last executing test programs: 4m9.677758226s ago: executing program 0 (id=195): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 4m9.533901719s ago: executing program 0 (id=196): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 4m9.472411113s ago: executing program 0 (id=197): r0 = syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0xa65400, 0x0) 4m8.866047288s ago: executing program 0 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) tkill(r1, 0x12) waitid(0x1, r1, 0x0, 0x8, &(0x7f00000003c0)) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x200000039, 0xb, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) openat(r3, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) 4m8.682092916s ago: executing program 0 (id=211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e36dba0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m7.606921031s ago: executing program 0 (id=221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4m7.514968296s ago: executing program 32 (id=221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m24.430567332s ago: executing program 1 (id=1068): setns(0xc9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x14, 0xcb, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3m24.387890329s ago: executing program 1 (id=1071): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x7, 0x32314742, 0x140, 0xb4, 0x0, @discrete={0x4, 0x2000005}}) 3m24.35680911s ago: executing program 1 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffceb, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x2006c001}, 0x44090) 3m24.328979252s ago: executing program 1 (id=1074): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x14, 0xcb, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m23.455198588s ago: executing program 1 (id=1108): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="ff630f61b06d583312223d7c2c0408254a68205e80533f377841044ed2fb5e805de01fdf63f4d1d1dd74b96802ec14afd77c8942a9b73cac0d661efb69ad2738ffbbbba980356ba0f7de05b8c57810b4371070fc7ba671ad90df83c2f59577b8370d8e68632e88b863915aa288d255f6b79fb9d42db31c47a37fdff7a1cc897e6ce8a617c391d56eba59fdc76cb8845fa5b131458562", @ANYRES8, @ANYRES32], 0x94}}, 0x4000) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x701, 0x102, 0x2, 0x0, 0x5, 0x10001, 0xfffffff8, 0x80008, 0x0, 0x7, 0xfffffffd, 0x7, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0xfffffffc, 0x80000003, 0x489, 0x7, 0x3ff, 0x20001e58, 0x14, 0xf39e, 0x43, 0x8, 0x6, 0xffffffff, 0x5]}) read(0xffffffffffffffff, 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x11) shutdown(0xffffffffffffffff, 0x1) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x3, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="34020000", @ANYBLOB="010025bd71000300000089", @ANYRES32=r4], 0x34}}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000001100)='0', 0x1) 3m23.381857978s ago: executing program 1 (id=1110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000000c0)) 3m8.328683733s ago: executing program 33 (id=1110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000000c0)) 8.094471742s ago: executing program 4 (id=5455): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 7.929196034s ago: executing program 4 (id=5459): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='1', 0x1) 7.780788471s ago: executing program 4 (id=5464): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xd206}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 7.271746128s ago: executing program 4 (id=5486): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 7.007749073s ago: executing program 4 (id=5489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}}, 0x0) 6.935568592s ago: executing program 4 (id=5491): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/161, 0xfdef}, {0x0, 0x4000}], 0x2) 815.906547ms ago: executing program 2 (id=5606): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, 0x0}) 815.493655ms ago: executing program 2 (id=5608): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x1, 0x40000002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 706.661563ms ago: executing program 2 (id=5610): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/net/ipv4/ping_group_range\x00', 0x8042, 0x14b) write$binfmt_aout(r0, 0x0, 0x0) 616.999921ms ago: executing program 2 (id=5614): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000004c0), 0x1ff, 0x20000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000001500)={&(0x7f0000002640)="9a", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r2}) 545.800801ms ago: executing program 2 (id=5617): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e27, 0xcb, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xd25}, 0xf) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 436.401059ms ago: executing program 2 (id=5620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 366.812482ms ago: executing program 5 (id=5623): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x108}}, 0xfffffffe}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 302.318865ms ago: executing program 5 (id=5625): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x15b) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 301.963005ms ago: executing program 5 (id=5627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd27, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c814) 205.996109ms ago: executing program 3 (id=5628): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 205.893084ms ago: executing program 3 (id=5629): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x82842) 146.453407ms ago: executing program 3 (id=5630): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}], 0x1, 0x40000002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 146.25192ms ago: executing program 5 (id=5631): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 146.125117ms ago: executing program 3 (id=5632): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-bond_slave_0\n', 0xf) 76.64915ms ago: executing program 3 (id=5633): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xd206}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 76.33121ms ago: executing program 5 (id=5634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x118, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in=@loopback, @in6=@private2, 0x33, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@loopback, 0x0, 0x2}}]}, 0x118}}, 0x0) 180.407µs ago: executing program 5 (id=5635): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 0s ago: executing program 3 (id=5636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r2, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) kernel console output (not intermixed with test programs): d: connection closed [ 279.941289][ T5847] vhci_hcd vhci_hcd.5: stop threads [ 279.941304][ T5847] vhci_hcd vhci_hcd.5: release socket [ 279.943971][ T5847] vhci_hcd vhci_hcd.5: disconnect device [ 280.013015][ T66] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 280.171601][T16877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4562'. [ 280.321470][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4564'. [ 280.321484][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4564'. [ 280.358855][ T5847] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.358884][ T5847] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.358904][ T5847] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.358922][ T5847] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.562300][T16895] FAULT_INJECTION: forcing a failure. [ 280.562300][T16895] name fail_futex, interval 1, probability 0, space 0, times 1 [ 280.562324][T16895] CPU: 3 UID: 0 PID: 16895 Comm: syz.5.4568 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.562340][T16895] Tainted: [L]=SOFTLOCKUP [ 280.562345][T16895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.562352][T16895] Call Trace: [ 280.562356][T16895] [ 280.562361][T16895] dump_stack_lvl+0x100/0x190 [ 280.562393][T16895] should_fail_ex.cold+0x5/0xa [ 280.562411][T16895] get_futex_key+0x1d0/0x14f0 [ 280.562428][T16895] ? __pfx_get_futex_key+0x10/0x10 [ 280.562442][T16895] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 280.562457][T16895] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 280.562474][T16895] futex_wait_setup+0x91/0x540 [ 280.562488][T16895] __futex_wait+0x19f/0x300 [ 280.562500][T16895] ? __pfx___futex_wait+0x10/0x10 [ 280.562509][T16895] ? __pfx_try_to_wake_up+0x10/0x10 [ 280.562521][T16895] ? futex_hash+0x311/0x400 [ 280.562537][T16895] ? __pfx_futex_wake_mark+0x10/0x10 [ 280.562558][T16895] ? find_held_lock+0x2b/0x80 [ 280.562573][T16895] ? futex_wake+0x4ea/0x5e0 [ 280.562592][T16895] futex_wait+0xe6/0x370 [ 280.562602][T16895] ? __pfx_futex_wait+0x10/0x10 [ 280.562628][T16895] ? rcu_read_lock_any_held+0x6a/0x90 [ 280.562646][T16895] ? find_held_lock+0x2b/0x80 [ 280.562660][T16895] ? ksys_write+0x190/0x250 [ 280.562675][T16895] ? ksys_write+0x190/0x250 [ 280.562688][T16895] do_futex+0x265/0x440 [ 280.562705][T16895] ? __pfx_do_futex+0x10/0x10 [ 280.562721][T16895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.562742][T16895] __x64_sys_futex+0x34f/0x4d0 [ 280.562758][T16895] ? fput+0x7c/0x100 [ 280.562771][T16895] ? __pfx___x64_sys_futex+0x10/0x10 [ 280.562785][T16895] ? ksys_write+0x1ac/0x250 [ 280.562795][T16895] ? __pfx_ksys_write+0x10/0x10 [ 280.562810][T16895] do_syscall_64+0x123/0x790 [ 280.562826][T16895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.562837][T16895] RIP: 0033:0x7f99c699e159 [ 280.562847][T16895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.562858][T16895] RSP: 002b:00007f99c784c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 280.562869][T16895] RAX: ffffffffffffffda RBX: 00007f99c6c25fa8 RCX: 00007f99c699e159 [ 280.562876][T16895] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f99c6c25fa8 [ 280.562882][T16895] RBP: 00007f99c6c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 280.562888][T16895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.562894][T16895] R13: 00007f99c6c26038 R14: 00007ffff98604f0 R15: 00007ffff98605d8 [ 280.562909][T16895] [ 280.711494][ T6844] tipc: Resetting bearer [ 280.726009][T16911] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 280.726807][T16911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4577'. [ 280.726819][T16911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4577'. [ 280.726827][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4577'. [ 280.812347][T16908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4574'. [ 281.359529][T16929] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 281.658800][ T3384] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 281.828827][ T3384] usb 9-1: Using ep0 maxpacket: 32 [ 281.829646][ T3384] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 281.830775][ T3384] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.830794][ T3384] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.830822][ T3384] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.833019][ T3384] usb 9-1: config 0 descriptor?? [ 282.473657][ T3384] libceph: connect (1)0.0.0.0:6789 error -22 [ 282.473863][ T3384] libceph: mon0 (1)0.0.0.0:6789 connect error [ 282.751958][ T3384] libceph: connect (1)0.0.0.0:6789 error -22 [ 282.752056][ T3384] libceph: mon0 (1)0.0.0.0:6789 connect error [ 283.027932][T16976] fuse: fd is not a fuse device [ 283.258940][ T3384] libceph: connect (1)0.0.0.0:6789 error -22 [ 283.259111][ T3384] libceph: mon0 (1)0.0.0.0:6789 connect error [ 283.267125][T16965] ceph: No mds server is up or the cluster is laggy [ 284.437634][ T3384] usb 9-1: USB disconnect, device number 18 [ 284.491637][ T43] kauditd_printk_skb: 86 callbacks suppressed [ 284.491651][ T43] audit: type=1800 audit(1789606942.186:1933): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=192477 res=0 errno=0 [ 284.535552][T17025] overlayfs: failed to clone upperpath [ 284.566419][T17029] net_ratelimit: 12 callbacks suppressed [ 284.566438][T17029] ip_tables: iptables: counters copy to user failed while replacing table [ 284.703460][T17035] overlayfs: failed to clone upperpath [ 284.821629][T17042] fuse: fd is not a fuse device [ 284.823463][ T43] audit: type=1800 audit(1789606942.516:1934): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.4630" name="file0" dev="tmpfs" ino=7683 res=0 errno=0 [ 284.919066][ T43] audit: type=1800 audit(1789606942.606:1935): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=192496 res=0 errno=0 [ 284.945141][ T43] audit: type=1800 audit(1789606942.636:1936): pid=17054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.4635" name="file1" dev="tmpfs" ino=7694 res=0 errno=0 [ 285.023307][ T43] audit: type=1800 audit(1789606942.716:1937): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4634" name="/" dev="fuse" ino=1 res=0 errno=0 [ 285.083005][T17064] overlayfs: failed to clone upperpath [ 285.173204][ T43] audit: type=1800 audit(1789606942.866:1938): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 285.292689][ T43] audit: type=1800 audit(1789606942.986:1939): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 285.316659][ T43] audit: type=1800 audit(1789606943.006:1940): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 285.360636][T17092] kAFS: unable to lookup cell 'testcell' [ 285.375881][T17095] FAULT_INJECTION: forcing a failure. [ 285.375881][T17095] name failslab, interval 1, probability 0, space 0, times 0 [ 285.375911][T17095] CPU: 1 UID: 0 PID: 17095 Comm: syz.4.4651 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.375936][T17095] Tainted: [L]=SOFTLOCKUP [ 285.375966][T17095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.375978][T17095] Call Trace: [ 285.375985][T17095] [ 285.375992][T17095] dump_stack_lvl+0x100/0x190 [ 285.376035][T17095] should_fail_ex.cold+0x5/0xa [ 285.376062][T17095] should_failslab+0xc2/0x120 [ 285.376091][T17095] __kmalloc_noprof+0xfc/0x840 [ 285.376109][T17095] ? aes_set_key_common+0x78/0xc0 [ 285.376131][T17095] ? init_skcipher_req.constprop.0+0x9c/0x180 [ 285.376163][T17095] init_skcipher_req.constprop.0+0x9c/0x180 [ 285.376189][T17095] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 285.376218][T17095] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 285.376248][T17095] ? kasan_quarantine_put+0x104/0x240 [ 285.376266][T17095] ? lockdep_hardirqs_on+0x7d/0x110 [ 285.376298][T17095] ? __kasan_check_byte+0x13/0x50 [ 285.376322][T17095] ? get_derived_key+0x11b/0x140 [ 285.376350][T17095] encrypted_read+0x389/0x850 [ 285.376377][T17095] ? lock_acquire+0x1d1/0x380 [ 285.376395][T17095] ? keyctl_read_key+0x227/0x510 [ 285.376422][T17095] ? __pfx_encrypted_read+0x10/0x10 [ 285.376449][T17095] ? __pfx___might_resched+0x10/0x10 [ 285.376472][T17095] ? down_read+0x13b/0x4c0 [ 285.376498][T17095] ? __pfx_down_read+0x10/0x10 [ 285.376528][T17095] ? keyctl_read_key+0x2ac/0x510 [ 285.376553][T17095] ? keyctl_read_key+0x2ac/0x510 [ 285.376578][T17095] ? keyctl_read_key+0x427/0x510 [ 285.376608][T17095] keyctl_read_key+0x29a/0x510 [ 285.376638][T17095] __do_sys_keyctl+0x36d/0x5a0 [ 285.376658][T17095] do_syscall_64+0x123/0x790 [ 285.376684][T17095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.376702][T17095] RIP: 0033:0x7f45e639e159 [ 285.376717][T17095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.376734][T17095] RSP: 002b:00007f45e72c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 285.376752][T17095] RAX: ffffffffffffffda RBX: 00007f45e6625fa0 RCX: 00007f45e639e159 [ 285.376763][T17095] RDX: 0000200000000240 RSI: 00000000399c32e7 RDI: 000000000000000b [ 285.376774][T17095] RBP: 00007f45e643506b R08: 0000000000000000 R09: 0000000000000000 [ 285.376785][T17095] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 285.376795][T17095] R13: 00007f45e6626038 R14: 00007f45e6625fa0 R15: 00007fff113efc38 [ 285.376819][T17095] [ 285.483296][ T43] audit: type=1400 audit(1789606943.176:1941): avc: denied { accept } for pid=17096 comm="syz.3.4652" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.510014][T17095] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 285.559741][T17109] ip_tables: iptables: counters copy to user failed while replacing table [ 285.591964][ T43] audit: type=1400 audit(1789606943.286:1942): avc: denied { bind } for pid=17103 comm="syz.2.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 285.844110][T17127] fuse: fd is not a fuse device [ 286.099493][T17136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.224183][T17143] overlayfs: failed to clone upperpath [ 286.402657][T17154] fuse: fd is not a fuse device [ 286.614577][T17164] FAULT_INJECTION: forcing a failure. [ 286.614577][T17164] name failslab, interval 1, probability 0, space 0, times 0 [ 286.614602][T17164] CPU: 1 UID: 0 PID: 17164 Comm: syz.5.4674 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.614619][T17164] Tainted: [L]=SOFTLOCKUP [ 286.614624][T17164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.614631][T17164] Call Trace: [ 286.614635][T17164] [ 286.614641][T17164] dump_stack_lvl+0x100/0x190 [ 286.614670][T17164] should_fail_ex.cold+0x5/0xa [ 286.614687][T17164] should_failslab+0xc2/0x120 [ 286.614706][T17164] kmem_cache_alloc_noprof+0x92/0x6a0 [ 286.614719][T17164] ? mas_preallocate+0xc22/0xee0 [ 286.614742][T17164] mas_preallocate+0xc22/0xee0 [ 286.614761][T17164] ? __pfx_mas_preallocate+0x10/0x10 [ 286.614801][T17164] vma_link+0x14a/0x8c0 [ 286.614820][T17164] ? __pfx_vma_link+0x10/0x10 [ 286.614840][T17164] ? up_write+0x2dc/0x5b0 [ 286.614856][T17164] ? anon_vma_clone+0x650/0xca0 [ 286.614876][T17164] copy_vma+0xa2a/0x1100 [ 286.614891][T17164] ? __pfx_copy_vma+0x10/0x10 [ 286.614901][T17164] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 286.614921][T17164] ? __lock_acquire+0x5c0/0x1f40 [ 286.614941][T17164] ? lock_acquire+0x1d1/0x380 [ 286.614952][T17164] ? avc_has_perm_noaudit+0x56/0x3b0 [ 286.614970][T17164] copy_vma_and_data+0x23f/0x780 [ 286.614989][T17164] ? __pfx_copy_vma_and_data+0x10/0x10 [ 286.615010][T17164] ? rcu_is_watching+0x13/0xc0 [ 286.615024][T17164] ? percpu_counter_add_batch+0xb9/0x230 [ 286.615040][T17164] ? __vm_enough_memory+0x184/0x390 [ 286.615055][T17164] move_vma+0x57c/0x12e0 [ 286.615074][T17164] ? __pfx_move_vma+0x10/0x10 [ 286.615090][T17164] ? selinux_mmap_addr+0x2b/0x110 [ 286.615100][T17164] ? security_mmap_addr+0x71/0x1e0 [ 286.615114][T17164] ? __get_unmapped_area+0x255/0x3e0 [ 286.615128][T17164] ? vrm_set_new_addr+0x1f5/0x2a0 [ 286.615146][T17164] mremap_to+0x234/0x4c0 [ 286.615162][T17164] ? __pfx_mremap_to+0x10/0x10 [ 286.615183][T17164] ? mas_walk+0x260/0x310 [ 286.615200][T17164] __do_sys_mremap+0x99f/0x1780 [ 286.615219][T17164] ? futex_wait+0xf0/0x370 [ 286.615234][T17164] ? __pfx___do_sys_mremap+0x10/0x10 [ 286.615252][T17164] ? percpu_counter_add_batch+0xb9/0x230 [ 286.615272][T17164] ? __pfx_do_futex+0x10/0x10 [ 286.615288][T17164] ? fd_install+0x223/0x580 [ 286.615306][T17164] ? __sys_socket+0xac/0x260 [ 286.615322][T17164] ? __pfx___x64_sys_futex+0x10/0x10 [ 286.615342][T17164] do_syscall_64+0x123/0x790 [ 286.615358][T17164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.615370][T17164] RIP: 0033:0x7f99c699e159 [ 286.615380][T17164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.615391][T17164] RSP: 002b:00007f99c784c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 286.615403][T17164] RAX: ffffffffffffffda RBX: 00007f99c6c25fa0 RCX: 00007f99c699e159 [ 286.615410][T17164] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 286.615416][T17164] RBP: 00007f99c6a3506b R08: 0000200000ffd000 R09: 0000000000000000 [ 286.615423][T17164] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 286.615429][T17164] R13: 00007f99c6c26038 R14: 00007f99c6c25fa0 R15: 00007ffff98605d8 [ 286.615443][T17164] [ 286.923880][T17186] overlayfs: failed to clone upperpath [ 287.267536][T17193] fuse: fd is not a fuse device [ 287.431231][T17199] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 287.463556][T17201] overlayfs: failed to clone upperpath [ 287.466489][T17201] overlayfs: failed to clone upperpath [ 287.606515][T17209] fuse: fd is not a fuse device [ 288.060732][ T1169] rpcbind: server 127.0.0.1 not responding, timed out [ 288.138383][T17218] kvm: pic: non byte read [ 288.141551][T17218] kvm: pic: non byte read [ 288.142947][T17218] kvm: pic: non byte read [ 288.144107][T17218] kvm: pic: non byte read [ 288.145357][T17218] kvm: pic: non byte read [ 288.146525][T17218] kvm: pic: non byte read [ 288.147686][T17218] kvm: pic: non byte read [ 288.149954][T17218] kvm: pic: non byte read [ 288.151169][T17218] kvm: pic: non byte read [ 288.152395][T17218] kvm: pic: non byte read [ 289.151355][T17263] nvme nvme0: failed to connect socket: -101 [ 289.161622][T17261] __nla_validate_parse: 8 callbacks suppressed [ 289.161638][T17261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4712'. [ 289.571279][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 289.571298][ T43] audit: type=1800 audit(1789606947.266:2033): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 289.613253][T17279] lo: entered promiscuous mode [ 289.615637][T17279] tunl0: entered promiscuous mode [ 289.616650][T17279] gre0: entered promiscuous mode [ 289.625247][T17279] gretap0: entered promiscuous mode [ 289.630685][T17279] erspan0: entered promiscuous mode [ 289.632037][T17279] ip_vti0: entered promiscuous mode [ 289.632854][T17279] ip6_vti0: entered promiscuous mode [ 289.634000][T17279] sit0: entered promiscuous mode [ 289.635667][T17279] ip6tnl0: entered promiscuous mode [ 289.636970][T17279] ip6gre0: entered promiscuous mode [ 289.638502][T17279] syz_tun: entered promiscuous mode [ 289.645780][T17279] ip6gretap0: entered promiscuous mode [ 289.647253][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.647450][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.647972][T17279] bridge0: entered promiscuous mode [ 289.651955][T17279] vcan0: entered promiscuous mode [ 289.656596][T17279] bond0: entered promiscuous mode [ 289.656606][T17279] bond_slave_0: entered promiscuous mode [ 289.656729][T17279] bond_slave_1: entered promiscuous mode [ 289.659892][T17279] team0: entered promiscuous mode [ 289.659903][T17279] team_slave_0: entered promiscuous mode [ 289.660021][T17279] team_slave_1: entered promiscuous mode [ 289.663156][T17279] dummy0: entered promiscuous mode [ 289.665828][T17279] nlmon0: entered promiscuous mode [ 289.666515][T17279] batadv0: entered promiscuous mode [ 289.667655][T17279] vxcan0: entered promiscuous mode [ 289.668220][T17279] vxcan1: entered promiscuous mode [ 289.668621][T17279] veth0: entered promiscuous mode [ 289.670229][T17279] veth1: entered promiscuous mode [ 289.672813][T17279] wg0: entered promiscuous mode [ 289.673489][T17279] wg1: entered promiscuous mode [ 289.674780][T17279] wg2: entered promiscuous mode [ 289.675545][T17279] veth0_to_bridge: entered promiscuous mode [ 289.678029][T17279] veth1_to_bridge: entered promiscuous mode [ 289.680870][T17279] veth0_to_bond: entered promiscuous mode [ 289.682353][T17279] veth1_to_bond: entered promiscuous mode [ 289.683724][T17279] veth0_to_team: entered promiscuous mode [ 289.685350][T17279] veth1_to_team: entered promiscuous mode [ 289.687678][T17279] veth0_to_batadv: entered promiscuous mode [ 289.689067][T17279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.689092][T17279] batadv_slave_0: entered promiscuous mode [ 289.690182][T17279] veth1_to_batadv: entered promiscuous mode [ 289.691194][T17279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.691217][T17279] batadv_slave_1: entered promiscuous mode [ 289.692161][T17279] xfrm0: entered promiscuous mode [ 289.693014][T17279] veth0_to_hsr: entered promiscuous mode [ 289.694781][T17279] veth1_to_hsr: entered promiscuous mode [ 289.697024][T17279] hsr0: entered promiscuous mode [ 289.698045][T17279] veth1_virt_wifi: entered promiscuous mode [ 289.699229][T17279] veth0_virt_wifi: entered promiscuous mode [ 289.700227][T17279] virt_wifi0: entered promiscuous mode [ 289.702582][T17279] vlan0: entered promiscuous mode [ 289.703667][T17279] vlan1: entered promiscuous mode [ 289.706832][T17279] macvlan0: entered promiscuous mode [ 289.711190][T17279] macvlan1: entered promiscuous mode [ 289.712259][T17279] ipvlan0: entered promiscuous mode [ 289.712332][T17279] ipvlan1: entered promiscuous mode [ 289.725295][T17279] macvtap0: entered promiscuous mode [ 289.726919][T17279] macsec0: entered promiscuous mode [ 289.728065][T17279] geneve0: entered promiscuous mode [ 289.730155][T17279] geneve1: entered promiscuous mode [ 289.740230][T17279] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 289.745701][T17279] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 289.750948][T17279] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 289.756686][T17279] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 289.775186][T17279] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 289.776591][T17279] vlan0008: entered promiscuous mode [ 289.776946][T17279] pimreg3: entered promiscuous mode [ 289.779105][T17279] vxlan0: entered promiscuous mode [ 289.780768][T17279] : entered promiscuous mode [ 289.828911][ T5550] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.828952][ T5550] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.828990][ T5550] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.829026][ T5550] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.829060][ T5550] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.829087][ T5550] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.829121][ T5550] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.829147][ T5550] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.906304][ T43] audit: type=1800 audit(1789606947.596:2034): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 290.047511][ T43] audit: type=1800 audit(1789606947.736:2035): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 290.106872][T17297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.152276][T17299] overlayfs: failed to clone upperpath [ 290.156649][ T43] audit: type=1804 audit(1789606947.846:2036): pid=17299 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.4729" name="bus" dev="tmpfs" ino=7454 res=1 errno=0 [ 290.349123][ T43] audit: type=1400 audit(1789606948.046:2037): avc: denied { create } for pid=17311 comm="syz.2.4733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 290.448987][ T66] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 290.508942][T17313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4732'. [ 290.599701][ T66] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 290.600794][ T66] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 290.600817][ T66] usb 9-1: config 1 has no interface number 0 [ 290.602853][ T66] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.602875][ T66] usb 9-1: Product: syz [ 290.602889][ T66] usb 9-1: Manufacturer: syz [ 290.602903][ T66] usb 9-1: SerialNumber: syz [ 290.607845][ T43] audit: type=1800 audit(1789606948.296:2038): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193772 res=0 errno=0 [ 290.613532][ T43] audit: type=1800 audit(1789606948.306:2039): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=193804 res=0 errno=0 [ 290.613578][ T43] audit: type=1800 audit(1789606948.306:2040): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=193779 res=0 errno=0 [ 290.613620][ T43] audit: type=1800 audit(1789606948.306:2041): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=193780 res=0 errno=0 [ 290.620135][ T66] usb 9-1: 3:1 : does not exist [ 290.620154][ T66] usb 9-1: 3:2 : does not exist [ 290.721488][ T43] audit: type=1800 audit(1789606948.416:2042): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 290.798465][T17317] syz_tun: entered allmulticast mode [ 290.819948][T17317] dvmrp6: entered allmulticast mode [ 290.853870][T17316] syz_tun: left allmulticast mode [ 291.378036][ T66] usb 9-1: USB disconnect, device number 19 [ 291.635529][T17348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4745'. [ 292.167026][T17378] FAULT_INJECTION: forcing a failure. [ 292.167026][T17378] name failslab, interval 1, probability 0, space 0, times 0 [ 292.167048][T17378] CPU: 1 UID: 0 PID: 17378 Comm: syz.4.4759 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.167063][T17378] Tainted: [L]=SOFTLOCKUP [ 292.167067][T17378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.167074][T17378] Call Trace: [ 292.167078][T17378] [ 292.167083][T17378] dump_stack_lvl+0x100/0x190 [ 292.167113][T17378] should_fail_ex.cold+0x5/0xa [ 292.167131][T17378] should_failslab+0xc2/0x120 [ 292.167156][T17378] __kmalloc_cache_noprof+0x91/0x6d0 [ 292.167183][T17378] ? find_held_lock+0x2b/0x80 [ 292.167198][T17378] ? alloc_fs_context+0x57/0xf40 [ 292.167217][T17378] alloc_fs_context+0x57/0xf40 [ 292.167233][T17378] ? __get_fs_type+0xe3/0x200 [ 292.167251][T17378] path_mount+0xdbd/0x24c0 [ 292.167268][T17378] ? __pfx_path_mount+0x10/0x10 [ 292.167283][T17378] ? lockdep_hardirqs_on+0x7d/0x110 [ 292.167303][T17378] ? putname+0xb1/0x110 [ 292.167317][T17378] ? kmem_cache_free+0x127/0x6c0 [ 292.167337][T17378] ? __x64_sys_mount+0x293/0x310 [ 292.167369][T17378] __x64_sys_mount+0x293/0x310 [ 292.167386][T17378] ? __pfx___x64_sys_mount+0x10/0x10 [ 292.167407][T17378] do_syscall_64+0x123/0x790 [ 292.167424][T17378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.167437][T17378] RIP: 0033:0x7f45e639e159 [ 292.167447][T17378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.167459][T17378] RSP: 002b:00007f45e72c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.167474][T17378] RAX: ffffffffffffffda RBX: 00007f45e6625fa0 RCX: 00007f45e639e159 [ 292.167482][T17378] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 292.167488][T17378] RBP: 00007f45e643506b R08: 0000000000000000 R09: 0000000000000000 [ 292.167495][T17378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.167501][T17378] R13: 00007f45e6626038 R14: 00007f45e6625fa0 R15: 00007fff113efc38 [ 292.167515][T17378] [ 292.380774][ T66] libceph: connect (1)0.0.0.0:6789 error -22 [ 292.380931][ T66] libceph: mon0 (1)0.0.0.0:6789 connect error [ 292.641140][ T66] libceph: connect (1)0.0.0.0:6789 error -22 [ 292.641281][ T66] libceph: mon0 (1)0.0.0.0:6789 connect error [ 293.063103][T17418] overlayfs: failed to clone upperpath [ 293.137829][T17387] ceph: No mds server is up or the cluster is laggy [ 293.144415][T17421] fuse: fd is not a fuse device [ 293.155671][ T66] libceph: connect (1)0.0.0.0:6789 error -22 [ 293.155815][ T66] libceph: mon0 (1)0.0.0.0:6789 connect error [ 293.251792][T17419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4772'. [ 293.618401][T17445] netlink: 'syz.3.4782': attribute type 1 has an invalid length. [ 293.643632][T17445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.662364][T17448] db_root: cannot open: /dev/net/tun [ 293.662388][T17448] db_root: not a directory: /dev/net/tun [ 294.239620][ T5761] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 294.339521][T17483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4798'. [ 294.623547][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 294.623559][ T43] audit: type=1800 audit(1789606952.316:2082): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 294.646192][T17487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4799'. [ 294.741449][ T43] audit: type=1800 audit(1789606952.436:2083): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 294.774542][T17507] syzkaller0: entered promiscuous mode [ 294.774570][T17507] syzkaller0: entered allmulticast mode [ 294.826150][T17510] tipc: Enabling of bearer rejected, already enabled [ 294.893291][ T43] audit: type=1800 audit(1789606952.586:2084): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 294.941503][T17515] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4810'. [ 294.941520][T17515] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4810'. [ 294.941529][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4810'. [ 295.070825][ T43] audit: type=1800 audit(1789606952.766:2085): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 295.090342][ T43] audit: type=1800 audit(1789606952.786:2086): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194855 res=0 errno=0 [ 295.124067][ T43] audit: type=1800 audit(1789606952.816:2087): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 295.167707][ T43] audit: type=1800 audit(1789606952.856:2088): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 295.280772][ T43] audit: type=1800 audit(1789606952.976:2089): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 295.346127][ T43] audit: type=1800 audit(1789606953.036:2090): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 295.358333][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4819'. [ 295.358349][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4819'. [ 295.358357][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4819'. [ 295.392346][ T43] audit: type=1800 audit(1789606953.086:2091): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194951 res=0 errno=0 [ 295.833612][T17561] binder_alloc: 17560: binder_alloc_buf size 65448 failed, no address space [ 295.833697][T17561] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 295.847397][T17556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4826'. [ 295.988402][T17565] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 295.990600][T17565] kvm: requested 46933 ns i8254 timer period limited to 200000 ns [ 295.992358][T17565] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 295.993835][T17565] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 295.995458][T17565] kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 295.997013][T17565] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 295.998053][T17565] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 295.999701][T17565] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 296.000872][T17565] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 296.002712][T17565] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 296.603177][T17582] evm: overlay not supported [ 296.734703][T17592] fuse: fd is not a fuse device [ 296.748786][ T3384] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 296.884435][T17604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4846'. [ 296.898904][ T3384] usb 10-1: Using ep0 maxpacket: 16 [ 296.899649][ T3384] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 296.900658][ T3384] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 296.902170][ T3384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.902182][ T3384] usb 10-1: Product: syz [ 296.902189][ T3384] usb 10-1: Manufacturer: syz [ 296.902197][ T3384] usb 10-1: SerialNumber: syz [ 296.905341][ T3384] usb 10-1: config 0 descriptor?? [ 296.911872][ T3384] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 296.911890][ T3384] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 297.524722][ T3384] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 297.638995][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 297.789390][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 297.790163][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.791299][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 297.791337][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.791354][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.791375][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.791394][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.791426][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.999577][ T9] usb 9-1: usb_control_msg returned -32 [ 297.999601][ T9] usbtmc 9-1:16.0: can't read capabilities [ 298.033534][T17641] fuse: fd is not a fuse device [ 298.333998][T17649] netlink: 'syz.3.4864': attribute type 2 has an invalid length. [ 298.648541][T17660] fuse: fd is not a fuse device [ 298.705850][T17661] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 298.770391][T17663] fuse: fd is not a fuse device [ 299.035228][T17580] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 299.044843][ T3384] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 299.044860][ T3384] em28xx 10-1:0.0: board has no eeprom [ 299.109066][ T3384] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 299.109090][ T3384] em28xx 10-1:0.0: dvb set to bulk mode. [ 299.112327][ T9] em28xx 10-1:0.0: Binding DVB extension [ 299.120738][ T3384] usb 10-1: USB disconnect, device number 19 [ 299.121965][ T3384] em28xx 10-1:0.0: Disconnecting em28xx [ 299.151059][T17681] fuse: fd is not a fuse device [ 299.151813][ T9] em28xx 10-1:0.0: Registering input extension [ 299.152481][ T3384] em28xx 10-1:0.0: Closing input extension [ 299.163033][T17683] fuse: fd is not a fuse device [ 299.185651][ T3384] em28xx: Freeing device [ 299.197208][T17685] fuse: fd is not a fuse device [ 299.643341][T17697] netlink: 'syz.5.4883': attribute type 39 has an invalid length. [ 299.789042][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 299.789055][ T43] audit: type=1800 audit(1789606957.486:2120): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 299.801170][ T43] audit: type=1800 audit(1789606957.496:2121): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195654 res=0 errno=0 [ 299.966931][ T43] audit: type=1400 audit(1789606957.656:2122): avc: denied { unlink } for pid=17702 comm="syz.5.4885" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 300.007069][ T43] audit: type=1800 audit(1789606957.696:2123): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 300.097292][ T43] audit: type=1800 audit(1789606957.786:2124): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 300.117150][T17713] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 300.169154][ T43] audit: type=1400 audit(1789606957.856:2125): avc: denied { append } for pid=17718 comm="syz.5.4892" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 300.172603][ T43] audit: type=1800 audit(1789606957.866:2126): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 300.397681][ T3384] usb 9-1: USB disconnect, device number 20 [ 300.467828][T17723] netlink: 'syz.4.4893': attribute type 2 has an invalid length. [ 300.545079][ T43] audit: type=1400 audit(1789606958.226:2127): avc: denied { unmount } for pid=6638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 300.550764][T17725] fuse: fd is not a fuse device [ 300.611850][ T43] audit: type=1800 audit(1789606958.306:2128): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195747 res=0 errno=0 [ 300.999553][T17752] __nla_validate_parse: 3 callbacks suppressed [ 300.999571][T17752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4902'. [ 301.044840][ T43] audit: type=1800 audit(1789606958.736:2129): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 301.080767][T17757] netlink: 'syz.5.4906': attribute type 2 has an invalid length. [ 301.470149][T17769] fuse: fd is not a fuse device [ 301.857626][T17782] overlayfs: failed to clone upperpath [ 301.965726][ T5761] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 301.967148][T17784] netlink: 'syz.2.4917': attribute type 2 has an invalid length. [ 302.143688][T17798] fuse: fd is not a fuse device [ 302.158212][T17796] team0: Port device vlan3 added [ 302.227627][T17803] Bluetooth: Error in BCSP hdr checksum [ 302.238442][ T5092] Bluetooth: hci2: sending frame failed (-49) [ 302.238550][ T5761] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 302.523763][T17811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4923'. [ 303.368973][T17841] fuse: fd is not a fuse device [ 303.387633][T17836] fuse: fd is not a fuse device [ 303.553506][T17860] fuse: fd is not a fuse device [ 303.609210][ T42] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 303.772304][ T42] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 303.773527][ T42] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 303.773567][ T42] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 303.773590][ T42] usb 10-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 303.773612][ T42] usb 10-1: config 1 interface 0 has no altsetting 0 [ 303.776020][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.776041][ T42] usb 10-1: Product: syz [ 303.776054][ T42] usb 10-1: Manufacturer: syz [ 303.776067][ T42] usb 10-1: SerialNumber: syz [ 303.796324][T17837] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 303.796496][T17837] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 303.882466][T17876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4949'. [ 304.147117][ T42] rtl8150 10-1:1.0: couldn't find required endpoints [ 304.147289][ T42] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 304.166679][ T42] usb 10-1: USB disconnect, device number 20 [ 304.824314][T17918] fuse: fd is not a fuse device [ 304.895650][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 304.895665][ T43] audit: type=1800 audit(1789606962.586:2173): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 304.935657][ T43] audit: type=1800 audit(1789606962.626:2174): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196179 res=0 errno=0 [ 304.938544][ T43] audit: type=1800 audit(1789606962.626:2175): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=196183 res=0 errno=0 [ 304.986201][ T43] audit: type=1800 audit(1789606962.676:2176): pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=196211 res=0 errno=0 [ 305.107645][T17935] fuse: fd is not a fuse device [ 305.134734][ T43] audit: type=1800 audit(1789606962.826:2177): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 305.140278][ T43] audit: type=1400 audit(1789606962.836:2178): avc: denied { write } for pid=17939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.177588][ T43] audit: type=1800 audit(1789606962.866:2179): pid=17944 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.4971" name="new_array" dev="sysfs" ino=64746 res=0 errno=0 [ 305.181217][T17944] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.251576][T17949] FAULT_INJECTION: forcing a failure. [ 305.251576][T17949] name failslab, interval 1, probability 0, space 0, times 0 [ 305.251616][T17949] CPU: 0 UID: 0 PID: 17949 Comm: syz.4.4973 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.251656][T17949] Tainted: [L]=SOFTLOCKUP [ 305.251664][T17949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.251678][T17949] Call Trace: [ 305.251687][T17949] [ 305.251696][T17949] dump_stack_lvl+0x100/0x190 [ 305.251747][T17949] should_fail_ex.cold+0x5/0xa [ 305.251779][T17949] should_failslab+0xc2/0x120 [ 305.251806][T17949] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 305.251824][T17949] ? v9fs_init_fs_context+0x17f/0x5c0 [ 305.251855][T17949] kstrdup+0x51/0xe0 [ 305.251887][T17949] v9fs_init_fs_context+0x17f/0x5c0 [ 305.251921][T17949] alloc_fs_context+0x60c/0xf40 [ 305.251961][T17949] path_mount+0xdbd/0x24c0 [ 305.251998][T17949] ? __pfx_path_mount+0x10/0x10 [ 305.252036][T17949] ? lockdep_hardirqs_on+0x7d/0x110 [ 305.252080][T17949] ? putname+0xb1/0x110 [ 305.252111][T17949] ? kmem_cache_free+0x127/0x6c0 [ 305.252156][T17949] ? __x64_sys_mount+0x293/0x310 [ 305.252190][T17949] __x64_sys_mount+0x293/0x310 [ 305.252222][T17949] ? __pfx___x64_sys_mount+0x10/0x10 [ 305.252265][T17949] do_syscall_64+0x123/0x790 [ 305.252299][T17949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.252324][T17949] RIP: 0033:0x7f45e639e159 [ 305.252373][T17949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.252398][T17949] RSP: 002b:00007f45e72c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 305.252423][T17949] RAX: ffffffffffffffda RBX: 00007f45e6625fa0 RCX: 00007f45e639e159 [ 305.252441][T17949] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000140 [ 305.252457][T17949] RBP: 00007f45e643506b R08: 0000200000000580 R09: 0000000000000000 [ 305.252472][T17949] R10: 0000000002210088 R11: 0000000000000246 R12: 0000000000000000 [ 305.252486][T17949] R13: 00007f45e6626038 R14: 00007f45e6625fa0 R15: 00007fff113efc38 [ 305.252520][T17949] [ 305.252728][ T43] audit: type=1400 audit(1789606962.946:2180): avc: denied { mounton } for pid=17946 comm="syz.4.4973" path="/1083/proc/2393/task/2394/fail-nth" dev="proc" ino=61188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 305.255542][ T43] audit: type=1400 audit(1789606962.946:2181): avc: denied { write } for pid=17952 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.256233][ T43] audit: type=1800 audit(1789606962.946:2182): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 305.963821][T17995] batman_adv: batadv0: Adding interface: veth0 [ 305.963842][T17995] batman_adv: batadv0: Interface activated: veth0 [ 305.967613][T17995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4990'. [ 305.967640][T17995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.969899][T17995] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 305.969924][T17995] batman_adv: batadv0: Removing interface: ipvlan2 [ 305.976813][T17995] batman_adv: batadv0: Interface deactivated: veth0 [ 305.976828][T17995] batman_adv: batadv0: Removing interface: veth0 [ 306.108912][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 306.259615][ T9] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 306.260494][ T9] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 306.260515][ T9] usb 9-1: config 1 has no interface number 0 [ 306.262934][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.262958][ T9] usb 9-1: Product: syz [ 306.262971][ T9] usb 9-1: Manufacturer: syz [ 306.262985][ T9] usb 9-1: SerialNumber: syz [ 306.281414][ T9] usb 9-1: 3:1 : does not exist [ 306.281439][ T9] usb 9-1: 3:2 : does not exist [ 307.045883][ T9] usb 9-1: USB disconnect, device number 21 [ 307.603076][T18031] FAULT_INJECTION: forcing a failure. [ 307.603076][T18031] name failslab, interval 1, probability 0, space 0, times 0 [ 307.603111][T18031] CPU: 0 UID: 0 PID: 18031 Comm: syz.4.5004 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.603136][T18031] Tainted: [L]=SOFTLOCKUP [ 307.603143][T18031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.603155][T18031] Call Trace: [ 307.603162][T18031] [ 307.603170][T18031] dump_stack_lvl+0x100/0x190 [ 307.603219][T18031] should_fail_ex.cold+0x5/0xa [ 307.603249][T18031] should_failslab+0xc2/0x120 [ 307.603282][T18031] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 307.603306][T18031] ? alloc_inode+0x183/0x250 [ 307.603330][T18031] alloc_inode+0x183/0x250 [ 307.603349][T18031] iget_locked+0x1d9/0x6d0 [ 307.603369][T18031] ? __pfx_iget_locked+0x10/0x10 [ 307.603389][T18031] ? down_read+0x13b/0x4c0 [ 307.603423][T18031] ? __pfx_down_read+0x10/0x10 [ 307.603466][T18031] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 307.603507][T18031] kernfs_get_inode+0x46/0x470 [ 307.603535][T18031] kernfs_get_tree+0x636/0xbb0 [ 307.603565][T18031] ? __pfx_kernfs_get_tree+0x10/0x10 [ 307.603595][T18031] ? bpf_lsm_capable+0x9/0x10 [ 307.603629][T18031] vfs_get_tree+0x92/0x320 [ 307.603657][T18031] vfs_cmd_create+0xd7/0x2a0 [ 307.603680][T18031] __do_sys_fsconfig+0x55a/0xcb0 [ 307.603702][T18031] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 307.603737][T18031] do_syscall_64+0x123/0x790 [ 307.603765][T18031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.603785][T18031] RIP: 0033:0x7f45e639e159 [ 307.603801][T18031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.603820][T18031] RSP: 002b:00007f45e72c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 307.603839][T18031] RAX: ffffffffffffffda RBX: 00007f45e6625fa0 RCX: 00007f45e639e159 [ 307.603851][T18031] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 307.603862][T18031] RBP: 00007f45e643506b R08: 0000000000000000 R09: 0000000000000000 [ 307.603874][T18031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.603887][T18031] R13: 00007f45e6626038 R14: 00007f45e6625fa0 R15: 00007fff113efc38 [ 307.603913][T18031] [ 307.963513][T18059] FAULT_INJECTION: forcing a failure. [ 307.963513][T18059] name failslab, interval 1, probability 0, space 0, times 0 [ 307.963547][T18059] CPU: 1 UID: 0 PID: 18059 Comm: syz.5.5015 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.963574][T18059] Tainted: [L]=SOFTLOCKUP [ 307.963580][T18059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.963591][T18059] Call Trace: [ 307.963599][T18059] [ 307.963607][T18059] dump_stack_lvl+0x100/0x190 [ 307.963640][T18059] should_fail_ex.cold+0x5/0xa [ 307.963669][T18059] should_failslab+0xc2/0x120 [ 307.963696][T18059] __kmalloc_cache_noprof+0x91/0x6d0 [ 307.963725][T18059] ? snd_midi_event_new+0x6f/0x210 [ 307.963759][T18059] snd_midi_event_new+0x6f/0x210 [ 307.963782][T18059] snd_virmidi_input_open+0x107/0x470 [ 307.963811][T18059] open_substream+0x480/0x970 [ 307.963841][T18059] rawmidi_open_priv+0x524/0x6f0 [ 307.963873][T18059] snd_rawmidi_open+0x4b4/0xb90 [ 307.963896][T18059] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 307.963911][T18059] ? lock_acquire+0x1d1/0x380 [ 307.963933][T18059] ? __pfx_default_wake_function+0x10/0x10 [ 307.963956][T18059] ? soundcore_open+0x231/0x5a0 [ 307.963978][T18059] ? soundcore_open+0x231/0x5a0 [ 307.964002][T18059] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 307.964022][T18059] soundcore_open+0x2e3/0x5a0 [ 307.964055][T18059] ? __pfx_soundcore_open+0x10/0x10 [ 307.964078][T18059] chrdev_open+0x234/0x6a0 [ 307.964105][T18059] ? __pfx_chrdev_open+0x10/0x10 [ 307.964131][T18059] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 307.964162][T18059] do_dentry_open+0x6ab/0x14d0 [ 307.964182][T18059] ? __pfx_chrdev_open+0x10/0x10 [ 307.964210][T18059] vfs_open+0x82/0x3f0 [ 307.964235][T18059] path_openat+0x19fa/0x2440 [ 307.964263][T18059] ? __pfx_path_openat+0x10/0x10 [ 307.964293][T18059] do_file_open+0x20e/0x430 [ 307.964319][T18059] ? __pfx_do_file_open+0x10/0x10 [ 307.964359][T18059] ? _raw_spin_unlock+0x28/0x50 [ 307.964381][T18059] ? alloc_fd+0x471/0x7a0 [ 307.964412][T18059] do_sys_openat2+0x10f/0x1e0 [ 307.964441][T18059] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.964465][T18059] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 307.964499][T18059] __x64_sys_openat+0x12d/0x210 [ 307.964527][T18059] ? __pfx___x64_sys_openat+0x10/0x10 [ 307.964564][T18059] do_syscall_64+0x123/0x790 [ 307.964592][T18059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.964612][T18059] RIP: 0033:0x7f99c695e98e [ 307.964627][T18059] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.964645][T18059] RSP: 002b:00007f99c784bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.964665][T18059] RAX: ffffffffffffffda RBX: 00007f99c784c6c0 RCX: 00007f99c695e98e [ 307.964677][T18059] RDX: 0000000000000000 RSI: 00007f99c784bc00 RDI: ffffffffffffff9c [ 307.964688][T18059] RBP: 00007f99c784bc00 R08: 0000000000000000 R09: 0000000000000000 [ 307.964701][T18059] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 307.964712][T18059] R13: 00007f99c6c26038 R14: 00007f99c6c25fa0 R15: 00007ffff98605d8 [ 307.964738][T18059] [ 308.109534][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5017'. [ 308.518926][ T42] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 308.528402][T18077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18077 comm=syz.4.5024 [ 308.529261][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5024'. [ 308.530838][T18081] fuse: fd is not a fuse device [ 308.669319][ T42] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 308.670572][ T42] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 308.670600][ T42] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 308.670616][ T42] usb 10-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 308.670635][ T42] usb 10-1: config 220 has no interface number 1 [ 308.670671][ T42] usb 10-1: config 220 interface 0 has no altsetting 0 [ 308.670687][ T42] usb 10-1: config 220 interface 76 has no altsetting 0 [ 308.673068][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.673104][ T42] usb 10-1: Product: syz [ 308.673121][ T42] usb 10-1: Manufacturer: syz [ 308.673136][ T42] usb 10-1: SerialNumber: syz [ 308.895287][ T42] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 308.895321][ T42] uvcvideo 10-1:220.0: No valid video chain found. [ 308.902217][ T42] usb 10-1: USB disconnect, device number 21 [ 309.020065][T18101] kvm: pic: level sensitive irq not supported [ 309.023628][T18101] kvm: pic: level sensitive irq not supported [ 309.024662][T18101] kvm: pic: level sensitive irq not supported [ 309.030294][T18101] kvm: pic: single mode not supported [ 309.030309][T18101] kvm: pic: level sensitive irq not supported [ 309.032572][T18101] kvm: pic: single mode not supported [ 309.037022][T18101] kvm: pic: level sensitive irq not supported [ 309.037876][T18101] kvm: pic: single mode not supported [ 309.040042][T18101] kvm: pic: level sensitive irq not supported [ 309.198371][T18110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18110 comm=syz.3.5035 [ 309.198984][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5035'. [ 309.394047][T18124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.527902][T18128] kvm: pic: non byte write [ 309.656539][T18139] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 310.058230][ T43] kauditd_printk_skb: 50 callbacks suppressed [ 310.058250][ T43] audit: type=1800 audit(1789606967.746:2233): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 310.130371][ T43] audit: type=1800 audit(1789606967.816:2234): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 310.161409][T18172] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 310.166968][ T43] audit: type=1400 audit(1789606967.856:2235): avc: denied { setattr } for pid=18170 comm="syz.5.5066" name="file0" dev="cgroup2" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.192138][ T43] audit: type=1800 audit(1789606967.886:2236): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 310.699603][ T43] audit: type=1800 audit(1789606968.396:2237): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 310.781159][ T43] audit: type=1800 audit(1789606968.476:2238): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 311.169026][ T43] audit: type=1800 audit(1789606968.856:2239): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 311.175118][T18197] netlink: 'syz.5.5075': attribute type 3 has an invalid length. [ 311.175147][T18197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5075'. [ 311.227263][ T43] audit: type=1800 audit(1789606968.916:2240): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 311.438210][T18209] fuse: fd is not a fuse device [ 311.815124][T18219] overlayfs: failed to clone upperpath [ 312.164203][ T43] audit: type=1800 audit(1789606969.856:2241): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 312.297973][ T43] audit: type=1800 audit(1789606969.986:2242): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 312.348496][T18236] overlayfs: failed to clone upperpath [ 312.619119][ T9] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 312.768834][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 312.769668][ T9] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 312.770944][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.770964][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.771000][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 312.771023][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 312.771056][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.780553][ T9] hub 10-1:1.0: bad descriptor, ignoring hub [ 312.780574][ T9] hub 10-1:1.0: probe with driver hub failed with error -5 [ 312.780984][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 312.780997][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 312.805938][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 312.805957][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 313.460354][ T42] usb 10-1: USB disconnect, device number 22 [ 313.794126][T18262] FAULT_INJECTION: forcing a failure. [ 313.794126][T18262] name fail_futex, interval 1, probability 0, space 0, times 0 [ 313.794170][T18262] CPU: 0 UID: 0 PID: 18262 Comm: syz.4.5099 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.794201][T18262] Tainted: [L]=SOFTLOCKUP [ 313.794209][T18262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.794223][T18262] Call Trace: [ 313.794231][T18262] [ 313.794241][T18262] dump_stack_lvl+0x100/0x190 [ 313.794297][T18262] should_fail_ex.cold+0x5/0xa [ 313.794361][T18262] get_futex_key+0x1d0/0x14f0 [ 313.794416][T18262] ? __pfx_get_futex_key+0x10/0x10 [ 313.794445][T18262] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 313.794472][T18262] ? __smp_call_single_queue+0x17e/0x450 [ 313.794491][T18262] ? __pfx___smp_call_single_queue+0x10/0x10 [ 313.794516][T18262] futex_wait_setup+0x91/0x540 [ 313.794535][T18262] __futex_wait+0x19f/0x300 [ 313.794550][T18262] ? __pfx___futex_wait+0x10/0x10 [ 313.794563][T18262] ? __pfx_try_to_wake_up+0x10/0x10 [ 313.794579][T18262] ? futex_hash+0x311/0x400 [ 313.794598][T18262] ? __pfx_futex_wake_mark+0x10/0x10 [ 313.794623][T18262] ? find_held_lock+0x2b/0x80 [ 313.794643][T18262] ? futex_wake+0x4ea/0x5e0 [ 313.794670][T18262] futex_wait+0xe6/0x370 [ 313.794697][T18262] ? __pfx_futex_wait+0x10/0x10 [ 313.794726][T18262] ? rcu_read_lock_any_held+0x6a/0x90 [ 313.794757][T18262] ? find_held_lock+0x2b/0x80 [ 313.794786][T18262] ? ksys_write+0x190/0x250 [ 313.794815][T18262] ? ksys_write+0x190/0x250 [ 313.794842][T18262] do_futex+0x265/0x440 [ 313.794882][T18262] ? __pfx_do_futex+0x10/0x10 [ 313.794904][T18262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 313.794934][T18262] __x64_sys_futex+0x34f/0x4d0 [ 313.794956][T18262] ? __pfx___x64_sys_futex+0x10/0x10 [ 313.794980][T18262] do_syscall_64+0x123/0x790 [ 313.795001][T18262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.795016][T18262] RIP: 0033:0x7f45e639e159 [ 313.795029][T18262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.795041][T18262] RSP: 002b:00007f45e72c30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 313.795056][T18262] RAX: ffffffffffffffda RBX: 00007f45e6625fa8 RCX: 00007f45e639e159 [ 313.795064][T18262] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f45e6625fa8 [ 313.795072][T18262] RBP: 00007f45e6625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 313.795081][T18262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.795089][T18262] R13: 00007f45e6626038 R14: 00007fff113efb50 R15: 00007fff113efc38 [ 313.795106][T18262] [ 313.857068][T18264] netlink: 'syz.2.5104': attribute type 1 has an invalid length. [ 313.935621][T18264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5104'. [ 313.936399][T18264] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.984466][T18273] overlayfs: failed to clone upperpath [ 314.235951][T18284] ip_tables: iptables: counters copy to user failed while replacing table [ 314.386010][T18288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5111'. [ 315.528994][ T42] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 315.698833][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 315.699587][ T42] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 315.700504][ T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.700521][ T42] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 315.700553][ T42] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 315.700572][ T42] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 315.700600][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.707622][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 315.707636][ T43] audit: type=1800 audit(1789606973.396:2259): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197354 res=0 errno=0 [ 315.707673][ T43] audit: type=1800 audit(1789606973.396:2260): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=197383 res=0 errno=0 [ 315.711838][ T42] hub 9-1:1.0: bad descriptor, ignoring hub [ 315.711859][ T42] hub 9-1:1.0: probe with driver hub failed with error -5 [ 315.712278][ T42] cdc_wdm 9-1:1.0: skipping garbage [ 315.712290][ T42] cdc_wdm 9-1:1.0: skipping garbage [ 315.719478][ T43] audit: type=1800 audit(1789606973.406:2261): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=197361 res=0 errno=0 [ 315.725273][ T43] audit: type=1800 audit(1789606973.416:2262): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=197362 res=0 errno=0 [ 315.725318][ T43] audit: type=1800 audit(1789606973.416:2263): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=197363 res=0 errno=0 [ 315.792914][ T43] audit: type=1800 audit(1789606973.486:2264): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197411 res=0 errno=0 [ 315.800811][ T42] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 315.800823][ T42] cdc_wdm 9-1:1.0: Unknown control protocol [ 315.803026][ T43] audit: type=1800 audit(1789606973.496:2265): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197430 res=0 errno=0 [ 316.004204][ T43] audit: type=1800 audit(1789606973.696:2266): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 316.217152][T18302] fuse: Bad value for 'fd' [ 316.342981][ T43] audit: type=1804 audit(1789606974.016:2267): pid=18302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.5117" name="/newroot/643/file0" dev="tmpfs" ino=3396 res=1 errno=0 [ 316.378943][ T43] audit: type=1804 audit(1789606974.076:2268): pid=18305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.5118" name="file0" dev="tmpfs" ino=8062 res=1 errno=0 [ 316.420842][ T42] usb 9-1: USB disconnect, device number 22 [ 316.512671][T18305] uprobe: syz.2.5118:18305 failed to unregister, leaking uprobe [ 317.979160][T18329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5126'. [ 320.199438][T18390] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5146'. [ 321.266000][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 321.266024][ T43] audit: type=1800 audit(1789606978.956:2277): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 321.590861][ T42] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 321.738826][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 321.739586][ T42] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.740772][ T42] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 321.740811][ T42] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 321.740833][ T42] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 321.740852][ T42] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 321.740873][ T42] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 321.740892][ T42] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.740923][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.745493][ T43] audit: type=1800 audit(1789606979.436:2278): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197655 res=0 errno=0 [ 321.755591][ T43] audit: type=1800 audit(1789606979.446:2279): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=197684 res=0 errno=0 [ 321.756885][ T43] audit: type=1800 audit(1789606979.446:2280): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=197662 res=0 errno=0 [ 321.759871][ T43] audit: type=1800 audit(1789606979.456:2281): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=197663 res=0 errno=0 [ 321.763405][ T43] audit: type=1800 audit(1789606979.456:2282): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=197664 res=0 errno=0 [ 321.778371][ T43] audit: type=1800 audit(1789606979.466:2283): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197704 res=0 errno=0 [ 321.956713][ T42] usb 9-1: GET_CAPABILITIES returned 0 [ 321.956754][ T42] usbtmc 9-1:16.0: can't read capabilities [ 321.967919][ T43] audit: type=1800 audit(1789606979.656:2284): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197721 res=0 errno=0 [ 322.736838][T18425] fuse: Bad value for 'fd' [ 322.740569][ T43] audit: type=1804 audit(1789606980.436:2285): pid=18425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.5158" name="file0" dev="tmpfs" ino=8572 res=1 errno=0 [ 324.089814][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.489987][T18436] fuse: fd is not a fuse device [ 324.834912][ T5844] usb 9-1: USB disconnect, device number 23 [ 324.999071][ T43] audit: type=1800 audit(1789606982.696:2286): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 325.053632][T18455] binder: 18452:18455 ioctl c0306201 200000000640 returned -22 [ 325.194059][T18465] fuse: Bad value for 'fd' [ 325.518810][T18458] kvm: pic: non byte write [ 326.326649][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 326.326666][ T43] audit: type=1800 audit(1789606984.016:2289): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 326.453514][T18484] fuse: fd is not a fuse device [ 326.641383][ T1018] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 326.788768][ T1018] usb 10-1: Using ep0 maxpacket: 8 [ 326.789360][ T1018] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 326.790293][ T1018] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.790312][ T1018] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.791186][ T1018] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.791204][ T1018] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.793536][ T1018] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.793555][ T1018] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.795483][ T1018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.795505][ T1018] usb 10-1: Product: syz [ 326.795520][ T1018] usb 10-1: Manufacturer: syz [ 326.795536][ T1018] usb 10-1: SerialNumber: syz [ 326.802780][ T1018] usb 10-1: config 0 descriptor?? [ 326.830194][T18496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5182'. [ 326.959436][T18496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18496 comm=syz.3.5182 [ 326.964047][ T43] audit: type=1800 audit(1789606984.656:2290): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197870 res=0 errno=0 [ 326.965296][ T43] audit: type=1800 audit(1789606984.656:2291): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=197902 res=0 errno=0 [ 326.966107][ T43] audit: type=1800 audit(1789606984.656:2292): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=197877 res=0 errno=0 [ 326.966563][ T43] audit: type=1800 audit(1789606984.656:2293): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=197878 res=0 errno=0 [ 326.967012][ T43] audit: type=1800 audit(1789606984.656:2294): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=197899 res=0 errno=0 [ 326.967448][ T43] audit: type=1800 audit(1789606984.656:2295): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=197900 res=0 errno=0 [ 326.968204][ T43] audit: type=1800 audit(1789606984.656:2296): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=197879 res=0 errno=0 [ 326.969156][ T43] audit: type=1800 audit(1789606984.666:2297): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=197901 res=0 errno=0 [ 327.156220][ T9] usb 10-1: USB disconnect, device number 23 [ 327.702483][ T43] audit: type=1800 audit(1789606985.396:2298): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 327.842819][ T5847] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 327.980746][T18529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.380814][T18541] xfrm0: entered promiscuous mode [ 328.440741][T18541] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 328.442666][T18541] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 328.442853][T18541] ip6tnl1: entered promiscuous mode [ 328.444397][T18541] mac80211_hwsim hwsim19 wlan2: entered promiscuous mode [ 328.445712][T18541] ipvlan2: entered promiscuous mode [ 328.474199][T18541] @: entered promiscuous mode [ 328.481264][T18541] bond2: entered promiscuous mode [ 328.491084][T18541] bond3: entered promiscuous mode [ 328.495138][T18541] bond4: entered promiscuous mode [ 328.495980][T18541] vlan0: entered promiscuous mode [ 328.496251][T18541] veth2: entered promiscuous mode [ 328.496397][T18541] veth3: entered promiscuous mode [ 328.508784][ T5550] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.508820][ T5550] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.508838][ T5550] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.662743][T18554] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 330.042627][T18588] lo: left promiscuous mode [ 330.043844][T18588] tunl0: left promiscuous mode [ 330.044419][T18588] gre0: left promiscuous mode [ 330.047107][T18588] erspan0: left promiscuous mode [ 330.047781][T18588] ip_vti0: left promiscuous mode [ 330.048290][T18588] ip6_vti0: left promiscuous mode [ 330.049338][T18588] sit0: left promiscuous mode [ 330.052679][T18588] ip6tnl0: left promiscuous mode [ 330.053563][T18588] ip6gre0: left promiscuous mode [ 330.055826][T18588] bridge0: left promiscuous mode [ 330.056291][T18588] vcan0: left promiscuous mode [ 330.056805][T18588] bond0: left promiscuous mode [ 330.057555][T18588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.058016][T18588] team0: left promiscuous mode [ 330.058533][T18588] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.058790][T18588] tipc: Resetting bearer [ 330.058904][T18588] tipc: Resetting bearer [ 330.059040][T18588] dummy0: left promiscuous mode [ 330.059789][T18588] nlmon0: left promiscuous mode [ 330.060252][T18588] veth0: left promiscuous mode [ 330.060724][T18588] veth1: left promiscuous mode [ 330.062564][T18588] wg0: left promiscuous mode [ 330.077922][T18588] wg1: left promiscuous mode [ 330.083616][T18588] wg2: left promiscuous mode [ 330.084245][T18588] veth0_to_bridge: left promiscuous mode [ 330.085279][T18588] veth1_to_bridge: left promiscuous mode [ 330.086577][T18588] veth0_to_bond: left promiscuous mode [ 330.087035][T18588] bond_slave_0: left promiscuous mode [ 330.087430][T18588] veth1_to_bond: left promiscuous mode [ 330.087881][T18588] bond_slave_1: left promiscuous mode [ 330.088498][T18588] veth0_to_team: left promiscuous mode [ 330.090057][T18588] team_slave_0: left promiscuous mode [ 330.090741][T18588] veth1_to_team: left promiscuous mode [ 330.091251][T18588] team_slave_1: left promiscuous mode [ 330.091680][T18588] veth0_to_batadv: left promiscuous mode [ 330.092151][T18588] batadv_slave_0: left promiscuous mode [ 330.092672][T18588] xfrm0: left promiscuous mode [ 330.093414][T18588] veth0_to_hsr: left promiscuous mode [ 330.094226][T18588] veth1_to_hsr: left promiscuous mode [ 330.095089][T18588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.095100][T18588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.095134][T18588] hsr0: left promiscuous mode [ 330.096054][T18588] veth1_virt_wifi: left promiscuous mode [ 330.096928][T18588] veth0_virt_wifi: left promiscuous mode [ 330.098068][T18588] virt_wifi0: left promiscuous mode [ 330.099002][T18588] veth1_vlan: left promiscuous mode [ 330.100176][T18588] »»»»»»: left promiscuous mode [ 330.100775][T18588] vlan1: left promiscuous mode [ 330.101471][T18588] veth1_vlan: entered promiscuous mode [ 330.101564][T18588] macvlan0: left promiscuous mode [ 330.102235][T18588] macvlan1: left promiscuous mode [ 330.102922][T18588] ipvlan0: left promiscuous mode [ 330.103512][T18588] ipvlan1: left promiscuous mode [ 330.104139][T18588] veth1_macvtap: left promiscuous mode [ 330.104636][T18588] veth0_macvtap: left promiscuous mode [ 330.105172][T18588] veth0_macvtap: entered promiscuous mode [ 330.105254][T18588] macvtap0: left promiscuous mode [ 330.105811][T18588] veth1_macvtap: entered promiscuous mode [ 330.105976][T18588] macsec0: left promiscuous mode [ 330.106746][T18588] geneve0: left promiscuous mode [ 330.107605][T18588] geneve1: left promiscuous mode [ 330.108550][T18588] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 330.108826][T18588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 330.109223][T18588] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 330.109347][T18588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.109718][T18588] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 330.109897][T18588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.110301][T18588] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 330.110811][T18588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.111365][T18588] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 330.112033][T18588] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 330.112775][T18588] hsr1: left promiscuous mode [ 330.114044][T18588] bond1: left promiscuous mode [ 330.114613][T18588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.115213][T18588] geneve2: left promiscuous mode [ 330.116153][T18588] tipc: Resetting bearer [ 330.116211][T18588] tipc: Resetting bearer [ 330.116411][T18588] ip6erspan0: left promiscuous mode [ 330.116981][T18588] geneve3: left promiscuous mode [ 330.117567][T18588] gre1: left promiscuous mode [ 330.132653][T18588] ip6tnl1: left promiscuous mode [ 330.133751][T18588] mac80211_hwsim hwsim19 wlan2: left promiscuous mode [ 330.134133][T18588] ipvlan2: left promiscuous mode [ 330.134143][T18588] ipvlan2: left allmulticast mode [ 330.134150][T18588] virt_wifi0: left allmulticast mode [ 330.134703][T18588] @: left promiscuous mode [ 330.135387][T18588] bond2: left promiscuous mode [ 330.135525][T18588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 330.135982][T18588] bond3: left promiscuous mode [ 330.136115][T18588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.136664][T18588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.137054][T18588] vlan0: left promiscuous mode [ 330.137062][T18588] bond4: left promiscuous mode [ 330.137938][T18588] veth2: left promiscuous mode [ 330.138501][T18588] veth3: left promiscuous mode [ 330.139042][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.139068][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.139088][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.148006][ T717] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.148051][ T717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.153786][ T717] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.153867][ T717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.188339][ T5761] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 330.250924][ T717] tipc: Resetting bearer [ 330.265599][ T5550] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.265758][ T5550] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.289009][ T5550] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.289030][ T5550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.289044][ T5550] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.289063][ T5550] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.289077][ T5550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.289090][ T5550] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.304606][ T5894] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.419333][ T5894] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.509637][ T3382] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 330.529025][ T5894] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.659623][ T3382] usb 9-1: Using ep0 maxpacket: 8 [ 330.662765][ T3382] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 330.663711][ T3382] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.663731][ T3382] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.664614][ T3382] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.664632][ T3382] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.665524][ T3382] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.665535][ T3382] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.674553][ T3382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.674575][ T3382] usb 9-1: Product: syz [ 330.674586][ T3382] usb 9-1: Manufacturer: syz [ 330.674598][ T3382] usb 9-1: SerialNumber: syz [ 330.680032][ T3382] usb 9-1: config 0 descriptor?? [ 330.949813][ T3382] usb 9-1: USB disconnect, device number 24 [ 331.344367][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 331.344379][ T43] audit: type=1800 audit(1789606989.036:2320): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 331.828872][ T5894] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 331.980925][ T5894] usb 10-1: Using ep0 maxpacket: 32 [ 331.989032][ T5894] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 331.989887][ T5894] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 331.989900][ T5894] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 331.989911][ T5894] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 331.989935][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 331.989946][ T5894] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 331.989958][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 331.989968][ T5894] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 331.989979][ T5894] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 331.989998][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.991283][ T5894] usb 10-1: config 0 descriptor?? [ 331.992143][ T43] audit: type=1800 audit(1789606989.686:2321): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198344 res=0 errno=0 [ 331.993919][ T43] audit: type=1800 audit(1789606989.686:2322): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=198373 res=0 errno=0 [ 331.996632][ T43] audit: type=1800 audit(1789606989.686:2323): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=198351 res=0 errno=0 [ 331.997146][ T43] audit: type=1800 audit(1789606989.686:2324): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=198352 res=0 errno=0 [ 331.997695][ T43] audit: type=1800 audit(1789606989.686:2325): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=198353 res=0 errno=0 [ 332.003499][ T43] audit: type=1800 audit(1789606989.696:2326): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198393 res=0 errno=0 [ 332.970684][ T5894] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 332.973695][ T43] audit: type=1800 audit(1789606990.666:2327): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198410 res=0 errno=0 [ 333.171895][ T43] audit: type=1400 audit(1789606990.866:2328): avc: denied { read write } for pid=18607 comm="syz.5.5220" name="lp0" dev="devtmpfs" ino=3514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 333.172086][ T43] audit: type=1400 audit(1789606990.866:2329): avc: denied { open } for pid=18607 comm="syz.5.5220" path="/dev/usb/lp0" dev="devtmpfs" ino=3514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 333.200902][ T30] usb 10-1: USB disconnect, device number 24 [ 333.215864][ T30] usblp0: removed [ 333.969349][T18626] lo: left promiscuous mode [ 334.013061][T18626] tunl0: left promiscuous mode [ 334.022583][T18626] gre0: left promiscuous mode [ 334.048065][T18626] gretap0: left promiscuous mode [ 334.066491][T18626] erspan0: left promiscuous mode [ 334.078176][T18626] ip_vti0: left promiscuous mode [ 334.087226][T18626] ip6_vti0: left promiscuous mode [ 334.111680][T18626] sit0: left promiscuous mode [ 334.145502][T18626] ip6tnl0: left promiscuous mode [ 334.151659][T18626] ip6gre0: left promiscuous mode [ 334.156789][T18626] syz_tun: left promiscuous mode [ 334.169266][T18626] ip6gretap0: left promiscuous mode [ 334.187488][T18626] bridge0: left promiscuous mode [ 334.199932][T18626] bond0: left promiscuous mode [ 334.210100][T18626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.214578][T18626] team0: left promiscuous mode [ 334.220663][T18626] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.278375][T18626] nlmon0: left promiscuous mode [ 334.286792][T18626] batadv0: left promiscuous mode [ 334.292412][T18626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.297648][T18626] vxcan0: left promiscuous mode [ 334.307933][T18626] vxcan1: left promiscuous mode [ 334.308935][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 334.310240][T18626] veth0: left promiscuous mode [ 334.318206][T18626] veth1: left promiscuous mode [ 334.500845][T18626] wg0: left promiscuous mode [ 334.736623][T18626] wg2: left promiscuous mode [ 334.815701][T18626] veth0_to_bridge: left promiscuous mode [ 334.894358][T18626] veth1_to_bridge: left promiscuous mode [ 334.918277][T18626] veth0_to_bond: left promiscuous mode [ 334.924259][T18626] bond_slave_0: left promiscuous mode [ 334.934603][T18626] veth1_to_bond: left promiscuous mode [ 334.945018][T18626] bond_slave_1: left promiscuous mode [ 334.947563][T18626] veth0_to_team: left promiscuous mode [ 334.949659][T18626] team_slave_0: left promiscuous mode [ 334.950268][T18626] veth1_to_team: left promiscuous mode [ 334.952190][T18626] team_slave_1: left promiscuous mode [ 334.956042][T18626] veth0_to_batadv: left promiscuous mode [ 334.958141][T18626] batadv_slave_0: left promiscuous mode [ 334.959715][T18626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.961161][T18626] veth1_to_batadv: left promiscuous mode [ 334.963841][T18626] batadv_slave_1: left promiscuous mode [ 334.965640][T18626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.966388][T18626] xfrm0: left promiscuous mode [ 334.970283][T18626] veth0_to_hsr: left promiscuous mode [ 334.974410][T18626] veth1_to_hsr: left promiscuous mode [ 334.978929][T18626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.979003][T18626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.979101][T18626] hsr0: left promiscuous mode [ 334.982075][T18626] veth1_virt_wifi: left promiscuous mode [ 334.985207][T18626] veth0_virt_wifi: left promiscuous mode [ 334.995532][T18626] virt_wifi0: left promiscuous mode [ 335.001489][T18626] veth1_vlan: left promiscuous mode [ 335.043862][T18626] vlan0: left promiscuous mode [ 335.044564][T18626] vlan1: left promiscuous mode [ 335.057235][T18626] veth1_vlan: entered promiscuous mode [ 335.057372][T18626] macvlan0: left promiscuous mode [ 335.071652][T18626] macvlan1: left promiscuous mode [ 335.072279][T18626] ipvlan0: left promiscuous mode [ 335.073142][T18626] ipvlan1: left promiscuous mode [ 335.074133][T18626] veth1_macvtap: left promiscuous mode [ 335.074937][T18626] veth0_macvtap: left promiscuous mode [ 335.075699][T18626] veth0_macvtap: entered promiscuous mode [ 335.075854][T18626] macvtap0: left promiscuous mode [ 335.076433][T18626] veth1_macvtap: entered promiscuous mode [ 335.076538][T18626] macsec0: left promiscuous mode [ 335.077239][T18626] geneve0: left promiscuous mode [ 335.078158][T18626] geneve1: left promiscuous mode [ 335.115345][T18626] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 335.115561][T18626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.116183][T18626] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 335.119169][T18626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.119766][T18626] netdevsim netdevsim5 netdevsim2: left promiscuous mode [ 335.119997][T18626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.120641][T18626] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 335.120889][T18626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.128715][T18626] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 335.129309][T18626] vlan0008: left promiscuous mode [ 335.129324][T18626] dummy0: left promiscuous mode [ 335.136386][T18626] pimreg3: left promiscuous mode [ 335.137314][T18626] vxlan0: left promiscuous mode [ 335.139456][T18626] : left promiscuous mode [ 335.154275][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.154354][ T6844] bridge0: port 1(bridge_slave_0) entered listening state [ 335.155887][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.155965][ T6844] bridge0: port 2(bridge_slave_1) entered listening state [ 335.321470][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.321502][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.321790][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.321812][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.321838][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.321858][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.321884][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.321905][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.386288][T18634] tipc: Bearer : already 2 bearers with priority 0 [ 335.386307][T18634] tipc: Enabling of bearer rejected, cannot adjust to lower [ 335.389970][T18636] overlayfs: failed to clone upperpath [ 335.575859][T18639] fuse: Bad value for 'fd' [ 335.701780][T18642] jffs2: notice: (18642) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 336.086450][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5234'. [ 336.371356][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 336.371373][ T43] audit: type=1800 audit(1789606994.056:2335): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 336.374857][ T43] audit: type=1800 audit(1789606994.066:2336): pid=18663 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5239" name="nullb0" dev="tmpfs" ino=1582 res=0 errno=0 [ 336.455710][ T43] audit: type=1800 audit(1789606994.146:2337): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 336.539926][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 336.705845][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.709651][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.709673][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.709686][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.709760][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.711408][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.711426][ T9] usb 9-1: Product: syz [ 336.711438][ T9] usb 9-1: Manufacturer: syz [ 336.715832][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 336.715846][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 336.721334][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 336.721348][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 336.722575][ T43] audit: type=1800 audit(1789606994.416:2338): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198482 res=0 errno=0 [ 336.737334][ T43] audit: type=1800 audit(1789606994.426:2339): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=198513 res=0 errno=0 [ 336.744450][ T43] audit: type=1800 audit(1789606994.436:2340): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=198489 res=0 errno=0 [ 336.751235][ T43] audit: type=1800 audit(1789606994.436:2341): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=198490 res=0 errno=0 [ 336.751263][ T43] audit: type=1800 audit(1789606994.436:2342): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=198511 res=0 errno=0 [ 336.751284][ T43] audit: type=1800 audit(1789606994.436:2343): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=198512 res=0 errno=0 [ 336.751305][ T43] audit: type=1800 audit(1789606994.436:2344): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=198491 res=0 errno=0 [ 337.087324][ T9] usb 9-1: USB disconnect, device number 25 [ 337.434919][T18699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5253'. [ 337.463197][T18697] create_pit_timer: 15 callbacks suppressed [ 337.463209][T18697] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 337.496739][T18697] picdev_read: 9 callbacks suppressed [ 337.496754][T18697] kvm: pic: non byte read [ 337.498218][T18697] kvm: pic: non byte read [ 337.771169][T18710] tipc: Resetting bearer [ 337.771700][T18715] syzkaller0: entered promiscuous mode [ 337.771714][T18715] syzkaller0: entered allmulticast mode [ 338.161120][ T3384] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 338.319327][ T3384] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 338.320214][ T3384] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 338.320235][ T3384] usb 10-1: config 1 has no interface number 0 [ 338.322026][ T3384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.322038][ T3384] usb 10-1: Product: syz [ 338.322045][ T3384] usb 10-1: Manufacturer: syz [ 338.322052][ T3384] usb 10-1: SerialNumber: syz [ 338.334772][ T3384] usb 10-1: 3:1 : does not exist [ 338.334792][ T3384] usb 10-1: 3:2 : does not exist [ 338.510368][T18736] fuse: fd is not a fuse device [ 339.092582][ T10] usb 10-1: USB disconnect, device number 25 [ 339.548230][T18753] FAULT_INJECTION: forcing a failure. [ 339.548230][T18753] name failslab, interval 1, probability 0, space 0, times 0 [ 339.548253][T18753] CPU: 0 UID: 0 PID: 18753 Comm: syz.4.5271 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.548269][T18753] Tainted: [L]=SOFTLOCKUP [ 339.548273][T18753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.548280][T18753] Call Trace: [ 339.548284][T18753] [ 339.548289][T18753] dump_stack_lvl+0x100/0x190 [ 339.548317][T18753] should_fail_ex.cold+0x5/0xa [ 339.548334][T18753] should_failslab+0xc2/0x120 [ 339.548359][T18753] __kmalloc_noprof+0xfc/0x840 [ 339.548371][T18753] ? __pfx_from_kuid+0x10/0x10 [ 339.548385][T18753] ? tomoyo_init_log+0x1224/0x20c0 [ 339.548402][T18753] tomoyo_init_log+0x1224/0x20c0 [ 339.548418][T18753] ? vsnprintf+0x4c5/0x1300 [ 339.548439][T18753] ? __pfx_tomoyo_init_log+0x10/0x10 [ 339.548452][T18753] ? tomoyo_profile+0x47/0x60 [ 339.548466][T18753] ? tomoyo_domain_quota_is_ok+0x367/0x580 [ 339.548485][T18753] tomoyo_supervisor+0x506/0x1340 [ 339.548503][T18753] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 339.548526][T18753] ? tomoyo_realpath_from_path+0x19c/0x690 [ 339.548548][T18753] tomoyo_path_number_perm+0x445/0x580 [ 339.548561][T18753] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 339.548574][T18753] ? __pfx_futex_wait+0x10/0x10 [ 339.548589][T18753] ? __lock_acquire+0x5c0/0x1f40 [ 339.548607][T18753] ? __fget_files+0x34/0x3d0 [ 339.548621][T18753] ? find_held_lock+0x2b/0x80 [ 339.548650][T18753] ? hook_file_ioctl_common+0x140/0x440 [ 339.548669][T18753] ? __fget_files+0x21f/0x3d0 [ 339.548685][T18753] security_file_ioctl+0xd3/0x230 [ 339.548699][T18753] __x64_sys_ioctl+0xb7/0x210 [ 339.548713][T18753] do_syscall_64+0x123/0x790 [ 339.548730][T18753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.548742][T18753] RIP: 0033:0x7f45e639e159 [ 339.548752][T18753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.548763][T18753] RSP: 002b:00007f45e72c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.548774][T18753] RAX: ffffffffffffffda RBX: 00007f45e6625fa0 RCX: 00007f45e639e159 [ 339.548781][T18753] RDX: 0000000000000000 RSI: 00000000c058534b RDI: 0000000000000003 [ 339.548788][T18753] RBP: 00007f45e643506b R08: 0000000000000000 R09: 0000000000000000 [ 339.548795][T18753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.548801][T18753] R13: 00007f45e6626038 R14: 00007f45e6625fa0 R15: 00007fff113efc38 [ 339.548815][T18753] [ 340.358817][ T856] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 340.513144][ T856] usb 10-1: unable to get BOS descriptor or descriptor too short [ 340.513718][ T856] usb 10-1: not running at top speed; connect to a high speed hub [ 340.513743][ T856] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 340.514649][ T856] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 340.514669][ T856] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 340.514686][ T856] usb 10-1: config 14 has no interface number 0 [ 340.514700][ T856] usb 10-1: config 14 has no interface number 1 [ 340.514746][ T856] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 340.514767][ T856] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 340.514789][ T856] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 340.514812][ T856] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.514834][ T856] usb 10-1: config 14 interface 57 has no altsetting 0 [ 340.514850][ T856] usb 10-1: config 14 interface 228 has no altsetting 0 [ 340.518209][ T856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.518232][ T856] usb 10-1: Product: syz [ 340.518246][ T856] usb 10-1: Manufacturer: syz [ 340.518260][ T856] usb 10-1: SerialNumber: syz [ 340.857271][T18789] tipc: Enabling of bearer rejected, already enabled [ 341.094747][T18802] jffs2: notice: (18802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 341.127187][T18805] fuse: fd is not a fuse device [ 341.233815][ T856] legousbtower 10-1:14.57: interrupt endpoints not found [ 341.257645][T18810] jffs2: notice: (18810) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 341.538526][T18819] tipc: Enabling of bearer rejected, already enabled [ 341.631626][T18824] fuse: fd is not a fuse device [ 341.636367][ T856] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 341.647884][ T856] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 341.663281][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 341.663300][ T43] audit: type=1800 audit(1789606999.356:2383): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=199047 res=0 errno=0 [ 341.663343][ T43] audit: type=1800 audit(1789606999.356:2384): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=199048 res=0 errno=0 [ 341.663380][ T43] audit: type=1800 audit(1789606999.356:2385): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=199027 res=0 errno=0 [ 341.664173][ T43] audit: type=1800 audit(1789606999.356:2386): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=199049 res=0 errno=0 [ 341.669460][ T43] audit: type=1800 audit(1789606999.366:2387): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199070 res=0 errno=0 [ 341.670259][ T43] audit: type=1800 audit(1789606999.366:2388): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199105 res=0 errno=0 [ 341.676759][ T43] audit: type=1800 audit(1789606999.366:2389): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199123 res=0 errno=0 [ 341.869948][ T43] audit: type=1804 audit(1789606999.566:2390): pid=18830 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.5307" name="file0" dev="tmpfs" ino=8350 res=1 errno=0 [ 342.197868][ C0] usb 10-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 342.198943][ T3384] usb 10-1: USB disconnect, device number 26 [ 342.221874][ T3384] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 342.413227][ T43] audit: type=1800 audit(1789607000.106:2391): pid=18837 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5300" name="remove" dev="sysfs" ino=2619 res=0 errno=0 [ 342.523581][ T43] audit: type=1800 audit(1789607000.216:2392): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=2618 res=0 errno=0 [ 342.549955][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.997521][T18845] fuse: fd is not a fuse device [ 343.009130][T18840] syzkaller0: entered promiscuous mode [ 343.009489][T18840] syzkaller0: entered allmulticast mode [ 343.043263][T18840] tc action pedit 'at' offset 5 out of bounds [ 343.430165][T18859] Console: switching to colour dummy device 80x25 [ 344.364284][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5324'. [ 344.364310][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5324'. [ 344.366376][T18888] syzkaller0: entered promiscuous mode [ 344.366390][T18888] syzkaller0: entered allmulticast mode [ 344.614493][T18898] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 344.710995][T18908] syzkaller0: entered promiscuous mode [ 344.711010][T18908] syzkaller0: entered allmulticast mode [ 345.049792][T18919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5337'. [ 345.049816][T18919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5337'. [ 345.820894][T18951] syzkaller0: entered promiscuous mode [ 345.820917][T18951] syzkaller0: entered allmulticast mode [ 346.432312][T18981] syz.2.5359 (18981): attempted to duplicate a private mapping with mremap. This is not supported. [ 346.687982][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 346.687998][ T43] audit: type=1800 audit(1789607004.376:2412): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 346.699534][ T43] audit: type=1400 audit(1789607004.386:2413): avc: denied { shutdown } for pid=18992 comm="syz.5.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.757867][ T43] audit: type=1800 audit(1789607004.446:2414): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 346.868978][T18997] md: array md0 already has disks! [ 346.923634][T18997] md: invalid raid superblock magic on ram1 [ 346.923652][T18997] md: ram1 does not have a valid v0.0 superblock, not importing! [ 346.923713][T18997] md: md_import_device returned -22 [ 346.982067][ T43] audit: type=1400 audit(1789607004.676:2415): avc: denied { mounton } for pid=18996 comm="syz.5.5365" path="/683/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 347.076222][ T43] audit: type=1800 audit(1789607004.766:2416): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 347.365470][ T43] audit: type=1800 audit(1789607005.056:2417): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 347.536033][T19021] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 347.568336][T19021] kvm: pic: level sensitive irq not supported [ 347.569253][T19021] kvm: pic: non byte read [ 347.573933][T19021] kvm: pic: level sensitive irq not supported [ 347.574641][T19021] kvm: pic: non byte read [ 347.577927][T19021] kvm: pic: level sensitive irq not supported [ 347.578626][T19021] kvm: pic: non byte read [ 347.582047][T19021] kvm: pic: level sensitive irq not supported [ 347.593247][T19021] kvm: pic: non byte read [ 347.597756][T19021] kvm: pic: level sensitive irq not supported [ 347.600554][T19021] kvm: pic: non byte read [ 348.150561][T19027] kvm_intel: kvm [19026]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x56 [ 348.307969][T19036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5377'. [ 348.307993][T19036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5377'. [ 348.312665][ T43] audit: type=1800 audit(1789607006.006:2418): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 349.004985][ T43] audit: type=1800 audit(1789607006.696:2419): pid=19048 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5380" name="pm_trace" dev="sysfs" ino=863 res=0 errno=0 [ 349.083153][T19048] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 349.112813][T19048] kvm: pic: non byte read [ 349.154719][ T43] audit: type=1800 audit(1789607006.846:2420): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 349.320817][ T43] audit: type=1400 audit(1789607007.016:2421): avc: denied { transfer } for pid=19051 comm="syz.5.5381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 351.519325][T19114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5404'. [ 351.714208][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 351.714226][ T43] audit: type=1800 audit(1789607009.406:2429): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5399" name="file2" dev="sda1" ino=2052 res=0 errno=0 [ 352.125736][ T43] audit: type=1800 audit(1789607009.816:2430): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 352.244427][T19135] syzkaller0: entered promiscuous mode [ 352.244448][T19135] syzkaller0: entered allmulticast mode [ 352.251248][T19135] tipc: Started in network mode [ 352.251271][T19135] tipc: Node identity 12b341d45356, cluster identity 4711 [ 352.256997][T19135] tipc: Enabled bearer , priority 0 [ 352.260365][T19135] syzkaller0: mtu less than device minimum [ 352.318333][ T43] audit: type=1800 audit(1789607010.006:2431): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 352.510887][T19142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5415'. [ 352.510909][T19142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5415'. [ 352.513763][T19142] syzkaller0: entered promiscuous mode [ 352.513781][T19142] syzkaller0: entered allmulticast mode [ 352.863984][T19146] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 352.998141][ T43] audit: type=1800 audit(1789607010.686:2432): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 353.249483][ T5894] tipc: Node number set to 1105543636 [ 353.403947][T19168] ip_tables: iptables: counters copy to user failed while replacing table [ 353.424015][T19165] e1000e 0000:00:02.0: Interrupt Throttle Rate on [ 353.525085][ T43] audit: type=1400 audit(1789607011.216:2433): avc: denied { write } for pid=19173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.548225][ T43] audit: type=1800 audit(1789607011.236:2434): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 353.649937][T19165] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 353.825073][ T5761] Bluetooth: hci1: Invalid handle: 0xed88 > 0x0eff [ 353.854042][ T43] audit: type=1800 audit(1789607011.546:2435): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 353.921564][ T43] audit: type=1800 audit(1789607011.616:2436): pid=19195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5429" name="new_array" dev="sysfs" ino=64746 res=0 errno=0 [ 353.923313][T19195] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 353.927625][ T43] audit: type=1800 audit(1789607011.616:2437): pid=19195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5429" name="level" dev="sysfs" ino=113809 res=0 errno=0 [ 353.935390][ T43] audit: type=1400 audit(1789607011.626:2438): avc: denied { write } for pid=19189 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.016373][T19195] md: could not open device unknown-block(1,0). [ 354.091313][ T3384] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 355.499873][ T5894] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 357.002359][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 357.002380][ T43] audit: type=1400 audit(1789607014.696:2454): avc: denied { recv } for pid=5448 comm="dhcpcd" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 358.095465][ T43] audit: type=1400 audit(1789607015.786:2455): avc: denied { write } for pid=19229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.148215][ T43] audit: type=1400 audit(1789607015.836:2456): avc: denied { write } for pid=19232 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.189368][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 362.772825][ T43] audit: type=1400 audit(1789607020.466:2457): avc: denied { write } for pid=19235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.841509][ T43] audit: type=1400 audit(1789607020.536:2458): avc: denied { write } for pid=19238 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.629172][ T43] audit: type=1400 audit(1789607022.316:2459): avc: denied { write } for pid=19241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.812209][ T43] audit: type=1400 audit(1789607022.506:2460): avc: denied { write } for pid=19244 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.581807][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 365.582626][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 370.830386][T19249] ip6_vti0: entered promiscuous mode [ 370.857364][ T43] audit: type=1800 audit(1789607028.546:2461): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 370.989788][T19265] team0: entered allmulticast mode [ 370.989802][T19265] team_slave_0: entered allmulticast mode [ 370.989812][T19265] team_slave_1: entered allmulticast mode [ 370.989820][T19265] vlan3: entered allmulticast mode [ 371.042258][ T43] audit: type=1800 audit(1789607028.736:2462): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 371.153847][ T43] audit: type=1800 audit(1789607028.846:2463): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5446" name="new_array" dev="sysfs" ino=64746 res=0 errno=0 [ 371.154774][T19276] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 371.156338][ T43] audit: type=1800 audit(1789607028.846:2464): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5446" name="level" dev="sysfs" ino=113809 res=0 errno=0 [ 371.200831][T19284] ip6_vti0: entered promiscuous mode [ 371.201385][ T43] audit: type=1800 audit(1789607028.896:2465): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5446" name="new_dev" dev="sysfs" ino=113819 res=0 errno=0 [ 371.241843][T19276] md: could not open device unknown-block(1,0). [ 371.243232][ T43] audit: type=1800 audit(1789607028.936:2466): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5446" name="raid_disks" dev="sysfs" ino=113813 res=0 errno=0 [ 371.282883][ T43] audit: type=1800 audit(1789607028.976:2467): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5446" name="slot" dev="sysfs" ino=113833 res=0 errno=0 [ 371.286747][ T43] audit: type=1800 audit(1789607028.976:2468): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5446" name="array_state" dev="sysfs" ino=113821 res=0 errno=0 [ 371.418052][T19301] xt_hashlimit: size too large, truncated to 1048576 [ 371.526442][ T43] audit: type=1800 audit(1789607029.216:2469): pid=19306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5459" name="rotational" dev="sysfs" ino=22290 res=0 errno=0 [ 371.588535][ T43] audit: type=1800 audit(1789607029.276:2470): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 371.876425][T19333] netlink: 340 bytes leftover after parsing attributes in process `syz.2.5472'. [ 372.205458][T19363] xt_hashlimit: size too large, truncated to 1048576 [ 372.273905][T19359] 9pnet_virtio: no channels available for device syz [ 372.310259][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.330309][T19365] bridge_slave_0 (unregistering): left allmulticast mode [ 372.330334][T19365] bridge_slave_0 (unregistering): left promiscuous mode [ 372.330417][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.659941][T19412] netlink: 'syz.3.5508': attribute type 46 has an invalid length. [ 373.659963][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5508'. [ 374.143473][T19452] lo speed is unknown, defaulting to 1000 [ 375.236396][T19501] zero sized request [ 375.599973][T19526] fuse: Bad value for 'fd' [ 375.742527][T19535] kvm: user requested TSC rate below hardware speed [ 376.036105][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 376.036124][ T43] audit: type=1800 audit(1789607033.726:2497): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 376.278810][T19549] netlink: 'syz.5.5561': attribute type 1 has an invalid length. [ 376.278831][T19549] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5561'. [ 376.278845][T19549] netlink: 'syz.5.5561': attribute type 1 has an invalid length. [ 376.378079][ T43] audit: type=1800 audit(1789607034.066:2498): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 376.417025][ T43] audit: type=1800 audit(1789607034.106:2499): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 376.838759][ T856] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 376.988765][ T856] usb 10-1: Using ep0 maxpacket: 8 [ 376.989381][ T856] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 376.990275][ T856] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 376.990289][ T856] usb 10-1: config 0 has no interface number 0 [ 376.990307][ T856] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.990318][ T856] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 376.990330][ T856] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.990342][ T856] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.990361][ T856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.992707][ T856] usb 10-1: config 0 descriptor?? [ 377.005913][ T43] audit: type=1800 audit(1789607034.696:2500): pid=19538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203502 res=0 errno=0 [ 377.028872][ T856] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 377.054858][ T43] audit: type=1800 audit(1789607034.746:2501): pid=19538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=203531 res=0 errno=0 [ 377.064290][ T43] audit: type=1800 audit(1789607034.756:2502): pid=19538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=203509 res=0 errno=0 [ 377.078847][ T43] audit: type=1800 audit(1789607034.766:2503): pid=19538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=203510 res=0 errno=0 [ 377.088285][ T43] audit: type=1800 audit(1789607034.776:2504): pid=19538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=203511 res=0 errno=0 [ 377.215674][ T5894] usb 10-1: USB disconnect, device number 27 [ 377.223377][ T5894] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 377.305702][T19596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5581'. [ 377.767985][ T43] audit: type=1800 audit(1789607035.456:2505): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16399 res=0 errno=0 [ 377.797341][ T43] audit: type=1800 audit(1789607035.486:2506): pid=19603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5584" name="bConfigurationValue" dev="sysfs" ino=27620 res=0 errno=0 [ 377.900796][T19603] hub 1-0:1.0: USB hub found [ 377.965716][T19603] hub 1-0:1.0: 2 ports detected [ 377.973145][T19607] overlayfs: failed to clone upperpath [ 378.033143][T19614] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5589'. [ 378.169633][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5593'. [ 378.662830][T19656] 9pnet_virtio: no channels available for device syz [ 378.723345][T19660] 9pnet_virtio: no channels available for device syz [ 378.797599][ T5894] logitech-hidpp-device 0003:046D:C082.0007: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 379.129783][T19668] fido_id[19668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 379.463652][T19715] ------------[ cut here ]------------ [ 379.463661][T19715] err == -EMSGSIZE [ 379.463665][T19715] WARNING: net/core/rtnetlink.c:4599 at rtmsg_ifinfo_build_skb+0x1c1/0x260, CPU#2: syz.5.5635/19715 [ 379.470420][T19715] Modules linked in: [ 379.473184][T19715] CPU: 2 UID: 0 PID: 19715 Comm: syz.5.5635 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.479324][T19715] Tainted: [L]=SOFTLOCKUP [ 379.481453][T19715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.486399][T19715] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 379.489259][T19715] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 00 9b 64 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 58 7a f0 [ 379.497382][T19715] RSP: 0018:ffffc90004b26da8 EFLAGS: 00010287 [ 379.500936][T19715] RAX: 000000000000bea9 RBX: 00000000ffffffa6 RCX: ffffc90030f4b000 [ 379.504402][T19715] RDX: 0000000000080000 RSI: ffffffff89a78450 RDI: ffff88803b8a2580 [ 379.507979][T19715] RBP: ffff888037c44a00 R08: 0000000000000005 R09: 0000000000000000 [ 379.512132][T19715] R10: 00000000ffffffa6 R11: 0000000000000001 R12: 0000000000000002 [ 379.516947][T19715] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802b266108 [ 379.520715][T19715] FS: 00007f99c784c6c0(0000) GS:ffff8880d5d59000(0000) knlGS:0000000000000000 [ 379.524774][T19715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.527875][T19715] CR2: 00007f99c6bafd40 CR3: 000000003ebfb000 CR4: 0000000000352ef0 [ 379.531947][T19715] Call Trace: [ 379.533408][T19715] [ 379.534708][T19715] rtnetlink_event+0x137/0x1f0 [ 379.536794][T19715] notifier_call_chain+0x99/0x3f0 [ 379.539166][T19715] call_netdevice_notifiers_info+0xbe/0x110 [ 379.541581][T19715] netif_disable_lro+0x3e9/0x660 [ 379.543565][T19715] ? __pfx_netif_disable_lro+0x10/0x10 [ 379.546174][T19715] ? lockdep_hardirqs_on+0x7d/0x110 [ 379.549074][T19715] ? __local_bh_enable_ip+0xa5/0x120 [ 379.551460][T19715] ? neigh_parms_alloc+0x45f/0x5e0 [ 379.553595][T19715] ipv6_add_dev+0xde0/0x1520 [ 379.555598][T19715] addrconf_notify+0x5db/0x1ba0 [ 379.557617][T19715] ? __pfx_tls_dev_event+0x10/0x10 [ 379.560395][T19715] ? __pfx_addrconf_notify+0x10/0x10 [ 379.562730][T19715] ? ip6mr_device_event+0x1c4/0x230 [ 379.565024][T19715] notifier_call_chain+0x99/0x3f0 [ 379.567247][T19715] call_netdevice_notifiers_info+0xbe/0x110 [ 379.570087][T19715] register_netdevice+0x1998/0x25a0 [ 379.572548][T19715] ? __pfx_register_netdevice+0x10/0x10 [ 379.575039][T19715] ? __pfx_macsec_newlink+0x10/0x10 [ 379.577447][T19715] macsec_newlink+0x4fb/0x1c50 [ 379.579752][T19715] ? __pfx_macsec_newlink+0x10/0x10 [ 379.582118][T19715] ? __kasan_kmalloc+0xaa/0xb0 [ 379.584102][T19715] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 379.586540][T19715] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 379.589199][T19715] ? validate_linkmsg+0x57c/0xba0 [ 379.591407][T19715] ? __pfx_validate_linkmsg+0x10/0x10 [ 379.593782][T19715] ? alloc_netdev_mqs+0x120a/0x15c0 [ 379.596057][T19715] ? rtnl_create_link+0xa4b/0xf80 [ 379.598349][T19715] ? __pfx_macsec_newlink+0x10/0x10 [ 379.600771][T19715] rtnl_newlink+0x1697/0x2620 [ 379.602861][T19715] ? __pfx_rtnl_newlink+0x10/0x10 [ 379.605045][T19715] ? avc_has_perm_noaudit+0x56/0x3b0 [ 379.607354][T19715] ? find_held_lock+0x2b/0x80 [ 379.609579][T19715] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 379.611958][T19715] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 379.614379][T19715] ? lock_acquire+0x1d1/0x380 [ 379.616437][T19715] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 379.619131][T19715] ? find_held_lock+0x2b/0x80 [ 379.621277][T19715] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 379.623486][T19715] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 379.625834][T19715] ? __pfx_rtnl_newlink+0x10/0x10 [ 379.628255][T19715] rtnetlink_rcv_msg+0x95e/0xe90 [ 379.630784][T19715] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 379.633181][T19715] ? ref_tracker_free+0x37e/0x6c0 [ 379.635372][T19715] netlink_rcv_skb+0x159/0x420 [ 379.637447][T19715] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 379.639988][T19715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.642274][T19715] ? netlink_deliver_tap+0x1ae/0xcc0 [ 379.644286][T19715] netlink_unicast+0x585/0x850 [ 379.646193][T19715] ? __pfx_netlink_unicast+0x10/0x10 [ 379.648454][T19715] netlink_sendmsg+0x8b0/0xda0 [ 379.650986][T19715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.653278][T19715] ? selinux_socket_sendmsg+0x198/0x2f0 [ 379.655682][T19715] ____sys_sendmsg+0xa4d/0xbe0 [ 379.657806][T19715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.660182][T19715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.662497][T19715] ___sys_sendmsg+0x190/0x1e0 [ 379.664553][T19715] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.666835][T19715] ? futex_wait+0x11e/0x370 [ 379.668966][T19715] ? find_held_lock+0x2b/0x80 [ 379.671415][T19715] __sys_sendmsg+0x160/0x210 [ 379.673437][T19715] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.675808][T19715] do_syscall_64+0x123/0x790 [ 379.678311][T19715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.682178][T19715] RIP: 0033:0x7f99c699e159 [ 379.684301][T19715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.692522][T19715] RSP: 002b:00007f99c784c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.695833][T19715] RAX: ffffffffffffffda RBX: 00007f99c6c25fa0 RCX: 00007f99c699e159 [ 379.699415][T19715] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 379.702917][T19715] RBP: 00007f99c6a3506b R08: 0000000000000000 R09: 0000000000000000 [ 379.706396][T19715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.710581][T19715] R13: 00007f99c6c26038 R14: 00007f99c6c25fa0 R15: 00007ffff98605d8 [ 379.714168][T19715] [ 379.715523][T19715] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 379.718615][T19715] CPU: 2 UID: 0 PID: 19715 Comm: syz.5.5635 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.723153][T19715] Tainted: [L]=SOFTLOCKUP [ 379.724896][T19715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.729162][T19715] Call Trace: [ 379.730621][T19715] [ 379.731934][T19715] dump_stack_lvl+0x100/0x190