switch_to+0x800/0x10e0 [ 70.272328][ T5143] ? __pfx_kthread+0x10/0x10 [ 70.272340][ T5143] ret_from_fork_asm+0x1a/0x30 [ 70.272368][ T5143] [ 70.276231][ T5143] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 70.276295][ T5143] Bluetooth: hci2: failed to register connection device [ 70.613368][ T6757] 9pnet_virtio: no channels available for device syz [ 70.802674][ T6763] jffs2: notice: (6763) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 70.902565][ T6774] Unsupported ieee802154 address type: 0 [ 70.906465][ T6775] ip_tables: iptables: counters copy to user failed while replacing table [ 71.484837][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.909765][ T6788] netlink: 'syz.2.263': attribute type 16 has an invalid length. [ 71.909787][ T6788] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.263'. [ 71.977966][ T6791] 9pnet_virtio: no channels available for device syz [ 72.024549][ T5143] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 72.077510][ T6796] ima: policy update failed [ 72.178158][ T6809] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 72.229497][ T6812] syzkaller1: entered promiscuous mode [ 72.229519][ T6812] syzkaller1: entered allmulticast mode [ 72.246785][ T6816] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 72.274750][ T6819] 9pnet_virtio: no channels available for device syz [ 72.342178][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 72.363472][ T6824] bond1: entered promiscuous mode [ 72.363685][ T6824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.382495][ T6824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.382670][ T6824] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 72.383112][ T6824] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 72.463803][ T6836] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 72.463816][ T6836] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.475793][ T5798] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 72.514615][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 72.626993][ T6854] 9pnet_virtio: no channels available for device syz [ 72.633706][ T6853] FAULT_INJECTION: forcing a failure. [ 72.633706][ T6853] name failslab, interval 1, probability 0, space 0, times 0 [ 72.633725][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz.2.285 Tainted: G Y syzkaller #0 PREEMPT(full) [ 72.633741][ T6853] Tainted: [Y]=FORCED_BIND [ 72.633745][ T6853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.633753][ T6853] Call Trace: [ 72.633757][ T6853] [ 72.633762][ T6853] dump_stack_lvl+0x100/0x190 [ 72.633795][ T6853] should_fail_ex.cold+0x5/0xa [ 72.633813][ T6853] should_failslab+0xc2/0x120 [ 72.633835][ T6853] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 72.633860][ T6853] ? shmem_alloc_inode+0x25/0x50 [ 72.633880][ T6853] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 72.633908][ T6853] shmem_alloc_inode+0x25/0x50 [ 72.633922][ T6853] alloc_inode+0x68/0x250 [ 72.633946][ T6853] new_inode+0x22/0x1c0 [ 72.633964][ T6853] shmem_get_inode+0x1e3/0xfe0 [ 72.633988][ T6853] ? __pfx_shmem_get_inode+0x10/0x10 [ 72.634005][ T6853] ? may_create+0x280/0x430 [ 72.634026][ T6853] shmem_mknod+0x217/0x480 [ 72.634042][ T6853] ? __pfx_shmem_mknod+0x10/0x10 [ 72.634060][ T6853] vfs_create+0x2fe/0x6c0 [ 72.634080][ T6853] ovl_create_real+0x55c/0xbd0 [ 72.634106][ T6853] ? ovl_start_creating_temp+0xdf/0x120 [ 72.634124][ T6853] ovl_create_temp+0x12b/0x1c0 [ 72.634141][ T6853] ? __pfx_ovl_create_temp+0x10/0x10 [ 72.634164][ T6853] ovl_check_rename_whiteout+0x13e/0x620 [ 72.634183][ T6853] ? __pfx_ovl_check_rename_whiteout+0x10/0x10 [ 72.634197][ T6853] ? task_work_add+0x201/0x3b0 [ 72.634222][ T6853] ? __fput_deferred+0x217/0x4a0 [ 72.634235][ T6853] ? __pfx___fput_deferred+0x10/0x10 [ 72.634255][ T6853] ovl_fill_super+0x114b/0x5d30 [ 72.634281][ T6853] ? __pfx_ovl_fill_super+0x10/0x10 [ 72.634299][ T6853] ? rcu_is_watching+0x13/0xc0 [ 72.634317][ T6853] ? cap_capable+0x107/0x430 [ 72.634339][ T6853] ? __pfx_ovl_fill_super+0x10/0x10 [ 72.634353][ T6853] get_tree_nodev+0xdd/0x190 [ 72.634364][ T6853] vfs_get_tree+0x92/0x320 [ 72.634379][ T6853] path_mount+0x7d0/0x2850 [ 72.634408][ T6853] ? __pfx_path_mount+0x10/0x10 [ 72.634423][ T6853] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.634441][ T6853] ? putname+0xb1/0x110 [ 72.634454][ T6853] ? kmem_cache_free+0x127/0x6c0 [ 72.634472][ T6853] ? __x64_sys_mount+0x293/0x310 [ 72.634486][ T6853] __x64_sys_mount+0x293/0x310 [ 72.634500][ T6853] ? __pfx___x64_sys_mount+0x10/0x10 [ 72.634520][ T6853] do_syscall_64+0x123/0x790 [ 72.634533][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.634544][ T6853] RIP: 0033:0x7f5dd399f559 [ 72.634554][ T6853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.634563][ T6853] RSP: 002b:00007f5dd48da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.634574][ T6853] RAX: ffffffffffffffda RBX: 00007f5dd3c25fa0 RCX: 00007f5dd399f559 [ 72.634581][ T6853] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000 [ 72.634587][ T6853] RBP: 00007f5dd3a36b20 R08: 0000200000000580 R09: 0000000000000000 [ 72.634593][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.634599][ T6853] R13: 00007f5dd3c26038 R14: 00007f5dd3c25fa0 R15: 00007ffe8d1e9f68 [ 72.634619][ T6853] [ 72.727235][ T6862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.727245][ T6862] IPv6: NLM_F_CREATE should be set when creating new route [ 72.727259][ T6862] IPv6: NLM_F_CREATE should be set when creating new route [ 72.956844][ T5143] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 72.983689][ T6883] 9pnet_virtio: no channels available for device syz [ 73.059946][ T6890] XFS (mtdblock0): Invalid superblock magic number [ 73.190819][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 73.190839][ T42] audit: type=1400 audit(1793338542.464:544): avc: denied { unlink } for pid=6886 comm="syz.2.296" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 73.207492][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 73.219337][ T6887] team1: entered promiscuous mode [ 73.219395][ T6887] team1: entered allmulticast mode [ 73.219748][ T6887] 8021q: adding VLAN 0 to HW filter on device team1 [ 73.500105][ T6908] program syz.0.299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.502939][ T6908] program syz.0.299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.568594][ T6916] FAULT_INJECTION: forcing a failure. [ 73.568594][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 73.568623][ T6916] CPU: 1 UID: 0 PID: 6916 Comm: syz.0.301 Tainted: G Y syzkaller #0 PREEMPT(full) [ 73.568647][ T6916] Tainted: [Y]=FORCED_BIND [ 73.568653][ T6916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.568663][ T6916] Call Trace: [ 73.568668][ T6916] [ 73.568676][ T6916] dump_stack_lvl+0x100/0x190 [ 73.568707][ T6916] should_fail_ex.cold+0x5/0xa [ 73.568734][ T6916] should_failslab+0xc2/0x120 [ 73.568754][ T6916] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.568778][ T6916] ? lock_acquire+0x1d1/0x380 [ 73.568815][ T6916] ? do_getname_kernel+0x5d/0x250 [ 73.568841][ T6916] do_getname_kernel+0x5d/0x250 [ 73.568866][ T6916] kern_path+0x1f/0x50 [ 73.568889][ T6916] lookup_bdev+0xd8/0x2a0 [ 73.568923][ T6916] ? __pfx_lookup_bdev+0x10/0x10 [ 73.568943][ T6916] ? cred_has_capability.isra.0+0x186/0x300 [ 73.568966][ T6916] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 73.568991][ T6916] get_tree_bdev_flags+0xbe/0x620 [ 73.569008][ T6916] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 73.569036][ T6916] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 73.569069][ T6916] ? cap_capable+0x107/0x430 [ 73.569093][ T6916] ? bpf_lsm_capable+0x9/0x10 [ 73.569118][ T6916] ? security_capable+0x80/0x260 [ 73.569142][ T6916] vfs_get_tree+0x92/0x320 [ 73.569167][ T6916] path_mount+0x7d0/0x2850 [ 73.569195][ T6916] ? __pfx_path_mount+0x10/0x10 [ 73.569217][ T6916] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.569238][ T6916] ? putname+0xb1/0x110 [ 73.569257][ T6916] ? kmem_cache_free+0x127/0x6c0 [ 73.569288][ T6916] ? __x64_sys_mount+0x293/0x310 [ 73.569311][ T6916] __x64_sys_mount+0x293/0x310 [ 73.569360][ T6916] ? __pfx___x64_sys_mount+0x10/0x10 [ 73.569392][ T6916] do_syscall_64+0x123/0x790 [ 73.569412][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.569432][ T6916] RIP: 0033:0x7fd69c39f559 [ 73.569448][ T6916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.569467][ T6916] RSP: 002b:00007fd69d204028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.569488][ T6916] RAX: ffffffffffffffda RBX: 00007fd69c625fa0 RCX: 00007fd69c39f559 [ 73.569500][ T6916] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000200000000200 [ 73.569513][ T6916] RBP: 00007fd69d204090 R08: 0000000000000000 R09: 0000000000000000 [ 73.569525][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.569536][ T6916] R13: 00007fd69c626038 R14: 00007fd69c625fa0 R15: 00007ffc9fe30ab8 [ 73.569563][ T6916] [ 73.569680][ T6916] ./dev/mtdblock0: Can't lookup blockdev [ 73.569750][ T6915] syz_tun: entered allmulticast mode [ 73.621122][ T6915] dvmrp6: entered allmulticast mode [ 73.667897][ T6912] syz_tun: left allmulticast mode [ 73.680300][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 73.724622][ T6920] FAULT_INJECTION: forcing a failure. [ 73.724622][ T6920] name failslab, interval 1, probability 0, space 0, times 0 [ 73.724643][ T6920] CPU: 2 UID: 0 PID: 6920 Comm: syz.2.303 Tainted: G Y syzkaller #0 PREEMPT(full) [ 73.724658][ T6920] Tainted: [Y]=FORCED_BIND [ 73.724662][ T6920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.724668][ T6920] Call Trace: [ 73.724672][ T6920] [ 73.724676][ T6920] dump_stack_lvl+0x100/0x190 [ 73.724698][ T6920] should_fail_ex.cold+0x5/0xa [ 73.724714][ T6920] should_failslab+0xc2/0x120 [ 73.724726][ T6920] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 73.724743][ T6920] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.724754][ T6920] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 73.724772][ T6920] kmemdup_nul+0x49/0xd0 [ 73.724793][ T6920] vfs_parse_fs_qstr+0x112/0x1c0 [ 73.724808][ T6920] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 73.724827][ T6920] ? ovl_next_opt+0x143/0x1c0 [ 73.724855][ T6920] ? __pfx_ovl_next_opt+0x10/0x10 [ 73.724868][ T6920] vfs_parse_monolithic_sep+0x195/0x210 [ 73.724886][ T6920] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 73.724902][ T6920] ? alloc_fs_context+0x655/0xf40 [ 73.724919][ T6920] path_mount+0x77f/0x2850 [ 73.724936][ T6920] ? __pfx_path_mount+0x10/0x10 [ 73.724967][ T6920] ? lockdep_hardirqs_on+0x7d/0x110 [ 73.724981][ T6920] ? putname+0xb1/0x110 [ 73.724992][ T6920] ? kmem_cache_free+0x127/0x6c0 [ 73.725010][ T6920] ? __x64_sys_mount+0x293/0x310 [ 73.725023][ T6920] __x64_sys_mount+0x293/0x310 [ 73.725038][ T6920] ? __pfx___x64_sys_mount+0x10/0x10 [ 73.725057][ T6920] do_syscall_64+0x123/0x790 [ 73.725069][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.725080][ T6920] RIP: 0033:0x7f5dd399f559 [ 73.725089][ T6920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.725099][ T6920] RSP: 002b:00007f5dd48da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.725111][ T6920] RAX: ffffffffffffffda RBX: 00007f5dd3c25fa0 RCX: 00007f5dd399f559 [ 73.725118][ T6920] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000 [ 73.725124][ T6920] RBP: 00007f5dd48da090 R08: 0000200000000580 R09: 0000000000000000 [ 73.725130][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.725136][ T6920] R13: 00007f5dd3c26038 R14: 00007f5dd3c25fa0 R15: 00007ffe8d1e9f68 [ 73.725150][ T6920] [ 73.791590][ T6922] 9pnet_virtio: no channels available for device syz [ 73.896283][ T5787] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 73.907481][ T42] audit: type=1400 audit(1793338543.184:545): avc: denied { listen } for pid=6925 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.908443][ T42] audit: type=1400 audit(1793338543.184:546): avc: denied { accept } for pid=6925 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.966987][ T6934] FAULT_INJECTION: forcing a failure. [ 73.966987][ T6934] name , interval 1, probability 0, space 0, times 1 [ 73.967007][ T6934] CPU: 1 UID: 0 PID: 6934 Comm: syz.0.309 Tainted: G Y syzkaller #0 PREEMPT(full) [ 73.967021][ T6934] Tainted: [Y]=FORCED_BIND [ 73.967025][ T6934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.967031][ T6934] Call Trace: [ 73.967036][ T6934] [ 73.967041][ T6934] dump_stack_lvl+0x100/0x190 [ 73.967063][ T6934] should_fail_ex.cold+0x5/0xa [ 73.967080][ T6934] null_queue_rq+0x2ed/0xfb0 [ 73.967112][ T6934] null_queue_rqs+0xe9/0x2f0 [ 73.967126][ T6934] ? __pfx_null_queue_rqs+0x10/0x10 [ 73.967139][ T6934] ? blk_mq_dispatch_queue_requests+0x148/0x7b0 [ 73.967160][ T6934] ? __pfx___up_read+0x10/0x10 [ 73.967179][ T6934] __blk_mq_flush_list+0x9a/0xc0 [ 73.967194][ T6934] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 73.967209][ T6934] blk_mq_flush_plug_list+0x1f2/0x600 [ 73.967222][ T6934] ? __io_read+0x521/0x1470 [ 73.967239][ T6934] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 73.967255][ T6934] __blk_flush_plug+0x2c4/0x4b0 [ 73.967269][ T6934] ? __pfx___blk_flush_plug+0x10/0x10 [ 73.967281][ T6934] ? io_issue_sqe+0x1d0/0x1c10 [ 73.967295][ T6934] blk_finish_plug+0x5c/0xa0 [ 73.967306][ T6934] io_submit_sqes+0x1c8b/0x2760 [ 73.967325][ T6934] __do_sys_io_uring_enter+0xa88/0x1b10 [ 73.967340][ T6934] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.967352][ T6934] ? __fget_files+0x21f/0x3d0 [ 73.967364][ T6934] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 73.967380][ T6934] ? fput+0x7c/0x100 [ 73.967392][ T6934] ? ksys_write+0x1ac/0x250 [ 73.967408][ T6934] ? __pfx_ksys_write+0x10/0x10 [ 73.967422][ T6934] do_syscall_64+0x123/0x790 [ 73.967434][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.967445][ T6934] RIP: 0033:0x7fd69c39f559 [ 73.967455][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.967465][ T6934] RSP: 002b:00007fd69d204028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 73.967476][ T6934] RAX: ffffffffffffffda RBX: 00007fd69c625fa0 RCX: 00007fd69c39f559 [ 73.967483][ T6934] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 73.967489][ T6934] RBP: 00007fd69d204090 R08: 0000000000000000 R09: 0000000000000000 [ 73.967495][ T6934] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 73.967501][ T6934] R13: 00007fd69c626038 R14: 00007fd69c625fa0 R15: 00007ffc9fe30ab8 [ 73.967515][ T6934] [ 74.210022][ T6937] ip_tables: iptables: counters copy to user failed while replacing table [ 74.216731][ T6937] syz.0.310 uses obsolete (PF_INET,SOCK_PACKET) [ 74.317589][ T6940] FAULT_INJECTION: forcing a failure. [ 74.317589][ T6940] name failslab, interval 1, probability 0, space 0, times 0 [ 74.317609][ T6940] CPU: 1 UID: 0 PID: 6940 Comm: syz.0.311 Tainted: G Y syzkaller #0 PREEMPT(full) [ 74.317624][ T6940] Tainted: [Y]=FORCED_BIND [ 74.317628][ T6940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.317634][ T6940] Call Trace: [ 74.317638][ T6940] [ 74.317642][ T6940] dump_stack_lvl+0x100/0x190 [ 74.317662][ T6940] should_fail_ex.cold+0x5/0xa [ 74.317680][ T6940] should_failslab+0xc2/0x120 [ 74.317692][ T6940] kmem_cache_alloc_noprof+0x92/0x6a0 [ 74.317708][ T6940] ? mempool_init_node+0x2f7/0x6f0 [ 74.317721][ T6940] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 74.317732][ T6940] mempool_init_node+0x2f7/0x6f0 [ 74.317746][ T6940] ? __pfx_mempool_free_slab+0x10/0x10 [ 74.317756][ T6940] mempool_create_node_noprof+0xe9/0x1b0 [ 74.317768][ T6940] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 74.317780][ T6940] ceph_osdc_init+0x48b/0xa00 [ 74.317796][ T6940] ceph_create_client+0x281/0x370 [ 74.317810][ T6940] ceph_get_tree+0x1a4/0x1fd0 [ 74.317836][ T6940] ? bpf_lsm_capable+0x9/0x10 [ 74.317845][ T6940] ? security_capable+0x80/0x260 [ 74.317860][ T6940] vfs_get_tree+0x92/0x320 [ 74.317875][ T6940] vfs_cmd_create+0xd7/0x2a0 [ 74.317890][ T6940] __do_sys_fsconfig+0x55a/0xcb0 [ 74.317901][ T6940] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 74.317911][ T6940] ? fput+0x7c/0x100 [ 74.317929][ T6940] do_syscall_64+0x123/0x790 [ 74.317941][ T6940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.317952][ T6940] RIP: 0033:0x7fd69c39f559 [ 74.317962][ T6940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.317972][ T6940] RSP: 002b:00007fd69d204028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 74.317983][ T6940] RAX: ffffffffffffffda RBX: 00007fd69c625fa0 RCX: 00007fd69c39f559 [ 74.317990][ T6940] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 74.317996][ T6940] RBP: 00007fd69d204090 R08: 0000000000000000 R09: 0000000000000000 [ 74.318002][ T6940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.318008][ T6940] R13: 00007fd69c626038 R14: 00007fd69c625fa0 R15: 00007ffc9fe30ab8 [ 74.318022][ T6940] [ 74.356799][ T6942] FAULT_INJECTION: forcing a failure. [ 74.356799][ T6942] name failslab, interval 1, probability 0, space 0, times 0 [ 74.356827][ T6942] CPU: 0 UID: 0 PID: 6942 Comm: syz.0.312 Tainted: G Y syzkaller #0 PREEMPT(full) [ 74.356849][ T6942] Tainted: [Y]=FORCED_BIND [ 74.356855][ T6942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.356865][ T6942] Call Trace: [ 74.356870][ T6942] [ 74.356877][ T6942] dump_stack_lvl+0x100/0x190 [ 74.356907][ T6942] should_fail_ex.cold+0x5/0xa [ 74.356932][ T6942] should_failslab+0xc2/0x120 [ 74.356950][ T6942] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 74.356977][ T6942] ? ovl_do_parse_layer+0x30/0x12b0 [ 74.357008][ T6942] kstrdup+0x51/0xe0 [ 74.357026][ T6942] ovl_do_parse_layer+0x30/0x12b0 [ 74.357052][ T6942] ovl_parse_param+0xea2/0x1580 [ 74.357076][ T6942] ? __pfx_ovl_parse_param+0x10/0x10 [ 74.357101][ T6942] ? static_key_count+0x5a/0x70 [ 74.357121][ T6942] ? __pfx_ovl_parse_param+0x10/0x10 [ 74.357140][ T6942] vfs_parse_fs_param+0x200/0x3b0 [ 74.357165][ T6942] vfs_parse_fs_qstr+0x138/0x1c0 [ 74.357188][ T6942] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 74.357218][ T6942] ? ovl_next_opt+0x143/0x1c0 [ 74.357237][ T6942] ? __pfx_ovl_next_opt+0x10/0x10 [ 74.357256][ T6942] vfs_parse_monolithic_sep+0x195/0x210 [ 74.357281][ T6942] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 74.357335][ T6942] ? alloc_fs_context+0x655/0xf40 [ 74.357363][ T6942] path_mount+0x77f/0x2850 [ 74.357390][ T6942] ? __pfx_path_mount+0x10/0x10 [ 74.357410][ T6942] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.357430][ T6942] ? putname+0xb1/0x110 [ 74.357447][ T6942] ? kmem_cache_free+0x127/0x6c0 [ 74.357475][ T6942] ? __x64_sys_mount+0x293/0x310 [ 74.357495][ T6942] __x64_sys_mount+0x293/0x310 [ 74.357517][ T6942] ? __pfx___x64_sys_mount+0x10/0x10 [ 74.357546][ T6942] do_syscall_64+0x123/0x790 [ 74.357565][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.357582][ T6942] RIP: 0033:0x7fd69c39f559 [ 74.357597][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.357626][ T6942] RSP: 002b:00007fd69d204028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.357643][ T6942] RAX: ffffffffffffffda RBX: 00007fd69c625fa0 RCX: 00007fd69c39f559 [ 74.357653][ T6942] RDX: 0000200000000700 RSI: 00002000000006c0 RDI: 0000000000000000 [ 74.357664][ T6942] RBP: 00007fd69d204090 R08: 0000200000000740 R09: 0000000000000000 [ 74.357674][ T6942] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 74.357683][ T6942] R13: 00007fd69c626038 R14: 00007fd69c625fa0 R15: 00007ffc9fe30ab8 [ 74.357706][ T6942] [ 74.406913][ T6944] 9pnet_virtio: no channels available for device syz [ 74.460442][ T6949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.315'. [ 74.531176][ T6953] evm: overlay not supported [ 74.533981][ T42] audit: type=1400 audit(1793338543.814:547): avc: denied { remount } for pid=6952 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.538102][ T6953] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 74.565242][ T6955] vlan0: entered promiscuous mode [ 74.576698][ T6955] team0: Port device vlan0 added [ 74.580059][ T5143] Bluetooth: hci0: unexpected event for opcode 0x040d [ 74.592249][ T42] audit: type=1400 audit(1793338543.864:548): avc: denied { link } for pid=6956 comm="syz.0.319" name="#16" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.597035][ T42] audit: type=1400 audit(1793338543.874:549): avc: denied { rename } for pid=6956 comm="syz.0.319" name="#17" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.715338][ T6965] 9pnet_virtio: no channels available for device syz [ 74.719732][ T42] audit: type=1400 audit(1793338543.994:550): avc: denied { connect } for pid=6964 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.722600][ T42] audit: type=1400 audit(1793338544.004:551): avc: denied { ioctl } for pid=6964 comm="syz.2.322" path="socket:[18583]" dev="sockfs" ino=18583 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.741386][ T5143] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 74.841889][ T5798] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.274452][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=6980 comm=syz.2.328 [ 75.278529][ T6976] FAULT_INJECTION: forcing a failure. [ 75.278529][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 75.278550][ T6976] CPU: 2 UID: 0 PID: 6976 Comm: syz.2.328 Tainted: G Y syzkaller #0 PREEMPT(full) [ 75.278564][ T6976] Tainted: [Y]=FORCED_BIND [ 75.278568][ T6976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.278574][ T6976] Call Trace: [ 75.278578][ T6976] [ 75.278584][ T42] audit: type=1400 audit(1793338544.554:552): avc: denied { write } for pid=6975 comm="syz.2.328" name="subsystems" dev="configfs" ino=1410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.278583][ T6976] dump_stack_lvl+0x100/0x190 [ 75.278605][ T6976] should_fail_ex.cold+0x5/0xa [ 75.278623][ T6976] should_failslab+0xc2/0x120 [ 75.278635][ T6976] kmem_cache_alloc_noprof+0x92/0x6a0 [ 75.278651][ T6976] ? __kernfs_new_node+0xd2/0xa10 [ 75.278690][ T6976] __kernfs_new_node+0xd2/0xa10 [ 75.278708][ T6976] ? __pfx___kernfs_new_node+0x10/0x10 [ 75.278725][ T6976] ? lock_acquire+0x1d1/0x380 [ 75.278739][ T6976] ? kernfs_root+0x23/0x2a0 [ 75.278753][ T6976] ? find_held_lock+0x2b/0x80 [ 75.278764][ T6976] ? kernfs_root+0xee/0x2a0 [ 75.278777][ T6976] ? kernfs_root+0xee/0x2a0 [ 75.278809][ T6976] kernfs_new_node+0x194/0x200 [ 75.278826][ T6976] ? __pfx_kernfs_new_node+0x10/0x10 [ 75.278843][ T6976] ? kernfs_add_one+0x213/0xb40 [ 75.278861][ T6976] __kernfs_create_file+0x53/0x350 [ 75.278875][ T6976] sysfs_add_file_mode_ns+0x207/0x3c0 [ 75.278892][ T6976] internal_create_group+0x593/0xfb0 [ 75.278910][ T6976] ? __pfx_internal_create_group+0x10/0x10 [ 75.278927][ T6976] ? kernfs_create_link+0x1f1/0x280 [ 75.278941][ T6976] internal_create_groups+0x9d/0x150 [ 75.278959][ T6976] device_add+0x71a/0x1970 [ 75.278975][ T6976] ? __pfx_device_add+0x10/0x10 [ 75.278988][ T6976] ? lockdep_init_map_type+0x5c/0x250 [ 75.279003][ T6976] ? __init_waitqueue_head+0xca/0x150 [ 75.279029][ T6976] rfkill_register+0x1ad/0xb30 [ 75.279053][ T6976] nfc_register_device+0x11f/0x3e0 [ 75.279069][ T6976] nci_register_device+0x7f1/0xb80 [ 75.279085][ T6976] ? __pfx_nci_register_device+0x10/0x10 [ 75.279102][ T6976] ? lockdep_init_map_type+0x5c/0x250 [ 75.279119][ T6976] virtual_ncidev_open+0x141/0x220 [ 75.279136][ T6976] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 75.279150][ T6976] misc_open+0x26d/0x450 [ 75.279174][ T6976] ? __pfx_misc_open+0x10/0x10 [ 75.279188][ T6976] chrdev_open+0x234/0x6a0 [ 75.279201][ T6976] ? __pfx_chrdev_open+0x10/0x10 [ 75.279213][ T6976] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 75.279233][ T6976] do_dentry_open+0x674/0x1470 [ 75.279243][ T6976] ? __pfx_chrdev_open+0x10/0x10 [ 75.279258][ T6976] vfs_open_consume+0xcc/0x460 [ 75.279273][ T6976] path_openat+0x1547/0x23f0 [ 75.279288][ T6976] ? __pfx_path_openat+0x10/0x10 [ 75.279305][ T6976] do_file_open+0x20e/0x430 [ 75.279318][ T6976] ? __pfx_do_file_open+0x10/0x10 [ 75.279340][ T6976] ? _raw_spin_unlock+0x28/0x50 [ 75.279355][ T6976] ? alloc_fd+0x471/0x7a0 [ 75.279371][ T6976] do_sys_openat2+0x163/0x1d0 [ 75.279385][ T6976] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.279399][ T6976] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.279414][ T6976] __x64_sys_openat+0x12d/0x210 [ 75.279428][ T6976] ? __pfx___x64_sys_openat+0x10/0x10 [ 75.279440][ T6976] ? ksys_write+0x1ac/0x250 [ 75.279459][ T6976] do_syscall_64+0x123/0x790 [ 75.279471][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.279482][ T6976] RIP: 0033:0x7f5dd399f559 [ 75.279492][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.279502][ T6976] RSP: 002b:00007f5dd48da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.279513][ T6976] RAX: ffffffffffffffda RBX: 00007f5dd3c25fa0 RCX: 00007f5dd399f559 [ 75.279520][ T6976] RDX: 0000000000000002 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 75.279526][ T6976] RBP: 00007f5dd3a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 75.279532][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.279538][ T6976] R13: 00007f5dd3c26038 R14: 00007f5dd3c25fa0 R15: 00007ffe8d1e9f68 [ 75.279559][ T6976] [ 75.287978][ T42] audit: type=1400 audit(1793338544.564:553): avc: denied { add_name } for pid=6975 comm="syz.2.328" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.453458][ T6989] ip_tables: iptables: counters copy to user failed while replacing table [ 75.471880][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.471919][ T6991] 9pnet_virtio: no channels available for device syz [ 75.621817][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 75.622298][ T24] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.623165][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 75.623187][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.623198][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.623210][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.623221][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.623239][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.701908][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 75.701927][ T5798] CPU: 1 UID: 0 PID: 5798 Comm: kworker/u34:7 Tainted: G Y syzkaller #0 PREEMPT(full) [ 75.701944][ T5798] Tainted: [Y]=FORCED_BIND [ 75.701949][ T5798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.701956][ T5798] Workqueue: hci2 hci_rx_work [ 75.701970][ T5798] Call Trace: [ 75.701974][ T5798] [ 75.701979][ T5798] dump_stack_lvl+0x100/0x190 [ 75.702000][ T5798] sysfs_warn_dup.cold+0x1c/0x28 [ 75.702018][ T5798] sysfs_create_dir_ns+0x24b/0x2b0 [ 75.702033][ T5798] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 75.702046][ T5798] ? find_held_lock+0x2b/0x80 [ 75.702057][ T5798] ? kobject_add_internal+0x25f/0x930 [ 75.702073][ T5798] ? kobject_add_internal+0x25f/0x930 [ 75.702091][ T5798] ? do_raw_spin_unlock+0x145/0x1e0 [ 75.702103][ T5798] kobject_add_internal+0x2c8/0x930 [ 75.702120][ T5798] kobject_add+0x16a/0x1e0 [ 75.702135][ T5798] ? __pfx_kobject_add+0x10/0x10 [ 75.702150][ T5798] ? class_to_subsys+0x10f/0x150 [ 75.702169][ T5798] ? kobject_put+0xb9/0x640 [ 75.702181][ T5798] ? _raw_spin_unlock+0x28/0x50 [ 75.702199][ T5798] device_add+0x294/0x1970 [ 75.702213][ T5798] ? __pfx_dev_set_name+0x10/0x10 [ 75.702229][ T5798] ? __pfx_device_add+0x10/0x10 [ 75.702243][ T5798] ? mgmt_send_event_skb+0x2fb/0x460 [ 75.702261][ T5798] hci_conn_add_sysfs+0x1a3/0x260 [ 75.702276][ T5798] le_conn_complete_evt+0x12f9/0x2200 [ 75.702291][ T5798] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 75.702303][ T5798] ? hci_event_packet+0x186/0xcd0 [ 75.702317][ T5798] hci_le_conn_complete_evt+0x23c/0x3a0 [ 75.702329][ T5798] ? skb_pull_data+0x15f/0x1e0 [ 75.702346][ T5798] hci_le_meta_evt+0x34a/0x5f0 [ 75.702358][ T5798] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 75.702371][ T5798] hci_event_packet+0x51c/0xcd0 [ 75.702382][ T5798] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 75.702394][ T5798] ? __pfx_hci_event_packet+0x10/0x10 [ 75.702408][ T5798] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.702421][ T5798] hci_rx_work+0x6ea/0x10c0 [ 75.702434][ T5798] process_one_work+0xac7/0x1b10 [ 75.702452][ T5798] ? __pfx_process_one_work+0x10/0x10 [ 75.702464][ T5798] ? lock_acquire+0x1d1/0x380 [ 75.702482][ T5798] ? __pfx_hci_rx_work+0x10/0x10 [ 75.702494][ T5798] worker_thread+0x5ef/0xe50 [ 75.702511][ T5798] ? kthread+0x13a/0x450 [ 75.702520][ T5798] ? __pfx_worker_thread+0x10/0x10 [ 75.702531][ T5798] kthread+0x373/0x450 [ 75.702540][ T5798] ? __pfx_kthread+0x10/0x10 [ 75.702551][ T5798] ret_from_fork+0x730/0xd60 [ 75.702565][ T5798] ? __pfx_ret_from_fork+0x10/0x10 [ 75.702586][ T5798] ? __switch_to+0x800/0x10e0 [ 75.702598][ T5798] ? __pfx_kthread+0x10/0x10 [ 75.702609][ T5798] ret_from_fork_asm+0x1a/0x30 [ 75.702631][ T5798] [ 75.702643][ T5798] kobject: kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 75.702661][ T5798] Bluetooth: hci2: failed to register connection device [ 75.831802][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 75.831825][ T24] usbtmc 5-1:16.0: can't read capabilities [ 76.033343][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.033787][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.038478][ T5886] usb 5-1: USB disconnect, device number 3 [ 76.271334][ T7023] 9pnet_virtio: no channels available for device syz [ 76.299201][ T7025] syzkaller1: entered promiscuous mode [ 76.299216][ T7025] syzkaller1: entered allmulticast mode [ 76.417536][ T7031] Bluetooth: hci0: Invalid link key type 20 for 66:55:44:33:22:11 [ 76.443563][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 76.608591][ T29] cfg80211: failed to load regulatory.db [ 76.929591][ T7059] 9pnet_virtio: no channels available for device syz [ 76.961593][ T7061] 9pnet_virtio: no channels available for device syz [ 77.253973][ T7078] sock: sock_timestamping_bind_phc: sock not bind to device [ 77.357081][ T7081] XFS (mtdblock0): Invalid superblock magic number [ 78.579086][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 78.579207][ T24] ------------[ cut here ]------------ [ 78.579218][ T24] virtio-pci 0000:00:01.0: [drm] vblank wait timed out on crtc 0 [ 78.579229][ T24] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x31d/0x580, CPU#2: kworker/2:0/24 [ 78.592292][ T24] Modules linked in: [ 78.595395][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Tainted: G Y syzkaller #0 PREEMPT(full) [ 78.599832][ T24] Tainted: [Y]=FORCED_BIND [ 78.601660][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.605769][ T24] Workqueue: events drm_fb_helper_damage_work [ 78.608235][ T24] RIP: 0010:drm_crtc_wait_one_vblank+0x323/0x580 [ 78.610910][ T24] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 25 0e 26 fc 48 89 df e8 dd 1c 93 00 48 89 c6 48 8d 3d 33 05 8d 0c 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 57 f7 ff ff [ 78.618061][ T24] RSP: 0018:ffffc9000062fa40 EFLAGS: 00010293 [ 78.620547][ T24] RAX: ffffffff8c9281a0 RBX: ffff8880212f20d0 RCX: 0000000000000000 [ 78.623718][ T24] RDX: ffff8880241c2860 RSI: ffffffff8c9281a0 RDI: ffffffff927557a0 [ 78.626734][ T24] RBP: ffff8880241c2860 R08: 0000000000000000 R09: 0000000000000000 [ 78.629675][ T24] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880299ee000 [ 78.632686][ T24] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000014d8 [ 78.635685][ T24] FS: 0000000000000000(0000) GS:ffff8880d468e000(0000) knlGS:0000000000000000 [ 78.639237][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.641982][ T24] CR2: 000000110c2634a0 CR3: 000000005387b000 CR4: 0000000000352ef0 [ 78.645219][ T24] Call Trace: [ 78.646650][ T24] [ 78.647896][ T24] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 78.650340][ T24] ? __pfx_autoremove_wake_function+0x10/0x10 [ 78.652651][ T24] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.654723][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.657081][ T24] ? drm_vblank_get+0x14f/0x2d0 [ 78.659073][ T24] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 78.661750][ T24] drm_fb_helper_damage_work+0x2e2/0xab0 [ 78.664022][ T24] ? process_one_work+0xa2c/0x1b10 [ 78.666026][ T24] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 78.668471][ T24] ? process_one_work+0x906/0x1b10 [ 78.670632][ T24] ? process_one_work+0x906/0x1b10 [ 78.672680][ T24] process_one_work+0xac7/0x1b10 [ 78.674685][ T24] ? __pfx_process_one_work+0x10/0x10 [ 78.676854][ T24] ? lock_acquire+0x1d1/0x380 [ 78.678850][ T24] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 78.681461][ T24] worker_thread+0x5ef/0xe50 [ 78.683145][ T24] ? kthread+0x13a/0x450 [ 78.684690][ T24] ? __pfx_worker_thread+0x10/0x10 [ 78.686578][ T24] kthread+0x373/0x450 [ 78.688079][ T24] ? __pfx_kthread+0x10/0x10 [ 78.689802][ T24] ret_from_fork+0x730/0xd60 [ 78.691651][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 78.693852][ T24] ? __switch_to+0x800/0x10e0 [ 78.695679][ T24] ? __pfx_kthread+0x10/0x10 [ 78.697482][ T24] ret_from_fork_asm+0x1a/0x30 [ 78.699303][ T24] [ 78.700576][ T24] irq event stamp: 36255 [ 78.702536][ T24] hardirqs last enabled at (36293): [] irqentry_exit+0x202/0xab0 [ 78.706293][ T24] hardirqs last disabled at (36296): [] __nbcon_atomic_flush_pending_con+0x284/0x440 [ 78.710623][ T24] softirqs last enabled at (36292): [] __irq_exit_rcu+0x178/0x220 [ 78.714462][ T24] softirqs last disabled at (36261): [] __irq_exit_rcu+0x178/0x220 [ 78.718215][ T24] ---[ end trace 0000000000000000 ]--- [ 79.814425][ T24] ------------[ cut here ]------------ [ 79.814441][ T24] [CRTC:40:crtc-0] vblank wait timed out [ 79.814452][ T24] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1927 at drm_atomic_helper_wait_for_vblanks.part.0+0x733/0x890, CPU#2: kworker/2:0/24 [ 79.824328][ T24] Modules linked in: [ 79.826062][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Tainted: G W Y syzkaller #0 PREEMPT(full) [ 79.830424][ T24] Tainted: [W]=WARN, [Y]=FORCED_BIND [ 79.832551][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.836649][ T24] Workqueue: events drm_fb_helper_damage_work [ 79.839189][ T24] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x739/0x890 [ 79.842370][ T24] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 0d 98 89 0c 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 08 9a 22 fc e9 7c fe ff ff e8 ce [ 79.850283][ T24] RSP: 0018:ffffc9000062f6c0 EFLAGS: 00010246 [ 79.853042][ T24] RAX: 0000000000000000 RBX: ffff888100760040 RCX: 1ffff110200ec022 [ 79.856517][ T24] RDX: ffff888029360e20 RSI: 0000000000000028 RDI: ffffffff92755e70 [ 79.859707][ T24] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.862892][ T24] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 79.868691][ T24] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802df58900 [ 79.872887][ T24] FS: 0000000000000000(0000) GS:ffff8880d468e000(0000) knlGS:0000000000000000 [ 79.876537][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.879208][ T24] CR2: 000000110c2634a0 CR3: 0000000037a59000 CR4: 0000000000352ef0 [ 79.882430][ T24] Call Trace: [ 79.883825][ T24] [ 79.885056][ T24] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 79.888190][ T24] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.890609][ T24] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.892731][ T24] ? __pfx_autoremove_wake_function+0x10/0x10 [ 79.895240][ T24] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 79.897910][ T24] drm_atomic_helper_commit_tail+0xff/0x130 [ 79.900307][ T24] commit_tail.isra.0+0x33e/0x420 [ 79.902374][ T24] drm_atomic_helper_commit+0x303/0x380 [ 79.904595][ T24] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 79.907181][ T24] drm_atomic_commit+0x230/0x300 [ 79.909218][ T24] ? __pfx_drm_atomic_commit+0x10/0x10 [ 79.911486][ T24] ? __pfx___drm_printfn_info+0x10/0x10 [ 79.913789][ T24] ? modeset_lock+0x114/0x6d0 [ 79.915721][ T24] drm_atomic_helper_dirtyfb+0x603/0x790 [ 79.918083][ T24] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 79.920646][ T24] ? do_raw_spin_lock+0x128/0x260 [ 79.922772][ T24] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 79.925274][ T24] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 79.927899][ T24] drm_fb_helper_damage_work+0x4c8/0xab0 [ 79.930216][ T24] ? process_one_work+0xa2c/0x1b10 [ 79.932331][ T24] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 79.934849][ T24] ? process_one_work+0x906/0x1b10 [ 79.936946][ T24] ? process_one_work+0x906/0x1b10 [ 79.939118][ T24] process_one_work+0xac7/0x1b10 [ 79.941132][ T24] ? __pfx_process_one_work+0x10/0x10 [ 79.943338][ T24] ? lock_acquire+0x1d1/0x380 [ 79.945312][ T24] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 79.947846][ T24] worker_thread+0x5ef/0xe50 [ 79.949829][ T24] ? kthread+0x13a/0x450 [ 79.951581][ T24] ? __pfx_worker_thread+0x10/0x10 [ 79.953694][ T24] kthread+0x373/0x450 [ 79.955367][ T24] ? __pfx_kthread+0x10/0x10 [ 79.957261][ T24] ret_from_fork+0x730/0xd60 [ 79.959436][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 79.961519][ T24] ? __switch_to+0x800/0x10e0 [ 79.963469][ T24] ? __pfx_kthread+0x10/0x10 [ 79.965398][ T24] ret_from_fork_asm+0x1a/0x30 [ 79.967385][ T24] [ 79.968914][ T24] irq event stamp: 37483 [ 79.970647][ T24] hardirqs last enabled at (37487): [] __nbcon_atomic_flush_pending_con+0x293/0x440 [ 79.975085][ T24] hardirqs last disabled at (37490): [] __nbcon_atomic_flush_pending_con+0x284/0x440 [ 79.979566][ T24] softirqs last enabled at (37482): [] __irq_exit_rcu+0x178/0x220 [ 79.983360][ T24] softirqs last disabled at (37431): [] __irq_exit_rcu+0x178/0x220 [ 79.987167][ T24] ---[ end trace 0000000000000000 ]--- [ 80.688912][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 81.047890][ T24] ------------[ cut here ]------------ [ 81.047900][ T24] virtio-pci 0000:00:01.0: [drm] vblank wait timed out on crtc 0 [ 81.047909][ T24] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x31d/0x580, CPU#2: kworker/2:0/24 [ 81.055424][ T24] Modules linked in: [ 81.056757][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Tainted: G W Y syzkaller #0 PREEMPT(full) [ 81.060794][ T24] Tainted: [W]=WARN, [Y]=FORCED_BIND [ 81.062328][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.065312][ T24] Workqueue: events drm_fb_helper_damage_work [ 81.067199][ T24] RIP: 0010:drm_crtc_wait_one_vblank+0x323/0x580 [ 81.069192][ T24] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 25 0e 26 fc 48 89 df e8 dd 1c 93 00 48 89 c6 48 8d 3d 33 05 8d 0c 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 57 f7 ff ff [ 81.076455][ T24] RSP: 0018:ffffc9000062fa40 EFLAGS: 00010293 [ 81.079113][ T24] RAX: ffffffff8c9281a0 RBX: ffff8880212f20d0 RCX: 0000000000000000 [ 81.082271][ T24] RDX: ffff8880241c2860 RSI: ffffffff8c9281a0 RDI: ffffffff927557a0 [ 81.085470][ T24] RBP: ffff8880241c2860 R08: 0000000000000000 R09: 0000000000000000 [ 81.088860][ T24] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880299ee000 [ 81.092125][ T24] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000014d8 [ 81.095320][ T24] FS: 0000000000000000(0000) GS:ffff8880d468e000(0000) knlGS:0000000000000000 [ 81.098908][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.101785][ T24] CR2: 000000110c2634a0 CR3: 0000000037a59000 CR4: 0000000000352ef0 [ 81.105041][ T24] Call Trace: [ 81.106453][ T24] [ 81.107682][ T24] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 81.110285][ T24] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.112753][ T24] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.114908][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.117560][ T24] ? drm_vblank_get+0x14f/0x2d0 [ 81.119851][ T24] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 81.122453][ T24] drm_fb_helper_damage_work+0x2e2/0xab0 [ 81.124749][ T24] ? process_one_work+0xa2c/0x1b10 [ 81.126915][ T24] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 81.129461][ T24] ? process_one_work+0x906/0x1b10 [ 81.131639][ T24] ? process_one_work+0x906/0x1b10 [ 81.133780][ T24] process_one_work+0xac7/0x1b10 [ 81.135854][ T24] ? __pfx_process_one_work+0x10/0x10 [ 81.138071][ T24] ? lock_acquire+0x1d1/0x380 [ 81.140043][ T24] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 81.142597][ T24] worker_thread+0x5ef/0xe50 [ 81.144514][ T24] ? kthread+0x13a/0x450 [ 81.146252][ T24] ? __pfx_worker_thread+0x10/0x10 [ 81.148343][ T24] kthread+0x373/0x450 [ 81.150051][ T24] ? __pfx_kthread+0x10/0x10 [ 81.152019][ T24] ret_from_fork+0x730/0xd60 [ 81.153960][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 81.156002][ T24] ? __switch_to+0x800/0x10e0 [ 81.157933][ T24] ? __pfx_kthread+0x10/0x10 [ 81.159805][ T24] ret_from_fork_asm+0x1a/0x30 [ 81.161799][ T24] [ 81.163088][ T24] irq event stamp: 37895 [ 81.164747][ T24] hardirqs last enabled at (37899): [] __nbcon_atomic_flush_pending_con+0x293/0x440 [ 81.168988][ T24] hardirqs last disabled at (37902): [] __nbcon_atomic_flush_pending_con+0x284/0x440 [ 81.173470][ T24] softirqs last enabled at (37800): [] __irq_exit_rcu+0x178/0x220 [ 81.177187][ T24] softirqs last disabled at (37767): [] __irq_exit_rcu+0x178/0x220 [ 81.180921][ T24] ---[ end trace 0000000000000000 ]--- [ 83.179812][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 83.179824][ T42] audit: type=1400 audit(1793862840.283:569): avc: denied { write } for pid=7091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.229689][ T42] audit: type=1400 audit(1793862840.332:570): avc: denied { write } for pid=7095 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.324780][ T42] audit: type=1400 audit(1793862841.388:571): avc: denied { write } for pid=7098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.371194][ T42] audit: type=1400 audit(1793862841.437:572): avc: denied { write } for pid=7101 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1