last executing test programs: 3.300816975s ago: executing program 2 (id=690): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000680)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0xfffffffffffffd67, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.171905537s ago: executing program 2 (id=693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000005000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800034000000001080002"], 0xdc}}, 0x0) 3.170777949s ago: executing program 2 (id=696): r0 = syz_open_pts(0xffffffffffffffff, 0x4741) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6, 0x2, 0x7, 0x53f7, 0x2}}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x2, 0x9, 0x8, 0x2, 0x4, 0x9, 0x9000000000000, 0x3}, &(0x7f0000000080)={0x9, 0x1, 0x5, 0x9, 0x800, 0xfffffffffffff2aa, 0xffffffffffffffff, 0x4}, &(0x7f00000000c0)={0x5, 0x1, 0x3, 0xffffffff, 0x10000, 0xdd4, 0x6, 0x5}, &(0x7f0000000140)={r1, r2+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x9]}, 0x8}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000200)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000280)=0x7f) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000500)=""/113, 0x71, 0x0, &(0x7f0000000580)=""/87, 0x57}}, 0x10) (async, rerun: 64) r6 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xad0}}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0xb3, &(0x7f0000000380)=""/179, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x18, r4, 0x8, &(0x7f0000000480)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x7, 0x8d}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[r6], &(0x7f00000006c0)=[{0x1, 0x2, 0x2, 0x2}], 0x10, 0x2}, 0x94) (async) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f00000007c0)) (async) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000800)=0x4) (async, rerun: 64) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000880), r0) (rerun: 64) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r7, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x54}}, 0x840) (async) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r6, 0x24, &(0x7f00000009c0)={0x7}, 0x0) (async, rerun: 32) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000a40)) (async, rerun: 32) read$watch_queue(r6, &(0x7f0000000a80)=""/82, 0x52) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000b00)={0x16, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}, 0x10) (async) getpeername$packet(r6, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b80)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000bc0)={@private0, 0x44, r8}) setsockopt$inet_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000c00)=@gcm_256={{0x304}, "5fe6436fbd5dde26", "099ce2c953204371c8d74fd8a395f4f01e10ef263a195bee0f520b8a6437ab40", "78c0fb53", "8f6cdd55c4c2fbd6"}, 0x38) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000c40)) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000c80)) (async) openat(r6, &(0x7f0000000cc0)='./file0\x00', 0x200, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000d00)=0x1, 0x4) (async) sendmsg$ETHTOOL_MSG_STATS_GET(r6, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000001140)={0xfff, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000e40)=""/58, 0x3a}, {&(0x7f0000000e80)=""/229, 0xe5}, {&(0x7f0000000f80)=""/197, 0xc5}, {&(0x7f0000001080)=""/44, 0x2c}], &(0x7f0000001100)=[0x7fffffff], 0x4}, 0x20) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000002180)={0x0, 0xc}) 3.040029773s ago: executing program 2 (id=701): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x9801) move_mount(r1, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 3.035410107s ago: executing program 2 (id=704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000001b0088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f44001280200001800a00010071756f7461000000100002800c000140000000000000b7f8200001800e000100636f6e6e6c696d69740000000c00028008000140000007ff08000340000001067c0000000c0a010400000000000000000700080154000380500000804c00018045000100119b435d82ec9dc3847470fe14fb9ae89519b398ff9eb3305a758f00001d94214b65280409dbe8e6ae54e502ca0de76c4de3613b4b5b12e228283cb20f0750e25c0000000900010073797a3000000000080004"], 0x14c}, 0x1, 0xc00}, 0x20050800) 2.672511394s ago: executing program 2 (id=707): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000680)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0xfffffffffffffd67, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.604573656s ago: executing program 32 (id=707): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000680)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0xfffffffffffffd67, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 736.703775ms ago: executing program 1 (id=732): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000006c0), 0x2000, &(0x7f00000026c0)={&(0x7f0000002780)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 735.656811ms ago: executing program 0 (id=733): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) writev(r1, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000005c0)=0xc) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="010528000a00140006000000600000000008114020010000000000000000000000000001ff020000000000000000000000000001"], 0x64) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0xeafbff3, &(0x7f0000000500)=[{&(0x7f0000000540)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x32, {0x0, "488b042500304000488904250030400066ba420066b81d0066ef"}}, @nested_vmlaunch={0x12f, 0x18}], 0x7a}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0xb, 0x3f8fd58780397062, 0x400000, 0x100000, &(0x7f0000c68000/0x100000)=nil}) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f00004e7000/0x400000)=nil) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4161, 0x0) 735.572951ms ago: executing program 1 (id=734): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000100000061115000000000001800003700000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 662.142006ms ago: executing program 1 (id=735): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540100001000010000000000000000007f0000010000000000000000000000007f0000010048ff00000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd320000007f0000010000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000020000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000020100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x154}}, 0x0) 661.903279ms ago: executing program 1 (id=736): r0 = syz_open_dev$video(&(0x7f00000002c0), 0xfffffffffffffffc, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@userptr={0x0, 0x1, 0x4, 0x20, 0x1, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000003c0)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000400)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x7, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x7, 0x6, 0x4094}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc085}, 0x4008000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000080)=0x13) close_range(r1, 0xffffffffffffffff, 0x0) 512.170082ms ago: executing program 1 (id=737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00010376786c616e00000024000280080001000100000008000200e00101010800030001"], 0x68}}, 0x0) 511.951068ms ago: executing program 1 (id=738): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0x88, 'crypt\x00', {'aes-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}}}]}) syz_open_dev$dri(&(0x7f0000000080), 0x80, 0x11000) ioctl$DM_DEV_SUSPEND(r1, 0xc138fd06, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000580)='./dm0\x00', 0x6180, r2) r3 = openat$dm_dev(0xffffffffffffff9c, &(0x7f00000005c0)='./dm0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000600)="0102030405060708", 0x8, 0x0) ioctl$DM_DEV_REMOVE(r1, 0xc138fd04, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x3c, 0x0, 0x0, 0x0, 0x10000, @value=r0}, 0x28) 278.905986ms ago: executing program 0 (id=739): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_io_uring_setup(0x3032, &(0x7f0000000280)={0x0, 0x7011, 0x80, 0x0, 0xfffffffb}, &(0x7f0000000300)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) (async, rerun: 32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x9, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f40)={r6}, 0xc) (async) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000580)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)={0x0, 0x0, 0x23}, &(0x7f0000000640)='./file0\x00', 0x18, 0x0, 0x12345}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = creat(&(0x7f0000000b00)='./file0\x00', 0xecf86c37d53049c6) write$binfmt_script(r9, &(0x7f0000000b40)={'#! ', './file0', [{0x20, 'N\xb0\xdd\'\x0e\xdf\x14\t>\x9b\xccH\x00\xbf!\xd9\xc8\x96;r\xcc?//\xa5\xa6c\xc3\x05\xd1\x17\xea\x8b\x9b\xedNs\xb0\xe7\x13N\xc9g\x9f'}], 0xa, "989860917a72faf669b74709f32d59f95b1db6aae6e3df4595c0876b7e7816701602de18a8828bc2a4dcb634e6445c326f0d110d0fc035884857f74aac44829768425388c3295ecb131dc8797bbf2f395ee5851484b3ecb6a5950fd88db7daaf201418607dd18f"}, 0x9f) (async) close(r9) execve(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r7}, &(0x7f0000000a40), &(0x7f0000000a80)='%pI4 \x00'}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r8}, 0xc) (async) syz_emit_ethernet(0x46, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @multicast1, {0x5, 0x4, 0x2, 0x35, 0x9, 0x67, 0x1, 0x5, 0x32, 0x8, @rand_addr=0x64010102, @loopback}, "dc65976c34f7e987"}}}}}, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x15c, 0x10, 0x1, 0xdffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d0, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x7, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x10, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0xe}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c80), r10) 278.516048ms ago: executing program 3 (id=740): capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000004e000000000000005fa00000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x8, 0xb579, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfdff}, 0x23) 221.65113ms ago: executing program 3 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0xf5ff}, 0x20050800) 221.511242ms ago: executing program 3 (id=742): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000006c0), 0x2000, &(0x7f00000026c0)={&(0x7f0000002780)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 216.899156ms ago: executing program 3 (id=743): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r8}) (async) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r8}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0xfffffffffffffd67, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) r11 = socket(0x840000000002, 0x3, 0xff) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="38000000031401002dbd7000fcdbdf250900020073797a320000000008004100c6656500140033007767310000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r13) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r13) getsockname$packet(r13, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) (async) getsockname$packet(r13, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800000010003704000080000016000000000000", @ANYRES32=r14, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r11, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)="9723af4501000000010001008cc5595c4a9b8f99595311dc93a46126", 0x1c}], 0x1, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844) (async) sendmsg$inet(r11, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)="9723af4501000000010001008cc5595c4a9b8f99595311dc93a46126", 0x1c}], 0x1, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)={0x2c8, r3, 0x410, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4008009}, 0x24040000) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)={0x2c8, r3, 0x410, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4008009}, 0x24040000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf253500000008000300", @ANYRES32=r15, @ANYBLOB="0a0006"], 0x28}}, 0x22044804) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf253500000008000300", @ANYRES32=r15, @ANYBLOB="0a0006"], 0x28}}, 0x22044804) 118.93081ms ago: executing program 0 (id=744): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00f0000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 57.734225ms ago: executing program 0 (id=745): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000100000061115000000000001800003c00000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 57.565599ms ago: executing program 3 (id=746): r0 = syz_open_dev$dri(&(0x7f0000001500), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000001440), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000001580)={0x0, &(0x7f00000015c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000000)=0x2) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000001740)={0x2, r2, 0x8, 0x6, 0x7, 0x3, 0x401, 0xfff, 0x4}) 322.091µs ago: executing program 0 (id=747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540100001000010000000000000000007f0000010000000000000000000000007f0000010048ff00000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd320000007f0000010000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000100fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000020100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x154}}, 0x0) 174.897µs ago: executing program 0 (id=748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00040376786c616e00000024000280080001000100000008000200e00101010800030001"], 0x68}}, 0x0) 0s ago: executing program 3 (id=749): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x4e21}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x5}, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8500000022"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000440)='./proc/sys/kernel/printk\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='0 0 0 0\n', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/kernel/panic_on_warn\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0\n\x00', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r6, &(0x7f0000000680)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r3) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f00000006c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) bind$rxrpc(r3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): nd connected. [ 50.005279][ T5938] dvb-usb: bulk message failed: -22 (1/0) [ 50.005300][ T5938] dw2102: i2c transfer failed. [ 50.164232][ T5938] dvb-usb: bulk message failed: -22 (1/0) [ 50.164251][ T5938] dw2102: i2c transfer failed. [ 50.324110][ T5938] dvb-usb: bulk message failed: -22 (1/0) [ 50.324124][ T5938] dw2102: i2c transfer failed. [ 50.484783][ T5938] dvb-usb: bulk message failed: -22 (1/0) [ 50.484982][ T5938] dw2102: i2c transfer failed. [ 50.517255][ T5996] syzkaller0: entered promiscuous mode [ 50.517277][ T5996] syzkaller0: entered allmulticast mode [ 50.585064][ T5788] Bluetooth: hci2: command tx timeout [ 50.585085][ T5788] Bluetooth: hci1: command tx timeout [ 50.585095][ T5788] Bluetooth: hci0: command tx timeout [ 50.585132][ T5144] Bluetooth: hci3: command tx timeout [ 50.645439][ T5938] dvb-usb: bulk message failed: -22 (1/0) [ 50.645459][ T5938] dw2102: i2c transfer failed. [ 50.759188][ T5938] usb 5-1: USB disconnect, device number 2 [ 50.862129][ T5938] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 51.075056][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.075099][ T5144] Bluetooth: hci4: command 0x1003 tx timeout [ 51.336105][ T6009] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 51.340406][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22'. [ 51.340425][ T6009] nlmon0: entered promiscuous mode [ 51.340433][ T6009] nlmon0: entered allmulticast mode [ 51.412187][ T42] kauditd_printk_skb: 92 callbacks suppressed [ 51.412199][ T42] audit: type=1400 audit(1793537762.583:256): avc: denied { create } for pid=6014 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.415025][ T42] audit: type=1400 audit(1793537762.593:257): avc: denied { write } for pid=6014 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.415323][ T42] audit: type=1400 audit(1793537762.593:258): avc: denied { nlmsg_write } for pid=6014 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.517806][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 51.517836][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 51.544420][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.544446][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.544462][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.544478][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.559318][ T6026] netlink: 96 bytes leftover after parsing attributes in process `syz.0.29'. [ 51.576542][ T42] audit: type=1400 audit(1793537762.753:259): avc: granted { setsecparam } for pid=6027 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 51.585415][ T42] audit: type=1400 audit(1793537762.763:260): avc: denied { unmount } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 51.603433][ T42] audit: type=1400 audit(1793537762.773:261): avc: denied { read } for pid=6029 comm="syz.0.31" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.604366][ T42] audit: type=1400 audit(1793537762.773:262): avc: denied { open } for pid=6029 comm="syz.0.31" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.604403][ T42] audit: type=1400 audit(1793537762.773:263): avc: denied { ioctl } for pid=6029 comm="syz.0.31" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.639889][ T42] audit: type=1400 audit(1793537762.813:264): avc: denied { ioctl } for pid=6035 comm="syz.1.34" path="socket:[9810]" dev="sockfs" ino=9810 ioctlcmd=0x400261f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 51.730073][ T42] audit: type=1400 audit(1793537762.903:265): avc: denied { create } for pid=6047 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 51.768464][ T6055] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 51.770385][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43'. [ 51.770583][ T6055] bond_slave_0: entered promiscuous mode [ 51.770599][ T6055] bond_slave_0: entered allmulticast mode [ 51.810301][ T6060] netlink: 68 bytes leftover after parsing attributes in process `syz.2.45'. [ 51.851747][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 51.925026][ T6080] syzkaller1: entered promiscuous mode [ 51.925040][ T6080] syzkaller1: entered allmulticast mode [ 52.048539][ T6094] xt_hashlimit: size too large, truncated to 1048576 [ 52.159399][ T5799] Bluetooth: hci2: SCO packet too small [ 52.221390][ T6120] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 52.223485][ T6120] virt_wifi0: entered promiscuous mode [ 52.223504][ T6120] virt_wifi0: entered allmulticast mode [ 52.326234][ T6132] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 52.328854][ T6132] FAULT_INJECTION: forcing a failure. [ 52.328854][ T6132] name failslab, interval 1, probability 0, space 0, times 1 [ 52.328870][ T6132] CPU: 1 UID: 0 PID: 6132 Comm: syz.1.66 Not tainted syzkaller #0 PREEMPT(full) [ 52.328881][ T6132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.328887][ T6132] Call Trace: [ 52.328891][ T6132] [ 52.328895][ T6132] dump_stack_lvl+0x100/0x190 [ 52.328917][ T6132] should_fail_ex.cold+0x5/0xa [ 52.328933][ T6132] should_failslab+0xc2/0x120 [ 52.328945][ T6132] __kmalloc_cache_noprof+0x91/0x6d0 [ 52.328960][ T6132] ? snd_ctl_open+0x14f/0x5a0 [ 52.328976][ T6132] snd_ctl_open+0x14f/0x5a0 [ 52.328989][ T6132] ? __pfx_snd_ctl_open+0x10/0x10 [ 52.329002][ T6132] snd_open+0x201/0x450 [ 52.329018][ T6132] ? __pfx_snd_open+0x10/0x10 [ 52.329033][ T6132] chrdev_open+0x234/0x6a0 [ 52.329046][ T6132] ? __pfx_chrdev_open+0x10/0x10 [ 52.329058][ T6132] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 52.329076][ T6132] do_dentry_open+0x674/0x1470 [ 52.329086][ T6132] ? __pfx_chrdev_open+0x10/0x10 [ 52.329101][ T6132] vfs_open_consume+0xcc/0x460 [ 52.329116][ T6132] path_openat+0x1547/0x23f0 [ 52.329131][ T6132] ? __pfx_path_openat+0x10/0x10 [ 52.329146][ T6132] do_file_open+0x20e/0x430 [ 52.329160][ T6132] ? __pfx_do_file_open+0x10/0x10 [ 52.329181][ T6132] ? _raw_spin_unlock+0x28/0x50 [ 52.329198][ T6132] ? alloc_fd+0x471/0x7a0 [ 52.329214][ T6132] do_sys_openat2+0x163/0x1d0 [ 52.329242][ T6132] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.329257][ T6132] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 52.329272][ T6132] __x64_sys_openat+0x12d/0x210 [ 52.329286][ T6132] ? __pfx___x64_sys_openat+0x10/0x10 [ 52.329307][ T6132] do_syscall_64+0x123/0x790 [ 52.329319][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.329330][ T6132] RIP: 0033:0x7f717c55fd8e [ 52.329341][ T6132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.329351][ T6132] RSP: 002b:00007f717d49cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.329361][ T6132] RAX: ffffffffffffffda RBX: 00007f717d49d6c0 RCX: 00007f717c55fd8e [ 52.329368][ T6132] RDX: 0000000000000000 RSI: 00007f717d49cc00 RDI: ffffffffffffff9c [ 52.329374][ T6132] RBP: 00007f717d49cc00 R08: 0000000000000000 R09: 0000000000000000 [ 52.329380][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 52.329385][ T6132] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffeabd0fa18 [ 52.329401][ T6132] [ 52.391041][ T6139] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.70:6139 [ 52.476338][ T6150] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 52.540530][ T6160] Set syz0 is full, maxelem 2 reached [ 52.658609][ T6169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6169 comm=syz.3.81 [ 52.665077][ T5799] Bluetooth: hci1: command tx timeout [ 52.665105][ T5799] Bluetooth: hci2: command tx timeout [ 52.674190][ T5799] Bluetooth: hci3: command tx timeout [ 52.692598][ T6175] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 52.702265][ T6175] bond0: entered promiscuous mode [ 52.702508][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.709309][ T6175] bond0: entered allmulticast mode [ 52.715809][ T5484] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 52.722305][ T6175] bond0: (slave bridge2): making interface the new active one [ 52.722325][ T6175] bridge2: entered promiscuous mode [ 52.722486][ T6175] bridge2: entered allmulticast mode [ 52.723978][ T6175] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 52.726509][ T6150] device-mapper: table: 248:0: raid: Bogus data_offset value (-EINVAL) [ 52.726528][ T6150] device-mapper: ioctl: error adding target to table [ 52.795946][ T6182] gfs2: not a GFS2 filesystem [ 52.807128][ T5831] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.823162][ T6186] fuse: Bad value for 'fd' [ 52.826194][ T5831] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.826255][ T5831] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.826273][ T5831] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.875003][ T5484] usb 7-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 52.878144][ T5484] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.883012][ T5484] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 52.883032][ T5484] usb 7-1: Product: syz [ 52.883043][ T5484] usb 7-1: Manufacturer: syz [ 52.883054][ T5484] usb 7-1: SerialNumber: syz [ 52.889506][ T5484] usb 7-1: config 0 descriptor?? [ 52.893801][ T5484] keyspan 7-1:0.0: Keyspan 4 port adapter converter detected [ 52.893928][ T5484] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 52.893956][ T5484] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 88 [ 52.896174][ T5484] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 52.900081][ T5484] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 52.902059][ T5484] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 52.903730][ T5484] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 52.906708][ T5484] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 52.908958][ T5484] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 52.909637][ T5484] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 52.910865][ T5484] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 53.026865][ T6212] fuse: Bad value for 'fd' [ 53.048522][ T6217] process 'syz.0.100' launched './file1' with NULL argv: empty string added [ 53.112469][ T6223] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 53.114214][ T6223] macsec0: entered promiscuous mode [ 53.114337][ T6223] macsec0: entered allmulticast mode [ 53.114344][ T6223] veth1_macvtap: entered allmulticast mode [ 53.222603][ T2331] usb 7-1: USB disconnect, device number 2 [ 53.230580][ T2331] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 53.233223][ T2331] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 53.236170][ T2331] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 53.237388][ T2331] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 53.237733][ T2331] keyspan 7-1:0.0: device disconnected [ 53.281215][ T6239] fuse: Bad value for 'fd' [ 53.416023][ T5871] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 53.427271][ T6258] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 53.436943][ T6258] bond1: entered promiscuous mode [ 53.437435][ T6258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.440952][ T6258] bond1: entered allmulticast mode [ 53.453862][ T6258] bond1: (slave bridge3): making interface the new active one [ 53.453875][ T6258] bridge3: entered promiscuous mode [ 53.453966][ T6258] bridge3: entered allmulticast mode [ 53.457462][ T6258] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 53.494294][ T6261] FAULT_INJECTION: forcing a failure. [ 53.494294][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 53.494313][ T6261] CPU: 2 UID: 0 PID: 6261 Comm: syz.3.117 Not tainted syzkaller #0 PREEMPT(full) [ 53.494325][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.494331][ T6261] Call Trace: [ 53.494335][ T6261] [ 53.494340][ T6261] dump_stack_lvl+0x100/0x190 [ 53.494362][ T6261] should_fail_ex.cold+0x5/0xa [ 53.494379][ T6261] should_failslab+0xc2/0x120 [ 53.494391][ T6261] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 53.494408][ T6261] ? __alloc_skb+0x140/0x710 [ 53.494429][ T6261] __alloc_skb+0x140/0x710 [ 53.494439][ T6261] ? __alloc_skb+0x5b7/0x710 [ 53.494451][ T6261] ? __pfx___alloc_skb+0x10/0x10 [ 53.494466][ T6261] inet_netconf_notify_devconf+0x9d/0x170 [ 53.494480][ T6261] __devinet_sysctl_register+0x227/0x360 [ 53.494493][ T6261] ? __kasan_kmalloc+0xaa/0xb0 [ 53.494504][ T6261] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 53.494518][ T6261] ? __asan_memcpy+0x3c/0x60 [ 53.494535][ T6261] devinet_init_net+0x303/0x8d0 [ 53.494547][ T6261] ? __pfx_arp_net_init+0x10/0x10 [ 53.494558][ T6261] ? __pfx_devinet_init_net+0x10/0x10 [ 53.494568][ T6261] ops_init+0x1e2/0x5f0 [ 53.494582][ T6261] setup_net+0x118/0x3a0 [ 53.494594][ T6261] ? __pfx_setup_net+0x10/0x10 [ 53.494607][ T6261] ? bpf_lsm_namespace_init+0x9/0x10 [ 53.494621][ T6261] copy_net_ns+0x340/0x7a0 [ 53.494635][ T6261] create_new_namespaces+0x3ea/0xac0 [ 53.494653][ T6261] unshare_nsproxy_namespaces+0xf6/0x210 [ 53.494669][ T6261] ksys_unshare+0x44f/0x980 [ 53.494682][ T6261] ? __pfx_ksys_unshare+0x10/0x10 [ 53.494702][ T6261] __x64_sys_unshare+0x31/0x40 [ 53.494714][ T6261] do_syscall_64+0x123/0x790 [ 53.494727][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.494737][ T6261] RIP: 0033:0x7f3ae279f559 [ 53.494746][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.494755][ T6261] RSP: 002b:00007f3ae3668028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 53.494766][ T6261] RAX: ffffffffffffffda RBX: 00007f3ae2a25fa0 RCX: 00007f3ae279f559 [ 53.494773][ T6261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 53.494779][ T6261] RBP: 00007f3ae2836b50 R08: 0000000000000000 R09: 0000000000000000 [ 53.494784][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.494790][ T6261] R13: 00007f3ae2a26038 R14: 00007f3ae2a25fa0 R15: 00007fffef260118 [ 53.494805][ T6261] [ 53.504359][ T6261] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.671596][ T6278] capability: warning: `syz.1.124' uses deprecated v2 capabilities in a way that may be insecure [ 53.675547][ T5871] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 53.750784][ T6284] program syz.1.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.871293][ T6298] netlink: 'syz.2.134': attribute type 28 has an invalid length. [ 53.871306][ T6298] netlink: 'syz.2.134': attribute type 3 has an invalid length. [ 53.914398][ T6302] netlink: 'syz.3.136': attribute type 1 has an invalid length. [ 53.922724][ T6302] bond1: entered promiscuous mode [ 53.922926][ T6302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.927225][ T6302] bond1: entered allmulticast mode [ 53.935839][ T6302] bond1: (slave bridge1): making interface the new active one [ 53.935858][ T6302] bridge1: entered promiscuous mode [ 53.935987][ T6302] bridge1: entered allmulticast mode [ 53.937063][ T6302] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 53.979264][ T6308] bridge_slave_0: left allmulticast mode [ 53.979280][ T6308] bridge_slave_0: left promiscuous mode [ 53.979376][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.988407][ T6308] bridge_slave_1: left allmulticast mode [ 53.988430][ T6308] bridge_slave_1: left promiscuous mode [ 53.988651][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.998781][ T6308] bond0: (slave bond_slave_0): Releasing backup interface [ 54.001810][ T6308] bond0: (slave bond_slave_1): Releasing backup interface [ 54.004559][ T5871] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 54.015737][ T6308] team0: Port device team_slave_0 removed [ 54.019728][ T6308] team0: Port device team_slave_1 removed [ 54.020358][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.020374][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.022016][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.022031][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.023508][ T6308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.037665][ T6308] team0: Port device xfrm0 added [ 54.099630][ T6319] __nla_validate_parse: 17 callbacks suppressed [ 54.099650][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 54.099745][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 54.134535][ T5871] usb 6-1: device descriptor read/64, error -71 [ 54.185989][ T855] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 54.231799][ T6252] ceph: No mds server is up or the cluster is laggy [ 54.239774][ T6339] team0: Port device xfrm0 removed [ 54.240247][ T6339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.339856][ T6356] netlink: 'syz.3.155': attribute type 1 has an invalid length. [ 54.348890][ T6356] bond2: entered promiscuous mode [ 54.349300][ T6356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.355954][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.155'. [ 54.356058][ T6356] bond2: entered allmulticast mode [ 54.370585][ T6356] bond2: (slave bridge2): making interface the new active one [ 54.370605][ T6356] bridge2: entered promiscuous mode [ 54.370745][ T6356] bridge2: entered allmulticast mode [ 54.372022][ T6356] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 54.394285][ T5871] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 54.473700][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 54.473722][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 54.533325][ T6374] FAULT_INJECTION: forcing a failure. [ 54.533325][ T6374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.533358][ T6374] CPU: 1 UID: 0 PID: 6374 Comm: syz.2.162 Not tainted syzkaller #0 PREEMPT(full) [ 54.533370][ T6374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.533375][ T6374] Call Trace: [ 54.533390][ T6374] [ 54.533394][ T6374] dump_stack_lvl+0x100/0x190 [ 54.533442][ T6374] should_fail_ex.cold+0x5/0xa [ 54.533466][ T6374] _copy_from_user+0x2e/0xd0 [ 54.533518][ T6374] copy_msghdr_from_user+0x9f/0x4c0 [ 54.533564][ T6374] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 54.533581][ T6374] ? _kstrtoull+0x144/0x200 [ 54.533595][ T6374] ? __pfx__kstrtoull+0x10/0x10 [ 54.533611][ T6374] ___sys_sendmsg+0x106/0x1e0 [ 54.533627][ T6374] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.533648][ T6374] ? __fget_files+0x34/0x3d0 [ 54.533684][ T6374] __sys_sendmmsg+0x20c/0x440 [ 54.533697][ T6374] ? __pfx___sys_sendmmsg+0x10/0x10 [ 54.533708][ T6374] ? ksys_write+0x190/0x250 [ 54.533728][ T6374] ? fput+0x7c/0x100 [ 54.533740][ T6374] ? ksys_write+0x1ac/0x250 [ 54.533749][ T6374] ? __pfx_ksys_write+0x10/0x10 [ 54.533761][ T6374] __x64_sys_sendmmsg+0x9c/0x100 [ 54.533772][ T6374] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.533827][ T6374] do_syscall_64+0x123/0x790 [ 54.533840][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.533850][ T6374] RIP: 0033:0x7f762339f559 [ 54.533859][ T6374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.533868][ T6374] RSP: 002b:00007f76242ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.533891][ T6374] RAX: ffffffffffffffda RBX: 00007f7623625fa0 RCX: 00007f762339f559 [ 54.533897][ T6374] RDX: 00000000000002e9 RSI: 0000200000000300 RDI: 0000000000000003 [ 54.533903][ T6374] RBP: 00007f76242ad090 R08: 0000000000000000 R09: 0000000000000000 [ 54.533908][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.533914][ T6374] R13: 00007f7623626038 R14: 00007f7623625fa0 R15: 00007ffdbec5fb58 [ 54.533928][ T6374] [ 54.544263][ T5871] usb 6-1: device descriptor read/64, error -71 [ 54.656323][ T5871] usb usb6-port1: attempt power cycle [ 54.734090][ T6389] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.744175][ T5799] Bluetooth: hci1: command tx timeout [ 54.744202][ T5799] Bluetooth: hci2: command tx timeout [ 54.925598][ T6407] bond1: entered promiscuous mode [ 54.925942][ T6407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.931713][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.176'. [ 54.931816][ T6407] bond1: entered allmulticast mode [ 54.949098][ T6407] bond1: (slave bridge1): making interface the new active one [ 54.949112][ T6407] bridge1: entered promiscuous mode [ 54.949189][ T6407] bridge1: entered allmulticast mode [ 54.949979][ T6407] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 54.983391][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 54.983413][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 54.994122][ T5871] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 55.009557][ T6420] FAULT_INJECTION: forcing a failure. [ 55.009557][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 55.009574][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.3.181 Not tainted syzkaller #0 PREEMPT(full) [ 55.009585][ T6420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.009591][ T6420] Call Trace: [ 55.009595][ T6420] [ 55.009599][ T6420] dump_stack_lvl+0x100/0x190 [ 55.009620][ T6420] should_fail_ex.cold+0x5/0xa [ 55.009636][ T6420] should_failslab+0xc2/0x120 [ 55.009649][ T6420] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 55.009667][ T6420] ? __alloc_skb+0x140/0x710 [ 55.009699][ T6420] __alloc_skb+0x140/0x710 [ 55.009711][ T6420] ? __alloc_skb+0x5b7/0x710 [ 55.009722][ T6420] ? __pfx___alloc_skb+0x10/0x10 [ 55.009736][ T6420] __ip6_append_data+0x3482/0x4b30 [ 55.009779][ T6420] ? __pfx_raw6_getfrag+0x10/0x10 [ 55.009798][ T6420] ? __pfx___ip6_append_data+0x10/0x10 [ 55.009814][ T6420] ? ip6_dst_mtu_maybe_forward.constprop.0+0x259/0x550 [ 55.009831][ T6420] ? __pfx_ip6_mtu+0x10/0x10 [ 55.009844][ T6420] ? ip6_setup_cork+0x619/0x15b0 [ 55.009855][ T6420] ip6_append_data+0x10b/0x410 [ 55.009866][ T6420] ? __pfx_raw6_getfrag+0x10/0x10 [ 55.009881][ T6420] rawv6_sendmsg+0x169c/0x4510 [ 55.009897][ T6420] ? find_held_lock+0x2b/0x80 [ 55.009913][ T6420] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 55.009932][ T6420] ? __lock_acquire+0x5c0/0x1f40 [ 55.009951][ T6420] ? __pfx_sock_has_perm+0x10/0x10 [ 55.009975][ T6420] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 55.009991][ T6420] ? inet_sendmsg+0x11c/0x140 [ 55.010003][ T6420] inet_sendmsg+0x11c/0x140 [ 55.010016][ T6420] ____sys_sendmsg+0xa23/0xc30 [ 55.010029][ T6420] ? __pfx_inet_sendmsg+0x10/0x10 [ 55.010043][ T6420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 55.010059][ T6420] ? _kstrtoull+0x144/0x200 [ 55.010073][ T6420] ? __pfx__kstrtoull+0x10/0x10 [ 55.010090][ T6420] ___sys_sendmsg+0x190/0x1e0 [ 55.010106][ T6420] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.010126][ T6420] ? __fget_files+0x34/0x3d0 [ 55.010149][ T6420] __sys_sendmmsg+0x20c/0x440 [ 55.010162][ T6420] ? __pfx___sys_sendmmsg+0x10/0x10 [ 55.010173][ T6420] ? ksys_write+0x190/0x250 [ 55.010193][ T6420] ? fput+0x7c/0x100 [ 55.010205][ T6420] ? ksys_write+0x1ac/0x250 [ 55.010214][ T6420] ? __pfx_ksys_write+0x10/0x10 [ 55.010226][ T6420] __x64_sys_sendmmsg+0x9c/0x100 [ 55.010237][ T6420] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.010248][ T6420] do_syscall_64+0x123/0x790 [ 55.010260][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.010270][ T6420] RIP: 0033:0x7f3ae279f559 [ 55.010279][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.010288][ T6420] RSP: 002b:00007f3ae3668028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 55.010299][ T6420] RAX: ffffffffffffffda RBX: 00007f3ae2a25fa0 RCX: 00007f3ae279f559 [ 55.010305][ T6420] RDX: 00000000000002e9 RSI: 0000200000000300 RDI: 0000000000000003 [ 55.010311][ T6420] RBP: 00007f3ae3668090 R08: 0000000000000000 R09: 0000000000000000 [ 55.010316][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.010322][ T6420] R13: 00007f3ae2a26038 R14: 00007f3ae2a25fa0 R15: 00007fffef260118 [ 55.010336][ T6420] [ 55.016183][ T5871] usb 6-1: device descriptor read/8, error -71 [ 55.016810][ T6423] Zero length message leads to an empty skb [ 55.159859][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 55.159879][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 55.284454][ T5871] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 55.314627][ T5871] usb 6-1: device descriptor read/8, error -71 [ 55.435967][ T5871] usb usb6-port1: unable to enumerate USB device [ 55.701357][ T6464] bond1: entered promiscuous mode [ 55.701554][ T6464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.706452][ T6464] bond1: entered allmulticast mode [ 55.715514][ T6464] bond1: (slave bridge1): making interface the new active one [ 55.715526][ T6464] bridge1: entered promiscuous mode [ 55.715597][ T6464] bridge1: entered allmulticast mode [ 55.716304][ T6464] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 55.831504][ T6470] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 55.831522][ T6470] bond2: entered allmulticast mode [ 56.395108][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.407935][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.407971][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.407997][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.465984][ T42] kauditd_printk_skb: 85 callbacks suppressed [ 56.466002][ T42] audit: type=1400 audit(1793537767.643:351): avc: denied { bind } for pid=6486 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.586643][ T42] audit: type=1400 audit(1793537767.763:352): avc: denied { read write } for pid=6496 comm="syz.2.211" name="video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.586805][ T42] audit: type=1400 audit(1793537767.763:353): avc: denied { open } for pid=6496 comm="syz.2.211" path="/dev/video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.834488][ T6514] validate_nla: 3 callbacks suppressed [ 56.834500][ T6514] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 56.843835][ T6514] bond2: entered promiscuous mode [ 56.844130][ T6514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.848104][ T6514] bond2: entered allmulticast mode [ 56.856468][ T6514] bond2: (slave bridge4): making interface the new active one [ 56.856485][ T6514] bridge4: entered promiscuous mode [ 56.856594][ T6514] bridge4: entered allmulticast mode [ 56.857544][ T6514] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 56.889379][ T42] audit: type=1400 audit(1793537768.063:354): avc: denied { setopt } for pid=6516 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 56.889906][ T42] audit: type=1400 audit(1793537768.063:355): avc: denied { create } for pid=6516 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.891152][ T42] audit: type=1400 audit(1793537768.063:356): avc: denied { ioctl } for pid=6516 comm="syz.1.219" path="socket:[13389]" dev="sockfs" ino=13389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.134117][ T855] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 57.295389][ T855] usb 6-1: not running at top speed; connect to a high speed hub [ 57.295420][ T855] usb 6-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 57.296594][ T855] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 57.296617][ T855] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64 [ 57.298514][ T855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.298531][ T855] usb 6-1: Product: syz [ 57.298542][ T855] usb 6-1: Manufacturer: syz [ 57.298553][ T855] usb 6-1: SerialNumber: syz [ 57.302638][ T6517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.306345][ T855] oti6858 6-1:1.0: oti6858 converter detected [ 57.310207][ T855] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 57.543563][ T42] audit: type=1400 audit(1793537768.713:357): avc: denied { create } for pid=6522 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.725165][ C1] usb 6-1: oti6858_read_int_callback(): usb_submit_urb() failed with error -1 [ 57.728517][ T855] usb 6-1: USB disconnect, device number 6 [ 57.739742][ T855] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 57.740364][ T855] oti6858 6-1:1.0: device disconnected [ 57.779175][ T6553] Bluetooth: MGMT ver 1.23 [ 57.867272][ T6563] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 57.867305][ T6563] overlayfs: overlapping lowerdir path [ 57.893973][ T6565] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 57.912268][ T6565] bond3: entered promiscuous mode [ 57.912618][ T6565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 57.919408][ T6565] bond3: entered allmulticast mode [ 57.930428][ T6565] bond3: (slave bridge3): making interface the new active one [ 57.930446][ T6565] bridge3: entered promiscuous mode [ 57.930578][ T6565] bridge3: entered allmulticast mode [ 57.931723][ T6565] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 58.019445][ T42] audit: type=1326 audit(1793537769.193:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.3.241" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ae279f559 code=0x0 [ 58.094066][ T5484] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 58.100739][ T63] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.124169][ T42] audit: type=1400 audit(1793537769.303:359): avc: denied { getopt } for pid=6569 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.125390][ T6574] Bluetooth: MGMT ver 1.23 [ 58.126801][ T42] audit: type=1400 audit(1793537769.303:360): avc: denied { write } for pid=6572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.245284][ T5484] usb 7-1: New USB device found: idVendor=10cf, idProduct=8061, bcdDevice=ac.7f [ 58.246038][ T5484] usb 7-1: config 7 has an invalid interface number: 199 but max is 0 [ 58.246051][ T5484] usb 7-1: config 7 has no interface number 0 [ 58.246068][ T5484] usb 7-1: config 7 interface 199 altsetting 0 endpoint 0xD has invalid maxpacket 1080, setting to 8 [ 58.248149][ T5484] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.248160][ T5484] usb 7-1: Product: 聾鴃쎉㽺쵦뒈뜣岉㹴뀗䜚咽䛅➖熿ퟵᩳꜾ寮譥䜟ᵊ㩻挍⾨ᄻ冄ㅥ灓蘕沃젙媺䝘ౠ՞瓡渒糱鈼溯퍁痈躰襏⦑領秅޹ಌ⇯頡ᖼ䪆벙堓洆ד鮃놣습扏쯍업䢰΢६搝軄㎭岖∩풧⮲熰疏憚麣ﴤ킪黔ủ擅쏇듹경ꮻ⻥麱拵熳ᔙ쉞啘䒧蕮맚ˋ㏵𣏕 [ 58.248175][ T5484] usb 7-1: Manufacturer: 㐁 [ 58.248182][ T5484] usb 7-1: SerialNumber: 쎤刨䙂뛅궃녔ޛ郧㝼庽瓗싏࿂镐핼ॐႡ [ 58.252648][ T6561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.364172][ T63] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.443529][ T6584] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 58.461333][ T5484] vmk80xx 7-1:7.199: driver 'vmk80xx' failed to auto-configure device. [ 58.467430][ T5484] usb 7-1: USB disconnect, device number 3 [ 58.492874][ T6587] FAULT_INJECTION: forcing a failure. [ 58.492874][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 58.492915][ T6587] CPU: 3 UID: 0 PID: 6587 Comm: syz.1.245 Not tainted syzkaller #0 PREEMPT(full) [ 58.492936][ T6587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.492946][ T6587] Call Trace: [ 58.492958][ T6587] [ 58.492965][ T6587] dump_stack_lvl+0x100/0x190 [ 58.493034][ T6587] should_fail_ex.cold+0x5/0xa [ 58.493066][ T6587] should_failslab+0xc2/0x120 [ 58.493112][ T6587] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 58.493142][ T6587] ? __alloc_skb+0x140/0x710 [ 58.493204][ T6587] __alloc_skb+0x140/0x710 [ 58.493220][ T6587] ? __alloc_skb+0x5b7/0x710 [ 58.493238][ T6587] ? __pfx___alloc_skb+0x10/0x10 [ 58.493263][ T6587] __ip6_append_data+0x3482/0x4b30 [ 58.493341][ T6587] ? __pfx_raw6_getfrag+0x10/0x10 [ 58.493375][ T6587] ? __pfx___ip6_append_data+0x10/0x10 [ 58.493436][ T6587] ? ip6_dst_mtu_maybe_forward.constprop.0+0x259/0x550 [ 58.493465][ T6587] ? __pfx_ip6_mtu+0x10/0x10 [ 58.493488][ T6587] ? ip6_setup_cork+0x619/0x15b0 [ 58.493508][ T6587] ip6_append_data+0x10b/0x410 [ 58.493525][ T6587] ? __pfx_raw6_getfrag+0x10/0x10 [ 58.493552][ T6587] rawv6_sendmsg+0x169c/0x4510 [ 58.493577][ T6587] ? find_held_lock+0x2b/0x80 [ 58.493607][ T6587] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 58.493640][ T6587] ? __lock_acquire+0x5c0/0x1f40 [ 58.493670][ T6587] ? __pfx_sock_has_perm+0x10/0x10 [ 58.493737][ T6587] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 58.493762][ T6587] ? inet_sendmsg+0x11c/0x140 [ 58.493782][ T6587] inet_sendmsg+0x11c/0x140 [ 58.493803][ T6587] ____sys_sendmsg+0xa23/0xc30 [ 58.493825][ T6587] ? __pfx_inet_sendmsg+0x10/0x10 [ 58.493848][ T6587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.493876][ T6587] ? rcu_is_watching+0x13/0xc0 [ 58.493894][ T6587] ? ___sys_sendmsg+0x19d/0x1e0 [ 58.493914][ T6587] ? kfree+0x1e5/0x6d0 [ 58.493939][ T6587] ___sys_sendmsg+0x190/0x1e0 [ 58.493965][ T6587] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.494015][ T6587] ? __fget_files+0x34/0x3d0 [ 58.494051][ T6587] ? __pfx___might_resched+0x10/0x10 [ 58.494077][ T6587] __sys_sendmmsg+0x20c/0x440 [ 58.494100][ T6587] ? __pfx___sys_sendmmsg+0x10/0x10 [ 58.494120][ T6587] ? ksys_write+0x190/0x250 [ 58.494159][ T6587] ? fput+0x7c/0x100 [ 58.494180][ T6587] ? ksys_write+0x1ac/0x250 [ 58.494195][ T6587] ? __pfx_ksys_write+0x10/0x10 [ 58.494216][ T6587] __x64_sys_sendmmsg+0x9c/0x100 [ 58.494235][ T6587] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.494281][ T6587] do_syscall_64+0x123/0x790 [ 58.494302][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.494320][ T6587] RIP: 0033:0x7f717c59f559 [ 58.494335][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.494350][ T6587] RSP: 002b:00007f717d49d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 58.494378][ T6587] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59f559 [ 58.494387][ T6587] RDX: 00000000000002e9 RSI: 0000200000000300 RDI: 0000000000000003 [ 58.494397][ T6587] RBP: 00007f717d49d090 R08: 0000000000000000 R09: 0000000000000000 [ 58.494406][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.494418][ T6587] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffeabd0fa18 [ 58.494441][ T6587] [ 58.516569][ T63] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 58.517485][ T63] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.517499][ T63] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 58.517510][ T63] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.519209][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 58.519221][ T63] usb 8-1: Product: syz [ 58.519228][ T63] usb 8-1: Manufacturer: syz [ 58.519234][ T63] usb 8-1: SerialNumber: syz [ 58.587438][ T6595] FAULT_INJECTION: forcing a failure. [ 58.587438][ T6595] name failslab, interval 1, probability 0, space 0, times 0 [ 58.587464][ T6595] CPU: 2 UID: 0 PID: 6595 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT(full) [ 58.587484][ T6595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.587494][ T6595] Call Trace: [ 58.587507][ T6595] [ 58.587515][ T6595] dump_stack_lvl+0x100/0x190 [ 58.587548][ T6595] should_fail_ex.cold+0x5/0xa [ 58.587574][ T6595] should_failslab+0xc2/0x120 [ 58.587595][ T6595] __kmalloc_noprof+0xfc/0x840 [ 58.587622][ T6595] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 58.587672][ T6595] kernfs_fop_write_iter+0x26a/0x5f0 [ 58.587695][ T6595] vfs_write+0x6af/0x1050 [ 58.587712][ T6595] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 58.587735][ T6595] ? __pfx_vfs_write+0x10/0x10 [ 58.587749][ T6595] ? find_held_lock+0x2b/0x80 [ 58.587784][ T6595] ksys_write+0x12a/0x250 [ 58.587801][ T6595] ? __pfx_ksys_write+0x10/0x10 [ 58.587825][ T6595] do_syscall_64+0x123/0x790 [ 58.587847][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.587863][ T6595] RIP: 0033:0x7f986719f559 [ 58.587879][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.587894][ T6595] RSP: 002b:00007f98653f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.587912][ T6595] RAX: ffffffffffffffda RBX: 00007f9867425fa0 RCX: 00007f986719f559 [ 58.587924][ T6595] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 58.587934][ T6595] RBP: 00007f98653f6090 R08: 0000000000000000 R09: 0000000000000000 [ 58.587944][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.587954][ T6595] R13: 00007f9867426038 R14: 00007f9867425fa0 R15: 00007ffef17bf898 [ 58.587998][ T6595] [ 58.730531][ T63] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 58.911643][ T6625] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 58.920661][ T6625] bond3: entered promiscuous mode [ 58.920843][ T6625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 58.925943][ T6625] bond3: entered allmulticast mode [ 58.938358][ T6625] bond3: (slave bridge6): making interface the new active one [ 58.938372][ T6625] bridge6: entered promiscuous mode [ 58.938445][ T6625] bridge6: entered allmulticast mode [ 58.938922][ T6625] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 58.981364][ T5871] usb 8-1: USB disconnect, device number 2 [ 58.989148][ T6574] usblp0: removed qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 59.183679][ T6644] __nla_validate_parse: 13 callbacks suppressed [ 59.183698][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 59.184342][ T855] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.284962][ T6647] FAULT_INJECTION: forcing a failure. [ 59.284962][ T6647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.284981][ T6647] CPU: 3 UID: 0 PID: 6647 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT(full) [ 59.284992][ T6647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.284998][ T6647] Call Trace: [ 59.285002][ T6647] [ 59.285006][ T6647] dump_stack_lvl+0x100/0x190 [ 59.285027][ T6647] should_fail_ex.cold+0x5/0xa [ 59.285044][ T6647] _copy_from_user+0x2e/0xd0 [ 59.285057][ T6647] copy_msghdr_from_user+0x9f/0x4c0 [ 59.285074][ T6647] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 59.285091][ T6647] ? rcu_is_watching+0x13/0xc0 [ 59.285102][ T6647] ? ___sys_sendmsg+0x19d/0x1e0 [ 59.285115][ T6647] ? kfree+0x1e5/0x6d0 [ 59.285130][ T6647] ___sys_sendmsg+0x106/0x1e0 [ 59.285146][ T6647] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.285166][ T6647] ? __fget_files+0x34/0x3d0 [ 59.285184][ T6647] ? __pfx___might_resched+0x10/0x10 [ 59.285200][ T6647] __sys_sendmmsg+0x20c/0x440 [ 59.285213][ T6647] ? __pfx___sys_sendmmsg+0x10/0x10 [ 59.285224][ T6647] ? ksys_write+0x190/0x250 [ 59.285244][ T6647] ? fput+0x7c/0x100 [ 59.285256][ T6647] ? ksys_write+0x1ac/0x250 [ 59.285265][ T6647] ? __pfx_ksys_write+0x10/0x10 [ 59.285277][ T6647] __x64_sys_sendmmsg+0x9c/0x100 [ 59.285288][ T6647] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.285299][ T6647] do_syscall_64+0x123/0x790 [ 59.285311][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.285321][ T6647] RIP: 0033:0x7f762339f559 [ 59.285330][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.285340][ T6647] RSP: 002b:00007f76242ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.285350][ T6647] RAX: ffffffffffffffda RBX: 00007f7623625fa0 RCX: 00007f762339f559 [ 59.285357][ T6647] RDX: 00000000000002e9 RSI: 0000200000000300 RDI: 0000000000000003 [ 59.285363][ T6647] RBP: 00007f76242ad090 R08: 0000000000000000 R09: 0000000000000000 [ 59.285368][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.285376][ T6647] R13: 00007f7623626038 R14: 00007f7623625fa0 R15: 00007ffdbec5fb58 [ 59.285390][ T6647] [ 59.345194][ T855] usb 5-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 59.346279][ T855] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 59.346303][ T855] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 59.346330][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.350753][ T6628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.358763][ T855] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 59.359525][ T6651] FAULT_INJECTION: forcing a failure. [ 59.359525][ T6651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.359540][ T6651] CPU: 3 UID: 0 PID: 6651 Comm: syz.2.272 Not tainted syzkaller #0 PREEMPT(full) [ 59.359552][ T6651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.359558][ T6651] Call Trace: [ 59.359561][ T6651] [ 59.359565][ T6651] dump_stack_lvl+0x100/0x190 [ 59.359586][ T6651] should_fail_ex.cold+0x5/0xa [ 59.359602][ T6651] _copy_from_iter+0x1f4/0x16c0 [ 59.359618][ T6651] ? __pfx__copy_from_iter+0x10/0x10 [ 59.359629][ T6651] ? trace_kmalloc+0xeb/0x110 [ 59.359640][ T6651] ? __kasan_kmalloc+0xaa/0xb0 [ 59.359650][ T6651] ? __kmalloc_noprof+0x350/0x840 [ 59.359665][ T6651] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 59.359680][ T6651] kernfs_fop_write_iter+0x186/0x5f0 [ 59.359693][ T6651] vfs_write+0x6af/0x1050 [ 59.359703][ T6651] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 59.359716][ T6651] ? __pfx_vfs_write+0x10/0x10 [ 59.359725][ T6651] ? find_held_lock+0x2b/0x80 [ 59.359746][ T6651] ksys_write+0x12a/0x250 [ 59.359755][ T6651] ? __pfx_ksys_write+0x10/0x10 [ 59.359769][ T6651] do_syscall_64+0x123/0x790 [ 59.359781][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.359792][ T6651] RIP: 0033:0x7f762339f559 [ 59.359801][ T6651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.359810][ T6651] RSP: 002b:00007f76242ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.359821][ T6651] RAX: ffffffffffffffda RBX: 00007f7623625fa0 RCX: 00007f762339f559 [ 59.359827][ T6651] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 59.359833][ T6651] RBP: 00007f76242ad090 R08: 0000000000000000 R09: 0000000000000000 [ 59.359838][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.359844][ T6651] R13: 00007f7623626038 R14: 00007f7623625fa0 R15: 00007ffdbec5fb58 [ 59.359858][ T6651] [ 59.559087][ T6628] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.262'. [ 59.565513][ T6676] fuse: Bad value for 'fd' [ 59.592872][ T6680] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 59.603138][ T6680] bond4: entered promiscuous mode [ 59.603416][ T6680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 59.606984][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.286'. [ 59.607021][ T6680] bond4: entered allmulticast mode [ 59.612185][ T9] usb 5-1: USB disconnect, device number 3 [ 59.614409][ T6680] bond4: (slave bridge7): making interface the new active one [ 59.614420][ T6680] bridge7: entered promiscuous mode [ 59.614495][ T6680] bridge7: entered allmulticast mode [ 59.615150][ T6680] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 59.763848][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 59.763881][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 59.835964][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 59.835988][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 59.871812][ T6699] FAULT_INJECTION: forcing a failure. [ 59.871812][ T6699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.871839][ T6699] CPU: 1 UID: 0 PID: 6699 Comm: syz.1.294 Not tainted syzkaller #0 PREEMPT(full) [ 59.871859][ T6699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.871869][ T6699] Call Trace: [ 59.871875][ T6699] [ 59.871882][ T6699] dump_stack_lvl+0x100/0x190 [ 59.871914][ T6699] should_fail_ex.cold+0x5/0xa [ 59.871942][ T6699] _copy_from_user+0x2e/0xd0 [ 59.871964][ T6699] copy_msghdr_from_user+0x9f/0x4c0 [ 59.871989][ T6699] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 59.872018][ T6699] ? rcu_is_watching+0x13/0xc0 [ 59.872037][ T6699] ? ___sys_sendmsg+0x19d/0x1e0 [ 59.872059][ T6699] ? kfree+0x1e5/0x6d0 [ 59.872085][ T6699] ___sys_sendmsg+0x106/0x1e0 [ 59.872111][ T6699] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.872146][ T6699] ? __fget_files+0x34/0x3d0 [ 59.872178][ T6699] ? __pfx___might_resched+0x10/0x10 [ 59.872204][ T6699] __sys_sendmmsg+0x20c/0x440 [ 59.872244][ T6699] ? __pfx___sys_sendmmsg+0x10/0x10 [ 59.872264][ T6699] ? ksys_write+0x190/0x250 [ 59.872309][ T6699] ? fput+0x7c/0x100 [ 59.872333][ T6699] ? ksys_write+0x1ac/0x250 [ 59.872371][ T6699] ? __pfx_ksys_write+0x10/0x10 [ 59.872392][ T6699] __x64_sys_sendmmsg+0x9c/0x100 [ 59.872411][ T6699] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.872429][ T6699] do_syscall_64+0x123/0x790 [ 59.872448][ T6699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.872466][ T6699] RIP: 0033:0x7f717c59f559 [ 59.872485][ T6699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.872501][ T6699] RSP: 002b:00007f717d49d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.872518][ T6699] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59f559 [ 59.872529][ T6699] RDX: 00000000000002e9 RSI: 0000200000000300 RDI: 0000000000000003 [ 59.872539][ T6699] RBP: 00007f717d49d090 R08: 0000000000000000 R09: 0000000000000000 [ 59.872549][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.872558][ T6699] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffeabd0fa18 [ 59.872577][ T6699] [ 59.915136][ T6701] fuse: Bad value for 'fd' [ 59.980067][ T6703] netlink: 76 bytes leftover after parsing attributes in process `syz.1.296'. [ 60.083873][ T6710] FAULT_INJECTION: forcing a failure. [ 60.083873][ T6710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.083892][ T6710] CPU: 3 UID: 0 PID: 6710 Comm: syz.1.299 Not tainted syzkaller #0 PREEMPT(full) [ 60.083904][ T6710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.083910][ T6710] Call Trace: [ 60.083914][ T6710] [ 60.083918][ T6710] dump_stack_lvl+0x100/0x190 [ 60.083940][ T6710] should_fail_ex.cold+0x5/0xa [ 60.083957][ T6710] _copy_to_user+0x32/0xd0 [ 60.083971][ T6710] simple_read_from_buffer+0xcb/0x170 [ 60.083999][ T6710] proc_fail_nth_read+0x1af/0x230 [ 60.084015][ T6710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.084029][ T6710] ? rw_verify_area+0xce/0x6d0 [ 60.084044][ T6710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.084057][ T6710] vfs_read+0x1e4/0xb40 [ 60.084067][ T6710] ? lock_acquire+0x1d1/0x380 [ 60.084081][ T6710] ? __fget_files+0x34/0x3d0 [ 60.084094][ T6710] ? __pfx_vfs_read+0x10/0x10 [ 60.084102][ T6710] ? find_held_lock+0x2b/0x80 [ 60.084113][ T6710] ? __fget_files+0x215/0x3d0 [ 60.084127][ T6710] ? __fget_files+0x21f/0x3d0 [ 60.084143][ T6710] ksys_read+0x12a/0x250 [ 60.084152][ T6710] ? __pfx_ksys_read+0x10/0x10 [ 60.084166][ T6710] do_syscall_64+0x123/0x790 [ 60.084178][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.084189][ T6710] RIP: 0033:0x7f717c55fd8e [ 60.084198][ T6710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.084207][ T6710] RSP: 002b:00007f717d49cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.084218][ T6710] RAX: ffffffffffffffda RBX: 00007f717d49d6c0 RCX: 00007f717c55fd8e [ 60.084224][ T6710] RDX: 000000000000000f RSI: 00007f717d49d0a0 RDI: 0000000000000004 [ 60.084230][ T6710] RBP: 00007f717d49d090 R08: 0000000000000000 R09: 0000000000000000 [ 60.084235][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.084241][ T6710] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffeabd0fa18 [ 60.084255][ T6710] [ 60.205896][ T6723] fuse: Bad value for 'fd' [ 60.416613][ T6745] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 60.426535][ T6745] bond3: entered promiscuous mode [ 60.426881][ T6745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 60.430596][ T6745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'. [ 60.430633][ T6745] bond3: entered allmulticast mode [ 60.439745][ T6745] bond3: (slave bridge2): making interface the new active one [ 60.439756][ T6745] bridge2: entered promiscuous mode [ 60.439851][ T6745] bridge2: entered allmulticast mode [ 60.440733][ T6745] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 60.483107][ T6750] netlink: 80 bytes leftover after parsing attributes in process `syz.0.313'. [ 60.573397][ T6759] ======================================================= [ 60.573397][ T6759] WARNING: The mand mount option has been deprecated and [ 60.573397][ T6759] and is ignored by this kernel. Remove the mand [ 60.573397][ T6759] option from the mount to silence this warning. [ 60.573397][ T6759] ======================================================= [ 60.625827][ T6759] smpboot: CPU 1 is now offline [ 60.671647][ T6759] smpboot: CPU 3 is now offline [ 60.700713][ T6761] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 60.731336][ T6761] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 60.760308][ T6759] nvme nvme0: failed to connect socket: -111 [ 61.015320][ T6796] netlink: 'syz.1.325': attribute type 49 has an invalid length. [ 61.120881][ T6796] netlink: 'syz.1.325': attribute type 2 has an invalid length. [ 61.183800][ T6822] vlan2: entered promiscuous mode [ 61.183821][ T6822] bridge0: entered promiscuous mode [ 61.250195][ T6833] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 61.268156][ T6833] bond5: entered promiscuous mode [ 61.268460][ T6833] 8021q: adding VLAN 0 to HW filter on device bond5 [ 61.272884][ T6833] bond5: entered allmulticast mode [ 61.287208][ T6833] bond5: (slave bridge8): making interface the new active one [ 61.287228][ T6833] bridge8: entered promiscuous mode [ 61.287357][ T6833] bridge8: entered allmulticast mode [ 61.288692][ T6833] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 61.577307][ T6868] FAULT_INJECTION: forcing a failure. [ 61.577307][ T6868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.577333][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.1.343 Not tainted syzkaller #0 PREEMPT(full) [ 61.577352][ T6868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.577362][ T6868] Call Trace: [ 61.577368][ T6868] [ 61.577376][ T6868] dump_stack_lvl+0x100/0x190 [ 61.577409][ T6868] should_fail_ex.cold+0x5/0xa [ 61.577435][ T6868] _copy_from_user+0x2e/0xd0 [ 61.577457][ T6868] copy_msghdr_from_user+0x9f/0x4c0 [ 61.577483][ T6868] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 61.577512][ T6868] ? rcu_is_watching+0x13/0xc0 [ 61.577531][ T6868] ? ___sys_sendmsg+0x19d/0x1e0 [ 61.577553][ T6868] ? kfree+0x1e5/0x6d0 [ 61.577579][ T6868] ___sys_sendmsg+0x106/0x1e0 [ 61.577605][ T6868] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.577641][ T6868] ? __fget_files+0x34/0x3d0 [ 61.577673][ T6868] ? __pfx___might_resched+0x10/0x10 [ 61.577700][ T6868] __sys_sendmmsg+0x20c/0x440 [ 61.577723][ T6868] ? __pfx___sys_sendmmsg+0x10/0x10 [ 61.577742][ T6868] ? ksys_write+0x190/0x250 [ 61.577779][ T6868] ? fput+0x7c/0x100 [ 61.577800][ T6868] ? ksys_write+0x1ac/0x250 [ 61.577817][ T6868] ? __pfx_ksys_write+0x10/0x10 [ 61.577838][ T6868] __x64_sys_sendmmsg+0x9c/0x100 [ 61.577858][ T6868] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.577887][ T6868] do_syscall_64+0x123/0x790 [ 61.577907][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.577930][ T6868] RIP: 0033:0x7f717c59f559 [ 61.577945][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.577960][ T6868] RSP: 002b:00007f717d49d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 61.577979][ T6868] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59f559 [ 61.577990][ T6868] RDX: 00000000000002e9 RSI: 0000200000000300 RDI: 0000000000000003 [ 61.578000][ T6868] RBP: 00007f717d49d090 R08: 0000000000000000 R09: 0000000000000000 [ 61.578011][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.578020][ T6868] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffeabd0fa18 [ 61.578045][ T6868] [ 61.704190][ T5799] Bluetooth: hci4: command 0x1003 tx timeout [ 61.705437][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.715623][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.805095][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 61.805113][ T42] audit: type=1400 audit(1793537772.983:426): avc: denied { write } for pid=6879 comm="syz.2.348" path="socket:[13661]" dev="sockfs" ino=13661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.823793][ T6890] gadgetfs: bound to dummy_udc driver [ 61.865263][ T24] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 61.869677][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.869701][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.878852][ T24] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 61.879006][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 61.879045][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 61.879935][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 61.879986][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 61.890499][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 61.891631][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 61.891682][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 61.899367][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 61.963845][ T42] audit: type=1400 audit(1793537773.133:427): avc: denied { open } for pid=6898 comm="syz.3.356" path="/dev/ttyqb" dev="devtmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 61.970918][ T6884] ip_tables: iptables: counters copy to user failed while replacing table [ 62.085262][ T6914] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 62.093885][ T6914] bond6: entered promiscuous mode [ 62.096215][ T6914] 8021q: adding VLAN 0 to HW filter on device bond6 [ 62.102805][ T6914] bond6: entered allmulticast mode [ 62.119145][ T6914] bond6: (slave bridge9): making interface the new active one [ 62.119168][ T6914] bridge9: entered promiscuous mode [ 62.119301][ T6914] bridge9: entered allmulticast mode [ 62.120585][ T6914] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 62.241394][ T995] usb 5-1: USB disconnect, device number 4 [ 62.248568][ T995] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 62.271686][ T995] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 62.272196][ T995] keyspan 5-1:1.0: device disconnected [ 62.921733][ T42] audit: type=1400 audit(1793537774.093:428): avc: denied { accept } for pid=6936 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.923399][ T6941] FAULT_INJECTION: forcing a failure. [ 62.923399][ T6941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.923423][ T6941] CPU: 0 UID: 0 PID: 6941 Comm: syz.0.366 Not tainted syzkaller #0 PREEMPT(full) [ 62.923442][ T6941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.923452][ T6941] Call Trace: [ 62.923459][ T6941] [ 62.923465][ T6941] dump_stack_lvl+0x100/0x190 [ 62.923498][ T6941] should_fail_ex.cold+0x5/0xa [ 62.923525][ T6941] _copy_from_user+0x2e/0xd0 [ 62.923547][ T6941] copy_msghdr_from_user+0x9f/0x4c0 [ 62.923574][ T6941] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 62.923603][ T6941] ? rcu_is_watching+0x13/0xc0 [ 62.923622][ T6941] ? ___sys_sendmsg+0x19d/0x1e0 [ 62.923643][ T6941] ? kfree+0x1e5/0x6d0 [ 62.923668][ T6941] ___sys_sendmsg+0x106/0x1e0 [ 62.923694][ T6941] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.923729][ T6941] ? __fget_files+0x34/0x3d0 [ 62.923761][ T6941] ? __pfx___might_resched+0x10/0x10 [ 62.923788][ T6941] __sys_sendmmsg+0x20c/0x440 [ 62.923830][ T6941] ? __pfx___sys_sendmmsg+0x10/0x10 [ 62.923849][ T6941] ? ksys_write+0x190/0x250 [ 62.923890][ T6941] ? fput+0x7c/0x100 [ 62.923912][ T6941] ? ksys_write+0x1ac/0x250 [ 62.923929][ T6941] ? __pfx_ksys_write+0x10/0x10 [ 62.923950][ T6941] __x64_sys_sendmmsg+0x9c/0x100 [ 62.923969][ T6941] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.923988][ T6941] do_syscall_64+0x123/0x790 [ 62.924008][ T6941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.924028][ T6941] RIP: 0033:0x7f986719f559 [ 62.924043][ T6941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.924060][ T6941] RSP: 002b:00007f98653f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.924079][ T6941] RAX: ffffffffffffffda RBX: 00007f9867425fa0 RCX: 00007f986719f559 [ 62.924091][ T6941] RDX: 00000000000002e9 RSI: 0000200000000300 RDI: 0000000000000003 [ 62.924101][ T6941] RBP: 00007f98653f6090 R08: 0000000000000000 R09: 0000000000000000 [ 62.924112][ T6941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.924122][ T6941] R13: 00007f9867426038 R14: 00007f9867425fa0 R15: 00007ffef17bf898 [ 62.924146][ T6941] [ 62.968761][ T42] audit: type=1400 audit(1793537774.143:429): avc: denied { mount } for pid=6943 comm="syz.0.367" name="/" dev="rpc_pipefs" ino=14743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 62.989771][ T42] audit: type=1400 audit(1793537774.163:430): avc: denied { unmount } for pid=5784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 63.153297][ T6955] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.156319][ T42] audit: type=1400 audit(1793537774.333:431): avc: denied { getopt } for pid=6954 comm="syz.0.372" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.182089][ T42] audit: type=1400 audit(1793537774.353:432): avc: denied { connect } for pid=6954 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.182814][ T42] audit: type=1400 audit(1793537774.353:433): avc: denied { setopt } for pid=6954 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.183166][ T42] audit: type=1400 audit(1793537774.353:434): avc: denied { bind } for pid=6954 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.189068][ T42] audit: type=1400 audit(1793537774.363:435): avc: denied { write } for pid=6954 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.280604][ T6923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.390403][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 65.519777][ T6984] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 65.528701][ T6984] bond7: entered promiscuous mode [ 65.528931][ T6984] 8021q: adding VLAN 0 to HW filter on device bond7 [ 65.539875][ T6984] __nla_validate_parse: 11 callbacks suppressed [ 65.539886][ T6984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.382'. [ 65.539953][ T6984] bond7: entered allmulticast mode [ 65.545278][ T24] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 65.545301][ T24] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 65.545313][ T24] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 65.545325][ T24] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 65.545341][ T24] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 65.545353][ T24] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 65.545364][ T24] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 65.545376][ T24] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 65.545387][ T24] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 65.545398][ T24] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 65.548563][ T24] logitech-hidpp-device 0003:046D:C082.0002: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 65.555722][ T6984] bond7: (slave bridge11): making interface the new active one [ 65.555734][ T6984] bridge11: entered promiscuous mode [ 65.555845][ T6984] bridge11: entered allmulticast mode [ 65.562647][ T6984] bond7: (slave bridge11): Enslaving as an active interface with an up link [ 65.580892][ T6988] fido_id[6988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.598149][ T6990] netlink: 56 bytes leftover after parsing attributes in process `syz.1.384'. [ 65.611099][ T6992] FAULT_INJECTION: forcing a failure. [ 65.611099][ T6992] name failslab, interval 1, probability 0, space 0, times 0 [ 65.611130][ T6992] CPU: 2 UID: 0 PID: 6992 Comm: syz.3.385 Not tainted syzkaller #0 PREEMPT(full) [ 65.611142][ T6992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.611148][ T6992] Call Trace: [ 65.611156][ T6992] [ 65.611160][ T6992] dump_stack_lvl+0x100/0x190 [ 65.611208][ T6992] should_fail_ex.cold+0x5/0xa [ 65.611233][ T6992] should_failslab+0xc2/0x120 [ 65.611262][ T6992] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 65.611280][ T6992] ? __alloc_skb+0x140/0x710 [ 65.611325][ T6992] __alloc_skb+0x140/0x710 [ 65.611335][ T6992] ? __alloc_skb+0x5b7/0x710 [ 65.611345][ T6992] ? __pfx___alloc_skb+0x10/0x10 [ 65.611360][ T6992] __ip6_append_data+0x3482/0x4b30 [ 65.611415][ T6992] ? __pfx_raw6_getfrag+0x10/0x10 [ 65.611435][ T6992] ? __pfx___ip6_append_data+0x10/0x10 [ 65.611451][ T6992] ? ip6_dst_mtu_maybe_forward.constprop.0+0x259/0x550 [ 65.611467][ T6992] ? __pfx_ip6_mtu+0x10/0x10 [ 65.611481][ T6992] ? ip6_setup_cork+0x619/0x15b0 [ 65.611492][ T6992] ip6_append_data+0x10b/0x410 [ 65.611502][ T6992] ? __pfx_raw6_getfrag+0x10/0x10 [ 65.611518][ T6992] rawv6_sendmsg+0x169c/0x4510 [ 65.611533][ T6992] ? find_held_lock+0x2b/0x80 [ 65.611549][ T6992] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 65.611568][ T6992] ? __lock_acquire+0x5c0/0x1f40 [ 65.611587][ T6992] ? __pfx_sock_has_perm+0x10/0x10 [ 65.611630][ T6992] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 65.611645][ T6992] ? inet_sendmsg+0x11c/0x140 [ 65.611658][ T6992] inet_sendmsg+0x11c/0x140 [ 65.611670][ T6992] ____sys_sendmsg+0xa23/0xc30 [ 65.611684][ T6992] ? __pfx_inet_sendmsg+0x10/0x10 [ 65.611697][ T6992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.611714][ T6992] ? rcu_is_watching+0x13/0xc0 [ 65.611725][ T6992] ? ___sys_sendmsg+0x19d/0x1e0 [ 65.611739][ T6992] ? kfree+0x1e5/0x6d0 [ 65.611753][ T6992] ___sys_sendmsg+0x190/0x1e0 [ 65.611769][ T6992] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.611789][ T6992] ? __fget_files+0x34/0x3d0 [ 65.611809][ T6992] ? __pfx___might_resched+0x10/0x10 [ 65.611829][ T6992] __sys_sendmmsg+0x20c/0x440 [ 65.611842][ T6992] ? __pfx___sys_sendmmsg+0x10/0x10 [ 65.611853][ T6992] ? ksys_write+0x190/0x250 [ 65.611874][ T6992] ? fput+0x7c/0x100 [ 65.611886][ T6992] ? ksys_write+0x1ac/0x250 [ 65.611896][ T6992] ? __pfx_ksys_write+0x10/0x10 [ 65.611908][ T6992] __x64_sys_sendmmsg+0x9c/0x100 [ 65.611920][ T6992] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.611951][ T6992] do_syscall_64+0x123/0x790 [ 65.611963][ T6992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.611974][ T6992] RIP: 0033:0x7f3ae279f559 [ 65.611983][ T6992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.611993][ T6992] RSP: 002b:00007f3ae3668028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.612011][ T6992] RAX: ffffffffffffffda RBX: 00007f3ae2a25fa0 RCX: 00007f3ae279f559 [ 65.612017][ T6992] RDX: 00000000000002e9 RSI: 0000200000000300 RDI: 0000000000000003 [ 65.612023][ T6992] RBP: 00007f3ae3668090 R08: 0000000000000000 R09: 0000000000000000 [ 65.612029][ T6992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.612035][ T6992] R13: 00007f3ae2a26038 R14: 00007f3ae2a25fa0 R15: 00007fffef260118 [ 65.612050][ T6992] [ 65.771205][ T5791] svc: failed to register nfsdv3 RPC service (errno 5). [ 65.771225][ T5791] failed to unregister tcp with rpcbind [ 65.943903][ T7035] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 65.955490][ T7035] bond4: entered promiscuous mode [ 65.955684][ T7035] 8021q: adding VLAN 0 to HW filter on device bond4 [ 65.963822][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.403'. [ 65.963928][ T7035] bond4: entered allmulticast mode [ 65.975890][ T7035] bond4: (slave bridge3): making interface the new active one [ 65.975909][ T7035] bridge3: entered promiscuous mode [ 65.976037][ T7035] bridge3: entered allmulticast mode [ 65.977335][ T7035] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 66.789266][ T7080] netlink: 48 bytes leftover after parsing attributes in process `syz.3.415'. [ 66.809579][ T7083] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 66.818977][ T7083] bond8: entered promiscuous mode [ 66.819141][ T7083] 8021q: adding VLAN 0 to HW filter on device bond8 [ 66.827251][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.417'. [ 66.827350][ T7083] bond8: entered allmulticast mode [ 66.838082][ T7083] bond8: (slave bridge12): making interface the new active one [ 66.838100][ T7083] bridge12: entered promiscuous mode [ 66.838203][ T7083] bridge12: entered allmulticast mode [ 66.839293][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 66.839308][ T42] audit: type=1400 audit(1793537778.013:462): avc: denied { write } for pid=7085 comm="syz.3.418" name="functions" dev="configfs" ino=15021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.839814][ T7083] bond8: (slave bridge12): Enslaving as an active interface with an up link [ 66.857658][ T42] audit: type=1400 audit(1793537778.033:463): avc: denied { map } for pid=7085 comm="syz.3.418" path="socket:[13189]" dev="sockfs" ino=13189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 67.063698][ T7104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.425'. [ 67.169933][ T7118] fuse: Bad value for 'group_id' [ 67.169950][ T7118] fuse: Bad value for 'group_id' [ 67.226659][ T7124] netlink: 'syz.1.433': attribute type 1 has an invalid length. [ 67.247790][ T7124] bond9: entered promiscuous mode [ 67.248164][ T7124] 8021q: adding VLAN 0 to HW filter on device bond9 [ 67.254698][ T7124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.433'. [ 67.254804][ T7124] bond9: entered allmulticast mode [ 67.255641][ T42] audit: type=1400 audit(1793537778.433:464): avc: denied { ioctl } for pid=7126 comm="syz.0.434" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 67.269881][ T7124] bond9: (slave bridge13): making interface the new active one [ 67.269902][ T7124] bridge13: entered promiscuous mode [ 67.270408][ T7124] bridge13: entered allmulticast mode [ 67.274339][ T7124] bond9: (slave bridge13): Enslaving as an active interface with an up link [ 67.334574][ T42] audit: type=1400 audit(1793537778.513:465): avc: denied { read write } for pid=7132 comm="syz.0.437" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.334760][ T42] audit: type=1400 audit(1793537778.513:466): avc: denied { open } for pid=7132 comm="syz.0.437" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.336261][ T42] audit: type=1400 audit(1793537778.513:467): avc: denied { name_bind } for pid=7132 comm="syz.0.437" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.389991][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.390059][ T1449] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.441947][ T42] audit: type=1400 audit(1793537778.613:468): avc: denied { ioctl } for pid=7132 comm="syz.0.437" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0xc008640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 67.460769][ T7145] netlink: 'syz.1.441': attribute type 2 has an invalid length. [ 67.460781][ T7145] netlink: 151 bytes leftover after parsing attributes in process `syz.1.441'. [ 67.464155][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.478404][ T7147] fuse: Bad value for 'group_id' [ 67.478415][ T7147] fuse: Bad value for 'group_id' [ 67.529688][ T7154] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 67.551890][ T7154] bond2: entered promiscuous mode [ 67.552311][ T7154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.562221][ T7153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.562512][ T7153] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 67.562526][ T7153] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 67.575061][ T7153] bond2: (slave ip6gre1): making interface the new active one [ 67.575080][ T7153] ip6gre1: entered promiscuous mode [ 67.576758][ T7153] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 67.585346][ T7161] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 67.607529][ T7161] bond4: entered promiscuous mode [ 67.607850][ T7161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 67.613734][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'. [ 67.613852][ T7161] bond4: entered allmulticast mode [ 67.624642][ T7164] Bluetooth: MGMT ver 1.23 [ 67.625925][ T7164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'. [ 67.627856][ T7161] bond4: (slave bridge4): making interface the new active one [ 67.627867][ T7161] bridge4: entered promiscuous mode [ 67.627940][ T7161] bridge4: entered allmulticast mode [ 67.628875][ T7161] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 67.670646][ T7174] fuse: Bad value for 'fd' [ 67.704104][ T7173] overlayfs: failed to resolve 'subj_type=/dev/net/tun': -2 [ 67.719666][ T7183] fuse: Bad value for 'group_id' [ 67.719686][ T7183] fuse: Bad value for 'group_id' [ 67.760022][ T42] audit: type=1400 audit(1793537778.933:469): avc: denied { connect } for pid=7185 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.766113][ T42] audit: type=1400 audit(1793537778.943:470): avc: denied { setopt } for pid=7185 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.040623][ T7211] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 68.060002][ T7211] bond5: entered promiscuous mode [ 68.061280][ T7211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 68.070079][ T7211] bond5: entered allmulticast mode [ 68.085438][ T7211] bond5: (slave bridge5): making interface the new active one [ 68.085460][ T7211] bridge5: entered promiscuous mode [ 68.085613][ T7211] bridge5: entered allmulticast mode [ 68.087436][ T7211] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 68.127896][ T42] audit: type=1400 audit(1793537779.303:471): avc: denied { read } for pid=7223 comm="syz.3.472" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 68.132768][ T7224] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 68.182341][ T7229] FAULT_INJECTION: forcing a failure. [ 68.182341][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 68.182383][ T7229] CPU: 3 UID: 0 PID: 7229 Comm: syz.1.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.182409][ T7229] Tainted: [L]=SOFTLOCKUP [ 68.182415][ T7229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.182427][ T7229] Call Trace: [ 68.182440][ T7229] [ 68.182449][ T7229] dump_stack_lvl+0x100/0x190 [ 68.182522][ T7229] should_fail_ex.cold+0x5/0xa [ 68.182552][ T7229] should_failslab+0xc2/0x120 [ 68.182596][ T7229] __kmalloc_noprof+0xfc/0x840 [ 68.182627][ T7229] ? fib_create_info+0x5bf/0x4640 [ 68.182705][ T7229] fib_create_info+0x5bf/0x4640 [ 68.182734][ T7229] ? rtmsg_fib+0x399/0x500 [ 68.182757][ T7229] ? __pfx_rtmsg_fib+0x10/0x10 [ 68.182779][ T7229] ? __pfx_fib_create_info+0x10/0x10 [ 68.182803][ T7229] ? atomic_notifier_call_chain+0xa8/0x1c0 [ 68.182827][ T7229] fib_table_insert+0x169/0x1c70 [ 68.182863][ T7229] ? __lock_acquire+0x5c0/0x1f40 [ 68.182894][ T7229] ? __pfx_fib_table_insert+0x10/0x10 [ 68.182925][ T7229] ? lock_acquire+0x1d1/0x380 [ 68.182948][ T7229] ? fib_magic+0x13e/0x5c0 [ 68.182965][ T7229] ? find_held_lock+0x2b/0x80 [ 68.182984][ T7229] ? fib_magic+0x1a7/0x5c0 [ 68.183000][ T7229] ? fib_new_table+0x109/0x5d0 [ 68.183022][ T7229] ? fib_magic+0x4d4/0x5c0 [ 68.183039][ T7229] fib_magic+0x4d4/0x5c0 [ 68.183059][ T7229] ? __pfx_fib_magic+0x10/0x10 [ 68.183088][ T7229] ? queue_work_on+0x141/0x1e0 [ 68.183115][ T7229] fib_add_ifaddr+0x3a1/0x560 [ 68.183140][ T7229] fib_inetaddr_event+0x147/0x270 [ 68.183163][ T7229] notifier_call_chain+0x99/0x3f0 [ 68.183187][ T7229] blocking_notifier_call_chain+0x69/0xa0 [ 68.183210][ T7229] __inet_insert_ifa+0x91d/0xc70 [ 68.183247][ T7229] ? __pfx___inet_insert_ifa+0x10/0x10 [ 68.183292][ T7229] devinet_ioctl+0xf3f/0x1f10 [ 68.183316][ T7229] ? __pfx_devinet_ioctl+0x10/0x10 [ 68.183336][ T7229] ? _copy_from_user+0x59/0xd0 [ 68.183391][ T7229] inet_ioctl+0x3aa/0x3f0 [ 68.183412][ T7229] ? __pfx_inet_ioctl+0x10/0x10 [ 68.183448][ T7229] ? tomoyo_path_number_perm+0x188/0x580 [ 68.183481][ T7229] sock_do_ioctl+0x118/0x280 [ 68.183543][ T7229] ? __pfx_sock_do_ioctl+0x10/0x10 [ 68.183569][ T7229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.183607][ T7229] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.183635][ T7229] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 68.183688][ T7229] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.183725][ T7229] sock_ioctl+0x599/0x6b0 [ 68.183752][ T7229] ? __pfx_sock_ioctl+0x10/0x10 [ 68.183783][ T7229] ? selinux_file_ioctl+0x1e0/0x290 [ 68.183809][ T7229] ? selinux_file_ioctl+0x1e7/0x290 [ 68.183836][ T7229] ? __pfx_sock_ioctl+0x10/0x10 [ 68.183864][ T7229] __x64_sys_ioctl+0x18e/0x210 [ 68.183894][ T7229] do_syscall_64+0x123/0x790 [ 68.183948][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.183967][ T7229] RIP: 0033:0x7f717c59f559 [ 68.183985][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.184003][ T7229] RSP: 002b:00007f717d49d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.184035][ T7229] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59f559 [ 68.184047][ T7229] RDX: 0000200000001d80 RSI: 0000000000008916 RDI: 000000000000000d [ 68.184059][ T7229] RBP: 00007f717c636b50 R08: 0000000000000000 R09: 0000000000000000 [ 68.184070][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.184082][ T7229] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffeabd0fa18 [ 68.184111][ T7229] [ 68.365853][ T7253] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 68.384441][ T7253] bond6: entered promiscuous mode [ 68.384777][ T7253] 8021q: adding VLAN 0 to HW filter on device bond6 [ 68.390815][ T7253] bond6: entered allmulticast mode [ 68.402105][ T7253] bond6: (slave bridge6): making interface the new active one [ 68.402122][ T7253] bridge6: entered promiscuous mode [ 68.402235][ T7253] bridge6: entered allmulticast mode [ 68.403271][ T7253] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 68.454737][ T7265] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 68.489219][ T7271] netlink: 'syz.1.492': attribute type 2 has an invalid length. [ 68.661783][ T7290] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 68.670753][ T7290] bond10: entered promiscuous mode [ 68.670928][ T7290] 8021q: adding VLAN 0 to HW filter on device bond10 [ 68.672330][ T7289] overlay: Unknown parameter 'obj_role' [ 68.677862][ T7290] bond10: entered allmulticast mode [ 68.686107][ T7290] bond10: (slave bridge14): making interface the new active one [ 68.686119][ T7290] bridge14: entered promiscuous mode [ 68.686196][ T7290] bridge14: entered allmulticast mode [ 68.686805][ T7290] bond10: (slave bridge14): Enslaving as an active interface with an up link [ 68.977593][ T7318] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.979881][ T7320] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 69.018991][ T7327] netlink: 'syz.1.516': attribute type 1 has an invalid length. [ 69.033642][ T7327] bond11: entered promiscuous mode [ 69.034146][ T7327] 8021q: adding VLAN 0 to HW filter on device bond11 [ 69.040179][ T7327] bond11: entered allmulticast mode [ 69.050586][ T7327] bond11: (slave bridge15): making interface the new active one [ 69.050599][ T7327] bridge15: entered promiscuous mode [ 69.050685][ T7327] bridge15: entered allmulticast mode [ 69.051678][ T7327] bond11: (slave bridge15): Enslaving as an active interface with an up link [ 69.115724][ T7341] jffs2: notice: (7341) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 69.136134][ T7341] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 69.268260][ T7358] fuse: Unknown parameter 'grou00000000000000000000' [ 69.276578][ T7360] xt_l2tp: v2 doesn't support IP mode [ 69.287579][ T7360] UDC core: g1: couldn't find an available UDC or it's busy [ 69.298593][ T7363] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 69.313128][ T7363] bond7: entered promiscuous mode [ 69.313336][ T7363] 8021q: adding VLAN 0 to HW filter on device bond7 [ 69.323187][ T7363] bond7: entered allmulticast mode [ 69.336538][ T7363] bond7: (slave bridge7): making interface the new active one [ 69.336553][ T7363] bridge7: entered promiscuous mode [ 69.336668][ T7363] bridge7: entered allmulticast mode [ 69.337345][ T7363] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 69.341344][ T7366] SET target dimension over the limit! [ 69.407592][ T7380] fuse: Unknown parameter 'grou00000000000000000000' [ 70.476643][ T7395] device-mapper: table: 248:1: thin-pool: Error opening metadata block device (-ENOENT) [ 70.476668][ T7395] device-mapper: ioctl: error adding target to table [ 70.477588][ T7396] ip_tables: iptables: counters copy to user failed while replacing table [ 70.481090][ T7395] usb usb7: usbfs: process 7395 (syz.1.544) did not claim interface 1 before use [ 70.484987][ T7395] usb usb7: usbfs: process 7395 (syz.1.544) did not claim interface 1 before use [ 70.487333][ T7400] device-mapper: table: 248:1: thin-pool: Error opening metadata block device (-ENOENT) [ 70.487345][ T7400] device-mapper: ioctl: error adding target to table [ 70.537195][ T7412] ip_tables: iptables: counters copy to user failed while replacing table [ 70.546633][ T7414] fuse: Unknown parameter 'grou00000000000000000000' [ 70.562951][ T7408] bond3: entered promiscuous mode [ 70.563341][ T7408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 70.566432][ T7412] warning: `syz.3.548' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.570367][ T7408] __nla_validate_parse: 18 callbacks suppressed [ 70.570389][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.547'. [ 70.570492][ T7408] bond3: entered allmulticast mode [ 70.581254][ T7408] bond3: (slave bridge2): making interface the new active one [ 70.581274][ T7408] bridge2: entered promiscuous mode [ 70.581406][ T7408] bridge2: entered allmulticast mode [ 70.585520][ T7408] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 70.591500][ T7417] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.605620][ T29] cfg80211: failed to load regulatory.db [ 70.739773][ T7430] netlink: 56 bytes leftover after parsing attributes in process `syz.3.556'. [ 70.769534][ T7434] fuse: Unknown parameter 'group_i00000000000000000000' [ 70.839514][ T7440] bond4: entered promiscuous mode [ 70.839752][ T7440] 8021q: adding VLAN 0 to HW filter on device bond4 [ 70.845307][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.560'. [ 70.845369][ T7440] bond4: entered allmulticast mode [ 70.855431][ T7440] bond4: (slave bridge3): making interface the new active one [ 70.855445][ T7440] bridge3: entered promiscuous mode [ 70.855537][ T7440] bridge3: entered allmulticast mode [ 70.858872][ T7440] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 70.924429][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 70.963798][ T7450] random: crng reseeded on system resumption [ 70.975807][ T7450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.564'. [ 71.074104][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 71.074776][ T24] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.075780][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 71.075817][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.075836][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.075854][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.075871][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.075902][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.198080][ T7460] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 71.198080][ T7460] The task syz.2.568 (7460) triggered the difference, watch for misbehavior. [ 71.284527][ T24] usb 6-1: usb_control_msg returned -32 [ 71.284567][ T24] usbtmc 6-1:16.0: can't read capabilities [ 71.721275][ T7469] jffs2: notice: (7469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 71.770625][ T7474] FAULT_INJECTION: forcing a failure. [ 71.770625][ T7474] name failslab, interval 1, probability 0, space 0, times 0 [ 71.770657][ T7474] CPU: 1 UID: 0 PID: 7474 Comm: syz.3.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.770671][ T7474] Tainted: [L]=SOFTLOCKUP [ 71.770675][ T7474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.770681][ T7474] Call Trace: [ 71.770689][ T7474] [ 71.770694][ T7474] dump_stack_lvl+0x100/0x190 [ 71.770742][ T7474] should_fail_ex.cold+0x5/0xa [ 71.770759][ T7474] should_failslab+0xc2/0x120 [ 71.770790][ T7474] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 71.770808][ T7474] ? __d_alloc+0x34/0xad0 [ 71.770824][ T7474] __d_alloc+0x34/0xad0 [ 71.770839][ T7474] d_alloc_pseudo+0x1c/0xc0 [ 71.770855][ T7474] alloc_file_pseudo+0x118/0x290 [ 71.770870][ T7474] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 71.770885][ T7474] ? _raw_spin_unlock+0x28/0x50 [ 71.770942][ T7474] ? alloc_fd+0x471/0x7a0 [ 71.770956][ T7474] __anon_inode_getfile+0xe8/0x280 [ 71.770968][ T7474] anon_inode_getfd+0x68/0xc0 [ 71.770980][ T7474] map_create+0x19e1/0x3150 [ 71.770995][ T7474] ? find_held_lock+0x2b/0x80 [ 71.771011][ T7474] ? __pfx_map_create+0x10/0x10 [ 71.771025][ T7474] ? avc_has_perm+0x135/0x1e0 [ 71.771056][ T7474] ? __might_fault+0xc5/0x140 [ 71.771069][ T7474] ? __might_fault+0xc5/0x140 [ 71.771083][ T7474] ? selinux_bpf+0xf6/0x140 [ 71.771098][ T7474] __sys_bpf+0x14cb/0x4b60 [ 71.771111][ T7474] ? __pfx___sys_bpf+0x10/0x10 [ 71.771120][ T7474] ? find_held_lock+0x2b/0x80 [ 71.771130][ T7474] ? get_pid_task+0xfc/0x250 [ 71.771139][ T7474] ? get_pid_task+0xfc/0x250 [ 71.771152][ T7474] ? find_held_lock+0x2b/0x80 [ 71.771166][ T7474] ? rcu_read_lock_any_held+0x6a/0x90 [ 71.771178][ T7474] ? find_held_lock+0x2b/0x80 [ 71.771188][ T7474] ? ksys_write+0x190/0x250 [ 71.771197][ T7474] ? ksys_write+0x190/0x250 [ 71.771206][ T7474] ? lock_acquire+0x1d1/0x380 [ 71.771229][ T7474] ? fput+0x7c/0x100 [ 71.771241][ T7474] ? ksys_write+0x1ac/0x250 [ 71.771252][ T7474] ? __x64_sys_bpf+0xce/0x140 [ 71.771261][ T7474] __x64_sys_bpf+0xce/0x140 [ 71.771270][ T7474] ? do_syscall_64+0xae/0x790 [ 71.771282][ T7474] do_syscall_64+0x123/0x790 [ 71.771293][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.771303][ T7474] RIP: 0033:0x7f3ae279f559 [ 71.771312][ T7474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.771322][ T7474] RSP: 002b:00007f3ae3668028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.771341][ T7474] RAX: ffffffffffffffda RBX: 00007f3ae2a25fa0 RCX: 00007f3ae279f559 [ 71.771348][ T7474] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000000 [ 71.771354][ T7474] RBP: 00007f3ae3668090 R08: 0000000000000000 R09: 0000000000000000 [ 71.771360][ T7474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.771365][ T7474] R13: 00007f3ae2a26038 R14: 00007f3ae2a25fa0 R15: 00007fffef260118 [ 71.771386][ T7474] [ 71.799809][ T7476] fuse: Unknown parameter 'group_i00000000000000000000' [ 71.986293][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 71.986310][ T42] audit: type=1400 audit(1793537783.163:519): avc: denied { read } for pid=7483 comm="syz.3.578" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.986694][ T42] audit: type=1400 audit(1793537783.163:520): avc: denied { open } for pid=7483 comm="syz.3.578" path="/dev/rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.990486][ T42] audit: type=1400 audit(1793537783.163:521): avc: denied { ioctl } for pid=7483 comm="syz.3.578" path="uts:[4026532874]" dev="nsfs" ino=4026532874 ioctlcmd=0x4024700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.041091][ T7488] netlink: 96 bytes leftover after parsing attributes in process `syz.2.580'. [ 72.072114][ T42] audit: type=1400 audit(1793537783.243:522): avc: denied { create } for pid=7490 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.072457][ T42] audit: type=1400 audit(1793537783.243:523): avc: denied { bind } for pid=7490 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.072643][ T42] audit: type=1400 audit(1793537783.243:524): avc: denied { node_bind } for pid=7490 comm="syz.2.581" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 72.089534][ T7494] can: request_module (can-proto-4) failed. [ 72.106731][ T7494] can: request_module (can-proto-4) failed. [ 72.135831][ T7494] can: request_module (can-proto-4) failed. [ 72.154500][ T7494] can: request_module (can-proto-4) failed. [ 72.180739][ T7494] can: request_module (can-proto-4) failed. [ 72.196766][ T7494] can: request_module (can-proto-4) failed. [ 72.212078][ T7494] can: request_module (can-proto-4) failed. [ 72.241354][ T7494] can: request_module (can-proto-4) failed. [ 72.262074][ T7494] can: request_module (can-proto-4) failed. [ 72.288778][ T7494] can: request_module (can-proto-4) failed. [ 72.411469][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 72.411483][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 72.419847][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 72.419864][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 72.444978][ T6305] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.445014][ T6305] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.445041][ T6305] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.445065][ T6305] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.561525][ T42] audit: type=1400 audit(1793537783.733:525): avc: denied { write } for pid=7528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.620508][ T42] audit: type=1400 audit(1793537783.793:526): avc: denied { write } for pid=7535 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.754115][ T5938] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.920063][ T42] audit: type=1400 audit(1793537784.093:527): avc: denied { write } for pid=7552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.928734][ T5938] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.928787][ T5938] usb 5-1: New USB device found: idVendor=1235, idProduct=8014, bcdDevice=0.40 [ 72.929774][ T5938] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 72.932016][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.932035][ T5938] usb 5-1: Product: syz [ 72.932047][ T5938] usb 5-1: Manufacturer: syz [ 72.932059][ T5938] usb 5-1: SerialNumber: syz [ 72.989475][ T42] audit: type=1400 audit(1793537784.163:528): avc: denied { write } for pid=7564 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.038160][ T7571] FAULT_INJECTION: forcing a failure. [ 73.038160][ T7571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.038193][ T7571] CPU: 3 UID: 0 PID: 7571 Comm: syz.3.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.038207][ T7571] Tainted: [L]=SOFTLOCKUP [ 73.038211][ T7571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.038217][ T7571] Call Trace: [ 73.038226][ T7571] [ 73.038230][ T7571] dump_stack_lvl+0x100/0x190 [ 73.038279][ T7571] should_fail_ex.cold+0x5/0xa [ 73.038296][ T7571] _copy_to_user+0x32/0xd0 [ 73.038331][ T7571] simple_read_from_buffer+0xcb/0x170 [ 73.038358][ T7571] proc_fail_nth_read+0x1af/0x230 [ 73.038386][ T7571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.038401][ T7571] ? rw_verify_area+0xce/0x6d0 [ 73.038416][ T7571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.038429][ T7571] vfs_read+0x1e4/0xb40 [ 73.038439][ T7571] ? lock_acquire+0x1d1/0x380 [ 73.038454][ T7571] ? __fget_files+0x34/0x3d0 [ 73.038470][ T7571] ? __pfx_vfs_read+0x10/0x10 [ 73.038482][ T7571] ? find_held_lock+0x2b/0x80 [ 73.038499][ T7571] ? __fget_files+0x215/0x3d0 [ 73.038522][ T7571] ? __fget_files+0x21f/0x3d0 [ 73.038549][ T7571] ksys_read+0x12a/0x250 [ 73.038565][ T7571] ? __pfx_ksys_read+0x10/0x10 [ 73.038588][ T7571] do_syscall_64+0x123/0x790 [ 73.038642][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.038652][ T7571] RIP: 0033:0x7f3ae275fd8e [ 73.038661][ T7571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.038671][ T7571] RSP: 002b:00007f3ae3667fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.038689][ T7571] RAX: ffffffffffffffda RBX: 00007f3ae36686c0 RCX: 00007f3ae275fd8e [ 73.038696][ T7571] RDX: 000000000000000f RSI: 00007f3ae36680a0 RDI: 0000000000000004 [ 73.038702][ T7571] RBP: 00007f3ae3668090 R08: 0000000000000000 R09: 0000000000000000 [ 73.038708][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.038714][ T7571] R13: 00007f3ae2a26038 R14: 00007f3ae2a25fa0 R15: 00007fffef260118 [ 73.038728][ T7571] [ 73.095563][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 73.095668][ T7573] bridge_slave_0: default FDB implementation only supports local addresses [ 73.158469][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.158752][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.287656][ T5938] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 73.293215][ T5938] usb 5-1: USB disconnect, device number 5 [ 73.307527][ T7598] dns_resolver: Unsupported server list version (0) [ 73.316437][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.690212][ T5938] usb 6-1: USB disconnect, device number 7 [ 73.706970][ T7616] ip6gretap0: entered promiscuous mode [ 73.714934][ T7618] validate_nla: 2 callbacks suppressed [ 73.714946][ T7618] netlink: 'syz.1.601': attribute type 5 has an invalid length. [ 73.806509][ T7625] capability: warning: `syz.0.604' uses 32-bit capabilities (legacy support in use) [ 74.250740][ T7641] batadv0: entered promiscuous mode [ 74.252408][ T7641] macsec1: entered promiscuous mode [ 74.252598][ T7641] macsec1: entered allmulticast mode [ 74.252610][ T7641] batadv0: entered allmulticast mode [ 74.253801][ T7641] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 74.256610][ T7641] batadv0: left allmulticast mode [ 74.256783][ T7641] batadv0: left promiscuous mode [ 74.361356][ T7649] fuse: Bad value for 'fd' [ 74.406488][ T94] Bluetooth: hci4: Frame reassembly failed (-84) [ 74.654771][ T24] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 74.789167][ T7672] mmap: syz.1.614 (7672) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.824483][ T24] usb 8-1: Invalid ep0 maxpacket: 32 [ 74.848145][ T7680] fuse: Bad value for 'fd' [ 74.889808][ T7682] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 74.898577][ T7682] bond12: entered promiscuous mode [ 74.898776][ T7682] 8021q: adding VLAN 0 to HW filter on device bond12 [ 74.902519][ T7682] bond12: entered allmulticast mode [ 74.914968][ T7682] bond12: (slave bridge16): making interface the new active one [ 74.914987][ T7682] bridge16: entered promiscuous mode [ 74.915143][ T7682] bridge16: entered allmulticast mode [ 74.916300][ T7682] bond12: (slave bridge16): Enslaving as an active interface with an up link [ 74.964519][ T24] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 75.124084][ T24] usb 8-1: Invalid ep0 maxpacket: 32 [ 75.124413][ T24] usb usb8-port1: attempt power cycle [ 75.468138][ T24] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 75.484878][ T24] usb 8-1: Invalid ep0 maxpacket: 32 [ 75.544888][ T7703] netlink: 'syz.0.627': attribute type 4 has an invalid length. [ 75.609420][ T7709] fuse: Bad value for 'group_id' [ 75.609438][ T7709] fuse: Bad value for 'group_id' [ 75.614423][ T24] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 75.634887][ T24] usb 8-1: Invalid ep0 maxpacket: 32 [ 75.635088][ T24] usb usb8-port1: unable to enumerate USB device [ 76.087118][ T7724] fuse: Bad value for 'fd' [ 76.284775][ T995] e1000 0000:00:07.0 eth0: Reset adapter [ 76.381953][ T7732] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 76.424127][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.424139][ T5799] Bluetooth: hci4: command 0x1003 tx timeout [ 76.524467][ T995] e1000 0000:00:07.0 eth0: Reset adapter [ 76.644487][ T995] e1000 0000:00:07.0 eth0: Reset adapter [ 76.774370][ T995] e1000 0000:00:07.0 eth0: Reset adapter [ 76.875270][ T24] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 77.047442][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 77.047460][ T42] audit: type=1400 audit(1793537788.223:577): avc: denied { write } for pid=7767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.087830][ T7772] No control pipe specified [ 77.102927][ T42] audit: type=1400 audit(1793537788.273:578): avc: denied { write } for pid=7771 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.179592][ T7782] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 77.188464][ T7782] bond13: entered promiscuous mode [ 77.188651][ T7782] 8021q: adding VLAN 0 to HW filter on device bond13 [ 77.196274][ T7782] __nla_validate_parse: 12 callbacks suppressed [ 77.196291][ T7782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.642'. [ 77.196840][ T7782] bond13: entered allmulticast mode [ 77.205157][ T7782] bond13: (slave bridge17): making interface the new active one [ 77.205177][ T7782] bridge17: entered promiscuous mode [ 77.205275][ T7782] bridge17: entered allmulticast mode [ 77.208692][ T7782] bond13: (slave bridge17): Enslaving as an active interface with an up link [ 77.239647][ T7789] fuse: Bad value for 'fd' [ 78.066098][ T42] audit: type=1400 audit(1793537789.243:579): avc: denied { unmount } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 78.915956][ T995] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 82.370032][ T42] audit: type=1400 audit(1793537793.543:580): avc: denied { write } for pid=7797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.408577][ T42] audit: type=1400 audit(1793537793.583:581): avc: denied { write } for pid=7800 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.850093][ T42] audit: type=1400 audit(1793537797.023:582): avc: denied { write } for pid=7809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.887389][ T42] audit: type=1400 audit(1793537797.063:583): avc: denied { write } for pid=7812 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.350674][ T42] audit: type=1400 audit(1793537800.523:584): avc: denied { write } for pid=7817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.396683][ T42] audit: type=1400 audit(1793537800.573:585): avc: denied { write } for pid=7820 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.815956][ T7829] netlink: 'syz.1.647': attribute type 3 has an invalid length. [ 89.825998][ T7829] tipc: Started in network mode [ 89.826012][ T7829] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.826558][ T7829] tipc: New replicast peer: 172.20.20.187 [ 89.827459][ T7829] tipc: Enabled bearer , priority 2 [ 89.874587][ T42] audit: type=1400 audit(1793537801.043:586): avc: denied { ioctl } for pid=7842 comm="syz.2.653" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.881050][ T7848] fuse: Invalid rootmode [ 89.915041][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 89.954443][ T7861] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 89.970396][ T7861] bond5: entered promiscuous mode [ 89.970576][ T7861] 8021q: adding VLAN 0 to HW filter on device bond5 [ 89.975708][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.658'. [ 89.975774][ T7861] bond5: entered allmulticast mode [ 89.983949][ T7861] bond5: (slave bridge4): making interface the new active one [ 89.983967][ T7861] bridge4: entered promiscuous mode [ 89.984158][ T7861] bridge4: entered allmulticast mode [ 89.988592][ T7861] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 90.039111][ T42] audit: type=1400 audit(1793537801.213:587): avc: denied { create } for pid=7868 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.041786][ T42] audit: type=1400 audit(1793537801.213:588): avc: denied { listen } for pid=7868 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.108891][ T7876] gadgetfs: bound to dummy_udc driver [ 90.117454][ T42] audit: type=1400 audit(1793537801.293:589): avc: denied { accept } for pid=7868 comm="syz.0.662" lport=32924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.184211][ T995] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 90.296115][ T7875] gadgetfs: suspended from state 2 [ 90.334812][ T995] usb 8-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 90.336181][ T7884] fuse: Invalid rootmode [ 90.336642][ T995] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.338381][ T995] usb 8-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 90.338394][ T995] usb 8-1: Product: syz [ 90.338401][ T995] usb 8-1: Manufacturer: syz [ 90.338407][ T995] usb 8-1: SerialNumber: syz [ 90.344824][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 90.346141][ T995] keyspan 8-1:1.0: Keyspan 1 port adapter converter detected [ 90.346221][ T995] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 90.346982][ T995] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 90.347036][ T995] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82 [ 90.347091][ T995] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 90.347129][ T995] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 90.347159][ T995] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 83 [ 90.347199][ T995] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 90.348654][ T995] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 90.373936][ T7886] device-mapper: table: 248:3: multipath: round-robin ps: invalid repeat count (-EINVAL) [ 90.373960][ T7886] device-mapper: ioctl: error adding target to table [ 90.478870][ T7892] bridge4: entered promiscuous mode [ 90.478883][ T7892] bridge4: entered allmulticast mode [ 90.529441][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 90.596168][ T7906] netlink: 'syz.1.674': attribute type 1 has an invalid length. [ 90.607635][ T7906] bond14: entered promiscuous mode [ 90.607961][ T7906] 8021q: adding VLAN 0 to HW filter on device bond14 [ 90.613782][ T7906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.674'. [ 90.613883][ T7906] bond14: entered allmulticast mode [ 90.626111][ T7906] bond14: (slave bridge18): making interface the new active one [ 90.626125][ T7906] bridge18: entered promiscuous mode [ 90.626207][ T7906] bridge18: entered allmulticast mode [ 90.630041][ T7906] bond14: (slave bridge18): Enslaving as an active interface with an up link [ 90.655616][ T995] usb 8-1: USB disconnect, device number 7 [ 90.658990][ T995] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 90.659243][ T995] keyspan 8-1:1.0: device disconnected [ 90.672267][ T7909] fuse: Invalid rootmode [ 90.752609][ T42] audit: type=1400 audit(1793537801.923:590): avc: denied { setopt } for pid=7910 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.836839][ T855] tipc: Node number set to 2886997162 [ 91.032920][ T7918] FAULT_INJECTION: forcing a failure. [ 91.032920][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 91.032949][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.0.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.032973][ T7918] Tainted: [L]=SOFTLOCKUP [ 91.032980][ T7918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.032992][ T7918] Call Trace: [ 91.032998][ T7918] [ 91.033006][ T7918] dump_stack_lvl+0x100/0x190 [ 91.033041][ T7918] should_fail_ex.cold+0x5/0xa [ 91.033070][ T7918] should_failslab+0xc2/0x120 [ 91.033090][ T7918] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 91.033118][ T7918] ? selinux_inode_alloc_security+0x104/0x290 [ 91.033148][ T7918] ? __d_alloc+0x34/0xad0 [ 91.033177][ T7918] __d_alloc+0x34/0xad0 [ 91.033199][ T7918] ? __ns_ref_active_get+0x9f/0x1b0 [ 91.033229][ T7918] path_from_stashed+0x431/0x760 [ 91.033252][ T7918] ? __pfx_create_new_namespace+0x10/0x10 [ 91.033276][ T7918] open_namespace_file+0x8f/0x130 [ 91.033297][ T7918] ? __pfx_open_namespace_file+0x10/0x10 [ 91.033323][ T7918] vfs_open_tree+0x94a/0xb60 [ 91.033345][ T7918] ? _raw_spin_unlock+0x28/0x50 [ 91.033367][ T7918] ? __pfx_vfs_open_tree+0x10/0x10 [ 91.033396][ T7918] __x64_sys_open_tree+0xbe/0x150 [ 91.033422][ T7918] do_syscall_64+0x123/0x790 [ 91.033442][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.033510][ T7918] RIP: 0033:0x7f986719f559 [ 91.033526][ T7918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.033544][ T7918] RSP: 002b:00007f98653f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 91.033561][ T7918] RAX: ffffffffffffffda RBX: 00007f9867425fa0 RCX: 00007f986719f559 [ 91.033572][ T7918] RDX: 0000000000001902 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 91.033584][ T7918] RBP: 00007f9867236b50 R08: 0000000000000000 R09: 0000000000000000 [ 91.033596][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.033607][ T7918] R13: 00007f9867426038 R14: 00007f9867425fa0 R15: 00007ffef17bf898 [ 91.033630][ T7918] [ 91.156965][ T42] audit: type=1400 audit(1793537802.333:591): avc: denied { cmd } for pid=7923 comm="iou-wrk-7924" path="socket:[18049]" dev="sockfs" ino=18049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.205777][ T42] audit: type=1400 audit(1793537802.383:592): avc: denied { append } for pid=7923 comm="syz.0.682" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 91.214961][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 91.246240][ T7932] fuse: Bad value for 'rootmode' [ 91.279704][ T42] audit: type=1400 audit(1793537802.453:593): avc: denied { create } for pid=7933 comm="syz.3.686" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.433159][ T7942] netlink: 'syz.2.690': attribute type 1 has an invalid length. [ 91.453696][ T7942] bond5: entered promiscuous mode [ 91.456143][ T7942] 8021q: adding VLAN 0 to HW filter on device bond5 [ 91.470074][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.690'. [ 91.471967][ T7942] bond5: entered allmulticast mode [ 91.484508][ T7942] bond5: (slave bridge5): making interface the new active one [ 91.484521][ T7942] bridge5: entered promiscuous mode [ 91.484635][ T7942] bridge5: entered allmulticast mode [ 91.486419][ T7942] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 91.501095][ T7947] ptrace attach of "/syz-executor exec"[5785] was attempted by ""[7947] [ 91.507975][ T7951] ptrace attach of "/syz-executor exec"[5785] was attempted by ""[7951] [ 91.565172][ T7956] fuse: Bad value for 'rootmode' [ 91.645701][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 91.717625][ T7980] fuse: Bad value for 'rootmode' [ 91.773398][ T7982] overlayfs: failed to resolve './file1/file0dont_hash': -2 [ 92.024533][ T2331] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 92.040483][ T5875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.040517][ T5875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.132843][ T5875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.132874][ T5875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.184918][ T2331] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 92.186112][ T2331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.186136][ T2331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.186154][ T2331] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.186185][ T2331] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.188468][ T2331] usb 8-1: config 0 descriptor?? [ 92.209122][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.211410][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.212074][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.212986][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.213664][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.250704][ T5875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.250739][ T5875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.337739][ T5875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.337772][ T5875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.416031][ T7984] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.489157][ T6305] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.595637][ T2331] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 92.616358][ T5875] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 92.616386][ T5875] ip6gre1 (unregistering): left promiscuous mode [ 92.632320][ T8007] fuse: Unknown parameter 'use00000000000000000000' [ 92.641192][ T2331] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 92.658743][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 92.691868][ T5875] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 92.691892][ T5875] bridge1 (unregistering): left promiscuous mode [ 92.691907][ T5875] bridge1 (unregistering): left allmulticast mode [ 92.700241][ T5875] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 92.700261][ T5875] bridge2 (unregistering): left promiscuous mode [ 92.700275][ T5875] bridge2 (unregistering): left allmulticast mode [ 92.712725][ T5875] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 92.712750][ T5875] bridge3 (unregistering): left promiscuous mode [ 92.712764][ T5875] bridge3 (unregistering): left allmulticast mode [ 92.722960][ T5875] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 92.722980][ T5875] bridge5 (unregistering): left promiscuous mode [ 92.722993][ T5875] bridge5 (unregistering): left allmulticast mode [ 92.731290][ T5875] bond0 (unregistering): Released all slaves [ 92.738497][ T5875] bond1 (unregistering): Released all slaves [ 92.746468][ T5875] bond2 (unregistering): Released all slaves [ 92.751775][ T5875] bond3 (unregistering): Released all slaves [ 92.756819][ T5875] bond4 (unregistering): Released all slaves [ 92.761741][ T5875] bond5 (unregistering): Released all slaves [ 92.786802][ T8002] syzkaller0: entered promiscuous mode [ 92.786822][ T8002] syzkaller0: entered allmulticast mode [ 92.854356][ T6305] netdevsim netdevsim2 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.854383][ T6305] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.854399][ T6305] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.980487][ T5499] 8021q: adding VLAN 0 to HW filter on device eth2 [ 93.270994][ T5499] 8021q: adding VLAN 0 to HW filter on device eth3 [ 93.291456][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.291740][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.293777][ T7984] bridge_slave_0: entered allmulticast mode [ 93.295561][ T7984] bridge_slave_0: entered promiscuous mode [ 93.298306][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.298375][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.298465][ T7984] bridge_slave_1: entered allmulticast mode [ 93.314600][ T7984] bridge_slave_1: entered promiscuous mode [ 93.358948][ T5875] hsr_slave_0: left promiscuous mode [ 93.359648][ T5875] hsr_slave_1: left promiscuous mode [ 93.374953][ T5875] veth1_macvtap: left promiscuous mode [ 93.374982][ T5875] veth0_macvtap: left promiscuous mode [ 93.375074][ T5875] veth1_vlan: left promiscuous mode [ 93.375113][ T5875] veth0_vlan: left promiscuous mode [ 93.610819][ T8059] fuse: Unknown parameter 'use00000000000000000000' [ 93.638792][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.640903][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.662049][ T7984] team0: Port device team_slave_0 added [ 93.663686][ T7984] team0: Port device team_slave_1 added [ 93.676473][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.676504][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.676526][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.677419][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.677429][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.677448][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.708689][ T7984] hsr_slave_0: entered promiscuous mode [ 93.709499][ T7984] hsr_slave_1: entered promiscuous mode [ 93.710098][ T7984] debugfs: 'hsr0' already exists in 'hsr' [ 93.710112][ T7984] Cannot create hsr debugfs directory [ 93.807837][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 93.871554][ T5499] 8021q: adding VLAN 0 to HW filter on device eth4 [ 93.885767][ T7984] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.886805][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 93.890879][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.892385][ T7984] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.893196][ T29] usb 8-1: USB disconnect, device number 8 [ 93.898044][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.899128][ T7984] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.923296][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.926835][ T7984] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.929723][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.951890][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.951978][ T7984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.953933][ T8090] fuse: Unknown parameter 'use00000000000000000000' [ 93.980044][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.985752][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.000778][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.006001][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.006046][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.010371][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.010419][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.046528][ T7984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.112423][ T5499] 8021q: adding VLAN 0 to HW filter on device eth5 [ 94.191759][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 94.264827][ T5799] Bluetooth: hci2: command tx timeout [ 94.339650][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.398360][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 94.398373][ T42] audit: type=1400 audit(1793537805.573:622): avc: denied { write } for pid=8139 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.415100][ T42] audit: type=1400 audit(1793537805.593:623): avc: denied { create } for pid=8142 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.498751][ T8157] fuse: Unknown parameter 'user_i00000000000000000000' [ 94.535655][ T8159] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 94.549099][ T8159] bond8: entered promiscuous mode [ 94.549369][ T8159] 8021q: adding VLAN 0 to HW filter on device bond8 [ 94.567929][ T8160] bond8: (slave bridge8): making interface the new active one [ 94.567942][ T8160] bridge8: entered promiscuous mode [ 94.570058][ T8160] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 94.571647][ T7984] veth0_vlan: entered promiscuous mode [ 94.575468][ T7984] veth1_vlan: entered promiscuous mode [ 94.595927][ T7984] veth0_macvtap: entered promiscuous mode [ 94.599901][ T7984] veth1_macvtap: entered promiscuous mode [ 94.618716][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.621132][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.665753][ T6305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.667058][ T6305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.667077][ T6305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.667093][ T6305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.694933][ T8181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.694946][ T8181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.709352][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.709364][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.724619][ T42] audit: type=1400 audit(1793537805.903:624): avc: denied { mounton } for pid=7984 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 94.750079][ T8194] ioremap: invalid physical address 8000000000000000 [ 94.750161][ T8194] ------------[ cut here ]------------ [ 94.750168][ T8194] 1 [ 94.750174][ T8194] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller.isra.0.cold+0x59/0xa4, CPU#1: syz.3.749/8194 [ 94.762390][ T8194] Modules linked in: [ 94.764498][ T8194] CPU: 1 UID: 0 PID: 8194 Comm: syz.3.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.769075][ T8194] Tainted: [L]=SOFTLOCKUP [ 94.770787][ T8194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.771358][ T8199] fuse: Unknown parameter 'user_i00000000000000000000' [ 94.778152][ T8194] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 94.780815][ T8194] Code: 48 8b 34 24 48 c7 c7 00 2e 0c 8c e8 4a 22 01 00 e9 db 24 9b 00 e8 10 f2 ec 00 4c 89 ee 48 c7 c7 60 2c 0c 8c e8 31 22 01 00 90 <0f> 0b 90 e9 bb 24 9b 00 e8 f3 f1 ec 00 41 0f b6 d7 4c 89 ee 48 c7 [ 94.789329][ T8194] RSP: 0018:ffffc9000410f8d8 EFLAGS: 00010282 [ 94.791880][ T8194] RAX: 0000000000000032 RBX: 1ffff92000821f1f RCX: 0000000000000000 [ 94.795142][ T8194] RDX: 0000000000000032 RSI: ffffffff81ebf219 RDI: fffff52000821f0c [ 94.798273][ T8194] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 94.801670][ T42] audit: type=1400 audit(1793537805.973:625): avc: denied { bind } for pid=8193 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.801677][ T8194] R10: ffffc9000410f69f R11: 0000000000000001 R12: 8000000000000fff [ 94.810316][ T8194] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 94.812926][ T8194] FS: 00007f3ae36686c0(0000) GS:ffff8880d457d000(0000) knlGS:0000000000000000 [ 94.815917][ T8194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.818523][ T8194] CR2: 00007f5d9f4a6e9c CR3: 00000000279bd000 CR4: 0000000000352ef0 [ 94.821683][ T8194] Call Trace: [ 94.823079][ T8194] [ 94.824487][ T8194] ? register_device+0x1bb/0x6a0 [ 94.826633][ T8194] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 94.829067][ T8194] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 94.831381][ T8194] ? register_device+0x164/0x6a0 [ 94.833496][ T8194] register_device+0x1bb/0x6a0 [ 94.835525][ T8194] phram_setup+0x3b1/0x4c0 [ 94.837394][ T8194] ? __pfx_phram_setup+0x10/0x10 [ 94.839517][ T8194] ? trace_contention_end+0x126/0x160 [ 94.841775][ T8194] ? param_attr_store+0xec/0x300 [ 94.844076][ T8194] ? __pfx___mutex_lock+0x10/0x10 [ 94.846238][ T8194] phram_param_call+0xa6/0xd0 [ 94.848163][ T8194] param_attr_store+0x199/0x300 [ 94.850231][ T8194] ? __pfx_param_attr_store+0x10/0x10 [ 94.852267][ T8194] module_attr_store+0x58/0x80 [ 94.854378][ T8194] ? __pfx_module_attr_store+0x10/0x10 [ 94.856521][ T8194] sysfs_kf_write+0xf2/0x150 [ 94.858472][ T8194] kernfs_fop_write_iter+0x3e0/0x5f0 [ 94.860533][ T8194] ? __pfx_sysfs_kf_write+0x10/0x10 [ 94.862717][ T8194] vfs_write+0x6af/0x1050 [ 94.864586][ T8194] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 94.867100][ T8194] ? __pfx_vfs_write+0x10/0x10 [ 94.869061][ T8194] ? find_held_lock+0x2b/0x80 [ 94.870684][ T8194] ksys_write+0x12a/0x250 [ 94.872566][ T8194] ? __pfx_ksys_write+0x10/0x10 [ 94.874562][ T8194] do_syscall_64+0x123/0x790 [ 94.876460][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.878745][ T8194] RIP: 0033:0x7f3ae279f559 [ 94.880650][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.888398][ T8194] RSP: 002b:00007f3ae3668028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.891615][ T8194] RAX: ffffffffffffffda RBX: 00007f3ae2a25fa0 RCX: 00007f3ae279f559 [ 94.894971][ T8194] RDX: 000000000000001e RSI: 0000200000000680 RDI: 000000000000000a [ 94.898179][ T8194] RBP: 00007f3ae2836b50 R08: 0000000000000000 R09: 0000000000000000 [ 94.901445][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.905036][ T8194] R13: 00007f3ae2a26038 R14: 00007f3ae2a25fa0 R15: 00007fffef260118 [ 94.908203][ T8194] [ 94.909548][ T8194] irq event stamp: 2897 [ 94.911353][ T8194] hardirqs last enabled at (2901): [] __nbcon_atomic_flush_pending_con+0x293/0x440 [ 94.916035][ T8194] hardirqs last disabled at (2906): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 94.920207][ T8194] softirqs last enabled at (2888): [] __irq_exit_rcu+0x178/0x220 [ 94.924369][ T8194] softirqs last disabled at (2917): [] __irq_exit_rcu+0x178/0x220 [ 94.927668][ T8194] ---[ end trace 0000000000000000 ]--- [ 94.932869][ T8194] phram: ioremap failed [ 95.387111][ T6305] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.387144][ T6305] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.527620][ T6305] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.527641][ T6305] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.568995][ T6305] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.569016][ T6305] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.658008][ T6305] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.658040][ T6305] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.770204][ T42] audit: type=1400 audit(1793537806.943:626): avc: denied { read } for pid=5499 comm="dhcpcd" name="n44" dev="tmpfs" ino=2496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.770616][ T42] audit: type=1400 audit(1793537806.943:627): avc: denied { open } for pid=5499 comm="dhcpcd" path="/run/udev/data/n44" dev="tmpfs" ino=2496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.770928][ T42] audit: type=1400 audit(1793537806.943:628): avc: denied { getattr } for pid=5499 comm="dhcpcd" path="/run/udev/data/n44" dev="tmpfs" ino=2496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.784570][ T5875] netdevsim netdevsim3 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.819936][ T6305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.819971][ T6305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.834173][ T13] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.834211][ T13] netdevsim netdevsim3 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.834238][ T13] netdevsim netdevsim3 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.848908][ T42] audit: type=1400 audit(1793537807.023:629): avc: denied { write } for pid=8209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.849205][ T42] audit: type=1400 audit(1793537807.023:630): avc: denied { create } for pid=8209 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.849709][ T42] audit: type=1400 audit(1793537807.023:631): avc: denied { write } for pid=8209 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth6.link" dev="tmpfs" ino=2506 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.898778][ T6305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.898799][ T6305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.948862][ T5499] 8021q: adding VLAN 0 to HW filter on device eth6 [ 95.985912][ T6305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.985944][ T6305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.046902][ T6305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.046922][ T6305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.082082][ T5499] 8021q: adding VLAN 0 to HW filter on device eth7 [ 96.141533][ T13] netdevsim netdevsim1 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.159322][ T6305] bridge_slave_1: left allmulticast mode [ 96.159339][ T6305] bridge_slave_1: left promiscuous mode [ 96.161066][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.165257][ T6305] bridge_slave_0: left allmulticast mode [ 96.165279][ T6305] bridge_slave_0: left promiscuous mode [ 96.165463][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.202642][ T6305] bridge_slave_1: left allmulticast mode [ 96.202665][ T6305] bridge_slave_1: left promiscuous mode [ 96.202817][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.207105][ T6305] bridge_slave_0: left allmulticast mode [ 96.207128][ T6305] bridge_slave_0: left promiscuous mode [ 96.207246][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.412642][ T6305] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 96.412659][ T6305] bridge1 (unregistering): left promiscuous mode [ 96.412669][ T6305] bridge1 (unregistering): left allmulticast mode [ 96.421167][ T6305] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 96.421184][ T6305] bridge2 (unregistering): left promiscuous mode [ 96.421194][ T6305] bridge2 (unregistering): left allmulticast mode [ 96.425382][ T6305] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 96.425397][ T6305] bridge3 (unregistering): left promiscuous mode [ 96.425406][ T6305] bridge3 (unregistering): left allmulticast mode [ 96.439498][ T6305] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 96.439519][ T6305] bridge4 (unregistering): left promiscuous mode [ 96.439528][ T6305] bridge4 (unregistering): left allmulticast mode [ 96.442567][ T6305] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 96.442579][ T6305] bridge5 (unregistering): left promiscuous mode [ 96.442588][ T6305] bridge5 (unregistering): left allmulticast mode [ 96.453064][ T6305] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 96.453079][ T6305] bridge6 (unregistering): left promiscuous mode [ 96.453089][ T6305] bridge6 (unregistering): left allmulticast mode [ 96.469380][ T6305] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 96.469396][ T6305] bridge7 (unregistering): left promiscuous mode [ 96.469406][ T6305] bridge7 (unregistering): left allmulticast mode [ 96.472364][ T6305] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 96.472379][ T6305] bridge8 (unregistering): left promiscuous mode [ 96.486251][ T6305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.488840][ T6305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.489955][ T6305] bond0 (unregistering): Released all slaves [ 96.492782][ T6305] bond1 (unregistering): Released all slaves [ 96.500660][ T6305] bond2 (unregistering): Released all slaves [ 96.507817][ T6305] bond3 (unregistering): Released all slaves [ 96.518143][ T6305] bond4 (unregistering): Released all slaves [ 96.526877][ T6305] bond5 (unregistering): Released all slaves [ 96.531870][ T6305] bond6 (unregistering): Released all slaves [ 96.537612][ T6305] bond7 (unregistering): Released all slaves [ 96.542773][ T6305] bond8 (unregistering): Released all slaves [ 96.620144][ T6305] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 96.620160][ T6305] bridge2 (unregistering): left promiscuous mode [ 96.620169][ T6305] bridge2 (unregistering): left allmulticast mode [ 96.623049][ T6305] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 96.623061][ T6305] bridge3 (unregistering): left promiscuous mode [ 96.623070][ T6305] bridge3 (unregistering): left allmulticast mode [ 96.628973][ T6305] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 96.628986][ T6305] bridge4 (unregistering): left promiscuous mode [ 96.628995][ T6305] bridge4 (unregistering): left allmulticast mode [ 96.647381][ T6305] bond3 (unregistering): (slave bridge6): Releasing backup interface [ 96.647395][ T6305] bridge6 (unregistering): left promiscuous mode [ 96.647404][ T6305] bridge6 (unregistering): left allmulticast mode [ 96.653190][ T6305] bond4 (unregistering): (slave bridge7): Releasing backup interface [ 96.653204][ T6305] bridge7 (unregistering): left promiscuous mode [ 96.653212][ T6305] bridge7 (unregistering): left allmulticast mode [ 96.661143][ T6305] bond5 (unregistering): (slave bridge8): Releasing backup interface [ 96.661157][ T6305] bridge8 (unregistering): left promiscuous mode [ 96.661166][ T6305] bridge8 (unregistering): left allmulticast mode [ 96.679170][ T6305] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 96.679185][ T6305] bridge9 (unregistering): left promiscuous mode [ 96.679194][ T6305] bridge9 (unregistering): left allmulticast mode [ 96.695060][ T6305] bond7 (unregistering): (slave bridge11): Releasing backup interface [ 96.695075][ T6305] bridge11 (unregistering): left promiscuous mode [ 96.695084][ T6305] bridge11 (unregistering): left allmulticast mode [ 96.698020][ T6305] bond8 (unregistering): (slave bridge12): Releasing backup interface [ 96.698032][ T6305] bridge12 (unregistering): left promiscuous mode [ 96.698040][ T6305] bridge12 (unregistering): left allmulticast mode [ 96.700861][ T6305] bond9 (unregistering): (slave bridge13): Releasing backup interface [ 96.700872][ T6305] bridge13 (unregistering): left promiscuous mode [ 96.700880][ T6305] bridge13 (unregistering): left allmulticast mode [ 96.703621][ T6305] bond10 (unregistering): (slave bridge14): Releasing backup interface [ 96.703633][ T6305] bridge14 (unregistering): left promiscuous mode [ 96.703645][ T6305] bridge14 (unregistering): left allmulticast mode [ 96.718985][ T6305] bond11 (unregistering): (slave bridge15): Releasing backup interface [ 96.719000][ T6305] bridge15 (unregistering): left promiscuous mode [ 96.719010][ T6305] bridge15 (unregistering): left allmulticast mode [ 96.738614][ T6305] bond12 (unregistering): (slave bridge16): Releasing backup interface [ 96.738637][ T6305] bridge16 (unregistering): left promiscuous mode [ 96.738653][ T6305] bridge16 (unregistering): left allmulticast mode [ 96.743934][ T6305] bond13 (unregistering): (slave bridge17): Releasing backup interface [ 96.743949][ T6305] bridge17 (unregistering): left promiscuous mode [ 96.743958][ T6305] bridge17 (unregistering): left allmulticast mode [ 96.758601][ T6305] bond14 (unregistering): (slave bridge18): Releasing backup interface [ 96.758617][ T6305] bridge18 (unregistering): left promiscuous mode [ 96.758626][ T6305] bridge18 (unregistering): left allmulticast mode [ 96.761427][ T6305] bond0 (unregistering): Released all slaves [ 96.766885][ T6305] bond1 (unregistering): Released all slaves [ 96.772567][ T6305] bond2 (unregistering): Released all slaves [ 96.780355][ T6305] bond3 (unregistering): Released all slaves [ 96.785754][ T6305] bond4 (unregistering): Released all slaves [ 96.790727][ T6305] bond5 (unregistering): Released all slaves [ 96.796527][ T6305] bond6 (unregistering): Released all slaves [ 96.803112][ T6305] bond7 (unregistering): Released all slaves [ 96.810110][ T6305] bond8 (unregistering): Released all slaves [ 96.821316][ T6305] bond9 (unregistering): Released all slaves [ 96.827624][ T6305] bond10 (unregistering): Released all slaves [ 96.832466][ T6305] bond11 (unregistering): Released all slaves [ 96.845917][ T6305] bond12 (unregistering): Released all slaves [ 96.855432][ T6305] bond13 (unregistering): Released all slaves [ 96.860471][ T6305] bond14 (unregistering): Released all slaves [ 96.869299][ T5499] 8021q: adding VLAN 0 to HW filter on device eth8 [ 96.894138][ T13] netdevsim netdevsim1 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.894177][ T13] netdevsim netdevsim1 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.894203][ T13] netdevsim netdevsim1 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.076441][ T6305] tipc: Disabling bearer [ 97.079880][ T6305] tipc: Left network mode [ 97.086182][ T5499] 8021q: adding VLAN 0 to HW filter on device eth9 [ 97.100039][ T6305] IPVS: stopping master sync thread 5960 ... [ 97.239273][ T5499] 8021q: adding VLAN 0 to HW filter on device eth10 [ 97.409036][ T5499] 8021q: adding VLAN 0 to HW filter on device eth11 [ 97.560133][ T6305] hsr_slave_0: left promiscuous mode [ 97.560529][ T6305] hsr_slave_1: left promiscuous mode [ 97.560947][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.560975][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.561460][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.561469][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.572080][ T6305] hsr_slave_0: left promiscuous mode [ 97.575928][ T6305] hsr_slave_1: left promiscuous mode [ 97.576668][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.576680][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.579622][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.579632][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.600573][ T6305] veth1_macvtap: left allmulticast mode [ 97.600694][ T6305] veth1_macvtap: left promiscuous mode [ 97.600746][ T6305] veth0_macvtap: left promiscuous mode [ 97.600789][ T6305] veth1_vlan: left promiscuous mode [ 97.600824][ T6305] veth0_vlan: left promiscuous mode [ 97.602213][ T6305] veth1_macvtap: left promiscuous mode [ 97.602230][ T6305] veth0_macvtap: left promiscuous mode [ 97.602294][ T6305] veth1_vlan: left promiscuous mode [ 97.602330][ T6305] veth0_vlan: left promiscuous mode [ 97.802958][ T6305] team_slave_1 (unregistering): left allmulticast mode [ 97.803692][ T6305] team0 (unregistering): Port device team_slave_1 removed [ 97.811023][ T6305] team_slave_0 (unregistering): left allmulticast mode [ 97.811591][ T6305] team0 (unregistering): Port device team_slave_0 removed [ 97.981384][ T6305] team0 (unregistering): Port device team_slave_1 removed [ 97.987738][ T6305] team0 (unregistering): Port device team_slave_0 removed [ 98.079333][ T5499] 8021q: adding VLAN 0 to HW filter on device eth12 [ 98.282127][ T5499] 8021q: adding VLAN 0 to HW filter on device eth13 [ 98.596683][ T6305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.704607][ T6305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.791972][ T6305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.908081][ T6305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.003402][ T5875] netdevsim netdevsim4 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.004326][ T5875] netdevsim netdevsim4 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.017384][ T6305] bridge_slave_1: left allmulticast mode [ 99.017400][ T6305] bridge_slave_1: left promiscuous mode [ 99.017531][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.019250][ T6305] bridge_slave_0: left allmulticast mode [ 99.019263][ T6305] bridge_slave_0: left promiscuous mode [ 99.019348][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.111436][ T6305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.112778][ T6305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.113528][ T6305] bond0 (unregistering): Released all slaves [ 99.124125][ T5875] netdevsim netdevsim4 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.124174][ T13] netdevsim netdevsim4 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.323179][ T5499] 8021q: adding VLAN 0 to HW filter on device eth14 [ 99.441349][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 99.441363][ T42] audit: type=1400 audit(1793537810.613:664): avc: denied { write } for pid=8300 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.473662][ T6305] hsr_slave_0: left promiscuous mode [ 99.478109][ T6305] hsr_slave_1: left promiscuous mode [ 99.478526][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.478537][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.479129][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.479138][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.482117][ T6305] veth1_macvtap: left promiscuous mode [ 99.482136][ T6305] veth0_macvtap: left promiscuous mode [ 99.482179][ T6305] veth1_vlan: left promiscuous mode [ 99.482253][ T6305] veth0_vlan: left promiscuous mode [ 99.617213][ T6305] team0 (unregistering): Port device team_slave_1 removed [ 99.623909][ T6305] team0 (unregistering): Port device team_slave_0 removed [ 99.690592][ T5499] 8021q: adding VLAN 0 to HW filter on device eth15 [ 99.791216][ T42] audit: type=1400 audit(1793537810.963:665): avc: denied { write } for pid=8303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.842174][ T42] audit: type=1400 audit(1793537811.013:666): avc: denied { write } for pid=8306 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.889804][ T5499] 8021q: adding VLAN 0 to HW filter on device eth16 [ 99.969565][ T42] audit: type=1400 audit(1793537811.143:667): avc: denied { write } for pid=8309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.036646][ T42] audit: type=1400 audit(1793537811.213:668): avc: denied { write } for pid=8312 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.080662][ T5499] 8021q: adding VLAN 0 to HW filter on device eth17