last executing test programs: 4.689447109s ago: executing program 3 (id=122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x1000000, 0x81}, 0x0) 4.689321759s ago: executing program 3 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000040000901feffffff00000000017c0000040042800c00018006000600884800000c000280040005"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.623850236s ago: executing program 3 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x62020600) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x6, 0x5}, {0x1, 0x1, 0x4}, 0xd76, 0xc}}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xb8, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000480)={'nicvf0\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f2, &(0x7f00000004c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000088000000a0000000004"], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x11, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r4, &(0x7f0000000100)='3', 0x1) r8 = syz_clone(0x800800, &(0x7f0000000140)="dec8ac94bd18e07972a831112a417e3ddf0cbc814f9cddcd5abab3a6aa3b087605ab7ffbeeaa66fc75394be00418f77988283997b85382edc0cd7d80f7073cd81e52d5f5b187d010d1b852bc52d7680c3e1e98e2a2c7e1", 0x57, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="e44dfdb6725491ae4b7d90125559938fe06b561a889b6f0c59e689a521b9d5eb36d9ad9db7b0903c70ff20d19c3052028bab8863bdb91f67909aaf12313ccfda212ce164e371c035a5fcb86a8aa214b39f3c4864797d0562320acc6d1fcea4a10179c9e5c4f1710035542f5693cd9ead7d5d863d5757edd4bfb0ec6bb6b8c00f4948771071a84b67153bd9e2edf931a3fa8a3d") write$cgroup_pid(r4, &(0x7f0000000340)=r8, 0x12) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000380)={@none, 0x9}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000a80)={0x7, "0d1ccedd641795518f94d51154b2cc5e4b0d06fd4538642badb1d570c56e3b28"}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c40)=@newqdisc={0xa4, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffd47}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 4.451525306s ago: executing program 3 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1c1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_usb_connect(0x0, 0x55, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2000800, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2000800, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5e42, 0x0) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ttyACM0\x00', 0x0, 0x14) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0x0) mount$bind(&(0x7f0000000780)='.\x00', &(0x7f00000007c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000780)='.\x00', &(0x7f00000007c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x1, 0x401}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f00000002c0)={r3, 0x8}, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f00000002c0)={r3, 0x8}, &(0x7f0000000300)=0x8) mount$overlay(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x40, &(0x7f0000000880)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000008c0)='./bus\x00') socket$inet_mptcp(0x2, 0x1, 0x106) unlinkat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x200) 2.088520499s ago: executing program 3 (id=144): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040), 0x20, 0x0) read$midi(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x180, 0x138, 0x1, 0x0, 0x4401, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '3\x00'}}, [@integrity={0x0, 0x3888, 0x0, 0x48, 'integrity\x00', {{@ram={'/dev/ram', 0x0}, 0x20, '8'}, 0x20, '1', 0x20, 'I', ' 1 fix_padding'}}]}) 1.789276681s ago: executing program 3 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0xc08) (fail_nth: 3) 1.75657107s ago: executing program 32 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0xc08) (fail_nth: 3) 708.997699ms ago: executing program 1 (id=168): mknod(&(0x7f0000000140)='./file0\x00', 0x8001d22, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x3}, [], {0x4, 0x4}, [], {0x10, 0x5}}, 0x24, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) lchown(&(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, 0x0) 659.092367ms ago: executing program 1 (id=169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0xffa6, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 537.217248ms ago: executing program 1 (id=170): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000100)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0xffc9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r1, 0x84, 0x7d, &(0x7f0000000040)={0x0, 0x4}, 0x8) 458.794976ms ago: executing program 1 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000003340)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) 456.37553ms ago: executing program 2 (id=172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="b9a40900000f32470f060f20d835200000000f22d8f40f076464410f01caf20f79f80f35b805000000b9006000000f01d9460f07", 0x34}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 9) 456.252907ms ago: executing program 0 (id=173): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, 0x0) 456.108893ms ago: executing program 1 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x8f, 0x463c1) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000001c0)={r0, 0x0, {0x2a12, 0x80010000, 0xfe, 0x6, 0x100004, 0x0, 0x0, 0xe, 0x5, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102006000000e444000017123c00", [0xe0, 0x3fffffff]}}) 386.558496ms ago: executing program 0 (id=175): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x20006, 0x20e}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x1, 0x1057, 0x1000000000000008}) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 386.39577ms ago: executing program 1 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x9}}, 0x9, @val={0x8c, 0x18, {0x283, "726712ea0202", @long="a25804145623b94ac2157c57a5ea2c8c"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) r4 = syz_usbip_server_init(0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000640)={0x9, &(0x7f0000000500)=[{0x7, 0x6a, &(0x7f0000000680)="e20d733889b1901c8b75030a3c67942212e95034a596a0f1afc3e4a940e26b483d2f2869d5ff76e208ee674bde68b0705e15c89f1f4d04a1e2a75e84c87543a9c1de2332dafae0ef085f7d4aa48b8e1266321ab6ca06a89391daa14100"/106, 0x1}, {0x7d7d, 0xc9, &(0x7f0000000040)="c8d471cbfd778b484580175bf39678f61555dbc10153b04f6fb7f49f1e1c2a4ec126d2db415eedc4214018b04b7fb608c0fbb00d89778368f263adfd0cabbde0c1416268da8fc965a6f431733a5139ad748d0783ef69a0575230a76eb51a56034d19a547e4b3db081a5b703e3a449b1f911bed06c321fed8f56504eb34675cbdba3fa5cab52d1ac6735437925d18e64d1e0772c3ed58a461e1a17cc2a3be8779fdf34ba944052a7061d12d07194245877f8a81267a97c2e00dc7f142cdab4493fb7b521aac4b020c93", 0x1}, {0x5bc, 0x8c, &(0x7f0000000140)="b9964966115b43d1fb4575a8673915a03d71ce2c4d5d023d2cff5b079b984ce424088bda2a2c687352a25f0ba132441beb734f1173463fe41bd7fd584c129a58333a0a0e62c8edbf2f852ae48be151cce9af84e836873940d913ba5fd8323fad413ab5f6f876648393ad6aa50f66a7dfb2dd9a76f5b73d1d99dd03fb3597e4adf098ac09ecb76545de8e0bf6", 0x1, 0x1}, {0x8000, 0x0, &(0x7f0000000200), 0x0, 0x1}, {0x9, 0x92, &(0x7f0000000240)="3262017c4fb076acd3ee64b6525ade12bb47ed23b836bfcdf9bd2b2290ff2b36e383945fd73937035d9d9653c7e49cc4214572dfa89293cb4de285ebe46133ae81352b17e8a82819525d19f65580e04d65adaf40c26b84127ad1e086124c0be9c80d91dbd726d282e5982859fcda76df1e552d8f99c6981d66298ea41559b2212fbe1dd497dacdcb100d39dbabdc54f0282c", 0x1, 0x1}, {0x2, 0x73, &(0x7f0000000300)="1d7557a0f716290584a1c715cf3616bd893458949d02e0f875f00c72795b9b0a1ae547fcd5f10822ffb718d82f7c507edb11023dfcbd34f4d19a732cad3a88b299ffb93b271d3a7ead27215fb9996657d4f1d14106104f35fa06748d73be468ae74414ccb47dac79bb154f132342deb78a0576", 0x1, 0x1}, {0x80000001, 0x51, &(0x7f0000000380)="105cc9ffb4458ce7d1ad051f1deade66b8f2c4051ee05f40d68dccaf55b4c926d7ebefcf959b0b3eef6bbcb35e563318d16d2de7ddf933b2ccb7b38659ddb6dcb38102d5f0c970410b8427816bd8ad55fa", 0x1}, {0x3ff, 0x55, &(0x7f0000000400)="9657275e65c2b99827b28618cd1ca0dbc5f52740c5ee5f6b2d118ac735e4214927f031d35d2c888f154bd92ed19a71f35c9eadecdadcb50da7e4e9d6915ad2c9013bff108858579e6426e54412b0702893682ea0e9", 0x1}, {0x4, 0x50, &(0x7f0000000480)="3809722ba248ea3f0a790a82df2409942b171fca7cf7f2d620792e7fbcb3562e36ebc1cbc73115ac12d74412e0d396efead43f98039bcfae9c3da24cc2a49222d653ec9940b876e324539a5a61c8fd0c", 0x1}]}) 309.317206ms ago: executing program 0 (id=177): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 42) 309.161095ms ago: executing program 2 (id=178): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="20000000010a030000000000bdbd4fa70a0000010900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x20000080) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, 0x3f, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x163}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4040) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x85800, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@allow_other}, {@allow_other}, {@allow_other}], [{@hash}, {@subj_type={'subj_type', 0x3d, '}\\'}}, {@uid_gt={'uid>', r5}}, {@smackfshat={'smackfshat', 0x3d, '%('}}, {@smackfshat={'smackfshat', 0x3d, 'fuse\x00'}}, {@seclabel}, {@measure}, {@hash}]}}) read$FUSE(r2, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002d00)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000002d80)={0x18, 0x0, r6, {0x7}}, 0x18) 305.239875ms ago: executing program 0 (id=179): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\aZ\x00\n']) 235.989814ms ago: executing program 0 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000040000901feffffff00000000017c0000040042800c00018006002000800a00000c000280040015"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 235.04352ms ago: executing program 0 (id=181): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe0, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x40090) 67.625963ms ago: executing program 2 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000003340)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) 727.616µs ago: executing program 2 (id=183): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, 0x0) 492.578µs ago: executing program 2 (id=184): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="52000000230001010002060000000000000000000300"/41, 0x29) 0s ago: executing program 2 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x80) r4 = syz_open_dev$dri(&(0x7f0000002d80), 0xfffffffffffffffb, 0xd2641) r5 = syz_open_dev$dri(&(0x7f0000002dc0), 0x0, 0x402) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002e00)={0x1, &(0x7f0000002e40)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002e80), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000002ec0)={0x20004, r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000002f00)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc04464b8, &(0x7f0000002f40)={0x0, 0x200, 0xb, 0x34325258, 0x0, [0x0, 0x0, 0x0, r9], [0x801, 0x9, 0x8040, 0x9d7b], [0x6, 0xfffffffe, 0xd10c62a], [0x7fffffffffffffff, 0x400, 0x3ffffffffff, 0x40]}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="340000001800f3d20000000000000000020000000000000700000000100016800c00038008000100", @ANYRES32, @ANYBLOB="0600060001000000"], 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}}, 0x20000044) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002d40)={'vlan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@delchain={0x34, 0x2e, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r11 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_int(r11, 0x0, 0x5, &(0x7f00000002c0)=0x7, 0x4) r12 = socket$inet(0x2, 0x3, 0x6) r13 = dup3(r11, r12, 0x0) setsockopt$inet_int(r13, 0x0, 0x5, &(0x7f0000000300)=0x7, 0x4) r14 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) write(r14, &(0x7f0000000280)='1', 0x1) r15 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f00000017c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f0000000700)=ANY=[@ANYBLOB="80f332aa1600040029bd7000fbdbdf2580000004fd0300010002000008001900", @ANYRES16=0x0, @ANYBLOB="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"], 0x1080}, 0x1, 0x0, 0x0, 0x44800}, 0x20008800) setsockopt$sock_int(r15, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:49932' (ED25519) to the list of known hosts. [ 39.805505][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 39.805519][ T43] audit: type=1400 audit(1793578624.837:138): avc: denied { name_bind } for pid=5766 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.840156][ T43] audit: type=1400 audit(1793578624.867:139): avc: denied { execute } for pid=5767 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.840794][ T43] audit: type=1400 audit(1793578624.867:140): avc: denied { execute_no_trans } for pid=5767 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.201284][ T43] audit: type=1400 audit(1793578627.227:141): avc: denied { mounton } for pid=5767 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.209875][ T43] audit: type=1400 audit(1793578627.237:142): avc: denied { mount } for pid=5767 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.212845][ T5767] cgroup: Unknown subsys name 'net' [ 42.214202][ T43] audit: type=1400 audit(1793578627.247:143): avc: denied { unmount } for pid=5767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.354725][ T5767] cgroup: Unknown subsys name 'cpuset' [ 42.359653][ T5767] cgroup: Unknown subsys name 'rlimit' [ 42.518438][ T43] audit: type=1400 audit(1793578627.547:144): avc: denied { setattr } for pid=5767 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.518987][ T43] audit: type=1400 audit(1793578627.547:145): avc: denied { create } for pid=5767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.519423][ T43] audit: type=1400 audit(1793578627.547:146): avc: denied { write } for pid=5767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.519845][ T43] audit: type=1400 audit(1793578627.547:147): avc: denied { read } for pid=5767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.578882][ T5773] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.301641][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.888412][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 46.888429][ T43] audit: type=1400 audit(1793578631.917:154): avc: denied { execmem } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.042253][ T43] audit: type=1400 audit(1793578632.077:155): avc: denied { create } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.042287][ T43] audit: type=1400 audit(1793578632.077:156): avc: denied { create } for pid=5780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.042674][ T43] audit: type=1400 audit(1793578632.077:158): avc: denied { read write } for pid=5780 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.042703][ T43] audit: type=1400 audit(1793578632.077:157): avc: denied { read write } for pid=5779 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.043362][ T43] audit: type=1400 audit(1793578632.077:159): avc: denied { open } for pid=5779 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.078859][ T43] audit: type=1400 audit(1793578632.107:160): avc: denied { ioctl } for pid=5779 comm="syz-executor" path="socket:[1606]" dev="sockfs" ino=1606 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.108892][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.110180][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.110529][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.111080][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.111395][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.115087][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.115151][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.116733][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.117180][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.117330][ T43] audit: type=1400 audit(1793578632.147:161): avc: denied { read } for pid=5779 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.117872][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.118016][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.118728][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.119310][ T43] audit: type=1400 audit(1793578632.147:162): avc: denied { open } for pid=5779 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.122464][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.123508][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.123830][ T43] audit: type=1400 audit(1793578632.157:163): avc: denied { mounton } for pid=5779 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.124379][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.124486][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.125578][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.130553][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.131377][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.131382][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.325850][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.326058][ T5779] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.326455][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.329233][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.330293][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.390475][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.436816][ T5782] infiniband rxe0: set active [ 47.439492][ T5782] infiniband rxe0: added rxe_eth0 [ 47.446910][ T5782] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.446931][ T5782] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.446954][ T5782] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.458779][ T5782] RDS/IB: rxe0: added [ 47.458998][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.459411][ T5782] smc: adding ib device rxe0 with port count 1 [ 47.459464][ T5782] smc: ib device rxe0 port 1 has no pnetid [ 47.459985][ T59] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.462350][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.567954][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.671158][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.693305][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.693380][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.693533][ T5779] bridge_slave_0: entered allmulticast mode [ 47.694284][ T5779] bridge_slave_0: entered promiscuous mode [ 47.708952][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.708996][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.709207][ T5780] bridge_slave_0: entered allmulticast mode [ 47.710567][ T5780] bridge_slave_0: entered promiscuous mode [ 47.728758][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.728803][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.728867][ T5779] bridge_slave_1: entered allmulticast mode [ 47.729634][ T5779] bridge_slave_1: entered promiscuous mode [ 47.732281][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.732343][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.732436][ T5780] bridge_slave_1: entered allmulticast mode [ 47.733656][ T5780] bridge_slave_1: entered promiscuous mode [ 47.751631][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.751678][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.751742][ T5781] bridge_slave_0: entered allmulticast mode [ 47.753215][ T5781] bridge_slave_0: entered promiscuous mode [ 47.772465][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.772546][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.772641][ T5781] bridge_slave_1: entered allmulticast mode [ 47.774045][ T5781] bridge_slave_1: entered promiscuous mode [ 47.784417][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.785545][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.786680][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.797457][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.819070][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.834388][ T5779] team0: Port device team_slave_0 added [ 47.835406][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.836580][ T5779] team0: Port device team_slave_1 added [ 47.836628][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.846425][ T5780] team0: Port device team_slave_0 added [ 47.867068][ T5780] team0: Port device team_slave_1 added [ 47.874792][ T5781] team0: Port device team_slave_0 added [ 47.878915][ T5781] team0: Port device team_slave_1 added [ 47.879340][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.879349][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.879363][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.880495][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.880503][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.880517][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.905605][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.905616][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.905630][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.906537][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.906545][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.906558][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.907443][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.907451][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.907465][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.913969][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.913978][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.913993][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.937855][ T5779] hsr_slave_0: entered promiscuous mode [ 47.938472][ T5779] hsr_slave_1: entered promiscuous mode [ 48.006747][ T5781] hsr_slave_0: entered promiscuous mode [ 48.007521][ T5781] hsr_slave_1: entered promiscuous mode [ 48.007934][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 48.007947][ T5781] Cannot create hsr debugfs directory [ 48.031117][ T5780] hsr_slave_0: entered promiscuous mode [ 48.032383][ T5780] hsr_slave_1: entered promiscuous mode [ 48.032883][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 48.032893][ T5780] Cannot create hsr debugfs directory [ 48.262275][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.269007][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.269612][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.273238][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.276029][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.278650][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.291491][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.294904][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.351526][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.351593][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.351649][ T5782] bridge_slave_0: entered allmulticast mode [ 48.352572][ T5782] bridge_slave_0: entered promiscuous mode [ 48.360108][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.360150][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.360209][ T5782] bridge_slave_1: entered allmulticast mode [ 48.361622][ T5782] bridge_slave_1: entered promiscuous mode [ 48.369949][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.372823][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.373450][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.375957][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.390772][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.393889][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.394634][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.399537][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.401523][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.401669][ T5779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.402211][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.402311][ T5779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.410668][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.425439][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.448803][ T5782] team0: Port device team_slave_0 added [ 48.451191][ T5782] team0: Port device team_slave_1 added [ 48.478209][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.478226][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.478246][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.479873][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.479886][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.479907][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.480524][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.480571][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.480677][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.480722][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.502656][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.514252][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.515021][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.519175][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.519844][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.525255][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.526537][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.530125][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.562172][ T181] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.562804][ T181] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.564036][ T181] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.564283][ T181] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.590869][ T5782] hsr_slave_0: entered promiscuous mode [ 48.591352][ T5782] hsr_slave_1: entered promiscuous mode [ 48.591653][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 48.591663][ T5782] Cannot create hsr debugfs directory [ 48.654539][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.715422][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.718328][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.735049][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.735100][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.753786][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.753885][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.761519][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.777846][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.779690][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.779735][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.782553][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.787870][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.788550][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.796094][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.803205][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.803293][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.808124][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.810060][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.810511][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.813610][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.840169][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.857411][ T4843] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.857459][ T4843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.880895][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.880942][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.957436][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.966226][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.971718][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.971805][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.982100][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.982171][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.129552][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.148986][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.155614][ T5779] veth0_vlan: entered promiscuous mode [ 49.166451][ T5779] veth1_vlan: entered promiscuous mode [ 49.169892][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.192529][ T5791] Bluetooth: hci0: command tx timeout [ 49.192533][ T67] Bluetooth: hci1: command tx timeout [ 49.193298][ T5793] Bluetooth: hci3: command tx timeout [ 49.204267][ T5793] Bluetooth: hci2: command tx timeout [ 49.218351][ T5781] veth0_vlan: entered promiscuous mode [ 49.225933][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.233128][ T5779] veth0_macvtap: entered promiscuous mode [ 49.234900][ T5780] veth0_vlan: entered promiscuous mode [ 49.238956][ T5781] veth1_vlan: entered promiscuous mode [ 49.239745][ T5779] veth1_macvtap: entered promiscuous mode [ 49.244375][ T5780] veth1_vlan: entered promiscuous mode [ 49.260920][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.267408][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.270910][ T5782] veth0_vlan: entered promiscuous mode [ 49.284390][ T5782] veth1_vlan: entered promiscuous mode [ 49.296305][ T5781] veth0_macvtap: entered promiscuous mode [ 49.304293][ T5781] veth1_macvtap: entered promiscuous mode [ 49.308642][ T5780] veth0_macvtap: entered promiscuous mode [ 49.326730][ T5780] veth1_macvtap: entered promiscuous mode [ 49.340202][ T5782] veth0_macvtap: entered promiscuous mode [ 49.344170][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.344220][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.348710][ T5782] veth1_macvtap: entered promiscuous mode [ 49.354467][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.365850][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.365867][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.366276][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.367650][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.378518][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.381621][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.391714][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.392287][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.434050][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.434060][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.449997][ T5779] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.481116][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.481131][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.484869][ T4843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.484880][ T4843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.506319][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.506333][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.523233][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.523245][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.550286][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.550299][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.575818][ T5939] bridge0: port 3(syz_tun) entered blocking state [ 49.576002][ T5939] bridge0: port 3(syz_tun) entered disabled state [ 49.576067][ T5939] syz_tun: entered allmulticast mode [ 49.576790][ T5939] syz_tun: entered promiscuous mode [ 49.577099][ T5939] bridge0: port 3(syz_tun) entered blocking state [ 49.577143][ T5939] bridge0: port 3(syz_tun) entered forwarding state [ 49.582197][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583014][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583037][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583161][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583180][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583197][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583215][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583232][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583251][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583270][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583287][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583304][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583322][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583339][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583357][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.731573][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.773803][ T5955] netlink: 'syz.1.8': attribute type 9 has an invalid length. [ 49.871966][ T5650] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.902576][ T5969] bridge0: port 3(veth0) entered blocking state [ 49.902766][ T5969] bridge0: port 3(veth0) entered disabled state [ 49.903104][ T5969] veth0: entered allmulticast mode [ 49.904290][ T5969] veth0: entered promiscuous mode [ 49.904550][ T5969] bridge0: port 3(veth0) entered blocking state [ 49.904618][ T5969] bridge0: port 3(veth0) entered forwarding state [ 49.999342][ T5961] FAULT_INJECTION: forcing a failure. [ 49.999342][ T5961] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 49.999363][ T5961] CPU: 3 UID: 0 PID: 5961 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(full) [ 49.999377][ T5961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.999384][ T5961] Call Trace: [ 49.999410][ T5961] [ 49.999414][ T5961] dump_stack_lvl+0x100/0x190 [ 49.999438][ T5961] should_fail_ex.cold+0x5/0xa [ 49.999456][ T5961] should_fail_alloc_page+0xeb/0x140 [ 49.999471][ T5961] prepare_alloc_pages+0x1f0/0x5b0 [ 49.999486][ T5961] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 49.999507][ T5961] ? rcu_is_watching+0x13/0xc0 [ 49.999521][ T5961] ? __lock_acquire+0x5c0/0x1f40 [ 49.999539][ T5961] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 49.999559][ T5961] ? lock_acquire+0x1d1/0x380 [ 49.999575][ T5961] ? do_raw_spin_lock+0x128/0x260 [ 49.999587][ T5961] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 49.999598][ T5961] ? find_held_lock+0x2b/0x80 [ 49.999614][ T5961] ? __lock_acquire+0x5c0/0x1f40 [ 49.999630][ T5961] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 49.999650][ T5961] ? policy_nodemask+0xed/0x5e0 [ 49.999664][ T5961] alloc_pages_mpol+0x201/0x560 [ 49.999678][ T5961] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 49.999696][ T5961] folio_alloc_mpol_noprof+0x36/0x260 [ 49.999713][ T5961] shmem_alloc_folio+0x135/0x160 [ 49.999730][ T5961] shmem_alloc_and_add_folio+0x371/0xd40 [ 49.999757][ T5961] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 49.999777][ T5961] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 49.999792][ T5961] shmem_get_folio_gfp+0x758/0x1af0 [ 49.999807][ T5961] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 49.999821][ T5961] ? filemap_map_pages+0x1155/0x2020 [ 49.999841][ T5961] shmem_fault+0x1fb/0xa30 [ 49.999853][ T5961] ? __pfx_shmem_fault+0x10/0x10 [ 49.999864][ T5961] ? __pte_offset_map+0x9a/0x470 [ 49.999882][ T5961] ? __pfx_filemap_map_pages+0x10/0x10 [ 49.999901][ T5961] ? find_held_lock+0x2b/0x80 [ 49.999914][ T5961] ? __pfx_filemap_map_pages+0x10/0x10 [ 49.999930][ T5961] __do_fault+0x10b/0x440 [ 49.999946][ T5961] do_fault+0xb3f/0x1890 [ 49.999965][ T5961] ? __pfx_do_fault+0x10/0x10 [ 49.999982][ T5961] ? rcu_read_unlock+0x2d/0xb0 [ 49.999995][ T5961] ? rcu_read_unlock+0x2d/0xb0 [ 50.000010][ T5961] __handle_mm_fault+0x150b/0x2f60 [ 50.000027][ T5961] ? __pfx___handle_mm_fault+0x10/0x10 [ 50.000039][ T5961] ? pte_offset_map_lock+0x174/0x320 [ 50.000056][ T5961] ? find_held_lock+0x2b/0x80 [ 50.000068][ T5961] ? find_held_lock+0x2b/0x80 [ 50.000080][ T5961] ? follow_page_pte+0x536/0x1050 [ 50.000104][ T5961] handle_mm_fault+0x363/0xa20 [ 50.000119][ T5961] __get_user_pages+0x8a9/0x2c20 [ 50.000139][ T5961] ? __pfx_mt_find+0x10/0x10 [ 50.000154][ T5961] ? __pfx___get_user_pages+0x10/0x10 [ 50.000175][ T5961] populate_vma_page_range+0x2bb/0x450 [ 50.000194][ T5961] ? __pfx_populate_vma_page_range+0x10/0x10 [ 50.000210][ T5961] ? __pfx_find_vma_intersection+0x10/0x10 [ 50.000231][ T5961] __mm_populate+0x107/0x3a0 [ 50.000248][ T5961] ? __pfx___mm_populate+0x10/0x10 [ 50.000266][ T5961] ? up_write+0x2dc/0x5b0 [ 50.000285][ T5961] vm_mmap_pgoff+0x44a/0x490 [ 50.000301][ T5961] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 50.000315][ T5961] ? lock_acquire+0x1d1/0x380 [ 50.000332][ T5961] ? __mutex_unlock_slowpath+0x35d/0x930 [ 50.000348][ T5961] ksys_mmap_pgoff+0xe4/0x610 [ 50.000367][ T5961] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 50.000383][ T5961] ? fput+0x7c/0x100 [ 50.000397][ T5961] ? ksys_write+0x1ac/0x250 [ 50.000408][ T5961] ? __pfx_ksys_write+0x10/0x10 [ 50.000420][ T5961] __x64_sys_mmap+0x125/0x190 [ 50.000438][ T5961] do_syscall_64+0x123/0x790 [ 50.000451][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.000463][ T5961] RIP: 0033:0x7f75dbd9f559 [ 50.000473][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.000483][ T5961] RSP: 002b:00007f75dcba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 50.000495][ T5961] RAX: ffffffffffffffda RBX: 00007f75dc025fa0 RCX: 00007f75dbd9f559 [ 50.000502][ T5961] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 50.000509][ T5961] RBP: 00007f75dcba9090 R08: ffffffffffffffff R09: 0000000000000000 [ 50.000516][ T5961] R10: 0000000004008031 R11: 0000000000000246 R12: 0000000000000002 [ 50.000522][ T5961] R13: 00007f75dc026038 R14: 00007f75dc025fa0 R15: 00007ffdbf828b48 [ 50.000537][ T5961] [ 50.024585][ T5650] usb 5-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 50.026369][ T5650] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 50.026384][ T5650] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 50.026403][ T5650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.037892][ T5650] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 50.045446][ T5650] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 50.162087][ T5875] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.322893][ T5875] usb 7-1: New USB device found: idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 50.326395][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.326411][ T5875] usb 7-1: Product: syz [ 50.326418][ T5875] usb 7-1: Manufacturer: syz [ 50.326426][ T5875] usb 7-1: SerialNumber: syz [ 50.328157][ T5875] usb 7-1: config 0 descriptor?? [ 50.393287][ T5939] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 50.393624][ T5939] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 50.394370][ T5939] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 50.551058][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 50.565844][ T10] usb 7-1: USB disconnect, device number 2 [ 50.594020][ T5939] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 50.596446][ T5569] usb 5-1: USB disconnect, device number 2 [ 50.609712][ T5569] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 50.610527][ T5569] spcp8x5 5-1:1.0: device disconnected [ 50.713331][ T5994] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 50.714586][ T5994] program syz.1.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.840178][ T5996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 50.867559][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 50.893374][ T6000] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 50.905324][ T6000] capability: warning: `syz.1.20' uses 32-bit capabilities (legacy support in use) [ 50.976609][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 51.029649][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27'. [ 51.050088][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.050946][ T6010] bridge_slave_1: left allmulticast mode [ 51.050960][ T6010] bridge_slave_1: left promiscuous mode [ 51.051328][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.094522][ T6015] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 51.095280][ T6015] program syz.3.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.198551][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 51.272002][ T5793] Bluetooth: hci3: command tx timeout [ 51.272035][ T5793] Bluetooth: hci0: command tx timeout [ 51.284294][ T5793] Bluetooth: hci1: command tx timeout [ 51.284336][ T5793] Bluetooth: hci2: command tx timeout [ 51.551984][ T5650] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.724259][ T5650] usb 5-1: unable to get BOS descriptor or descriptor too short [ 51.724301][ T5650] usb 5-1: New USB device found: idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 51.725588][ T5650] usb 5-1: config 4 has an invalid interface number: 13 but max is 0 [ 51.725610][ T5650] usb 5-1: config 4 has no interface number 0 [ 51.725644][ T5650] usb 5-1: config 4 interface 13 has no altsetting 0 [ 51.727842][ T5650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.727862][ T5650] usb 5-1: Product: syz [ 51.727875][ T5650] usb 5-1: Manufacturer: syz [ 51.727889][ T5650] usb 5-1: SerialNumber: syz [ 52.139279][ T43] kauditd_printk_skb: 89 callbacks suppressed [ 52.139294][ T43] audit: type=1400 audit(1793578637.167:253): avc: denied { mount } for pid=6031 comm="syz.0.35" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 52.145052][ T5650] ums-realtek 5-1:4.13: USB Mass Storage device detected [ 52.188065][ T6039] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 52.213127][ T43] audit: type=1400 audit(1793578637.247:254): avc: denied { read write } for pid=6040 comm="syz.2.37" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.213175][ T43] audit: type=1400 audit(1793578637.247:255): avc: denied { open } for pid=6040 comm="syz.2.37" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.218961][ T5650] usb 5-1: USB disconnect, device number 3 [ 52.342266][ T43] audit: type=1400 audit(1793578637.377:256): avc: denied { unmount } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 52.365048][ T6044] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 52.365732][ T6044] program syz.2.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.373215][ T43] audit: type=1400 audit(1793578637.407:257): avc: denied { write } for pid=6043 comm="syz.2.38" name="/" dev="9p" ino=77332593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.678254][ T6053] FAULT_INJECTION: forcing a failure. [ 52.678254][ T6053] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.678275][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(full) [ 52.678288][ T6053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.678296][ T6053] Call Trace: [ 52.678311][ T6053] [ 52.678316][ T6053] dump_stack_lvl+0x100/0x190 [ 52.678365][ T6053] should_fail_ex.cold+0x5/0xa [ 52.678383][ T6053] strncpy_from_user+0x3b/0x2d0 [ 52.678403][ T6053] do_getname+0x78/0x390 [ 52.678422][ T6053] do_sys_openat2+0xc3/0x1d0 [ 52.678438][ T6053] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.678454][ T6053] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 52.678488][ T6053] ? __fget_files+0x21f/0x3d0 [ 52.678505][ T6053] __x64_sys_openat+0x12d/0x210 [ 52.678520][ T6053] ? fput+0x7c/0x100 [ 52.678534][ T6053] ? __pfx___x64_sys_openat+0x10/0x10 [ 52.678549][ T6053] ? ksys_write+0x1ac/0x250 [ 52.678564][ T6053] do_syscall_64+0x123/0x790 [ 52.678578][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.678590][ T6053] RIP: 0033:0x7fb51699f559 [ 52.678600][ T6053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.678611][ T6053] RSP: 002b:00007fb517785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.678633][ T6053] RAX: ffffffffffffffda RBX: 00007fb516c25fa0 RCX: 00007fb51699f559 [ 52.678640][ T6053] RDX: 0000000000202000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 52.678648][ T6053] RBP: 00007fb517785090 R08: 0000000000000000 R09: 0000000000000000 [ 52.678654][ T6053] R10: 000000000000013b R11: 0000000000000246 R12: 0000000000000001 [ 52.678661][ T6053] R13: 00007fb516c26038 R14: 00007fb516c25fa0 R15: 00007ffc7ab2acf8 [ 52.678676][ T6053] [ 52.733639][ T43] audit: type=1400 audit(1793578637.767:258): avc: denied { create } for pid=6055 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.734827][ T43] audit: type=1400 audit(1793578637.767:259): avc: denied { bind } for pid=6055 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.744468][ T43] audit: type=1400 audit(1793578637.777:260): avc: denied { read write } for pid=6055 comm="syz.2.44" name="video6" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 52.744497][ T43] audit: type=1400 audit(1793578637.777:261): avc: denied { open } for pid=6055 comm="syz.2.44" path="/dev/video6" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 52.744703][ T43] audit: type=1400 audit(1793578637.777:262): avc: denied { ioctl } for pid=6055 comm="syz.2.44" path="/dev/video6" dev="devtmpfs" ino=960 ioctlcmd=0xc0145608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 52.747203][ T6056] FAULT_INJECTION: forcing a failure. [ 52.747203][ T6056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.747222][ T6056] CPU: 3 UID: 0 PID: 6056 Comm: syz.2.44 Not tainted syzkaller #0 PREEMPT(full) [ 52.747236][ T6056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.747243][ T6056] Call Trace: [ 52.747247][ T6056] [ 52.747252][ T6056] dump_stack_lvl+0x100/0x190 [ 52.747275][ T6056] should_fail_ex.cold+0x5/0xa [ 52.747293][ T6056] should_fail_alloc_page+0xeb/0x140 [ 52.747308][ T6056] prepare_alloc_pages+0x1f0/0x5b0 [ 52.747322][ T6056] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 52.747339][ T6056] ? __pfx_get_page_from_freelist+0x10/0x10 [ 52.747356][ T6056] ? rcu_is_watching+0x13/0xc0 [ 52.747373][ T6056] ? trace_mm_page_alloc+0x164/0x1c0 [ 52.747385][ T6056] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 52.747403][ T6056] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 52.747423][ T6056] ? stack_trace_save+0x8e/0xc0 [ 52.747438][ T6056] ? __pfx_stack_trace_save+0x10/0x10 [ 52.747454][ T6056] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 52.747474][ T6056] ? __kasan_slab_alloc+0x89/0x90 [ 52.747485][ T6056] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 52.747503][ T6056] ? alloc_vmap_area+0x643/0x2bc0 [ 52.747519][ T6056] ? __get_vm_area_node+0x1ed/0x350 [ 52.747529][ T6056] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 52.747540][ T6056] ? vmalloc_user_noprof+0x9e/0xe0 [ 52.747551][ T6056] ? vb2_vmalloc_alloc+0x135/0x410 [ 52.747572][ T6056] ? __vb2_queue_alloc+0x8d5/0x1160 [ 52.747588][ T6056] ? vb2_core_reqbufs+0x899/0xf30 [ 52.747605][ T6056] ? vb2_ioctl_reqbufs+0x291/0x450 [ 52.747620][ T6056] ? v4l_reqbufs+0x175/0x1d0 [ 52.747631][ T6056] ? __video_do_ioctl+0xb2a/0xdf0 [ 52.747644][ T6056] ? video_usercopy+0x47a/0x1730 [ 52.747656][ T6056] ? v4l2_ioctl+0x1bd/0x250 [ 52.747674][ T6056] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 52.747694][ T6056] ? policy_nodemask+0xed/0x5e0 [ 52.747709][ T6056] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 52.747733][ T6056] __kasan_populate_vmalloc+0xf0/0x210 [ 52.747763][ T6056] alloc_vmap_area+0x963/0x2bc0 [ 52.747797][ T6056] ? kasan_save_track+0x14/0x30 [ 52.747814][ T6056] ? __kasan_kmalloc+0xaa/0xb0 [ 52.747830][ T6056] ? __pfx_alloc_vmap_area+0x10/0x10 [ 52.747864][ T6056] ? vb2_vmalloc_alloc+0xf9/0x410 [ 52.747881][ T6056] ? __get_vm_area_node+0x124/0x350 [ 52.747902][ T6056] __get_vm_area_node+0x1ed/0x350 [ 52.747925][ T6056] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 52.747945][ T6056] ? vb2_vmalloc_alloc+0x135/0x410 [ 52.747971][ T6056] ? vb2_vmalloc_alloc+0x135/0x410 [ 52.747995][ T6056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 52.748020][ T6056] ? __kasan_kmalloc+0xaa/0xb0 [ 52.748039][ T6056] ? vb2_vmalloc_alloc+0x135/0x410 [ 52.748055][ T6056] vmalloc_user_noprof+0x9e/0xe0 [ 52.748071][ T6056] ? vb2_vmalloc_alloc+0x135/0x410 [ 52.748085][ T6056] vb2_vmalloc_alloc+0x135/0x410 [ 52.748103][ T6056] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 52.748122][ T6056] __vb2_queue_alloc+0x8d5/0x1160 [ 52.748149][ T6056] vb2_core_reqbufs+0x899/0xf30 [ 52.748170][ T6056] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 52.748187][ T6056] ? trace_contention_end+0x126/0x160 [ 52.748205][ T6056] ? __mutex_lock+0x267/0x1c10 [ 52.748218][ T6056] ? avc_has_extended_perms+0xae5/0x10b0 [ 52.748232][ T6056] ? avc_has_extended_perms+0x4a5/0x10b0 [ 52.748247][ T6056] vb2_ioctl_reqbufs+0x291/0x450 [ 52.748264][ T6056] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 52.748282][ T6056] ? check_fmt+0x230/0x900 [ 52.748294][ T6056] v4l_reqbufs+0x175/0x1d0 [ 52.748307][ T6056] __video_do_ioctl+0xb2a/0xdf0 [ 52.748323][ T6056] ? __might_fault+0xc5/0x140 [ 52.748336][ T6056] ? __pfx___video_do_ioctl+0x10/0x10 [ 52.748355][ T6056] video_usercopy+0x47a/0x1730 [ 52.748372][ T6056] ? __pfx___video_do_ioctl+0x10/0x10 [ 52.748387][ T6056] ? __pfx_video_usercopy+0x10/0x10 [ 52.748410][ T6056] v4l2_ioctl+0x1bd/0x250 [ 52.748425][ T6056] ? __pfx_v4l2_ioctl+0x10/0x10 [ 52.748440][ T6056] __x64_sys_ioctl+0x18e/0x210 [ 52.748460][ T6056] do_syscall_64+0x123/0x790 [ 52.748473][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.748485][ T6056] RIP: 0033:0x7f875dd9f559 [ 52.748496][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.748506][ T6056] RSP: 002b:00007f875ec63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.748518][ T6056] RAX: ffffffffffffffda RBX: 00007f875e025fa0 RCX: 00007f875dd9f559 [ 52.748525][ T6056] RDX: 0000200000000440 RSI: 00000000c0145608 RDI: 0000000000000008 [ 52.748532][ T6056] RBP: 00007f875de36b50 R08: 0000000000000000 R09: 0000000000000000 [ 52.748538][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.748545][ T6056] R13: 00007f875e026038 R14: 00007f875e025fa0 R15: 00007fffdd2cd778 [ 52.748559][ T6056] [ 52.748755][ T6056] syz.2.44: vmalloc error: size 921600, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 52.748841][ T6056] CPU: 3 UID: 0 PID: 6056 Comm: syz.2.44 Not tainted syzkaller #0 PREEMPT(full) [ 52.748855][ T6056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.748866][ T6056] Call Trace: [ 52.748870][ T6056] [ 52.748874][ T6056] dump_stack_lvl+0x100/0x190 [ 52.748896][ T6056] warn_alloc.cold+0x9e/0xb2 [ 52.748908][ T6056] ? __pfx_warn_alloc+0x10/0x10 [ 52.748923][ T6056] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.748936][ T6056] ? __get_vm_area_node+0x2f0/0x350 [ 52.748949][ T6056] ? __get_vm_area_node+0x22b/0x350 [ 52.748963][ T6056] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 52.748980][ T6056] ? vb2_vmalloc_alloc+0x135/0x410 [ 52.748995][ T6056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 52.749009][ T6056] ? __kasan_kmalloc+0xaa/0xb0 [ 52.749021][ T6056] ? vb2_vmalloc_alloc+0x135/0x410 [ 52.749032][ T6056] vmalloc_user_noprof+0x9e/0xe0 [ 52.749043][ T6056] ? vb2_vmalloc_alloc+0x135/0x410 [ 52.749055][ T6056] vb2_vmalloc_alloc+0x135/0x410 [ 52.749065][ T6056] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 52.749077][ T6056] __vb2_queue_alloc+0x8d5/0x1160 [ 52.749101][ T6056] vb2_core_reqbufs+0x899/0xf30 [ 52.749122][ T6056] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 52.749139][ T6056] ? trace_contention_end+0x126/0x160 [ 52.749157][ T6056] ? __mutex_lock+0x267/0x1c10 [ 52.749169][ T6056] ? avc_has_extended_perms+0xae5/0x10b0 [ 52.749182][ T6056] ? avc_has_extended_perms+0x4a5/0x10b0 [ 52.749198][ T6056] vb2_ioctl_reqbufs+0x291/0x450 [ 52.749215][ T6056] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 52.749233][ T6056] ? check_fmt+0x230/0x900 [ 52.749245][ T6056] v4l_reqbufs+0x175/0x1d0 [ 52.749258][ T6056] __video_do_ioctl+0xb2a/0xdf0 [ 52.749274][ T6056] ? __might_fault+0xc5/0x140 [ 52.749287][ T6056] ? __pfx___video_do_ioctl+0x10/0x10 [ 52.749306][ T6056] video_usercopy+0x47a/0x1730 [ 52.749321][ T6056] ? __pfx___video_do_ioctl+0x10/0x10 [ 52.749337][ T6056] ? __pfx_video_usercopy+0x10/0x10 [ 52.749361][ T6056] v4l2_ioctl+0x1bd/0x250 [ 52.749377][ T6056] ? __pfx_v4l2_ioctl+0x10/0x10 [ 52.749392][ T6056] __x64_sys_ioctl+0x18e/0x210 [ 52.749412][ T6056] do_syscall_64+0x123/0x790 [ 52.749425][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.749436][ T6056] RIP: 0033:0x7f875dd9f559 [ 52.749445][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.749456][ T6056] RSP: 002b:00007f875ec63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.749466][ T6056] RAX: ffffffffffffffda RBX: 00007f875e025fa0 RCX: 00007f875dd9f559 [ 52.749473][ T6056] RDX: 0000200000000440 RSI: 00000000c0145608 RDI: 0000000000000008 [ 52.749479][ T6056] RBP: 00007f875de36b50 R08: 0000000000000000 R09: 0000000000000000 [ 52.749486][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.749492][ T6056] R13: 00007f875e026038 R14: 00007f875e025fa0 R15: 00007fffdd2cd778 [ 52.749506][ T6056] [ 52.749510][ T6056] Mem-Info: [ 52.749515][ T6056] active_anon:8618 inactive_anon:0 isolated_anon:0 [ 52.749515][ T6056] active_file:0 inactive_file:55083 isolated_file:0 [ 52.749515][ T6056] unevictable:1000 dirty:2014 writeback:0 [ 52.749515][ T6056] slab_reclaimable:12137 slab_unreclaimable:67788 [ 52.749515][ T6056] mapped:24730 shmem:1557 pagetables:1159 [ 52.749515][ T6056] sec_pagetables:297 bounce:0 [ 52.749515][ T6056] kernel_misc_reclaimable:0 [ 52.749515][ T6056] free:449211 free_pcp:17005 free_cma:0 [ 52.749544][ T6056] Node 0 active_anon:34472kB inactive_anon:0kB active_file:0kB inactive_file:220132kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98920kB dirty:8008kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13024kB pagetables:4444kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 52.749573][ T6056] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:48kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 52.749602][ T6056] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 52.749633][ T6056] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 52.749653][ T6056] Node 0 DMA32 free:142920kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34472kB inactive_anon:0kB active_file:0kB inactive_file:220132kB unevictable:2000kB writepending:8008kB zspages:0kB present:2080628kB managed:1230740kB mlocked:0kB bounce:0kB free_pcp:64740kB local_pcp:14472kB free_cma:0kB [ 52.749708][ T6056] lowmem_reserve[]: 0 0 0 0 0 [ 52.749727][ T6056] Node 1 Normal free:1638564kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB writepending:48kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3280kB local_pcp:2256kB free_cma:0kB [ 52.749759][ T6056] lowmem_reserve[]: 0 0 0 0 0 [ 52.749777][ T6056] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 52.749839][ T6056] Node 0 DMA32: 0*4kB 1*8kB (M) 0*16kB 2*32kB (UE) 2*64kB (UM) 3*128kB (UME) 3*256kB (UME) 0*512kB 2*1024kB (UM) 2*2048kB (ME) 33*4096kB (UM) = 142664kB [ 52.749919][ T6056] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 5*256kB (U) 4*512kB (UM) 0*1024kB 2*2048kB (UM) 398*4096kB (M) = 1638560kB [ 52.749998][ T6056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 52.750007][ T6056] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 52.750016][ T6056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 52.750024][ T6056] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 52.750032][ T6056] 56636 total pagecache pages [ 52.750037][ T6056] 0 pages in swap cache [ 52.750041][ T6056] Free swap = 124996kB [ 52.750045][ T6056] Total swap = 124996kB [ 52.750049][ T6056] 1048443 pages RAM [ 52.750052][ T6056] 0 pages HighMem/MovableOnly [ 52.750057][ T6056] 291448 pages reserved [ 52.750063][ T6056] 0 pages cma reserved [ 52.887306][ T6059] 9p: Unknown access argument ‘: -22 [ 53.006954][ T6069] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 53.007710][ T6069] program syz.3.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.034688][ T6072] ip_tables: iptables: counters copy to user failed while replacing table [ 53.046913][ T6072] syzkaller0: entered promiscuous mode [ 53.046933][ T6072] syzkaller0: entered allmulticast mode [ 53.132110][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 53.257005][ T6081] FAULT_INJECTION: forcing a failure. [ 53.257005][ T6081] name failslab, interval 1, probability 0, space 0, times 0 [ 53.257038][ T6081] CPU: 3 UID: 0 PID: 6081 Comm: syz.2.53 Tainted: G L syzkaller #0 PREEMPT(full) [ 53.257066][ T6081] Tainted: [L]=SOFTLOCKUP [ 53.257073][ T6081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.257084][ T6081] Call Trace: [ 53.257103][ T6081] [ 53.257111][ T6081] dump_stack_lvl+0x100/0x190 [ 53.257183][ T6081] should_fail_ex.cold+0x5/0xa [ 53.257231][ T6081] should_failslab+0xc2/0x120 [ 53.257254][ T6081] __kmalloc_noprof+0xfc/0x840 [ 53.257285][ T6081] ? lsm_blob_alloc+0x68/0x90 [ 53.257314][ T6081] lsm_blob_alloc+0x68/0x90 [ 53.257335][ T6081] security_key_alloc+0x34/0x310 [ 53.257364][ T6081] key_alloc+0x876/0x1310 [ 53.257402][ T6081] ? __pfx_key_alloc+0x10/0x10 [ 53.257431][ T6081] ? lsm_blob_alloc+0x68/0x90 [ 53.257456][ T6081] keyring_alloc+0x44/0xc0 [ 53.257477][ T6081] install_thread_keyring_to_cred+0xc1/0x140 [ 53.257506][ T6081] keyctl_set_reqkey_keyring+0xce/0x1c0 [ 53.257533][ T6081] __do_sys_keyctl+0x316/0x5a0 [ 53.257560][ T6081] do_syscall_64+0x123/0x790 [ 53.257613][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.257636][ T6081] RIP: 0033:0x7f875dd9f559 [ 53.257653][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.257706][ T6081] RSP: 002b:00007f875ec63028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 53.257739][ T6081] RAX: ffffffffffffffda RBX: 00007f875e025fa0 RCX: 00007f875dd9f559 [ 53.257754][ T6081] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 53.257766][ T6081] RBP: 00007f875de36b50 R08: 0000000000000000 R09: 0000000000000000 [ 53.257779][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.257793][ T6081] R13: 00007f875e026038 R14: 00007f875e025fa0 R15: 00007fffdd2cd778 [ 53.257822][ T6081] [ 53.282066][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 53.283048][ T24] usb 5-1: New USB device found: idVendor=d402, idProduct=0300, bcdDevice=b.01 [ 53.283069][ T24] usb 5-1: too many configurations: 11, using maximum allowed: 8 [ 53.285898][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 53.285916][ T24] usb 5-1: can't read configurations, error -61 [ 53.361985][ T67] Bluetooth: hci2: command tx timeout [ 53.362015][ T67] Bluetooth: hci3: command tx timeout [ 53.362034][ T67] Bluetooth: hci1: command tx timeout [ 53.362064][ T67] Bluetooth: hci0: command tx timeout [ 53.432182][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 53.581901][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 53.582548][ T24] usb 5-1: New USB device found: idVendor=d402, idProduct=0300, bcdDevice=b.01 [ 53.582604][ T24] usb 5-1: too many configurations: 11, using maximum allowed: 8 [ 53.583784][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 53.583801][ T24] usb 5-1: can't read configurations, error -61 [ 53.585005][ T24] usb usb5-port1: attempt power cycle [ 53.921973][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.942629][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 53.943207][ T24] usb 5-1: New USB device found: idVendor=d402, idProduct=0300, bcdDevice=b.01 [ 53.943237][ T24] usb 5-1: too many configurations: 11, using maximum allowed: 8 [ 53.944512][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 53.944536][ T24] usb 5-1: can't read configurations, error -61 [ 54.072733][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 54.075235][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 54.076094][ T6092] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20002 [ 54.078023][ T6091] ifb0: entered allmulticast mode [ 54.103663][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 54.104117][ T24] usb 5-1: New USB device found: idVendor=d402, idProduct=0300, bcdDevice=b.01 [ 54.104137][ T24] usb 5-1: too many configurations: 11, using maximum allowed: 8 [ 54.105229][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 54.105245][ T24] usb 5-1: can't read configurations, error -61 [ 54.105459][ T24] usb usb5-port1: unable to enumerate USB device [ 54.117390][ T6095] ======================================================= [ 54.117390][ T6095] WARNING: The mand mount option has been deprecated and [ 54.117390][ T6095] and is ignored by this kernel. Remove the mand [ 54.117390][ T6095] option from the mount to silence this warning. [ 54.117390][ T6095] ======================================================= [ 54.227733][ T6101] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 55.008284][ T29] bridge0: entered promiscuous mode [ 55.061286][ T6100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 55.061372][ T6100] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.063865][ T34] cfg80211: failed to load regulatory.db [ 55.069753][ T6100] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 55.074750][ T6100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 55.074787][ T6100] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.079024][ T6100] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 55.083492][ T6100] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 55.083527][ T6100] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.088953][ T6100] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 55.094558][ T6100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.094614][ T6100] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.098959][ T6100] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 55.137691][ T6128] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 55.156805][ T6131] grow_buffers: requested out-of-range block 1229764173265895679 for device sda1 [ 55.156821][ T6131] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 55.210397][ T6136] overlayfs: missing 'lowerdir' [ 55.241681][ T6141] netlink: 7164 bytes leftover after parsing attributes in process `syz.1.76'. [ 55.241706][ T6141] netlink: 7164 bytes leftover after parsing attributes in process `syz.1.76'. [ 55.241720][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 55.333828][ T6145] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.527779][ T6156] Bluetooth: MGMT ver 1.23 [ 55.665715][ T6164] overlayfs: missing 'lowerdir' [ 55.705344][ T6169] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 55.707139][ T6170] CUSE: unknown device info "" [ 55.707147][ T6170] CUSE: unknown device info "" [ 55.707152][ T6170] CUSE: unknown device info "" [ 55.707156][ T6170] CUSE: unknown device info "" [ 55.707160][ T6170] CUSE: zero length info key specified [ 55.709726][ T6169] FAULT_INJECTION: forcing a failure. [ 55.709726][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 55.709753][ T6169] CPU: 3 UID: 0 PID: 6169 Comm: syz.2.86 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.709780][ T6169] Tainted: [L]=SOFTLOCKUP [ 55.709786][ T6169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.709797][ T6169] Call Trace: [ 55.709804][ T6169] [ 55.709812][ T6169] dump_stack_lvl+0x100/0x190 [ 55.709849][ T6169] should_fail_ex.cold+0x5/0xa [ 55.709878][ T6169] ? __pfx_cgroup_show_path+0x10/0x10 [ 55.709899][ T6169] should_failslab+0xc2/0x120 [ 55.709920][ T6169] ? __pfx_cgroup_show_path+0x10/0x10 [ 55.709938][ T6169] __kmalloc_cache_noprof+0x91/0x6d0 [ 55.709962][ T6169] ? kernfs_root+0x23/0x2a0 [ 55.709986][ T6169] ? cgroup_show_path+0xb2/0x730 [ 55.710008][ T6169] ? __pfx_cgroup_show_path+0x10/0x10 [ 55.710026][ T6169] cgroup_show_path+0xb2/0x730 [ 55.710048][ T6169] ? __pfx_cgroup_show_path+0x10/0x10 [ 55.710067][ T6169] kernfs_sop_show_path+0xe9/0x160 [ 55.710091][ T6169] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 55.710115][ T6169] show_path+0x9e/0x100 [ 55.710143][ T6169] show_mountinfo+0x1d8/0x820 [ 55.710170][ T6169] ? __pfx_show_mountinfo+0x10/0x10 [ 55.710203][ T6169] seq_read_iter+0xbce/0x1270 [ 55.710233][ T6169] ? __pfx_seq_read_iter+0x10/0x10 [ 55.710255][ T6169] vfs_read+0x82e/0xb40 [ 55.710284][ T6169] ? __pfx_vfs_read+0x10/0x10 [ 55.710299][ T6169] ? find_held_lock+0x2b/0x80 [ 55.710338][ T6169] ksys_read+0x12a/0x250 [ 55.710356][ T6169] ? __pfx_ksys_read+0x10/0x10 [ 55.710381][ T6169] do_syscall_64+0x123/0x790 [ 55.710404][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.710423][ T6169] RIP: 0033:0x7f875dd9f559 [ 55.710438][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.710456][ T6169] RSP: 002b:00007f875ec63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.710474][ T6169] RAX: ffffffffffffffda RBX: 00007f875e025fa0 RCX: 00007f875dd9f559 [ 55.710486][ T6169] RDX: 0000000000000c08 RSI: 0000200000000b80 RDI: 0000000000000003 [ 55.710498][ T6169] RBP: 00007f875ec63090 R08: 0000000000000000 R09: 0000000000000000 [ 55.710509][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.710520][ T6169] R13: 00007f875e026038 R14: 00007f875e025fa0 R15: 00007fffdd2cd778 [ 55.710547][ T6169] [ 55.910596][ T6185] overlayfs: missing 'lowerdir' [ 55.957924][ T6191] FAULT_INJECTION: forcing a failure. [ 55.957924][ T6191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.957956][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.0.96 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.957982][ T6191] Tainted: [L]=SOFTLOCKUP [ 55.957988][ T6191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.957998][ T6191] Call Trace: [ 55.958004][ T6191] [ 55.958010][ T6191] dump_stack_lvl+0x100/0x190 [ 55.958042][ T6191] should_fail_ex.cold+0x5/0xa [ 55.958068][ T6191] _copy_to_user+0x32/0xd0 [ 55.958090][ T6191] ucma_query_gid+0x352/0x550 [ 55.958130][ T6191] ? __pfx_ucma_query_gid+0x10/0x10 [ 55.958152][ T6191] ? trace_contention_end+0x126/0x160 [ 55.958201][ T6191] ? __pfx_ucma_get_ctx+0x10/0x10 [ 55.958236][ T6191] ucma_query+0x41f/0x500 [ 55.958263][ T6191] ? __might_fault+0xc5/0x140 [ 55.958285][ T6191] ? __pfx_ucma_query+0x10/0x10 [ 55.958317][ T6191] ? __pfx_ucma_query+0x10/0x10 [ 55.958344][ T6191] ucma_write+0x1f6/0x330 [ 55.958370][ T6191] ? __pfx_ucma_write+0x10/0x10 [ 55.958400][ T6191] ? bpf_lsm_file_permission+0x9/0x10 [ 55.958426][ T6191] ? security_file_permission+0x76/0x210 [ 55.958457][ T6191] ? rw_verify_area+0xce/0x6d0 [ 55.958487][ T6191] vfs_write+0x2aa/0x1050 [ 55.958505][ T6191] ? __pfx_ucma_write+0x10/0x10 [ 55.958529][ T6191] ? lock_acquire+0x1d1/0x380 [ 55.958553][ T6191] ? __fget_files+0x34/0x3d0 [ 55.958575][ T6191] ? __pfx_vfs_write+0x10/0x10 [ 55.958590][ T6191] ? find_held_lock+0x2b/0x80 [ 55.958610][ T6191] ? __fget_files+0x215/0x3d0 [ 55.958632][ T6191] ? __fget_files+0x215/0x3d0 [ 55.958658][ T6191] ? __fget_files+0x21f/0x3d0 [ 55.958688][ T6191] ksys_write+0x1f8/0x250 [ 55.958708][ T6191] ? __pfx_ksys_write+0x10/0x10 [ 55.958734][ T6191] do_syscall_64+0x123/0x790 [ 55.958758][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.958777][ T6191] RIP: 0033:0x7fb51699f559 [ 55.958793][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.958809][ T6191] RSP: 002b:00007fb517785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.958828][ T6191] RAX: ffffffffffffffda RBX: 00007fb516c25fa0 RCX: 00007fb51699f559 [ 55.958840][ T6191] RDX: 0000000000000018 RSI: 00002000000005c0 RDI: 0000000000000003 [ 55.958851][ T6191] RBP: 00007fb517785090 R08: 0000000000000000 R09: 0000000000000000 [ 55.958861][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.958871][ T6191] R13: 00007fb516c26038 R14: 00007fb516c25fa0 R15: 00007ffc7ab2acf8 [ 55.958896][ T6191] [ 55.993364][ T6197] netlink: 'syz.2.99': attribute type 9 has an invalid length. [ 56.100678][ T6207] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.143051][ T6211] ip_tables: iptables: counters copy to user failed while replacing table [ 56.143604][ T6211] x_tables: duplicate underflow at hook 3 [ 56.144649][ T6211] ip_tables: iptables: counters copy to user failed while replacing table [ 56.145330][ T6211] ip_tables: iptables: counters copy to user failed while replacing table [ 56.175659][ T6210] FAULT_INJECTION: forcing a failure. [ 56.175659][ T6210] name failslab, interval 1, probability 0, space 0, times 0 [ 56.175681][ T6210] CPU: 2 UID: 0 PID: 6210 Comm: syz.0.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.175697][ T6210] Tainted: [L]=SOFTLOCKUP [ 56.175701][ T6210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.175707][ T6210] Call Trace: [ 56.175712][ T6210] [ 56.175716][ T6210] dump_stack_lvl+0x100/0x190 [ 56.175743][ T6210] should_fail_ex.cold+0x5/0xa [ 56.175770][ T6210] should_failslab+0xc2/0x120 [ 56.175788][ T6210] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.175817][ T6210] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 56.175851][ T6210] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 56.175872][ T6210] ? kvm_msr_allowed+0x2d0/0x450 [ 56.175890][ T6210] kvm_mmu_load+0xe3/0x25b0 [ 56.175906][ T6210] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 56.175918][ T6210] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 56.175932][ T6210] ? __pfx_kvm_mmu_load+0x10/0x10 [ 56.175947][ T6210] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 56.175961][ T6210] ? kvm_check_and_inject_events+0x896/0x1050 [ 56.175980][ T6210] vcpu_run+0x4009/0x60d0 [ 56.176002][ T6210] ? __pfx_vcpu_run+0x10/0x10 [ 56.176017][ T6210] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 56.176029][ T6210] ? lock_acquire+0x1d1/0x380 [ 56.176045][ T6210] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 56.176063][ T6210] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 56.176075][ T6210] ? __local_bh_enable_ip+0xa5/0x120 [ 56.176091][ T6210] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 56.176107][ T6210] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 56.176128][ T6210] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 56.176144][ T6210] ? lock_acquire+0x1d1/0x380 [ 56.176160][ T6210] ? do_raw_write_lock+0x11e/0x260 [ 56.176170][ T6210] ? find_held_lock+0x2b/0x80 [ 56.176182][ T6210] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 56.176204][ T6210] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 56.176224][ T6210] kvm_vcpu_ioctl+0x735/0x17b0 [ 56.176243][ T6210] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.176261][ T6210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.176283][ T6210] ? do_vfs_ioctl+0x226/0x13e0 [ 56.176301][ T6210] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 56.176318][ T6210] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 56.176339][ T6210] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.176360][ T6210] ? __fget_files+0x34/0x3d0 [ 56.176379][ T6210] ? selinux_file_ioctl+0x1e0/0x290 [ 56.176396][ T6210] ? selinux_file_ioctl+0x1e7/0x290 [ 56.176414][ T6210] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.176433][ T6210] __x64_sys_ioctl+0x18e/0x210 [ 56.176452][ T6210] do_syscall_64+0x123/0x790 [ 56.176466][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.176479][ T6210] RIP: 0033:0x7fb51699f559 [ 56.176489][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.176499][ T6210] RSP: 002b:00007fb517785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.176511][ T6210] RAX: ffffffffffffffda RBX: 00007fb516c25fa0 RCX: 00007fb51699f559 [ 56.176518][ T6210] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 56.176525][ T6210] RBP: 00007fb517785090 R08: 0000000000000000 R09: 0000000000000000 [ 56.176531][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.176538][ T6210] R13: 00007fb516c26038 R14: 00007fb516c25fa0 R15: 00007ffc7ab2acf8 [ 56.176552][ T6210] [ 56.311965][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.324087][ T6221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6221 comm=syz.0.107 [ 56.387007][ T6219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6219 comm=syz.0.107 [ 56.390550][ T6217] FAULT_INJECTION: forcing a failure. [ 56.390550][ T6217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.390571][ T6217] CPU: 3 UID: 0 PID: 6217 Comm: syz.2.106 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.390588][ T6217] Tainted: [L]=SOFTLOCKUP [ 56.390592][ T6217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.390599][ T6217] Call Trace: [ 56.390603][ T6217] [ 56.390608][ T6217] dump_stack_lvl+0x100/0x190 [ 56.390631][ T6217] should_fail_ex.cold+0x5/0xa [ 56.390650][ T6217] should_fail_alloc_page+0xeb/0x140 [ 56.390664][ T6217] prepare_alloc_pages+0x1f0/0x5b0 [ 56.390679][ T6217] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 56.390697][ T6217] ? __schedule+0x3083/0x6990 [ 56.390718][ T6217] ? __lock_acquire+0x5c0/0x1f40 [ 56.390736][ T6217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 56.390756][ T6217] ? lock_acquire+0x1d1/0x380 [ 56.390772][ T6217] ? do_raw_spin_lock+0x128/0x260 [ 56.390783][ T6217] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.390794][ T6217] ? find_held_lock+0x2b/0x80 [ 56.390810][ T6217] ? __lock_acquire+0x5c0/0x1f40 [ 56.390826][ T6217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.390846][ T6217] ? policy_nodemask+0xed/0x5e0 [ 56.390860][ T6217] alloc_pages_mpol+0x201/0x560 [ 56.390874][ T6217] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 56.390891][ T6217] folio_alloc_mpol_noprof+0x36/0x260 [ 56.390908][ T6217] shmem_alloc_folio+0x135/0x160 [ 56.390927][ T6217] shmem_alloc_and_add_folio+0x371/0xd40 [ 56.390949][ T6217] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 56.390970][ T6217] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 56.390985][ T6217] shmem_get_folio_gfp+0x758/0x1af0 [ 56.391000][ T6217] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 56.391013][ T6217] ? filemap_map_pages+0x1155/0x2020 [ 56.391033][ T6217] shmem_fault+0x1fb/0xa30 [ 56.391045][ T6217] ? __pfx_shmem_fault+0x10/0x10 [ 56.391056][ T6217] ? __pte_offset_map+0x9a/0x470 [ 56.391074][ T6217] ? __pfx_filemap_map_pages+0x10/0x10 [ 56.391093][ T6217] ? find_held_lock+0x2b/0x80 [ 56.391106][ T6217] ? __pfx_filemap_map_pages+0x10/0x10 [ 56.391122][ T6217] __do_fault+0x10b/0x440 [ 56.391139][ T6217] do_fault+0xb3f/0x1890 [ 56.391158][ T6217] ? __pfx_do_fault+0x10/0x10 [ 56.391174][ T6217] ? rcu_read_unlock+0x2d/0xb0 [ 56.391186][ T6217] ? rcu_read_unlock+0x2d/0xb0 [ 56.391202][ T6217] __handle_mm_fault+0x150b/0x2f60 [ 56.391218][ T6217] ? __pfx___handle_mm_fault+0x10/0x10 [ 56.391231][ T6217] ? pte_offset_map_lock+0x174/0x320 [ 56.391248][ T6217] ? find_held_lock+0x2b/0x80 [ 56.391259][ T6217] ? find_held_lock+0x2b/0x80 [ 56.391271][ T6217] ? follow_page_pte+0x536/0x1050 [ 56.391295][ T6217] handle_mm_fault+0x363/0xa20 [ 56.391310][ T6217] __get_user_pages+0x8a9/0x2c20 [ 56.391330][ T6217] ? __pfx_mt_find+0x10/0x10 [ 56.391344][ T6217] ? __pfx___get_user_pages+0x10/0x10 [ 56.391365][ T6217] populate_vma_page_range+0x2bb/0x450 [ 56.391384][ T6217] ? __pfx_populate_vma_page_range+0x10/0x10 [ 56.391400][ T6217] ? __pfx_find_vma_intersection+0x10/0x10 [ 56.391425][ T6217] __mm_populate+0x107/0x3a0 [ 56.391442][ T6217] ? __pfx___mm_populate+0x10/0x10 [ 56.391460][ T6217] ? up_write+0x2dc/0x5b0 [ 56.391479][ T6217] vm_mmap_pgoff+0x44a/0x490 [ 56.391495][ T6217] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 56.391508][ T6217] ? lock_acquire+0x1d1/0x380 [ 56.391525][ T6217] ? __mutex_unlock_slowpath+0x35d/0x930 [ 56.391545][ T6217] ksys_mmap_pgoff+0xe4/0x610 [ 56.391565][ T6217] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 56.391582][ T6217] ? fput+0x7c/0x100 [ 56.391596][ T6217] ? ksys_write+0x1ac/0x250 [ 56.391606][ T6217] ? __pfx_ksys_write+0x10/0x10 [ 56.391619][ T6217] __x64_sys_mmap+0x125/0x190 [ 56.391637][ T6217] do_syscall_64+0x123/0x790 [ 56.391650][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.391662][ T6217] RIP: 0033:0x7f875dd9f559 [ 56.391673][ T6217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.391683][ T6217] RSP: 002b:00007f875ec63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 56.391695][ T6217] RAX: ffffffffffffffda RBX: 00007f875e025fa0 RCX: 00007f875dd9f559 [ 56.391702][ T6217] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 56.391708][ T6217] RBP: 00007f875ec63090 R08: ffffffffffffffff R09: 0000000000000000 [ 56.391715][ T6217] R10: 0000000004008031 R11: 0000000000000246 R12: 0000000000000002 [ 56.391722][ T6217] R13: 00007f875e026038 R14: 00007f875e025fa0 R15: 00007fffdd2cd778 [ 56.391736][ T6217] [ 56.644460][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'. [ 56.798800][ T6236] jffs2: notice: (6236) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.899231][ T6246] netlink: 80 bytes leftover after parsing attributes in process `syz.2.116'. [ 56.969695][ T6259] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 57.112338][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout [ 57.112379][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.112381][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.685059][ T43] kauditd_printk_skb: 55 callbacks suppressed [ 57.685071][ T43] audit: type=1400 audit(1793578642.717:318): avc: denied { write } for pid=6266 comm="syz.3.120" name="/" dev="9p" ino=77332593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.788398][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.121'. [ 57.835211][ T6273] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 57.875676][ T6277] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.917461][ T6280] ip_tables: iptables: counters copy to user failed while replacing table [ 57.918288][ T6280] x_tables: duplicate underflow at hook 3 [ 57.919074][ T6280] ip_tables: iptables: counters copy to user failed while replacing table [ 57.920485][ T6280] ip_tables: iptables: counters copy to user failed while replacing table [ 57.922848][ T43] audit: type=1400 audit(1793578642.957:319): avc: denied { prog_load } for pid=6281 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.972687][ T43] audit: type=1400 audit(1793578643.007:320): avc: denied { map_create } for pid=6276 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.972716][ T43] audit: type=1400 audit(1793578643.007:321): avc: denied { map_read map_write } for pid=6276 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.989726][ T6285] ipt_ECN: cannot use operation on non-tcp rule [ 58.392855][ T6221] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 58.402004][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.794035][ T43] audit: type=1400 audit(1793578643.827:322): avc: denied { setopt } for pid=6290 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.796088][ T6291] ip_tables: iptables: counters copy to user failed while replacing table [ 58.803670][ T6291] FAULT_INJECTION: forcing a failure. [ 58.803670][ T6291] name fail_futex, interval 1, probability 0, space 0, times 1 [ 58.803692][ T6291] CPU: 3 UID: 0 PID: 6291 Comm: syz.2.129 Tainted: G L syzkaller #0 PREEMPT(full) [ 58.803708][ T6291] Tainted: [L]=SOFTLOCKUP [ 58.803713][ T6291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.803720][ T6291] Call Trace: [ 58.803724][ T6291] [ 58.803729][ T6291] dump_stack_lvl+0x100/0x190 [ 58.803753][ T6291] should_fail_ex.cold+0x5/0xa [ 58.803772][ T6291] get_futex_key+0x1c9/0x13e0 [ 58.803788][ T6291] ? __pfx_get_futex_key+0x10/0x10 [ 58.803799][ T6291] ? futex_wake+0x4ea/0x5e0 [ 58.803817][ T6291] futex_wake+0xf4/0x5e0 [ 58.803835][ T6291] ? __pfx_futex_wake+0x10/0x10 [ 58.803853][ T6291] ? do_raw_spin_lock+0x128/0x260 [ 58.803864][ T6291] ? find_held_lock+0x2b/0x80 [ 58.803876][ T6291] ? do_prlimit+0x591/0x6d0 [ 58.803896][ T6291] do_futex+0x2b2/0x440 [ 58.803909][ T6291] ? __pfx_do_futex+0x10/0x10 [ 58.803927][ T6291] __x64_sys_futex+0x34f/0x4d0 [ 58.803945][ T6291] ? fput+0x7c/0x100 [ 58.803966][ T6291] ? __pfx___x64_sys_futex+0x10/0x10 [ 58.803985][ T6291] ? ksys_write+0x1ac/0x250 [ 58.804004][ T6291] ? __pfx_ksys_write+0x10/0x10 [ 58.804029][ T6291] do_syscall_64+0x123/0x790 [ 58.804054][ T6291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.804072][ T6291] RIP: 0033:0x7f875dd9f559 [ 58.804083][ T6291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.804109][ T6291] RSP: 002b:00007f875ec630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 58.804122][ T6291] RAX: ffffffffffffffda RBX: 00007f875e025fa8 RCX: 00007f875dd9f559 [ 58.804130][ T6291] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f875e025fac [ 58.804137][ T6291] RBP: 00007f875e025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 58.804144][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.804151][ T6291] R13: 00007f875e026038 R14: 00007fffdd2cd690 R15: 00007fffdd2cd778 [ 58.804167][ T6291] [ 58.907694][ T6293] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.942531][ T43] audit: type=1400 audit(1793578643.977:323): avc: denied { create } for pid=6294 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.943195][ T43] audit: type=1400 audit(1793578643.977:324): avc: denied { bind } for pid=6294 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.943601][ T43] audit: type=1400 audit(1793578643.977:325): avc: denied { setopt } for pid=6294 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.943950][ T43] audit: type=1400 audit(1793578643.977:326): avc: denied { accept } for pid=6294 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.944247][ T43] audit: type=1400 audit(1793578643.977:327): avc: denied { write } for pid=6294 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.201952][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 59.201981][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout [ 59.262377][ T6221] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.262479][ T6221] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.262569][ T6221] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.266592][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.266929][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.365966][ T5569] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.503102][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.516422][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.531598][ T6340] netlink: 348 bytes leftover after parsing attributes in process `syz.1.138'. [ 59.533503][ T6340] veth1_macvtap: left promiscuous mode [ 59.662141][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 59.662700][ T29] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 59.663222][ T9] usb 7-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 59.663631][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.664847][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 59.666887][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 59.666907][ T9] usb 7-1: Product: syz [ 59.666920][ T9] usb 7-1: Manufacturer: syz [ 59.666933][ T9] usb 7-1: SerialNumber: syz [ 59.671025][ T9] usb 7-1: config 0 descriptor?? [ 59.671722][ T6296] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 59.676469][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 59.676489][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 59.870112][ T29] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 59.875543][ T29] usb 8-1: USB disconnect, device number 2 [ 60.032100][ T9] usb 7-1: USB disconnect, device number 3 [ 60.435333][ T6348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.435572][ T6354] syz.0.143 (6354) used greatest stack depth: 18136 bytes left [ 60.437726][ T6348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.437814][ T6348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.555870][ T6369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 60.682375][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.690987][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.769044][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.826784][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.835983][ T29] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 60.838667][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.840264][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.841199][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.843366][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.843439][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.843451][ T29] usb 6-1: Product: syz [ 60.843459][ T29] usb 6-1: Manufacturer: syz [ 60.843727][ T29] usb 6-1: SerialNumber: syz [ 60.844730][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.880451][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.915907][ T6383] syz.2.156: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 60.991727][ T12] bridge_slave_0: left allmulticast mode [ 60.991793][ T12] bridge_slave_0: left promiscuous mode [ 60.993011][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.051399][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 61.051430][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 61.051441][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 61.056460][ T29] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 61.074123][ T29] usb 6-1: USB disconnect, device number 2 [ 61.117077][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.119587][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.121393][ T12] bond0 (unregistering): Released all slaves [ 61.158425][ T6393] syzkaller0: entered promiscuous mode [ 61.158449][ T6393] syzkaller0: entered allmulticast mode [ 61.162973][ T6403] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.261306][ T6415] netlink: 'syz.0.165': attribute type 9 has an invalid length. [ 61.291702][ T6418] overlayfs: failed to resolve './bus': -2 [ 61.338228][ T6423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.681944][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.018682][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.026061][ T6373] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.101974][ T6438] FAULT_INJECTION: forcing a failure. [ 62.101974][ T6438] name failslab, interval 1, probability 0, space 0, times 0 [ 62.101994][ T6438] CPU: 0 UID: 0 PID: 6438 Comm: syz.2.172 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.102010][ T6438] Tainted: [L]=SOFTLOCKUP [ 62.102014][ T6438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.102021][ T6438] Call Trace: [ 62.102025][ T6438] [ 62.102030][ T6438] dump_stack_lvl+0x100/0x190 [ 62.102053][ T6438] should_fail_ex.cold+0x5/0xa [ 62.102071][ T6438] should_failslab+0xc2/0x120 [ 62.102084][ T6438] kmem_cache_alloc_noprof+0x92/0x6a0 [ 62.102102][ T6438] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 62.102125][ T6438] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 62.102145][ T6438] ? kvm_msr_allowed+0x2d0/0x450 [ 62.102163][ T6438] kvm_mmu_load+0xe3/0x25b0 [ 62.102179][ T6438] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 62.102191][ T6438] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 62.102205][ T6438] ? __pfx_kvm_mmu_load+0x10/0x10 [ 62.102220][ T6438] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 62.102240][ T6438] ? kvm_check_and_inject_events+0x896/0x1050 [ 62.102258][ T6438] vcpu_run+0x4009/0x60d0 [ 62.102280][ T6438] ? __pfx_vcpu_run+0x10/0x10 [ 62.102295][ T6438] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 62.102308][ T6438] ? lock_acquire+0x1d1/0x380 [ 62.102324][ T6438] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 62.102342][ T6438] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 62.102353][ T6438] ? __local_bh_enable_ip+0xa5/0x120 [ 62.102370][ T6438] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 62.102386][ T6438] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 62.102407][ T6438] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 62.102423][ T6438] ? lock_acquire+0x1d1/0x380 [ 62.102439][ T6438] ? do_raw_write_lock+0x11e/0x260 [ 62.102449][ T6438] ? find_held_lock+0x2b/0x80 [ 62.102461][ T6438] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 62.102478][ T6438] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 62.102498][ T6438] kvm_vcpu_ioctl+0x735/0x17b0 [ 62.102517][ T6438] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.102536][ T6438] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.102556][ T6438] ? do_vfs_ioctl+0x226/0x13e0 [ 62.102580][ T6438] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 62.102604][ T6438] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 62.102637][ T6438] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 62.102686][ T6438] ? __fget_files+0x34/0x3d0 [ 62.102708][ T6438] ? selinux_file_ioctl+0x1e0/0x290 [ 62.102725][ T6438] ? selinux_file_ioctl+0x1e7/0x290 [ 62.102745][ T6438] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.102764][ T6438] __x64_sys_ioctl+0x18e/0x210 [ 62.102783][ T6438] do_syscall_64+0x123/0x790 [ 62.102797][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.102809][ T6438] RIP: 0033:0x7f875dd9f559 [ 62.102819][ T6438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.102829][ T6438] RSP: 002b:00007f875ec63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.102841][ T6438] RAX: ffffffffffffffda RBX: 00007f875e025fa0 RCX: 00007f875dd9f559 [ 62.102848][ T6438] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 62.102855][ T6438] RBP: 00007f875ec63090 R08: 0000000000000000 R09: 0000000000000000 [ 62.102861][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.102868][ T6438] R13: 00007f875e026038 R14: 00007f875e025fa0 R15: 00007fffdd2cd778 [ 62.102883][ T6438] [ 62.151585][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 62.205007][ T6452] FAULT_INJECTION: forcing a failure. [ 62.205007][ T6452] name failslab, interval 1, probability 0, space 0, times 0 [ 62.205036][ T6452] CPU: 3 UID: 0 PID: 6452 Comm: syz.0.177 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.205063][ T6452] Tainted: [L]=SOFTLOCKUP [ 62.205071][ T6452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.205082][ T6452] Call Trace: [ 62.205089][ T6452] [ 62.205097][ T6452] dump_stack_lvl+0x100/0x190 [ 62.205135][ T6452] should_fail_ex.cold+0x5/0xa [ 62.205165][ T6452] should_failslab+0xc2/0x120 [ 62.205187][ T6452] __kvmalloc_node_noprof+0x113/0x9b0 [ 62.205218][ T6452] ? kfree+0x22b/0x6d0 [ 62.205241][ T6452] ? bpf_insn_successors+0x32f/0x650 [ 62.205270][ T6452] ? sort_subprogs_topo+0xde/0xf40 [ 62.205301][ T6452] sort_subprogs_topo+0xde/0xf40 [ 62.205332][ T6452] ? bpf_prune_dead_branches+0x504/0x840 [ 62.205366][ T6452] bpf_check+0x796d/0xa0f0 [ 62.205415][ T6452] ? __pfx_bpf_check+0x10/0x10 [ 62.205444][ T6452] ? lock_acquire+0x1d1/0x380 [ 62.205471][ T6452] ? find_held_lock+0x2b/0x80 [ 62.205494][ T6452] ? bpf_prog_load+0x1af0/0x2b20 [ 62.205528][ T6452] ? __asan_memset+0x23/0x50 [ 62.205561][ T6452] ? bpf_prog_load+0x1baf/0x2b20 [ 62.205589][ T6452] bpf_prog_load+0x1baf/0x2b20 [ 62.205617][ T6452] ? avc_has_perm_noaudit+0x11e/0x470 [ 62.205671][ T6452] ? __pfx_bpf_prog_load+0x10/0x10 [ 62.205729][ T6452] __sys_bpf+0x146f/0x4b60 [ 62.205756][ T6452] ? __pfx___sys_bpf+0x10/0x10 [ 62.205775][ T6452] ? find_held_lock+0x2b/0x80 [ 62.205796][ T6452] ? get_pid_task+0xfc/0x250 [ 62.205816][ T6452] ? get_pid_task+0xfc/0x250 [ 62.205843][ T6452] ? find_held_lock+0x2b/0x80 [ 62.205870][ T6452] ? rcu_read_lock_any_held+0x6a/0x90 [ 62.205895][ T6452] ? find_held_lock+0x2b/0x80 [ 62.205916][ T6452] ? ksys_write+0x190/0x250 [ 62.205936][ T6452] ? ksys_write+0x190/0x250 [ 62.205954][ T6452] ? lock_acquire+0x1d1/0x380 [ 62.205998][ T6452] ? fput+0x7c/0x100 [ 62.206023][ T6452] ? ksys_write+0x1ac/0x250 [ 62.206046][ T6452] ? __x64_sys_bpf+0xce/0x140 [ 62.206063][ T6452] __x64_sys_bpf+0xce/0x140 [ 62.206082][ T6452] ? do_syscall_64+0xae/0x790 [ 62.206105][ T6452] do_syscall_64+0x123/0x790 [ 62.206127][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.206149][ T6452] RIP: 0033:0x7fb51699f559 [ 62.206166][ T6452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.206184][ T6452] RSP: 002b:00007fb517785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.206205][ T6452] RAX: ffffffffffffffda RBX: 00007fb516c25fa0 RCX: 00007fb51699f559 [ 62.206217][ T6452] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 62.206229][ T6452] RBP: 00007fb517785090 R08: 0000000000000000 R09: 0000000000000000 [ 62.206240][ T6452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.206252][ T6452] R13: 00007fb516c26038 R14: 00007fb516c25fa0 R15: 00007ffc7ab2acf8 [ 62.206278][ T6452] [ 62.229195][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 62.239462][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.240147][ T6454] veth0: left allmulticast mode [ 62.240162][ T6454] veth0: left promiscuous mode [ 62.240273][ T6454] bridge0: port 3(veth0) entered disabled state [ 62.241351][ T6456] program syz.0.179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.246038][ T6454] bridge_slave_1: left allmulticast mode [ 62.246052][ T6454] bridge_slave_1: left promiscuous mode [ 62.246156][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.250099][ T6454] bridge_slave_0: left allmulticast mode [ 62.250112][ T6454] bridge_slave_0: left promiscuous mode [ 62.250212][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.268857][ T6458] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 62.284457][ T6460] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.458890][ T12] hsr_slave_0: left promiscuous mode [ 62.459317][ T12] hsr_slave_1: left promiscuous mode [ 62.459703][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.459720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.460487][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.460498][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.479889][ T12] veth1_macvtap: left promiscuous mode [ 62.479917][ T12] veth0_macvtap: left promiscuous mode [ 62.479961][ T12] veth1_vlan: left promiscuous mode [ 62.479999][ T12] veth0_vlan: left promiscuous mode [ 62.484325][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.484348][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.512600][ T6480] Bluetooth: MGMT ver 1.23 [ 62.549803][ T6482] netlink: 'syz.2.185': attribute type 6 has an invalid length. [ 62.594468][ T12] team0 (unregistering): Port device team_slave_1 removed [ 62.599115][ T12] team0 (unregistering): Port device team_slave_0 removed [ 62.645367][ T5882] smpboot: CPU 1 is now offline [ 62.678144][ T5882] [ 62.679109][ T5882] ====================================================== [ 62.681763][ T5882] WARNING: possible circular locking dependency detected [ 62.684309][ T5882] syzkaller #0 Tainted: G L SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 62.686599][ T5882] ------------------------------------------------------ [ 62.689218][ T5882] kworker/u32:3/5882 is trying to acquire lock: [ 62.691216][ T5882] ffff88801e3d35a8 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x34c/0xbc0 [ 62.694018][ T5882] [ 62.694018][ T5882] but task is already holding lock: [ 62.696288][ T5882] ffffffff8fe7a670 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 62.699511][ T5882] [ 62.699511][ T5882] which lock already depends on the new lock. [ 62.699511][ T5882] [ 62.702521][ T5882] [ 62.702521][ T5882] the existing dependency chain (in reverse order) is: [ 62.705313][ T5882] [ 62.705313][ T5882] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 62.707718][ T5882] lock_acquire+0x1d1/0x380 [ 62.709368][ T5882] percpu_down_write+0x4e/0x3d0 [ 62.711157][ T5882] _cpu_up+0x68/0x960 [ 62.712620][ T5882] cpu_up+0x1ba/0x230 [ 62.714052][ T5882] cpuhp_bringup_mask+0xf8/0x180 [ 62.715777][ T5882] bringup_nonboot_cpus+0xd9/0x1b0 [ 62.717544][ T5882] smp_init+0x32/0x150 [ 62.719017][ T5882] kernel_init_freeable+0x44b/0x7b0 [ 62.720781][ T5882] kernel_init+0x21/0x1e0 [ 62.722302][ T5882] ret_from_fork+0x730/0xd60 [ 62.723881][ T5882] ret_from_fork_asm+0x1a/0x30 [ 62.725532][ T5882] [ 62.725532][ T5882] -> #2 (cpu_add_remove_lock){+.+.}-{4:4}: [ 62.728001][ T5882] lock_acquire+0x1d1/0x380 [ 62.729839][ T5882] __mutex_lock+0x19f/0x1c10 [ 62.731496][ T5882] cpu_device_down+0x46/0xc0 [ 62.733171][ T5882] device_offline+0x2f4/0x400 [ 62.735098][ T5882] acpi_bus_offline+0x3c7/0x550 [ 62.737287][ T5882] acpi_device_hotplug+0x627/0xbe0 [ 62.739619][ T5882] acpi_hotplug_work_fn+0x5e/0x90 [ 62.741960][ T5882] process_one_work+0xac7/0x1b10 [ 62.744273][ T5882] worker_thread+0x5ef/0xe50 [ 62.746490][ T5882] kthread+0x373/0x450 [ 62.748479][ T5882] ret_from_fork+0x730/0xd60 [ 62.750678][ T5882] ret_from_fork_asm+0x1a/0x30 [ 62.752875][ T5882] [ 62.752875][ T5882] -> #1 (&device->physical_node_lock){+.+.}-{4:4}: [ 62.756535][ T5882] lock_acquire+0x1d1/0x380 [ 62.758806][ T5882] __mutex_lock+0x19f/0x1c10 [ 62.760950][ T5882] acpi_companion_match+0xc0/0x180 [ 62.763071][ T5882] acpi_device_uevent_modalias+0x19/0x30 [ 62.765254][ T5882] platform_uevent+0x51/0xc0 [ 62.766867][ T5882] dev_uevent+0x1de/0x870 [ 62.768406][ T5882] kobject_uevent_env+0x6eb/0x18b0 [ 62.770478][ T5882] kobject_synth_uevent+0x6f1/0x830 [ 62.772793][ T5882] uevent_store+0x24/0x90 [ 62.774902][ T5882] dev_attr_store+0x58/0x80 [ 62.777059][ T5882] sysfs_kf_write+0xf2/0x150 [ 62.779268][ T5882] kernfs_fop_write_iter+0x3e0/0x5f0 [ 62.781768][ T5882] vfs_write+0x6af/0x1050 [ 62.783849][ T5882] ksys_write+0x12a/0x250 [ 62.785932][ T5882] do_syscall_64+0x123/0x790 [ 62.788103][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.790776][ T5882] [ 62.790776][ T5882] -> #0 (kn->active#5){++++}-{0:0}: [ 62.793757][ T5882] check_prev_add+0xeb/0xe60 [ 62.795538][ T5882] __lock_acquire+0x1528/0x1f40 [ 62.797354][ T5882] lock_acquire+0x1d1/0x380 [ 62.799266][ T5882] kernfs_drain+0x4eb/0x600 [ 62.801372][ T5882] __kernfs_remove+0x34c/0xbc0 [ 62.803648][ T5882] kernfs_remove_by_name_ns+0x7c/0x120 [ 62.806195][ T5882] device_del+0x361/0x9b0 [ 62.808259][ T5882] device_unregister+0x1d/0xe0 [ 62.810492][ T5882] unregister_cpu+0xa0/0x140 [ 62.812636][ T5882] acpi_processor_post_eject+0x16f/0x390 [ 62.815197][ T5882] acpi_device_hotplug+0x9df/0xbe0 [ 62.817481][ T5882] acpi_hotplug_work_fn+0x5e/0x90 [ 62.819760][ T5882] process_one_work+0xac7/0x1b10 [ 62.821976][ T5882] worker_thread+0x5ef/0xe50 [ 62.824091][ T5882] kthread+0x373/0x450 [ 62.825759][ T5882] ret_from_fork+0x730/0xd60 [ 62.827558][ T5882] ret_from_fork_asm+0x1a/0x30 [ 62.829511][ T5882] [ 62.829511][ T5882] other info that might help us debug this: [ 62.829511][ T5882] [ 62.833150][ T5882] Chain exists of: [ 62.833150][ T5882] kn->active#5 --> cpu_add_remove_lock --> cpu_hotplug_lock [ 62.833150][ T5882] [ 62.837174][ T5882] Possible unsafe locking scenario: [ 62.837174][ T5882] [ 62.839394][ T5882] CPU0 CPU1 [ 62.841000][ T5882] ---- ---- [ 62.842617][ T5882] lock(cpu_hotplug_lock); [ 62.843993][ T5882] lock(cpu_add_remove_lock); [ 62.846148][ T5882] lock(cpu_hotplug_lock); [ 62.848211][ T5882] lock(kn->active#5); [ 62.849555][ T5882] [ 62.849555][ T5882] *** DEADLOCK *** [ 62.849555][ T5882] [ 62.852300][ T5882] locks held by kworker/u32:3/5882: 6, last CPU#3: [ 62.854515][ T5882] #0: ffff88801f342148 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 62.858191][ T5882] #1: ffffc90003a07d08 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 62.861746][ T5882] #2: ffffffff9104f2e0 (device_hotplug_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x7e/0xbe0 [ 62.861943][ T67] Bluetooth: hci0: command tx timeout [ 62.866311][ T5882] #3: ffffffff90d1da80 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x8c/0xbe0 [ 62.869135][ T5882] #4: ffffffff8fe7a720 (cpu_add_remove_lock){+.+.}-{4:4}, at: acpi_processor_post_eject+0x141/0x390 [ 62.873430][ T5882] #5: ffffffff8fe7a670 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 62.877413][ T5882] [ 62.877413][ T5882] stack backtrace: [ 62.879590][ T5882] CPU: 3 UID: 0 PID: 5882 Comm: kworker/u32:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.883629][ T5882] Tainted: [L]=SOFTLOCKUP [ 62.885289][ T5882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.888352][ T5882] Workqueue: kacpi_hotplug acpi_hotplug_work_fn [ 62.890573][ T5882] Call Trace: [ 62.891730][ T5882] [ 62.892718][ T5882] dump_stack_lvl+0x100/0x190 [ 62.894235][ T5882] print_circular_bug.cold+0x178/0x1be [ 62.895954][ T5882] check_noncircular+0x146/0x160 [ 62.897534][ T5882] check_prev_add+0xeb/0xe60 [ 62.899010][ T5882] __lock_acquire+0x1528/0x1f40 [ 62.900635][ T5882] lock_acquire+0x1d1/0x380 [ 62.902021][ T5882] ? __kernfs_remove+0x34c/0xbc0 [ 62.903607][ T5882] ? kernfs_drain+0x4c2/0x600 [ 62.905238][ T5882] kernfs_drain+0x4eb/0x600 [ 62.906819][ T5882] ? __kernfs_remove+0x34c/0xbc0 [ 62.908614][ T5882] ? __pfx_kernfs_drain+0x10/0x10 [ 62.910696][ T5882] ? find_held_lock+0x2b/0x80 [ 62.912623][ T5882] ? __kernfs_remove+0x224/0xbc0 [ 62.914725][ T5882] ? __kernfs_remove+0x224/0xbc0 [ 62.916412][ T5882] ? up_write+0x2dc/0x5b0 [ 62.917811][ T5882] __kernfs_remove+0x34c/0xbc0 [ 62.919409][ T5882] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 62.921716][ T5882] kernfs_remove_by_name_ns+0x7c/0x120 [ 62.923863][ T5882] device_del+0x361/0x9b0 [ 62.925460][ T5882] ? __pfx_device_del+0x10/0x10 [ 62.927217][ T5882] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 62.929310][ T5882] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 62.931415][ T5882] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 62.933916][ T5882] device_unregister+0x1d/0xe0 [ 62.935955][ T5882] unregister_cpu+0xa0/0x140 [ 62.937956][ T5882] acpi_processor_post_eject+0x16f/0x390 [ 62.939910][ T5882] acpi_device_hotplug+0x9df/0xbe0 [ 62.941527][ T5882] ? __pfx_acpi_device_hotplug+0x10/0x10 [ 62.943311][ T5882] acpi_hotplug_work_fn+0x5e/0x90 [ 62.944898][ T5882] process_one_work+0xac7/0x1b10 [ 62.946466][ T5882] ? __pfx_process_one_work+0x10/0x10 [ 62.948153][ T5882] ? lock_acquire+0x1d1/0x380 [ 62.949849][ T5882] ? __pfx_acpi_hotplug_work_fn+0x10/0x10 [ 62.951893][ T5882] worker_thread+0x5ef/0xe50 [ 62.953532][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 62.955433][ T5882] ? kthread+0x13a/0x450 [ 62.956978][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 62.958962][ T5882] kthread+0x373/0x450 [ 62.960654][ T5882] ? __pfx_kthread+0x10/0x10 [ 62.962570][ T5882] ret_from_fork+0x730/0xd60 [ 62.964463][ T5882] ? __pfx_ret_from_fork+0x10/0x10 [ 62.966328][ T5882] ? __switch_to+0x800/0x10e0 [ 62.967801][ T5882] ? __pfx_kthread+0x10/0x10 [ 62.969495][ T5882] ret_from_fork_asm+0x1a/0x30 [ 62.971324][ T5882] [ 62.978198][ T5492] 8021q: adding VLAN 0 to HW filter on device eth4 [ 63.047085][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 63.047097][ T43] audit: type=1400 audit(1793578648.077:367): avc: denied { write } for pid=6486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.114337][ T43] audit: type=1400 audit(1793578648.147:368): avc: denied { write } for pid=6489 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.157382][ T6464] bridge0: port 3(syz_tun) entered disabled state [ 63.158193][ T6464] syz_tun (unregistering): left allmulticast mode [ 63.158207][ T6464] syz_tun (unregistering): left promiscuous mode [ 63.158258][ T6464] bridge0: port 3(syz_tun) entered disabled state [ 63.160102][ T5492] 8021q: adding VLAN 0 to HW filter on device eth5 [ 63.316634][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.364830][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.414693][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.465745][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.522398][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.565884][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.568450][ T43] audit: type=1400 audit(1793578648.597:369): avc: denied { write } for pid=6496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.600282][ T43] audit: type=1400 audit(1793578648.627:370): avc: denied { write } for pid=6499 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.614529][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.630456][ T5492] 8021q: adding VLAN 0 to HW filter on device eth6 [ 63.666231][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.676056][ T43] audit: type=1400 audit(1793578648.707:371): avc: denied { write } for pid=6502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.718492][ T12] bridge_slave_1: left allmulticast mode [ 63.718509][ T12] bridge_slave_1: left promiscuous mode [ 63.718585][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.719400][ T12] bridge_slave_0: left allmulticast mode [ 63.719412][ T12] bridge_slave_0: left promiscuous mode [ 63.719501][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.720524][ T43] audit: type=1400 audit(1793578648.747:372): avc: denied { write } for pid=6505 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.786990][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.788016][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.788921][ T12] bond0 (unregistering): Released all slaves [ 63.809032][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.809915][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.810423][ T12] bond0 (unregistering): Released all slaves [ 63.820897][ T12] bond0 (unregistering): Released all slaves [ 63.822688][ T5492] 8021q: adding VLAN 0 to HW filter on device eth7 [ 63.880346][ T43] audit: type=1400 audit(1793578648.907:373): avc: denied { write } for pid=6509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.923158][ T43] audit: type=1400 audit(1793578648.957:374): avc: denied { write } for pid=6512 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.951580][ T5492] 8021q: adding VLAN 0 to HW filter on device eth8 [ 64.032504][ T43] audit: type=1400 audit(1793578649.067:375): avc: denied { write } for pid=6516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.072650][ T43] audit: type=1400 audit(1793578649.107:376): avc: denied { write } for pid=6519 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.097385][ T5492] 8021q: adding VLAN 0 to HW filter on device eth9 [ 64.211224][ T5492] 8021q: adding VLAN 0 to HW filter on device eth10 [ 64.244427][ T12] hsr_slave_0: left promiscuous mode [ 64.244700][ T12] hsr_slave_1: left promiscuous mode [ 64.244919][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.244930][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.245195][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.245204][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.246702][ T12] hsr_slave_0: left promiscuous mode [ 64.246955][ T12] hsr_slave_1: left promiscuous mode [ 64.247167][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.247177][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.247426][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.247434][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.249592][ T12] veth1_macvtap: left promiscuous mode [ 64.249607][ T12] veth0_macvtap: left promiscuous mode [ 64.249657][ T12] veth1_vlan: left promiscuous mode [ 64.249678][ T12] veth0_vlan: left promiscuous mode [ 64.250123][ T12] veth1_macvtap: left promiscuous mode [ 64.250136][ T12] veth0_macvtap: left promiscuous mode [ 64.250168][ T12] veth1_vlan: left promiscuous mode [ 64.250188][ T12] veth0_vlan: left promiscuous mode [ 64.368403][ T12] team0 (unregistering): Port device team_slave_1 removed [ 64.370541][ T12] team0 (unregistering): Port device team_slave_0 removed [ 64.432615][ T12] team0 (unregistering): Port device team_slave_1 removed [ 64.434631][ T12] team0 (unregistering): Port device team_slave_0 removed [ 64.469029][ T5492] 8021q: adding VLAN 0 to HW filter on device eth11 [ 64.595036][ T5492] 8021q: adding VLAN 0 to HW filter on device eth12 [ 64.690741][ T5492] 8021q: adding VLAN 0 to HW filter on device eth13 [ 64.907183][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.946354][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.985520][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.045924][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.108590][ T12] bridge_slave_1: left allmulticast mode [ 65.108612][ T12] bridge_slave_1: left promiscuous mode [ 65.108723][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.110112][ T12] bridge_slave_0: left allmulticast mode [ 65.110130][ T12] bridge_slave_0: left promiscuous mode [ 65.110233][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.170615][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.177433][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.178201][ T12] bond0 (unregistering): Released all slaves [ 65.293534][ T5492] 8021q: adding VLAN 0 to HW filter on device eth14 [ 65.386595][ T12] hsr_slave_0: left promiscuous mode [ 65.394455][ T12] hsr_slave_1: left promiscuous mode [ 65.395128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.395142][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.397349][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.397367][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.399669][ T12] veth0_macvtap: left promiscuous mode [ 65.399722][ T12] veth1_vlan: left promiscuous mode [ 65.399757][ T12] veth0_vlan: left promiscuous mode [ 65.453900][ T12] team0 (unregistering): Port device team_slave_1 removed [ 65.455988][ T12] team0 (unregistering): Port device team_slave_0 removed [ 65.477025][ T5492] 8021q: adding VLAN 0 to HW filter on device eth15 [ 65.580636][ T5492] 8021q: adding VLAN 0 to HW filter on device eth16 [ 65.676057][ T5492] 8021q: adding VLAN 0 to HW filter on device eth17 [ 71.593235][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.593275][ T1447] ieee802154 phy1 wpan1: encryption failed: -22