last executing test programs: 5m29.164066016s ago: executing program 2 (id=81): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x140, 0x9, 0x7, 0x201, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@nested={0x129, 0x111, 0x0, 0x1, [@generic="30878139a5bcb30081c568e8f7ac812ca0257eb6f8247a3b16318890df9ae2de8f054e0b83213710a38da7380a17b13572ec3a7243cf1bf77414b97ca7822db071bfff2175fcb1ede0", @nested={0x4, 0x92}, @nested={0x4, 0x7e}, @generic="5872deaf946bb164fb9acf7feb86f6618b4e4bdef9624449e8107de461c513ec9fee8b85ac8c4adcd8d0e8efed1bb2e801cecf8db5a07ec4c0c5d447e35ae3d80a928f47ca537aa2b50a8cc4e7c226dce5ae3dedf2021f884c3ac1ea69018e1689cadce0dc5b77a831867e46f3ff6f5cd558ea771c25815dec7b0ea38399713c91ba089783398d16e72c632a6d13c2f8f2946118fc4e3703ca9c46b24be2ac5c7a3d0ecbd3a55087937e4dfc4178a5c57aed48fe21fb92986252640cc9c85491e4e4dc21436948062c3956a1b5f121c2", @nested={0x4, 0x81}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m29.001709026s ago: executing program 2 (id=85): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) 5m28.200704194s ago: executing program 2 (id=88): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5m27.209578589s ago: executing program 2 (id=94): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0xa4009800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1\x00\x00\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 5m26.781519124s ago: executing program 2 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x686f, &(0x7f0000000200)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000140)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 5m26.296846857s ago: executing program 2 (id=99): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x4000523) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) pwritev2(r1, &(0x7f0000003940)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xc, 0x0, 0x14) 5m11.038317198s ago: executing program 32 (id=99): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x4000523) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) pwritev2(r1, &(0x7f0000003940)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xc, 0x0, 0x14) 4m26.454383579s ago: executing program 4 (id=551): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x22240, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m26.272706657s ago: executing program 4 (id=555): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 4m25.900462014s ago: executing program 4 (id=558): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2000a041}, 0x800) 4m25.739988124s ago: executing program 4 (id=559): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 4m25.25270417s ago: executing program 4 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x686f, &(0x7f0000000200)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000140)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4m24.998078436s ago: executing program 4 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 4m9.903447307s ago: executing program 33 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 23.791082028s ago: executing program 5 (id=2420): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) fallocate(r0, 0x8, 0x4000, 0x4000) 23.782915644s ago: executing program 5 (id=2421): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r1 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r0, 0xffffffffffffffff, 0x0) 23.508983864s ago: executing program 5 (id=2427): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xe0042, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x100) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r2) r3 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000100)='auxv\x00') 23.395583919s ago: executing program 5 (id=2429): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 23.306878272s ago: executing program 5 (id=2430): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 22.942521575s ago: executing program 5 (id=2431): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x14, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100003052abd7000000700dfff000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000180012800b000100697036746e6c000008000280040013"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.90175419s ago: executing program 34 (id=2431): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x14, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100003052abd7000000700dfff000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000180012800b000100697036746e6c000008000280040013"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.171642022s ago: executing program 0 (id=2624): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 5.231428701s ago: executing program 0 (id=2640): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0xf, 0x5, 0x2, 0x9}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) 5.170658799s ago: executing program 0 (id=2641): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0xffff, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.007472664s ago: executing program 0 (id=2643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x84) write(r3, &(0x7f00000002c0)="16", 0x1) 3.931439936s ago: executing program 0 (id=2649): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x5, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) 3.93108464s ago: executing program 0 (id=2651): setresuid(0xee01, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000300)=""/227, 0xe3) syz_usb_disconnect(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_usb_disconnect(r1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) 1.187759164s ago: executing program 3 (id=2691): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000002"], 0x412f00) 1.156672313s ago: executing program 1 (id=2692): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2b4b) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) recvfrom(r1, &(0x7f0000000040)=""/64, 0x40, 0x10120, 0x0, 0x0) 1.1015138s ago: executing program 6 (id=2693): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) pipe2(&(0x7f0000000500)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000014)="0500010001000000", 0x8) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000600)='trigger_packet', 0xe, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 1.01035558s ago: executing program 3 (id=2694): mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 937.767239ms ago: executing program 6 (id=2695): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0x401, 0xffffffffffffffff], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 937.4775ms ago: executing program 3 (id=2696): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ed) mount(&(0x7f0000000000)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x41009432, 0x0) 934.865529ms ago: executing program 1 (id=2697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 914.461116ms ago: executing program 3 (id=2698): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x0, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fd, 0x4a, 0x28, 0x4, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, 0x0) 858.466026ms ago: executing program 1 (id=2699): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 858.297319ms ago: executing program 6 (id=2700): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendfile(r1, r0, 0x0, 0xf03a0005) 782.835264ms ago: executing program 1 (id=2701): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000010000), 0x88202, 0x0) ioctl$FIONCLEX(r1, 0x5450) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) 782.642639ms ago: executing program 6 (id=2702): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) 775.376057ms ago: executing program 1 (id=2703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x6, 0x8, 0x7b, 0xb, 0x4e, 0x9, 0x4, 0x4, 0x40, 0x6, 0x94, 0x2f, 0x3}, {0x7ff, 0x8, 0x8f, 0x4, 0x34, 0x4e, 0x40, 0x10, 0xa7, 0x9, 0x5, 0x3, 0x2}, {0x8723, 0xfff, 0x7f, 0x5, 0xa, 0x26, 0x9, 0x1, 0x9, 0x80, 0x84, 0x8, 0x5}], 0xb}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 753.350883ms ago: executing program 1 (id=2704): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x101, 0x4f) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40040, 0x2) write$cgroup_freezer_state(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 740.346895ms ago: executing program 6 (id=2705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 570.854669ms ago: executing program 6 (id=2706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c12344000402f"], 0x1c) 345.686µs ago: executing program 3 (id=2707): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f0000000380)=""/245, 0xf5, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2708): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) kernel console output (not intermixed with test programs): ass=filesystem permissive=1 [ 393.424105][ T43] audit: type=1400 audit(1789264825.278:697): avc: denied { search } for pid=11014 comm="syz.0.1843" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 393.424524][ T43] audit: type=1400 audit(1789264825.278:698): avc: denied { read write } for pid=11014 comm="syz.0.1843" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 393.424988][ T43] audit: type=1400 audit(1789264825.278:699): avc: denied { open } for pid=11014 comm="syz.0.1843" path="/451/mnt_nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 393.884439][ T43] audit: type=1400 audit(1789264825.718:700): avc: denied { unmount } for pid=5757 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 394.832219][ T43] audit: type=1400 audit(1789264826.688:701): avc: denied { mounton } for pid=11068 comm="syz.0.1854" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 394.842188][T11069] overlayfs: upper fs does not support tmpfile. [ 395.011954][T11075] gretap1: entered promiscuous mode [ 395.291214][T11080] SELinux: unknown common  [ 395.291285][T11080] SELinux: invalid class [ 395.291351][T11080] SELinux: failed to load policy [ 395.493999][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 395.763077][ T43] audit: type=1326 audit(1789264827.628:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11072 comm="syz.5.1855" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d19e159 code=0x7fc00000 [ 395.861972][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1865'. [ 397.018910][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 397.019784][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 397.189016][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 397.380357][T11132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1876'. [ 397.862718][T11136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1876'. [ 397.883602][T11136] nbd: nbd64 already in use [ 398.102677][ T43] audit: type=1326 audit(1789264829.958:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11146 comm="syz.5.1883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d19e159 code=0x7ffc0000 [ 398.103198][ T43] audit: type=1326 audit(1789264829.958:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11146 comm="syz.5.1883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d19e159 code=0x7ffc0000 [ 398.103354][ T43] audit: type=1326 audit(1789264829.958:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11146 comm="syz.5.1883" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837d19e159 code=0x7ffc0000 [ 399.599502][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.599526][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.899737][T11186] batman_adv: batadv0: Adding interface: dummy0 [ 399.899758][T11186] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.899790][T11186] batman_adv: batadv0: Interface activated: dummy0 [ 400.068895][T11186] batadv0: mtu less than device minimum [ 400.102078][T11186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.103413][T11186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.104465][T11186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.116452][T11186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.117516][T11186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.118469][T11186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.119746][T11186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.120946][T11186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.122043][T11186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 400.369731][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1900'. [ 400.437501][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 400.481780][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 400.481805][ T43] audit: type=1400 audit(1789264832.318:722): avc: denied { write } for pid=11195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.934021][ T43] audit: type=1400 audit(1789264832.778:723): avc: denied { write } for pid=11211 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.327485][T11226] jffs2: notice: (11226) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 401.483302][ T43] audit: type=1400 audit(1789264833.308:724): avc: denied { setopt } for pid=11233 comm="syz.1.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 401.483989][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 401.493459][ T35] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 401.494802][T11232] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1911'. [ 401.663433][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.665105][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.667722][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.667746][ T35] usb 8-1: Product: syz [ 401.667761][ T35] usb 8-1: Manufacturer: syz [ 401.667776][ T35] usb 8-1: SerialNumber: syz [ 402.062392][T11249] overlayfs: failed to clone upperpath [ 402.066676][ T43] audit: type=1400 audit(1789264833.908:725): avc: denied { write } for pid=11250 comm="syz.0.1920" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 402.078548][ T5760] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 402.083779][ T5760] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 402.517454][T11266] netlink: 'syz.1.1926': attribute type 1 has an invalid length. [ 402.532234][T11266] ifb0: entered promiscuous mode [ 402.553465][T11266] netlink: 'syz.1.1926': attribute type 1 has an invalid length. [ 402.740063][ T35] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 402.740087][ T35] cdc_ncm 8-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 402.740102][ T35] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 403.140934][ T43] audit: type=1400 audit(1789264834.988:726): avc: denied { write } for pid=11275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.143036][ T35] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 403.276933][ T35] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 403.302081][ T35] usb 8-1: USB disconnect, device number 19 [ 403.303671][ T35] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 403.397767][ T43] audit: type=1400 audit(1789264835.258:727): avc: denied { write } for pid=11280 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.574673][T11283] FAULT_INJECTION: forcing a failure. [ 403.574673][T11283] name failslab, interval 1, probability 0, space 0, times 0 [ 403.574714][T11283] CPU: 0 UID: 0 PID: 11283 Comm: syz.0.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.574747][T11283] Tainted: [L]=SOFTLOCKUP [ 403.574756][T11283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 403.574772][T11283] Call Trace: [ 403.574780][T11283] [ 403.574790][T11283] dump_stack_lvl+0x100/0x190 [ 403.574830][T11283] should_fail_ex.cold+0x5/0xa [ 403.574864][T11283] should_failslab+0xc2/0x120 [ 403.574893][T11283] __kmalloc_noprof+0xfc/0x840 [ 403.574917][T11283] ? __list_lru_init+0xd9/0x4b0 [ 403.574952][T11283] __list_lru_init+0xd9/0x4b0 [ 403.574983][T11283] sget_fc+0xac6/0x1f20 [ 403.575011][T11283] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 403.575036][T11283] ? kasan_save_track+0x14/0x30 [ 403.575058][T11283] ? __pfx_set_anon_super_fc+0x10/0x10 [ 403.575093][T11283] ? __pfx_sget_fc+0x10/0x10 [ 403.575114][T11283] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 403.575150][T11283] ? rcu_is_watching+0x13/0xc0 [ 403.575176][T11283] ? cap_capable+0x107/0x430 [ 403.575207][T11283] ? __pfx_proc_fill_super+0x10/0x10 [ 403.575240][T11283] get_tree_nodev+0x28/0x190 [ 403.575264][T11283] vfs_get_tree+0x92/0x320 [ 403.575294][T11283] path_mount+0x7d0/0x24c0 [ 403.575330][T11283] ? __pfx_path_mount+0x10/0x10 [ 403.575361][T11283] ? lockdep_hardirqs_on+0x7d/0x110 [ 403.575391][T11283] ? putname+0xb1/0x110 [ 403.575415][T11283] ? kmem_cache_free+0x127/0x6c0 [ 403.575457][T11283] ? __x64_sys_mount+0x293/0x310 [ 403.575496][T11283] __x64_sys_mount+0x293/0x310 [ 403.575533][T11283] ? __pfx___x64_sys_mount+0x10/0x10 [ 403.575577][T11283] do_syscall_64+0x123/0x790 [ 403.575612][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.575635][T11283] RIP: 0033:0x7fc1f079e159 [ 403.575654][T11283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.575673][T11283] RSP: 002b:00007fc1f15bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 403.575694][T11283] RAX: ffffffffffffffda RBX: 00007fc1f0a25fa0 RCX: 00007fc1f079e159 [ 403.575706][T11283] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 403.575719][T11283] RBP: 00007fc1f083503b R08: 0000000000000000 R09: 0000000000000000 [ 403.575731][T11283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.575742][T11283] R13: 00007fc1f0a26038 R14: 00007fc1f0a25fa0 R15: 00007fffc0885c08 [ 403.575772][T11283] [ 403.582706][ T43] audit: type=1400 audit(1789264835.438:728): avc: denied { mounton } for pid=11281 comm="syz.0.1931" path="/481/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 403.918475][T11291] netlink: 'syz.0.1933': attribute type 4 has an invalid length. [ 403.956629][T11290] netlink: 'syz.0.1933': attribute type 4 has an invalid length. [ 404.005104][T11298] netlink: 'syz.3.1935': attribute type 4 has an invalid length. [ 404.235664][ T5760] Bluetooth: hci0: Opcode 0x2005 failed: -110 [ 404.241809][ T5756] Bluetooth: hci0: command 0x0c1a tx timeout [ 404.242051][ T5760] Bluetooth: hci0: Opcode 0x200b failed: -110 [ 404.391135][ T43] audit: type=1400 audit(1789264836.238:729): avc: denied { write } for pid=11306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.422806][ T1216] Bluetooth: hci4: Frame reassembly failed (-84) [ 404.435563][ T43] audit: type=1326 audit(1789264836.288:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.1932" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc98c99e159 code=0x0 [ 404.554042][T11317] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 404.554102][ T43] audit: type=1400 audit(1789264836.398:731): avc: denied { write } for pid=11315 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.797325][T11312] batman_adv: batadv0: Adding interface: dummy0 [ 404.797349][T11312] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.797387][T11312] batman_adv: batadv0: Interface activated: dummy0 [ 405.095859][T11317] net_ratelimit: 30 callbacks suppressed [ 405.095891][T11317] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 405.097330][T11317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.230148][T11317] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 406.016359][ T43] audit: type=1400 audit(1789264837.868:732): avc: denied { write } for pid=11343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.282579][ T43] audit: type=1400 audit(1789264838.138:733): avc: denied { write } for pid=11349 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.322161][ T5756] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.470996][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 406.769657][ T43] audit: type=1400 audit(1789264838.608:734): avc: denied { write } for pid=11358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.869387][ T5760] Bluetooth: hci1: command 0x0406 tx timeout [ 406.902042][T11305] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 406.902088][T11305] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 406.928415][ T43] audit: type=1400 audit(1789264838.768:735): avc: denied { write } for pid=11363 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.146904][ T43] audit: type=1400 audit(1789264839.008:736): avc: denied { write } for pid=11369 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 407.149159][ T43] audit: type=1400 audit(1789264839.008:737): avc: denied { write } for pid=11367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.237970][T11305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.237995][T11305] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 407.376500][T11305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.376528][T11305] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 407.416167][ T43] audit: type=1400 audit(1789264839.268:738): avc: denied { write } for pid=11373 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.829420][ T30] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 408.009836][ T30] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 408.013349][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.032533][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.032559][ T30] usb 8-1: Product: syz [ 408.032570][ T30] usb 8-1: Manufacturer: syz [ 408.032582][ T30] usb 8-1: SerialNumber: syz [ 408.063284][ T30] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 408.063447][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 87 [ 408.063489][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 408.064768][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 408.064836][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82 [ 408.064890][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 408.064950][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 408.065009][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 85 [ 408.065065][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 5 [ 408.087848][ T43] audit: type=1400 audit(1789264839.938:739): avc: denied { write } for pid=11385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.094159][ T30] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 408.095710][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 83 [ 408.095772][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 408.095822][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 408.095869][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4 [ 408.095919][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 86 [ 408.096070][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 408.130488][ T30] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 408.473335][ T43] audit: type=1400 audit(1789264840.328:740): avc: denied { write } for pid=11394 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.837955][ T30] usb 8-1: USB disconnect, device number 20 [ 408.840731][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 408.849824][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 408.850324][ T30] keyspan 8-1:1.0: device disconnected [ 409.372138][T11305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.372171][T11305] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 409.748272][ T43] audit: type=1400 audit(1789264841.598:741): avc: denied { write } for pid=11417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.357691][T11431] FAULT_INJECTION: forcing a failure. [ 410.357691][T11431] name fail_futex, interval 1, probability 0, space 0, times 0 [ 410.357733][T11431] CPU: 2 UID: 0 PID: 11431 Comm: syz.0.1969 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.357761][T11431] Tainted: [L]=SOFTLOCKUP [ 410.357769][T11431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.357781][T11431] Call Trace: [ 410.357797][T11431] [ 410.357806][T11431] dump_stack_lvl+0x100/0x190 [ 410.357843][T11431] should_fail_ex.cold+0x5/0xa [ 410.357868][T11431] ? __lock_acquire+0x5c0/0x1f40 [ 410.357895][T11431] get_futex_key+0x1d0/0x14f0 [ 410.357927][T11431] ? __pfx_get_futex_key+0x10/0x10 [ 410.357961][T11431] futex_wake+0xf4/0x5e0 [ 410.357997][T11431] ? __pfx_futex_wake+0x10/0x10 [ 410.358040][T11431] do_futex+0x2b2/0x440 [ 410.358068][T11431] ? __pfx_do_futex+0x10/0x10 [ 410.358095][T11431] ? __seccomp_filter+0x896/0x1130 [ 410.358123][T11431] ? rcu_is_watching+0x13/0xc0 [ 410.358151][T11431] ? __do_sys_add_key+0x37d/0x460 [ 410.358184][T11431] __x64_sys_futex+0x34f/0x4d0 [ 410.358217][T11431] ? __pfx___x64_sys_futex+0x10/0x10 [ 410.358257][T11431] do_syscall_64+0x123/0x790 [ 410.358288][T11431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.358336][T11431] RIP: 0033:0x7fc1f079e159 [ 410.358356][T11431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.358378][T11431] RSP: 002b:00007fc1f15bc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 410.358401][T11431] RAX: ffffffffffffffda RBX: 00007fc1f0a25fa8 RCX: 00007fc1f079e159 [ 410.358418][T11431] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc1f0a25fac [ 410.358432][T11431] RBP: 00007fc1f0a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 410.358445][T11431] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 410.358458][T11431] R13: 00007fc1f0a26038 R14: 00007fffc0885b20 R15: 00007fffc0885c08 [ 410.358485][T11431] [ 410.402666][T11435] FAULT_INJECTION: forcing a failure. [ 410.402666][T11435] name failslab, interval 1, probability 0, space 0, times 0 [ 410.402711][T11435] CPU: 3 UID: 0 PID: 11435 Comm: syz.5.1970 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.402743][T11435] Tainted: [L]=SOFTLOCKUP [ 410.402752][T11435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.402766][T11435] Call Trace: [ 410.402774][T11435] [ 410.402782][T11435] dump_stack_lvl+0x100/0x190 [ 410.402821][T11435] should_fail_ex.cold+0x5/0xa [ 410.402866][T11435] should_failslab+0xc2/0x120 [ 410.402896][T11435] __kvmalloc_node_noprof+0x113/0x9b0 [ 410.402919][T11435] ? __pfx___mutex_lock+0x10/0x10 [ 410.402947][T11435] ? nf_hook_entries_grow+0x255/0x870 [ 410.402992][T11435] nf_hook_entries_grow+0x255/0x870 [ 410.403016][T11435] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 410.403052][T11435] __nf_register_net_hook+0x112/0x780 [ 410.403074][T11435] nf_register_net_hook+0xdb/0x170 [ 410.403094][T11435] nf_register_net_hooks+0x5d/0xd0 [ 410.403117][T11435] nf_ct_netns_do_get+0x387/0x610 [ 410.403138][T11435] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 410.403158][T11435] ? lookup_ts_algo+0x148/0x360 [ 410.403187][T11435] nf_ct_netns_get+0x3d/0x160 [ 410.403325][T11435] connmark_tg_check+0x60/0xd0 [ 410.403356][T11435] ? __pfx_connmark_tg_check+0x10/0x10 [ 410.403385][T11435] xt_check_target+0x117/0x1c0 [ 410.403413][T11435] find_check_entry.isra.0+0x79c/0x990 [ 410.403450][T11435] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 410.403487][T11435] ? kasan_quarantine_put+0x104/0x240 [ 410.403513][T11435] ? translate_table+0xaf2/0x1630 [ 410.403540][T11435] ? kfree+0x22b/0x6d0 [ 410.403568][T11435] ? xt_check_table_hooks+0x206/0x330 [ 410.403597][T11435] translate_table+0xbcd/0x1630 [ 410.403637][T11435] ? __pfx_translate_table+0x10/0x10 [ 410.403674][T11435] do_ipt_set_ctl+0x689/0xcf0 [ 410.403703][T11435] ? nf_sockopt_find.isra.0+0x222/0x290 [ 410.403728][T11435] ? nf_sockopt_find.isra.0+0x222/0x290 [ 410.403858][T11435] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 410.403889][T11435] ? __mutex_unlock_slowpath+0x35d/0x930 [ 410.404069][T11435] ? sockopt_release_sock+0x5c/0x70 [ 410.404097][T11435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 410.404134][T11435] ? nf_sockopt_find.isra.0+0x222/0x290 [ 410.404163][T11435] nf_setsockopt+0x8d/0xf0 [ 410.404192][T11435] ip_setsockopt+0xcb/0xf0 [ 410.404225][T11435] tcp_setsockopt+0xa7/0x100 [ 410.404249][T11435] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 410.404283][T11435] do_sock_setsockopt+0xf3/0x1d0 [ 410.404316][T11435] __sys_setsockopt+0x195/0x220 [ 410.404344][T11435] __x64_sys_setsockopt+0xbd/0x160 [ 410.404363][T11435] ? do_syscall_64+0xae/0x790 [ 410.404386][T11435] ? lockdep_hardirqs_on+0x7d/0x110 [ 410.404410][T11435] do_syscall_64+0x123/0x790 [ 410.404437][T11435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.404458][T11435] RIP: 0033:0x7f837d19e159 [ 410.404593][T11435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.404623][T11435] RSP: 002b:00007f837e020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 410.404646][T11435] RAX: ffffffffffffffda RBX: 00007f837d425fa0 RCX: 00007f837d19e159 [ 410.404659][T11435] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 410.404671][T11435] RBP: 00007f837d23503b R08: 0000000000000458 R09: 0000000000000000 [ 410.404683][T11435] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 410.404693][T11435] R13: 00007f837d426038 R14: 00007f837d425fa0 R15: 00007ffddf2664d8 [ 410.404721][T11435] [ 410.405067][T11435] cannot load conntrack support for proto=2 [ 410.901438][T11443] FAULT_INJECTION: forcing a failure. [ 410.901438][T11443] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 410.901471][T11443] CPU: 1 UID: 0 PID: 11443 Comm: syz.0.1972 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.901495][T11443] Tainted: [L]=SOFTLOCKUP [ 410.901501][T11443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.901512][T11443] Call Trace: [ 410.901519][T11443] [ 410.901527][T11443] dump_stack_lvl+0x100/0x190 [ 410.901560][T11443] should_fail_ex.cold+0x5/0xa [ 410.901579][T11443] ? prepare_alloc_pages+0x16d/0x5b0 [ 410.901602][T11443] should_fail_alloc_page+0xeb/0x140 [ 410.901627][T11443] prepare_alloc_pages+0x1f0/0x5b0 [ 410.901654][T11443] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 410.901684][T11443] ? prepare_alloc_pages+0x191/0x5b0 [ 410.901706][T11443] ? is_bpf_text_address+0x94/0x1a0 [ 410.901731][T11443] ? rcu_is_watching+0x13/0xc0 [ 410.901753][T11443] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 410.901782][T11443] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 410.901813][T11443] ? stack_trace_save+0x8e/0xc0 [ 410.901833][T11443] ? __pfx_stack_trace_save+0x10/0x10 [ 410.901847][T11443] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 410.901875][T11443] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 410.901901][T11443] ? is_bpf_text_address+0x94/0x1a0 [ 410.901928][T11443] ? kasan_save_track+0x14/0x30 [ 410.901947][T11443] ? __kasan_slab_alloc+0x89/0x90 [ 410.901966][T11443] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 410.901985][T11443] ? alloc_vmap_area+0x640/0x2bb0 [ 410.902004][T11443] ? __get_vm_area_node+0x1ed/0x350 [ 410.902024][T11443] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 410.902047][T11443] ? vmalloc_user_noprof+0x9e/0xe0 [ 410.902068][T11443] ? security_read_policy+0x105/0x2e0 [ 410.902092][T11443] ? sel_open_policy+0x18c/0x380 [ 410.902117][T11443] ? do_dentry_open+0x6ab/0x14d0 [ 410.902133][T11443] ? vfs_open+0x82/0x3f0 [ 410.902151][T11443] ? path_openat+0x19fa/0x2440 [ 410.902168][T11443] ? do_file_open+0x20e/0x430 [ 410.902187][T11443] ? do_sys_openat2+0x10f/0x1e0 [ 410.902208][T11443] ? __x64_sys_openat+0x12d/0x210 [ 410.902236][T11443] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 410.902259][T11443] ? policy_nodemask+0xed/0x4f0 [ 410.902293][T11443] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 410.902327][T11443] __kasan_populate_vmalloc+0xf0/0x210 [ 410.902353][T11443] alloc_vmap_area+0x95d/0x2bb0 [ 410.902380][T11443] ? kasan_save_track+0x14/0x30 [ 410.902399][T11443] ? __kasan_kmalloc+0xaa/0xb0 [ 410.902419][T11443] ? __pfx_alloc_vmap_area+0x10/0x10 [ 410.902441][T11443] ? __get_vm_area_node+0x124/0x350 [ 410.902465][T11443] __get_vm_area_node+0x1ed/0x350 [ 410.902491][T11443] __vmalloc_node_range_noprof+0x268/0x1420 [ 410.902585][T11443] ? security_read_policy+0x105/0x2e0 [ 410.902613][T11443] ? lock_acquire+0x1d1/0x380 [ 410.902631][T11443] ? sel_open_policy+0x181/0x380 [ 410.902661][T11443] ? security_read_policy+0x105/0x2e0 [ 410.902688][T11443] ? __mutex_lock+0x26c/0x1bd0 [ 410.902714][T11443] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 410.902779][T11443] ? __pfx___mutex_lock+0x10/0x10 [ 410.902807][T11443] ? security_read_policy+0x105/0x2e0 [ 410.902832][T11443] vmalloc_user_noprof+0x9e/0xe0 [ 410.902855][T11443] ? security_read_policy+0x105/0x2e0 [ 410.902881][T11443] security_read_policy+0x105/0x2e0 [ 410.902905][T11443] ? __pfx_security_read_policy+0x10/0x10 [ 410.902929][T11443] ? sel_open_policy+0x15e/0x380 [ 410.902959][T11443] sel_open_policy+0x18c/0x380 [ 410.902989][T11443] do_dentry_open+0x6ab/0x14d0 [ 410.903008][T11443] ? __pfx_sel_open_policy+0x10/0x10 [ 410.903040][T11443] vfs_open+0x82/0x3f0 [ 410.903066][T11443] path_openat+0x19fa/0x2440 [ 410.903092][T11443] ? __pfx_path_openat+0x10/0x10 [ 410.903120][T11443] do_file_open+0x20e/0x430 [ 410.903145][T11443] ? __pfx_do_file_open+0x10/0x10 [ 410.903184][T11443] ? _raw_spin_unlock+0x28/0x50 [ 410.903203][T11443] ? alloc_fd+0x471/0x7a0 [ 410.903232][T11443] do_sys_openat2+0x10f/0x1e0 [ 410.903257][T11443] ? __pfx_do_sys_openat2+0x10/0x10 [ 410.903289][T11443] __x64_sys_openat+0x12d/0x210 [ 410.903313][T11443] ? __pfx___x64_sys_openat+0x10/0x10 [ 410.903345][T11443] do_syscall_64+0x123/0x790 [ 410.903370][T11443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.903391][T11443] RIP: 0033:0x7fc1f079e159 [ 410.903422][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.903439][T11443] RSP: 002b:00007fc1f15bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 410.903459][T11443] RAX: ffffffffffffffda RBX: 00007fc1f0a25fa0 RCX: 00007fc1f079e159 [ 410.903471][T11443] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00000000ffffff9c [ 410.903482][T11443] RBP: 00007fc1f083503b R08: 0000000000000000 R09: 0000000000000000 [ 410.903492][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.903503][T11443] R13: 00007fc1f0a26038 R14: 00007fc1f0a25fa0 R15: 00007fffc0885c08 [ 410.903527][T11443] [ 410.957055][T11443] syz.0.1972: vmalloc error: size 280859, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 410.957142][T11443] CPU: 1 UID: 0 PID: 11443 Comm: syz.0.1972 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.957167][T11443] Tainted: [L]=SOFTLOCKUP [ 410.957174][T11443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.957186][T11443] Call Trace: [ 410.957193][T11443] [ 410.957235][T11443] dump_stack_lvl+0x100/0x190 [ 410.957269][T11443] warn_alloc.cold+0x9e/0xb2 [ 410.957300][T11443] ? __pfx_warn_alloc+0x10/0x10 [ 410.957329][T11443] ? lockdep_hardirqs_on+0x7d/0x110 [ 410.957355][T11443] ? __get_vm_area_node+0x2f0/0x350 [ 410.957384][T11443] ? __get_vm_area_node+0x22b/0x350 [ 410.957410][T11443] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 410.957436][T11443] ? lock_acquire+0x1d1/0x380 [ 410.957454][T11443] ? sel_open_policy+0x181/0x380 [ 410.957483][T11443] ? security_read_policy+0x105/0x2e0 [ 410.957510][T11443] ? __mutex_lock+0x26c/0x1bd0 [ 410.957530][T11443] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 410.957557][T11443] ? __pfx___mutex_lock+0x10/0x10 [ 410.957580][T11443] ? security_read_policy+0x105/0x2e0 [ 410.957604][T11443] vmalloc_user_noprof+0x9e/0xe0 [ 410.957625][T11443] ? security_read_policy+0x105/0x2e0 [ 410.957650][T11443] security_read_policy+0x105/0x2e0 [ 410.957673][T11443] ? __pfx_security_read_policy+0x10/0x10 [ 410.957697][T11443] ? sel_open_policy+0x15e/0x380 [ 410.957726][T11443] sel_open_policy+0x18c/0x380 [ 410.957754][T11443] do_dentry_open+0x6ab/0x14d0 [ 410.957773][T11443] ? __pfx_sel_open_policy+0x10/0x10 [ 410.957803][T11443] vfs_open+0x82/0x3f0 [ 410.957829][T11443] path_openat+0x19fa/0x2440 [ 410.957853][T11443] ? __pfx_path_openat+0x10/0x10 [ 410.957880][T11443] do_file_open+0x20e/0x430 [ 410.957902][T11443] ? __pfx_do_file_open+0x10/0x10 [ 410.957939][T11443] ? _raw_spin_unlock+0x28/0x50 [ 410.957957][T11443] ? alloc_fd+0x471/0x7a0 [ 410.957985][T11443] do_sys_openat2+0x10f/0x1e0 [ 410.958008][T11443] ? __pfx_do_sys_openat2+0x10/0x10 [ 410.958040][T11443] __x64_sys_openat+0x12d/0x210 [ 410.958064][T11443] ? __pfx___x64_sys_openat+0x10/0x10 [ 410.958098][T11443] do_syscall_64+0x123/0x790 [ 410.958124][T11443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.958142][T11443] RIP: 0033:0x7fc1f079e159 [ 410.958158][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.958173][T11443] RSP: 002b:00007fc1f15bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 410.958190][T11443] RAX: ffffffffffffffda RBX: 00007fc1f0a25fa0 RCX: 00007fc1f079e159 [ 410.958200][T11443] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00000000ffffff9c [ 410.958213][T11443] RBP: 00007fc1f083503b R08: 0000000000000000 R09: 0000000000000000 [ 410.958244][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.958257][T11443] R13: 00007fc1f0a26038 R14: 00007fc1f0a25fa0 R15: 00007fffc0885c08 [ 410.958281][T11443] [ 410.958332][T11443] Mem-Info: [ 410.958342][T11443] active_anon:46257 inactive_anon:10809 isolated_anon:0 [ 410.958342][T11443] active_file:635 inactive_file:44067 isolated_file:0 [ 410.958342][T11443] unevictable:1000 dirty:91 writeback:0 [ 410.958342][T11443] slab_reclaimable:9025 slab_unreclaimable:76644 [ 410.958342][T11443] mapped:24820 shmem:47292 pagetables:1848 [ 410.958342][T11443] sec_pagetables:301 bounce:0 [ 410.958342][T11443] kernel_misc_reclaimable:0 [ 410.958342][T11443] free:385794 free_pcp:10645 free_cma:0 [ 410.958389][T11443] Node 0 active_anon:132336kB inactive_anon:43228kB active_file:2540kB inactive_file:173736kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99272kB dirty:364kB writeback:0kB shmem:134600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14720kB pagetables:6632kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 410.958434][T11443] Node 1 active_anon:52692kB inactive_anon:8kB active_file:0kB inactive_file:2532kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:54568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:760kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 410.958475][T11443] Node 0 DMA free:5384kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1260kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:304kB local_pcp:88kB free_cma:0kB [ 410.958516][T11443] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 410.958542][T11443] Node 0 DMA32 free:33944kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:131076kB inactive_anon:43228kB active_file:2540kB inactive_file:173736kB unevictable:2000kB writepending:364kB zspages:0kB present:2080628kB managed:1253292kB mlocked:0kB bounce:0kB free_pcp:29132kB local_pcp:7192kB free_cma:0kB [ 410.958719][T11443] lowmem_reserve[]: 0 0 0 0 0 [ 410.958755][T11443] Node 1 Normal free:1503848kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52692kB inactive_anon:8kB active_file:0kB inactive_file:2532kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:13144kB local_pcp:0kB free_cma:0kB [ 410.958802][T11443] lowmem_reserve[]: 0 0 0 0 0 [ 410.958825][T11443] Node 0 DMA: 7*4kB (UM) 6*8kB (U) 3*16kB (M) 2*32kB (U) 3*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 1*4096kB (U) = 5372kB [ 410.959036][T11443] Node 0 DMA32: 262*4kB (UME) 61*8kB (UE) 20*16kB (UE) 40*32kB (UME) 48*64kB (UME) 32*128kB (UME) 10*256kB (UE) 3*512kB (U) 5*1024kB (UM) 5*2048kB (UM) 1*4096kB (M) = 33856kB [ 410.959162][T11443] Node 1 Normal: 223*4kB (UME) 174*8kB (UME) 188*16kB (UME) 146*32kB (UME) 84*64kB (UME) 75*128kB (UME) 55*256kB (UM) 43*512kB (UM) 25*1024kB (UME) 14*2048kB (UME) 339*4096kB (UM) = 1503852kB [ 410.959303][T11443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.959318][T11443] Node 0 hugepages_total=27 hugepages_free=27 hugepages_surp=0 hugepages_size=2048kB [ 410.959331][T11443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.959344][T11443] Node 1 hugepages_total=33 hugepages_free=33 hugepages_surp=0 hugepages_size=2048kB [ 410.959356][T11443] 91991 total pagecache pages [ 410.959362][T11443] 1 pages in swap cache [ 410.959368][T11443] Free swap = 124992kB [ 410.959373][T11443] Total swap = 124996kB [ 410.959380][T11443] 1048443 pages RAM [ 410.959385][T11443] 0 pages HighMem/MovableOnly [ 410.959390][T11443] 285810 pages reserved [ 410.959395][T11443] 0 pages cma reserved [ 411.081299][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 411.081317][ T43] audit: type=1400 audit(1789264842.938:743): avc: denied { write } for pid=11442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.167219][ T7953] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 411.319203][ T7953] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 411.331168][ T7953] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.331195][ T7953] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 411.331226][ T7953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.386176][ T43] audit: type=1400 audit(1789264843.218:744): avc: denied { write } for pid=11449 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.592538][T11440] FAULT_INJECTION: forcing a failure. [ 411.592538][T11440] name failslab, interval 1, probability 0, space 0, times 0 [ 411.592577][T11440] CPU: 1 UID: 0 PID: 11440 Comm: syz.3.1971 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.592606][T11440] Tainted: [L]=SOFTLOCKUP [ 411.592614][T11440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.592625][T11440] Call Trace: [ 411.592632][T11440] [ 411.592639][T11440] dump_stack_lvl+0x100/0x190 [ 411.592675][T11440] should_fail_ex.cold+0x5/0xa [ 411.592701][T11440] should_failslab+0xc2/0x120 [ 411.592727][T11440] kmem_cache_alloc_noprof+0x92/0x6a0 [ 411.592751][T11440] ? __kernfs_new_node+0xd2/0xa10 [ 411.592783][T11440] __kernfs_new_node+0xd2/0xa10 [ 411.592820][T11440] ? __pfx___kernfs_new_node+0x10/0x10 [ 411.592850][T11440] ? lock_acquire+0x1d1/0x380 [ 411.592871][T11440] ? kernfs_root+0x23/0x2a0 [ 411.592895][T11440] ? find_held_lock+0x2b/0x80 [ 411.592920][T11440] ? kernfs_root+0xee/0x2a0 [ 411.592943][T11440] ? kernfs_root+0xee/0x2a0 [ 411.592972][T11440] kernfs_new_node+0x117/0x150 [ 411.593003][T11440] __kernfs_create_file+0x53/0x350 [ 411.593027][T11440] sysfs_add_file_mode_ns+0x207/0x3c0 [ 411.593056][T11440] sysfs_create_file_ns+0x145/0x1e0 [ 411.593080][T11440] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 411.593102][T11440] ? module_add_driver+0x1e2/0x420 [ 411.593129][T11440] ? sysfs_do_create_link_sd+0xbb/0x140 [ 411.593159][T11440] driver_create_file+0x4a/0x70 [ 411.593185][T11440] bus_add_driver+0x446/0x5b0 [ 411.609316][T11440] driver_register+0x1e2/0x360 [ 411.609345][T11440] ? rcu_is_watching+0x13/0xc0 [ 411.609374][T11440] usb_gadget_register_driver_owner+0x132/0x210 [ 411.609401][T11440] raw_ioctl+0x1a85/0x2b80 [ 411.609426][T11440] ? __pfx_raw_ioctl+0x10/0x10 [ 411.609444][T11440] ? selinux_file_ioctl+0x13b/0x290 [ 411.609464][T11440] ? selinux_file_ioctl+0xb6/0x290 [ 411.609487][T11440] ? __pfx_raw_ioctl+0x10/0x10 [ 411.609506][T11440] __x64_sys_ioctl+0x18e/0x210 [ 411.609529][T11440] do_syscall_64+0x123/0x790 [ 411.609559][T11440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.609578][T11440] RIP: 0033:0x7fd9d339ddeb [ 411.609598][T11440] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 411.609617][T11440] RSP: 002b:00007fd9d15f3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.609636][T11440] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd9d339ddeb [ 411.609649][T11440] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 411.609662][T11440] RBP: 00007fd9d15f4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 411.609674][T11440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.609684][T11440] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000868 [ 411.609708][T11440] [ 411.647766][T11440] bus_add_driver: add_bind_files(raw-gadget.1) failed [ 411.647951][T11440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.648246][T11440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.654952][ T2672] usb 8-1: USB disconnect, device number 21 [ 411.679756][ T43] audit: type=1400 audit(1789264843.538:745): avc: denied { ioctl } for pid=11455 comm="syz.1.1976" path="socket:[37410]" dev="sockfs" ino=37410 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 411.829034][ T43] audit: type=1400 audit(1789264843.668:746): avc: denied { write } for pid=11453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.896274][ T43] audit: type=1400 audit(1789264843.748:747): avc: denied { watch_mount } for pid=11463 comm="syz.5.1986" path="/310" dev="tmpfs" ino=1674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 412.069240][ T43] audit: type=1400 audit(1789264843.928:748): avc: denied { write } for pid=11466 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.814750][T11492] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1984'. [ 412.814771][T11492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1984'. [ 413.548350][ T43] audit: type=1400 audit(1789264845.398:749): avc: denied { create } for pid=11515 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.616919][ T43] audit: type=1400 audit(1789264845.478:750): avc: denied { bind } for pid=11515 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.618585][ T43] audit: type=1400 audit(1789264845.478:751): avc: denied { listen } for pid=11515 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.619307][ T43] audit: type=1400 audit(1789264845.478:752): avc: denied { write } for pid=11515 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.950736][T11524] xt_hashlimit: size too large, truncated to 1048576 [ 414.641925][T11531] FAULT_INJECTION: forcing a failure. [ 414.641925][T11531] name failslab, interval 1, probability 0, space 0, times 0 [ 414.641965][T11531] CPU: 2 UID: 0 PID: 11531 Comm: syz.5.2003 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.641995][T11531] Tainted: [L]=SOFTLOCKUP [ 414.642004][T11531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.642017][T11531] Call Trace: [ 414.642024][T11531] [ 414.642032][T11531] dump_stack_lvl+0x100/0x190 [ 414.642072][T11531] should_fail_ex.cold+0x5/0xa [ 414.642101][T11531] should_failslab+0xc2/0x120 [ 414.642130][T11531] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 414.642156][T11531] ? kasprintf+0xc7/0x100 [ 414.642183][T11531] kvasprintf+0xbc/0x150 [ 414.642204][T11531] ? __pfx_kvasprintf+0x10/0x10 [ 414.642236][T11531] kasprintf+0xc7/0x100 [ 414.642257][T11531] ? __pfx_kasprintf+0x10/0x10 [ 414.642278][T11531] ? find_held_lock+0x2b/0x80 [ 414.642306][T11531] ? simple_xattr_alloc+0x6c/0xd0 [ 414.642332][T11531] shmem_initxattrs+0x1b8/0x650 [ 414.642360][T11531] security_inode_init_security+0x242/0x370 [ 414.642390][T11531] ? __pfx_shmem_initxattrs+0x10/0x10 [ 414.642409][T11531] ? __pfx_security_inode_init_security+0x10/0x10 [ 414.642438][T11531] shmem_mknod+0x2ce/0x480 [ 414.642459][T11531] ? __pfx_may_create+0x10/0x10 [ 414.642484][T11531] ? __pfx_shmem_mknod+0x10/0x10 [ 414.642508][T11531] ? inode_permission+0x374/0x620 [ 414.642542][T11531] shmem_mkdir+0x31/0x80 [ 414.642565][T11531] vfs_mkdir+0x364/0x850 [ 414.642599][T11531] filename_mkdirat+0x48b/0x5e0 [ 414.642628][T11531] ? __pfx_filename_mkdirat+0x10/0x10 [ 414.642653][T11531] ? strncpy_from_user+0x19d/0x2d0 [ 414.642679][T11531] ? do_getname+0x191/0x390 [ 414.642711][T11531] __x64_sys_mkdirat+0x89/0xc0 [ 414.642737][T11531] do_syscall_64+0x123/0x790 [ 414.642776][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.642798][T11531] RIP: 0033:0x7f837d19e159 [ 414.642817][T11531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.642836][T11531] RSP: 002b:00007f837e020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 414.642858][T11531] RAX: ffffffffffffffda RBX: 00007f837d425fa0 RCX: 00007f837d19e159 [ 414.642872][T11531] RDX: 00000000000001fe RSI: 0000200000000080 RDI: ffffffffffffff9c [ 414.642885][T11531] RBP: 00007f837d23503b R08: 0000000000000000 R09: 0000000000000000 [ 414.642896][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.642907][T11531] R13: 00007f837d426038 R14: 00007f837d425fa0 R15: 00007ffddf2664d8 [ 414.642935][T11531] [ 415.206808][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'. [ 415.206834][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'. [ 417.237575][T11578] IPVS: persistence engine module ip_vs_pe_si not found [ 417.355596][T11582] FAULT_INJECTION: forcing a failure. [ 417.355596][T11582] name failslab, interval 1, probability 0, space 0, times 0 [ 417.355641][T11582] CPU: 2 UID: 0 PID: 11582 Comm: syz.5.2023 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.355676][T11582] Tainted: [L]=SOFTLOCKUP [ 417.355684][T11582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.355698][T11582] Call Trace: [ 417.355707][T11582] [ 417.355717][T11582] dump_stack_lvl+0x100/0x190 [ 417.355757][T11582] should_fail_ex.cold+0x5/0xa [ 417.355790][T11582] should_failslab+0xc2/0x120 [ 417.355820][T11582] __kmalloc_cache_noprof+0x91/0x6d0 [ 417.356006][T11582] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 417.356040][T11582] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 417.356072][T11582] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 417.356105][T11582] selinux_socket_post_create+0x368/0x7e0 [ 417.356149][T11582] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 417.356187][T11582] ? udpv6_init_sock+0x384/0x450 [ 417.356224][T11582] ? inet6_create+0xb34/0x12b0 [ 417.356250][T11582] security_socket_post_create+0xaf/0x270 [ 417.356301][T11582] __sock_create+0x70b/0x860 [ 417.356343][T11582] udp_sock_create6+0xc7/0x6a0 [ 417.356378][T11582] ? __pfx_udp_sock_create6+0x10/0x10 [ 417.356416][T11582] ? lock_acquire+0x1d1/0x380 [ 417.356448][T11582] rxe_setup_udp_tunnel.constprop.0+0x1e6/0x7e0 [ 417.356483][T11582] ? __pfx_rxe_setup_udp_tunnel.constprop.0+0x10/0x10 [ 417.356527][T11582] ? lock_acquire+0x1d1/0x380 [ 417.356550][T11582] ? rxe_ns_pernet_sk6+0x36/0x270 [ 417.356587][T11582] ? rxe_ns_pernet_sk6+0xd0/0x270 [ 417.356626][T11582] rxe_net_init+0x1c2/0x2a0 [ 417.356660][T11582] rxe_newlink+0x6d/0x160 [ 417.356686][T11582] nldev_newlink+0x3b0/0x630 [ 417.356738][T11582] ? __pfx_nldev_newlink+0x10/0x10 [ 417.356971][T11582] ? cred_has_capability.isra.0+0x186/0x300 [ 417.357097][T11582] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 417.357125][T11582] ? lock_acquire+0x1d1/0x380 [ 417.357161][T11582] ? cap_capable+0x107/0x430 [ 417.357225][T11582] ? security_capable+0x80/0x260 [ 417.357417][T11582] ? ns_capable+0xd2/0xf0 [ 417.357440][T11582] ? __pfx_nldev_newlink+0x10/0x10 [ 417.357464][T11582] rdma_nl_rcv_msg+0x392/0x6f0 [ 417.357520][T11582] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 417.357562][T11582] ? __lock_acquire+0x5c0/0x1f40 [ 417.357588][T11582] ? __netlink_lookup+0xa9/0x900 [ 417.357616][T11582] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 417.357660][T11582] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 417.357711][T11582] ? netlink_deliver_tap+0x1ae/0xcc0 [ 417.357741][T11582] netlink_unicast+0x585/0x850 [ 417.357769][T11582] ? __pfx_netlink_unicast+0x10/0x10 [ 417.357803][T11582] netlink_sendmsg+0x8b0/0xda0 [ 417.357834][T11582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.357863][T11582] ? selinux_socket_sendmsg+0x198/0x2f0 [ 417.357894][T11582] ____sys_sendmsg+0xa4d/0xbe0 [ 417.357927][T11582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.357956][T11582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.358006][T11582] ___sys_sendmsg+0x190/0x1e0 [ 417.358044][T11582] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.358079][T11582] ? futex_wait+0x11e/0x370 [ 417.358113][T11582] ? find_held_lock+0x2b/0x80 [ 417.358163][T11582] __sys_sendmsg+0x160/0x210 [ 417.358192][T11582] ? __pfx___sys_sendmsg+0x10/0x10 [ 417.358236][T11582] do_syscall_64+0x123/0x790 [ 417.358279][T11582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.358307][T11582] RIP: 0033:0x7f837d19e159 [ 417.358329][T11582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.358351][T11582] RSP: 002b:00007f837e020028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.358378][T11582] RAX: ffffffffffffffda RBX: 00007f837d425fa0 RCX: 00007f837d19e159 [ 417.358393][T11582] RDX: 0000000000000810 RSI: 00002000000000c0 RDI: 0000000000000004 [ 417.358409][T11582] RBP: 00007f837d23503b R08: 0000000000000000 R09: 0000000000000000 [ 417.358424][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.358439][T11582] R13: 00007f837d426038 R14: 00007f837d425fa0 R15: 00007ffddf2664d8 [ 417.358472][T11582] [ 417.362212][T11582] rdma_rxe: Failed to create IPv6 UDP tunnel [ 417.562539][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 417.562559][ T43] audit: type=1400 audit(1789264849.418:754): avc: denied { write } for pid=11583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.685777][ T43] audit: type=1400 audit(1789264849.548:755): avc: denied { write } for pid=11589 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.047947][T11598] overlayfs: failed to clone upperpath [ 418.092230][ T43] audit: type=1400 audit(1789264849.948:756): avc: denied { write } for pid=11592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.246874][T11605] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 418.280965][ T43] audit: type=1400 audit(1789264850.128:757): avc: denied { write } for pid=11601 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.329987][T11608] overlayfs: failed to clone upperpath [ 418.487117][T11613] netlink: 'syz.5.2030': attribute type 1 has an invalid length. [ 418.523220][T11613] 8021q: adding VLAN 0 to HW filter on device bond5 [ 418.616227][ T43] audit: type=1400 audit(1789264850.468:758): avc: denied { write } for pid=11612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.685515][T11613] bond5: (slave veth0_to_bond): making interface the new active one [ 418.770043][T11613] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 418.797037][T11619] bond5: entered promiscuous mode [ 418.797061][T11619] veth0_to_bond: entered promiscuous mode [ 418.797300][T11619] bond5: entered allmulticast mode [ 418.797314][T11619] veth0_to_bond: entered allmulticast mode [ 418.934081][ T43] audit: type=1400 audit(1789264850.788:759): avc: denied { write } for pid=11621 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.180974][T11632] Driver unsupported XDP return value 0 on prog (id 142) dev N/A, expect packet loss! [ 419.293682][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'. [ 419.740986][T11654] fuse: fd is not a fuse device [ 420.464242][T11669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=11669 comm=syz.1.2046 [ 421.085442][ T43] audit: type=1400 audit(1789264852.918:760): avc: denied { associate } for pid=11681 comm="syz.0.2051" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 421.111832][T11686] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2052'. [ 421.111861][T11686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2052'. [ 421.505799][T11692] FAULT_INJECTION: forcing a failure. [ 421.505799][T11692] name failslab, interval 1, probability 0, space 0, times 0 [ 421.505842][T11692] CPU: 1 UID: 0 PID: 11692 Comm: syz.0.2054 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.505873][T11692] Tainted: [L]=SOFTLOCKUP [ 421.505881][T11692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.505894][T11692] Call Trace: [ 421.505902][T11692] [ 421.505911][T11692] dump_stack_lvl+0x100/0x190 [ 421.505952][T11692] should_fail_ex.cold+0x5/0xa [ 421.505984][T11692] should_failslab+0xc2/0x120 [ 421.506014][T11692] __kmalloc_cache_node_noprof+0x94/0x720 [ 421.506040][T11692] ? kasan_save_free_info+0x3b/0x70 [ 421.506071][T11692] ? mempool_create_node_noprof+0xb9/0x1b0 [ 421.506141][T11692] ? __pfx_msgpool_free+0x10/0x10 [ 421.506178][T11692] mempool_create_node_noprof+0xb9/0x1b0 [ 421.506219][T11692] ? __pfx_msgpool_alloc+0x10/0x10 [ 421.506262][T11692] ceph_msgpool_init+0xdc/0x1d0 [ 421.506299][T11692] ceph_osdc_init+0x4f1/0xa00 [ 421.506329][T11692] ceph_create_client+0x281/0x370 [ 421.506354][T11692] ceph_get_tree+0x1a4/0x1fd0 [ 421.506387][T11692] ? bpf_lsm_capable+0x9/0x10 [ 421.506423][T11692] ? security_capable+0x80/0x260 [ 421.506464][T11692] vfs_get_tree+0x92/0x320 [ 421.506502][T11692] vfs_cmd_create+0xd7/0x2a0 [ 421.506530][T11692] __do_sys_fsconfig+0x55a/0xcb0 [ 421.506557][T11692] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 421.506600][T11692] do_syscall_64+0x123/0x790 [ 421.506652][T11692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.506678][T11692] RIP: 0033:0x7fc1f079e159 [ 421.506700][T11692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.506721][T11692] RSP: 002b:00007fc1f15bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 421.506744][T11692] RAX: ffffffffffffffda RBX: 00007fc1f0a25fa0 RCX: 00007fc1f079e159 [ 421.506759][T11692] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 421.506772][T11692] RBP: 00007fc1f083503b R08: 0000000000000000 R09: 0000000000000000 [ 421.506785][T11692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.506798][T11692] R13: 00007fc1f0a26038 R14: 00007fc1f0a25fa0 R15: 00007fffc0885c08 [ 421.506829][T11692] [ 422.764150][T11719] FAULT_INJECTION: forcing a failure. [ 422.764150][T11719] name failslab, interval 1, probability 0, space 0, times 0 [ 422.764187][T11719] CPU: 2 UID: 0 PID: 11719 Comm: syz.3.2065 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.764212][T11719] Tainted: [L]=SOFTLOCKUP [ 422.764219][T11719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 422.764230][T11719] Call Trace: [ 422.764236][T11719] [ 422.764243][T11719] dump_stack_lvl+0x100/0x190 [ 422.764278][T11719] should_fail_ex.cold+0x5/0xa [ 422.764315][T11719] should_failslab+0xc2/0x120 [ 422.764341][T11719] __kmalloc_cache_noprof+0x91/0x6d0 [ 422.764369][T11719] ? resv_map_alloc+0x7e/0x400 [ 422.764396][T11719] resv_map_alloc+0x7e/0x400 [ 422.764417][T11719] hugetlbfs_get_inode+0x385/0x700 [ 422.764443][T11719] hugetlb_file_setup+0x15b/0x5b0 [ 422.764470][T11719] ksys_mmap_pgoff+0x242/0x610 [ 422.764497][T11719] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 422.764518][T11719] ? xfd_validate_state+0x129/0x190 [ 422.764542][T11719] __x64_sys_mmap+0x125/0x190 [ 422.764567][T11719] do_syscall_64+0x123/0x790 [ 422.764596][T11719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.764618][T11719] RIP: 0033:0x7fd9d339e159 [ 422.764634][T11719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.764652][T11719] RSP: 002b:00007fd9d15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 422.764671][T11719] RAX: ffffffffffffffda RBX: 00007fd9d3625fa0 RCX: 00007fd9d339e159 [ 422.764682][T11719] RDX: 0000000001000004 RSI: 0000000000800000 RDI: 0000200000800000 [ 422.764692][T11719] RBP: 00007fd9d343503b R08: ffffffffffffffff R09: 0000000000000000 [ 422.764704][T11719] R10: 0000000000042031 R11: 0000000000000246 R12: 0000000000000000 [ 422.764713][T11719] R13: 00007fd9d3626038 R14: 00007fd9d3625fa0 R15: 00007ffe363e4678 [ 422.764736][T11719] [ 423.351375][T11728] hsr_slave_0: left promiscuous mode [ 423.362114][ T43] audit: type=1400 audit(1789264855.218:761): avc: denied { open } for pid=11737 comm="syz.5.2071" path="/dev/ptyqf" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 423.380643][ T43] audit: type=1400 audit(1789264855.238:762): avc: denied { write } for pid=11729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.381614][T11728] hsr_slave_1: left promiscuous mode [ 423.414268][T11739] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2068'. [ 423.518687][T11736] bond0: entered promiscuous mode [ 423.519142][T11736] bond_slave_0: entered promiscuous mode [ 423.519413][T11736] bond_slave_1: entered promiscuous mode [ 423.519627][T11736] batadv0: entered promiscuous mode [ 423.567001][T11736] gretap0: entered promiscuous mode [ 423.589885][T11736] dummy0: entered promiscuous mode [ 423.618550][T11736] dummy0: left promiscuous mode [ 423.653912][T11736] bond0: left promiscuous mode [ 423.653941][T11736] bond_slave_0: left promiscuous mode [ 423.654182][T11736] bond_slave_1: left promiscuous mode [ 423.654357][T11736] batadv0: left promiscuous mode [ 423.729942][T11736] gretap0: left promiscuous mode [ 423.830860][T11739] batman_adv: batadv0: Interface deactivated: dummy0 [ 423.833106][ T43] audit: type=1400 audit(1789264855.688:763): avc: denied { write } for pid=11744 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.863540][T11739] batman_adv: batadv0: Removing interface: dummy0 [ 425.054279][T11765] FAULT_INJECTION: forcing a failure. [ 425.054279][T11765] name failslab, interval 1, probability 0, space 0, times 0 [ 425.054314][T11765] CPU: 1 UID: 0 PID: 11765 Comm: syz.5.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.054339][T11765] Tainted: [L]=SOFTLOCKUP [ 425.054344][T11765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 425.054354][T11765] Call Trace: [ 425.054361][T11765] [ 425.054368][T11765] dump_stack_lvl+0x100/0x190 [ 425.054399][T11765] should_fail_ex.cold+0x5/0xa [ 425.054423][T11765] should_failslab+0xc2/0x120 [ 425.054444][T11765] kmem_cache_alloc_noprof+0x92/0x6a0 [ 425.054460][T11765] ? __asan_memcpy+0x3c/0x60 [ 425.054474][T11765] ? __kernfs_new_node+0xd2/0xa10 [ 425.054502][T11765] __kernfs_new_node+0xd2/0xa10 [ 425.054529][T11765] ? __pfx___kernfs_new_node+0x10/0x10 [ 425.054555][T11765] ? lock_acquire+0x1d1/0x380 [ 425.054572][T11765] ? kernfs_root+0x23/0x2a0 [ 425.054624][T11765] ? find_held_lock+0x2b/0x80 [ 425.054648][T11765] ? kernfs_root+0xee/0x2a0 [ 425.054667][T11765] ? kernfs_root+0xee/0x2a0 [ 425.054693][T11765] kernfs_create_dir_ns+0xa6/0x2b0 [ 425.054721][T11765] sysfs_create_dir_ns+0x13a/0x2b0 [ 425.054741][T11765] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 425.054761][T11765] ? find_held_lock+0x2b/0x80 [ 425.054782][T11765] ? kobject_add_internal+0x25f/0x930 [ 425.054799][T11765] ? kobject_add_internal+0x25f/0x930 [ 425.054819][T11765] ? do_raw_spin_unlock+0x145/0x1e0 [ 425.054853][T11765] kobject_add_internal+0x2c8/0x930 [ 425.054875][T11765] kobject_init_and_add+0x121/0x180 [ 425.054892][T11765] ? __pfx_kobject_init_and_add+0x10/0x10 [ 425.054910][T11765] ? __kasan_kmalloc+0xaa/0xb0 [ 425.054929][T11765] ? lockdep_init_map_type+0x5c/0x250 [ 425.054948][T11765] ? __raw_spin_lock_init+0x3a/0x110 [ 425.054970][T11765] bus_add_driver+0x186/0x5b0 [ 425.054990][T11765] driver_register+0x1e2/0x360 [ 425.055010][T11765] ? rcu_is_watching+0x13/0xc0 [ 425.055034][T11765] usb_gadget_register_driver_owner+0x132/0x210 [ 425.055054][T11765] raw_ioctl+0x1a85/0x2b80 [ 425.055076][T11765] ? __pfx_raw_ioctl+0x10/0x10 [ 425.055091][T11765] ? selinux_file_ioctl+0x13b/0x290 [ 425.055108][T11765] ? selinux_file_ioctl+0xb6/0x290 [ 425.055129][T11765] ? __pfx_raw_ioctl+0x10/0x10 [ 425.055147][T11765] __x64_sys_ioctl+0x18e/0x210 [ 425.055165][T11765] do_syscall_64+0x123/0x790 [ 425.055189][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.055208][T11765] RIP: 0033:0x7f837d19ddeb [ 425.055223][T11765] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 425.055239][T11765] RSP: 002b:00007f837e01df00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.055257][T11765] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f837d19ddeb [ 425.055267][T11765] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 425.055277][T11765] RBP: 00007f837e01efd0 R08: 0000000000000001 R09: 00000000ffffffff [ 425.055286][T11765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.055295][T11765] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.055317][T11765] [ 425.055417][T11765] kobject: kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers) [ 425.055449][T11765] UDC core: USB Raw Gadget: driver registration failed: -12 [ 425.055464][T11765] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 425.719669][ T43] audit: type=1400 audit(1789264857.578:764): avc: denied { read } for pid=11766 comm="syz.3.2079" path="socket:[36479]" dev="sockfs" ino=36479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 425.917522][ T43] audit: type=1400 audit(1789264857.748:765): avc: denied { cmd } for pid=11769 comm="syz.5.2080" path="socket:[39024]" dev="sockfs" ino=39024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 426.491343][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2085'. [ 428.227927][ T43] audit: type=1400 audit(1789264860.078:766): avc: denied { write } for pid=11824 comm="syz.5.2098" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 428.329249][ T43] audit: type=1326 audit(1789264860.178:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.5.2098" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f837d19e159 code=0x0 [ 428.632843][T11836] fuse: fd is not a fuse device [ 428.933691][T11847] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2106'. [ 428.933714][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2106'. [ 429.855842][T11862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.879183][T11862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.199284][ T43] audit: type=1400 audit(1789264862.048:768): avc: denied { create } for pid=11859 comm="syz.5.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 430.947132][T11882] syzkaller0: entered promiscuous mode [ 430.947152][T11882] syzkaller0: entered allmulticast mode [ 432.649543][ T43] audit: type=1800 audit(1789264864.498:769): pid=11921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2138" name="file0" dev="overlay" ino=2816 res=0 errno=0 [ 433.016711][T11931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11931 comm=syz.3.2142 [ 433.017537][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2142'. [ 433.033362][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2141'. [ 433.198604][ T43] audit: type=1400 audit(1789264865.048:770): avc: denied { mounton } for pid=11933 comm="syz.5.2144" path="/bus" dev="hugetlbfs" ino=39350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 433.214994][T11935] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 433.215017][T11935] overlayfs: failed to set xattr on upper [ 433.215024][T11935] overlayfs: ...falling back to redirect_dir=nofollow. [ 433.215030][T11935] overlayfs: ...falling back to index=off. [ 433.215036][T11935] overlayfs: ...falling back to uuid=null. [ 433.224370][T11935] overlayfs: maximum fs stacking depth exceeded [ 433.238150][T11938] overlayfs: failed to clone upperpath [ 433.294818][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2147'. [ 434.363364][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 434.363407][T11971] netlink: 'syz.3.2159': attribute type 30 has an invalid length. [ 434.363422][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 434.426422][T11969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2158'. [ 434.500133][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 434.500174][T11971] netlink: 'syz.3.2159': attribute type 30 has an invalid length. [ 434.500191][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 434.757742][ T43] audit: type=1400 audit(1789264866.588:771): avc: denied { watch watch_reads } for pid=11975 comm="syz.1.2160" path="/637/file0" dev="tmpfs" ino=3403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 435.153939][T11993] FAULT_INJECTION: forcing a failure. [ 435.153939][T11993] name failslab, interval 1, probability 0, space 0, times 0 [ 435.153975][T11993] CPU: 2 UID: 0 PID: 11993 Comm: syz.3.2166 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.154000][T11993] Tainted: [L]=SOFTLOCKUP [ 435.154007][T11993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 435.154017][T11993] Call Trace: [ 435.154024][T11993] [ 435.154032][T11993] dump_stack_lvl+0x100/0x190 [ 435.154064][T11993] should_fail_ex.cold+0x5/0xa [ 435.154088][T11993] should_failslab+0xc2/0x120 [ 435.154111][T11993] __kmalloc_cache_noprof+0x91/0x6d0 [ 435.154152][T11993] ? loopback_open+0x9f6/0x13d0 [ 435.154181][T11993] loopback_open+0x9f6/0x13d0 [ 435.154208][T11993] snd_pcm_open_substream+0xa76/0x1850 [ 435.154227][T11993] ? __pfx_kasan_disable_current+0x10/0x10 [ 435.154248][T11993] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 435.154264][T11993] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 435.154290][T11993] ? snd_pcm_oss_open+0x5c5/0x1380 [ 435.154319][T11993] snd_pcm_oss_open+0x715/0x1380 [ 435.154351][T11993] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 435.154378][T11993] ? __pfx_default_wake_function+0x10/0x10 [ 435.154401][T11993] ? __lock_acquire+0x5c0/0x1f40 [ 435.154427][T11993] ? do_raw_spin_lock+0x128/0x260 [ 435.154448][T11993] ? soundcore_open+0x231/0x5a0 [ 435.154471][T11993] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 435.154495][T11993] soundcore_open+0x2e3/0x5a0 [ 435.154518][T11993] ? __pfx_soundcore_open+0x10/0x10 [ 435.154540][T11993] chrdev_open+0x234/0x6a0 [ 435.154563][T11993] ? __pfx_chrdev_open+0x10/0x10 [ 435.154585][T11993] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 435.154616][T11993] do_dentry_open+0x6ab/0x14d0 [ 435.154633][T11993] ? __pfx_chrdev_open+0x10/0x10 [ 435.154661][T11993] vfs_open+0x82/0x3f0 [ 435.154686][T11993] path_openat+0x19fa/0x2440 [ 435.154714][T11993] ? __pfx_path_openat+0x10/0x10 [ 435.154741][T11993] do_file_open+0x20e/0x430 [ 435.154763][T11993] ? __pfx_do_file_open+0x10/0x10 [ 435.154800][T11993] ? _raw_spin_unlock+0x28/0x50 [ 435.154821][T11993] ? alloc_fd+0x471/0x7a0 [ 435.154849][T11993] do_sys_openat2+0x10f/0x1e0 [ 435.154873][T11993] ? __pfx_do_sys_openat2+0x10/0x10 [ 435.154905][T11993] __x64_sys_openat+0x12d/0x210 [ 435.155033][T11993] ? __pfx___x64_sys_openat+0x10/0x10 [ 435.155067][T11993] do_syscall_64+0x123/0x790 [ 435.155094][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.155122][T11993] RIP: 0033:0x7fd9d339e159 [ 435.155139][T11993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.155158][T11993] RSP: 002b:00007fd9d15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 435.155178][T11993] RAX: ffffffffffffffda RBX: 00007fd9d3625fa0 RCX: 00007fd9d339e159 [ 435.155190][T11993] RDX: 00000000000a6f81 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 435.155202][T11993] RBP: 00007fd9d343503b R08: 0000000000000000 R09: 0000000000000000 [ 435.155212][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.155222][T11993] R13: 00007fd9d3626038 R14: 00007fd9d3625fa0 R15: 00007ffe363e4678 [ 435.155246][T11993] [ 435.304597][T11997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2169'. [ 435.305433][T11997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2169'. [ 435.566438][T12005] input: syz0 as /devices/virtual/input/input19 [ 435.766196][T11571] udevd[11571]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 435.766276][T11571] udevd[11571]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 436.119133][T12017] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 437.229447][ T43] audit: type=1804 audit(1789264869.078:772): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2189" name="bus" dev="ramfs" ino=40123 res=1 errno=0 [ 437.379081][ T994] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 437.540718][ T994] usb 10-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 437.543665][ T994] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 437.546143][ T994] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.546166][ T994] usb 10-1: Product: syz [ 437.546177][ T994] usb 10-1: Manufacturer: syz [ 437.546196][ T994] usb 10-1: SerialNumber: syz [ 437.944130][ T994] usb 10-1: Can't get UAC3 power state for id 10 [ 438.005805][ T994] usb 10-1: 2:0: failed to get current value for ch 0 (-71) [ 438.014109][ T994] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 438.014137][ T994] usb 10-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 438.014153][ T994] usb 10-1: [2] FU [Headphone Playback Volume] ch = 2, val = 0/1/1 [ 438.096076][ T994] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 438.122638][ T994] usb 10-1: USB disconnect, device number 13 [ 438.438636][T12093] udevd[12093]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.577956][T12099] netlink: 'syz.5.2206': attribute type 1 has an invalid length. [ 438.615205][T12099] bond6: entered promiscuous mode [ 438.617914][T12099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 438.621568][ T43] audit: type=1400 audit(1789264870.468:773): avc: denied { mount } for pid=12101 comm="syz.3.2207" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 438.621624][ T43] audit: type=1400 audit(1789264870.468:774): avc: denied { append } for pid=12101 comm="syz.3.2207" name="uprobe_events" dev="tracefs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 438.663924][T12083] infiniband syz0: set active [ 438.668754][T12083] infiniband syz0: added bond0 [ 438.684826][T12083] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 438.684872][T12083] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 438.684905][T12083] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 438.764794][T12099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 438.774408][T12099] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 438.774435][T12099] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 438.786422][T12099] bond6: (slave ip6gre1): making interface the new active one [ 438.786449][T12099] ip6gre1: entered promiscuous mode [ 438.821837][T12103] event trace: Could not enable event p [ 438.836169][T12083] RDS/IB: syz0: added [ 438.836254][T12083] smc: adding ib device syz0 with port count 1 [ 438.836282][T12083] smc: ib device syz0 port 1 has no pnetid [ 438.850136][ T43] audit: type=1400 audit(1789264870.698:775): avc: denied { unmount } for pid=5755 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 438.866221][T12099] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 439.269849][T12122] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 439.273696][T12122] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 439.274820][T12122] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 439.452936][ T43] audit: type=1400 audit(1789264871.308:776): avc: denied { remount } for pid=12128 comm="syz.0.2217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 439.713740][ T43] audit: type=1400 audit(1789264871.568:777): avc: denied { create } for pid=12139 comm="syz.0.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.714750][ T43] audit: type=1400 audit(1789264871.568:778): avc: denied { setopt } for pid=12139 comm="syz.0.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.798696][ T43] audit: type=1400 audit(1789264871.648:779): avc: denied { bind } for pid=12139 comm="syz.0.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.928781][T12143] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 439.928815][T12143] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 441.247355][T12195] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 441.273596][T12195] 8021q: adding VLAN 0 to HW filter on device bond7 [ 441.321529][T12195] batman_adv: batadv0: Interface deactivated: dummy0 [ 441.323312][T12195] batman_adv: batadv0: Removing interface: dummy0 [ 441.338825][T12195] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 441.349526][T12195] netlink: 'syz.1.2242': attribute type 10 has an invalid length. [ 441.349550][T12195] __nla_validate_parse: 1 callbacks suppressed [ 441.349560][T12195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2242'. [ 441.349669][T12195] dummy0: entered promiscuous mode [ 441.352000][T12195] bond7: (slave dummy0): Releasing backup interface [ 441.370908][T12202] kvm: pic: non byte write [ 441.611653][T12225] bond8: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 441.611686][T12225] bond8: entered allmulticast mode [ 441.623996][T12225] bond8: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 441.737642][T12237] FAULT_INJECTION: forcing a failure. [ 441.737642][T12237] name failslab, interval 1, probability 0, space 0, times 0 [ 441.737679][T12237] CPU: 3 UID: 0 PID: 12237 Comm: syz.5.2266 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.737707][T12237] Tainted: [L]=SOFTLOCKUP [ 441.737715][T12237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.737729][T12237] Call Trace: [ 441.737737][T12237] [ 441.737746][T12237] dump_stack_lvl+0x100/0x190 [ 441.737798][T12237] should_fail_ex.cold+0x5/0xa [ 441.737830][T12237] should_failslab+0xc2/0x120 [ 441.737863][T12237] __kmalloc_noprof+0xfc/0x840 [ 441.737886][T12237] ? __pfx_dynamic_dname+0x10/0x10 [ 441.737907][T12237] ? tomoyo_encode2+0xfb/0x3c0 [ 441.737935][T12237] tomoyo_encode2+0xfb/0x3c0 [ 441.737962][T12237] tomoyo_encode+0x29/0x50 [ 441.737983][T12237] tomoyo_realpath_from_path+0x18c/0x690 [ 441.738012][T12237] tomoyo_check_open_permission+0x2af/0x3c0 [ 441.738034][T12237] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 441.738062][T12237] ? hook_file_open+0x248/0x8e0 [ 441.738105][T12237] ? path_get+0x61/0x80 [ 441.738134][T12237] tomoyo_file_open+0x6b/0x90 [ 441.738162][T12237] security_file_open+0xb5/0x1e0 [ 441.738185][T12237] do_dentry_open+0x588/0x14d0 [ 441.738214][T12237] vfs_open+0x82/0x3f0 [ 441.738242][T12237] path_openat+0x19fa/0x2440 [ 441.738270][T12237] ? __pfx_path_openat+0x10/0x10 [ 441.738302][T12237] do_file_open+0x20e/0x430 [ 441.738329][T12237] ? __pfx_do_file_open+0x10/0x10 [ 441.738372][T12237] ? _raw_spin_unlock+0x28/0x50 [ 441.738399][T12237] ? alloc_fd+0x471/0x7a0 [ 441.738430][T12237] do_sys_openat2+0x10f/0x1e0 [ 441.738455][T12237] ? __pfx_do_sys_openat2+0x10/0x10 [ 441.738481][T12237] ? find_held_lock+0x2b/0x80 [ 441.738511][T12237] __x64_sys_openat+0x12d/0x210 [ 441.738535][T12237] ? __pfx___x64_sys_openat+0x10/0x10 [ 441.738568][T12237] do_syscall_64+0x123/0x790 [ 441.738596][T12237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.738613][T12237] RIP: 0033:0x7f837d15e98e [ 441.738632][T12237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 441.738647][T12237] RSP: 002b:00007f837e01ff18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 441.738663][T12237] RAX: ffffffffffffffda RBX: 00007f837e0206c0 RCX: 00007f837d15e98e [ 441.738673][T12237] RDX: 0000000000000000 RSI: 00007f837d234776 RDI: ffffffffffffff9c [ 441.738683][T12237] RBP: 00007f837d23503b R08: 0000000000000000 R09: 0000000000000000 [ 441.738692][T12237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.738701][T12237] R13: 00007f837d426038 R14: 00007f837d425fa0 R15: 00007ffddf2664d8 [ 441.738724][T12237] [ 441.738741][T12237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 441.789234][ T5895] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 441.950734][ T5895] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.951883][ T5895] usb 5-1: config index 0 descriptor too short (expected 8251, got 59) [ 441.951910][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.951944][ T5895] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 441.953013][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 441.953032][ T5895] usb 5-1: SerialNumber: syz [ 441.977369][ T5895] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 442.223263][T12221] kvm: Disabled LAPIC found during irq injection [ 442.301733][ T2672] usb 5-1: USB disconnect, device number 27 [ 442.313260][T12249] syzkaller0: entered promiscuous mode [ 442.313277][T12249] syzkaller0: entered allmulticast mode [ 442.408600][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2264'. [ 444.872340][T12251] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 444.960657][T12287] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 444.960705][T12287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 444.961592][T12288] vhci_hcd: xmit failed -22 [ 444.968300][T12287] vhci_hcd vhci_hcd.0: Device attached [ 444.988526][ T5600] vhci_hcd vhci_hcd.0: stop threads [ 444.989421][ T5600] vhci_hcd vhci_hcd.0: release socket [ 444.989454][ T5600] vhci_hcd vhci_hcd.0: disconnect device [ 445.000120][ T43] audit: type=1400 audit(1789264876.858:780): avc: denied { sqpoll } for pid=12291 comm="syz.1.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 445.098782][ T43] audit: type=1400 audit(1789264876.948:781): avc: denied { append } for pid=12300 comm="syz.0.2280" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 445.241247][ T43] audit: type=1400 audit(1789264877.098:782): avc: denied { connect } for pid=12306 comm="syz.0.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 445.387874][T12314] kvm: emulating exchange as write [ 445.476915][T12325] loop7: detected capacity change from 0 to 7 [ 445.563724][T12325] Dev loop7: unable to read RDB block 7 [ 445.563762][T12325] loop7: unable to read partition table [ 445.563916][T12325] loop7: partition table beyond EOD, truncated [ 445.563973][T12325] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 445.664108][T12330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.666635][T12330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.799158][ T6569] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.799181][ T6569] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.799235][ T6569] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.799250][ T6569] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.799268][ T6569] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.799283][ T6569] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.799301][ T6569] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.799315][ T6569] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.813502][T12346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2300'. [ 445.894125][T12349] netlink: 'syz.5.2302': attribute type 10 has an invalid length. [ 445.908583][T12349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.912105][T12349] team0: Port device netdevsim1 added [ 445.920344][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2303'. [ 446.155969][T12371] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 446.228654][T12379] batman_adv: batadv0: Adding interface: syzkaller0 [ 446.228671][T12379] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.228694][T12379] batman_adv: batadv0: Interface activated: syzkaller0 [ 446.243710][T12378] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 446.263448][T12378] batman_adv: batadv0: Removing interface: syzkaller0 [ 446.951852][T12397] bond9: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 446.951875][T12397] bond9: entered allmulticast mode [ 446.955112][T12397] bond9: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 447.044025][T12404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2323'. [ 447.096754][T12407] FAULT_INJECTION: forcing a failure. [ 447.096754][T12407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 447.096777][T12407] CPU: 3 UID: 0 PID: 12407 Comm: syz.3.2324 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.096792][T12407] Tainted: [L]=SOFTLOCKUP [ 447.096796][T12407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 447.096802][T12407] Call Trace: [ 447.096806][T12407] [ 447.096811][T12407] dump_stack_lvl+0x100/0x190 [ 447.096861][T12407] should_fail_ex.cold+0x5/0xa [ 447.096877][T12407] ? prepare_alloc_pages+0x16d/0x5b0 [ 447.096897][T12407] should_fail_alloc_page+0xeb/0x140 [ 447.096914][T12407] prepare_alloc_pages+0x1f0/0x5b0 [ 447.096928][T12407] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 447.096948][T12407] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 447.096968][T12407] ? do_raw_spin_unlock+0x145/0x1e0 [ 447.096985][T12407] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 447.097003][T12407] ? rcu_is_watching+0x13/0xc0 [ 447.097017][T12407] ? trace_hrtimer_start+0x77/0x220 [ 447.097054][T12407] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 447.097077][T12407] ? find_held_lock+0x2b/0x80 [ 447.097094][T12407] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 447.097109][T12407] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 447.097124][T12407] ? rcu_is_watching+0x13/0xc0 [ 447.097139][T12407] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 447.097156][T12407] ? trace_sched_exit_tp+0x120/0x160 [ 447.097176][T12407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 447.097190][T12407] ? policy_nodemask+0xed/0x4f0 [ 447.097206][T12407] alloc_pages_mpol+0x201/0x550 [ 447.097220][T12407] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 447.097236][T12407] ? avc_has_perm_noaudit+0x145/0x3b0 [ 447.097253][T12407] alloc_pages_noprof+0x1a/0x160 [ 447.097269][T12407] anon_pipe_prefill_and_lock+0x102/0x580 [ 447.097283][T12407] ? __pfx_avc_has_perm+0x10/0x10 [ 447.097299][T12407] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 447.097316][T12407] ? inode_has_perm+0x16d/0x1d0 [ 447.097334][T12407] anon_pipe_write+0x164/0x1b50 [ 447.097352][T12407] ? __pfx_anon_pipe_write+0x10/0x10 [ 447.097365][T12407] ? selinux_file_permission+0x8f/0x6d0 [ 447.097379][T12407] ? bpf_lsm_file_permission+0x9/0x10 [ 447.097395][T12407] ? security_file_permission+0x76/0x210 [ 447.097408][T12407] ? rw_verify_area+0xce/0x6d0 [ 447.097425][T12407] vfs_write+0x6af/0x1050 [ 447.097436][T12407] ? __pfx_anon_pipe_write+0x10/0x10 [ 447.097451][T12407] ? __pfx_vfs_write+0x10/0x10 [ 447.097461][T12407] ? find_held_lock+0x2b/0x80 [ 447.097484][T12407] ksys_write+0x1f8/0x250 [ 447.097495][T12407] ? __pfx_ksys_write+0x10/0x10 [ 447.097509][T12407] do_syscall_64+0x123/0x790 [ 447.097526][T12407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.097538][T12407] RIP: 0033:0x7fd9d339e159 [ 447.097548][T12407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.097558][T12407] RSP: 002b:00007fd9d15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.097570][T12407] RAX: ffffffffffffffda RBX: 00007fd9d3625fa0 RCX: 00007fd9d339e159 [ 447.097577][T12407] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 0000000000000005 [ 447.097584][T12407] RBP: 00007fd9d343503b R08: 0000000000000000 R09: 0000000000000000 [ 447.097590][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.097597][T12407] R13: 00007fd9d3626038 R14: 00007fd9d3625fa0 R15: 00007ffe363e4678 [ 447.097615][T12407] [ 447.135875][ T43] audit: type=1400 audit(1789264878.988:783): avc: denied { listen } for pid=12410 comm="syz.1.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.171425][T12411] netlink: 'syz.0.2326': attribute type 5 has an invalid length. [ 447.195775][T12414] netlink: 'syz.3.2328': attribute type 5 has an invalid length. [ 447.258102][ T43] audit: type=1400 audit(1789264879.108:784): avc: denied { getopt } for pid=12421 comm="syz.3.2331" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 447.352529][T12433] ip_tables: iptables: counters copy to user failed while replacing table [ 447.382512][ T43] audit: type=1400 audit(1789264879.238:785): avc: denied { bind } for pid=12436 comm="syz.3.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 447.382828][ T43] audit: type=1400 audit(1789264879.238:786): avc: denied { name_bind } for pid=12436 comm="syz.3.2337" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 447.383025][ T43] audit: type=1400 audit(1789264879.238:787): avc: denied { node_bind } for pid=12436 comm="syz.3.2337" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 447.503441][T12451] netlink: 'syz.0.2342': attribute type 1 has an invalid length. [ 447.516091][T12451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.596064][T12464] bond6: entered allmulticast mode [ 447.596090][T12464] ip6gre1: entered allmulticast mode [ 447.615838][T12463] bond6: left allmulticast mode [ 447.615854][T12463] ip6gre1: left allmulticast mode [ 447.957318][T12492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.119568][ T42] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 448.279464][ T42] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 448.280251][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.280272][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.280284][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 448.280296][ T42] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.281945][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.281957][ T42] usb 8-1: Product: syz [ 448.281965][ T42] usb 8-1: Manufacturer: syz [ 448.281972][ T42] usb 8-1: SerialNumber: syz [ 448.288656][ T42] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 448.288669][ T42] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 448.288692][ T42] usbserial_generic 8-1:1.0: generic converter detected [ 448.296410][ T42] usb 8-1: generic converter now attached to ttyUSB0 [ 448.490520][ T2672] usb 8-1: USB disconnect, device number 22 [ 448.495630][ T2672] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 448.495874][ T2672] usbserial_generic 8-1:1.0: device disconnected [ 448.867545][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'. [ 448.879731][T12508] 8021q: adding VLAN 0 to HW filter on device bond10 [ 448.897593][T12508] macvlan0: entered promiscuous mode [ 448.897619][T12508] macvlan0: entered allmulticast mode [ 448.898726][T12508] bond10: entered promiscuous mode [ 448.901882][T12508] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 448.912026][T12508] bond10: left promiscuous mode [ 448.956727][T12513] bridge0: port 1(syz_tun) entered blocking state [ 448.956884][T12513] bridge0: port 1(syz_tun) entered disabled state [ 448.957018][T12513] syz_tun: entered allmulticast mode [ 448.958588][T12513] syz_tun: entered promiscuous mode [ 449.565812][ T43] audit: type=1400 audit(1789264881.418:788): avc: denied { mount } for pid=12551 comm="syz.5.2384" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 449.592748][ T43] audit: type=1400 audit(1789264881.448:789): avc: denied { unmount } for pid=7639 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 449.676365][T12564] FAULT_INJECTION: forcing a failure. [ 449.676365][T12564] name failslab, interval 1, probability 0, space 0, times 0 [ 449.676401][T12564] CPU: 0 UID: 0 PID: 12564 Comm: syz.3.2387 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.676423][T12564] Tainted: [L]=SOFTLOCKUP [ 449.676427][T12564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.676434][T12564] Call Trace: [ 449.676438][T12564] [ 449.676443][T12564] dump_stack_lvl+0x100/0x190 [ 449.676475][T12564] should_fail_ex.cold+0x5/0xa [ 449.676493][T12564] should_failslab+0xc2/0x120 [ 449.676511][T12564] __kmalloc_noprof+0xfc/0x840 [ 449.676522][T12564] ? find_held_lock+0x2b/0x80 [ 449.676538][T12564] ? inotify_handle_inode_event+0x1aa/0x6a0 [ 449.676570][T12564] inotify_handle_inode_event+0x1aa/0x6a0 [ 449.676585][T12564] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 449.676598][T12564] fsnotify_handle_inode_event.isra.0+0x1e3/0x480 [ 449.676617][T12564] fsnotify+0x1b45/0x3240 [ 449.676639][T12564] ? __pfx_fsnotify+0x10/0x10 [ 449.676653][T12564] ? futex_wake+0x4ea/0x5e0 [ 449.676675][T12564] __fsnotify_parent+0x74f/0xd00 [ 449.676694][T12564] ? __pfx___fsnotify_parent+0x10/0x10 [ 449.676713][T12564] ? __pfx___might_resched+0x10/0x10 [ 449.676727][T12564] ? __fput+0x30d/0xb50 [ 449.676740][T12564] __fput+0x30d/0xb50 [ 449.676757][T12564] fput_close_sync+0x118/0x250 [ 449.676772][T12564] ? __pfx_fput_close_sync+0x10/0x10 [ 449.676791][T12564] __x64_sys_close+0x8b/0x120 [ 449.676807][T12564] do_syscall_64+0x123/0x790 [ 449.676827][T12564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.676838][T12564] RIP: 0033:0x7fd9d339e159 [ 449.676848][T12564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.676858][T12564] RSP: 002b:00007fd9d15f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 449.676871][T12564] RAX: ffffffffffffffda RBX: 00007fd9d3625fa0 RCX: 00007fd9d339e159 [ 449.676878][T12564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 449.676885][T12564] RBP: 00007fd9d343503b R08: 0000000000000000 R09: 0000000000000000 [ 449.676892][T12564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.676899][T12564] R13: 00007fd9d3626038 R14: 00007fd9d3625fa0 R15: 00007ffe363e4678 [ 449.676914][T12564] [ 449.913298][T12579] netlink: 'syz.3.2393': attribute type 4 has an invalid length. [ 450.112646][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 450.112664][ T43] audit: type=1400 audit(1789264881.968:792): avc: denied { create } for pid=12591 comm="syz.3.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 450.114777][ T43] audit: type=1400 audit(1789264881.968:793): avc: denied { write } for pid=12591 comm="syz.3.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 450.117822][T12590] fuse: fd is not a fuse device [ 450.129374][ T43] audit: type=1400 audit(1789264881.978:794): avc: denied { setopt } for pid=12591 comm="syz.3.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 450.174258][T12594] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.2399'. [ 450.936806][T12640] syzkaller0: left promiscuous mode [ 450.936840][T12640] syzkaller0: left allmulticast mode [ 451.198789][T12655] fuse: fd is not a fuse device [ 451.336988][T12661] bridge0: port 1(macsec1) entered blocking state [ 451.337212][T12661] bridge0: port 1(macsec1) entered disabled state [ 451.337337][T12661] macsec1: entered allmulticast mode [ 451.356352][T12661] macsec1: entered promiscuous mode [ 451.486907][T12666] FAULT_INJECTION: forcing a failure. [ 451.486907][T12666] name fail_futex, interval 1, probability 0, space 0, times 0 [ 451.486939][T12666] CPU: 0 UID: 0 PID: 12666 Comm: syz.5.2429 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.486963][T12666] Tainted: [L]=SOFTLOCKUP [ 451.486969][T12666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 451.486979][T12666] Call Trace: [ 451.486985][T12666] [ 451.486993][T12666] dump_stack_lvl+0x100/0x190 [ 451.487038][T12666] should_fail_ex.cold+0x5/0xa [ 451.487062][T12666] get_futex_key+0x1d0/0x14f0 [ 451.487086][T12666] ? __pfx_get_futex_key+0x10/0x10 [ 451.487116][T12666] futex_wait_setup+0x91/0x540 [ 451.487138][T12666] __futex_wait+0x19f/0x300 [ 451.487156][T12666] ? __pfx___futex_wait+0x10/0x10 [ 451.487169][T12666] ? __pfx_try_to_wake_up+0x10/0x10 [ 451.487188][T12666] ? futex_hash+0x311/0x400 [ 451.487210][T12666] ? __pfx_futex_wake_mark+0x10/0x10 [ 451.487238][T12666] ? find_held_lock+0x2b/0x80 [ 451.487260][T12666] ? futex_wake+0x4ea/0x5e0 [ 451.487291][T12666] futex_wait+0xe6/0x370 [ 451.487307][T12666] ? __pfx_futex_wait+0x10/0x10 [ 451.487329][T12666] ? find_held_lock+0x2b/0x80 [ 451.487351][T12666] ? __fget_files+0x215/0x3d0 [ 451.487377][T12666] ? __fget_files+0x215/0x3d0 [ 451.487402][T12666] do_futex+0x265/0x440 [ 451.487427][T12666] ? __pfx_do_futex+0x10/0x10 [ 451.487451][T12666] ? fdget+0x18b/0x210 [ 451.487472][T12666] __x64_sys_futex+0x34f/0x4d0 [ 451.487496][T12666] ? __pfx___x64_sys_futex+0x10/0x10 [ 451.487529][T12666] do_syscall_64+0x123/0x790 [ 451.487560][T12666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.487579][T12666] RIP: 0033:0x7f837d19e159 [ 451.487593][T12666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.487609][T12666] RSP: 002b:00007f837e0200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 451.487628][T12666] RAX: ffffffffffffffda RBX: 00007f837d425fa8 RCX: 00007f837d19e159 [ 451.487640][T12666] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f837d425fa8 [ 451.487650][T12666] RBP: 00007f837d425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 451.487667][T12666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.487678][T12666] R13: 00007f837d426038 R14: 00007ffddf2663f0 R15: 00007ffddf2664d8 [ 451.487705][T12666] [ 451.837154][ T43] audit: type=1400 audit(1789264883.688:795): avc: denied { mounton } for pid=12671 comm="syz.5.2430" path="/422/file1/file0" dev="autofs" ino=41902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 452.123237][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'. [ 452.175892][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'. [ 452.280635][T12677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 452.780346][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.931909][ T43] audit: type=1804 audit(1789264884.778:796): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2440" name="/newroot/594/file1" dev="tmpfs" ino=3169 res=1 errno=0 [ 453.177057][T12703] FAULT_INJECTION: forcing a failure. [ 453.177057][T12703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 453.177104][T12703] CPU: 1 UID: 0 PID: 12703 Comm: syz.0.2443 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.177131][T12703] Tainted: [L]=SOFTLOCKUP [ 453.177137][T12703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.177151][T12703] Call Trace: [ 453.177158][T12703] [ 453.177165][T12703] dump_stack_lvl+0x100/0x190 [ 453.177191][T12703] should_fail_ex.cold+0x5/0xa [ 453.177212][T12703] ? prepare_alloc_pages+0x16d/0x5b0 [ 453.177235][T12703] should_fail_alloc_page+0xeb/0x140 [ 453.177263][T12703] prepare_alloc_pages+0x1f0/0x5b0 [ 453.177338][T12703] ? arch_stack_walk+0xa6/0xf0 [ 453.177383][T12703] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 453.177424][T12703] ? stack_trace_save+0x8e/0xc0 [ 453.177442][T12703] ? __pfx_stack_trace_save+0x10/0x10 [ 453.177458][T12703] ? is_bpf_text_address+0x94/0x1a0 [ 453.177485][T12703] ? stack_depot_save_flags+0x27/0x9f0 [ 453.177510][T12703] ? __kernel_text_address+0xd/0x30 [ 453.177543][T12703] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 453.177571][T12703] ? kasan_save_stack+0x30/0x50 [ 453.177591][T12703] ? __kasan_kmalloc+0xaa/0xb0 [ 453.177608][T12703] ? snd_pcm_attach_substream+0x436/0xd20 [ 453.177640][T12703] ? snd_pcm_open_substream+0x90/0x1850 [ 453.177658][T12703] ? snd_pcm_oss_open+0x715/0x1380 [ 453.177683][T12703] ? soundcore_open+0x2e3/0x5a0 [ 453.177706][T12703] ? chrdev_open+0x234/0x6a0 [ 453.177729][T12703] ? do_dentry_open+0x6ab/0x14d0 [ 453.177748][T12703] ? vfs_open+0x82/0x3f0 [ 453.177770][T12703] ? path_openat+0x19fa/0x2440 [ 453.177791][T12703] ? do_file_open+0x20e/0x430 [ 453.177812][T12703] ? do_sys_openat2+0x10f/0x1e0 [ 453.177836][T12703] ? __x64_sys_openat+0x12d/0x210 [ 453.177861][T12703] ? do_syscall_64+0x123/0x790 [ 453.177891][T12703] ? __lock_acquire+0x5c0/0x1f40 [ 453.177924][T12703] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.177949][T12703] ? policy_nodemask+0xed/0x4f0 [ 453.177976][T12703] alloc_pages_mpol+0x201/0x550 [ 453.178003][T12703] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 453.178026][T12703] ? __split_page_owner+0x1dd/0x340 [ 453.178053][T12703] ? split_page_memcg+0x1e/0x1a0 [ 453.178125][T12703] alloc_pages_noprof+0x1a/0x160 [ 453.178167][T12703] alloc_pages_exact_noprof+0x32/0xf0 [ 453.178196][T12703] snd_pcm_attach_substream+0x4b0/0xd20 [ 453.178224][T12703] snd_pcm_open_substream+0x90/0x1850 [ 453.178244][T12703] ? __kasan_kmalloc+0xaa/0xb0 [ 453.178267][T12703] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 453.178285][T12703] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 453.178313][T12703] ? snd_pcm_oss_open+0x5c5/0x1380 [ 453.178341][T12703] snd_pcm_oss_open+0x715/0x1380 [ 453.178377][T12703] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 453.178405][T12703] ? __pfx_default_wake_function+0x10/0x10 [ 453.178431][T12703] ? __lock_acquire+0x5c0/0x1f40 [ 453.178459][T12703] ? do_raw_spin_lock+0x128/0x260 [ 453.178486][T12703] ? soundcore_open+0x231/0x5a0 [ 453.178512][T12703] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 453.178539][T12703] soundcore_open+0x2e3/0x5a0 [ 453.178565][T12703] ? __pfx_soundcore_open+0x10/0x10 [ 453.178586][T12703] chrdev_open+0x234/0x6a0 [ 453.178608][T12703] ? __pfx_chrdev_open+0x10/0x10 [ 453.178633][T12703] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 453.178667][T12703] do_dentry_open+0x6ab/0x14d0 [ 453.178686][T12703] ? __pfx_chrdev_open+0x10/0x10 [ 453.178715][T12703] vfs_open+0x82/0x3f0 [ 453.178744][T12703] path_openat+0x19fa/0x2440 [ 453.178772][T12703] ? __pfx_path_openat+0x10/0x10 [ 453.178804][T12703] do_file_open+0x20e/0x430 [ 453.178831][T12703] ? __pfx_do_file_open+0x10/0x10 [ 453.178872][T12703] ? _raw_spin_unlock+0x28/0x50 [ 453.178893][T12703] ? alloc_fd+0x471/0x7a0 [ 453.178958][T12703] do_sys_openat2+0x10f/0x1e0 [ 453.178990][T12703] ? __pfx_do_sys_openat2+0x10/0x10 [ 453.179030][T12703] __x64_sys_openat+0x12d/0x210 [ 453.179060][T12703] ? __pfx___x64_sys_openat+0x10/0x10 [ 453.179105][T12703] do_syscall_64+0x123/0x790 [ 453.179135][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.179157][T12703] RIP: 0033:0x7fc1f079e159 [ 453.179177][T12703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.179195][T12703] RSP: 002b:00007fc1f15bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.179215][T12703] RAX: ffffffffffffffda RBX: 00007fc1f0a25fa0 RCX: 00007fc1f079e159 [ 453.179227][T12703] RDX: 00000000000a6f81 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 453.179239][T12703] RBP: 00007fc1f083503b R08: 0000000000000000 R09: 0000000000000000 [ 453.179252][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.179264][T12703] R13: 00007fc1f0a26038 R14: 00007fc1f0a25fa0 R15: 00007fffc0885c08 [ 453.179291][T12703] [ 453.227628][T12705] netlink: 'syz.0.2444': attribute type 19 has an invalid length. [ 453.498170][T12723] overlayfs: failed to clone upperpath [ 453.891148][T12734] netlink: 'syz.1.2453': attribute type 4 has an invalid length. [ 453.896025][T12734] netlink: 'syz.1.2453': attribute type 4 has an invalid length. [ 453.957452][T12736] xt_hashlimit: size too large, truncated to 1048576 [ 454.009656][T12738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2454'. [ 454.566161][ T43] audit: type=1400 audit(1789264886.418:797): avc: denied { nlmsg_read } for pid=12766 comm="syz.1.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.566908][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 454.606407][ T43] audit: type=1804 audit(1789264886.458:798): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2465" name="/newroot/602/file0" dev="tmpfs" ino=3214 res=1 errno=0 [ 454.961503][T12788] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2471'. [ 455.771563][ T43] audit: type=1400 audit(1789264887.628:799): avc: denied { read } for pid=12791 comm="syz.0.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 456.009584][T12809] fuse: fd is not a fuse device [ 456.244041][T12818] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 456.275036][T12821] overlayfs: failed to clone upperpath [ 456.353960][T12825] fuse: fd is not a fuse device [ 456.391764][T12827] jffs2: notice: (12827) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 457.418510][T12868] netlink: 'syz.3.2503': attribute type 10 has an invalid length. [ 457.431529][T12868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.433241][T12868] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 458.250445][ T43] audit: type=1400 audit(1789264890.108:800): avc: denied { map } for pid=12889 comm="syz.1.2512" path="socket:[40914]" dev="sockfs" ino=40914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 458.250574][ T43] audit: type=1400 audit(1789264890.108:801): avc: denied { read write } for pid=12889 comm="syz.1.2512" path="socket:[40914]" dev="sockfs" ino=40914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 461.069694][T12946] FAULT_INJECTION: forcing a failure. [ 461.069694][T12946] name failslab, interval 1, probability 0, space 0, times 0 [ 461.069717][T12946] CPU: 0 UID: 0 PID: 12946 Comm: syz.0.2529 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.069732][T12946] Tainted: [L]=SOFTLOCKUP [ 461.069743][T12946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 461.069750][T12946] Call Trace: [ 461.069759][T12946] [ 461.069765][T12946] dump_stack_lvl+0x100/0x190 [ 461.069794][T12946] should_fail_ex.cold+0x5/0xa [ 461.069812][T12946] should_failslab+0xc2/0x120 [ 461.069831][T12946] kmem_cache_alloc_noprof+0x92/0x6a0 [ 461.069843][T12946] ? ceph_msg_new2+0x3e/0x4f0 [ 461.069863][T12946] ceph_msg_new2+0x3e/0x4f0 [ 461.069878][T12946] ceph_monc_init+0x686/0xcd0 [ 461.069900][T12946] ceph_create_client+0x25e/0x370 [ 461.069912][T12946] ceph_get_tree+0x1a4/0x1fd0 [ 461.069945][T12946] ? bpf_lsm_capable+0x9/0x10 [ 461.069962][T12946] ? security_capable+0x80/0x260 [ 461.069980][T12946] vfs_get_tree+0x92/0x320 [ 461.069998][T12946] vfs_cmd_create+0xd7/0x2a0 [ 461.070010][T12946] __do_sys_fsconfig+0x55a/0xcb0 [ 461.070023][T12946] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 461.070043][T12946] do_syscall_64+0x123/0x790 [ 461.070059][T12946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.070070][T12946] RIP: 0033:0x7fc1f079e159 [ 461.070080][T12946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.070090][T12946] RSP: 002b:00007fc1f15bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 461.070105][T12946] RAX: ffffffffffffffda RBX: 00007fc1f0a25fa0 RCX: 00007fc1f079e159 [ 461.070113][T12946] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 461.070121][T12946] RBP: 00007fc1f083503b R08: 0000000000000000 R09: 0000000000000000 [ 461.070132][T12946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.070141][T12946] R13: 00007fc1f0a26038 R14: 00007fc1f0a25fa0 R15: 00007fffc0885c08 [ 461.070160][T12946] [ 462.240864][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 462.240881][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 462.942325][ T43] audit: type=1400 audit(1789264894.798:802): avc: denied { mounton } for pid=13001 comm="syz.0.2551" path="/627/file0/file0" dev="fuse" ino=68719476738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 462.942792][T13002] 9pnet_fd: p9_fd_create_unix (13002): problem connecting socket: ./file1: -2 [ 463.087057][T13006] fuse: fd is not a fuse device [ 465.777671][ T43] audit: type=1400 audit(1789264897.628:803): avc: denied { write } for pid=13031 comm="syz.3.2562" name="/" dev="9p" ino=73941801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.864424][T13040] overlayfs: failed to clone upperpath [ 465.934066][ T43] audit: type=1400 audit(1789264897.788:804): avc: denied { ioctl } for pid=13043 comm="syz.1.2566" path="socket:[43692]" dev="sockfs" ino=43692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 465.936624][T13044] vers=2.0 not permitted when mounting with smb3 [ 465.936624][T13044] [ 465.937104][T13044] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 466.205090][ T43] audit: type=1326 audit(1789264898.058:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13047 comm="syz.3.2567" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9d339e159 code=0x0 [ 466.496574][T13074] sch_tbf: burst 545 is lower than device lo mtu (11337746) ! [ 466.831927][T13085] fuse: fd is not a fuse device [ 466.907367][T13091] netlink: 'syz.3.2583': attribute type 3 has an invalid length. [ 467.105744][ T5756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 467.112568][ T5756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 467.114494][ T5756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 467.119664][ T5756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 467.120142][ T5756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.150466][ T5760] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 467.150765][ T5760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 467.151286][ T5760] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 467.152150][ T5760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 467.153281][ T5760] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.253598][ T9956] syz_tun (unregistering): left allmulticast mode [ 467.253616][ T9956] syz_tun (unregistering): left promiscuous mode [ 467.254090][ T9956] bridge0: port 1(syz_tun) entered disabled state [ 467.469725][T13133] netlink: 'syz.3.2596': attribute type 1 has an invalid length. [ 467.479880][T13133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.506544][T13133] netlink: 'syz.3.2596': attribute type 10 has an invalid length. [ 467.506565][T13133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2596'. [ 467.719024][T13106] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.719115][T13106] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.719269][T13106] bridge_slave_0: entered allmulticast mode [ 467.720107][T13106] bridge_slave_0: entered promiscuous mode [ 467.721650][T13106] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.721721][T13106] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.721778][T13106] bridge_slave_1: entered allmulticast mode [ 467.722493][T13106] bridge_slave_1: entered promiscuous mode [ 467.746835][T13106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.754037][T13106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.769924][T13106] team0: Port device team_slave_0 added [ 467.771443][T13106] team0: Port device team_slave_1 added [ 467.783646][T13106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.783657][T13106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.783671][T13106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.784681][T13106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.784692][T13106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.784706][T13106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.809795][T13106] hsr_slave_0: entered promiscuous mode [ 467.810244][T13106] hsr_slave_1: entered promiscuous mode [ 467.965596][T13106] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 467.971337][T13106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.997322][T13106] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.000380][T13106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.000846][T13106] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.003908][T13106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.004862][T13106] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.011748][T13106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.026084][T13106] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.026179][T13106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.026390][T13106] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.026474][T13106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.067621][T13106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.073958][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.074393][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.078600][T13106] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.088754][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.088802][ T8377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.101818][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.101883][ T8377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.148170][T13178] tipc: Enabled bearer , priority 0 [ 468.157627][T13178] syzkaller0: MTU too low for tipc bearer [ 468.157649][T13178] tipc: Disabling bearer [ 468.437838][T13106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.551969][T13219] fuse: fd is not a fuse device [ 468.653123][T13106] veth0_vlan: entered promiscuous mode [ 468.658812][T13106] veth1_vlan: entered promiscuous mode [ 468.686882][T13106] veth0_macvtap: entered promiscuous mode [ 468.690185][T13106] veth1_macvtap: entered promiscuous mode [ 468.696998][T13106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.701589][T13106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.720227][ T5600] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.720764][ T5600] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.741790][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.741821][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.815275][ T8377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.815290][ T8377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.832653][ T8377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.832668][ T8377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.838132][ T43] audit: type=1400 audit(1789264900.688:806): avc: denied { mounton } for pid=13106 comm="syz-executor" path="/syzkaller.fPQBmM/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 469.085246][ T43] audit: type=1800 audit(1789264900.938:807): pid=13238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2626" name=0F01CB650F7410262E66F36D0F330F09660F3A0CB9 dev="sda1" ino=2043 res=0 errno=0 [ 469.140283][T13242] FAULT_INJECTION: forcing a failure. [ 469.140283][T13242] name failslab, interval 1, probability 0, space 0, times 0 [ 469.140305][T13242] CPU: 1 UID: 0 PID: 13242 Comm: syz.6.2628 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.140321][T13242] Tainted: [L]=SOFTLOCKUP [ 469.140326][T13242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.140334][T13242] Call Trace: [ 469.140338][T13242] [ 469.140344][T13242] dump_stack_lvl+0x100/0x190 [ 469.140373][T13242] should_fail_ex.cold+0x5/0xa [ 469.140390][T13242] should_failslab+0xc2/0x120 [ 469.140410][T13242] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 469.140424][T13242] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 469.140437][T13242] ? rcu_is_watching+0x13/0xc0 [ 469.140453][T13242] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 469.140473][T13242] krealloc_node_align_noprof+0x1f9/0x3e0 [ 469.140487][T13242] snd_pcm_hw_rule_add+0x3b3/0x510 [ 469.140501][T13242] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 469.140516][T13242] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 469.140529][T13242] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 469.140545][T13242] ? mutex_init_lockdep+0xf1/0x120 [ 469.140558][T13242] ? snd_pcm_attach_substream+0x287/0xd20 [ 469.140574][T13242] snd_pcm_open_substream+0x942/0x1850 [ 469.140587][T13242] ? __pfx_kasan_disable_current+0x10/0x10 [ 469.140601][T13242] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 469.140612][T13242] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 469.140630][T13242] ? snd_pcm_oss_open+0x5c5/0x1380 [ 469.140648][T13242] snd_pcm_oss_open+0x715/0x1380 [ 469.140668][T13242] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 469.140689][T13242] ? __pfx_default_wake_function+0x10/0x10 [ 469.140704][T13242] ? __lock_acquire+0x5c0/0x1f40 [ 469.140738][T13242] ? do_raw_spin_lock+0x128/0x260 [ 469.140756][T13242] ? soundcore_open+0x231/0x5a0 [ 469.140773][T13242] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 469.140790][T13242] soundcore_open+0x2e3/0x5a0 [ 469.140805][T13242] ? __pfx_soundcore_open+0x10/0x10 [ 469.140819][T13242] chrdev_open+0x234/0x6a0 [ 469.140834][T13242] ? __pfx_chrdev_open+0x10/0x10 [ 469.140872][T13242] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 469.140893][T13242] do_dentry_open+0x6ab/0x14d0 [ 469.140905][T13242] ? __pfx_chrdev_open+0x10/0x10 [ 469.140921][T13242] vfs_open+0x82/0x3f0 [ 469.140960][T13242] path_openat+0x19fa/0x2440 [ 469.140977][T13242] ? __pfx_path_openat+0x10/0x10 [ 469.140996][T13242] do_file_open+0x20e/0x430 [ 469.141013][T13242] ? __pfx_do_file_open+0x10/0x10 [ 469.141038][T13242] ? _raw_spin_unlock+0x28/0x50 [ 469.141055][T13242] ? alloc_fd+0x471/0x7a0 [ 469.141073][T13242] do_sys_openat2+0x10f/0x1e0 [ 469.141088][T13242] ? __pfx_do_sys_openat2+0x10/0x10 [ 469.141109][T13242] __x64_sys_openat+0x12d/0x210 [ 469.141126][T13242] ? __pfx___x64_sys_openat+0x10/0x10 [ 469.141149][T13242] do_syscall_64+0x123/0x790 [ 469.141166][T13242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.141183][T13242] RIP: 0033:0x7ffae8f9e159 [ 469.141194][T13242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.141206][T13242] RSP: 002b:00007ffae9e4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 469.141219][T13242] RAX: ffffffffffffffda RBX: 00007ffae9225fa0 RCX: 00007ffae8f9e159 [ 469.141228][T13242] RDX: 00000000000a6f81 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 469.141235][T13242] RBP: 00007ffae903503b R08: 0000000000000000 R09: 0000000000000000 [ 469.141242][T13242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.141250][T13242] R13: 00007ffae9226038 R14: 00007ffae9225fa0 R15: 00007ffca38146e8 [ 469.141266][T13242] [ 469.189437][ T5760] Bluetooth: hci4: command tx timeout [ 469.247526][T13251] fuse: fd is not a fuse device [ 469.354580][T13253] netlink: 'syz.1.2633': attribute type 2 has an invalid length. [ 470.387513][ T43] audit: type=1400 audit(1789264902.238:808): avc: denied { name_connect } for pid=13297 comm="syz.6.2647" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 470.703904][ T43] audit: type=1400 audit(1789264902.558:809): avc: denied { kexec_image_load } for pid=13308 comm="syz.1.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 470.813255][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'. [ 470.824053][T13313] erspan0: entered promiscuous mode [ 471.199131][ T2672] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 471.259248][ T5760] Bluetooth: hci4: command tx timeout [ 471.349901][ T2672] usb 5-1: Using ep0 maxpacket: 32 [ 471.350645][ T2672] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 471.351612][ T2672] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 471.353617][ T2672] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 471.353640][ T2672] usb 5-1: Product: syz [ 471.353654][ T2672] usb 5-1: Manufacturer: syz [ 471.353668][ T2672] usb 5-1: SerialNumber: syz [ 471.356341][ T2672] usb 5-1: config 0 descriptor?? [ 471.360446][T13324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 471.361703][ T2672] hub 5-1:0.0: bad descriptor, ignoring hub [ 471.361724][ T2672] hub 5-1:0.0: probe with driver hub failed with error -5 [ 471.390349][T13337] ip_tables: iptables: counters copy to user failed while replacing table [ 471.833679][ T2672] usb 5-1: USB disconnect, device number 28 [ 472.111933][T13357] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 472.389466][T13293] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 472.389484][T13293] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 472.422731][T13369] TC_ACT_REPEAT abuse ? [ 473.075263][T13395] netlink: 'syz.3.2679': attribute type 15 has an invalid length. [ 473.075503][T13395] netlink: 'syz.3.2679': attribute type 15 has an invalid length. [ 473.379697][ T43] audit: type=1800 audit(1789264905.228:810): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2682" name="file0" dev="sda1" ino=2044 res=0 errno=0 [ 473.533257][ T43] audit: type=1400 audit(1789264905.388:811): avc: denied { mounton } for pid=13410 comm="syz.3.2685" path="/646/file0" dev="tmpfs" ino=3445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 473.655520][ T43] audit: type=1804 audit(1789264905.508:812): pid=13411 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2685" name="/newroot/646/file0" dev="fuse" ino=1 res=1 errno=0 [ 473.655967][T13420] fuse: fd is not a fuse device [ 474.151242][T13458] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 474.151242][T13458] [ 474.151437][T13458] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 474.151471][T13458] CIFS: Attempting to mount //127.0.0.1/share [ 474.224125][T13458] CIFS: VFS: cifs_mount failed w/return code = -112 [ 474.957127][T13456] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.2704/13456 [ 474.957145][T13456] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 474.957170][T13456] CPU: 3 UID: 0 PID: 13456 Comm: syz.1.2704 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.957186][T13456] Tainted: [L]=SOFTLOCKUP [ 474.957190][T13456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.957197][T13456] Call Trace: [ 474.957202][T13456] [ 474.957206][T13456] dump_stack_lvl+0x100/0x190 [ 474.957224][T13456] check_preemption_disabled+0xd2/0xe0 [ 474.957243][T13456] ? bpf_prog_test_run_skb+0x12c5/0x3530 [ 474.957255][T13456] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 474.957273][T13456] ? bpf_prog_test_run_skb+0x12c5/0x3530 [ 474.957285][T13456] trace_kfree_skb+0x18b/0x230 [ 474.957302][T13456] sk_skb_reason_drop+0xb7/0x1b0 [ 474.957318][T13456] bpf_prog_test_run_skb+0x12c5/0x3530 [ 474.957332][T13456] ? lock_acquire+0x1d1/0x380 [ 474.957350][T13456] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 474.957363][T13456] ? fput+0x7c/0x100 [ 474.957387][T13456] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 474.957400][T13456] __sys_bpf+0x2265/0x4a30 [ 474.957414][T13456] ? __pfx___sys_bpf+0x10/0x10 [ 474.957424][T13456] ? find_held_lock+0x2b/0x80 [ 474.957440][T13456] ? futex_wake+0x4ea/0x5e0 [ 474.957465][T13456] ? percpu_counter_add_batch+0xb9/0x230 [ 474.957478][T13456] ? errseq_sample+0x51/0x70 [ 474.957490][T13456] ? file_init_path+0x48e/0x670 [ 474.957512][T13456] ? __x64_sys_futex+0x34f/0x4d0 [ 474.957527][T13456] ? __x64_sys_futex+0x358/0x4d0 [ 474.957542][T13456] ? __sys_socket+0xac/0x260 [ 474.957553][T13456] ? __pfx___x64_sys_futex+0x10/0x10 [ 474.957570][T13456] ? __x64_sys_bpf+0xce/0x140 [ 474.957581][T13456] __x64_sys_bpf+0xce/0x140 [ 474.957608][T13456] ? do_syscall_64+0xae/0x790 [ 474.957624][T13456] do_syscall_64+0x123/0x790 [ 474.957640][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.957652][T13456] RIP: 0033:0x7fc98c99e159 [ 474.957662][T13456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.957673][T13456] RSP: 002b:00007fc98d7a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.957685][T13456] RAX: ffffffffffffffda RBX: 00007fc98cc25fa0 RCX: 00007fc98c99e159 [ 474.957693][T13456] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 474.957700][T13456] RBP: 00007fc98ca3503b R08: 0000000000000000 R09: 0000000000000000 [ 474.957707][T13456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.957714][T13456] R13: 00007fc98cc26038 R14: 00007fc98cc25fa0 R15: 00007ffe4bf0a978 [ 474.957728][T13456] [ 474.966734][ T43] audit: type=1400 audit(1789264906.818:813): avc: denied { write } for pid=5726 comm="syz-executor" path="pipe:[6469]" dev="pipefs" ino=6469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 474.990410][T13461] BUG: using smp_processor_id() in preemptible [00000000] code: syz.6.2706/13461 [ 474.990434][T13461] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 474.990479][T13461] CPU: 0 UID: 0 PID: 13461 Comm: syz.6.2706 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.990505][T13461] Tainted: [L]=SOFTLOCKUP [ 474.990512][T13461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.990523][T13461] Call Trace: [ 474.990530][T13461] [ 474.990539][T13461] dump_stack_lvl+0x100/0x190 [ 474.990569][T13461] check_preemption_disabled+0xd2/0xe0 [ 474.990597][T13461] ? tun_queue_purge+0x1ee/0x340 [ 474.990614][T13461] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 474.990639][T13461] ? tun_queue_purge+0x1ee/0x340 [ 474.990656][T13461] trace_kfree_skb+0x18b/0x230 [ 474.990681][T13461] sk_skb_reason_drop+0xb7/0x1b0 [ 474.990720][T13461] tun_queue_purge+0x1ee/0x340 [ 474.990739][T13461] __tun_detach+0xb70/0x1850 [ 474.990754][T13461] ? locks_remove_file+0xd1/0x600 [ 474.990774][T13461] ? __pfx_tun_chr_close+0x10/0x10 [ 474.990789][T13461] tun_chr_close+0xc2/0x220 [ 474.990804][T13461] ? __pfx_tun_chr_close+0x10/0x10 [ 474.990818][T13461] __fput+0x3ff/0xb50 [ 474.990842][T13461] task_work_run+0x150/0x240 [ 474.990865][T13461] ? __pfx_task_work_run+0x10/0x10 [ 474.990892][T13461] exit_to_user_mode_loop+0x1d8/0x700 [ 474.990910][T13461] ? rcu_is_watching+0x13/0xc0 [ 474.990931][T13461] do_syscall_64+0x661/0x790 [ 474.990952][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.990969][T13461] RIP: 0033:0x7ffae8f9e159 [ 474.990983][T13461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.990997][T13461] RSP: 002b:00007ffca3814848 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 474.991012][T13461] RAX: 0000000000000000 RBX: 00007ffae9227da0 RCX: 00007ffae8f9e159 [ 474.991022][T13461] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 474.991030][T13461] RBP: 00007ffae9227da0 R08: 00007ffae9226038 R09: 0000000000000000 [ 474.991040][T13461] R10: 00000000003ffcf8 R11: 0000000000000246 R12: 0000000000073e90 [ 474.991049][T13461] R13: 00007ffae922609c R14: 0000000000073bc0 R15: 00007ffae9226090 [ 474.991069][T13461] [ 474.991204][T13461] BUG: using smp_processor_id() in preemptible [00000000] code: syz.6.2706/13461 [ 474.991261][T13461] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 474.991292][T13461] CPU: 0 UID: 0 PID: 13461 Comm: syz.6.2706 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.991317][T13461] Tainted: [L]=SOFTLOCKUP [ 474.991323][T13461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.991334][T13461] Call Trace: [ 474.991341][T13461] [ 474.991348][T13461] dump_stack_lvl+0x100/0x190 [ 474.991375][T13461] check_preemption_disabled+0xd2/0xe0 [ 474.991403][T13461] ? tun_queue_purge+0x1ee/0x340 [ 474.991421][T13461] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 474.991449][T13461] ? tun_queue_purge+0x1ee/0x340 [ 474.991468][T13461] trace_kfree_skb+0x18b/0x230 [ 474.991501][T13461] sk_skb_reason_drop+0xb7/0x1b0 [ 474.991527][T13461] tun_queue_purge+0x1ee/0x340 [ 474.991553][T13461] __tun_detach+0xb70/0x1850 [ 474.991572][T13461] ? locks_remove_file+0xd1/0x600 [ 474.991596][T13461] ? __pfx_tun_chr_close+0x10/0x10 [ 474.991616][T13461] tun_chr_close+0xc2/0x220 [ 474.991636][T13461] ? __pfx_tun_chr_close+0x10/0x10 [ 474.991654][T13461] __fput+0x3ff/0xb50 [ 474.991684][T13461] task_work_run+0x150/0x240 [ 474.991712][T13461] ? __pfx_task_work_run+0x10/0x10 [ 474.991748][T13461] exit_to_user_mode_loop+0x1d8/0x700 [ 474.991770][T13461] ? rcu_is_watching+0x13/0xc0 [ 474.991797][T13461] do_syscall_64+0x661/0x790 [ 474.991824][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.991843][T13461] RIP: 0033:0x7ffae8f9e159 [ 474.991858][T13461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.991876][T13461] RSP: 002b:00007ffca3814848 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 474.991893][T13461] RAX: 0000000000000000 RBX: 00007ffae9227da0 RCX: 00007ffae8f9e159 [ 474.991905][T13461] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 474.991917][T13461] RBP: 00007ffae9227da0 R08: 00007ffae9226038 R09: 0000000000000000 [ 474.991928][T13461] R10: 00000000003ffcf8 R11: 0000000000000246 R12: 0000000000073e90 [ 474.991940][T13461] R13: 00007ffae922609c R14: 0000000000073bc0 R15: 00007ffae9226090 [ 474.991966][T13461] [ 477.435819][ T6569] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.511679][ T6569] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.600525][ T6569] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.680154][ T6569] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.836542][ T6569] bridge_slave_1: left allmulticast mode [ 477.836561][ T6569] bridge_slave_1: left promiscuous mode [ 477.839260][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.848501][ T6569] bridge_slave_0: left allmulticast mode [ 477.848517][ T6569] bridge_slave_0: left promiscuous mode [ 477.848620][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.876403][ T43] audit: type=1400 audit(1789264909.728:814): avc: denied { write } for pid=13470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.949092][ T43] audit: type=1400 audit(1789264909.798:815): avc: denied { write } for pid=13473 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.007648][ T6569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.009908][ T6569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.016023][ T6569] bond0 (unregistering): Released all slaves [ 478.020174][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10 [ 478.090760][ T43] audit: type=1400 audit(1789264909.948:816): avc: denied { write } for pid=13476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.133501][ T43] audit: type=1400 audit(1789264909.988:817): avc: denied { write } for pid=13479 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.175131][ T6569] rxrpc: Leaked peer 2a1 {1} 127.0.0.1:7003 [ 478.197070][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 478.274433][ T43] audit: type=1400 audit(1789264910.128:818): avc: denied { write } for pid=13482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.334595][ T43] audit: type=1400 audit(1789264910.188:819): avc: denied { write } for pid=13485 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.373433][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 478.435180][ T6569] hsr_slave_0: left promiscuous mode [ 478.435713][ T6569] hsr_slave_1: left promiscuous mode [ 478.436096][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.436110][ T6569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.436643][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.436653][ T6569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.453233][ T6569] veth1_macvtap: left promiscuous mode [ 478.453259][ T6569] veth0_macvtap: left promiscuous mode [ 478.453384][ T6569] veth1_vlan: left promiscuous mode [ 478.453415][ T6569] veth0_vlan: left promiscuous mode [ 478.589135][ T6569] team0 (unregistering): Port device team_slave_1 removed [ 478.596983][ T6569] team0 (unregistering): Port device team_slave_0 removed [ 478.689257][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13