last executing test programs: 3.164001946s ago: executing program 1 (id=616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000200)=@svm={0x4, 0x1, 0x1080, {0xffc}, {"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"}}) 3.010066923s ago: executing program 1 (id=618): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4104"], 0x7) 2.879997006s ago: executing program 1 (id=620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 2.812893186s ago: executing program 1 (id=621): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.930024321s ago: executing program 1 (id=635): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x672024}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.418254827s ago: executing program 1 (id=649): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x31}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000240)=0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 876.2664ms ago: executing program 0 (id=662): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000003c0)={0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000300) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000002c0)=0x2000, 0x4) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000380)={0x6, &(0x7f00000000c0)=[{0x1a, '\x00', @buffer={"bc3b2ab1d4dd10d9413895d1456ddd803c7dd8ea00d33e97e80a093854fe55a9", 0x20}, 0x6}, {0x1d, '\x00', @buffer={"8b81f06597a362429367e82025338a22510de92aa06a2b9ebcd73c0207c902cd", 0x20}, 0x7}, {0x20, '\x00', @buffer={"7d35420d9b670a03f9529d473d8691803e5cc56500698f48645bc7d20b6ed7a0", 0x20}, 0x10000}]}) 810.678419ms ago: executing program 0 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 785.067342ms ago: executing program 0 (id=664): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000340), 0x0, &(0x7f0000000440), 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) socket$nl_audit(0x10, 0x3, 0x9) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x3}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r2, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) 459.988383ms ago: executing program 2 (id=667): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x303}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", "868e5b1b", "4c5293d719408a98"}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 459.826767ms ago: executing program 2 (id=668): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000033c0)=""/4076, 0xfec}, {&(0x7f00000013c0)=""/4083, 0xff3}], 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 459.647938ms ago: executing program 3 (id=669): socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_init(0x20, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40e8662e, 0x0) 360.558511ms ago: executing program 3 (id=670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="fd533ce2d7"], &(0x7f00000000c0)='syzkaller\x00', 0xa89, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 360.360798ms ago: executing program 2 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffe21}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000) 360.066838ms ago: executing program 3 (id=672): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000003c0)={0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000300) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000002c0)=0x2000, 0x4) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000380)={0x6, &(0x7f00000000c0)=[{0x1a, '\x00', @buffer={"bc3b2ab1d4dd10d9413895d1456ddd803c7dd8ea00d33e97e80a093854fe55a9", 0x20}, 0x6}, {0x1d, '\x00', @buffer={"8b81f06597a362429367e82025338a22510de92aa06a2b9ebcd73c0207c902cd", 0x20}, 0x7}, {0x20, '\x00', @buffer={"7d35420d9b670a03f9529d473d8691803e5cc56500698f48645bc7d20b6ed7a0", 0x20}, 0x10000}]}) 309.595151ms ago: executing program 2 (id=673): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 309.39341ms ago: executing program 3 (id=674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000, r2}) close(0x5) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 286.681357ms ago: executing program 3 (id=675): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80081270, 0x0) 279.39878ms ago: executing program 2 (id=676): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2", 0x5b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a24620", 0x11}], 0x1}}], 0x2, 0x2090) sendmsg$inet(r0, &(0x7f0000002780)={&(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002740)=[{0x0}, {0x0}, {&(0x7f0000001740)="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", 0xbdf}], 0x3}, 0x20004000) 200.411385ms ago: executing program 3 (id=677): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f000001a280)='maps\x00') r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72d, 0x100, 0x8, 0x390}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x2c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r7, r6, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x5, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x2, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x1f, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x80000000000000) 200.210883ms ago: executing program 2 (id=678): flock(0xffffffffffffffff, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) open(0x0, 0x100000, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1f4a, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 149.984931ms ago: executing program 0 (id=679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe5, 0x40, 0x3, 0x0, 0x30, 0x19}, {0xeeeb1000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x5, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0xc, 0xa, 0x4, 0x43, 0x3, 0xfb, 0x80, 0x5, 0xe}, {0x0, 0x9000, 0xc, 0x1, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0xd, 0x88, 0x12, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x2000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 233.11µs ago: executing program 0 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000000000006600000008000300", @ANYRES32=r1, @ANYBLOB="080026006c090000080027000100000008009f00020000000800b700"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 0s ago: executing program 0 (id=681): epoll_create1(0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x6ca, 0x2, 0xfffffffe}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x28}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) 0s ago: executing program 0 (id=682): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20834' (ED25519) to the list of known hosts. [ 54.511455][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 54.511471][ T43] audit: type=1400 audit(1790533101.657:138): avc: denied { name_bind } for pid=5717 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.540576][ T43] audit: type=1400 audit(1790533101.687:139): avc: denied { execute } for pid=5718 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.541254][ T43] audit: type=1400 audit(1790533101.687:140): avc: denied { execute_no_trans } for pid=5718 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.799746][ T43] audit: type=1400 audit(1790533104.947:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.801966][ T43] audit: type=1400 audit(1790533104.947:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.803854][ T5718] cgroup: Unknown subsys name 'net' [ 57.805141][ T43] audit: type=1400 audit(1790533104.947:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.960104][ T5718] cgroup: Unknown subsys name 'cpuset' [ 57.962994][ T5718] cgroup: Unknown subsys name 'rlimit' [ 58.098860][ T43] audit: type=1400 audit(1790533105.247:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.098891][ T43] audit: type=1400 audit(1790533105.247:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.099014][ T43] audit: type=1400 audit(1790533105.247:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.099253][ T43] audit: type=1400 audit(1790533105.247:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.162238][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.931204][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.166267][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 63.166287][ T43] audit: type=1400 audit(1790533110.307:158): avc: denied { execmem } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.426083][ T43] audit: type=1400 audit(1790533110.567:159): avc: denied { create } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.428395][ T43] audit: type=1400 audit(1790533110.577:160): avc: denied { read write } for pid=5729 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.428462][ T43] audit: type=1400 audit(1790533110.577:161): avc: denied { open } for pid=5729 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.437866][ T43] audit: type=1400 audit(1790533110.587:162): avc: denied { ioctl } for pid=5729 comm="syz-executor" path="socket:[4026]" dev="sockfs" ino=4026 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.462935][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.468820][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.469144][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.470872][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.471251][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.472864][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.473017][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.473424][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.475928][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.476980][ T5732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.477356][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.479292][ T43] audit: type=1400 audit(1790533110.627:163): avc: denied { read } for pid=5735 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.479448][ T43] audit: type=1400 audit(1790533110.627:164): avc: denied { open } for pid=5735 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.479512][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.480692][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.482646][ T43] audit: type=1400 audit(1790533110.627:165): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.485913][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.487199][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.488166][ T43] audit: type=1400 audit(1790533110.637:166): avc: denied { module_request } for pid=5735 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.491641][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.492357][ T5732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.492772][ T5732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.505878][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.507205][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.530458][ T43] audit: type=1400 audit(1790533110.677:167): avc: denied { sys_module } for pid=5735 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.326068][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.326296][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.326396][ T5735] bridge_slave_0: entered allmulticast mode [ 64.327241][ T5735] bridge_slave_0: entered promiscuous mode [ 64.365826][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.365921][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.366041][ T5735] bridge_slave_1: entered allmulticast mode [ 64.367443][ T5735] bridge_slave_1: entered promiscuous mode [ 64.435086][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.435222][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.435497][ T5729] bridge_slave_0: entered allmulticast mode [ 64.437015][ T5729] bridge_slave_0: entered promiscuous mode [ 64.438939][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.438983][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.439044][ T5730] bridge_slave_0: entered allmulticast mode [ 64.439833][ T5730] bridge_slave_0: entered promiscuous mode [ 64.455920][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.456209][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.456331][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.456472][ T5737] bridge_slave_0: entered allmulticast mode [ 64.458014][ T5737] bridge_slave_0: entered promiscuous mode [ 64.459901][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.459972][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.460073][ T5729] bridge_slave_1: entered allmulticast mode [ 64.461304][ T5729] bridge_slave_1: entered promiscuous mode [ 64.462274][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.462315][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.462370][ T5730] bridge_slave_1: entered allmulticast mode [ 64.463348][ T5730] bridge_slave_1: entered promiscuous mode [ 64.473824][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.481197][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.481242][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.481427][ T5737] bridge_slave_1: entered allmulticast mode [ 64.482191][ T5737] bridge_slave_1: entered promiscuous mode [ 64.509437][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.534313][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.537007][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.538471][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.549753][ T5735] team0: Port device team_slave_0 added [ 64.551268][ T5735] team0: Port device team_slave_1 added [ 64.552450][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.563752][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.591368][ T5729] team0: Port device team_slave_0 added [ 64.592571][ T5730] team0: Port device team_slave_0 added [ 64.594016][ T5730] team0: Port device team_slave_1 added [ 64.601544][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.601554][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.601566][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.610764][ T5737] team0: Port device team_slave_0 added [ 64.612286][ T5729] team0: Port device team_slave_1 added [ 64.622697][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.622711][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.622724][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.637707][ T5737] team0: Port device team_slave_1 added [ 64.660709][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.660721][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.660734][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.662330][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.662342][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.662361][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.670345][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.670362][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.670383][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.671085][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.671101][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.671115][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.684363][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.684376][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.684397][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.692894][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.692906][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.692921][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.714600][ T5735] hsr_slave_0: entered promiscuous mode [ 64.715079][ T5735] hsr_slave_1: entered promiscuous mode [ 64.759594][ T5729] hsr_slave_0: entered promiscuous mode [ 64.760184][ T5729] hsr_slave_1: entered promiscuous mode [ 64.760525][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 64.760580][ T5729] Cannot create hsr debugfs directory [ 64.774164][ T5737] hsr_slave_0: entered promiscuous mode [ 64.774988][ T5737] hsr_slave_1: entered promiscuous mode [ 64.775627][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 64.775645][ T5737] Cannot create hsr debugfs directory [ 64.832896][ T5730] hsr_slave_0: entered promiscuous mode [ 64.833355][ T5730] hsr_slave_1: entered promiscuous mode [ 64.833678][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 64.833690][ T5730] Cannot create hsr debugfs directory [ 65.169658][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.175856][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.178222][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.182640][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.183703][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.186854][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.187591][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.192920][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.268234][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.273453][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.274179][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.279222][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.286987][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.289658][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.303527][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.307573][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.368944][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.372874][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.374246][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.379287][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.384336][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.389435][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.396688][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.397402][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.401219][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.460394][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.478830][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.479133][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.491676][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.494946][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.502799][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.504948][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.520378][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.520493][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.521934][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.524334][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.531403][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.537467][ T5084] Bluetooth: hci0: command tx timeout [ 65.537474][ T5738] Bluetooth: hci1: command tx timeout [ 65.538678][ T5738] Bluetooth: hci2: command tx timeout [ 65.539542][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.616824][ T5738] Bluetooth: hci3: command tx timeout [ 65.621149][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.687227][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.696046][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.710927][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.711012][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.723031][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.723159][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.728875][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.748609][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.750001][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.750045][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.765612][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.765658][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.794860][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.808656][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.808755][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.844740][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.844863][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.049348][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.109622][ T5735] veth0_vlan: entered promiscuous mode [ 66.115214][ T5735] veth1_vlan: entered promiscuous mode [ 66.151730][ T5735] veth0_macvtap: entered promiscuous mode [ 66.158372][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.162018][ T5735] veth1_macvtap: entered promiscuous mode [ 66.182002][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.192510][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.217520][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.222360][ T5729] veth0_vlan: entered promiscuous mode [ 66.236620][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.251664][ T5729] veth1_vlan: entered promiscuous mode [ 66.316950][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.317279][ T5737] veth0_vlan: entered promiscuous mode [ 66.323105][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.323126][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.352967][ T5729] veth0_macvtap: entered promiscuous mode [ 66.354491][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.354509][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.357875][ T5729] veth1_macvtap: entered promiscuous mode [ 66.368855][ T5737] veth1_vlan: entered promiscuous mode [ 66.386873][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.397839][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.415309][ T5737] veth0_macvtap: entered promiscuous mode [ 66.420997][ T5735] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.422256][ T5737] veth1_macvtap: entered promiscuous mode [ 66.441282][ T5730] veth0_vlan: entered promiscuous mode [ 66.444034][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.459476][ T5730] veth1_vlan: entered promiscuous mode [ 66.463501][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.507311][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.507353][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.507374][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.507394][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.508572][ T303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.508590][ T303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.527869][ T5541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.531590][ T5730] veth0_macvtap: entered promiscuous mode [ 66.549965][ T5730] veth1_macvtap: entered promiscuous mode [ 66.580857][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.580877][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.610627][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.627101][ T303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.627118][ T303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.651747][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.683565][ T5884] syzkaller0: entered promiscuous mode [ 66.683586][ T5884] syzkaller0: entered allmulticast mode [ 66.685515][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.685533][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.769162][ T5886] raw_sendmsg: syz.0.1 forgot to set AF_INET. Fix it! [ 66.896640][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.896660][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.898701][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.898887][ T5541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.898921][ T5541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.898947][ T5541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.898973][ T5541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.898996][ T5541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.899017][ T5541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.899054][ T5541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.899080][ T5541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.899106][ T5541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.921856][ T5893] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 66.949839][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.949853][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.153496][ T5903] ip_tables: iptables: counters copy to user failed while replacing table [ 67.618358][ T5738] Bluetooth: hci0: command tx timeout [ 67.618400][ T5738] Bluetooth: hci1: command tx timeout [ 67.618424][ T5738] Bluetooth: hci2: command tx timeout [ 67.696434][ T5738] Bluetooth: hci3: command tx timeout [ 67.724535][ T5920] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 67.883318][ T5738] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 68.049448][ T5932] i2c i2c-0: new_device: Instantiated device tcpci at 0x05 [ 68.126655][ T5937] loop0: detected capacity change from 0 to 32768 [ 68.140244][ T5937] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4128772.0.0), cmd(9) [ 68.202825][ T43] kauditd_printk_skb: 100 callbacks suppressed [ 68.202843][ T43] audit: type=1400 audit(1790533115.347:268): avc: denied { setopt } for pid=5935 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.216477][ T43] audit: type=1400 audit(1790533115.357:269): avc: denied { write } for pid=5943 comm="syz.0.24" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 68.226543][ T43] audit: type=1400 audit(1790533115.367:270): avc: denied { create } for pid=5943 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.230077][ T43] audit: type=1400 audit(1790533115.377:271): avc: denied { connect } for pid=5943 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.288500][ T5944] i2c i2c-1: dtv_property_process_set: SET cmd 0x000b0008 undefined [ 68.315494][ T5950] tc action pedit unable to extract header offset for header type (0x4) [ 68.315513][ T5950] tc action pedit unable to extract header offset for header type (0x4) [ 68.315523][ T5950] tc action pedit unable to extract header offset for header type (0x4) [ 68.315533][ T5950] tc action pedit unable to extract header offset for header type (0x4) [ 68.315543][ T5950] tc action pedit unable to extract header offset for header type (0x4) [ 68.315553][ T5950] tc action pedit unable to extract header offset for header type (0x4) [ 68.315563][ T5950] tc action pedit unable to extract header offset for header type (0x4) [ 68.315573][ T5950] tc action pedit unable to extract header offset for header type (0x4) [ 68.315582][ T5950] tc action pedit unable to extract header offset for header type (0x4) [ 68.315592][ T5950] tc action pedit unable to extract header offset for header type (0x4) [ 68.315620][ T5950] 0: reclassify loop, rule prio 0, protocol 800 [ 68.334196][ T43] audit: type=1400 audit(1790533115.487:272): avc: denied { write } for pid=5951 comm="syz.0.26" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.335011][ T43] audit: type=1400 audit(1790533115.487:273): avc: denied { create } for pid=5951 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.339471][ T43] audit: type=1400 audit(1790533115.487:274): avc: denied { shutdown } for pid=5951 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.348619][ T43] audit: type=1400 audit(1790533115.487:275): avc: denied { ioctl } for pid=5951 comm="syz.0.26" path="socket:[11497]" dev="sockfs" ino=11497 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.430525][ T5955] tipc: Started in network mode [ 68.430542][ T5955] tipc: Node identity 5a49a639f957, cluster identity 4711 [ 68.430704][ T5955] tipc: Enabled bearer , priority 0 [ 68.431345][ T5955] syzkaller0: entered promiscuous mode [ 68.431355][ T5955] syzkaller0: entered allmulticast mode [ 68.433919][ T5955] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 68.445666][ T5955] tipc: Resetting bearer [ 68.454107][ T5954] tipc: Resetting bearer [ 68.464337][ T5954] tipc: Disabling bearer [ 68.485193][ T5957] syzkaller0: entered promiscuous mode [ 68.485216][ T5957] syzkaller0: entered allmulticast mode [ 68.912300][ T43] audit: type=1400 audit(1790533116.057:276): avc: denied { read write } for pid=5958 comm="syz.0.29" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.912560][ T43] audit: type=1400 audit(1790533116.057:277): avc: denied { open } for pid=5958 comm="syz.0.29" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.913650][ T5959] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 68.914078][ T5959] capability: warning: `syz.0.29' uses deprecated v2 capabilities in a way that may be insecure [ 69.499921][ T5966] syzkaller0: entered promiscuous mode [ 69.499942][ T5966] syzkaller0: entered allmulticast mode [ 69.515295][ T5966] TC_ACT_REPEAT abuse ? [ 69.627730][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 69.696785][ T5084] Bluetooth: hci0: command tx timeout [ 69.696863][ T5738] Bluetooth: hci2: command tx timeout [ 69.706764][ T5738] Bluetooth: hci1: command tx timeout [ 69.711248][ T5974] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 69.776929][ T5738] Bluetooth: hci3: command tx timeout [ 70.152703][ T5987] evm: overlay not supported [ 71.296766][ T5808] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 71.314610][ T6031] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 71.515291][ T6038] syzkaller0: entered promiscuous mode [ 71.515312][ T6038] syzkaller0: entered allmulticast mode [ 71.777108][ T5738] Bluetooth: hci1: command tx timeout [ 71.777132][ T5738] Bluetooth: hci2: command tx timeout [ 71.777145][ T5738] Bluetooth: hci0: command tx timeout [ 71.857376][ T5084] Bluetooth: hci3: command tx timeout [ 71.950655][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.368714][ T6046] syzkaller0: entered promiscuous mode [ 72.368729][ T6046] syzkaller0: entered allmulticast mode [ 72.501428][ T6052] warning: `syz.0.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.571762][ T6052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=6052 comm=syz.0.56 [ 72.860634][ T6058] mmap: syz.0.57 (6058) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.096808][ T6063] Bluetooth: MGMT ver 1.23 [ 74.177521][ T6025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.352089][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 74.352105][ T43] audit: type=1400 audit(1790533121.497:368): avc: denied { write } for pid=6078 comm="syz.3.65" name="001" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.356397][ T6079] random: crng reseeded on system resumption [ 74.357118][ T43] audit: type=1400 audit(1790533121.497:369): avc: denied { write } for pid=6078 comm="syz.3.65" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.357144][ T43] audit: type=1400 audit(1790533121.497:370): avc: denied { open } for pid=6078 comm="syz.3.65" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.418890][ T43] audit: type=1400 audit(1790533121.567:371): avc: denied { setopt } for pid=6086 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.450388][ T43] audit: type=1400 audit(1790533121.597:372): avc: denied { write } for pid=6086 comm="syz.3.68" name="functions" dev="configfs" ino=11513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.455729][ T43] audit: type=1400 audit(1790533121.597:373): avc: denied { setopt } for pid=6089 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.509366][ T6062] kexec: Could not allocate control_code_buffer [ 74.567989][ T43] audit: type=1400 audit(1790533121.717:374): avc: denied { connect } for pid=6102 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.742470][ T6116] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 74.742491][ T6116] netlink: 232 bytes leftover after parsing attributes in process `syz.2.80'. [ 74.742504][ T6116] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 74.868336][ T43] audit: type=1400 audit(1790533122.017:375): avc: denied { read } for pid=6125 comm="syz.2.84" name="event2" dev="devtmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.868548][ T43] audit: type=1400 audit(1790533122.017:376): avc: denied { open } for pid=6125 comm="syz.2.84" path="/dev/input/event2" dev="devtmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.870901][ T43] audit: type=1400 audit(1790533122.017:377): avc: denied { ioctl } for pid=6125 comm="syz.2.84" path="/dev/input/event2" dev="devtmpfs" ino=1127 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.173990][ T6146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.92'. [ 75.207819][ T6149] syz.0.95 uses obsolete (PF_INET,SOCK_PACKET) [ 75.252331][ T6152] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 75.506176][ T5097] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 75.667185][ T5097] usb 7-1: Using ep0 maxpacket: 8 [ 75.668955][ T5097] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 75.671266][ T5097] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.671302][ T5097] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 75.671322][ T5097] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.673303][ T5097] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 75.673323][ T5097] usb 7-1: Product: syz [ 75.673334][ T5097] usb 7-1: Manufacturer: syz [ 75.673346][ T5097] usb 7-1: SerialNumber: syz [ 75.711220][ T5097] usb 7-1: config 0 descriptor?? [ 75.786207][ T5097] rc_core: IR keymap rc-imon-rsc not found [ 75.786223][ T5097] Registered IR keymap rc-empty [ 75.804652][ T5097] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 75.810414][ T5097] input: iMON Station as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input5 [ 75.910890][ T6177] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 75.925675][ T5097] usb 7-1: USB disconnect, device number 2 [ 75.954790][ T6179] smc: net device team0 applied user defined pnetid SYZ2 [ 76.288340][ T6197] misc userio: The device must be registered before sending interrupts [ 76.417732][ T5738] Bluetooth: hci1: command 0x0401 tx timeout [ 76.417922][ T6077] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 76.457778][ T6209] ªªªªª»: renamed from bridge_slave_0 (while UP) [ 76.490457][ T5738] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 76.988764][ T6224] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 77.007135][ T6224] bridge0: port 3(netdevsim0) entered blocking state [ 77.007257][ T6224] bridge0: port 3(netdevsim0) entered disabled state [ 77.007472][ T6224] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 77.011594][ T6224] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 77.019524][ T6224] bridge0: port 3(netdevsim0) entered blocking state [ 77.019616][ T6224] bridge0: port 3(netdevsim0) entered forwarding state [ 77.058372][ T6224] netlink: 'syz.3.129': attribute type 10 has an invalid length. [ 77.062912][ T6224] bridge0: port 3(netdevsim0) entered disabled state [ 77.063406][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.064093][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.090874][ T6224] bridge0: port 3(netdevsim0) entered blocking state [ 77.091083][ T6224] bridge0: port 3(netdevsim0) entered forwarding state [ 77.091718][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.091803][ T6224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.091979][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.092114][ T6224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.100651][ T6224] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 77.121481][ T6229] syzkaller1: entered promiscuous mode [ 77.121501][ T6229] syzkaller1: entered allmulticast mode [ 77.205676][ T6232] tipc: Enabling of bearer rejected, failed to enable media [ 77.414042][ T6256] CacheFiles: No cache directory specified [ 77.439271][ T6261] syz_tun: entered allmulticast mode [ 77.447435][ T6261] syz_tun: left allmulticast mode [ 77.630993][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 77.826804][ T6293] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 77.827247][ T6293] tipc: Enabled bearer , priority 10 [ 77.871890][ T6301] netlink: 'syz.2.159': attribute type 1 has an invalid length. [ 77.902364][ T6301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.934364][ T6301] bond1: (slave gretap1): making interface the new active one [ 77.936793][ T5084] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 77.937097][ T5084] Bluetooth: hci0: command 0x0c13 tx timeout [ 77.945494][ T6301] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 77.965590][ T6301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6301 comm=syz.2.159 [ 78.095801][ T6310] syzkaller0: entered promiscuous mode [ 78.095815][ T6310] syzkaller0: entered allmulticast mode [ 78.856153][ T6299] comedi comedi1: reset error (fatal) [ 78.856886][ T6314] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 78.939040][ T5738] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 78.947719][ T50] tipc: Node number set to 2736694841 [ 79.429838][ T6358] geneve2: entered promiscuous mode [ 79.470207][ T6362] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 79.569778][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 79.569790][ T43] audit: type=1400 audit(1790533126.717:414): avc: denied { write } for pid=6365 comm="syz.0.189" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.744453][ T6388] ip_tables: iptables: counters copy to user failed while replacing table [ 79.859775][ T43] audit: type=1400 audit(1790533127.007:415): avc: denied { create } for pid=6396 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.864607][ T43] audit: type=1400 audit(1790533127.007:416): avc: denied { ioctl } for pid=6396 comm="syz.1.203" path="socket:[11960]" dev="sockfs" ino=11960 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.039267][ T43] audit: type=1400 audit(1790533127.187:417): avc: denied { append } for pid=6415 comm="syz.1.212" name="comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.070877][ T43] audit: type=1400 audit(1790533127.217:418): avc: denied { mounton } for pid=6419 comm="syz.3.213" path="/62/tracefs_dir" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.071194][ T43] audit: type=1400 audit(1790533127.217:419): avc: denied { mount } for pid=6419 comm="syz.3.213" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 80.575514][ T6436] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 80.611698][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 80.798308][ T6448] kAFS: No cell specified [ 80.799497][ T43] audit: type=1400 audit(1790533127.947:420): avc: denied { mount } for pid=6447 comm="syz.1.226" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.821591][ T43] audit: type=1400 audit(1790533127.967:421): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.871152][ T43] audit: type=1400 audit(1790533128.017:422): avc: denied { read write } for pid=6455 comm="syz.0.228" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.871355][ T43] audit: type=1400 audit(1790533128.017:423): avc: denied { open } for pid=6455 comm="syz.0.228" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.377148][ T50] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 81.538381][ T50] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 81.539526][ T50] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.539539][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 81.540329][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 81.540368][ T50] usb 6-1: SerialNumber: syz [ 81.543555][ T50] usb 6-1: config 0 descriptor?? [ 81.551725][ T50] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 81.551952][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 81.561956][ T50] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 81.562524][ T50] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 81.562548][ T50] usb 6-1: media controller created [ 81.563750][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.570371][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 81.570513][ T50] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 81.574755][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input6 [ 81.579385][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 81.579410][ T50] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 81.738909][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 81.738950][ T50] dvb-usb: error while querying for an remote control event. [ 81.757674][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.762572][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.767066][ T50] usb 6-1: USB disconnect, device number 2 [ 81.804289][ T50] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 82.191230][ T35] cfg80211: failed to load regulatory.db [ 82.229862][ T6596] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 82.230981][ T6596] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 82.256271][ T5738] Bluetooth: hci1: command 0x0401 tx timeout [ 82.321938][ T5738] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 82.367145][ T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.526226][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 82.527336][ T50] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.528705][ T50] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 82.528726][ T50] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 82.528756][ T50] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.528785][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.540747][ T50] usbtmc 5-1:16.0: bulk endpoints not found [ 82.608803][ T6627] kAFS: No cell specified [ 82.785625][ T6643] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 83.042068][ T6661] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 83.046323][ T303] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.336228][ T5744] Bluetooth: hci1: command 0x0401 tx timeout [ 85.056369][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 85.057320][ T5738] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.158335][ T5878] usb 5-1: USB disconnect, device number 2 [ 86.057705][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 86.057769][ T43] audit: type=1400 audit(1790533133.207:455): avc: denied { name_bind } for pid=6693 comm="syz.2.336" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.176189][ T5738] Bluetooth: hci0: command 0x0c13 tx timeout [ 86.183930][ T6704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 86.231516][ T43] audit: type=1400 audit(1790533133.377:456): avc: denied { bind } for pid=6706 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.231753][ T43] audit: type=1400 audit(1790533133.377:457): avc: denied { node_bind } for pid=6706 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 86.232056][ T6708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 86.233033][ T43] audit: type=1400 audit(1790533133.377:458): avc: denied { connect } for pid=6706 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.265620][ T43] audit: type=1400 audit(1790533133.417:459): avc: denied { write } for pid=6709 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.265804][ T43] audit: type=1400 audit(1790533133.417:460): avc: denied { nlmsg_write } for pid=6709 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.265836][ T6712] netlink: 68 bytes leftover after parsing attributes in process `syz.2.343'. [ 86.370881][ T6720] syzkaller0: entered promiscuous mode [ 86.370897][ T6720] syzkaller0: entered allmulticast mode [ 86.699658][ T6684] Set syz1 is full, maxelem 65536 reached [ 86.755262][ T6725] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 86.805188][ T6727] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.132134][ T6735] netlink: 68 bytes leftover after parsing attributes in process `syz.3.353'. [ 87.185677][ T6737] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.553855][ T43] audit: type=1400 audit(1790533134.697:461): avc: denied { mount } for pid=6748 comm="syz.2.360" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 87.581213][ T6754] ======================================================= [ 87.581213][ T6754] WARNING: The mand mount option has been deprecated and [ 87.581213][ T6754] and is ignored by this kernel. Remove the mand [ 87.581213][ T6754] option from the mount to silence this warning. [ 87.581213][ T6754] ======================================================= [ 87.581859][ T6754] jffs2: notice: (6754) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.597553][ T43] audit: type=1400 audit(1790533134.747:462): avc: denied { mounton } for pid=6756 comm="syz.0.363" path="/90/file0" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.625911][ T6759] xt_hashlimit: size too large, truncated to 1048576 [ 87.639326][ T67] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 87.747148][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 87.772335][ T43] audit: type=1400 audit(1790533134.917:463): avc: denied { write } for pid=6769 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.972287][ T43] audit: type=1400 audit(1790533135.117:464): avc: denied { write } for pid=6783 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.807031][ T5830] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 88.958447][ T5830] usb 6-1: unable to get BOS descriptor or descriptor too short [ 88.958491][ T5830] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 88.959338][ T5830] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 88.959359][ T5830] usb 6-1: config 142 has no interface number 0 [ 88.959390][ T5830] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 88.959411][ T5830] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 88.959429][ T5830] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 88.959446][ T5830] usb 6-1: config 142 interface 251 has no altsetting 0 [ 88.962093][ T5830] usb 6-1: string descriptor 0 read error: -22 [ 88.962180][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.965272][ T6803] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 88.965427][ T6803] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 88.969699][ T5830] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 88.980284][ T5830] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 89.583697][ T6835] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.737908][ T6803] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 89.737928][ T6803] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 89.738179][ C1] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 90.020355][ T5878] usb 6-1: USB disconnect, device number 3 [ 90.030879][ T5878] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 90.031634][ T5878] cypress_m8 6-1:142.251: device disconnected [ 90.091256][ T6842] tipc: Enabling of bearer rejected, failed to enable media [ 91.362244][ T6895] 9pnet_fd: p9_fd_create_tcp (6895): problem connecting socket to 127.0.0.1 [ 91.466452][ T1487] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 91.627323][ T1487] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 91.628638][ T1487] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.628657][ T1487] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 91.628695][ T1487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.633199][ T1487] usb 5-1: config 0 descriptor?? [ 91.653495][ T1487] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 91.653536][ T1487] dvb-usb: bulk message failed: -22 (3/0) [ 91.655512][ T6913] netlink: 'syz.2.422': attribute type 3 has an invalid length. [ 91.659980][ T1487] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 91.664532][ T1487] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 91.664571][ T1487] usb 5-1: media controller created [ 91.665778][ T1487] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.683208][ T1487] dvb-usb: bulk message failed: -22 (6/0) [ 91.683270][ T1487] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 91.695797][ T1487] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input7 [ 91.700084][ T1487] dvb-usb: schedule remote query interval to 150 msecs. [ 91.700103][ T1487] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 91.734920][ T6917] jffs2: notice: (6917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.788467][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 91.788480][ T43] audit: type=1400 audit(1790533138.937:467): avc: denied { bind } for pid=6919 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.789405][ T43] audit: type=1400 audit(1790533138.937:468): avc: denied { read } for pid=6919 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.843030][ T65] usb 5-1: USB disconnect, device number 3 [ 91.883960][ T65] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 92.433439][ T6944] netlink: 'syz.1.432': attribute type 3 has an invalid length. [ 92.740753][ T6961] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 93.107836][ T43] audit: type=1400 audit(1790533140.257:469): avc: denied { ioctl } for pid=6971 comm="syz.1.445" path="net:[4026532883]" dev="nsfs" ino=4026532883 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.292261][ T6975] pim6reg1: entered promiscuous mode [ 93.292300][ T6975] pim6reg1: entered allmulticast mode [ 93.496419][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.451'. [ 93.576672][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x30 [ 93.664923][ T43] audit: type=1400 audit(1790533140.807:470): avc: denied { map_create } for pid=7005 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.665288][ T43] audit: type=1400 audit(1790533140.807:471): avc: denied { map_read map_write } for pid=7005 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 93.813780][ T7016] input: syz0 as /devices/virtual/input/input8 [ 94.018483][ T43] audit: type=1400 audit(1790533141.167:472): avc: denied { create } for pid=7029 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.020887][ T43] audit: type=1400 audit(1790533141.167:473): avc: denied { ioctl } for pid=7029 comm="syz.0.468" path="socket:[15668]" dev="sockfs" ino=15668 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.179196][ T67] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 94.264334][ T43] audit: type=1400 audit(1790533141.407:474): avc: denied { prog_load } for pid=7040 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.318403][ T7043] ubi0: attaching mtd0 [ 94.318427][ T7043] ubi0 error: ubi_attach_mtd_dev: bad VID header (1853191215) or data offsets (1853191279) [ 94.666302][ T5097] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.836214][ T5097] usb 5-1: Using ep0 maxpacket: 8 [ 94.839210][ T5097] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.842616][ T5097] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 94.842659][ T5097] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 94.842679][ T5097] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.842697][ T5097] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 94.842715][ T5097] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 94.842733][ T5097] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.842764][ T5097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.972255][ T67] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 95.055359][ T5097] usb 5-1: usb_control_msg returned -32 [ 95.055383][ T5097] usbtmc 5-1:16.0: can't read capabilities [ 95.409810][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 95.409977][ T7075] usbtmc 5-1:16.0: Unable to send data, error -71 [ 95.410984][ T7075] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 95.411869][ T65] usb 5-1: USB disconnect, device number 4 [ 95.547787][ T7079] fuse: fd is not a fuse device [ 95.720403][ T43] audit: type=1400 audit(1790533142.867:475): avc: denied { name_bind } for pid=7091 comm="syz.3.495" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 95.794722][ T7101] FAULT_INJECTION: forcing a failure. [ 95.794722][ T7101] name failslab, interval 1, probability 0, space 0, times 0 [ 95.794743][ T7101] CPU: 1 UID: 0 PID: 7101 Comm: syz.1.498 Not tainted syzkaller #0 PREEMPT(full) [ 95.794756][ T7101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.794762][ T7101] Call Trace: [ 95.794766][ T7101] [ 95.794770][ T7101] dump_stack_lvl+0x100/0x190 [ 95.794790][ T7101] should_fail_ex.cold+0x5/0xa [ 95.794807][ T7101] should_failslab+0xc2/0x120 [ 95.794831][ T7101] __kmalloc_cache_noprof+0x91/0x6d0 [ 95.794843][ T7101] ? alloc_mnt_ns+0xce/0x520 [ 95.794860][ T7101] alloc_mnt_ns+0xce/0x520 [ 95.794876][ T7101] vfs_open_tree+0x486/0xae0 [ 95.794893][ T7101] ? _raw_spin_unlock+0x28/0x50 [ 95.794913][ T7101] ? __pfx_vfs_open_tree+0x10/0x10 [ 95.794933][ T7101] __x64_sys_open_tree+0xa3/0x150 [ 95.794944][ T7101] do_syscall_64+0x123/0x790 [ 95.794966][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.794978][ T7101] RIP: 0033:0x7f0a6bd9e159 [ 95.794989][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.794999][ T7101] RSP: 002b:00007f0a6cb9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 95.795011][ T7101] RAX: ffffffffffffffda RBX: 00007f0a6c025fa0 RCX: 00007f0a6bd9e159 [ 95.795018][ T7101] RDX: 0000000000089901 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 95.795025][ T7101] RBP: 00007f0a6be3506b R08: 0000000000000000 R09: 0000000000000000 [ 95.795032][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.795039][ T7101] R13: 00007f0a6c026038 R14: 00007f0a6c025fa0 R15: 00007ffc71a58178 [ 95.795054][ T7101] [ 95.876038][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 95.974913][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 96.109686][ T43] audit: type=1400 audit(1790533143.257:476): avc: denied { append } for pid=7137 comm="syz.0.515" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.231499][ T7145] netlink: 72 bytes leftover after parsing attributes in process `syz.3.518'. [ 96.419220][ T7157] fuse: Bad value for 'fd' [ 96.526490][ T65] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.599102][ T67] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 96.687117][ T65] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 96.687943][ T65] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 96.687957][ T65] usb 5-1: config 1 has no interface number 0 [ 96.689495][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.689510][ T65] usb 5-1: Product: syz [ 96.689517][ T65] usb 5-1: Manufacturer: syz [ 96.689524][ T65] usb 5-1: SerialNumber: syz [ 96.695571][ T65] usb 5-1: 3:0 : does not exist [ 96.695585][ T65] usb 5-1: 3:0 : does not exist [ 97.002185][ T58] usb 5-1: USB disconnect, device number 5 [ 97.156210][ T65] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 97.316235][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 97.317021][ T65] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.318009][ T65] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 97.318050][ T65] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.318069][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.318089][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.318109][ T65] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.318144][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.530777][ T65] usb 6-1: usb_control_msg returned -32 [ 97.530819][ T65] usbtmc 6-1:16.0: can't read capabilities [ 97.718660][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 98.000951][ T7202] jffs2: notice: (7202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.149877][ T67] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 98.286879][ T7218] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 98.396515][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 98.396532][ T43] audit: type=1400 audit(1790533145.537:478): avc: denied { setattr } for pid=7221 comm="syz.0.549" name="/" dev="9p" ino=71827601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.436425][ T65] usb 6-1: USB disconnect, device number 4 [ 98.619477][ T43] audit: type=1400 audit(1790533145.767:479): avc: denied { unlink } for pid=7227 comm="syz.0.552" name="#3" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.757561][ T43] audit: type=1400 audit(1790533145.907:480): avc: denied { create } for pid=7238 comm="syz.3.557" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.758292][ T43] audit: type=1400 audit(1790533145.907:481): avc: denied { write } for pid=7238 comm="syz.3.557" name="file0" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.758575][ T43] audit: type=1400 audit(1790533145.907:482): avc: denied { open } for pid=7238 comm="syz.3.557" path="/146/file0" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.759650][ T43] audit: type=1400 audit(1790533145.907:483): avc: denied { ioctl } for pid=7238 comm="syz.3.557" path="/146/file0" dev="tmpfs" ino=814 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.868973][ T43] audit: type=1400 audit(1790533146.017:484): avc: denied { unlink } for pid=5737 comm="syz-executor" name="file0" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.004280][ T43] audit: type=1400 audit(1790533146.147:485): avc: denied { mount } for pid=7248 comm="syz.1.559" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.033251][ T43] audit: type=1400 audit(1790533146.177:486): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 99.400870][ T43] audit: type=1400 audit(1790533146.547:487): avc: denied { prog_run } for pid=7269 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.487117][ T7272] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 99.724700][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 99.912817][ T7306] FAULT_INJECTION: forcing a failure. [ 99.912817][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 99.912910][ T7306] CPU: 3 UID: 0 PID: 7306 Comm: syz.0.579 Not tainted syzkaller #0 PREEMPT(full) [ 99.912933][ T7306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.912944][ T7306] Call Trace: [ 99.912951][ T7306] [ 99.912958][ T7306] dump_stack_lvl+0x100/0x190 [ 99.913005][ T7306] should_fail_ex.cold+0x5/0xa [ 99.913031][ T7306] should_failslab+0xc2/0x120 [ 99.913062][ T7306] __kmalloc_cache_noprof+0x91/0x6d0 [ 99.913083][ T7306] ? alloc_netdev_mqs+0xea8/0x15c0 [ 99.913123][ T7306] alloc_netdev_mqs+0xea8/0x15c0 [ 99.913157][ T7306] rtnl_create_link+0xc13/0xf80 [ 99.913192][ T7306] rtnl_newlink+0x15bc/0x2620 [ 99.913230][ T7306] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.913256][ T7306] ? avc_has_perm_noaudit+0x56/0x470 [ 99.913285][ T7306] ? find_held_lock+0x2b/0x80 [ 99.913316][ T7306] ? avc_has_perm_noaudit+0x11e/0x470 [ 99.913347][ T7306] ? avc_has_perm_noaudit+0x11e/0x470 [ 99.913401][ T7306] ? lock_acquire+0x1d1/0x380 [ 99.913422][ T7306] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 99.913450][ T7306] ? find_held_lock+0x2b/0x80 [ 99.913477][ T7306] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 99.913504][ T7306] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 99.913537][ T7306] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.913567][ T7306] rtnetlink_rcv_msg+0x95e/0xe90 [ 99.913599][ T7306] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.913638][ T7306] ? ref_tracker_free+0x37e/0x6c0 [ 99.913672][ T7306] netlink_rcv_skb+0x159/0x420 [ 99.913698][ T7306] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.913732][ T7306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.913768][ T7306] ? netlink_deliver_tap+0x1ae/0xcc0 [ 99.913798][ T7306] netlink_unicast+0x585/0x850 [ 99.913827][ T7306] ? __pfx_netlink_unicast+0x10/0x10 [ 99.913862][ T7306] netlink_sendmsg+0x8b0/0xda0 [ 99.913890][ T7306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.913926][ T7306] ? selinux_socket_sendmsg+0x198/0x2f0 [ 99.913957][ T7306] ____sys_sendmsg+0xa4d/0xbe0 [ 99.913977][ T7306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.914007][ T7306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.914042][ T7306] ___sys_sendmsg+0x190/0x1e0 [ 99.914066][ T7306] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.914090][ T7306] ? futex_wait+0x11e/0x370 [ 99.914122][ T7306] ? find_held_lock+0x2b/0x80 [ 99.914172][ T7306] __sys_sendmsg+0x160/0x210 [ 99.914202][ T7306] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.914243][ T7306] do_syscall_64+0x123/0x790 [ 99.914279][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.914301][ T7306] RIP: 0033:0x7f5b9219e159 [ 99.914319][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.914338][ T7306] RSP: 002b:00007f5b93037028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.914360][ T7306] RAX: ffffffffffffffda RBX: 00007f5b92425fa0 RCX: 00007f5b9219e159 [ 99.914374][ T7306] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000004 [ 99.914386][ T7306] RBP: 00007f5b9223506b R08: 0000000000000000 R09: 0000000000000000 [ 99.914397][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.914408][ T7306] R13: 00007f5b92426038 R14: 00007f5b92425fa0 R15: 00007ffc8e083628 [ 99.914436][ T7306] [ 100.145749][ T7327] FAULT_INJECTION: forcing a failure. [ 100.145749][ T7327] name failslab, interval 1, probability 0, space 0, times 0 [ 100.145776][ T7327] CPU: 1 UID: 0 PID: 7327 Comm: syz.0.585 Not tainted syzkaller #0 PREEMPT(full) [ 100.145796][ T7327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.145805][ T7327] Call Trace: [ 100.145812][ T7327] [ 100.145818][ T7327] dump_stack_lvl+0x100/0x190 [ 100.145848][ T7327] should_fail_ex.cold+0x5/0xa [ 100.145874][ T7327] should_failslab+0xc2/0x120 [ 100.145898][ T7327] __kmalloc_cache_noprof+0x91/0x6d0 [ 100.145917][ T7327] ? ima_queue_key+0x55/0x4e0 [ 100.145942][ T7327] ima_queue_key+0x55/0x4e0 [ 100.145967][ T7327] ima_post_key_create_or_update+0xa4/0x130 [ 100.145993][ T7327] security_key_post_create_or_update+0x1ed/0x200 [ 100.146022][ T7327] __key_create_or_update+0x799/0xe30 [ 100.146053][ T7327] ? __pfx___key_create_or_update+0x10/0x10 [ 100.146079][ T7327] ? lookup_user_key+0x3f3/0x1300 [ 100.146130][ T7327] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 100.146155][ T7327] ? __pfx_keyring_search_iterator+0x10/0x10 [ 100.146187][ T7327] key_create_or_update+0x42/0x60 [ 100.146206][ T7327] __do_sys_add_key+0x2e8/0x460 [ 100.146218][ T7327] ? __pfx___do_sys_add_key+0x10/0x10 [ 100.146228][ T7327] ? ksys_write+0x1ac/0x250 [ 100.146248][ T7327] do_syscall_64+0x123/0x790 [ 100.146262][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.146273][ T7327] RIP: 0033:0x7f5b9219e159 [ 100.146283][ T7327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.146293][ T7327] RSP: 002b:00007f5b93037028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 100.146305][ T7327] RAX: ffffffffffffffda RBX: 00007f5b92425fa0 RCX: 00007f5b9219e159 [ 100.146312][ T7327] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 100.146318][ T7327] RBP: 00007f5b9223506b R08: 0000000003c2f191 R09: 0000000000000000 [ 100.146325][ T7327] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 100.146331][ T7327] R13: 00007f5b92426038 R14: 00007f5b92425fa0 R15: 00007ffc8e083628 [ 100.146346][ T7327] [ 100.738187][ T7365] FAULT_INJECTION: forcing a failure. [ 100.738187][ T7365] name failslab, interval 1, probability 0, space 0, times 0 [ 100.738220][ T7365] CPU: 3 UID: 0 PID: 7365 Comm: syz.1.601 Not tainted syzkaller #0 PREEMPT(full) [ 100.738244][ T7365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.738256][ T7365] Call Trace: [ 100.738263][ T7365] [ 100.738272][ T7365] dump_stack_lvl+0x100/0x190 [ 100.738312][ T7365] should_fail_ex.cold+0x5/0xa [ 100.738339][ T7365] should_failslab+0xc2/0x120 [ 100.738367][ T7365] kmem_cache_alloc_noprof+0x92/0x6a0 [ 100.738389][ T7365] ? key_alloc+0x3c5/0x1310 [ 100.738415][ T7365] key_alloc+0x3c5/0x1310 [ 100.738446][ T7365] ? __pfx_key_alloc+0x10/0x10 [ 100.738472][ T7365] ? __pfx_sprintf+0x10/0x10 [ 100.738493][ T7365] keyring_alloc+0x44/0xc0 [ 100.738521][ T7365] call_sbin_request_key+0x380/0xd90 [ 100.738550][ T7365] ? __pfx_call_sbin_request_key+0x10/0x10 [ 100.738571][ T7365] ? key_instantiate_and_link+0x39d/0x4b0 [ 100.738593][ T7365] ? key_alloc+0xbb4/0x1310 [ 100.738613][ T7365] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 100.738654][ T7365] ? request_key_auth_new+0x732/0xb50 [ 100.738678][ T7365] ? __pfx_request_key_auth_new+0x10/0x10 [ 100.738710][ T7365] ? __pfx_call_sbin_request_key+0x10/0x10 [ 100.738732][ T7365] request_key_and_link+0x1115/0x1330 [ 100.738756][ T7365] ? __pfx_request_key_and_link+0x10/0x10 [ 100.738776][ T7365] ? __pfx___might_resched+0x10/0x10 [ 100.738799][ T7365] ? __pfx_key_default_cmp+0x10/0x10 [ 100.738826][ T7365] ? __pfx_keyring_search_iterator+0x10/0x10 [ 100.738852][ T7365] ? _copy_from_user+0x59/0xd0 [ 100.738879][ T7365] __do_sys_request_key+0x2a2/0x3c0 [ 100.738900][ T7365] ? __pfx___do_sys_request_key+0x10/0x10 [ 100.738918][ T7365] ? selinux_file_ioctl+0xb6/0x290 [ 100.738949][ T7365] do_syscall_64+0x123/0x790 [ 100.738972][ T7365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.738991][ T7365] RIP: 0033:0x7f0a6bd9e159 [ 100.739004][ T7365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.739015][ T7365] RSP: 002b:00007f0a6cb9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 100.739027][ T7365] RAX: ffffffffffffffda RBX: 00007f0a6c025fa0 RCX: 00007f0a6bd9e159 [ 100.739036][ T7365] RDX: 0000200000001fee RSI: 0000200000000240 RDI: 0000200000000040 [ 100.739044][ T7365] RBP: 00007f0a6be3506b R08: 0000000000000000 R09: 0000000000000000 [ 100.739052][ T7365] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 100.739060][ T7365] R13: 00007f0a6c026038 R14: 00007f0a6c025fa0 R15: 00007ffc71a58178 [ 100.739076][ T7365] [ 100.927420][ T5741] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.969656][ T7378] FAULT_INJECTION: forcing a failure. [ 100.969656][ T7378] name failslab, interval 1, probability 0, space 0, times 0 [ 100.969688][ T7378] CPU: 0 UID: 0 PID: 7378 Comm: syz.1.606 Not tainted syzkaller #0 PREEMPT(full) [ 100.969710][ T7378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.969721][ T7378] Call Trace: [ 100.969728][ T7378] [ 100.969736][ T7378] dump_stack_lvl+0x100/0x190 [ 100.969770][ T7378] should_fail_ex.cold+0x5/0xa [ 100.969796][ T7378] should_failslab+0xc2/0x120 [ 100.969822][ T7378] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 100.969847][ T7378] ? __alloc_skb+0x140/0x710 [ 100.969877][ T7378] __alloc_skb+0x140/0x710 [ 100.969896][ T7378] ? __alloc_skb+0x5b7/0x710 [ 100.969919][ T7378] ? __pfx___alloc_skb+0x10/0x10 [ 100.969943][ T7378] ? __lock_acquire+0x5c0/0x1f40 [ 100.969980][ T7378] xfrm_send_state_notify+0x7dc/0x2020 [ 100.970003][ T7378] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 100.970020][ T7378] ? km_state_notify+0x2e/0x230 [ 100.970053][ T7378] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 100.970073][ T7378] km_state_notify+0xab/0x230 [ 100.970100][ T7378] pfkey_add+0x1f7a/0x2f10 [ 100.970134][ T7378] ? __pfx_pfkey_add+0x10/0x10 [ 100.970162][ T7378] ? kfree_skbmem+0x19f/0x210 [ 100.970183][ T7378] ? sk_skb_reason_drop+0x114/0x1b0 [ 100.970213][ T7378] ? pfkey_broadcast+0x28c/0x420 [ 100.970232][ T7378] ? __pfx_pfkey_add+0x10/0x10 [ 100.970257][ T7378] pfkey_process+0x5c3/0x810 [ 100.970278][ T7378] ? __pfx_pfkey_process+0x10/0x10 [ 100.970296][ T7378] ? pfkey_sendmsg+0x41a/0x840 [ 100.970330][ T7378] ? __pfx___alloc_skb+0x10/0x10 [ 100.970358][ T7378] pfkey_sendmsg+0x428/0x840 [ 100.970381][ T7378] ____sys_sendmsg+0xa4d/0xbe0 [ 100.970399][ T7378] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 100.970419][ T7378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.970450][ T7378] ___sys_sendmsg+0x190/0x1e0 [ 100.970471][ T7378] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.970490][ T7378] ? futex_wait+0x11e/0x370 [ 100.970520][ T7378] ? find_held_lock+0x2b/0x80 [ 100.970564][ T7378] __sys_sendmsg+0x160/0x210 [ 100.970589][ T7378] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.970627][ T7378] do_syscall_64+0x123/0x790 [ 100.970649][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.970668][ T7378] RIP: 0033:0x7f0a6bd9e159 [ 100.970683][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.970699][ T7378] RSP: 002b:00007f0a6cb9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.970716][ T7378] RAX: ffffffffffffffda RBX: 00007f0a6c025fa0 RCX: 00007f0a6bd9e159 [ 100.970728][ T7378] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 100.970740][ T7378] RBP: 00007f0a6be3506b R08: 0000000000000000 R09: 0000000000000000 [ 100.970752][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.970763][ T7378] R13: 00007f0a6c026038 R14: 00007f0a6c025fa0 R15: 00007ffc71a58178 [ 100.970791][ T7378] [ 101.126308][ T5741] usb 5-1: Using ep0 maxpacket: 16 [ 101.127053][ T5741] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 101.128055][ T5741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.128079][ T5741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 101.130052][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.130072][ T5741] usb 5-1: Product: syz [ 101.130085][ T5741] usb 5-1: Manufacturer: syz [ 101.130097][ T5741] usb 5-1: SerialNumber: syz [ 101.155810][ T5741] usb 5-1: config 0 descriptor?? [ 101.382199][ T5741] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9 [ 101.583335][ T7425] netlink: 'syz.1.620': attribute type 10 has an invalid length. [ 101.600847][ T7425] team0: Port device veth0 added [ 101.657181][ T5741] rc_core: IR keymap rc-imon-pad not found [ 101.657192][ T5741] Registered IR keymap rc-empty [ 101.657227][ T5741] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 101.657236][ T5741] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 101.798361][ T5741] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 101.802401][ T5741] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 101.805840][ T5741] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:6> initialized [ 101.974479][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 101.974719][ T5741] usb 5-1: USB disconnect, device number 6 [ 102.062068][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 102.536235][ T67] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 102.701247][ T7470] FAULT_INJECTION: forcing a failure. [ 102.701247][ T7470] name failslab, interval 1, probability 0, space 0, times 0 [ 102.701280][ T7470] CPU: 1 UID: 0 PID: 7470 Comm: syz.0.639 Not tainted syzkaller #0 PREEMPT(full) [ 102.701301][ T7470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.701312][ T7470] Call Trace: [ 102.701319][ T7470] [ 102.701327][ T7470] dump_stack_lvl+0x100/0x190 [ 102.701374][ T7470] should_fail_ex.cold+0x5/0xa [ 102.701403][ T7470] should_failslab+0xc2/0x120 [ 102.701435][ T7470] __kmalloc_node_noprof+0xff/0x880 [ 102.701461][ T7470] ? blk_mq_alloc_tag_set+0x57a/0x1330 [ 102.701500][ T7470] blk_mq_alloc_tag_set+0x57a/0x1330 [ 102.701527][ T7470] ? idr_alloc+0x77/0x130 [ 102.701564][ T7470] loop_add+0x3b7/0xb60 [ 102.701588][ T7470] ? __pfx_loop_add+0x10/0x10 [ 102.701624][ T7470] ? __fget_files+0x34/0x3d0 [ 102.701658][ T7470] loop_control_ioctl+0xae/0x620 [ 102.701684][ T7470] ? __pfx_loop_control_ioctl+0x10/0x10 [ 102.701708][ T7470] ? selinux_file_ioctl+0x13b/0x290 [ 102.701734][ T7470] ? selinux_file_ioctl+0xb6/0x290 [ 102.701759][ T7470] ? __pfx_loop_control_ioctl+0x10/0x10 [ 102.701784][ T7470] __x64_sys_ioctl+0x18e/0x210 [ 102.701809][ T7470] do_syscall_64+0x123/0x790 [ 102.701831][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.701851][ T7470] RIP: 0033:0x7f5b9219e159 [ 102.701867][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.701886][ T7470] RSP: 002b:00007f5b93037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.701905][ T7470] RAX: ffffffffffffffda RBX: 00007f5b92425fa0 RCX: 00007f5b9219e159 [ 102.701918][ T7470] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 102.701930][ T7470] RBP: 00007f5b9223506b R08: 0000000000000000 R09: 0000000000000000 [ 102.701941][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.701952][ T7470] R13: 00007f5b92426038 R14: 00007f5b92425fa0 R15: 00007ffc8e083628 [ 102.701979][ T7470] [ 102.902168][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 103.419472][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 103.419490][ T43] audit: type=1400 audit(1790533150.567:514): avc: denied { create } for pid=7515 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.491733][ T67] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 103.680116][ T7535] FAULT_INJECTION: forcing a failure. [ 103.680116][ T7535] name failslab, interval 1, probability 0, space 0, times 0 [ 103.680146][ T7535] CPU: 1 UID: 0 PID: 7535 Comm: syz.0.663 Not tainted syzkaller #0 PREEMPT(full) [ 103.680160][ T7535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.680168][ T7535] Call Trace: [ 103.680172][ T7535] [ 103.680177][ T7535] dump_stack_lvl+0x100/0x190 [ 103.680217][ T7535] should_fail_ex.cold+0x5/0xa [ 103.680273][ T7535] should_failslab+0xc2/0x120 [ 103.680305][ T7535] __kmalloc_noprof+0xfc/0x840 [ 103.680325][ T7535] ? aes_set_key_common+0x78/0xc0 [ 103.680350][ T7535] ? init_skcipher_req.constprop.0+0x9c/0x180 [ 103.680388][ T7535] init_skcipher_req.constprop.0+0x9c/0x180 [ 103.680419][ T7535] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 103.680451][ T7535] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 103.680471][ T7535] ? kasan_quarantine_put+0x104/0x240 [ 103.680485][ T7535] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.680504][ T7535] ? __kasan_check_byte+0x13/0x50 [ 103.680522][ T7535] ? get_derived_key+0x11b/0x140 [ 103.680533][ T7535] encrypted_read+0x389/0x850 [ 103.680544][ T7535] ? lock_acquire+0x1d1/0x380 [ 103.680558][ T7535] ? keyctl_read_key+0x227/0x510 [ 103.680569][ T7535] ? __pfx_encrypted_read+0x10/0x10 [ 103.680581][ T7535] ? __pfx___might_resched+0x10/0x10 [ 103.680596][ T7535] ? down_read+0x13b/0x4c0 [ 103.680609][ T7535] ? __pfx_down_read+0x10/0x10 [ 103.680621][ T7535] ? keyctl_read_key+0x2ac/0x510 [ 103.680632][ T7535] ? keyctl_read_key+0x2ac/0x510 [ 103.680644][ T7535] ? keyctl_read_key+0x427/0x510 [ 103.680657][ T7535] keyctl_read_key+0x29a/0x510 [ 103.680670][ T7535] __do_sys_keyctl+0x36d/0x5a0 [ 103.680683][ T7535] do_syscall_64+0x123/0x790 [ 103.680695][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.680706][ T7535] RIP: 0033:0x7f5b9219e159 [ 103.680716][ T7535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.680726][ T7535] RSP: 002b:00007f5b93037028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 103.680737][ T7535] RAX: ffffffffffffffda RBX: 00007f5b92425fa0 RCX: 00007f5b9219e159 [ 103.680744][ T7535] RDX: 0000200000000240 RSI: 00000000313095dd RDI: 000000000000000b [ 103.680751][ T7535] RBP: 00007f5b9223506b R08: 0000000000000000 R09: 0000000000000000 [ 103.680757][ T7535] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 103.680763][ T7535] R13: 00007f5b92426038 R14: 00007f5b92425fa0 R15: 00007ffc8e083628 [ 103.680777][ T7535] [ 103.680782][ T7535] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 103.773073][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 103.869756][ T43] audit: type=1400 audit(1790533151.017:515): avc: denied { setopt } for pid=7542 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.872665][ T43] audit: type=1400 audit(1790533151.017:516): avc: denied { connect } for pid=7542 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.872947][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 104.011845][ T43] audit: type=1400 audit(1790533151.157:517): avc: denied { listen } for pid=7546 comm="syz.2.668" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.135270][ T7555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.671'. [ 104.464774][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 104.551138][ T43] audit: type=1400 audit(1790533151.697:518): avc: denied { write } for pid=7579 comm="syz.0.682" name="functions" dev="configfs" ino=11513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.552093][ T7580] file system registered [ 104.554135][ T7580] [ 104.556307][ T43] audit: type=1400 audit(1790533151.697:519): avc: denied { write } for pid=7579 comm="syz.0.682" name="functions" dev="configfs" ino=11513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.556344][ T43] audit: type=1400 audit(1790533151.697:520): avc: denied { remove_name } for pid=7579 comm="syz.0.682" name="ffs.usb0" dev="configfs" ino=15186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.556371][ T43] audit: type=1400 audit(1790533151.697:521): avc: denied { rmdir } for pid=7579 comm="syz.0.682" name="ffs.usb0" dev="configfs" ino=15186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.587814][ T7580] ====================================================== [ 104.590539][ T7580] WARNING: possible circular locking dependency detected [ 104.592787][ T7580] syzkaller #0 Not tainted [ 104.594462][ T7580] ------------------------------------------------------ [ 104.596701][ T7580] syz.0.682/7580 is trying to acquire lock: [ 104.598607][ T7580] ffffffff903fe9a8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 104.601681][ T7580] [ 104.601681][ T7580] but task is already holding lock: [ 104.604001][ T7580] ffff88803962e040 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 104.607154][ T7580] [ 104.607154][ T7580] which lock already depends on the new lock. [ 104.607154][ T7580] [ 104.610377][ T7580] [ 104.610377][ T7580] the existing dependency chain (in reverse order) is: [ 104.613176][ T7580] [ 104.613176][ T7580] -> #3 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 104.615863][ T7580] lock_acquire+0x1d1/0x380 [ 104.617523][ T7580] down_write+0x8b/0x1f0 [ 104.619110][ T7580] configfs_depend_item_unlocked+0xf3/0x6a0 [ 104.621134][ T7580] usbg_make_tpg+0x251/0x610 [ 104.622753][ T7580] target_fabric_make_tpg+0xab/0x8c0 [ 104.624628][ T7580] configfs_mkdir+0x525/0xd40 [ 104.626474][ T7580] vfs_mkdir+0x364/0x850 [ 104.628039][ T7580] filename_mkdirat+0x48b/0x5e0 [ 104.629767][ T7580] __x64_sys_mkdirat+0x89/0xc0 [ 104.631475][ T7580] do_syscall_64+0x123/0x790 [ 104.633294][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.635596][ T7580] [ 104.635596][ T7580] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 104.638395][ T7580] lock_acquire+0x1d1/0x380 [ 104.640360][ T7580] __mutex_lock+0x1a4/0x1bd0 [ 104.642085][ T7580] tcm_alloc_inst+0x5f/0x1e0 [ 104.644099][ T7580] try_get_usb_function_instance+0x136/0x1f0 [ 104.646887][ T7580] usb_get_function_instance+0x16/0x70 [ 104.649326][ T7580] function_make+0x18c/0x3f0 [ 104.651270][ T7580] configfs_mkdir+0x525/0xd40 [ 104.653361][ T7580] vfs_mkdir+0x364/0x850 [ 104.654962][ T7580] filename_mkdirat+0x48b/0x5e0 [ 104.656734][ T7580] __x64_sys_mkdirat+0x89/0xc0 [ 104.658458][ T7580] do_syscall_64+0x123/0x790 [ 104.660077][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.662101][ T7580] [ 104.662101][ T7580] -> #1 (func_lock){+.+.}-{4:4}: [ 104.664344][ T7580] lock_acquire+0x1d1/0x380 [ 104.665959][ T7580] __mutex_lock+0x1a4/0x1bd0 [ 104.667586][ T7580] try_get_usb_function_instance+0x26/0x1f0 [ 104.669625][ T7580] usb_get_function_instance+0x16/0x70 [ 104.671513][ T7580] function_make+0x18c/0x3f0 [ 104.673152][ T7580] configfs_mkdir+0x525/0xd40 [ 104.674837][ T7580] vfs_mkdir+0x364/0x850 [ 104.676389][ T7580] filename_mkdirat+0x48b/0x5e0 [ 104.678132][ T7580] __x64_sys_mkdirat+0x89/0xc0 [ 104.679851][ T7580] do_syscall_64+0x123/0x790 [ 104.681469][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.683453][ T7580] [ 104.683453][ T7580] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 104.686069][ T7580] check_prev_add+0xeb/0xe60 [ 104.687754][ T7580] __lock_acquire+0x1528/0x1f40 [ 104.689472][ T7580] lock_acquire+0x1d1/0x380 [ 104.691109][ T7580] __mutex_lock+0x1a4/0x1bd0 [ 104.692875][ T7580] configfs_rmdir+0x5ae/0x950 [ 104.694682][ T7580] vfs_rmdir+0x328/0x8a0 [ 104.696610][ T7580] filename_rmdir+0x31a/0x5c0 [ 104.698818][ T7580] __x64_sys_rmdir+0x46/0x70 [ 104.701121][ T7580] do_syscall_64+0x123/0x790 [ 104.703405][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.705597][ T7580] [ 104.705597][ T7580] other info that might help us debug this: [ 104.705597][ T7580] [ 104.709487][ T7580] Chain exists of: [ 104.709487][ T7580] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#24 [ 104.709487][ T7580] [ 104.714869][ T7580] Possible unsafe locking scenario: [ 104.714869][ T7580] [ 104.717254][ T7580] CPU0 CPU1 [ 104.719393][ T7580] ---- ---- [ 104.721671][ T7580] lock(&sb->s_type->i_mutex_key#24); [ 104.723850][ T7580] lock(tpg_instances_lock); [ 104.727058][ T7580] lock(&sb->s_type->i_mutex_key#24); [ 104.729868][ T7580] lock(gadget_subsys.su_mutex); [ 104.731387][ T7580] [ 104.731387][ T7580] *** DEADLOCK *** [ 104.731387][ T7580] [ 104.734532][ T7580] locks held by syz.0.682/7580: 3, last CPU#3: [ 104.736874][ T7580] #0: ffff888022ea2460 (sb_writers#13){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 104.740121][ T7580] #1: ffff888058954880 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 104.744270][ T7580] #2: ffff88803962e040 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 104.748057][ T7580] [ 104.748057][ T7580] stack backtrace: [ 104.750218][ T7580] CPU: 3 UID: 0 PID: 7580 Comm: syz.0.682 Not tainted syzkaller #0 PREEMPT(full) [ 104.753447][ T7580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.757127][ T7580] Call Trace: [ 104.758250][ T7580] [ 104.759414][ T7580] dump_stack_lvl+0x100/0x190 [ 104.761398][ T7580] print_circular_bug.cold+0x178/0x1be [ 104.763148][ T7580] check_noncircular+0x146/0x160 [ 104.764812][ T7580] check_prev_add+0xeb/0xe60 [ 104.766770][ T7580] ? __bfs+0x150/0x2a0 [ 104.768390][ T7580] __lock_acquire+0x1528/0x1f40 [ 104.769950][ T7580] lock_acquire+0x1d1/0x380 [ 104.771511][ T7580] ? configfs_rmdir+0x5ae/0x950 [ 104.773539][ T7580] ? __pfx___might_resched+0x10/0x10 [ 104.775372][ T7580] ? __lock_acquire+0x5c0/0x1f40 [ 104.776956][ T7580] __mutex_lock+0x1a4/0x1bd0 [ 104.778842][ T7580] ? configfs_rmdir+0x5ae/0x950 [ 104.780634][ T7580] ? configfs_rmdir+0x5ae/0x950 [ 104.782257][ T7580] ? reacquire_held_locks+0xdd/0x1f0 [ 104.784217][ T7580] ? __pfx___mutex_lock+0x10/0x10 [ 104.786248][ T7580] ? do_raw_spin_lock+0x128/0x260 [ 104.787845][ T7580] ? find_held_lock+0x2b/0x80 [ 104.789605][ T7580] ? fast_dput+0x2fe/0x6f0 [ 104.791455][ T7580] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.793246][ T7580] ? _raw_spin_unlock+0x28/0x50 [ 104.794872][ T7580] ? fast_dput+0x168/0x6f0 [ 104.796753][ T7580] ? configfs_rmdir+0x5ae/0x950 [ 104.798704][ T7580] configfs_rmdir+0x5ae/0x950 [ 104.800219][ T7580] ? __pfx_configfs_rmdir+0x10/0x10 [ 104.802135][ T7580] ? __pfx_down_write+0x10/0x10 [ 104.804057][ T7580] vfs_rmdir+0x328/0x8a0 [ 104.806179][ T7580] filename_rmdir+0x31a/0x5c0 [ 104.807925][ T7580] ? __pfx_filename_rmdir+0x10/0x10 [ 104.809977][ T7580] ? do_getname+0x191/0x390 [ 104.811653][ T7580] __x64_sys_rmdir+0x46/0x70 [ 104.813597][ T7580] do_syscall_64+0x123/0x790 [ 104.815609][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.817603][ T7580] RIP: 0033:0x7f5b9219e159 [ 104.819277][ T7580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.825733][ T7580] RSP: 002b:00007f5b93037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 104.828681][ T7580] RAX: ffffffffffffffda RBX: 00007f5b92425fa0 RCX: 00007f5b9219e159 [ 104.831723][ T7580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 104.834494][ T7580] RBP: 00007f5b9223506b R08: 0000000000000000 R09: 0000000000000000 [ 104.837788][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.841869][ T7580] R13: 00007f5b92426038 R14: 00007f5b92425fa0 R15: 00007ffc8e083628 [ 104.845834][ T7580] [ 104.848409][ T7580] unloading