last executing test programs: 2.290159822s ago: executing program 2 (id=339): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4804) eventfd2(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 2.245673251s ago: executing program 2 (id=340): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x7, "07bbfe000000000000000000000000000000000000000000e4ff00000000001c", 0xffffffffffffffff}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r7, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) ioctl$SIOCSIFHWADDR(r7, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000001c0)="c38f724d3086eb07287dce077883fcce6b69d3ae521ead02dac533fd00427baab0d7e0ad265bf0a9dc41629cb1d69aa431a3998115a8643ce175f60f9f4a4a3553bb42a26a82aff07abb966d1f4479ae3805492521e8313e28caf7767d29e33c8df1753a695b7ab57df59a56b35fa4d427acb1446ba46287c13112b9c936169159acee6f21", &(0x7f0000000180)=@udp=r9}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x1, 0x0) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{}]}) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000009000000000000640001000006020202020202010882848b960c121824"], 0x36) 2.021389053s ago: executing program 1 (id=346): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x2}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3a0c41383b216e3604bf8d3336b3458abbbd2dd5db51a0387a85a4d1144b515d3edb96cb3379033e51ba3e128d1fcbdc68eebb4ad2ab29ee3db45b54827418ee38cbeb97e2ed401b1217ad965dbc9979665067c5ddf928a86fcb995ab9e10e4ec2b96f6318cd4ede6527fc23f09f954777bb102fe2240a2ba225feee2518c011a914ada13915fcefdfbf810390a08b03b3c2de1956da408282aa845da33a1b0e647ddebedf434ad0f37448ec061cd19e5a26e4e4291f9933480495848c3d7e10c901c963a902f12efa500ba2f9b2abe9fbc370fcd823523f5dede3884d2075bc26f6c84786c7de1672e7db33"], 0x50) 1.994025842s ago: executing program 1 (id=347): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) 1.064326454s ago: executing program 1 (id=351): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@can={0x1d, r1}, 0x80, 0x0}, 0x8080) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) 1.064188708s ago: executing program 2 (id=352): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003880)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1000, @private1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="9a", 0x1}], 0x1}}], 0x1, 0x4004851) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff204e000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 980.222261ms ago: executing program 1 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_hcd.0', 0xb) (fail_nth: 10) 700.051643ms ago: executing program 1 (id=357): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4804) eventfd2(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 699.639579ms ago: executing program 1 (id=358): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000708000/0x4000)=nil, &(0x7f000081f000/0x3000)=nil, 0x4000, 0x1}) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x400c080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x27) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) 526.362771ms ago: executing program 0 (id=361): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x400000) 450.213994ms ago: executing program 0 (id=362): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/32, &(0x7f00000000c0)=0x20) 299.248117ms ago: executing program 3 (id=364): bpf$MAP_CREATE(0xf0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff"], 0x50) 298.423952ms ago: executing program 0 (id=365): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x5, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000180)=0xffff, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="4cb34f13c522dc652bbd7000fedbdf251c000000ea78c80065a24df0bb3e274d9062ec0538522110f4056bead31b6f05d4845f8630daff462a4da38a56ab1694c630592e8d03ec518c91ffdfc85e5a82ee45e782871cd7307a7b7cacbd2a0d18a21284821e9950f1", @ANYRES32=r6, @ANYBLOB="08000000080004000c00000008000100ac14141508000800", @ANYRES32=0x0, @ANYBLOB="08000a00ff00000008000b00010000000800090000000100080001000000000008000400ffff0000"], 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x24000000) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x10800) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 298.268899ms ago: executing program 3 (id=366): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_ublk_setup_io_uring(0x4020, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r1, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x79}, 0x90) 240.30854ms ago: executing program 0 (id=367): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4804) eventfd2(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 240.084824ms ago: executing program 0 (id=368): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000ffffff", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 180.100972ms ago: executing program 3 (id=369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x8, 0x2, 0x7, 0x10, 0x7, 0x7, 0x7, 0x7ff, 0x3, 0x1f, 0xc, 0x1b, 0x6, 0xffffffff, 0x5}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 179.641545ms ago: executing program 2 (id=370): r0 = socket(0x10, 0x5, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {0x2}, {0x7, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000840060000b10800064000000fff0500050002"], 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x18, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) recvmmsg$unix(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/144, 0x90}, {&(0x7f0000001740)=""/222, 0xde}], 0x4}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002940)=[{&(0x7f0000000640)=""/15, 0xf}, {&(0x7f0000001880)=""/82, 0x52}, {&(0x7f0000001900)=""/50, 0x32}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x4, &(0x7f0000002980)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x10041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4040005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000001840), 0x4) r6 = creat(&(0x7f0000002a40)='./file0\x00', 0x1b3) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r1, 0x1, {0x2, 0xf0, 0x4}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797374656d2e23ccaaaaaa"], &(0x7f00000004c0)=""/153, 0x99) 178.34969ms ago: executing program 0 (id=371): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) 110.262707ms ago: executing program 2 (id=372): mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back\n\x00', 0x2c) (async) write(0xffffffffffffffff, &(0x7f0000000300)='base=0x20000000 size=0x20000 type=write-back\n\x00', 0x2c) (async) write(0xffffffffffffffff, &(0x7f0000000400)='base=0x20004000 size=0x4000 type=write-back\n\x00', 0x2a) (async) listen(r0, 0x6) (async) write(0xffffffffffffffff, &(0x7f0000000500)='base=0x0 size=0x40000000 type=write-back\n\x00', 0x29) write(0xffffffffffffffff, &(0x7f0000000600)='base=0x20000000 size=0x40000000 type=uncachable\n\x00', 0x2e) (async) write(0xffffffffffffffff, &(0x7f0000000700)='disable=0\n\x00', 0xa) (async) write(0xffffffffffffffff, &(0x7f0000000800)='base=0x10000000 size=0x10000000 type=write-combining\n\x00', 0x33) (async) ioctl(0xffffffffffffffff, 0x40104d05, &(0x7f0000000900)="00000100000000000000010001000000") (async) ioctl(0xffffffffffffffff, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020001000000") ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) r2 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 89.678542ms ago: executing program 2 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000003800)=[{&(0x7f0000000100)="2e1221b23bb63f7f77d3df163e75963d86ddf06712e9000d2f8db0049d904972df48040000dbb8a10000", 0x2a}, {&(0x7f0000000240)="000001010000", 0x6}, {&(0x7f0000000280)="a43b2eaab40000", 0x7}, {&(0x7f0000000140)="00000000010000", 0x7}], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/urbnum\x00', 0x0, 0x0) read(r6, &(0x7f0000000380), 0x64) 87.628874ms ago: executing program 3 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xc00, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x9, 0x2a, [@random={0xdd, 0x3, 'abc'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0) 217.82µs ago: executing program 3 (id=375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000000)={0xc, r2}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[]) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 0s ago: executing program 3 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debugfs/kvm\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000200), 0x1000) r4 = openat(r3, &(0x7f0000000243), 0x0, 0x0) r5 = openat(r4, &(0x7f0000000300)='vcpu0/pid\x00', 0x0, 0x0) read(r5, &(0x7f0000000400), 0x64) close_range(r0, r0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='dummy_hcd.0', 0xb) kernel console output (not intermixed with test programs): [ 37.843168][ T42] audit: type=1400 audit(1785232691.921:115): avc: denied { siginh } for pid=5639 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:42780' (ED25519) to the list of known hosts. [ 38.587326][ T42] audit: type=1400 audit(1785232692.701:116): avc: denied { name_bind } for pid=5649 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.172052][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 41.172073][ T42] audit: type=1400 audit(1785232695.291:119): avc: denied { mounton } for pid=5650 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.185762][ T42] audit: type=1400 audit(1785232695.301:120): avc: denied { mount } for pid=5650 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.187639][ T5650] cgroup: Unknown subsys name 'net' [ 41.195764][ T42] audit: type=1400 audit(1785232695.301:121): avc: denied { write } for pid=5653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.195800][ T42] audit: type=1400 audit(1785232695.301:122): avc: denied { create } for pid=5653 comm="dhcpcd-run-hook" name="resolv.conf.ifb1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.195829][ T42] audit: type=1400 audit(1785232695.301:123): avc: denied { write open } for pid=5653 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ifb1.ipv4ll" dev="tmpfs" ino=1880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.195860][ T42] audit: type=1400 audit(1785232695.301:124): avc: denied { append } for pid=5653 comm="dhcpcd-run-hook" name="resolv.conf.ifb1.ipv4ll" dev="tmpfs" ino=1880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.195888][ T42] audit: type=1400 audit(1785232695.301:125): avc: denied { getattr } for pid=5653 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.216668][ T42] audit: type=1400 audit(1785232695.341:126): avc: denied { read } for pid=5656 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.255829][ T42] audit: type=1400 audit(1785232695.351:127): avc: denied { unmount } for pid=5650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.262301][ T42] audit: type=1400 audit(1785232695.371:128): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.473743][ T5650] cgroup: Unknown subsys name 'cpuset' [ 41.479186][ T5650] cgroup: Unknown subsys name 'rlimit' [ 41.735722][ T5667] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.469682][ T5650] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.644539][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 46.644551][ T42] audit: type=1400 audit(1785232700.761:161): avc: denied { execmem } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.820438][ T42] audit: type=1400 audit(1785232700.941:162): avc: denied { create } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.832466][ T42] audit: type=1400 audit(1785232700.941:163): avc: denied { read write } for pid=5736 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.840523][ T42] audit: type=1400 audit(1785232700.941:164): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.850130][ T42] audit: type=1400 audit(1785232700.951:165): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="socket:[3466]" dev="sockfs" ino=3466 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.872210][ T5751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.872569][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.875916][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.876583][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.876975][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.879927][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.880752][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.880940][ T5752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.883985][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.884168][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.884482][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.887159][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.887563][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.889532][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.891400][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.892115][ T42] audit: type=1400 audit(1785232701.011:166): avc: denied { read } for pid=5739 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.892142][ T42] audit: type=1400 audit(1785232701.011:167): avc: denied { open } for pid=5739 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.892250][ T42] audit: type=1400 audit(1785232701.011:168): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.896695][ T42] audit: type=1400 audit(1785232701.011:169): avc: denied { module_request } for pid=5739 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.898728][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.899599][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.900072][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.902211][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.905078][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.928501][ T42] audit: type=1400 audit(1785232701.041:170): avc: denied { sys_module } for pid=5739 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.481553][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.485370][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.488345][ T5736] bridge_slave_0: entered allmulticast mode [ 47.494953][ T5736] bridge_slave_0: entered promiscuous mode [ 47.517039][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.519378][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.522174][ T5736] bridge_slave_1: entered allmulticast mode [ 47.525527][ T5736] bridge_slave_1: entered promiscuous mode [ 47.600010][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.633880][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.674853][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.677215][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.679503][ T5745] bridge_slave_0: entered allmulticast mode [ 47.682624][ T5745] bridge_slave_0: entered promiscuous mode [ 47.708301][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.710926][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.713383][ T5745] bridge_slave_1: entered allmulticast mode [ 47.716137][ T5745] bridge_slave_1: entered promiscuous mode [ 47.729506][ T5736] team0: Port device team_slave_0 added [ 47.748634][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.751906][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.754951][ T5738] bridge_slave_0: entered allmulticast mode [ 47.758788][ T5738] bridge_slave_0: entered promiscuous mode [ 47.769738][ T5736] team0: Port device team_slave_1 added [ 47.788857][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.792105][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.795262][ T5738] bridge_slave_1: entered allmulticast mode [ 47.799066][ T5738] bridge_slave_1: entered promiscuous mode [ 47.815309][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.856033][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.862225][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.867083][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.870096][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.880771][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.887246][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.890270][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.901120][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.905727][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.908786][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.911932][ T5739] bridge_slave_0: entered allmulticast mode [ 47.915546][ T5739] bridge_slave_0: entered promiscuous mode [ 47.921959][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.955389][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.958237][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.961583][ T5739] bridge_slave_1: entered allmulticast mode [ 47.964906][ T5739] bridge_slave_1: entered promiscuous mode [ 47.979512][ T5745] team0: Port device team_slave_0 added [ 47.983955][ T5745] team0: Port device team_slave_1 added [ 48.005486][ T5738] team0: Port device team_slave_0 added [ 48.032055][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.034224][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.041996][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.048043][ T5738] team0: Port device team_slave_1 added [ 48.060335][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.064140][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.066806][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.076108][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.099762][ T5736] hsr_slave_0: entered promiscuous mode [ 48.103237][ T5736] hsr_slave_1: entered promiscuous mode [ 48.108393][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.136589][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.139911][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.150860][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.157109][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.160015][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.171896][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.188631][ T5739] team0: Port device team_slave_0 added [ 48.222641][ T5739] team0: Port device team_slave_1 added [ 48.243952][ T5745] hsr_slave_0: entered promiscuous mode [ 48.247110][ T5745] hsr_slave_1: entered promiscuous mode [ 48.250201][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.252566][ T5745] Cannot create hsr debugfs directory [ 48.308558][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.310824][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.318646][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.352820][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.355068][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.363395][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.387582][ T5738] hsr_slave_0: entered promiscuous mode [ 48.390871][ T5738] hsr_slave_1: entered promiscuous mode [ 48.393756][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 48.396099][ T5738] Cannot create hsr debugfs directory [ 48.551071][ T5739] hsr_slave_0: entered promiscuous mode [ 48.554373][ T5739] hsr_slave_1: entered promiscuous mode [ 48.557212][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 48.559523][ T5739] Cannot create hsr debugfs directory [ 48.723095][ T5736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.730796][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.748665][ T5736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.754756][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.757840][ T5736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.763030][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.775760][ T5736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.781057][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.820960][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.826988][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.833438][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.837661][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.840481][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.844250][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.846990][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.851275][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.891244][ T5750] Bluetooth: hci2: command tx timeout [ 48.899552][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.904534][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.907286][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.911207][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.918413][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.923545][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.926430][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.931675][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.970558][ T5750] Bluetooth: hci0: command tx timeout [ 48.971678][ T5751] Bluetooth: hci1: command tx timeout [ 48.973340][ T5749] Bluetooth: hci3: command tx timeout [ 49.001740][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.007243][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.011156][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.015510][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.024895][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.028778][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.032058][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.035726][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.064182][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.077714][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.111449][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.115168][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.131379][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.134062][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.138375][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.140573][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.147189][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.149371][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.156415][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.169241][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.171444][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.190295][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.216031][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.218307][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.233611][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.236189][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.250479][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.285869][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.299574][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.301876][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.310871][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.313142][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.367612][ T5739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.468543][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.503389][ T5736] veth0_vlan: entered promiscuous mode [ 49.511802][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.515979][ T5736] veth1_vlan: entered promiscuous mode [ 49.543666][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.576366][ T5736] veth0_macvtap: entered promiscuous mode [ 49.588837][ T5738] veth0_vlan: entered promiscuous mode [ 49.591435][ T5736] veth1_macvtap: entered promiscuous mode [ 49.607182][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.620896][ T5738] veth1_vlan: entered promiscuous mode [ 49.627007][ T5745] veth0_vlan: entered promiscuous mode [ 49.633438][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.643273][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.652956][ T5745] veth1_vlan: entered promiscuous mode [ 49.659557][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.667122][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.670468][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.682097][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.707728][ T5739] veth0_vlan: entered promiscuous mode [ 49.722987][ T5738] veth0_macvtap: entered promiscuous mode [ 49.732452][ T5738] veth1_macvtap: entered promiscuous mode [ 49.740999][ T5739] veth1_vlan: entered promiscuous mode [ 49.774725][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.777683][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.781354][ T5745] veth0_macvtap: entered promiscuous mode [ 49.792288][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.808540][ T5745] veth1_macvtap: entered promiscuous mode [ 49.818438][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.829459][ T212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.833111][ T212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.833514][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.839311][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.846623][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.849637][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.860938][ T5739] veth0_macvtap: entered promiscuous mode [ 49.870743][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.876931][ T5739] veth1_macvtap: entered promiscuous mode [ 49.901473][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.903313][ T5736] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.931564][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.938566][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.948852][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.952296][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.956044][ T212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.959535][ T212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.966354][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.983725][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.027159][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.030870][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.051115][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.053966][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.096680][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.110894][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.111364][ T212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.114345][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.117479][ T212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.121741][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.270091][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.273750][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.300120][ T5896] syzkaller0: entered promiscuous mode [ 50.301946][ T5896] syzkaller0: entered allmulticast mode [ 50.302700][ T5898] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5'. [ 50.321641][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.324640][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.634718][ T5918] ALSA: seq fatal error: cannot create timer (-19) [ 50.640129][ T5918] syzkaller0: entered promiscuous mode [ 50.642474][ T5918] syzkaller0: entered allmulticast mode [ 50.658185][ T5918] tc action pedit 'at' offset 20 out of bounds [ 50.879902][ T41] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.941031][ T5934] capability: warning: `syz.3.10' uses deprecated v2 capabilities in a way that may be insecure [ 50.979929][ T5749] Bluetooth: hci2: command tx timeout [ 51.011827][ T41] usb 5-1: device descriptor read/64, error -71 [ 51.050936][ T5750] Bluetooth: hci3: command tx timeout [ 51.050999][ T5751] Bluetooth: hci0: command tx timeout [ 51.053165][ T5749] Bluetooth: hci1: command tx timeout [ 51.117582][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 51.131413][ T5949] macvlan0: entered allmulticast mode [ 51.133189][ T5949] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 51.145050][ T5949] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 51.228238][ T5956] netlink: 100 bytes leftover after parsing attributes in process `syz.2.14'. [ 51.260468][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.390246][ T41] usb 5-1: device descriptor read/64, error -71 [ 51.395813][ T5969] program syz.2.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.416471][ T5969] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.423041][ T5969] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.511073][ T41] usb usb5-port1: attempt power cycle [ 51.521454][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 51.532552][ T5979] macvlan1: entered allmulticast mode [ 51.539581][ T5979] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 51.661953][ T42] kauditd_printk_skb: 90 callbacks suppressed [ 51.661963][ T42] audit: type=1400 audit(1785232705.781:261): avc: denied { write } for pid=5988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.707964][ T42] audit: type=1400 audit(1785232705.821:262): avc: denied { write } for pid=5991 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.722851][ T42] audit: type=1400 audit(1785232705.841:263): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 51.759925][ T50] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.870166][ T41] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.900799][ T41] usb 5-1: device descriptor read/8, error -71 [ 51.919940][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 51.923930][ T50] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 51.926399][ T50] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 51.928867][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 51.931814][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 51.934597][ T50] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 51.937407][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.942212][ T50] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 51.945511][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.950920][ T50] usb 6-1: config 0 descriptor?? [ 52.149965][ T41] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 52.167567][ T50] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 52.181475][ T41] usb 5-1: device descriptor read/8, error -71 [ 52.291240][ T41] usb usb5-port1: unable to enumerate USB device [ 52.361838][ T42] audit: type=1400 audit(1785232706.481:264): avc: denied { read write } for pid=5976 comm="syz.1.17" name="lp0" dev="devtmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 52.370675][ T42] audit: type=1400 audit(1785232706.481:265): avc: denied { open } for pid=5976 comm="syz.1.17" path="/dev/usb/lp0" dev="devtmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 52.427041][ T50] usb 6-1: USB disconnect, device number 2 [ 52.438143][ T50] usblp0: removed [ 52.616573][ T42] audit: type=1400 audit(1785232706.731:266): avc: denied { create } for pid=5999 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.621935][ T6001] syzkaller0: entered promiscuous mode [ 52.624469][ T42] audit: type=1400 audit(1785232706.731:267): avc: denied { shutdown } for pid=5999 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.625933][ T6001] syzkaller0: entered allmulticast mode [ 52.797944][ T6006] netlink: 100 bytes leftover after parsing attributes in process `syz.3.24'. [ 52.988594][ T42] audit: type=1400 audit(1785232707.101:268): avc: denied { create } for pid=6010 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.988963][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 53.010708][ T6011] macvlan2: entered allmulticast mode [ 53.012445][ T6011] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 53.021099][ T6011] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 53.050003][ T5749] Bluetooth: hci2: command tx timeout [ 53.112785][ T42] audit: type=1400 audit(1785232707.231:269): avc: denied { setopt } for pid=6016 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.130198][ T5749] Bluetooth: hci1: command tx timeout [ 53.130954][ T5751] Bluetooth: hci0: command tx timeout [ 53.131066][ T5750] Bluetooth: hci3: command tx timeout [ 53.155492][ T42] audit: type=1400 audit(1785232707.271:270): avc: denied { write } for pid=6025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.465511][ T6037] syzkaller0: entered promiscuous mode [ 53.467285][ T6037] syzkaller0: entered allmulticast mode [ 53.622984][ T6046] netlink: 100 bytes leftover after parsing attributes in process `syz.3.33'. [ 53.691887][ T6058] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 53.714046][ T6061] 9pnet_virtio: no channels available for device syz [ 53.801103][ T1136] ata1.00: exception Emask 0x0 SAct 0x800 SErr 0x0 action 0x6 [ 53.803551][ T1136] ata1.00: waking up from sleep [ 53.805101][ T1136] ata1: hard resetting link [ 54.124054][ T1136] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 54.132319][ T1136] ata1.00: configured for UDMA/100 [ 54.134298][ T1136] ata1: EH complete [ 54.354790][ T6080] syzkaller0: entered promiscuous mode [ 54.356719][ T6080] syzkaller0: entered allmulticast mode [ 54.447766][ T6086] netlink: 100 bytes leftover after parsing attributes in process `syz.2.45'. [ 54.558746][ T6099] Zero length message leads to an empty skb [ 54.563495][ T6098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6098 comm=syz.2.48 [ 54.630920][ T6105] FAULT_INJECTION: forcing a failure. [ 54.630920][ T6105] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.635479][ T6105] CPU: 3 UID: 0 PID: 6105 Comm: syz.0.51 Not tainted syzkaller #0 PREEMPT(full) [ 54.635494][ T6105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.635500][ T6105] Call Trace: [ 54.635505][ T6105] [ 54.635509][ T6105] dump_stack_lvl+0x100/0x190 [ 54.635527][ T6105] should_fail_ex.cold+0x5/0xa [ 54.635542][ T6105] _copy_from_user+0x2e/0xd0 [ 54.635563][ T6105] copy_msghdr_from_user+0x9f/0x4c0 [ 54.635582][ T6105] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 54.635606][ T6105] ___sys_sendmsg+0x106/0x1e0 [ 54.635625][ T6105] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.635642][ T6105] ? __lock_acquire+0x49f/0x1a40 [ 54.635656][ T6105] ? get_pid_task+0x106/0x250 [ 54.635687][ T6105] __sys_sendmsg+0x160/0x210 [ 54.635701][ T6105] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.635722][ T6105] do_syscall_64+0x115/0x870 [ 54.635734][ T6105] ? clear_bhb_loop+0x40/0x90 [ 54.635748][ T6105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.635759][ T6105] RIP: 0033:0x7f549799de99 [ 54.635769][ T6105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.635779][ T6105] RSP: 002b:00007f549890b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.635790][ T6105] RAX: ffffffffffffffda RBX: 00007f5497c25fa0 RCX: 00007f549799de99 [ 54.635797][ T6105] RDX: 000000002400c800 RSI: 0000200000000300 RDI: 0000000000000003 [ 54.635804][ T6105] RBP: 00007f549890b090 R08: 0000000000000000 R09: 0000000000000000 [ 54.635810][ T6105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.635816][ T6105] R13: 00007f5497c26038 R14: 00007f5497c25fa0 R15: 00007fffd6a64ca8 [ 54.635829][ T6105] [ 54.747728][ T6109] syzkaller0: entered promiscuous mode [ 54.749557][ T6109] syzkaller0: entered allmulticast mode [ 55.001684][ T6121] syz.1.57 uses obsolete (PF_INET,SOCK_PACKET) [ 55.027916][ T6118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.56'. [ 55.031170][ T6118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.56'. [ 55.051065][ T6127] No source specified [ 55.057679][ T6127] input: syz0 as /devices/virtual/input/input5 [ 55.073054][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.076719][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.124460][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.129143][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.141220][ T5751] Bluetooth: hci2: command tx timeout [ 55.188726][ T5816] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.191415][ T5816] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.193944][ T5816] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.196831][ T5816] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.210479][ T5751] Bluetooth: hci1: command tx timeout [ 55.219908][ T5751] Bluetooth: hci0: command tx timeout [ 55.683060][ T6145] syzkaller0: entered promiscuous mode [ 55.684780][ T6145] syzkaller0: entered allmulticast mode [ 55.907462][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.69'. [ 55.919444][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.68'. [ 55.922837][ T6149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.68'. [ 55.962623][ T6155] hsr0: entered promiscuous mode [ 55.965013][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 55.968360][ T6155] hsr_slave_0: left promiscuous mode [ 55.971631][ T6155] hsr_slave_1: left promiscuous mode [ 55.976718][ T6155] hsr0 (unregistering): left promiscuous mode [ 56.296718][ T6175] syzkaller0: entered promiscuous mode [ 56.298470][ T6175] syzkaller0: entered allmulticast mode [ 56.630515][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.79'. [ 56.633303][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.79'. [ 56.768401][ T5751] Bluetooth: hci1: Malformed HCI Event [ 56.848283][ T6196] syzkaller0: entered promiscuous mode [ 56.850614][ T6196] syzkaller0: entered allmulticast mode [ 56.869756][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 56.869768][ T42] audit: type=1400 audit(1785232710.981:315): avc: denied { read } for pid=6192 comm="syz.1.84" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.880369][ T42] audit: type=1400 audit(1785232710.991:316): avc: denied { open } for pid=6192 comm="syz.1.84" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.888970][ T42] audit: type=1400 audit(1785232710.991:317): avc: denied { ioctl } for pid=6192 comm="syz.1.84" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.898709][ T42] audit: type=1400 audit(1785232710.991:318): avc: denied { read write } for pid=6192 comm="syz.1.84" name="2:0:0:0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.907456][ T42] audit: type=1400 audit(1785232710.991:319): avc: denied { open } for pid=6192 comm="syz.1.84" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.914613][ T42] audit: type=1400 audit(1785232710.991:320): avc: denied { ioctl } for pid=6192 comm="syz.1.84" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=729 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.995270][ T42] audit: type=1400 audit(1785232711.111:321): avc: denied { mount } for pid=6200 comm="syz.3.86" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.009584][ T42] audit: type=1400 audit(1785232711.121:322): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.166276][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'. [ 57.169073][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'. [ 57.364220][ T42] audit: type=1400 audit(1785232711.481:323): avc: denied { name_bind } for pid=6213 comm="syz.0.92" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 57.364443][ T6216] random: crng reseeded on system resumption [ 57.372457][ T42] audit: type=1400 audit(1785232711.481:324): avc: denied { node_bind } for pid=6213 comm="syz.0.92" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 57.454647][ T6223] ======================================================= [ 57.454647][ T6223] WARNING: The mand mount option has been deprecated and [ 57.454647][ T6223] and is ignored by this kernel. Remove the mand [ 57.454647][ T6223] option from the mount to silence this warning. [ 57.454647][ T6223] ======================================================= [ 57.523498][ T6228] syzkaller0: entered promiscuous mode [ 57.525176][ T6228] syzkaller0: entered allmulticast mode [ 57.661552][ T6237] netlink: 48 bytes leftover after parsing attributes in process `syz.1.95'. [ 57.666708][ T6237] netlink: 48 bytes leftover after parsing attributes in process `syz.1.95'. [ 57.714340][ T5751] Bluetooth: hci1: Malformed LE Event: 0x02 [ 58.265165][ T6266] syzkaller0: entered promiscuous mode [ 58.266943][ T6266] syzkaller0: entered allmulticast mode [ 58.574361][ T6285] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 58.583925][ T6285] romfs: unable to set blocksize [ 58.583925][ T6285] [ 58.868755][ T6301] dummy_hcd dummy_hcd.0: remove, state 4 [ 58.872169][ T6301] usb usb5: USB disconnect, device number 1 [ 58.898982][ T6301] dummy_hcd dummy_hcd.0: stopped [ 58.901517][ T6301] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 58.915099][ T6301] FAULT_INJECTION: forcing a failure. [ 58.915099][ T6301] name failslab, interval 1, probability 0, space 0, times 1 [ 58.923168][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT(full) [ 58.923192][ T6301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.923203][ T6301] Call Trace: [ 58.923210][ T6301] [ 58.923217][ T6301] dump_stack_lvl+0x100/0x190 [ 58.923245][ T6301] should_fail_ex.cold+0x5/0xa [ 58.923270][ T6301] should_failslab+0xc2/0x120 [ 58.923293][ T6301] kmem_cache_alloc_noprof+0x91/0x6a0 [ 58.923313][ T6301] ? __asan_memcpy+0x3c/0x60 [ 58.923328][ T6301] ? __kernfs_new_node+0xd2/0xa10 [ 58.923364][ T6301] __kernfs_new_node+0xd2/0xa10 [ 58.923386][ T6301] ? check_prev_add+0x354/0xe60 [ 58.923408][ T6301] ? __pfx___kernfs_new_node+0x10/0x10 [ 58.923435][ T6301] ? find_held_lock+0x2b/0x80 [ 58.923462][ T6301] ? kernfs_root+0xee/0x2a0 [ 58.923478][ T6301] ? kernfs_root+0xee/0x2a0 [ 58.923502][ T6301] kernfs_new_node+0x117/0x150 [ 58.923526][ T6301] kernfs_create_link+0xcc/0x240 [ 58.923553][ T6301] sysfs_do_create_link_sd+0x90/0x140 [ 58.923572][ T6301] sysfs_create_link+0x61/0xc0 [ 58.923590][ T6301] driver_sysfs_add+0x91/0x2d0 [ 58.923612][ T6301] really_probe+0x146/0xa60 [ 58.923636][ T6301] __driver_probe_device+0x20e/0x450 [ 58.923666][ T6301] device_driver_attach+0xd1/0x220 [ 58.923689][ T6301] bind_store+0xf4/0x190 [ 58.923704][ T6301] ? __pfx_bind_store+0x10/0x10 [ 58.923721][ T6301] drv_attr_store+0x74/0xb0 [ 58.923747][ T6301] ? __pfx_drv_attr_store+0x10/0x10 [ 58.923772][ T6301] sysfs_kf_write+0xf2/0x150 [ 58.923799][ T6301] kernfs_fop_write_iter+0x3e0/0x5f0 [ 58.923821][ T6301] ? __pfx_sysfs_kf_write+0x10/0x10 [ 58.923848][ T6301] vfs_write+0x6ac/0x1050 [ 58.923877][ T6301] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 58.923903][ T6301] ? __pfx_vfs_write+0x10/0x10 [ 58.923966][ T6301] ksys_write+0x12a/0x250 [ 58.923995][ T6301] ? __pfx_ksys_write+0x10/0x10 [ 58.924030][ T6301] do_syscall_64+0x115/0x870 [ 58.924051][ T6301] ? clear_bhb_loop+0x40/0x90 [ 58.924072][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.924090][ T6301] RIP: 0033:0x7f9a1c59de99 [ 58.924104][ T6301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.924120][ T6301] RSP: 002b:00007f9a1d3f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.924137][ T6301] RAX: ffffffffffffffda RBX: 00007f9a1c825fa0 RCX: 00007f9a1c59de99 [ 58.924148][ T6301] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000004 [ 58.924158][ T6301] RBP: 00007f9a1d3f9090 R08: 0000000000000000 R09: 0000000000000000 [ 58.924168][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.924177][ T6301] R13: 00007f9a1c826038 R14: 00007f9a1c825fa0 R15: 00007fff5cc0bfb8 [ 58.924202][ T6301] [ 58.937651][ T6301] dummy_hcd dummy_hcd.0: really_probe: driver_sysfs_add failed [ 58.975231][ T6313] syzkaller0: entered promiscuous mode [ 58.987040][ T6315] ublk_ctrl_add_dev: invalid recovery flags 10 [ 58.989046][ T6313] syzkaller0: entered allmulticast mode [ 59.133256][ T6323] netlink: 'syz.3.121': attribute type 2 has an invalid length. [ 59.201918][ T6325] vlan2: entered promiscuous mode [ 59.204177][ T6325] bridge0: entered promiscuous mode [ 59.636357][ T6341] 9pnet_virtio: no channels available for device syz [ 59.879261][ T6356] batman_adv: batadv0: Adding interface: dummy0 [ 59.885557][ T6356] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.894921][ T6356] batman_adv: batadv0: Interface activated: dummy0 [ 59.903432][ T6356] batadv0: mtu less than device minimum [ 59.906069][ T6356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.910449][ T6356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.914069][ T6356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.917699][ T6356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.921431][ T6356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.925016][ T6356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.928540][ T6356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.932067][ T6356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.936098][ T6356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 59.949023][ T6357] netlink: 'syz.0.133': attribute type 12 has an invalid length. [ 60.124432][ T6372] syzkaller0: entered promiscuous mode [ 60.126305][ T6372] syzkaller0: entered allmulticast mode [ 60.316631][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 60.460589][ T5833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.562576][ T5833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.657995][ T5833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.762423][ T5833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.891594][ T5833] bridge_slave_1: left allmulticast mode [ 60.893893][ T5833] bridge_slave_1: left promiscuous mode [ 60.898129][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.907947][ T5833] bridge_slave_0: left allmulticast mode [ 60.911441][ T5833] bridge_slave_0: left promiscuous mode [ 60.914017][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.012439][ T5833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.017381][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.024769][ T5833] bond0 (unregistering): Released all slaves [ 61.365736][ T5833] hsr_slave_0: left promiscuous mode [ 61.368286][ T5833] hsr_slave_1: left promiscuous mode [ 61.372029][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.393720][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.397752][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.422314][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.426073][ T5833] batman_adv: batadv0: Interface deactivated: dummy0 [ 61.428752][ T5833] batman_adv: batadv0: Removing interface: dummy0 [ 61.437050][ T5833] veth1_macvtap: left promiscuous mode [ 61.439997][ T5833] veth0_macvtap: left promiscuous mode [ 61.442289][ T5833] veth1_vlan: left promiscuous mode [ 61.444462][ T5833] veth0_vlan: left promiscuous mode [ 61.640965][ T5833] team0 (unregistering): Port device team_slave_1 removed [ 61.652820][ T5833] team0 (unregistering): Port device team_slave_0 removed [ 61.762660][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 61.781008][ T5847] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 61.916941][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 61.916960][ T42] audit: type=1400 audit(1785232716.031:418): avc: denied { write } for pid=6422 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.962587][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.048678][ T42] audit: type=1400 audit(1785232716.161:419): avc: denied { write } for pid=6425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.116339][ T42] audit: type=1400 audit(1785232716.231:420): avc: denied { write } for pid=6428 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.170231][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 62.249295][ T42] audit: type=1400 audit(1785232716.361:421): avc: denied { write } for pid=6431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.309529][ T42] audit: type=1400 audit(1785232716.421:422): avc: denied { write } for pid=6434 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.367661][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 62.408207][ T42] audit: type=1400 audit(1785232716.521:423): avc: denied { write } for pid=6436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.462067][ T42] audit: type=1400 audit(1785232716.581:424): avc: denied { write } for pid=6439 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.551321][ T42] audit: type=1400 audit(1785232716.671:425): avc: denied { write } for pid=6441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.606758][ T42] audit: type=1400 audit(1785232716.721:426): avc: denied { write } for pid=6444 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.682844][ T42] audit: type=1400 audit(1785232716.801:427): avc: denied { write } for pid=6446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.334061][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 67.334079][ T42] audit: type=1400 audit(1785232721.451:437): avc: denied { write } for pid=6498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.398573][ T42] audit: type=1400 audit(1785232721.511:438): avc: denied { write } for pid=6501 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.462838][ T42] audit: type=1400 audit(1785232721.581:439): avc: denied { write } for pid=6503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.520412][ T42] audit: type=1400 audit(1785232721.641:440): avc: denied { write } for pid=6506 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.614568][ T42] audit: type=1400 audit(1785232721.731:441): avc: denied { write } for pid=6508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.669567][ T42] audit: type=1400 audit(1785232721.781:442): avc: denied { write } for pid=6511 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.832231][ T42] audit: type=1400 audit(1785232722.951:443): avc: denied { write } for pid=6514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.872730][ T42] audit: type=1400 audit(1785232722.991:444): avc: denied { write } for pid=6517 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.612666][ T42] audit: type=1400 audit(1785232723.731:445): avc: denied { write } for pid=6524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.659168][ T42] audit: type=1400 audit(1785232723.771:446): avc: denied { write } for pid=6527 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.212730][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.216091][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.318761][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 73.318778][ T42] audit: type=1400 audit(1785232727.431:453): avc: denied { write } for pid=6547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.371512][ T42] audit: type=1400 audit(1785232727.491:454): avc: denied { write } for pid=6550 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.823339][ T42] audit: type=1400 audit(1785232727.941:455): avc: denied { read } for pid=6554 comm="syz.2.143" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.825954][ T6556] syzkaller0: entered promiscuous mode [ 73.833081][ T42] audit: type=1400 audit(1785232727.941:456): avc: denied { open } for pid=6554 comm="syz.2.143" path="/dev/rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.834980][ T6556] syzkaller0: entered allmulticast mode [ 73.844911][ T42] audit: type=1400 audit(1785232727.941:457): avc: denied { ioctl } for pid=6554 comm="syz.2.143" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.850719][ T6556] tipc: Started in network mode [ 73.854895][ T42] audit: type=1400 audit(1785232727.961:458): avc: denied { read write } for pid=6560 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.857053][ T6556] tipc: Node identity fee97cb8c69b, cluster identity 4711 [ 73.859907][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.863458][ T42] audit: type=1400 audit(1785232727.961:459): avc: denied { open } for pid=6560 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.865991][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.867587][ T6556] tipc: Enabled bearer , priority 0 [ 73.869547][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.870263][ T6563] netlink: 'syz.3.144': attribute type 2 has an invalid length. [ 73.885569][ T6556] tipc: Resetting bearer [ 73.889654][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.894201][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.897004][ T6554] tipc: Resetting bearer [ 73.912435][ T6554] tipc: Disabling bearer [ 73.917243][ T42] audit: type=1400 audit(1785232728.031:460): avc: denied { connect } for pid=6553 comm="syz.1.142" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.034243][ T42] audit: type=1400 audit(1785232728.151:461): avc: denied { write } for pid=6569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.050125][ T42] audit: type=1400 audit(1785232728.151:462): avc: denied { read write } for pid=5736 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.220854][ T6587] syzkaller0: entered promiscuous mode [ 74.222770][ T6587] syzkaller0: entered allmulticast mode [ 74.335946][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.338279][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.342208][ T6560] bridge_slave_0: entered allmulticast mode [ 74.345000][ T6560] bridge_slave_0: entered promiscuous mode [ 74.349141][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.351741][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.354468][ T6560] bridge_slave_1: entered allmulticast mode [ 74.358014][ T6560] bridge_slave_1: entered promiscuous mode [ 74.386509][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.391998][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.422839][ T6560] team0: Port device team_slave_0 added [ 74.425942][ T6560] team0: Port device team_slave_1 added [ 74.446948][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.450250][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.460034][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.465338][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.467612][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.476327][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.604955][ T6560] hsr_slave_0: entered promiscuous mode [ 74.607230][ T6560] hsr_slave_1: entered promiscuous mode [ 74.609410][ T6560] debugfs: 'hsr0' already exists in 'hsr' [ 74.611295][ T6560] Cannot create hsr debugfs directory [ 74.688619][ T6603] __nla_validate_parse: 154 callbacks suppressed [ 74.688634][ T6603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.150'. [ 74.890793][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'. [ 75.254129][ T6560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.259369][ T6560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.264643][ T6560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.275889][ T6560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.280827][ T6560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.287175][ T6560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.297265][ T6560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.303885][ T6560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.309381][ T6628] syzkaller0: entered promiscuous mode [ 75.311536][ T6628] syzkaller0: entered allmulticast mode [ 75.454675][ T6643] FAULT_INJECTION: forcing a failure. [ 75.454675][ T6643] name failslab, interval 1, probability 0, space 0, times 0 [ 75.464574][ T6643] CPU: 2 UID: 0 PID: 6643 Comm: syz.2.157 Not tainted syzkaller #0 PREEMPT(full) [ 75.464599][ T6643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.464609][ T6643] Call Trace: [ 75.464616][ T6643] [ 75.464623][ T6643] dump_stack_lvl+0x100/0x190 [ 75.464651][ T6643] should_fail_ex.cold+0x5/0xa [ 75.464674][ T6643] should_failslab+0xc2/0x120 [ 75.464697][ T6643] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 75.464719][ T6643] ? __alloc_skb+0x5b7/0x710 [ 75.464739][ T6643] ? __alloc_skb+0x140/0x710 [ 75.464763][ T6643] __alloc_skb+0x140/0x710 [ 75.464781][ T6643] ? __alloc_skb+0x5b7/0x710 [ 75.464800][ T6643] ? __pfx___alloc_skb+0x10/0x10 [ 75.464827][ T6643] netlink_alloc_large_skb+0x69/0x150 [ 75.464847][ T6643] netlink_sendmsg+0x680/0xda0 [ 75.464869][ T6643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.464889][ T6643] ? selinux_socket_sendmsg+0x198/0x2f0 [ 75.464921][ T6643] ____sys_sendmsg+0xa4d/0xbe0 [ 75.464946][ T6643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.464965][ T6643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.465002][ T6643] ___sys_sendmsg+0x190/0x1e0 [ 75.465032][ T6643] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.465057][ T6643] ? __lock_acquire+0x49f/0x1a40 [ 75.465080][ T6643] ? get_pid_task+0x106/0x250 [ 75.465135][ T6643] __sys_sendmsg+0x160/0x210 [ 75.465159][ T6643] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.465211][ T6643] do_syscall_64+0x115/0x870 [ 75.465231][ T6643] ? clear_bhb_loop+0x40/0x90 [ 75.465253][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.465271][ T6643] RIP: 0033:0x7f7368f9de99 [ 75.465315][ T6643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.465331][ T6643] RSP: 002b:00007f7369d89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.465351][ T6643] RAX: ffffffffffffffda RBX: 00007f7369225fa0 RCX: 00007f7368f9de99 [ 75.465363][ T6643] RDX: 000000002400c800 RSI: 0000200000000300 RDI: 0000000000000003 [ 75.465374][ T6643] RBP: 00007f7369d89090 R08: 0000000000000000 R09: 0000000000000000 [ 75.465383][ T6643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.465393][ T6643] R13: 00007f7369226038 R14: 00007f7369225fa0 R15: 00007ffe3bcc4a98 [ 75.465417][ T6643] [ 75.509270][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.583973][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.617758][ T6560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.626152][ T6560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.765604][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.768862][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.780978][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.784170][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.841107][ T6656] tipc: Enabled bearer , priority 0 [ 75.864908][ T6654] tipc: Disabling bearer [ 75.897666][ T6663] netlink: 64 bytes leftover after parsing attributes in process `syz.1.161'. [ 75.940833][ T5751] Bluetooth: hci3: command tx timeout [ 76.120448][ T6680] syzkaller0: entered promiscuous mode [ 76.122297][ T6680] syzkaller0: entered allmulticast mode [ 76.161777][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.163'. [ 76.206602][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.247440][ T6560] veth0_vlan: entered promiscuous mode [ 76.257104][ T6560] veth1_vlan: entered promiscuous mode [ 76.282292][ T6560] veth0_macvtap: entered promiscuous mode [ 76.286348][ T6560] veth1_macvtap: entered promiscuous mode [ 76.297034][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.308474][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.319517][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.324119][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.328263][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.337988][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.390496][ T6701] syzkaller0: entered promiscuous mode [ 76.393010][ T6701] syzkaller0: entered allmulticast mode [ 76.464873][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.468833][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.474438][ T6713] xt_policy: output policy not valid in PREROUTING and INPUT [ 76.491527][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.494610][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.592737][ T6718] process 'syz.3.171' launched './file0' with NULL argv: empty string added [ 76.606490][ T6725] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 76.669912][ T5794] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 76.723171][ T6725] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 76.729319][ T6725] syzkaller1: linktype set to 776 [ 76.742901][ T6739] syzkaller0: entered promiscuous mode [ 76.744946][ T6739] syzkaller0: entered allmulticast mode [ 76.820513][ T5794] usb 6-1: Invalid ep0 maxpacket: 64 [ 76.937471][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.175'. [ 76.950518][ T5794] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 77.100074][ T5794] usb 6-1: Invalid ep0 maxpacket: 64 [ 77.105787][ T5794] usb usb6-port1: attempt power cycle [ 77.236357][ T6779] syzkaller0: entered promiscuous mode [ 77.238898][ T6779] syzkaller0: entered allmulticast mode [ 77.261395][ T6779] tipc: Enabling of bearer rejected, failed to enable media [ 77.305772][ T6784] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 77.308837][ T6784] dummy_hcd dummy_hcd.0: Dummy host controller [ 77.316189][ T6784] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 77.322694][ T6784] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 77.326472][ T6784] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 77.331166][ T6784] usb usb5: Product: Dummy host controller [ 77.333049][ T6784] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 77.335302][ T6784] usb usb5: SerialNumber: dummy_hcd.0 [ 77.347762][ T6784] hub 5-0:1.0: USB hub found [ 77.350905][ T6784] hub 5-0:1.0: 1 port detected [ 77.450420][ T5794] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 77.470422][ T5794] usb 6-1: Invalid ep0 maxpacket: 64 [ 77.602659][ T5794] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 77.623012][ T5794] usb 6-1: Invalid ep0 maxpacket: 64 [ 77.629376][ T5794] usb usb6-port1: unable to enumerate USB device [ 77.887934][ T6823] vhci_hcd: not connected 4 [ 77.940381][ T6825] netlink: 104 bytes leftover after parsing attributes in process `syz.3.194'. [ 77.999105][ T5751] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 78.003936][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: kworker/u34:5 Not tainted syzkaller #0 PREEMPT(full) [ 78.003966][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.003979][ T5751] Workqueue: hci2 hci_rx_work [ 78.004006][ T5751] Call Trace: [ 78.004013][ T5751] [ 78.004022][ T5751] dump_stack_lvl+0x100/0x190 [ 78.004059][ T5751] sysfs_warn_dup.cold+0x1c/0x28 [ 78.004090][ T5751] sysfs_create_dir_ns+0x24b/0x2b0 [ 78.004124][ T5751] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 78.004154][ T5751] ? find_held_lock+0x2b/0x80 [ 78.004187][ T5751] ? kobject_add_internal+0x25f/0x930 [ 78.004216][ T5751] ? kobject_add_internal+0x25f/0x930 [ 78.004248][ T5751] ? do_raw_spin_unlock+0x145/0x1e0 [ 78.004275][ T5751] kobject_add_internal+0x2c8/0x930 [ 78.004306][ T5751] kobject_add+0x16a/0x1e0 [ 78.004333][ T5751] ? __pfx_kobject_add+0x10/0x10 [ 78.004360][ T5751] ? class_to_subsys+0x10f/0x150 [ 78.004393][ T5751] ? kobject_put+0xb9/0x640 [ 78.004417][ T5751] ? _raw_spin_unlock+0x28/0x50 [ 78.004454][ T5751] device_add+0x294/0x1970 [ 78.004478][ T5751] ? __pfx_dev_set_name+0x10/0x10 [ 78.004507][ T5751] ? __pfx_device_add+0x10/0x10 [ 78.004534][ T5751] ? mgmt_send_event_skb+0x2fb/0x460 [ 78.004561][ T5751] hci_conn_add_sysfs+0x1a3/0x260 [ 78.004588][ T5751] le_conn_complete_evt+0x11eb/0x1f60 [ 78.004616][ T5751] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 78.004636][ T5751] ? hci_event_packet+0x186/0xcd0 [ 78.004654][ T5751] ? hci_event_packet+0x186/0xcd0 [ 78.004679][ T5751] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 78.004702][ T5751] ? skb_pull_data+0x15f/0x1e0 [ 78.004734][ T5751] hci_le_meta_evt+0x34a/0x5f0 [ 78.004758][ T5751] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 78.004783][ T5751] hci_event_packet+0x51c/0xcd0 [ 78.004802][ T5751] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 78.004824][ T5751] ? __pfx_hci_event_packet+0x10/0x10 [ 78.004848][ T5751] ? kcov_remote_start+0x384/0x670 [ 78.004871][ T5751] ? lockdep_hardirqs_on+0x78/0x100 [ 78.004899][ T5751] hci_rx_work+0x451/0xfc0 [ 78.004924][ T5751] process_one_work+0xa23/0x1940 [ 78.004956][ T5751] ? __pfx_process_one_work+0x10/0x10 [ 78.004979][ T5751] ? __pfx_hci_rx_work+0x10/0x10 [ 78.004999][ T5751] worker_thread+0x5ef/0xe50 [ 78.005026][ T5751] ? kthread+0x13a/0x450 [ 78.005052][ T5751] ? __pfx_worker_thread+0x10/0x10 [ 78.005071][ T5751] kthread+0x370/0x450 [ 78.005087][ T5751] ? __pfx_kthread+0x10/0x10 [ 78.005104][ T5751] ret_from_fork+0x72b/0xd50 [ 78.005128][ T5751] ? __pfx_ret_from_fork+0x10/0x10 [ 78.005152][ T5751] ? __switch_to+0x800/0x10f0 [ 78.005170][ T5751] ? __pfx_kthread+0x10/0x10 [ 78.005206][ T5751] ret_from_fork_asm+0x1a/0x30 [ 78.005246][ T5751] [ 78.005297][ T5751] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 78.010774][ T5749] Bluetooth: hci3: command tx timeout [ 78.016883][ T5751] Bluetooth: hci2: failed to register connection device [ 78.715962][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 78.745251][ T42] kauditd_printk_skb: 76 callbacks suppressed [ 78.745288][ T42] audit: type=1400 audit(1785232732.861:539): avc: denied { mount } for pid=6850 comm="syz.3.202" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 78.754232][ T6853] syzkaller0: entered promiscuous mode [ 78.757942][ T6853] syzkaller0: entered allmulticast mode [ 78.775201][ T6853] tipc: Enabling of bearer rejected, failed to enable media [ 78.784036][ T42] audit: type=1400 audit(1785232732.901:540): avc: denied { write } for pid=6854 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.841964][ T6859] netlink: 64 bytes leftover after parsing attributes in process `syz.2.205'. [ 78.852518][ T42] audit: type=1400 audit(1785232732.971:541): avc: denied { name_bind } for pid=6858 comm="syz.2.205" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 78.853081][ T6859] syzkaller1: entered promiscuous mode [ 78.863708][ T6859] syzkaller1: entered allmulticast mode [ 78.872447][ T42] audit: type=1400 audit(1785232732.991:542): avc: denied { ioctl } for pid=6858 comm="syz.2.205" path="socket:[14810]" dev="sockfs" ino=14810 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.034805][ T42] audit: type=1400 audit(1785232733.151:543): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.048039][ T42] audit: type=1400 audit(1785232733.161:544): avc: denied { read } for pid=6861 comm="syz.2.206" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.072209][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 79.087035][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.087076][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 79.090570][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.097310][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.101004][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.134146][ T6863] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.136645][ T6863] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.143288][ T6863] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.149144][ T6863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.152007][ T6863] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.156543][ T6863] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.163654][ T6863] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.167125][ T6863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.170951][ T6863] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.179326][ T6863] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.184644][ T6863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.187207][ T6863] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.190985][ T6863] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.231864][ T6870] netlink: 'syz.3.209': attribute type 61 has an invalid length. [ 79.576908][ T42] audit: type=1400 audit(1785232733.691:545): avc: denied { read } for pid=6879 comm="syz.0.213" name="usbmon3" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.587657][ T42] audit: type=1400 audit(1785232733.691:546): avc: denied { open } for pid=6879 comm="syz.0.213" path="/dev/usbmon3" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.597007][ T42] audit: type=1400 audit(1785232733.691:547): avc: denied { ioctl } for pid=6879 comm="syz.0.213" path="/dev/usbmon3" dev="devtmpfs" ino=747 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.759926][ T42] audit: type=1400 audit(1785232733.871:548): avc: denied { watch watch_reads } for pid=6882 comm="syz.0.214" path="/proc/42/net/dev_snmp6" dev="proc" ino=4026533260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 79.763322][ T6883] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 79.812500][ T6883] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 79.823305][ T6883] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 80.639042][ T6902] syzkaller0: entered promiscuous mode [ 80.643448][ T6902] syzkaller0: entered allmulticast mode [ 80.687685][ T6902] tipc: Enabling of bearer rejected, failed to enable media [ 80.912893][ T6930] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.929599][ T6929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6929 comm=syz.1.227 [ 80.957997][ T6934] FAULT_INJECTION: forcing a failure. [ 80.957997][ T6934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.962168][ T6934] CPU: 3 UID: 0 PID: 6934 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT(full) [ 80.962192][ T6934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.962201][ T6934] Call Trace: [ 80.962207][ T6934] [ 80.962215][ T6934] dump_stack_lvl+0x100/0x190 [ 80.962239][ T6934] should_fail_ex.cold+0x5/0xa [ 80.962259][ T6934] _copy_from_iter+0x1f4/0x1690 [ 80.962283][ T6934] ? __asan_memset+0x23/0x50 [ 80.962297][ T6934] ? __pfx__copy_from_iter+0x10/0x10 [ 80.962319][ T6934] ? __pfx___alloc_skb+0x10/0x10 [ 80.962347][ T6934] netlink_sendmsg+0x808/0xda0 [ 80.962367][ T6934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.962384][ T6934] ? selinux_socket_sendmsg+0x198/0x2f0 [ 80.962410][ T6934] ____sys_sendmsg+0xa4d/0xbe0 [ 80.962433][ T6934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.962450][ T6934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.962482][ T6934] ___sys_sendmsg+0x190/0x1e0 [ 80.962506][ T6934] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.962530][ T6934] ? __lock_acquire+0x49f/0x1a40 [ 80.962550][ T6934] ? get_pid_task+0x106/0x250 [ 80.962592][ T6934] __sys_sendmsg+0x160/0x210 [ 80.962612][ T6934] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.962650][ T6934] do_syscall_64+0x115/0x870 [ 80.962668][ T6934] ? clear_bhb_loop+0x40/0x90 [ 80.962684][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.962701][ T6934] RIP: 0033:0x7fe49a59de99 [ 80.962715][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.962729][ T6934] RSP: 002b:00007fe49b394028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.962745][ T6934] RAX: ffffffffffffffda RBX: 00007fe49a825fa0 RCX: 00007fe49a59de99 [ 80.962755][ T6934] RDX: 000000002400c800 RSI: 0000200000000300 RDI: 0000000000000003 [ 80.962764][ T6934] RBP: 00007fe49b394090 R08: 0000000000000000 R09: 0000000000000000 [ 80.962774][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.962780][ T6934] R13: 00007fe49a826038 R14: 00007fe49a825fa0 R15: 00007ffc88d900c8 [ 80.962800][ T6934] [ 81.096896][ T6937] warning: `syz.0.230' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.173086][ T6942] netlink: 'syz.1.231': attribute type 2 has an invalid length. [ 81.210815][ T5751] Bluetooth: hci3: command 0x0419 tx timeout [ 81.213505][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.219949][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.220048][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.351292][ T6946] syzkaller0: entered promiscuous mode [ 81.353172][ T6946] syzkaller0: entered allmulticast mode [ 81.366734][ T6946] tipc: Enabling of bearer rejected, failed to enable media [ 81.466765][ T10] cfg80211: failed to load regulatory.db [ 81.649589][ T6956] __nla_validate_parse: 1 callbacks suppressed [ 81.649604][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 81.653596][ T6955] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 81.684917][ T6956] macvlan3: entered allmulticast mode [ 81.696097][ T6956] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 81.769383][ T6965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6965 comm=syz.3.241 [ 81.823882][ T6970] syzkaller0: entered promiscuous mode [ 81.825997][ T6970] syzkaller0: entered allmulticast mode [ 81.844924][ T6970] tipc: Enabling of bearer rejected, failed to enable media [ 81.951471][ T6982] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 81.993445][ T6986] trusted_key: syz.3.245 sent an empty control message without MSG_MORE. [ 82.005061][ T6989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6989 comm=syz.1.246 [ 82.150256][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 82.758041][ T7021] syzkaller0: entered promiscuous mode [ 82.760304][ T7021] syzkaller0: entered allmulticast mode [ 82.767880][ T7023] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 82.780523][ T7021] tipc: Enabling of bearer rejected, failed to enable media [ 82.941809][ T7027] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 82.961764][ T7027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.984204][ T7027] bond1: (slave veth0_to_bond): making interface the new active one [ 82.989018][ T7027] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 82.995859][ T7027] bond1: entered promiscuous mode [ 82.997633][ T7027] veth0_to_bond: entered promiscuous mode [ 83.000672][ T7027] bond1: entered allmulticast mode [ 83.003562][ T7035] netlink: 'syz.0.255': attribute type 2 has an invalid length. [ 83.006689][ T7027] veth0_to_bond: entered allmulticast mode [ 83.026062][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 83.287597][ T7053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7053 comm=syz.1.262 [ 83.294830][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.294934][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.299942][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.300296][ T5751] Bluetooth: hci3: command 0x0419 tx timeout [ 83.433685][ T7057] syzkaller0: entered promiscuous mode [ 83.436078][ T7057] syzkaller0: entered allmulticast mode [ 83.459990][ T7057] tipc: Enabling of bearer rejected, failed to enable media [ 83.809892][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 83.837760][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 83.837775][ T42] audit: type=1400 audit(1785232737.951:586): avc: denied { listen } for pid=7071 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.853273][ T42] audit: type=1400 audit(1785232737.971:587): avc: denied { ioctl } for pid=7073 comm="syz.2.271" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15008 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.945401][ T42] audit: type=1400 audit(1785232738.061:588): avc: denied { create } for pid=7071 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.979910][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 83.985717][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.990969][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.995493][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.001109][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.005190][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.013866][ T10] usb 6-1: config 0 descriptor?? [ 84.189918][ T848] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 84.319899][ T848] usb 5-1: device descriptor read/64, error -71 [ 84.514950][ T7079] program syz.3.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.559269][ T42] audit: type=1400 audit(1785232738.671:589): avc: denied { bind } for pid=7080 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.565978][ T848] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 84.588375][ T42] audit: type=1400 audit(1785232738.701:590): avc: denied { remount } for pid=7080 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.664667][ T7086] netlink: 32 bytes leftover after parsing attributes in process `syz.3.275'. [ 84.689980][ T848] usb 5-1: device descriptor read/64, error -71 [ 84.717045][ T7089] syzkaller0: entered promiscuous mode [ 84.718959][ T7089] syzkaller0: entered allmulticast mode [ 84.734501][ T7089] tipc: Enabling of bearer rejected, failed to enable media [ 84.810239][ T848] usb usb5-port1: attempt power cycle [ 84.933586][ T7101] netlink: 'syz.3.278': attribute type 2 has an invalid length. [ 85.004852][ T7108] overlayfs: missing 'lowerdir' [ 85.013064][ T42] audit: type=1400 audit(1785232739.131:591): avc: denied { map } for pid=7107 comm="syz.2.282" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.149947][ T848] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 85.170552][ T848] usb 5-1: device descriptor read/8, error -71 [ 85.369960][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.370016][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.370164][ T5753] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.374460][ T5751] Bluetooth: hci3: command 0x0419 tx timeout [ 85.388933][ T42] audit: type=1400 audit(1785232739.501:592): avc: denied { append } for pid=7109 comm="syz.2.283" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.391238][ T7110] Invalid logical block size (-1) [ 85.409953][ T848] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 85.430663][ T848] usb 5-1: device descriptor read/8, error -71 [ 85.440126][ T7112] netlink: 32 bytes leftover after parsing attributes in process `syz.2.284'. [ 85.473799][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 85.540194][ T848] usb usb5-port1: unable to enumerate USB device [ 85.631624][ T7117] i2c i2c-0: delete_device: Extra parameters [ 85.831545][ T7122] syzkaller0: entered promiscuous mode [ 85.833902][ T7122] syzkaller0: entered allmulticast mode [ 85.853994][ T7122] tipc: Enabling of bearer rejected, failed to enable media [ 86.032105][ T42] audit: type=1400 audit(1785232740.151:593): avc: denied { connect } for pid=7126 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.296704][ T42] audit: type=1400 audit(1785232740.411:594): avc: denied { write } for pid=7128 comm="syz.3.291" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.306624][ T42] audit: type=1400 audit(1785232740.411:595): avc: denied { open } for pid=7128 comm="syz.3.291" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.539915][ T5953] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 86.583901][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 86.587552][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 86.598270][ T10] usb 6-1: USB disconnect, device number 7 [ 86.614083][ T7133] FAULT_INJECTION: forcing a failure. [ 86.614083][ T7133] name failslab, interval 1, probability 0, space 0, times 0 [ 86.619533][ T7133] CPU: 3 UID: 0 PID: 7133 Comm: syz.1.293 Not tainted syzkaller #0 PREEMPT(full) [ 86.619558][ T7133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.619568][ T7133] Call Trace: [ 86.619577][ T7133] [ 86.619584][ T7133] dump_stack_lvl+0x100/0x190 [ 86.619613][ T7133] should_fail_ex.cold+0x5/0xa [ 86.619633][ T7133] should_failslab+0xc2/0x120 [ 86.619657][ T7133] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 86.619680][ T7133] ? __alloc_skb+0x140/0x710 [ 86.619705][ T7133] __alloc_skb+0x140/0x710 [ 86.619724][ T7133] ? __alloc_skb+0x5b7/0x710 [ 86.619743][ T7133] ? __pfx___alloc_skb+0x10/0x10 [ 86.619760][ T7133] ? genl_rcv_msg+0x4be/0x800 [ 86.619806][ T7133] netlink_ack+0x117/0xb80 [ 86.619827][ T7133] ? __lock_acquire+0x49f/0x1a40 [ 86.619852][ T7133] netlink_rcv_skb+0x333/0x420 [ 86.619870][ T7133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.619890][ T7133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.619916][ T7133] ? netlink_deliver_tap+0x1ae/0xcc0 [ 86.619946][ T7133] genl_rcv+0x28/0x40 [ 86.619964][ T7133] netlink_unicast+0x585/0x850 [ 86.619986][ T7133] ? __pfx_netlink_unicast+0x10/0x10 [ 86.620011][ T7133] netlink_sendmsg+0x8b0/0xda0 [ 86.620032][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.620051][ T7133] ? selinux_socket_sendmsg+0x198/0x2f0 [ 86.620082][ T7133] ____sys_sendmsg+0xa4d/0xbe0 [ 86.620107][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.620127][ T7133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.620168][ T7133] ___sys_sendmsg+0x190/0x1e0 [ 86.620195][ T7133] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.620221][ T7133] ? __lock_acquire+0x49f/0x1a40 [ 86.620242][ T7133] ? get_pid_task+0x106/0x250 [ 86.620299][ T7133] __sys_sendmsg+0x160/0x210 [ 86.620319][ T7133] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.620355][ T7133] do_syscall_64+0x115/0x870 [ 86.620375][ T7133] ? clear_bhb_loop+0x40/0x90 [ 86.620397][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.620415][ T7133] RIP: 0033:0x7ff61e19de99 [ 86.620437][ T7133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.620450][ T7133] RSP: 002b:00007ff61f0a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.620468][ T7133] RAX: ffffffffffffffda RBX: 00007ff61e425fa0 RCX: 00007ff61e19de99 [ 86.620479][ T7133] RDX: 000000002400c800 RSI: 0000200000000300 RDI: 0000000000000003 [ 86.620491][ T7133] RBP: 00007ff61f0a5090 R08: 0000000000000000 R09: 0000000000000000 [ 86.620501][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.620511][ T7133] R13: 00007ff61e426038 R14: 00007ff61e425fa0 R15: 00007ffda02d5df8 [ 86.620535][ T7133] [ 86.648526][ T7135] Need at least one configuration in g1. [ 86.729998][ T5953] usb 8-1: device descriptor read/64, error -71 [ 86.730272][ T7135] udc usbip-vudc.0: failed to start g1: -22 [ 86.736308][ T7135] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 86.746196][ T7135] UDC core: g1: couldn't find an available UDC or it's busy [ 86.813067][ T7140] loop4: detected capacity change from 0 to 7 [ 86.827694][ T7140] Dev loop4: unable to read RDB block 7 [ 86.830861][ T7140] loop4: AHDI p1 p2 p3 [ 86.833800][ T7140] loop4: partition table partially beyond EOD, truncated [ 86.838614][ T7140] loop4: p1 start 1601398130 is beyond EOD, truncated [ 86.841365][ T7140] loop4: p2 start 1702059890 is beyond EOD, truncated [ 86.989922][ T5953] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 87.012326][ T7146] syzkaller0: entered promiscuous mode [ 87.014892][ T7146] syzkaller0: entered allmulticast mode [ 87.140275][ T5953] usb 8-1: device descriptor read/64, error -71 [ 87.281199][ T5953] usb usb8-port1: attempt power cycle [ 87.324856][ T7151] net_ratelimit: 50 callbacks suppressed [ 87.324876][ T7151] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 87.398534][ T7151] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 87.459948][ T5750] Bluetooth: hci3: command 0x0419 tx timeout [ 87.460032][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.537539][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'. [ 87.579346][ T7159] veth3: entered allmulticast mode [ 87.619925][ T5953] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.650678][ T5953] usb 8-1: device descriptor read/8, error -71 [ 87.723497][ T7173] syzkaller0: entered promiscuous mode [ 87.725361][ T7173] syzkaller0: entered allmulticast mode [ 88.079978][ T5953] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 88.090078][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.110432][ T5953] usb 8-1: device descriptor read/8, error -71 [ 88.200297][ T5847] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 88.232244][ T5953] usb usb8-port1: unable to enumerate USB device [ 88.349927][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 88.354013][ T5847] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 88.357583][ T5847] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 88.361273][ T5847] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 88.364096][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.366997][ T5847] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.370610][ T5847] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 88.375971][ T5847] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 88.380898][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.388518][ T5847] usb 7-1: config 0 descriptor?? [ 88.525999][ T7203] syzkaller0: entered promiscuous mode [ 88.527929][ T7203] syzkaller0: entered allmulticast mode [ 88.600957][ T5847] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 88.622768][ T7185] IPVS: persistence engine module ip_vs_pe_s not found [ 88.899625][ T5845] usb 7-1: USB disconnect, device number 2 [ 88.907680][ T5845] usblp0: removed [ 89.476930][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 89.476945][ T42] audit: type=1400 audit(1785232743.591:610): avc: denied { read } for pid=7255 comm="syz.2.324" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.524297][ T42] audit: type=1400 audit(1785232743.591:611): avc: denied { open } for pid=7255 comm="syz.2.324" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.556538][ T42] audit: type=1400 audit(1785232743.611:612): avc: denied { ioctl } for pid=7255 comm="syz.2.324" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.569099][ T42] audit: type=1400 audit(1785232743.611:613): avc: denied { map } for pid=7255 comm="syz.2.324" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.666814][ T7271] syzkaller0: entered promiscuous mode [ 89.669044][ T7271] syzkaller0: entered allmulticast mode [ 89.683331][ T42] audit: type=1400 audit(1785232743.791:614): avc: denied { mount } for pid=7272 comm="syz.2.328" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.695477][ T42] audit: type=1400 audit(1785232743.801:615): avc: denied { execute } for pid=7272 comm="syz.2.328" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.697009][ T7273] netlink: 'syz.2.328': attribute type 39 has an invalid length. [ 89.991691][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 89.993447][ T7281] netlink: 'syz.0.332': attribute type 27 has an invalid length. [ 90.000105][ T7279] macvlan4: entered allmulticast mode [ 90.008579][ T7279] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 90.027305][ T7281] bond0: (slave bond_slave_1): Releasing backup interface [ 90.047212][ T7283] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 90.055179][ T7286] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.058077][ T7286] openvswitch: netlink: IP tunnel TTL not specified. [ 90.062093][ T7286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.103256][ T42] audit: type=1400 audit(1785232744.221:616): avc: denied { create } for pid=7289 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.131913][ T42] audit: type=1400 audit(1785232744.251:617): avc: denied { create } for pid=7289 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.146248][ T42] audit: type=1400 audit(1785232744.261:618): avc: denied { write } for pid=7289 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.182613][ T5750] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.203550][ T42] audit: type=1400 audit(1785232744.321:619): avc: denied { write } for pid=7295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.219576][ T7299] dummy_hcd dummy_hcd.0: remove, state 4 [ 90.221800][ T7299] usb usb5: USB disconnect, device number 1 [ 90.237931][ T7299] dummy_hcd dummy_hcd.0: stopped [ 90.239696][ T7299] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 90.252808][ T7299] 8021q: VLANs not supported on ip_vti0 [ 90.260271][ T7299] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 90.263969][ T7299] dummy_hcd dummy_hcd.0: Dummy host controller [ 90.274040][ T7299] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 90.280270][ T7299] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 90.283869][ T7299] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 90.286986][ T7299] usb usb5: Product: Dummy host controller [ 90.294774][ T7299] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 90.299977][ T7299] usb usb5: SerialNumber: dummy_hcd.0 [ 90.315610][ T7299] hub 5-0:1.0: USB hub found [ 90.318568][ T7299] hub 5-0:1.0: 1 port detected [ 90.436863][ T7307] syzkaller0: entered promiscuous mode [ 90.438949][ T7307] syzkaller0: entered allmulticast mode [ 90.523152][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.527509][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.574809][ T7311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.616448][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 90.630362][ T7315] macvlan5: entered allmulticast mode [ 90.641347][ T7315] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 90.690821][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 90.694067][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 90.795281][ T7324] netlink: 'syz.3.344': attribute type 83 has an invalid length. [ 90.866045][ T7337] syzkaller0: entered promiscuous mode [ 90.867913][ T7337] syzkaller0: entered allmulticast mode [ 91.370377][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.745695][ T7351] syzkaller0: entered promiscuous mode [ 91.747564][ T7351] syzkaller0: entered allmulticast mode [ 91.761703][ T7351] tc action pedit 'at' offset 20 out of bounds [ 91.776847][ T7355] dummy_hcd dummy_hcd.0: remove, state 4 [ 91.779057][ T7355] usb usb5: USB disconnect, device number 1 [ 91.797954][ T7355] dummy_hcd dummy_hcd.0: stopped [ 91.801122][ T7355] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 91.810385][ T7355] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 91.812105][ T7356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.814085][ T7355] dummy_hcd dummy_hcd.0: Dummy host controller [ 91.818965][ T7355] FAULT_INJECTION: forcing a failure. [ 91.818965][ T7355] name failslab, interval 1, probability 0, space 0, times 0 [ 91.823886][ T7355] CPU: 2 UID: 0 PID: 7355 Comm: syz.1.354 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.823905][ T7355] Tainted: [L]=SOFTLOCKUP [ 91.823909][ T7355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.823916][ T7355] Call Trace: [ 91.823920][ T7355] [ 91.823925][ T7355] dump_stack_lvl+0x100/0x190 [ 91.823943][ T7355] should_fail_ex.cold+0x5/0xa [ 91.823958][ T7355] should_failslab+0xc2/0x120 [ 91.823973][ T7355] __kmalloc_cache_noprof+0x91/0x6c0 [ 91.823993][ T7355] ? mon_bus_init+0x45/0x320 [ 91.824011][ T7355] mon_bus_init+0x45/0x320 [ 91.824026][ T7355] mon_notify+0x31c/0x480 [ 91.824042][ T7355] notifier_call_chain+0x99/0x3f0 [ 91.824056][ T7355] blocking_notifier_call_chain+0x69/0xa0 [ 91.824070][ T7355] usb_add_hcd.cold+0x1f6/0x1158 [ 91.824089][ T7355] dummy_hcd_probe+0x189/0x2fa [ 91.824107][ T7355] ? __pfx_dummy_hcd_probe+0x10/0x10 [ 91.824124][ T7355] platform_probe+0x106/0x1d0 [ 91.824135][ T7355] ? __pfx_platform_probe+0x10/0x10 [ 91.824145][ T7355] really_probe+0x241/0xa60 [ 91.824161][ T7355] __driver_probe_device+0x20e/0x450 [ 91.824177][ T7355] device_driver_attach+0xd1/0x220 [ 91.824192][ T7355] bind_store+0xf4/0x190 [ 91.824201][ T7355] ? __pfx_bind_store+0x10/0x10 [ 91.824212][ T7355] drv_attr_store+0x74/0xb0 [ 91.824229][ T7355] ? __pfx_drv_attr_store+0x10/0x10 [ 91.824246][ T7355] sysfs_kf_write+0xf2/0x150 [ 91.824264][ T7355] kernfs_fop_write_iter+0x3e0/0x5f0 [ 91.824279][ T7355] ? __pfx_sysfs_kf_write+0x10/0x10 [ 91.824297][ T7355] vfs_write+0x6ac/0x1050 [ 91.824315][ T7355] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 91.824332][ T7355] ? __pfx_vfs_write+0x10/0x10 [ 91.824359][ T7355] ksys_write+0x12a/0x250 [ 91.824377][ T7355] ? __pfx_ksys_write+0x10/0x10 [ 91.824399][ T7355] do_syscall_64+0x115/0x870 [ 91.824412][ T7355] ? clear_bhb_loop+0x40/0x90 [ 91.824426][ T7355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.824437][ T7355] RIP: 0033:0x7ff61e19de99 [ 91.824448][ T7355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.824459][ T7355] RSP: 002b:00007ff61f0a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.824470][ T7355] RAX: ffffffffffffffda RBX: 00007ff61e425fa0 RCX: 00007ff61e19de99 [ 91.824477][ T7355] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000004 [ 91.824483][ T7355] RBP: 00007ff61f0a5090 R08: 0000000000000000 R09: 0000000000000000 [ 91.824489][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.824496][ T7355] R13: 00007ff61e426038 R14: 00007ff61e425fa0 R15: 00007ffda02d5df8 [ 91.824511][ T7355] [ 91.824520][ T7355] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 91.825339][ T7356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.828710][ T7355] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 91.920666][ T7355] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 91.923716][ T7355] usb usb5: Product: Dummy host controller [ 91.926026][ T7355] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 91.928655][ T7355] usb usb5: SerialNumber: dummy_hcd.0 [ 91.936367][ T7355] hub 5-0:1.0: USB hub found [ 91.939522][ T7355] hub 5-0:1.0: 1 port detected [ 91.973177][ T7364] FAULT_INJECTION: forcing a failure. [ 91.973177][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 91.978212][ T7364] CPU: 0 UID: 0 PID: 7364 Comm: syz.0.356 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.978239][ T7364] Tainted: [L]=SOFTLOCKUP [ 91.978245][ T7364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.978256][ T7364] Call Trace: [ 91.978263][ T7364] [ 91.978270][ T7364] dump_stack_lvl+0x100/0x190 [ 91.978297][ T7364] should_fail_ex.cold+0x5/0xa [ 91.978322][ T7364] should_failslab+0xc2/0x120 [ 91.978346][ T7364] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 91.978370][ T7364] ? __alloc_skb+0x140/0x710 [ 91.978392][ T7364] __alloc_skb+0x140/0x710 [ 91.978412][ T7364] ? __alloc_skb+0x5b7/0x710 [ 91.978431][ T7364] ? __pfx___alloc_skb+0x10/0x10 [ 91.978450][ T7364] ? genl_rcv_msg+0x4be/0x800 [ 91.978482][ T7364] netlink_ack+0x117/0xb80 [ 91.978506][ T7364] netlink_rcv_skb+0x333/0x420 [ 91.978524][ T7364] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.978545][ T7364] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.978574][ T7364] ? netlink_deliver_tap+0x1ae/0xcc0 [ 91.978604][ T7364] genl_rcv+0x28/0x40 [ 91.978621][ T7364] netlink_unicast+0x585/0x850 [ 91.978642][ T7364] ? __pfx_netlink_unicast+0x10/0x10 [ 91.978668][ T7364] netlink_sendmsg+0x8b0/0xda0 [ 91.978687][ T7364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.978707][ T7364] ? selinux_socket_sendmsg+0x198/0x2f0 [ 91.978739][ T7364] ____sys_sendmsg+0xa4d/0xbe0 [ 91.978769][ T7364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.978790][ T7364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.978828][ T7364] ___sys_sendmsg+0x190/0x1e0 [ 91.978856][ T7364] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.978881][ T7364] ? __lock_acquire+0x49f/0x1a40 [ 91.978903][ T7364] ? get_pid_task+0x106/0x250 [ 91.978962][ T7364] __sys_sendmsg+0x160/0x210 [ 91.978986][ T7364] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.979019][ T7364] do_syscall_64+0x115/0x870 [ 91.979040][ T7364] ? clear_bhb_loop+0x40/0x90 [ 91.979063][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.979080][ T7364] RIP: 0033:0x7fe49a59de99 [ 91.979096][ T7364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.979112][ T7364] RSP: 002b:00007fe49b394028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.979130][ T7364] RAX: ffffffffffffffda RBX: 00007fe49a825fa0 RCX: 00007fe49a59de99 [ 91.979143][ T7364] RDX: 000000002400c800 RSI: 0000200000000300 RDI: 0000000000000003 [ 91.979153][ T7364] RBP: 00007fe49b394090 R08: 0000000000000000 R09: 0000000000000000 [ 91.979163][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.979172][ T7364] R13: 00007fe49a826038 R14: 00007fe49a825fa0 R15: 00007ffc88d900c8 [ 91.979195][ T7364] [ 92.140836][ T7370] syzkaller0: entered promiscuous mode [ 92.143066][ T7370] syzkaller0: entered allmulticast mode [ 92.483397][ T7383] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 92.489036][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 92.550431][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 92.562279][ T7391] macvlan6: entered allmulticast mode [ 92.568841][ T7391] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 92.594298][ T7395] syzkaller0: entered promiscuous mode [ 92.596170][ T7395] syzkaller0: entered allmulticast mode [ 92.669164][ T7403] hfsplus: unable to find HFS+ superblock [ 92.778803][ T7418] dummy_hcd dummy_hcd.0: remove, state 4 [ 92.781167][ T7418] usb usb5: USB disconnect, device number 1 [ 92.794468][ T7418] dummy_hcd dummy_hcd.0: stopped [ 92.798939][ T7418] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 92.803040][ T7418] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 92.806774][ T7418] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 92.809498][ T7418] CPU: 1 UID: 0 PID: 7418 Comm: syz.3.376 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.812848][ T7418] Tainted: [L]=SOFTLOCKUP [ 92.814277][ T7418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.817644][ T7418] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1d0 [ 92.819827][ T7418] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 92.825752][ T7418] RSP: 0018:ffffc90003f27a20 EFLAGS: 00010202 [ 92.827633][ T7418] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: fffff520007e4f22 [ 92.830071][ T7418] RDX: 0000000000000001 RSI: ffffffff8c401500 RDI: 0000000000000008 [ 92.832509][ T7418] RBP: ffff888057d69000 R08: 0000000000000000 R09: fffffbfff2244efa [ 92.834988][ T7418] R10: ffffc90003f27a40 R11: 0000000000000000 R12: 00000000fffffffe [ 92.837428][ T7418] R13: ffff888057d690e8 R14: 0000000000000008 R15: 0000000000000000 [ 92.839878][ T7418] FS: 00007f9a1d3f96c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 92.842641][ T7418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.844720][ T7418] CR2: 000000110c2423d1 CR3: 0000000026a75000 CR4: 0000000000352ef0 [ 92.847206][ T7418] Call Trace: [ 92.848265][ T7418] [ 92.849212][ T7418] mon_notify+0x84/0x480 [ 92.850557][ T7418] notifier_call_chain+0x99/0x3f0 [ 92.852136][ T7418] blocking_notifier_call_chain+0x69/0xa0 [ 92.853942][ T7418] usb_remove_hcd.cold+0x25f/0x401 [ 92.855544][ T7418] ? __pfx_usb_remove_hcd+0x10/0x10 [ 92.857182][ T7418] dummy_hcd_remove+0x109/0x1e0 [ 92.858731][ T7418] ? __pfx_dummy_hcd_remove+0x10/0x10 [ 92.860410][ T7418] platform_remove+0x5f/0x80 [ 92.861882][ T7418] ? __pfx_platform_remove+0x10/0x10 [ 92.863592][ T7418] device_remove+0xcb/0x180 [ 92.865028][ T7418] device_release_driver_internal+0x44e/0x620 [ 92.866944][ T7418] unbind_store+0xf8/0x110 [ 92.868340][ T7418] ? __pfx_unbind_store+0x10/0x10 [ 92.870011][ T7418] drv_attr_store+0x74/0xb0 [ 92.871485][ T7418] ? __pfx_drv_attr_store+0x10/0x10 [ 92.873171][ T7418] sysfs_kf_write+0xf2/0x150 [ 92.874756][ T7418] kernfs_fop_write_iter+0x3e0/0x5f0 [ 92.876429][ T7418] ? __pfx_sysfs_kf_write+0x10/0x10 [ 92.878061][ T7418] vfs_write+0x6ac/0x1050 [ 92.879436][ T7418] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 92.881343][ T7418] ? __pfx_vfs_write+0x10/0x10 [ 92.882890][ T7418] ksys_write+0x12a/0x250 [ 92.884287][ T7418] ? __pfx_ksys_write+0x10/0x10 [ 92.885851][ T7418] do_syscall_64+0x115/0x870 [ 92.887373][ T7418] ? clear_bhb_loop+0x40/0x90 [ 92.889100][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.890984][ T7418] RIP: 0033:0x7f9a1c59de99 [ 92.892409][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.898774][ T7418] RSP: 002b:00007f9a1d3f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.901364][ T7418] RAX: ffffffffffffffda RBX: 00007f9a1c825fa0 RCX: 00007f9a1c59de99 [ 92.903821][ T7418] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000003 [ 92.906285][ T7418] RBP: 00007f9a1c633eaf R08: 0000000000000000 R09: 0000000000000000 [ 92.908719][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.911173][ T7418] R13: 00007f9a1c826038 R14: 00007f9a1c825fa0 R15: 00007fff5cc0bfb8 [ 92.913639][ T7418] [ 92.914732][ T7418] Modules linked in: [ 92.916334][ T7418] ---[ end trace 0000000000000000 ]--- [ 92.923187][ T7418] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x1d0 [ 92.926142][ T7418] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 92.934309][ T7418] RSP: 0018:ffffc90003f27a20 EFLAGS: 00010202 [ 92.936879][ T7418] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: fffff520007e4f22 [ 92.940106][ T7418] RDX: 0000000000000001 RSI: ffffffff8c401500 RDI: 0000000000000008 [ 92.943188][ T7418] RBP: ffff888057d69000 R08: 0000000000000000 R09: fffffbfff2244efa [ 92.946359][ T7418] R10: ffffc90003f27a40 R11: 0000000000000000 R12: 00000000fffffffe [ 92.949902][ T7418] R13: ffff888057d690e8 R14: 0000000000000008 R15: 0000000000000000 [ 92.952488][ T7418] FS: 00007f9a1d3f96c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 92.955299][ T7418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.957360][ T7418] CR2: 00007ff61e3ecc38 CR3: 0000000026a75000 CR4: 0000000000352ef0 [ 92.960145][ T7418] Kernel panic - not syncing: Fatal exception [ 92.962863][ T7418] Kernel Offset: disabled [ 92.964264][ T7418] Rebooting in 86400 seconds..