last executing test programs: 2.572885365s ago: executing program 2 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be0000"], 0x7a) 2.521227971s ago: executing program 2 (id=473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) fcntl$getflags(r0, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.126670534s ago: executing program 1 (id=480): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) rmdir(0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) gettid() read$usbfs(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x600, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 1.642391193s ago: executing program 0 (id=492): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8046}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.483772531s ago: executing program 2 (id=493): openat$hwrng(0xffffffffffffff9c, 0x0, 0x101381, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000100), &(0x7f0000000280)=0x4) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048050}, 0x4000) 1.252987528s ago: executing program 1 (id=494): mount$9p_fd(0x400000000000000, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}, 0x86}) write$sndseq(r4, &(0x7f0000000140), 0x0) 966.712653ms ago: executing program 0 (id=495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) 863.51645ms ago: executing program 0 (id=496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r3, 0x1000007, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0xf0003, 0x0, {[0xfffffffffffffffe, 0x8, 0x0, 0x4, 0x800007, 0x6, 0x27b6, 0x5]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 732.700651ms ago: executing program 0 (id=499): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x38}}, 0x4008000) 661.478736ms ago: executing program 0 (id=500): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000b80), 0x1000000, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@dont_measure}]}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 613.620048ms ago: executing program 0 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 542.190012ms ago: executing program 2 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 398.915468ms ago: executing program 1 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 398.742542ms ago: executing program 3 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001001000050000000500000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) 302.915545ms ago: executing program 3 (id=507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 251.767098ms ago: executing program 1 (id=508): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x38}}, 0x4008000) 251.551862ms ago: executing program 3 (id=509): mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) getgroups(0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000420)="0100000001") ioctl(r2, 0x400c0930, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x4012011, 0xffffffffffffffff, 0x2000) 161.823729ms ago: executing program 1 (id=510): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000b80), 0x1000000, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@dont_measure}]}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 161.465382ms ago: executing program 3 (id=511): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 161.308355ms ago: executing program 1 (id=512): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='bRequestTyp', 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f0000000100)="ffffffff00"/24) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 108.257105ms ago: executing program 2 (id=513): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 107.225835ms ago: executing program 3 (id=514): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000780)={r2, 0x0, 0x4, 0x0, 0x0, [0x0], [0x8001, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r3}) 236.327µs ago: executing program 2 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001001000050000000500000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 0s ago: executing program 3 (id=516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:6910' (ED25519) to the list of known hosts. [ 42.942910][ T44] kauditd_printk_skb: 20 callbacks suppressed [ 42.942926][ T44] audit: type=1400 audit(1789618026.063:141): avc: denied { mounton } for pid=5723 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.946411][ T44] audit: type=1400 audit(1789618026.063:142): avc: denied { mount } for pid=5723 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.947984][ T5723] cgroup: Unknown subsys name 'net' [ 42.953934][ T44] audit: type=1400 audit(1789618026.073:143): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.083959][ T5723] cgroup: Unknown subsys name 'cpuset' [ 43.087749][ T5723] cgroup: Unknown subsys name 'rlimit' [ 43.222820][ T44] audit: type=1400 audit(1789618026.343:144): avc: denied { setattr } for pid=5723 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.223901][ T44] audit: type=1400 audit(1789618026.343:145): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.224207][ T44] audit: type=1400 audit(1789618026.343:146): avc: denied { write } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.224606][ T44] audit: type=1400 audit(1789618026.343:147): avc: denied { read } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.239561][ T44] audit: type=1400 audit(1789618026.353:148): avc: denied { mounton } for pid=5723 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.239913][ T44] audit: type=1400 audit(1789618026.363:149): avc: denied { mount } for pid=5723 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 43.279050][ T44] audit: type=1400 audit(1789618026.393:150): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 43.292330][ T5728] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.421066][ T5723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.808315][ T44] kauditd_printk_skb: 7 callbacks suppressed [ 48.808327][ T44] audit: type=1400 audit(1789618031.923:158): avc: denied { execmem } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.021123][ T44] audit: type=1400 audit(1789618032.143:159): avc: denied { create } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.022509][ T44] audit: type=1400 audit(1789618032.143:160): avc: denied { read write } for pid=5736 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.023086][ T44] audit: type=1400 audit(1789618032.143:161): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.035279][ T44] audit: type=1400 audit(1789618032.153:162): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="socket:[7244]" dev="sockfs" ino=7244 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.044858][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.045331][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.047530][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.049172][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.050112][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.050916][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.051361][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.055942][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.058836][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.060523][ T44] audit: type=1400 audit(1789618032.183:163): avc: denied { read } for pid=5737 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.060983][ T44] audit: type=1400 audit(1789618032.183:164): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.062147][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.062360][ T44] audit: type=1400 audit(1789618032.183:165): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.067158][ T44] audit: type=1400 audit(1789618032.183:166): avc: denied { module_request } for pid=5737 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.078221][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.080894][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.082004][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.082715][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.083203][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.098154][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.101189][ T44] audit: type=1400 audit(1789618032.223:167): avc: denied { sys_module } for pid=5737 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.103002][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.104216][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.108457][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.108903][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.705037][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.705183][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.705778][ T5736] bridge_slave_0: entered allmulticast mode [ 49.707549][ T5736] bridge_slave_0: entered promiscuous mode [ 49.711465][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.711608][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.711699][ T5736] bridge_slave_1: entered allmulticast mode [ 49.712997][ T5736] bridge_slave_1: entered promiscuous mode [ 49.756163][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.784253][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.831064][ T5736] team0: Port device team_slave_0 added [ 49.856560][ T5736] team0: Port device team_slave_1 added [ 49.945093][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.945109][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.945129][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.946289][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.946380][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.946532][ T5737] bridge_slave_0: entered allmulticast mode [ 49.947505][ T5737] bridge_slave_0: entered promiscuous mode [ 49.974469][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.974484][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.974504][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.985025][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.985331][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.985430][ T5737] bridge_slave_1: entered allmulticast mode [ 49.986775][ T5737] bridge_slave_1: entered promiscuous mode [ 50.052491][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.055377][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.061985][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.062116][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.062504][ T5745] bridge_slave_0: entered allmulticast mode [ 50.063851][ T5745] bridge_slave_0: entered promiscuous mode [ 50.067721][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.067801][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.067901][ T5745] bridge_slave_1: entered allmulticast mode [ 50.069317][ T5745] bridge_slave_1: entered promiscuous mode [ 50.151927][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.153289][ T5737] team0: Port device team_slave_0 added [ 50.155066][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.159289][ T5736] hsr_slave_0: entered promiscuous mode [ 50.159886][ T5736] hsr_slave_1: entered promiscuous mode [ 50.168826][ T5737] team0: Port device team_slave_1 added [ 50.194924][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.194966][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.195111][ T5744] bridge_slave_0: entered allmulticast mode [ 50.195798][ T5744] bridge_slave_0: entered promiscuous mode [ 50.209722][ T5745] team0: Port device team_slave_0 added [ 50.220297][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.220338][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.220388][ T5744] bridge_slave_1: entered allmulticast mode [ 50.221565][ T5744] bridge_slave_1: entered promiscuous mode [ 50.228355][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.228367][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.228380][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.231124][ T5745] team0: Port device team_slave_1 added [ 50.242042][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.242057][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.242076][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.281917][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.282342][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.282350][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.282363][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.283604][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.292874][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.292887][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.292906][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.342066][ T5744] team0: Port device team_slave_0 added [ 50.344513][ T5744] team0: Port device team_slave_1 added [ 50.389252][ T5737] hsr_slave_0: entered promiscuous mode [ 50.390098][ T5737] hsr_slave_1: entered promiscuous mode [ 50.390759][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 50.390829][ T5737] Cannot create hsr debugfs directory [ 50.446794][ T5745] hsr_slave_0: entered promiscuous mode [ 50.447597][ T5745] hsr_slave_1: entered promiscuous mode [ 50.448187][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 50.448205][ T5745] Cannot create hsr debugfs directory [ 50.449152][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.449164][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.449185][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.482329][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.482345][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.482363][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.654488][ T5744] hsr_slave_0: entered promiscuous mode [ 50.654953][ T5744] hsr_slave_1: entered promiscuous mode [ 50.655250][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 50.655262][ T5744] Cannot create hsr debugfs directory [ 50.696072][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.702772][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.726026][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.730928][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.750954][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.754810][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.776013][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.778772][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.875892][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.877891][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.878420][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.880960][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.893997][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.896049][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.900353][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.904428][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.966072][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.971164][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.971855][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.974733][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.975930][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.981659][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.983578][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.988368][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.065974][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.096155][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.099293][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.100671][ T5091] Bluetooth: hci0: command tx timeout [ 51.100815][ T5091] Bluetooth: hci3: command tx timeout [ 51.100876][ T5091] Bluetooth: hci1: command tx timeout [ 51.102193][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.106811][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.117939][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.119048][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.125002][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.133546][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.137281][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.150500][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.150603][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.172356][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.172417][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.174821][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.179581][ T66] Bluetooth: hci2: command tx timeout [ 51.202515][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.229035][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.229085][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.236519][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.241003][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.241047][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.291565][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.303424][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.303470][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.315501][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.315580][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.337023][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.381397][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.399060][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.399677][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.411962][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.412042][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.605668][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.627155][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.665167][ T5745] veth0_vlan: entered promiscuous mode [ 51.675517][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.683854][ T5745] veth1_vlan: entered promiscuous mode [ 51.701648][ T5736] veth0_vlan: entered promiscuous mode [ 51.713782][ T5736] veth1_vlan: entered promiscuous mode [ 51.746417][ T5745] veth0_macvtap: entered promiscuous mode [ 51.784737][ T5745] veth1_macvtap: entered promiscuous mode [ 51.786891][ T5737] veth0_vlan: entered promiscuous mode [ 51.788063][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.792044][ T5736] veth0_macvtap: entered promiscuous mode [ 51.798355][ T5736] veth1_macvtap: entered promiscuous mode [ 51.803618][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.815361][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.817154][ T5737] veth1_vlan: entered promiscuous mode [ 51.847020][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.853623][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.882653][ T5737] veth0_macvtap: entered promiscuous mode [ 51.905427][ T5744] veth0_vlan: entered promiscuous mode [ 51.905975][ T5737] veth1_macvtap: entered promiscuous mode [ 51.944506][ T5744] veth1_vlan: entered promiscuous mode [ 51.962718][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.962737][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.981905][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.009942][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.010952][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.010966][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.011376][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.047415][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.047434][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.048296][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.048310][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.058682][ T5744] veth0_macvtap: entered promiscuous mode [ 52.070915][ T5744] veth1_macvtap: entered promiscuous mode [ 52.099093][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.101179][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.101206][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.120454][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.149480][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.149650][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.149662][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.152425][ T5736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.198512][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.198532][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.274151][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.274172][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.324110][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.324127][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.361924][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.361967][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.361999][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.362032][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.362063][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.362093][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.362124][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.362156][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.362187][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.362220][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.362250][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.362279][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.463501][ T5890] Unable to extract alua_access_type [ 52.558575][ T66] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 52.558597][ T66] CPU: 0 UID: 0 PID: 66 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) [ 52.558619][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.558632][ T66] Workqueue: hci3 hci_rx_work [ 52.558656][ T66] Call Trace: [ 52.558664][ T66] [ 52.558671][ T66] dump_stack_lvl+0x100/0x190 [ 52.558701][ T66] sysfs_warn_dup.cold+0x1c/0x28 [ 52.558730][ T66] sysfs_create_dir_ns+0x24b/0x2b0 [ 52.558755][ T66] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 52.558779][ T66] ? find_held_lock+0x2b/0x80 [ 52.558804][ T66] ? kobject_add_internal+0x25f/0x930 [ 52.558823][ T66] ? kobject_add_internal+0x25f/0x930 [ 52.558845][ T66] ? do_raw_spin_unlock+0x145/0x1e0 [ 52.558869][ T66] kobject_add_internal+0x2c8/0x930 [ 52.558890][ T66] kobject_add+0x16a/0x1e0 [ 52.558909][ T66] ? __pfx_kobject_add+0x10/0x10 [ 52.558926][ T66] ? class_to_subsys+0x10f/0x150 [ 52.558955][ T66] ? kobject_put+0xb9/0x640 [ 52.558969][ T66] ? _raw_spin_unlock+0x28/0x50 [ 52.558996][ T66] device_add+0x294/0x1970 [ 52.559020][ T66] ? __pfx_dev_set_name+0x10/0x10 [ 52.559047][ T66] ? __pfx_device_add+0x10/0x10 [ 52.559069][ T66] ? mgmt_send_event_skb+0x2fb/0x460 [ 52.559099][ T66] hci_conn_add_sysfs+0x1a3/0x260 [ 52.559123][ T66] le_conn_complete_evt+0x122f/0x2130 [ 52.559152][ T66] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 52.559172][ T66] ? hci_event_packet+0x186/0xcd0 [ 52.559190][ T66] ? hci_event_packet+0x186/0xcd0 [ 52.559215][ T66] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 52.559239][ T66] ? skb_pull_data+0x15f/0x1e0 [ 52.559268][ T66] hci_le_meta_evt+0x34a/0x5f0 [ 52.559291][ T66] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 52.559315][ T66] hci_event_packet+0x51c/0xcd0 [ 52.559355][ T66] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 52.559387][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 52.559412][ T66] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.559443][ T66] hci_rx_work+0x451/0xfc0 [ 52.559470][ T66] process_one_work+0xac7/0x1b10 [ 52.559508][ T66] ? __pfx_process_one_work+0x10/0x10 [ 52.559536][ T66] ? lock_acquire+0x1d1/0x380 [ 52.559561][ T66] ? __pfx_hci_rx_work+0x10/0x10 [ 52.559584][ T66] worker_thread+0x5ef/0xe50 [ 52.559620][ T66] ? kthread+0x13a/0x450 [ 52.559643][ T66] ? __pfx_worker_thread+0x10/0x10 [ 52.559666][ T66] kthread+0x373/0x450 [ 52.559690][ T66] ? __pfx_kthread+0x10/0x10 [ 52.559715][ T66] ret_from_fork+0x730/0xd60 [ 52.559738][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 52.559759][ T66] ? __switch_to+0x800/0x10f0 [ 52.559783][ T66] ? __pfx_kthread+0x10/0x10 [ 52.559809][ T66] ret_from_fork_asm+0x1a/0x30 [ 52.559841][ T66] [ 52.564944][ T66] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 52.564980][ T66] Bluetooth: hci3: failed to register connection device [ 52.602087][ T5897] Console: switching to colour dummy device 80x25 [ 52.636313][ T5902] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.636465][ T5902] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.657246][ T5902] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.667632][ T5902] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 52.667692][ T5902] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.692254][ T5902] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 52.707436][ T5902] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.707469][ T5902] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.724178][ T5902] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.730067][ T5902] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.733623][ T5902] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.733790][ T5902] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.739611][ T5902] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.036969][ T1177] IPVS: starting estimator thread 0... [ 53.076768][ T5912] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 53.129504][ T5916] IPVS: using max 43 ests per chain, 103200 per kthread [ 53.279022][ T5917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 53.298279][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a7b0c00: rx timeout, send abort [ 53.575155][ T5920] openvswitch: netlink: IP tunnel dst address not specified [ 53.798553][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805577c000: rx timeout, send abort [ 53.799093][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a7b0c00: abort rx timeout. Force session deactivation [ 53.953561][ T5925] 9p: Bad value for 'wfdno' [ 53.999530][ T44] kauditd_printk_skb: 81 callbacks suppressed [ 53.999549][ T44] audit: type=1400 audit(1789618037.063:249): avc: denied { read } for pid=5924 comm="syz.3.13" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.999589][ T44] audit: type=1400 audit(1789618037.063:250): avc: denied { open } for pid=5924 comm="syz.3.13" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.999624][ T44] audit: type=1400 audit(1789618037.073:251): avc: denied { append } for pid=5924 comm="syz.3.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.999658][ T44] audit: type=1400 audit(1789618037.073:252): avc: denied { connect } for pid=5924 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.999690][ T44] audit: type=1400 audit(1789618037.103:253): avc: denied { read append } for pid=5927 comm="syz.2.12" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.999725][ T44] audit: type=1400 audit(1789618037.103:254): avc: denied { open } for pid=5927 comm="syz.2.12" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.033901][ T44] audit: type=1400 audit(1789618037.153:255): avc: denied { read } for pid=5929 comm="syz.2.14" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.298627][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805577c000: abort rx timeout. Force session deactivation [ 54.689634][ T5091] Bluetooth: hci0: command 0x040f tx timeout [ 54.691078][ T66] Bluetooth: hci1: command 0x040f tx timeout [ 54.770776][ T66] Bluetooth: hci3: command 0x040f tx timeout [ 54.876708][ T44] audit: type=1326 audit(1789618037.993:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.0.11" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c79e159 code=0x7fc00000 [ 54.878027][ T44] audit: type=1326 audit(1789618037.993:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.0.11" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f471c79e159 code=0x7fc00000 [ 54.878126][ T44] audit: type=1326 audit(1789618037.993:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.0.11" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c79e159 code=0x7fc00000 [ 54.942107][ T5931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.100568][ T5951] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 55.113112][ T5950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5950 comm=syz.1.17 [ 55.379149][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.646799][ T5971] Unable to extract alua_access_type [ 56.110657][ T42] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 56.113121][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.113158][ T42] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.113191][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.120757][ T42] usb 7-1: config 0 descriptor?? [ 56.133894][ T42] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 56.334913][ T42] usb 7-1: USB disconnect, device number 2 [ 56.505072][ T5998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.654554][ T5998] md/raid10:md0: not clean -- starting background reconstruction [ 56.654573][ T5998] md/raid10:md0: active with 1 out of 2 devices [ 56.656288][ T5998] md0: detected capacity change from 0 to 2048 [ 56.680643][ T6004] md: resync of RAID array md0 [ 56.730930][ T6004] md: md0: resync done. [ 56.769906][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 56.769942][ T66] Bluetooth: hci1: command 0x040f tx timeout [ 56.789508][ T42] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.852971][ T5091] Bluetooth: hci3: command 0x040f tx timeout [ 57.049640][ T42] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 57.056426][ T42] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.056803][ T42] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 57.056914][ T42] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.105464][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.105534][ T42] usb 7-1: Product: syz [ 57.105780][ T42] usb 7-1: Manufacturer: syz [ 57.105841][ T42] usb 7-1: SerialNumber: syz [ 57.501342][ T42] usb 7-1: USB disconnect, device number 3 [ 58.295885][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888025fa2400: rx timeout, send abort [ 58.296177][ C3] vxcan0: j1939_xtp_rx_abort_one: 0xffff888025fa2400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.368070][ T6038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.41'. [ 58.459493][ T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.630792][ T62] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 58.632409][ T62] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.632444][ T62] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 58.632468][ T62] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.632490][ T62] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.632516][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.662600][ T62] usb 6-1: config 0 descriptor?? [ 58.663377][ T6034] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.859574][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 58.859660][ T5091] Bluetooth: hci1: command 0x040f tx timeout [ 58.929457][ T5091] Bluetooth: hci3: command 0x040f tx timeout [ 59.045378][ T6051] FAULT_INJECTION: forcing a failure. [ 59.045378][ T6051] name failslab, interval 1, probability 0, space 0, times 1 [ 59.045395][ T44] kauditd_printk_skb: 22 callbacks suppressed [ 59.045409][ T6051] CPU: 0 UID: 0 PID: 6051 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) [ 59.045412][ T44] audit: type=1400 audit(1789618042.163:281): avc: denied { mounton } for pid=6050 comm="syz.0.48" path="/13/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 59.045434][ T6051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.045446][ T6051] Call Trace: [ 59.045453][ T6051] [ 59.045461][ T6051] dump_stack_lvl+0x100/0x190 [ 59.045496][ T6051] should_fail_ex.cold+0x5/0xa [ 59.045524][ T6051] should_failslab+0xc2/0x120 [ 59.045551][ T6051] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 59.045577][ T6051] ? proc_alloc_inode+0x25/0x200 [ 59.045608][ T6051] ? __pfx_proc_alloc_inode+0x10/0x10 [ 59.045638][ T6051] proc_alloc_inode+0x25/0x200 [ 59.045665][ T6051] alloc_inode+0x68/0x250 [ 59.045685][ T6051] new_inode+0x22/0x1c0 [ 59.045706][ T6051] proc_get_inode+0x1d/0x780 [ 59.045738][ T6051] proc_fill_super+0x566/0x870 [ 59.045758][ T6051] ? __pfx_proc_fill_super+0x10/0x10 [ 59.045776][ T6051] get_tree_nodev+0xdd/0x190 [ 59.045798][ T6051] vfs_get_tree+0x92/0x320 [ 59.045829][ T6051] path_mount+0x7d0/0x24c0 [ 59.045872][ T6051] ? __pfx_path_mount+0x10/0x10 [ 59.045919][ T6051] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.045952][ T6051] ? putname+0xb1/0x110 [ 59.045977][ T6051] ? kmem_cache_free+0x127/0x6c0 [ 59.046018][ T6051] ? __x64_sys_mount+0x293/0x310 [ 59.046049][ T6051] __x64_sys_mount+0x293/0x310 [ 59.046082][ T6051] ? __pfx___x64_sys_mount+0x10/0x10 [ 59.046122][ T6051] do_syscall_64+0x123/0x790 [ 59.046153][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.046175][ T6051] RIP: 0033:0x7f471c79e159 [ 59.046192][ T6051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.046211][ T6051] RSP: 002b:00007f471d753028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.046232][ T6051] RAX: ffffffffffffffda RBX: 00007f471ca25fa0 RCX: 00007f471c79e159 [ 59.046245][ T6051] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 59.046257][ T6051] RBP: 00007f471c83506b R08: 0000000000000000 R09: 0000000000000000 [ 59.046298][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.046310][ T6051] R13: 00007f471ca26038 R14: 00007f471ca25fa0 R15: 00007ffc403b4788 [ 59.046340][ T6051] [ 59.046451][ T6051] proc_fill_super: get root inode failed [ 59.071014][ T44] audit: type=1400 audit(1789618042.193:282): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.148985][ T62] dragonrise 0003:0079:0006.0002: hidraw1: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 59.284142][ T43] usb 6-1: USB disconnect, device number 2 [ 59.370095][ T44] audit: type=1400 audit(1789618042.483:283): avc: denied { recv } for pid=5723 comm="syz-executor" saddr=127.0.0.1 src=34404 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 59.410742][ T44] audit: type=1400 audit(1789618042.533:284): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=34404 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 59.420224][ T44] audit: type=1400 audit(1789618042.543:285): avc: denied { ioctl } for pid=6056 comm="syz.3.50" path="/dev/binderfs/binder0" dev="binder" ino=6 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.421688][ T44] audit: type=1400 audit(1789618042.543:286): avc: denied { set_context_mgr } for pid=6056 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.423963][ T44] audit: type=1400 audit(1789618042.543:287): avc: denied { map } for pid=6056 comm="syz.3.50" path="/dev/binderfs/binder0" dev="binder" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.426593][ T44] audit: type=1400 audit(1789618042.543:288): avc: denied { call } for pid=6056 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.802568][ T6061] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input5 [ 59.953365][ T44] audit: type=1400 audit(1789618043.073:289): avc: denied { read append } for pid=6069 comm="syz.2.56" name="demux0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.953597][ T44] audit: type=1400 audit(1789618043.073:290): avc: denied { open } for pid=6069 comm="syz.2.56" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.329509][ T5883] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 60.549938][ T5883] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 60.552478][ T5883] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 60.552513][ T5883] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 60.552531][ T5883] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 60.552546][ T5883] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.553615][ T5883] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 60.553646][ T5883] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 60.553665][ T5883] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 60.553681][ T5883] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.554749][ T5883] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 60.554812][ T5883] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 60.554826][ T5883] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 60.554836][ T5883] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.558428][ T5883] usb 8-1: string descriptor 0 read error: -22 [ 60.558485][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.911252][ T5883] adutux 8-1:168.0: interrupt endpoints not found [ 60.918883][ T5883] usb 8-1: USB disconnect, device number 2 [ 60.929797][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 60.929877][ T5091] Bluetooth: hci1: command 0x040f tx timeout [ 61.010165][ T5091] Bluetooth: hci3: command 0x040f tx timeout [ 61.420434][ T6099] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input6 [ 61.810478][ T6109] FAULT_INJECTION: forcing a failure. [ 61.810478][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 61.810515][ T6109] CPU: 1 UID: 0 PID: 6109 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(full) [ 61.810539][ T6109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.810553][ T6109] Call Trace: [ 61.810560][ T6109] [ 61.810569][ T6109] dump_stack_lvl+0x100/0x190 [ 61.810606][ T6109] should_fail_ex.cold+0x5/0xa [ 61.810638][ T6109] should_failslab+0xc2/0x120 [ 61.810669][ T6109] kmem_cache_alloc_noprof+0x92/0x6a0 [ 61.810695][ T6109] ? d_instantiate+0x8a/0xb0 [ 61.810729][ T6109] ? alloc_empty_file+0x5b/0x1c0 [ 61.810765][ T6109] alloc_empty_file+0x5b/0x1c0 [ 61.810797][ T6109] alloc_file_pseudo+0x183/0x290 [ 61.810830][ T6109] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 61.810859][ T6109] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 61.810894][ T6109] ? __do_sys_memfd_secret+0x130/0x570 [ 61.810929][ T6109] __do_sys_memfd_secret+0x266/0x570 [ 61.810961][ T6109] do_syscall_64+0x123/0x790 [ 61.811002][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.811026][ T6109] RIP: 0033:0x7f099ab9e159 [ 61.811045][ T6109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.811066][ T6109] RSP: 002b:00007f099b9cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 61.811090][ T6109] RAX: ffffffffffffffda RBX: 00007f099ae25fa0 RCX: 00007f099ab9e159 [ 61.811105][ T6109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 61.811119][ T6109] RBP: 00007f099ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 61.811134][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.811147][ T6109] R13: 00007f099ae26038 R14: 00007f099ae25fa0 R15: 00007ffcc5eff978 [ 61.811177][ T6109] [ 62.294086][ T6127] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input7 [ 62.513487][ T6135] FAULT_INJECTION: forcing a failure. [ 62.513487][ T6135] name failslab, interval 1, probability 0, space 0, times 0 [ 62.513518][ T6135] CPU: 3 UID: 0 PID: 6135 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT(full) [ 62.513539][ T6135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.513551][ T6135] Call Trace: [ 62.513558][ T6135] [ 62.513565][ T6135] dump_stack_lvl+0x100/0x190 [ 62.513611][ T6135] should_fail_ex.cold+0x5/0xa [ 62.513640][ T6135] should_failslab+0xc2/0x120 [ 62.513671][ T6135] __kmalloc_noprof+0xfc/0x840 [ 62.513691][ T6135] ? rcu_is_watching+0x13/0xc0 [ 62.513718][ T6135] ? tomoyo_realpath_from_path+0xb6/0x690 [ 62.513747][ T6135] tomoyo_realpath_from_path+0xb6/0x690 [ 62.513777][ T6135] tomoyo_mount_acl+0x1b6/0x8b0 [ 62.513796][ T6135] ? is_bpf_text_address+0x8a/0x1a0 [ 62.513819][ T6135] ? is_bpf_text_address+0x8a/0x1a0 [ 62.513844][ T6135] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 62.513874][ T6135] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 62.513893][ T6135] ? kernel_text_address+0x8d/0x100 [ 62.513921][ T6135] ? unwind_get_return_address+0x59/0xa0 [ 62.513947][ T6135] ? arch_stack_walk+0xa6/0xf0 [ 62.513972][ T6135] ? __lock_acquire+0x5c0/0x1f40 [ 62.514004][ T6135] ? tomoyo_mount_permission+0x1f6/0x460 [ 62.514026][ T6135] ? tomoyo_domain+0xb2/0x150 [ 62.514048][ T6135] ? tomoyo_profile+0x47/0x60 [ 62.514072][ T6135] tomoyo_mount_permission+0x214/0x460 [ 62.514091][ T6135] ? tomoyo_mount_permission+0x1f6/0x460 [ 62.514114][ T6135] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 62.514149][ T6135] security_sb_mount+0xdd/0x270 [ 62.514171][ T6135] path_mount+0x158/0x24c0 [ 62.514224][ T6135] ? __pfx_path_mount+0x10/0x10 [ 62.514272][ T6135] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.514310][ T6135] ? putname+0xb1/0x110 [ 62.514333][ T6135] ? kmem_cache_free+0x127/0x6c0 [ 62.514372][ T6135] ? __x64_sys_mount+0x293/0x310 [ 62.514399][ T6135] __x64_sys_mount+0x293/0x310 [ 62.514427][ T6135] ? __pfx___x64_sys_mount+0x10/0x10 [ 62.514468][ T6135] do_syscall_64+0x123/0x790 [ 62.514498][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.514519][ T6135] RIP: 0033:0x7f471c79e159 [ 62.514537][ T6135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.514554][ T6135] RSP: 002b:00007f471d753028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 62.514575][ T6135] RAX: ffffffffffffffda RBX: 00007f471ca25fa0 RCX: 00007f471c79e159 [ 62.514586][ T6135] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 62.514596][ T6135] RBP: 00007f471c83506b R08: 0000200000000140 R09: 0000000000000000 [ 62.514607][ T6135] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 62.514617][ T6135] R13: 00007f471ca26038 R14: 00007f471ca25fa0 R15: 00007ffc403b4788 [ 62.514640][ T6135] [ 62.514679][ T6135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 62.900176][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.010048][ T66] Bluetooth: hci0: command 0x040f tx timeout [ 63.010093][ T5091] Bluetooth: hci1: command 0x040f tx timeout [ 63.079414][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 63.082017][ T35] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 63.084149][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 63.088785][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.088966][ T35] usb 5-1: Product: syz [ 63.088980][ T35] usb 5-1: Manufacturer: syz [ 63.089057][ T35] usb 5-1: SerialNumber: syz [ 63.091852][ T5091] Bluetooth: hci3: command 0x040f tx timeout [ 63.113805][ T35] usb 5-1: config 0 descriptor?? [ 63.122638][ T35] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 63.122717][ T35] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 63.421840][ T35] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 63.545393][ T35] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 63.545540][ T35] em28xx 5-1:0.0: board has no eeprom [ 63.577220][ T6141] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 63.641992][ T35] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 63.642017][ T35] em28xx 5-1:0.0: dvb set to bulk mode. [ 63.644378][ T5619] em28xx 5-1:0.0: Binding DVB extension [ 63.666469][ T35] usb 5-1: USB disconnect, device number 2 [ 63.674769][ T35] em28xx 5-1:0.0: Disconnecting em28xx [ 63.721103][ T5619] em28xx 5-1:0.0: Registering input extension [ 63.721761][ T35] em28xx 5-1:0.0: Closing input extension [ 63.774523][ T35] em28xx: Freeing device [ 64.159263][ T44] kauditd_printk_skb: 32 callbacks suppressed [ 64.159276][ T44] audit: type=1400 audit(1789618047.273:323): avc: denied { write } for pid=6171 comm="syz.0.94" name="ports" dev="configfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.184986][ T6172] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 64.240049][ T44] audit: type=1400 audit(1789618047.363:324): avc: denied { getopt } for pid=6177 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.339684][ T42] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 64.528492][ T44] audit: type=1400 audit(1789618047.643:325): avc: denied { write } for pid=6192 comm="syz.2.102" name="vbi8" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 64.600933][ T42] usb 6-1: not running at top speed; connect to a high speed hub [ 64.600962][ T42] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 64.601838][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.601871][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 64.601887][ T42] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.603886][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.603913][ T42] usb 6-1: Product: syz [ 64.603925][ T42] usb 6-1: Manufacturer: syz [ 64.603935][ T42] usb 6-1: SerialNumber: syz [ 64.612229][ T42] oti6858 6-1:1.0: required endpoints missing [ 64.773653][ T44] audit: type=1400 audit(1789618047.893:326): avc: denied { egress } for pid=6190 comm="syz.3.101" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 64.773688][ T44] audit: type=1400 audit(1789618047.893:327): avc: denied { sendto } for pid=6190 comm="syz.3.101" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 64.813534][ T43] usb 6-1: USB disconnect, device number 3 [ 65.170285][ T5091] Bluetooth: hci3: command 0x040f tx timeout [ 65.176317][ T44] audit: type=1400 audit(1789618048.293:328): avc: denied { name_bind } for pid=6200 comm="syz.0.105" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 65.423716][ T6207] 9p: Bad value for 'wfdno' [ 65.527160][ T6212] Unable to extract alua_access_type [ 65.589521][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.697462][ T6218] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 65.750187][ T30] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 65.751378][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 65.751401][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 65.753209][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.753229][ T30] usb 6-1: Product: syz [ 65.753240][ T30] usb 6-1: Manufacturer: syz [ 65.753253][ T30] usb 6-1: SerialNumber: syz [ 65.759553][ T44] audit: type=1400 audit(1789618048.873:329): avc: denied { ioctl } for pid=6220 comm="syz.3.113" path="socket:[11943]" dev="sockfs" ino=11943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.960446][ T30] usb 6-1: Limiting number of CPorts to U8_MAX [ 66.156488][ T44] audit: type=1400 audit(1789618049.273:330): avc: denied { append } for pid=6228 comm="syz.0.116" name="comedi3" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.168181][ C1] usb 6-1: invalid arpc response id received: 0 [ 66.246727][ T6231] 9p: Bad value for 'wfdno' [ 66.292030][ T6234] fuse: Unknown parameter 'u00000000000000000000' [ 66.360497][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.434900][ T30] usb 6-1: failed to set cport flags for port 0 [ 66.434927][ T30] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 66.453945][ T30] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 66.457829][ T6238] Unable to extract alua_access_type [ 66.464875][ T30] usb 6-1: USB disconnect, device number 4 [ 66.511757][ T10] usb 7-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 66.512736][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 66.512757][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 66.514731][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.514748][ T10] usb 7-1: Product: syz [ 66.514759][ T10] usb 7-1: Manufacturer: syz [ 66.514771][ T10] usb 7-1: SerialNumber: syz [ 66.814181][ T10] kaweth 7-1:1.0: Firmware present in device. [ 66.898984][ T6247] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 67.004996][ T10] kaweth 7-1:1.0: Statistics collection: 0 [ 67.005010][ T10] kaweth 7-1:1.0: Multicast filter limit: 0 [ 67.005017][ T10] kaweth 7-1:1.0: MTU: 0 [ 67.005024][ T10] kaweth 7-1:1.0: Read MAC address 00:00:00:00:00:00 [ 67.032639][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 67.470315][ T10] kaweth 7-1:1.0: probe with driver kaweth failed with error -5 [ 67.472071][ T10] usb 7-1: USB disconnect, device number 4 [ 67.917944][ T44] audit: type=1400 audit(1789618051.033:331): avc: denied { write } for pid=6277 comm="syz.0.135" name="usb_gadget" dev="configfs" ino=6151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.922114][ T44] audit: type=1400 audit(1789618051.043:332): avc: denied { write } for pid=6277 comm="syz.0.135" name="functions" dev="configfs" ino=12092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.926638][ T6280] Need at least one configuration in g_uac2. [ 67.926865][ T6280] udc usbip-vudc.0: failed to start g_uac2: -22 [ 67.926886][ T6280] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 67.932687][ T6280] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 68.416577][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'. [ 68.709912][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 68.856669][ T6326] xt_MASQUERADE: bad MAP_IPS. [ 69.163475][ T6328] bridge0: port 3(syz_tun) entered blocking state [ 69.163545][ T6328] bridge0: port 3(syz_tun) entered disabled state [ 69.163703][ T6328] syz_tun: entered allmulticast mode [ 69.165828][ T6328] syz_tun: entered promiscuous mode [ 69.171410][ T6328] bridge0: port 3(syz_tun) entered blocking state [ 69.171497][ T6328] bridge0: port 3(syz_tun) entered forwarding state [ 69.609256][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 69.609274][ T44] audit: type=1400 audit(1789618052.723:337): avc: denied { create } for pid=6345 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.613146][ T44] audit: type=1400 audit(1789618052.733:338): avc: denied { read } for pid=6345 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.686396][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 70.005623][ T6354] pim6reg: entered allmulticast mode [ 70.082807][ T44] audit: type=1400 audit(1789618053.173:339): avc: denied { read } for pid=6350 comm="syz.0.163" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.109849][ T6354] pim6reg: left allmulticast mode [ 70.193777][ T6357] Zero length message leads to an empty skb [ 70.838598][ T44] audit: type=1400 audit(1789618053.953:340): avc: denied { write } for pid=6360 comm="syz.3.167" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.040264][ T44] audit: type=1400 audit(1789618054.163:341): avc: denied { create } for pid=6372 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.120935][ T44] audit: type=1400 audit(1789618054.193:342): avc: denied { write } for pid=6366 comm="syz.0.169" name="tcp" dev="proc" ino=4026533047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.147132][ T44] audit: type=1400 audit(1789618054.263:343): avc: denied { read write } for pid=5744 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.147390][ T44] audit: type=1400 audit(1789618054.263:344): avc: denied { open } for pid=5744 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.147574][ T44] audit: type=1400 audit(1789618054.263:345): avc: denied { ioctl } for pid=5744 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.185408][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.185556][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.269484][ T44] audit: type=1400 audit(1789618054.343:346): avc: denied { create } for pid=6372 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.139071][ T6395] comedi: valid board names for 8255 driver are: [ 72.139089][ T6395] 8255 [ 72.139095][ T6395] comedi: valid board names for vmk80xx driver are: [ 72.139105][ T6395] vmk80xx [ 72.139111][ T6395] comedi: valid board names for usbduxsigma driver are: [ 72.139120][ T6395] usbduxsigma [ 72.139126][ T6395] comedi: valid board names for usbduxfast driver are: [ 72.139134][ T6395] usbduxfast [ 72.139140][ T6395] comedi: valid board names for usbdux driver are: [ 72.139148][ T6395] usbdux [ 72.139154][ T6395] comedi: valid board names for ni6501 driver are: [ 72.139162][ T6395] ni6501 [ 72.139169][ T6395] comedi: valid board names for dt9812 driver are: [ 72.139176][ T6395] dt9812 [ 72.139184][ T6395] comedi: valid board names for ni_labpc_cs driver are: [ 72.139191][ T6395] ni_labpc_cs [ 72.139198][ T6395] comedi: valid board names for ni_daq_700 driver are: [ 72.139205][ T6395] ni_daq_700 [ 72.139212][ T6395] comedi: valid board names for labpc_pci driver are: [ 72.139221][ T6395] labpc_pci [ 72.139227][ T6395] comedi: valid board names for adl_pci9118 driver are: [ 72.139236][ T6395] pci9118dg [ 72.139242][ T6395] pci9118hg [ 72.139249][ T6395] pci9118hr [ 72.139256][ T6395] comedi: valid board names for 8255_pci driver are: [ 72.139263][ T6395] 8255_pci [ 72.139268][ T6395] comedi: valid board names for s526 driver are: [ 72.139276][ T6395] s526 [ 72.139281][ T6395] comedi: valid board names for multiq3 driver are: [ 72.139287][ T6395] multiq3 [ 72.139293][ T6395] comedi: valid board names for pcmuio driver are: [ 72.139301][ T6395] pcmuio48 [ 72.139307][ T6395] pcmuio96 [ 72.139313][ T6395] comedi: valid board names for pcmmio driver are: [ 72.141996][ T6395] pcmmio [ 72.142007][ T6395] comedi: valid board names for pcmda12 driver are: [ 72.142015][ T6395] pcmda12 [ 72.142022][ T6395] comedi: valid board names for pcmad driver are: [ 72.142029][ T6395] pcmad12 [ 72.142034][ T6395] pcmad16 [ 72.142039][ T6395] comedi: valid board names for ni_labpc driver are: [ 72.142045][ T6395] lab-pc-1200 [ 72.142051][ T6395] lab-pc-1200ai [ 72.142058][ T6395] lab-pc+ [ 72.142064][ T6395] comedi: valid board names for atmio16 driver are: [ 72.142071][ T6395] atmio16 [ 72.142077][ T6395] atmio16d [ 72.142083][ T6395] comedi: valid board names for ni_at_ao driver are: [ 72.142091][ T6395] at-ao-6 [ 72.142096][ T6395] at-ao-10 [ 72.142103][ T6395] comedi: valid board names for ni_at_a2150 driver are: [ 72.142111][ T6395] ni_at_a2150 [ 72.142116][ T6395] comedi: valid board names for adq12b driver are: [ 72.142121][ T6395] adq12b [ 72.142125][ T6395] comedi: valid board names for mpc624 driver are: [ 72.142131][ T6395] mpc624 [ 72.142136][ T6395] comedi: valid board names for c6xdigio driver are: [ 72.142144][ T6395] c6xdigio [ 72.142149][ T6395] comedi: valid board names for aio_iiro_16 driver are: [ 72.142157][ T6395] aio_iiro_16 [ 72.142162][ T6395] comedi: valid board names for aio_aio12_8 driver are: [ 72.142170][ T6395] aio_aio12_8 [ 72.142175][ T6395] aio_ai12_8 [ 72.142180][ T6395] aio_ao12_4 [ 72.142188][ T6395] comedi: valid board names for fl512 driver are: [ 72.142194][ T6395] fl512 [ 72.142236][ T6395] comedi: valid board names for dmm32at driver are: [ 72.142245][ T6395] dmm32at [ 72.142250][ T6395] comedi: valid board names for dt282x driver are: [ 72.142258][ T6395] dt2821 [ 72.142264][ T6395] dt2821-f [ 72.142270][ T6395] dt2821-g [ 72.142276][ T6395] dt2823 [ 72.142282][ T6395] dt2824-pgh [ 72.142288][ T6395] dt2824-pgl [ 72.142294][ T6395] dt2825 [ 72.142300][ T6395] dt2827 [ 72.142307][ T6395] dt2828 [ 72.142312][ T6395] dt2829 [ 72.142318][ T6395] dt21-ez [ 72.142324][ T6395] dt23-ez [ 72.142330][ T6395] dt24-ez [ 72.142335][ T6395] dt24-ez-pgl [ 72.142342][ T6395] comedi: valid board names for dt2817 driver are: [ 72.142350][ T6395] dt2817 [ 72.142356][ T6395] comedi: valid board names for dt2815 driver are: [ 72.142363][ T6395] dt2815 [ 72.142369][ T6395] comedi: valid board names for dt2814 driver are: [ 72.142376][ T6395] dt2814 [ 72.142383][ T6395] comedi: valid board names for dt2811 driver are: [ 72.142389][ T6395] dt2811-pgh [ 72.142395][ T6395] dt2811-pgl [ 72.142400][ T6395] comedi: valid board names for dt2801 driver are: [ 72.142406][ T6395] dt2801 [ 72.142411][ T6395] comedi: valid board names for das6402 driver are: [ 72.142418][ T6395] das6402-12 [ 72.142424][ T6395] das6402-16 [ 72.142430][ T6395] comedi: valid board names for das1800 driver are: [ 72.142437][ T6395] das-1701st [ 72.142443][ T6395] das-1701st-da [ 72.142448][ T6395] das-1702st [ 72.142453][ T6395] das-1702st-da [ 72.142460][ T6395] das-1702hr [ 72.142466][ T6395] das-1702hr-da [ 72.142472][ T6395] das-1701ao [ 72.142477][ T6395] das-1702ao [ 72.142482][ T6395] das-1801st [ 72.142487][ T6395] das-1801st-da [ 72.142495][ T6395] das-1802st [ 72.142500][ T6395] das-1802st-da [ 72.142505][ T6395] das-1802hr [ 72.142511][ T6395] das-1802hr-da [ 72.142516][ T6395] das-1801hc [ 72.142522][ T6395] das-1802hc [ 72.142528][ T6395] das-1801ao [ 72.142533][ T6395] das-1802ao [ 72.142539][ T6395] comedi: valid board names for das800 driver are: [ 72.142547][ T6395] das-800 [ 72.142552][ T6395] cio-das800 [ 72.142558][ T6395] das-801 [ 72.142562][ T6395] cio-das801 [ 72.142567][ T6395] das-802 [ 72.142574][ T6395] cio-das802 [ 72.142579][ T6395] cio-das802/16 [ 72.142585][ T6395] comedi: valid board names for isa-das08 driver are: [ 72.142592][ T6395] isa-das08 [ 72.142598][ T6395] das08-pgm [ 72.142603][ T6395] das08-pgh [ 72.142609][ T6395] das08-pgl [ 72.142615][ T6395] das08-aoh [ 72.142621][ T6395] das08-aol [ 72.142626][ T6395] das08-aom [ 72.142631][ T6395] das08/jr-ao [ 72.142636][ T6395] das08jr-16-ao [ 72.142643][ T6395] pc104-das08 [ 72.142648][ T6395] das08jr/16 [ 72.142654][ T6395] comedi: valid board names for das16m1 driver are: [ 72.142660][ T6395] das16m1 [ 72.142664][ T6395] comedi: valid board names for dac02 driver are: [ 72.142670][ T6395] dac02 [ 72.142676][ T6395] comedi: valid board names for rti802 driver are: [ 72.142683][ T6395] rti802 [ 72.142688][ T6395] comedi: valid board names for rti800 driver are: [ 72.142694][ T6395] rti800 [ 72.142697][ T6395] rti815 [ 72.142702][ T6395] comedi: valid board names for pcm3724 driver are: [ 72.142708][ T6395] pcm3724 [ 72.142714][ T6395] comedi: valid board names for pcl818 driver are: [ 72.142720][ T6395] pcl818l [ 72.142725][ T6395] pcl818h [ 72.142732][ T6395] pcl818hd [ 72.142736][ T6395] pcl818hg [ 72.142741][ T6395] pcl818 [ 72.142746][ T6395] pcl718 [ 72.142752][ T6395] pcm3718 [ 72.142757][ T6395] comedi: valid board names for pcl816 driver are: [ 72.142764][ T6395] pcl816 [ 72.143425][ T6395] pcl814b [ 72.143440][ T6395] comedi: valid board names for pcl812 driver are: [ 72.143447][ T6395] pcl812 [ 72.143454][ T6395] pcl812pg [ 72.143461][ T6395] acl8112pg [ 72.143467][ T6395] acl8112dg [ 72.143473][ T6395] acl8112hg [ 72.143479][ T6395] a821pgl [ 72.143485][ T6395] a821pglnda [ 72.143492][ T6395] a821pgh [ 72.143498][ T6395] a822pgl [ 72.143504][ T6395] a822pgh [ 72.143510][ T6395] a823pgl [ 72.143516][ T6395] a823pgh [ 72.143522][ T6395] pcl813 [ 72.143529][ T6395] pcl813b [ 72.143534][ T6395] acl8113 [ 72.143542][ T6395] iso813 [ 72.143548][ T6395] acl8216 [ 72.143554][ T6395] a826pg [ 72.143560][ T6395] comedi: valid board names for pcl730 driver are: [ 72.143574][ T6395] pcl730 [ 72.143584][ T6395] iso730 [ 72.143590][ T6395] acl7130 [ 72.143596][ T6395] pcm3730 [ 72.143602][ T6395] pcl725 [ 72.143608][ T6395] p8r8dio [ 72.143614][ T6395] acl7225b [ 72.143621][ T6395] p16r16dio [ 72.143626][ T6395] pcl733 [ 72.143630][ T6395] pcl734 [ 72.143635][ T6395] opmm-1616-xt [ 72.143641][ T6395] pearl-mm-p [ 72.143646][ T6395] ir104-pbf [ 72.143650][ T6395] comedi: valid board names for pcl726 driver are: [ 72.143657][ T6395] pcl726 [ 72.143661][ T6395] pcl727 [ 72.143666][ T6395] pcl728 [ 72.143670][ T6395] acl6126 [ 72.143676][ T6395] acl6128 [ 72.143681][ T6395] comedi: valid board names for pcl724 driver are: [ 72.143690][ T6395] pcl724 [ 72.143696][ T6395] pcl722 [ 72.143702][ T6395] pcl731 [ 72.143707][ T6395] acl7122 [ 72.143712][ T6395] acl7124 [ 72.143719][ T6395] pet48dio [ 72.143726][ T6395] pcmio48 [ 72.143732][ T6395] onyx-mm-dio [ 72.143738][ T6395] comedi: valid board names for pcl711 driver are: [ 72.143744][ T6395] pcl711 [ 72.143749][ T6395] pcl711b [ 72.143755][ T6395] acl8112hg [ 72.143761][ T6395] acl8112dg [ 72.143767][ T6395] comedi: valid board names for amplc_pc263 driver are: [ 72.143774][ T6395] pc263 [ 72.143780][ T6395] comedi: valid board names for amplc_pc236 driver are: [ 72.143787][ T6395] pc36at [ 72.143793][ T6395] comedi: valid board names for amplc_dio200 driver are: [ 72.143799][ T6395] pc212e [ 72.143804][ T6395] pc214e [ 72.143808][ T6395] pc215e [ 72.143814][ T6395] pc218e [ 72.143820][ T6395] pc272e [ 72.143825][ T6395] comedi: valid board names for comedi_parport driver are: [ 72.143832][ T6395] comedi_parport [ 72.143838][ T6395] comedi: valid board names for comedi_test driver are: [ 72.143845][ T6395] comedi_test [ 72.143851][ T6395] comedi: valid board names for comedi_bond driver are: [ 72.143857][ T6395] comedi_bond [ 72.213884][ T6392] syz.2.176(6392): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 72.499421][ T5619] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.670265][ T5619] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 72.671622][ T5619] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 72.671643][ T5619] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.671657][ T5619] usb 6-1: config 0 has no interface number 0 [ 72.674002][ T5619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.674023][ T5619] usb 6-1: Product: syz [ 72.674036][ T5619] usb 6-1: Manufacturer: syz [ 72.674045][ T5619] usb 6-1: SerialNumber: syz [ 72.680082][ T5619] usb 6-1: config 0 descriptor?? [ 72.684140][ T5619] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 72.684172][ T5619] uvcvideo 6-1:0.64: No valid video chain found. [ 72.889125][ T5619] usb 6-1: USB disconnect, device number 5 [ 74.470620][ T6439] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.653668][ T44] kauditd_printk_skb: 6 callbacks suppressed [ 74.653680][ T44] audit: type=1400 audit(1789618057.773:353): avc: denied { listen } for pid=6442 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.654016][ T44] audit: type=1400 audit(1789618057.773:354): avc: denied { accept } for pid=6442 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.825031][ T44] audit: type=1400 audit(1789618057.943:355): avc: denied { mounton } for pid=6451 comm="syz.3.199" path="/52/tracing" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.826357][ T44] audit: type=1400 audit(1789618057.943:356): avc: denied { mount } for pid=6451 comm="syz.3.199" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 74.827862][ T44] audit: type=1400 audit(1789618057.943:357): avc: denied { search } for pid=6451 comm="syz.3.199" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.830832][ T44] audit: type=1400 audit(1789618057.943:358): avc: denied { search } for pid=6451 comm="syz.3.199" name="events" dev="tracefs" ino=1439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.846827][ T44] audit: type=1400 audit(1789618057.963:359): avc: denied { search } for pid=6451 comm="syz.3.199" name="sched" dev="tracefs" ino=13298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.848536][ T44] audit: type=1400 audit(1789618057.963:360): avc: denied { write } for pid=6451 comm="syz.3.199" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 74.850693][ T44] audit: type=1400 audit(1789618057.963:361): avc: denied { open } for pid=6451 comm="syz.3.199" path="/52/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 75.690360][ T44] audit: type=1400 audit(1789618058.813:362): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 76.149900][ T5619] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 76.295489][ T1350] cfg80211: failed to load regulatory.db [ 76.310163][ T5619] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 76.311132][ T5619] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 76.311151][ T5619] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.311167][ T5619] usb 6-1: config 0 has no interfaces? [ 76.311190][ T5619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.313225][ T5619] usb 6-1: config 0 descriptor?? [ 76.516750][ T5619] usb 6-1: USB disconnect, device number 6 [ 76.553746][ T6478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.074269][ T6492] 9p: Bad value for 'wfdno' [ 77.318553][ T6504] nvme_fabrics: missing parameter 'transport=%s' [ 77.319742][ T6504] nvme_fabrics: missing parameter 'nqn=%s' [ 77.566024][ T6519] Cannot find add_set index 2 as target [ 77.625025][ T104] IPVS: starting estimator thread 0... [ 77.709508][ T6521] IPVS: using max 39 ests per chain, 93600 per kthread [ 77.810149][ T5091] Bluetooth: hci2: command 0x040f tx timeout [ 77.948768][ T6525] 9p: Bad value for 'wfdno' [ 78.751911][ T6540] nvme_fabrics: missing parameter 'transport=%s' [ 78.751929][ T6540] nvme_fabrics: missing parameter 'nqn=%s' [ 79.023193][ T6551] 9p: Bad value for 'wfdno' [ 79.791807][ T6562] ======================================================= [ 79.791807][ T6562] WARNING: The mand mount option has been deprecated and [ 79.791807][ T6562] and is ignored by this kernel. Remove the mand [ 79.791807][ T6562] option from the mount to silence this warning. [ 79.791807][ T6562] ======================================================= [ 79.880266][ T6566] Unable to extract alua_access_type [ 79.889447][ T5091] Bluetooth: hci2: command 0x040f tx timeout [ 79.932074][ T6569] nvme_fabrics: missing parameter 'transport=%s' [ 79.932092][ T6569] nvme_fabrics: missing parameter 'nqn=%s' [ 79.969635][ T44] kauditd_printk_skb: 11 callbacks suppressed [ 79.969653][ T44] audit: type=1400 audit(1789618063.083:374): avc: denied { accept } for pid=6574 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 80.007709][ T44] audit: type=1400 audit(1789618063.123:375): avc: denied { watch_reads } for pid=6576 comm="syz.0.240" path="/72" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.103130][ T6584] warning: `syz.0.242' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.382019][ T44] audit: type=1400 audit(1789618063.503:376): avc: denied { firmware_load } for pid=6591 comm="syz.3.244" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 80.431777][ T6592] syz.3.244 (6592) used greatest stack depth: 16664 bytes left [ 80.597422][ T44] audit: type=1400 audit(1789618063.713:377): avc: denied { allowed } for pid=6595 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.641730][ T6598] Unable to extract alua_access_type [ 80.716335][ T6604] process 'syz.1.250' launched '/dev/fd/4' with NULL argv: empty string added [ 80.719513][ T44] audit: type=1400 audit(1789618063.833:378): avc: denied { execute_no_trans } for pid=6603 comm="syz.1.250" path=2F6D656D66643A5B0B7827A5291AA9FDFAADD16D64C8854858A9250C1A6501202864656C6574656429 dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.841199][ T44] audit: type=1400 audit(1789618063.963:379): avc: denied { map_create } for pid=6609 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.850044][ T5091] Bluetooth: hci0: command 0x040f tx timeout [ 81.050178][ T44] audit: type=1400 audit(1789618064.173:380): avc: denied { create } for pid=6611 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.051905][ T6616] xt_nfacct: accounting object `' does not exist [ 81.527073][ T6623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.969519][ T66] Bluetooth: hci2: command 0x040f tx timeout [ 82.197324][ T6629] md: could not open device unknown-block(0,0). [ 82.197378][ T6629] md: error, md_import_device() returned -6 [ 82.530972][ T1177] wlan0: Trigger new scan to find an IBSS to join [ 82.767430][ T44] audit: type=1400 audit(1789618065.883:381): avc: denied { map_read map_write } for pid=6647 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.497005][ T6659] syzkaller0: entered promiscuous mode [ 83.497028][ T6659] syzkaller0: entered allmulticast mode [ 83.510087][ T44] audit: type=1400 audit(1789618066.633:382): avc: denied { ioctl } for pid=6658 comm="syz.3.266" path="socket:[14562]" dev="sockfs" ino=14562 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.511463][ T44] audit: type=1400 audit(1789618066.633:383): avc: denied { write } for pid=6658 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.956614][ T6669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.991466][ T6665] md: could not open device unknown-block(0,0). [ 83.992675][ T6665] md: error, md_import_device() returned -6 [ 84.059978][ T66] Bluetooth: hci2: command 0x040f tx timeout [ 84.102755][ T6675] nvme_fabrics: unknown parameter or missing value 'host' in ctrl creation request [ 85.219454][ T43] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 85.263150][ T6696] nvme_fabrics: unknown parameter or missing value 'host' in ctrl creation request [ 85.267374][ T6694] syzkaller0: entered promiscuous mode [ 85.267394][ T6694] syzkaller0: entered allmulticast mode [ 85.370492][ T43] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 85.371848][ T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.371869][ T43] usb 6-1: config 0 has no interface number 0 [ 85.371899][ T43] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.371921][ T43] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.371939][ T43] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.371960][ T43] usb 6-1: config 0 interface 1 has no altsetting 0 [ 85.372936][ T43] usb 6-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 85.372955][ T43] usb 6-1: Manufacturer: syz [ 85.382768][ T43] usb 6-1: config 0 descriptor?? [ 85.789472][ T43] hid (null): unknown global tag 0xc [ 85.990258][ T43] uclogic 0003:145F:0212.0003: pen parameters not found [ 85.990272][ T43] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 85.993366][ T43] usb 6-1: USB disconnect, device number 7 [ 86.129490][ T66] Bluetooth: hci2: command 0x040f tx timeout [ 86.544433][ T6708] 9p: Bad value for 'rfdno' [ 86.588346][ T44] audit: type=1400 audit(1789618069.703:384): avc: denied { mount } for pid=6713 comm="syz.3.285" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.635034][ T6705] md: could not open device unknown-block(0,0). [ 86.635086][ T6705] md: error, md_import_device() returned -6 [ 86.819423][ T30] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 86.980196][ T30] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 86.981183][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 86.981206][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 86.981224][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 86.983771][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.983791][ T30] usb 7-1: Product: syz [ 86.983802][ T30] usb 7-1: Manufacturer: syz [ 86.983815][ T30] usb 7-1: SerialNumber: syz [ 86.986114][ T30] usb 7-1: config 0 descriptor?? [ 87.334094][ T30] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 87.376493][ T44] audit: type=1400 audit(1789618070.493:385): avc: denied { create } for pid=6720 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.405034][ T6723] nvme_fabrics: missing parameter 'nqn=%s' [ 87.427485][ T44] audit: type=1400 audit(1789618070.543:386): avc: denied { read write } for pid=6725 comm="syz.1.290" name="vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.427683][ T44] audit: type=1400 audit(1789618070.543:387): avc: denied { open } for pid=6725 comm="syz.1.290" path="/dev/vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.443734][ T44] audit: type=1400 audit(1789618070.563:388): avc: denied { ioctl } for pid=6725 comm="syz.1.290" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 87.534719][ T30] usb 7-1: USB disconnect, device number 5 [ 87.609976][ T1172] wlan0: Trigger new scan to find an IBSS to join [ 87.712810][ T6732] xt_nfacct: accounting object `' does not exist [ 88.219646][ T66] Bluetooth: hci2: command 0x040f tx timeout [ 88.530523][ T37] wlan0: Creating new IBSS network, BSSID fe:b9:b4:65:1f:e4 [ 88.688114][ T6746] nvme_fabrics: missing parameter 'nqn=%s' [ 89.538471][ T6761] kvm: emulating exchange as write [ 89.949306][ T44] audit: type=1400 audit(1789618073.063:389): avc: denied { connect } for pid=6767 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.015238][ T6771] jffs2: notice: (6771) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.032495][ T44] audit: type=1400 audit(1789618073.153:390): avc: denied { write } for pid=6769 comm="syz.0.305" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.040016][ T44] audit: type=1400 audit(1789618073.153:391): avc: denied { add_name } for pid=6769 comm="syz.0.305" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.040066][ T44] audit: type=1400 audit(1789618073.153:392): avc: denied { create } for pid=6769 comm="syz.0.305" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.040101][ T44] audit: type=1400 audit(1789618073.163:393): avc: denied { read write open } for pid=6769 comm="syz.0.305" path="/84/mnt/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.209571][ T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.260898][ T6795] nvme_fabrics: missing parameter 'nqn=%s' [ 91.669604][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 91.669624][ T44] audit: type=1400 audit(1789618074.673:402): avc: denied { create } for pid=6801 comm="syz.2.314" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.669678][ T44] audit: type=1400 audit(1789618074.673:403): avc: denied { map } for pid=6801 comm="syz.2.314" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.669715][ T44] audit: type=1400 audit(1789618074.673:404): avc: denied { read write } for pid=6801 comm="syz.2.314" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.675275][ T6804] 9p: Bad value for 'rfdno' [ 91.824851][ T6811] jffs2: notice: (6811) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 91.829085][ T44] audit: type=1400 audit(1789618074.943:405): avc: denied { write } for pid=6808 comm="syz.2.317" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.857804][ T44] audit: type=1400 audit(1789618074.973:406): avc: denied { write } for pid=6808 comm="syz.2.317" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.300359][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 92.301284][ T35] usb 5-1: config index 0 descriptor too short (expected 50, got 32) [ 92.301306][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.303496][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.303516][ T35] usb 5-1: Product: syz [ 92.303528][ T35] usb 5-1: Manufacturer: syz [ 92.303538][ T35] usb 5-1: SerialNumber: syz [ 92.432343][ T35] usb_debug 5-1:1.0: debug converter detected [ 92.457218][ T35] usb 5-1: debug converter now attached to ttyUSB0 [ 92.646641][ T5619] usb 5-1: USB disconnect, device number 3 [ 92.661761][ T5619] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 92.662179][ T5619] usb_debug 5-1:1.0: device disconnected [ 92.687398][ T6824] syzkaller0: entered promiscuous mode [ 92.687413][ T6824] syzkaller0: entered allmulticast mode [ 92.824470][ T6826] nvme_fabrics: missing parameter 'nqn=%s' [ 92.836545][ T44] audit: type=1400 audit(1789618075.953:407): avc: denied { write } for pid=6828 comm="syz.1.324" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.846655][ T6829] binder: 6828:6829 ioctl c0306201 200000000080 returned -14 [ 92.898064][ T6831] 9p: Bad value for 'rfdno' [ 93.446255][ T6847] syzkaller0: entered promiscuous mode [ 93.446268][ T6847] syzkaller0: entered allmulticast mode [ 94.706830][ T6854] syzkaller0: entered promiscuous mode [ 94.706847][ T6854] syzkaller0: entered allmulticast mode [ 94.972288][ T6868] jffs2: notice: (6868) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 94.975061][ T44] audit: type=1400 audit(1789618078.093:408): avc: denied { write } for pid=6865 comm="syz.3.333" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.985364][ T44] audit: type=1400 audit(1789618078.103:409): avc: denied { write } for pid=6865 comm="syz.3.333" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.036260][ T44] audit: type=1400 audit(1789618078.153:410): avc: denied { map } for pid=6870 comm="syz.0.340" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.851582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.595806][ T6889] md: recover of RAID array md0 [ 96.747578][ T6889] md: md0: recover done. [ 96.815189][ T44] audit: type=1400 audit(1789618079.933:411): avc: denied { create } for pid=6890 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.816239][ T44] audit: type=1400 audit(1789618079.933:412): avc: denied { write } for pid=6890 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.818607][ T44] audit: type=1400 audit(1789618079.933:413): avc: denied { nlmsg_write } for pid=6890 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.896650][ T44] audit: type=1400 audit(1789618080.013:414): avc: denied { connect } for pid=6890 comm="syz.0.348" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.898078][ T44] audit: type=1400 audit(1789618080.013:415): avc: denied { write } for pid=6890 comm="syz.0.348" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.325528][ T6895] pimreg: tun_chr_ioctl cmd 3223869504 [ 98.583050][ T6923] nvme_fabrics: unknown parameter or missing value 'nqn' in ctrl creation request [ 99.139938][ T6934] md: could not open device unknown-block(1,0). [ 99.139973][ T6934] md: md_import_device returned -16 [ 99.140963][ T6936] 9p: Bad value for 'rfdno' [ 99.237343][ T44] audit: type=1400 audit(1789618082.353:416): avc: denied { shutdown } for pid=6937 comm="syz.0.365" lport=57876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.264033][ T6945] nvme_fabrics: unknown parameter or missing value 'nqn' in ctrl creation request [ 99.509477][ T1350] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 99.660774][ T1350] usb 6-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 99.663374][ T1350] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.663458][ T1350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 99.663576][ T1350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.669646][ T1350] usb 6-1: config 0 descriptor?? [ 100.087234][ T1350] input: HID 046d:c09b as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:046D:C09B.0004/input/input10 [ 100.152109][ T44] audit: type=1400 audit(1789618083.273:417): avc: denied { read } for pid=5127 comm="acpid" name="event2" dev="devtmpfs" ino=2899 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.152445][ T44] audit: type=1400 audit(1789618083.273:418): avc: denied { open } for pid=5127 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=2899 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.152739][ T44] audit: type=1400 audit(1789618083.273:419): avc: denied { ioctl } for pid=5127 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=2899 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.177346][ T1350] logitech-hidpp-device 0003:046D:C09B.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 046d:c09b] on usb-dummy_hcd.1-1/input0 [ 100.470534][ T6966] md: could not open device unknown-block(1,0). [ 100.470585][ T6966] md: md_import_device returned -16 [ 100.517757][ T6970] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 100.690841][ T62] usb 6-1: USB disconnect, device number 8 [ 100.789189][ T44] audit: type=1400 audit(1789618083.903:420): avc: denied { read } for pid=6972 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.466458][ T7000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.470015][ T7000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.474998][ T7000] bond0 (unregistering): Released all slaves [ 101.625360][ T7003] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request [ 101.666794][ T7008] 9p: Bad value for 'rfdno' [ 101.670303][ T7005] md: could not open device unknown-block(1,0). [ 101.670346][ T7005] md: md_import_device returned -16 [ 102.488435][ T44] audit: type=1400 audit(1789618085.603:421): avc: denied { read } for pid=7028 comm="syz.2.398" name="set_event" dev="tracefs" ino=1434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 102.634698][ T7035] 9p: Bad value for 'rfdno' [ 102.782535][ T7037] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request [ 102.979946][ T7041] md: could not open device unknown-block(1,0). [ 102.979999][ T7041] md: md_import_device returned -16 [ 103.191950][ T7052] syz.2.407 uses obsolete (PF_INET,SOCK_PACKET) [ 103.206042][ T7056] 9p: Bad value for 'rfdno' [ 103.242407][ T44] audit: type=1400 audit(1789618086.363:422): avc: denied { nlmsg_read } for pid=7057 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.242520][ T7058] netlink: 296 bytes leftover after parsing attributes in process `syz.3.410'. [ 103.309222][ T44] audit: type=1400 audit(1789618086.423:423): avc: denied { read } for pid=7057 comm="syz.3.410" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 103.309490][ T44] audit: type=1400 audit(1789618086.433:424): avc: denied { open } for pid=7057 comm="syz.3.410" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 103.486861][ T44] audit: type=1400 audit(1789618086.563:425): avc: denied { name_connect } for pid=7049 comm="syz.0.406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 103.492680][ T44] audit: type=1400 audit(1789618086.573:426): avc: denied { listen } for pid=7049 comm="syz.0.406" lport=38544 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.492720][ T44] audit: type=1400 audit(1789618086.573:427): avc: denied { accept } for pid=7049 comm="syz.0.406" lport=38544 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.492754][ T44] audit: type=1400 audit(1789618086.573:428): avc: denied { write } for pid=7049 comm="syz.0.406" lport=38544 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 103.492788][ T44] audit: type=1400 audit(1789618086.573:429): avc: denied { setopt } for pid=7049 comm="syz.0.406" lport=38544 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 104.029293][ T44] audit: type=1400 audit(1789618087.143:430): avc: denied { unmount } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 104.120289][ T7070] md: could not open device unknown-block(1,0). [ 104.120322][ T7070] md: md_import_device returned -16 [ 104.255077][ T7081] Unable to extract alua_access_type [ 104.282157][ T7083] 9p: Bad value for 'rfdno' [ 104.328724][ T7090] hsr0: entered allmulticast mode [ 104.328744][ T7090] hsr_slave_0: entered allmulticast mode [ 104.328760][ T7090] hsr_slave_1: entered allmulticast mode [ 104.330112][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 104.331979][ T7090] hsr_slave_0: left promiscuous mode [ 104.334375][ T7090] hsr_slave_1: left promiscuous mode [ 104.345858][ T7090] hsr0 (unregistering): left allmulticast mode [ 104.350092][ T7091] md: could not open device unknown-block(1,0). [ 104.350138][ T7091] md: md_import_device returned -16 [ 105.069919][ T7108] smpboot: CPU 1 is now offline [ 105.343815][ T7114] 9p: Bad value for 'rfdno' [ 105.710506][ T7125] md: could not open device unknown-block(1,0). [ 105.710560][ T7125] md: md_import_device returned -16 [ 106.770200][ T7143] 9p: Bad value for 'rfdno' [ 106.959983][ T7152] Unable to extract alua_access_type [ 107.244347][ T7167] 9p: Bad value for 'rfdno' [ 107.570950][ T44] kauditd_printk_skb: 23 callbacks suppressed [ 107.570964][ T44] audit: type=1400 audit(1789618090.653:449): avc: denied { open } for pid=7170 comm="syz.1.453" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 107.723791][ T44] audit: type=1400 audit(1789618090.843:450): avc: denied { ioctl } for pid=7180 comm="syz.0.457" path="socket:[16735]" dev="sockfs" ino=16735 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.430992][ T7186] md: could not open device unknown-block(1,0). [ 108.431046][ T7186] md: md_import_device returned -16 [ 108.617473][ T7191] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 108.632473][ T7191] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 108.632661][ T7191] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 108.632736][ T7191] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 108.632856][ T7191] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 108.633929][ T7191] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 108.658977][ T7191] pci 0000:00:01.0: Adding to iommu group 1 [ 108.664310][ T7191] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 108.664324][ T7191] pci 0000:00:01.0: vgaarb: bridge control possible [ 108.664333][ T7191] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 108.668878][ T7191] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 108.674443][ T7191] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 108.674532][ T7191] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 108.674805][ T7191] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref] [ 108.688641][ T7191] pci 0000:00:03.0: Adding to iommu group 3 [ 108.704043][ T7191] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 108.707193][ T7191] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 108.714893][ T7191] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref]: assigned [ 108.718205][ T7191] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 108.719093][ T7191] pci 0000:00:03.0: BAR 1 [mem 0x80801000-0x80801fff]: assigned [ 108.720916][ T7191] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 108.784203][ T7191] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 108.784297][ T7191] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 108.786228][ T7191] [drm] features: -virgl +edid -resource_blob -host_visible [ 108.786238][ T7191] [drm] features: -context_init -blob_alignment [ 108.809191][ T7191] [drm] number of scanouts: 1 [ 108.809226][ T7191] [drm] number of cap sets: 0 [ 108.860168][ T7191] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 108.943771][ T7191] Console: switching to colour frame buffer device 160x50 [ 108.975694][ T7191] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 109.361432][ T7201] md: could not open device unknown-block(1,0). [ 109.361486][ T7201] md: md_import_device returned -16 [ 109.423171][ T44] audit: type=1400 audit(1789618092.543:451): avc: denied { create } for pid=7202 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.426752][ T44] audit: type=1400 audit(1789618092.543:452): avc: denied { execute } for pid=7202 comm="syz.0.464" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 110.172190][ T7214] syzkaller0: entered promiscuous mode [ 110.172212][ T7214] syzkaller0: entered allmulticast mode [ 110.503339][ T7220] md: could not open device unknown-block(1,0). [ 110.503386][ T7220] md: md_import_device returned -16 [ 110.524666][ T7227] batadv_slave_0: entered promiscuous mode [ 110.525082][ T7226] batadv_slave_0: left promiscuous mode [ 110.622067][ T7234] syzkaller0: entered promiscuous mode [ 110.622088][ T7234] syzkaller0: entered allmulticast mode [ 110.686281][ T7239] netlink: 144 bytes leftover after parsing attributes in process `syz.0.481'. [ 110.686479][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.481'. [ 110.765851][ T44] audit: type=1400 audit(1789618093.883:453): avc: denied { connect } for pid=7241 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.790678][ T7224] kvm [7222]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 111.049825][ T7252] md: could not open device unknown-block(1,0). [ 111.049856][ T7252] md: md_import_device returned -16 [ 111.134457][ T44] audit: type=1400 audit(1789618094.253:454): avc: denied { write } for pid=7256 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.138908][ T44] audit: type=1400 audit(1789618094.253:455): avc: denied { bind } for pid=7256 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.208420][ T7260] syzkaller0: entered promiscuous mode [ 111.208440][ T7260] syzkaller0: entered allmulticast mode [ 111.423522][ T7264] kvm [7263]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 111.997904][ T44] audit: type=1326 audit(1789618095.113:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.495" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c79e159 code=0x7ffc0000 [ 111.998112][ T44] audit: type=1326 audit(1789618095.113:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.495" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f471c79e159 code=0x7ffc0000 [ 111.998695][ T44] audit: type=1326 audit(1789618095.113:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7275 comm="syz.0.495" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f471c79e159 code=0x7ffc0000 [ 112.229627][ T7283] md: could not open device unknown-block(1,0). [ 112.229764][ T7283] md: md_import_device returned -16 [ 112.270917][ T7287] 9p: Bad value for 'rfdno' [ 112.538273][ T7297] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 112.551454][ T7301] syzkaller0: entered promiscuous mode [ 112.551477][ T7301] syzkaller0: entered allmulticast mode [ 112.561144][ T7297] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 112.561253][ T7297] pci 0000:00:03.0: BAR 1 [mem 0x80801000-0x80801fff] [ 112.561432][ T7297] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref] [ 112.602876][ T7297] pci 0000:00:03.0: Adding to iommu group 3 [ 112.623057][ T7297] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref]: assigned [ 112.625152][ T7297] pci 0000:00:03.0: BAR 1 [mem 0x80801000-0x80801fff]: assigned [ 112.625263][ T7297] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 112.730058][ T7306] md: could not open device unknown-block(1,0). [ 112.730090][ T7306] md: md_import_device returned -16 [ 112.756046][ T7311] 9p: Bad value for 'rfdno' [ 112.790647][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 112.790691][ T44] audit: type=1400 audit(1789618095.903:461): avc: denied { bind } for pid=7312 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.790717][ T44] audit: type=1400 audit(1789618095.913:462): avc: denied { accept } for pid=7312 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.837324][ T44] audit: type=1400 audit(1789618095.953:463): avc: denied { write } for pid=7314 comm="syz.1.512" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.863927][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.513'. [ 112.863947][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.513'. [ 112.867906][ T7317] dummy0: entered promiscuous mode [ 112.872362][ T7317] team0: entered promiscuous mode [ 112.872381][ T7317] team_slave_0: entered promiscuous mode [ 112.872627][ T7317] team_slave_1: entered promiscuous mode [ 112.874924][ T7317] debugfs: 'hsr0' already exists in 'hsr' [ 112.874937][ T7317] Cannot create hsr debugfs directory [ 112.958591][ T7322] syzkaller0: entered promiscuous mode [ 112.958606][ T7322] syzkaller0: entered allmulticast mode [ 112.984873][ T7325] [ 112.985772][ T7325] ====================================================== [ 112.988090][ T7325] WARNING: possible circular locking dependency detected [ 112.990257][ T7325] syzkaller #0 Not tainted [ 112.991833][ T7325] ------------------------------------------------------ [ 112.993962][ T7325] syz.1.512/7325 is trying to acquire lock: [ 112.995798][ T7325] ffff888022f3fd40 ((wq_completion)md_misc){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0 [ 112.999070][ T7325] [ 112.999070][ T7325] but task is already holding lock: [ 113.001430][ T7325] ffffffff8f9b9960 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 113.004368][ T7325] [ 113.004368][ T7325] which lock already depends on the new lock. [ 113.004368][ T7325] [ 113.007553][ T7325] [ 113.007553][ T7325] the existing dependency chain (in reverse order) is: [ 113.010310][ T7325] [ 113.010310][ T7325] -> #3 (major_names_lock){+.+.}-{4:4}: [ 113.012658][ T7325] lock_acquire+0x1d1/0x380 [ 113.014241][ T7325] __mutex_lock+0x1a4/0x1bd0 [ 113.016159][ T7325] blk_probe_dev+0x28/0x1e0 [ 113.017937][ T7325] blk_request_module+0x16/0xc0 [ 113.019583][ T7325] blkdev_get_no_open+0x9b/0xf0 [ 113.021250][ T7325] bdev_file_open_by_dev+0x70/0x210 [ 113.023036][ T7325] md_import_device+0x120/0x360 [ 113.024896][ T7325] md_ioctl+0x223b/0x36d0 [ 113.026626][ T7325] blkdev_ioctl+0x5ad/0x6f0 [ 113.028318][ T7325] __x64_sys_ioctl+0x18e/0x210 [ 113.030084][ T7325] do_syscall_64+0x123/0x790 [ 113.031652][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.033574][ T7325] [ 113.033574][ T7325] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 113.036121][ T7325] lock_acquire+0x1d1/0x380 [ 113.037669][ T7325] __mutex_lock+0x1a4/0x1bd0 [ 113.039258][ T7325] md_start_sync+0xc4/0xea0 [ 113.040755][ T7325] process_one_work+0xac7/0x1b10 [ 113.042450][ T7325] worker_thread+0x5ef/0xe50 [ 113.044043][ T7325] kthread+0x373/0x450 [ 113.045480][ T7325] ret_from_fork+0x730/0xd60 [ 113.047091][ T7325] ret_from_fork_asm+0x1a/0x30 [ 113.048756][ T7325] [ 113.048756][ T7325] -> #1 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 113.051623][ T7325] lock_acquire+0x1d1/0x380 [ 113.053202][ T7325] process_one_work+0xa32/0x1b10 [ 113.054994][ T7325] worker_thread+0x5ef/0xe50 [ 113.056721][ T7325] kthread+0x373/0x450 [ 113.058279][ T7325] ret_from_fork+0x730/0xd60 [ 113.059974][ T7325] ret_from_fork_asm+0x1a/0x30 [ 113.061675][ T7325] [ 113.061675][ T7325] -> #0 ((wq_completion)md_misc){+.+.}-{0:0}: [ 113.064262][ T7325] check_prev_add+0xeb/0xe60 [ 113.065828][ T7325] __lock_acquire+0x1528/0x1f40 [ 113.067488][ T7325] lock_acquire+0x1d1/0x380 [ 113.069010][ T7325] touch_wq_lockdep_map+0xad/0x1c0 [ 113.070741][ T7325] __flush_workqueue+0x131/0x1200 [ 113.072435][ T7325] md_alloc+0x30/0x10a0 [ 113.073896][ T7325] md_probe+0x73/0xf0 [ 113.075302][ T7325] blk_probe_dev+0x149/0x1e0 [ 113.076900][ T7325] blk_request_module+0x16/0xc0 [ 113.078516][ T7325] blkdev_get_no_open+0x9b/0xf0 [ 113.080134][ T7325] bdev_file_open_by_dev+0x70/0x210 [ 113.081897][ T7325] swsusp_check+0x72/0x470 [ 113.083483][ T7325] software_resume+0x6f/0x330 [ 113.085106][ T7325] resume_store+0x248/0x460 [ 113.086697][ T7325] kobj_attr_store+0x58/0x80 [ 113.088253][ T7325] sysfs_kf_write+0xf2/0x150 [ 113.089810][ T7325] kernfs_fop_write_iter+0x3e0/0x5f0 [ 113.091542][ T7325] vfs_write+0x6af/0x1050 [ 113.093000][ T7325] ksys_write+0x12a/0x250 [ 113.094478][ T7325] do_syscall_64+0x123/0x790 [ 113.096065][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.098048][ T7325] [ 113.098048][ T7325] other info that might help us debug this: [ 113.098048][ T7325] [ 113.101198][ T7325] Chain exists of: [ 113.101198][ T7325] (wq_completion)md_misc --> &mddev->reconfig_mutex --> major_names_lock [ 113.101198][ T7325] [ 113.105383][ T7325] Possible unsafe locking scenario: [ 113.105383][ T7325] [ 113.107629][ T7325] CPU0 CPU1 [ 113.109264][ T7325] ---- ---- [ 113.110901][ T7325] lock(major_names_lock); [ 113.112322][ T7325] lock(&mddev->reconfig_mutex); [ 113.114668][ T7325] lock(major_names_lock); [ 113.116899][ T7325] lock((wq_completion)md_misc); [ 113.118557][ T7325] [ 113.118557][ T7325] *** DEADLOCK *** [ 113.118557][ T7325] [ 113.121660][ T7325] locks held by syz.1.512/7325: 6, last CPU#2: [ 113.124053][ T7325] #0: ffff88802ca0deb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 113.127562][ T7325] #1: ffff88802aeaa460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 113.131082][ T7325] #2: ffff888056a1f080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 113.134958][ T7325] #3: ffff88801cf9dd28 (kn->active#75){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 113.138371][ T7325] #4: ffffffff8eca28c0 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330 [ 113.141427][ T7325] #5: ffffffff8f9b9960 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 113.144240][ T7325] [ 113.144240][ T7325] stack backtrace: [ 113.146038][ T7325] CPU: 2 UID: 0 PID: 7325 Comm: syz.1.512 Not tainted syzkaller #0 PREEMPT(full) [ 113.148794][ T7325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.151948][ T7325] Call Trace: [ 113.153040][ T7325] [ 113.154036][ T7325] dump_stack_lvl+0x100/0x190 [ 113.155679][ T7325] print_circular_bug.cold+0x178/0x1be [ 113.158073][ T7325] check_noncircular+0x146/0x160 [ 113.160392][ T7325] check_prev_add+0xeb/0xe60 [ 113.162061][ T7325] __lock_acquire+0x1528/0x1f40 [ 113.163765][ T7325] lock_acquire+0x1d1/0x380 [ 113.166223][ T7325] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 113.167972][ T7325] ? lockdep_init_map_type+0x5c/0x250 [ 113.169605][ T7325] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 113.171275][ T7325] touch_wq_lockdep_map+0xad/0x1c0 [ 113.172870][ T7325] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 113.174711][ T7325] __flush_workqueue+0x131/0x1200 [ 113.176440][ T7325] ? preempt_schedule_common+0x3c/0xb0 [ 113.178202][ T7325] ? preempt_schedule_thunk+0x16/0x40 [ 113.179894][ T7325] ? __mutex_lock+0x8f4/0x1bd0 [ 113.181372][ T7325] ? __pfx___flush_workqueue+0x10/0x10 [ 113.183030][ T7325] ? lock_acquire+0x1d1/0x380 [ 113.184463][ T7325] ? find_inode_fast+0x1fa/0xa30 [ 113.185956][ T7325] md_alloc+0x30/0x10a0 [ 113.187204][ T7325] md_probe+0x73/0xf0 [ 113.188423][ T7325] ? __pfx_md_probe+0x10/0x10 [ 113.189855][ T7325] blk_probe_dev+0x149/0x1e0 [ 113.191267][ T7325] blk_request_module+0x16/0xc0 [ 113.192894][ T7325] blkdev_get_no_open+0x9b/0xf0 [ 113.194556][ T7325] bdev_file_open_by_dev+0x70/0x210 [ 113.196660][ T7325] swsusp_check+0x72/0x470 [ 113.198321][ T7325] software_resume+0x6f/0x330 [ 113.199959][ T7325] resume_store+0x248/0x460 [ 113.201681][ T7325] ? __pfx_resume_store+0x10/0x10 [ 113.203373][ T7325] ? find_held_lock+0x2b/0x80 [ 113.204837][ T7325] ? sysfs_file_kobj+0xe4/0x290 [ 113.206323][ T7325] ? sysfs_file_kobj+0xe4/0x290 [ 113.207789][ T7325] ? __pfx_resume_store+0x10/0x10 [ 113.209330][ T7325] kobj_attr_store+0x58/0x80 [ 113.210881][ T7325] ? __pfx_kobj_attr_store+0x10/0x10 [ 113.212891][ T7325] sysfs_kf_write+0xf2/0x150 [ 113.214701][ T7325] kernfs_fop_write_iter+0x3e0/0x5f0 [ 113.216815][ T7325] ? __pfx_sysfs_kf_write+0x10/0x10 [ 113.218875][ T7325] vfs_write+0x6af/0x1050 [ 113.220282][ T7325] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 113.222513][ T7325] ? __pfx_vfs_write+0x10/0x10 [ 113.224090][ T7325] ? find_held_lock+0x2b/0x80 [ 113.225583][ T7325] ksys_write+0x12a/0x250 [ 113.227015][ T7325] ? __pfx_ksys_write+0x10/0x10 [ 113.228526][ T7325] do_syscall_64+0x123/0x790 [ 113.229978][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.231738][ T7325] RIP: 0033:0x7f8e7a59e159 [ 113.233133][ T7325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.238904][ T7325] RSP: 002b:00007f8e7b49e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.241344][ T7325] RAX: ffffffffffffffda RBX: 00007f8e7a826180 RCX: 00007f8e7a59e159 [ 113.243640][ T7325] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 000000000000000d [ 113.245956][ T7325] RBP: 00007f8e7a63506b R08: 0000000000000000 R09: 0000000000000000 [ 113.248492][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.251081][ T7325] R13: 00007f8e7a826218 R14: 00007f8e7a826180 R15: 00007ffc77928ac8 [ 113.253425][ T7325] [ 113.260029][ T7327] ubi0: attaching mtd0 [ 113.263585][ T7327] ubi0: scanning is finished [ 113.263651][ T7327] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 113.291349][ T7325] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.291361][ T7325] PM: Image not found (code -6) [ 113.434766][ T7327] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 118.586865][ T104] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)