last executing test programs: 1m1.88518582s ago: executing program 2 (id=758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) 1m1.790106518s ago: executing program 2 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x58, r2, 0x1, 0x70bd26, 0x25dfdc00, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x4f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) 1m1.711596373s ago: executing program 2 (id=760): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 1m1.711354039s ago: executing program 2 (id=761): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x11, 0x15, 0x0, 0x1, 0x0, 0x0, @random="36e5be0b2146"}, 0x14) 1m1.643503837s ago: executing program 2 (id=762): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.604486025s ago: executing program 2 (id=763): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) getpeername(r0, 0x0, &(0x7f0000000380)) 46.549970153s ago: executing program 32 (id=763): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) getpeername(r0, 0x0, &(0x7f0000000380)) 45.357808494s ago: executing program 1 (id=1011): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) 45.25484392s ago: executing program 1 (id=1013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001000010001000000fddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000df2f6abaff0001000080001c250800000000000200000000000000f8ffffffffffffff020000000000e0fffeffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002900000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000) 45.247834817s ago: executing program 1 (id=1014): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 45.176909597s ago: executing program 1 (id=1017): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x5}}}}}}, 0x0) 45.069682397s ago: executing program 1 (id=1019): syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800e89fab31503a4dbabcf6450000700004000000019078640101b8ac1414aa0b009078032c00004500fffdfffc000000890000ac1414bbac14142a8804c8fc071bd67f000001ac1414aaac1e0101ffffffff0000000000000000441c4f60000005dc00000008000000000000f00a0000000000000009"], 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 45.02124939s ago: executing program 1 (id=1021): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='udp 2', 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 43.664027552s ago: executing program 3 (id=1040): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@can_delroute={0x2c, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 43.662237294s ago: executing program 3 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) 43.619933756s ago: executing program 3 (id=1042): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) write(r0, &(0x7f0000000200)='1', 0x1) 43.539983421s ago: executing program 3 (id=1043): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 43.536791933s ago: executing program 3 (id=1045): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000a00)='\xcdT\xea\x1fd\x1a6\x13\xeb\xce(}\x91Q\x02\x00E\x88-\x00', 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x88, 0xac, 0x5, 0xff, 0xa, 0x2, 0x6, 0x9, 0x32f, 0x40, 0x331, 0x2, 0x800, 0x38, 0x1, 0x3, 0x7, 0xffff}, [{0x2, 0x6, 0x3, 0x5, 0x6, 0x100000001, 0x9, 0x7fffffff}]}, 0x78) sendfile(r0, r1, 0x0, 0x8000fb00) 43.282797648s ago: executing program 3 (id=1053): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = openat(r0, &(0x7f0000001040)='net/atm/vc\x00', 0x0, 0x0) read(r1, &(0x7f0000001080)=""/4096, 0x1000) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) 43.203907379s ago: executing program 33 (id=1053): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = openat(r0, &(0x7f0000001040)='net/atm/vc\x00', 0x0, 0x0) read(r1, &(0x7f0000001080)=""/4096, 0x1000) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) 29.605350544s ago: executing program 34 (id=1021): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='udp 2', 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 19.853586769s ago: executing program 6 (id=1369): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) accept$nfc_llcp(r1, 0x0, 0x0) 19.853374519s ago: executing program 6 (id=1370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000200)="0100") ioctl(r2, 0xc048aeca, &(0x7f0000000300)="0100") 19.723937408s ago: executing program 6 (id=1371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 19.60786116s ago: executing program 6 (id=1372): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 19.553603602s ago: executing program 6 (id=1373): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000500)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4010, 0x0, 0xfffffffffffffefa) 19.203763789s ago: executing program 6 (id=1377): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 19.17702971s ago: executing program 35 (id=1377): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.023820911s ago: executing program 0 (id=1750): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.023636893s ago: executing program 0 (id=1751): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendfile(0xffffffffffffffff, r0, &(0x7f0000000300)=0x1ff, 0x2) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 957.452ms ago: executing program 0 (id=1753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 957.199981ms ago: executing program 0 (id=1755): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 902.671855ms ago: executing program 0 (id=1756): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 590.703384ms ago: executing program 4 (id=1767): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) 523.012127ms ago: executing program 7 (id=1769): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 522.875998ms ago: executing program 4 (id=1770): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000024010880f000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691ca400098028000080060001000a0000001c000200fe880000000000000000000000000001050003000300000028000080060001000a0000001400020000000000000000000000000000000001050003000000000028000080060001000a00000014000200fc0200000000000000000080"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 452.52933ms ago: executing program 7 (id=1771): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001580)=""/4088, 0xff8}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 448.075072ms ago: executing program 4 (id=1773): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x7ff, 0x1, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x7f, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x32, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x5, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0xd6c, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0xc, 0x3, 0x0, 0x4b2b, 0x8000, 0x0, 0x105, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 373.968896ms ago: executing program 5 (id=1775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 300.77695ms ago: executing program 4 (id=1776): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x3, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x9, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0x7, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x9, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0xaf, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x8000004, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0xd, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 300.511031ms ago: executing program 7 (id=1777): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000280)={0x0, 0x0, 0x73f0, 0x2}) 243.921373ms ago: executing program 4 (id=1778): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000400)={0x200, 0x200, 0x20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc04464b8, &(0x7f0000000500)={0x0, 0x200, 0x200, 0x34325258, 0x0, [r1], [0x800, 0x0, 0x1]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) close_range(r2, 0xffffffffffffffff, 0x0) 243.749338ms ago: executing program 7 (id=1779): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 243.605092ms ago: executing program 5 (id=1780): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_add_dev_sqe={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x2, 0x3be}}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 183.477542ms ago: executing program 4 (id=1781): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000040)={0x3, 0x200, 0x7ef2, 0x1001, 0xfffffffd, 0x3e}) 123.658408ms ago: executing program 5 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040080}, 0x48050) 123.460389ms ago: executing program 5 (id=1783): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 92.454738ms ago: executing program 7 (id=1784): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 92.292345ms ago: executing program 5 (id=1785): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x69f1227ab38ce363}, &(0x7f0000000080)={&(0x7f0000000100)=""/15}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) 268.054µs ago: executing program 7 (id=1786): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x20, 0x7, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 100.245µs ago: executing program 0 (id=1787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) 0s ago: executing program 5 (id=1788): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000400)) 0s ago: executing program 0 (id=1789): mkdir(&(0x7f00000000c0)='my_configfs\x00', 0x17b) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x50}, 0x2) kernel console output (not intermixed with test programs): 7947] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007f872c39e159 [ 81.990916][ T7947] RDX: 0000200000000640 RSI: 00002000000000c0 RDI: 0000000000000025 [ 81.990923][ T7947] RBP: 00007f872c435024 R08: 0000000000000000 R09: 0000000000000000 [ 81.990929][ T7947] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000640 [ 81.990936][ T7947] R13: 0000200000000000 R14: 0000200000000000 R15: 00007fff6362be78 [ 81.990950][ T7947] [ 82.121198][ T66] Bluetooth: hci4: sending frame failed (-49) [ 82.122058][ T5733] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 82.269009][ T6217] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 82.332445][ T7954] loop5: detected capacity change from 0 to 7 [ 82.338246][ T7954] Dev loop5: unable to read RDB block 7 [ 82.338312][ T7954] loop5: AHDI p1 p3 p4 [ 82.338346][ T7954] loop5: partition table partially beyond EOD, truncated [ 82.338530][ T7954] loop5: p1 size 100663296 extends beyond EOD, truncated [ 82.344103][ T7954] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 82.394432][ T6167] udevd[6167]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 82.399909][ T6166] udevd[6166]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 82.421792][ T6217] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.422806][ T6217] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 82.422822][ T6217] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 28719, setting to 64 [ 82.424424][ T6217] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.424436][ T6217] usb 8-1: Product: syz [ 82.424443][ T6217] usb 8-1: Manufacturer: syz [ 82.424450][ T6217] usb 8-1: SerialNumber: syz [ 82.430966][ T6217] usb 8-1: config 0 descriptor?? [ 82.845038][ T7948] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 82.846109][ T6217] usb 8-1: USB disconnect, device number 5 [ 82.914620][ T7984] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 82.932130][ T7984] typec_fusb302 0-0022: failed to request gpio_int_n [ 82.962039][ T7984] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 82.966271][ T7984] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 83.169119][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 83.249707][ T5634] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 83.329536][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.334589][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.334648][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.334683][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.419244][ T5634] usb 6-1: Using ep0 maxpacket: 32 [ 83.421514][ T5634] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 83.426416][ T5634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.430136][ T5634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.433686][ T5634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.442891][ T5634] usb 6-1: config 0 descriptor?? [ 83.493478][ T8000] syzkaller1: entered promiscuous mode [ 83.493523][ T8000] syzkaller1: entered allmulticast mode [ 83.552061][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 83.554015][ T10] usbtmc 5-1:16.0: can't read capabilities [ 83.761774][ T30] usb 5-1: USB disconnect, device number 11 [ 83.819069][ T5733] Bluetooth: hci0: command tx timeout [ 83.858286][ T5634] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 84.111497][ T5634] usb 6-1: USB disconnect, device number 10 [ 84.408684][ T8011] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.662939][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 84.663004][ T43] audit: type=1400 audit(1788563754.042:1250): avc: denied { read write } for pid=8020 comm="syz.0.913" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 84.663162][ T43] audit: type=1400 audit(1788563754.042:1251): avc: denied { open } for pid=8020 comm="syz.0.913" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 84.695553][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.912'. [ 84.745170][ T43] audit: type=1800 audit(1788563754.122:1252): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 84.784429][ T43] audit: type=1400 audit(1788563754.162:1253): avc: denied { nosuid_transition } for pid=8027 comm="syz.1.916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 84.784504][ T43] audit: type=1400 audit(1788563754.162:1254): avc: denied { transition } for pid=8027 comm="syz.1.916" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 84.784560][ T43] audit: type=1400 audit(1788563754.162:1255): avc: denied { entrypoint } for pid=8027 comm="syz.1.916" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1031 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.784584][ T43] audit: type=1400 audit(1788563754.162:1256): avc: denied { share } for pid=8027 comm="syz.1.916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 84.784603][ T43] audit: type=1400 audit(1788563754.162:1257): avc: denied { noatsecure } for pid=8027 comm="syz.1.916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 84.817794][ T43] audit: type=1800 audit(1788563754.192:1258): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 84.837666][ T43] audit: type=1800 audit(1788563754.212:1259): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 85.099058][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 85.229105][ T5813] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 85.249485][ T42] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.250329][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.250346][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.250357][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.250377][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.257750][ T42] usb 6-1: config 0 descriptor?? [ 85.379697][ T5813] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 85.382379][ T5813] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 85.382402][ T5813] usb 5-1: config 0 has no interface number 0 [ 85.382430][ T5813] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 85.382450][ T5813] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 85.384241][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.384261][ T5813] usb 5-1: Product: syz [ 85.384272][ T5813] usb 5-1: Manufacturer: syz [ 85.384284][ T5813] usb 5-1: SerialNumber: syz [ 85.385684][ T5813] usb 5-1: config 0 descriptor?? [ 85.387723][ T8046] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 85.395815][ T5813] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 85.591696][ T5822] usb 5-1: USB disconnect, device number 12 [ 85.598414][ T5822] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 85.650776][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 85.667757][ T42] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 85.678267][ T42] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 85.909540][ T5733] Bluetooth: hci0: command tx timeout [ 85.920252][ T8087] jffs2: notice: (8087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 85.920990][ T42] usb 6-1: USB disconnect, device number 11 [ 86.108758][ T8094] 0x000000000000-0x000000020000 : "" [ 86.122490][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.946'. [ 86.123320][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.946'. [ 86.126627][ T8094] ftl_cs: FTL header not found. [ 86.389569][ T8117] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 86.477971][ T8119] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 86.726734][ T8134] jffs2: notice: (8134) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 86.770428][ T8137] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 87.169086][ T6978] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 87.179328][ T62] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 87.329935][ T6978] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 87.331073][ T6978] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 87.331094][ T6978] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 87.331110][ T6978] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 87.331146][ T6978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.331165][ T6978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 87.331185][ T6978] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 87.331217][ T6978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.331876][ T62] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 87.332776][ T62] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 87.332790][ T62] usb 6-1: config 1 has no interface number 0 [ 87.334617][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.334630][ T62] usb 6-1: Product: syz [ 87.334637][ T62] usb 6-1: Manufacturer: syz [ 87.334645][ T62] usb 6-1: SerialNumber: syz [ 87.334838][ T6978] usb 5-1: config 0 descriptor?? [ 87.336756][ T8146] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 87.344707][ T62] usb 6-1: 3:1 : does not exist [ 87.344720][ T62] usb 6-1: 3:2 : does not exist [ 87.541015][ T6978] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 87.556682][ C2] usblp0: nonzero read bulk status received: -71 [ 87.557851][ T8146] usblp0: error -71 reading from printer [ 87.558707][ C2] usblp0: nonzero read bulk status received: -71 [ 87.563455][ T25] usb 5-1: USB disconnect, device number 13 [ 87.567556][ T25] usblp0: removed [ 87.979151][ T5733] Bluetooth: hci0: command tx timeout [ 88.105751][ T6978] usb 6-1: USB disconnect, device number 12 [ 88.130109][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 88.274648][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.290022][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.292303][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.293365][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.293699][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.513976][ T5602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.514046][ T5602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.597394][ T5602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.597469][ T5602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.686528][ T5602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.686592][ T5602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.746407][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.746495][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.746590][ T8170] bridge_slave_0: entered allmulticast mode [ 88.747296][ T8170] bridge_slave_0: entered promiscuous mode [ 88.756666][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.756762][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.756870][ T8170] bridge_slave_1: entered allmulticast mode [ 88.757594][ T8170] bridge_slave_1: entered promiscuous mode [ 88.777260][ T5602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.777323][ T5602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.802064][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.806565][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.841172][ T8170] team0: Port device team_slave_0 added [ 88.845727][ T8170] team0: Port device team_slave_1 added [ 88.864281][ T8223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3028634658 (6057269316 ns) > initial count (2360585836 ns). Using initial count to start timer. [ 88.865248][ T8227] netlink: 'syz.3.993': attribute type 1 has an invalid length. [ 88.865260][ T8227] netlink: 84 bytes leftover after parsing attributes in process `syz.3.993'. [ 88.865268][ T8227] netlink: 'syz.3.993': attribute type 2 has an invalid length. [ 88.865274][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 88.885216][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.885228][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.885243][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.888149][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.888159][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.888173][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.945501][ T8170] hsr_slave_0: entered promiscuous mode [ 88.945984][ T8170] hsr_slave_1: entered promiscuous mode [ 88.946316][ T8170] debugfs: 'hsr0' already exists in 'hsr' [ 88.946327][ T8170] Cannot create hsr debugfs directory [ 89.024835][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 89.031870][ T8239] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 89.051149][ T5602] bridge_slave_1: left allmulticast mode [ 89.051227][ T5602] bridge_slave_1: left promiscuous mode [ 89.055933][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.076903][ T5602] bridge_slave_0: left allmulticast mode [ 89.076974][ T5602] bridge_slave_0: left promiscuous mode [ 89.080117][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.212020][ T5602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.225016][ T5602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.230092][ T5602] bond0 (unregistering): Released all slaves [ 89.449166][ T8275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1013'. [ 89.449810][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 89.511112][ T8279] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.513215][ T8279] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.514421][ T8279] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 89.515542][ T8170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.522587][ T8170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.523115][ T8170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.539071][ T8170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.576573][ T8170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.584872][ T8170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.588814][ T8170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.594099][ T8170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.641684][ T8300] vxcan0: tx address claim with different name [ 89.647724][ T5602] hsr_slave_0: left promiscuous mode [ 89.649272][ T62] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 89.649908][ T5602] hsr_slave_1: left promiscuous mode [ 89.650498][ T5602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.650532][ T5602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.656816][ T5602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.656831][ T5602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.666694][ T5602] veth1_macvtap: left promiscuous mode [ 89.666788][ T5602] veth0_macvtap: left promiscuous mode [ 89.666936][ T5602] veth0_vlan: left promiscuous mode [ 89.670093][ T8303] CIFS: Attempting to mount //::1/share [ 89.683959][ T43] kauditd_printk_skb: 174 callbacks suppressed [ 89.684064][ T43] audit: type=1800 audit(1788563759.062:1434): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 89.696686][ T43] audit: type=1400 audit(1788563759.072:1435): avc: denied { mount } for pid=8304 comm="syz.1.1021" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 89.809716][ T62] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.810628][ T62] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.810644][ T62] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.810664][ T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.830417][ T43] audit: type=1800 audit(1788563759.212:1436): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135721 res=0 errno=0 [ 89.832050][ T43] audit: type=1800 audit(1788563759.212:1437): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=135750 res=0 errno=0 [ 89.835094][ T43] audit: type=1800 audit(1788563759.212:1438): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=135728 res=0 errno=0 [ 89.835666][ T43] audit: type=1800 audit(1788563759.212:1439): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=135729 res=0 errno=0 [ 89.836441][ T43] audit: type=1800 audit(1788563759.212:1440): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=135730 res=0 errno=0 [ 89.851140][ T43] audit: type=1800 audit(1788563759.232:1441): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135770 res=0 errno=0 [ 89.945101][ T5602] team0 (unregistering): Port device team_slave_1 removed [ 89.955431][ T5602] team0 (unregistering): Port device team_slave_0 removed [ 90.016542][ T62] usb 8-1: GET_CAPABILITIES returned 0 [ 90.018268][ T62] usbtmc 8-1:16.0: can't read capabilities [ 90.021898][ T43] audit: type=1800 audit(1788563759.402:1442): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135787 res=0 errno=0 [ 90.073360][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 90.106206][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.117158][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.123031][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.123115][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.131737][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.131803][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.151201][ T43] audit: type=1400 audit(1788563759.532:1443): avc: denied { write } for pid=8308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.234185][ T5813] usb 8-1: USB disconnect, device number 6 [ 90.273849][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 90.369170][ T5602] IPVS: stop unused estimator thread 0... [ 90.379249][ T5733] Bluetooth: hci4: command tx timeout [ 90.423774][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.425344][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5 [ 90.503835][ T8303] CIFS: VFS: Error connecting to socket. Aborting operation. [ 90.506909][ T8303] CIFS: VFS: cifs_mount failed w/return code = -4 [ 90.593110][ T8170] veth0_vlan: entered promiscuous mode [ 90.599643][ T8170] veth1_vlan: entered promiscuous mode [ 90.612311][ T8170] veth0_macvtap: entered promiscuous mode [ 90.616888][ T8170] veth1_macvtap: entered promiscuous mode [ 90.626996][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.630305][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.677006][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.678750][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.693461][ T5808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.696960][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.696977][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.710143][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.710382][ T5808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.710408][ T5808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.922670][ T8380] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.085029][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 91.085082][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 91.384987][ T8437] loop5: detected capacity change from 0 to 7 [ 91.402695][ T8437] Dev loop5: unable to read RDB block 7 [ 91.402773][ T8437] loop5: unable to read partition table [ 91.403581][ T8437] loop5: partition table beyond EOD, truncated [ 91.403628][ T8437] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.406975][ T8437] Dev loop5: unable to read RDB block 7 [ 91.406999][ T8437] loop5: unable to read partition table [ 91.407116][ T8437] loop5: partition table beyond EOD, truncated [ 91.593636][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.601585][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.602230][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.602740][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.604235][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.826555][ T5808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.951662][ T5808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.020175][ T8453] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.020281][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.020339][ T8453] bridge_slave_0: entered allmulticast mode [ 92.024754][ T8453] bridge_slave_0: entered promiscuous mode [ 92.025941][ T8453] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.025983][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.026041][ T8453] bridge_slave_1: entered allmulticast mode [ 92.031416][ T8453] bridge_slave_1: entered promiscuous mode [ 92.049993][ T8453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.053088][ T8453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.083596][ T8453] team0: Port device team_slave_0 added [ 92.100928][ T5808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.105476][ T8453] team0: Port device team_slave_1 added [ 92.120179][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.123212][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.131259][ T8453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.134049][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.134062][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.134081][ T8453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.168545][ T5808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.180938][ T8453] hsr_slave_0: entered promiscuous mode [ 92.182270][ T8453] hsr_slave_1: entered promiscuous mode [ 92.343422][ T8453] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.348275][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 92.352735][ T8453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.353152][ T8453] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.356865][ T8453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.376577][ T8453] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.389741][ T8453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.390297][ T8453] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.396032][ T8453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.413480][ T5808] bridge_slave_1: left allmulticast mode [ 92.413544][ T5808] bridge_slave_1: left promiscuous mode [ 92.413710][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.421946][ T5808] bridge_slave_0: left allmulticast mode [ 92.421997][ T5808] bridge_slave_0: left promiscuous mode [ 92.422128][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.459136][ T66] Bluetooth: hci4: command tx timeout [ 92.482285][ T8520] program syz.4.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.561476][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.567432][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.574641][ T5808] bond0 (unregistering): Released all slaves [ 92.684941][ T8453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.694108][ T8453] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.698271][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.698350][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.712721][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.712798][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.766501][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 92.842315][ T5808] hsr_slave_0: left promiscuous mode [ 92.846149][ T5808] hsr_slave_1: left promiscuous mode [ 92.846827][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.846839][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.848462][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.848475][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.864298][ T5808] veth1_macvtap: left promiscuous mode [ 92.864887][ T5808] veth0_macvtap: left promiscuous mode [ 92.864939][ T5808] veth1_vlan: left promiscuous mode [ 92.864970][ T5808] veth0_vlan: left promiscuous mode [ 93.007932][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 93.016056][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 93.042859][ T8564] SELinux: DCCP has been removed, pid=8564 comm=syz.0.1080 [ 93.085320][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 93.091844][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.249507][ T8453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.283672][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 93.410199][ T8453] veth0_vlan: entered promiscuous mode [ 93.414905][ T8453] veth1_vlan: entered promiscuous mode [ 93.431039][ T8453] veth0_macvtap: entered promiscuous mode [ 93.433241][ T8453] veth1_macvtap: entered promiscuous mode [ 93.439971][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.443781][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.448065][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 93.471808][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.472013][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.472062][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.472095][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.494635][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.494686][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.518802][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.518869][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.659304][ T66] Bluetooth: hci0: command tx timeout [ 93.780052][ T8626] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 93.879187][ T62] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 94.049073][ T62] usb 9-1: Using ep0 maxpacket: 8 [ 94.050231][ T62] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.051355][ T62] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 94.051391][ T62] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.051409][ T62] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.051431][ T62] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.051446][ T62] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.051476][ T62] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.260068][ T62] usb 9-1: usb_control_msg returned -32 [ 94.260128][ T62] usbtmc 9-1:16.0: can't read capabilities [ 94.539578][ T66] Bluetooth: hci4: command tx timeout [ 94.614923][ T8648] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 94.615796][ T851] usb 9-1: USB disconnect, device number 2 [ 95.032362][ T8652] kernel read not supported for file /policy (pid: 8652 comm: syz.0.1102) [ 95.035229][ T43] kauditd_printk_skb: 148 callbacks suppressed [ 95.035241][ T43] audit: type=1800 audit(1788563764.412:1592): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1102" name="policy" dev="selinuxfs" ino=20 res=0 errno=0 [ 95.054238][ T43] audit: type=1400 audit(1788563764.432:1593): avc: denied { load_policy } for pid=8651 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.061930][ T8652] SELinux: ebitmap start bit (16580607) is not a multiple of the map unit size (64) [ 95.062324][ T8652] SELinux: invalid class [ 95.066300][ T8652] SELinux: failed to load policy [ 95.142054][ T43] audit: type=1800 audit(1788563764.522:1594): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 95.173315][ T43] audit: type=1800 audit(1788563764.552:1595): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 95.181224][ T43] audit: type=1400 audit(1788563764.562:1596): avc: denied { name_bind } for pid=8659 comm="syz.4.1106" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 95.200064][ T43] audit: type=1800 audit(1788563764.582:1597): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 95.212992][ T43] audit: type=1800 audit(1788563764.592:1598): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 95.225464][ T8664] gadgetfs: bound to dummy_udc driver [ 95.233369][ T43] audit: type=1800 audit(1788563764.612:1599): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 95.323017][ T8672] fuse: blksize only supported for fuseblk [ 95.338423][ T43] audit: type=1800 audit(1788563764.712:1600): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 95.459179][ T62] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 95.459449][ C3] gadgetfs: connected [ 95.460739][ T62] gadgetfs: disconnected [ 95.495886][ T43] audit: type=1800 audit(1788563764.872:1601): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 95.512385][ T8674] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.512505][ T8674] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.739091][ T66] Bluetooth: hci0: command tx timeout [ 96.049138][ T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 96.203212][ T25] usb 10-1: unable to get BOS descriptor or descriptor too short [ 96.203273][ T25] usb 10-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 96.203293][ T25] usb 10-1: no configurations [ 96.203299][ T25] usb 10-1: can't read configurations, error -22 [ 96.629143][ T66] Bluetooth: hci4: command tx timeout [ 96.741972][ T8698] FAULT_INJECTION: forcing a failure. [ 96.741972][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 96.742037][ T8698] CPU: 2 UID: 0 PID: 8698 Comm: syz.4.1122 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.742078][ T8698] Tainted: [L]=SOFTLOCKUP [ 96.742086][ T8698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.742097][ T8698] Call Trace: [ 96.742104][ T8698] [ 96.742111][ T8698] dump_stack_lvl+0x100/0x190 [ 96.742157][ T8698] should_fail_ex.cold+0x5/0xa [ 96.742184][ T8698] should_failslab+0xc2/0x120 [ 96.742211][ T8698] __kmalloc_noprof+0xfc/0x840 [ 96.742230][ T8698] ? __register_sysctl_table+0xac/0x1650 [ 96.742262][ T8698] __register_sysctl_table+0xac/0x1650 [ 96.742288][ T8698] ? trace_kmalloc+0xeb/0x110 [ 96.742307][ T8698] ? __kasan_kmalloc+0xaa/0xb0 [ 96.742328][ T8698] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 96.742348][ T8698] ? __pfx___register_sysctl_table+0x10/0x10 [ 96.742373][ T8698] ? register_pidns_sysctls+0x48/0x1c0 [ 96.742401][ T8698] ? __asan_memcpy+0x3c/0x60 [ 96.742427][ T8698] register_pidns_sysctls+0x11d/0x1c0 [ 96.742452][ T8698] ? __ns_common_init+0x299/0x4b0 [ 96.742476][ T8698] copy_pid_ns+0x680/0x10a0 [ 96.742501][ T8698] ? __pfx_copy_pid_ns+0x10/0x10 [ 96.742525][ T8698] ? __pfx_copy_mnt_ns+0x10/0x10 [ 96.742570][ T8698] ? create_new_namespaces+0x30/0xac0 [ 96.742597][ T8698] create_new_namespaces+0x2aa/0xac0 [ 96.742625][ T8698] unshare_nsproxy_namespaces+0xf2/0x220 [ 96.742649][ T8698] ksys_unshare+0x4a2/0xa70 [ 96.742670][ T8698] ? __pfx_ksys_unshare+0x10/0x10 [ 96.742700][ T8698] __x64_sys_unshare+0x31/0x40 [ 96.742720][ T8698] do_syscall_64+0x123/0x790 [ 96.742750][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.742771][ T8698] RIP: 0033:0x7f07cab9e159 [ 96.742787][ T8698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.742805][ T8698] RSP: 002b:00007f07cbb29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 96.742823][ T8698] RAX: ffffffffffffffda RBX: 00007f07cae25fa0 RCX: 00007f07cab9e159 [ 96.742835][ T8698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 96.742846][ T8698] RBP: 00007f07cac35024 R08: 0000000000000000 R09: 0000000000000000 [ 96.742857][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.742868][ T8698] R13: 00007f07cae26038 R14: 00007f07cae25fa0 R15: 00007ffff24533b8 [ 96.742899][ T8698] [ 96.899739][ T8713] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 96.899791][ T8713] CPU: 2 UID: 0 PID: 8713 Comm: syz.5.1127 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.899820][ T8713] Tainted: [L]=SOFTLOCKUP [ 96.899827][ T8713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.899835][ T8713] Call Trace: [ 96.899839][ T8713] [ 96.899844][ T8713] dump_stack_lvl+0x100/0x190 [ 96.899864][ T8713] sysfs_warn_dup.cold+0x1c/0x28 [ 96.899882][ T8713] sysfs_create_dir_ns+0x24b/0x2b0 [ 96.899910][ T8713] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 96.899924][ T8713] ? find_held_lock+0x2b/0x80 [ 96.899939][ T8713] ? kobject_add_internal+0x25f/0x930 [ 96.899955][ T8713] ? kobject_add_internal+0x25f/0x930 [ 96.899977][ T8713] ? class_dir_child_ns_type+0xd/0x60 [ 96.899992][ T8713] kobject_add_internal+0x2c8/0x930 [ 96.900011][ T8713] kobject_add+0x16a/0x1e0 [ 96.900027][ T8713] ? __pfx_kobject_add+0x10/0x10 [ 96.900044][ T8713] ? get_device_parent+0x1b3/0x4c0 [ 96.900057][ T8713] ? kobject_put+0xb9/0x640 [ 96.900076][ T8713] device_add+0x294/0x1970 [ 96.900091][ T8713] ? lockdep_init_map_type+0x5c/0x250 [ 96.900104][ T8713] ? __pfx_device_add+0x10/0x10 [ 96.900116][ T8713] ? lockdep_init_map_type+0x5c/0x250 [ 96.900127][ T8713] ? __init_waitqueue_head+0xca/0x150 [ 96.900144][ T8713] tty_register_device_attr+0x388/0x7f0 [ 96.900161][ T8713] ? lockdep_init_map_type+0x5c/0x250 [ 96.900173][ T8713] ? __pfx_tty_register_device_attr+0x10/0x10 [ 96.900194][ T8713] ? tty_port_init+0x156/0x1c0 [ 96.900207][ T8713] gsm_activate_mux+0x155/0x2a0 [ 96.900218][ T8713] gsmld_ioctl+0xbbc/0x15c0 [ 96.900235][ T8713] ? __pfx_gsmld_ioctl+0x10/0x10 [ 96.900258][ T8713] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.900270][ T8713] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 96.900287][ T8713] ? __pfx_gsmld_ioctl+0x10/0x10 [ 96.900299][ T8713] tty_ioctl+0x11b4/0x1640 [ 96.900309][ T8713] ? __pfx_tty_ioctl+0x10/0x10 [ 96.900319][ T8713] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 96.900332][ T8713] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 96.900345][ T8713] ? __fget_files+0x34/0x3d0 [ 96.900363][ T8713] ? selinux_file_ioctl+0x13b/0x290 [ 96.900372][ T8713] ? selinux_file_ioctl+0xb6/0x290 [ 96.900383][ T8713] ? __pfx_tty_ioctl+0x10/0x10 [ 96.900394][ T8713] __x64_sys_ioctl+0x18e/0x210 [ 96.900412][ T8713] do_syscall_64+0x123/0x790 [ 96.900426][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.900437][ T8713] RIP: 0033:0x7f44a159e159 [ 96.900447][ T8713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.900457][ T8713] RSP: 002b:00007f44a23d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.900468][ T8713] RAX: ffffffffffffffda RBX: 00007f44a1826090 RCX: 00007f44a159e159 [ 96.900475][ T8713] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 96.900481][ T8713] RBP: 00007f44a1635024 R08: 0000000000000000 R09: 0000000000000000 [ 96.900488][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.900494][ T8713] R13: 00007f44a1826128 R14: 00007f44a1826090 R15: 00007ffe837ffda8 [ 96.900508][ T8713] [ 96.900567][ T8713] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 97.819056][ T66] Bluetooth: hci0: command tx timeout [ 99.899412][ T66] Bluetooth: hci0: command tx timeout [ 100.997177][ T43] kauditd_printk_skb: 78 callbacks suppressed [ 100.997249][ T43] audit: type=1400 audit(1788563770.372:1680): avc: denied { write } for pid=8726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.061726][ T43] audit: type=1400 audit(1788563770.442:1681): avc: denied { write } for pid=8729 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.900656][ T43] audit: type=1400 audit(1788563772.282:1682): avc: denied { write } for pid=8732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.943553][ T43] audit: type=1400 audit(1788563772.322:1683): avc: denied { write } for pid=8735 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.017901][ T43] audit: type=1400 audit(1788563772.392:1684): avc: denied { write } for pid=8738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.073001][ T43] audit: type=1400 audit(1788563772.452:1685): avc: denied { write } for pid=8741 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.563778][ T43] audit: type=1400 audit(1788563772.942:1686): avc: denied { write } for pid=8745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.604626][ T43] audit: type=1400 audit(1788563772.982:1687): avc: denied { write } for pid=8748 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.397680][ T43] audit: type=1400 audit(1788563773.772:1688): avc: denied { write } for pid=8751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.439579][ T43] audit: type=1400 audit(1788563773.822:1689): avc: denied { write } for pid=8754 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.243679][ T5733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.248824][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.251730][ T5733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.256682][ T5733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.257410][ T5733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.305150][ T8798] loop5: detected capacity change from 0 to 7 [ 105.309384][ T8798] Dev loop5: unable to read RDB block 7 [ 105.313323][ T8798] loop5: unable to read partition table [ 105.314063][ T8798] loop5: partition table beyond EOD, truncated [ 105.314103][ T8798] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.327161][ T8798] Dev loop5: unable to read RDB block 7 [ 105.329749][ T8798] loop5: unable to read partition table [ 105.330846][ T8798] loop5: partition table beyond EOD, truncated [ 105.431723][ T8818] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1148'. [ 105.666629][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.666710][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.666768][ T8789] bridge_slave_0: entered allmulticast mode [ 105.667624][ T8789] bridge_slave_0: entered promiscuous mode [ 105.669487][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.669559][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.669618][ T8789] bridge_slave_1: entered allmulticast mode [ 105.672414][ T8789] bridge_slave_1: entered promiscuous mode [ 105.685048][ T8789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.686480][ T8789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.699840][ T8789] team0: Port device team_slave_0 added [ 105.701274][ T8789] team0: Port device team_slave_1 added [ 105.714786][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.714837][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.714872][ T8789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.715877][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.715885][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.715897][ T8789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.741245][ T8789] hsr_slave_0: entered promiscuous mode [ 105.741850][ T8789] hsr_slave_1: entered promiscuous mode [ 105.744452][ T8789] debugfs: 'hsr0' already exists in 'hsr' [ 105.744466][ T8789] Cannot create hsr debugfs directory [ 105.822555][ T8855] Bluetooth: MGMT ver 1.23 [ 105.890998][ T8861] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 105.932223][ T8789] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 105.948911][ T8789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.949418][ T8789] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 105.955723][ T8789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.960535][ T8789] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 105.966473][ T8789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.967308][ T8789] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 105.978141][ T8789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.005710][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.005845][ T8789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.005950][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.005992][ T8789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.012218][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 106.012228][ T43] audit: type=1800 audit(1788563775.392:1726): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 106.054070][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.064416][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.067744][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.071941][ T8881] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1170'. [ 106.092639][ T8789] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.097973][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.098069][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.103369][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.103412][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.122262][ T43] audit: type=1800 audit(1788563775.502:1727): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 106.154581][ T43] audit: type=1400 audit(1788563775.532:1728): avc: denied { accept } for pid=8885 comm="syz.4.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.177502][ T43] audit: type=1800 audit(1788563775.552:1729): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 106.217881][ T43] audit: type=1400 audit(1788563775.592:1730): avc: denied { mount } for pid=8891 comm="syz.4.1174" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 106.269171][ T43] audit: type=1800 audit(1788563775.652:1731): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 106.283690][ T43] audit: type=1800 audit(1788563775.662:1732): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 106.297416][ T43] audit: type=1400 audit(1788563775.672:1733): avc: denied { lock } for pid=8900 comm="syz.5.1176" path="socket:[26585]" dev="sockfs" ino=26585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 106.346151][ T8789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.361871][ T43] audit: type=1800 audit(1788563775.742:1734): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 106.437374][ T43] audit: type=1800 audit(1788563775.812:1735): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 106.484833][ T8789] veth0_vlan: entered promiscuous mode [ 106.490231][ T8789] veth1_vlan: entered promiscuous mode [ 106.506537][ T8789] veth0_macvtap: entered promiscuous mode [ 106.508529][ T8789] veth1_macvtap: entered promiscuous mode [ 106.516269][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.524425][ T8789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.587078][ T8924] FAULT_INJECTION: forcing a failure. [ 106.587078][ T8924] name failslab, interval 1, probability 0, space 0, times 0 [ 106.587135][ T8924] CPU: 0 UID: 0 PID: 8924 Comm: syz.4.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.587161][ T8924] Tainted: [L]=SOFTLOCKUP [ 106.587167][ T8924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.587174][ T8924] Call Trace: [ 106.587178][ T8924] [ 106.587183][ T8924] dump_stack_lvl+0x100/0x190 [ 106.587202][ T8924] should_fail_ex.cold+0x5/0xa [ 106.587220][ T8924] should_failslab+0xc2/0x120 [ 106.587235][ T8924] __kmalloc_cache_noprof+0x91/0x6d0 [ 106.587252][ T8924] ? cap_capable+0x107/0x430 [ 106.587286][ T8924] ? __x64_sys_futex+0x358/0x4d0 [ 106.587302][ T8924] ? fsnotify_alloc_group+0x8d/0x320 [ 106.587322][ T8924] fsnotify_alloc_group+0x8d/0x320 [ 106.587340][ T8924] __do_sys_fanotify_init+0x271/0xe30 [ 106.587357][ T8924] do_syscall_64+0x123/0x790 [ 106.587372][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.587383][ T8924] RIP: 0033:0x7f07cab9e159 [ 106.587392][ T8924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.587403][ T8924] RSP: 002b:00007f07cbb29028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 106.587415][ T8924] RAX: ffffffffffffffda RBX: 00007f07cae25fa0 RCX: 00007f07cab9e159 [ 106.587423][ T8924] RDX: 0000000000000000 RSI: 0000000000101000 RDI: 0000000000000040 [ 106.587431][ T8924] RBP: 00007f07cac35024 R08: 0000000000000000 R09: 0000000000000000 [ 106.587438][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.587445][ T8924] R13: 00007f07cae26038 R14: 00007f07cae25fa0 R15: 00007ffff24533b8 [ 106.587462][ T8924] [ 106.599828][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.599842][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.627316][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.627331][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.639204][ T5808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.639429][ T5808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.639450][ T5808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.639467][ T5808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.750045][ T8932] jffs2: notice: (8932) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 106.775015][ T8935] macvtap1: entered promiscuous mode [ 106.778252][ T8935] vlan0: entered promiscuous mode [ 106.781827][ T8935] team0: Device macvtap1 failed to register rx_handler [ 106.784489][ T8935] vlan0: left promiscuous mode [ 106.807807][ T8937] input: syz1 as /devices/virtual/input/input16 [ 107.089933][ T8953] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 107.339520][ T5733] Bluetooth: hci3: command tx timeout [ 107.656443][ T9010] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.661173][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.661483][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.769489][ T35] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 107.940321][ T35] usb 5-1: not running at top speed; connect to a high speed hub [ 107.940367][ T35] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 107.946517][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 107.950025][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 107.957086][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.957134][ T35] usb 5-1: Product: syz [ 107.957156][ T35] usb 5-1: Manufacturer: syz [ 107.957177][ T35] usb 5-1: SerialNumber: syz [ 107.964944][ T35] oti6858 5-1:1.0: oti6858 converter detected [ 107.976015][ T35] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 107.999563][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.280368][ T9000] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 108.285616][ T851] usb 5-1: USB disconnect, device number 15 [ 108.304475][ T851] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 108.304812][ T851] oti6858 5-1:1.0: device disconnected [ 108.388014][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 108.396060][ T67] block nbd0: Receive control failed (result -107) [ 108.501618][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1240'. [ 108.673062][ T9070] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 109.419201][ T5733] Bluetooth: hci3: command tx timeout [ 109.677284][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1272'. [ 110.009358][ T9148] netlink: 'syz.4.1282': attribute type 101 has an invalid length. [ 110.279777][ T5822] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 110.365292][ T9165] ima: policy update failed [ 110.429065][ T5822] usb 9-1: Using ep0 maxpacket: 32 [ 110.429540][ T5822] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 110.430306][ T5822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.430321][ T5822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.430332][ T5822] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 110.430351][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.436481][ T5822] usb 9-1: config 0 descriptor?? [ 110.483766][ T9173] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 110.839115][ T5813] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 110.856149][ T5822] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0008/input/input17 [ 110.927825][ T5822] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0008/input/input18 [ 110.949122][ T5822] kye 0003:0458:5011.0008: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 111.011536][ T5813] usb 11-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 111.015989][ T5813] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.016035][ T5813] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.032163][ T5813] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.032201][ T5813] usb 11-1: Product: syz [ 111.032228][ T5813] usb 11-1: Manufacturer: syz [ 111.032301][ T5813] usb 11-1: SerialNumber: syz [ 111.043943][ T43] kauditd_printk_skb: 209 callbacks suppressed [ 111.043990][ T43] audit: type=1800 audit(1788563780.422:1945): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 111.045860][ T43] audit: type=1800 audit(1788563780.422:1946): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152565 res=0 errno=0 [ 111.050847][ T43] audit: type=1800 audit(1788563780.422:1947): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=152597 res=0 errno=0 [ 111.050877][ T43] audit: type=1800 audit(1788563780.422:1948): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=152572 res=0 errno=0 [ 111.053559][ T43] audit: type=1800 audit(1788563780.432:1949): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=152573 res=0 errno=0 [ 111.069704][ T5813] usb 11-1: NFC: intf ffff888000115000 id ffffffff8fe8dc40 [ 111.090795][ T5813] nfcmrvl 11-1:1.0: NFC: registered with nci successfully [ 111.094573][ T43] audit: type=1800 audit(1788563780.472:1950): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=152594 res=0 errno=0 [ 111.103801][ T43] audit: type=1800 audit(1788563780.482:1951): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=152595 res=0 errno=0 [ 111.107797][ T43] audit: type=1800 audit(1788563780.482:1952): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 111.107825][ T43] audit: type=1800 audit(1788563780.482:1953): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152633 res=0 errno=0 [ 111.107845][ T43] audit: type=1800 audit(1788563780.482:1954): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=152574 res=0 errno=0 [ 111.264209][ T13] nfcmrvl 11-1:1.0: NFC: send entry, len 4 [ 111.264435][ T13] usb 11-1: NFC: urb ffff88803646a300 submission failed (90) [ 111.499050][ T66] Bluetooth: hci3: command tx timeout [ 111.739388][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 111.960581][ T9228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1313'. [ 111.969661][ C3] kye 0003:0458:5011.0008: usb_submit_urb(ctrl) failed: -1 [ 112.108781][ T9232] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.408987][ T42] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 112.561899][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.561974][ T42] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 112.563311][ T42] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.566694][ T42] usb 5-1: string descriptor 0 read error: -22 [ 112.566752][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.687863][ T9244] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.741508][ T6217] usb 9-1: USB disconnect, device number 3 [ 112.779816][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.782704][ T5733] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 113.269065][ T851] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 113.419732][ T851] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 113.420745][ T851] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.420767][ T851] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.420778][ T851] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 113.420789][ T851] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.422607][ T851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.422618][ T851] usb 9-1: Product: syz [ 113.422626][ T851] usb 9-1: Manufacturer: syz [ 113.422633][ T851] usb 9-1: SerialNumber: syz [ 113.425758][ T851] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 113.425769][ T851] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 113.425832][ T851] usbserial_generic 9-1:1.0: generic converter detected [ 113.427589][ T851] usb 9-1: generic converter now attached to ttyUSB0 [ 113.579015][ T66] Bluetooth: hci3: command tx timeout [ 113.581318][ T9179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.592259][ T5822] usb 11-1: USB disconnect, device number 2 [ 113.593862][ T5822] usb 11-1: NFC: intf ffff888000115000 [ 113.648224][ T851] usb 9-1: USB disconnect, device number 4 [ 113.651162][ T851] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 113.651469][ T851] usbserial_generic 9-1:1.0: device disconnected [ 113.842765][ T9275] netlink: 'syz.5.1336': attribute type 3 has an invalid length. [ 114.190959][ T9302] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1347'. [ 114.300965][ T9311] WARNING! power/level is deprecated; use power/control instead [ 114.367708][ T9319] netlink: 'syz.4.1355': attribute type 30 has an invalid length. [ 114.418760][ T9322] netlink: 'syz.4.1355': attribute type 30 has an invalid length. [ 114.634565][ T9330] FAULT_INJECTION: forcing a failure. [ 114.634565][ T9330] name failslab, interval 1, probability 0, space 0, times 0 [ 114.634635][ T9330] CPU: 1 UID: 0 PID: 9330 Comm: syz.6.1360 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.634662][ T9330] Tainted: [L]=SOFTLOCKUP [ 114.634667][ T9330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.634674][ T9330] Call Trace: [ 114.634678][ T9330] [ 114.634682][ T9330] dump_stack_lvl+0x100/0x190 [ 114.634702][ T9330] should_fail_ex.cold+0x5/0xa [ 114.634719][ T9330] should_failslab+0xc2/0x120 [ 114.634735][ T9330] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 114.634749][ T9330] ? key_alloc+0x423/0x1310 [ 114.634968][ T9330] kmemdup_noprof+0x29/0x60 [ 114.634994][ T9330] key_alloc+0x423/0x1310 [ 114.635012][ T9330] ? __kmalloc_noprof+0x350/0x840 [ 114.635033][ T9330] ? __pfx_key_alloc+0x10/0x10 [ 114.635047][ T9330] ? hook_cred_prepare+0x177/0x370 [ 114.635064][ T9330] keyring_alloc+0x44/0xc0 [ 114.635080][ T9330] lookup_user_key+0x9b8/0x1300 [ 114.635102][ T9330] ? __pfx_lookup_user_key+0x10/0x10 [ 114.635122][ T9330] ? lock_acquire+0x1d1/0x380 [ 114.635134][ T9330] ? __might_fault+0xc5/0x140 [ 114.635152][ T9330] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 114.635172][ T9330] ? strncpy_from_user+0x19d/0x2d0 [ 114.635186][ T9330] __do_sys_add_key+0x2a6/0x460 [ 114.635250][ T9330] ? __pfx___do_sys_add_key+0x10/0x10 [ 114.635273][ T9330] do_syscall_64+0x123/0x790 [ 114.635291][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.635303][ T9330] RIP: 0033:0x7f137319e159 [ 114.635315][ T9330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.635327][ T9330] RSP: 002b:00007f1374145028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 114.635339][ T9330] RAX: ffffffffffffffda RBX: 00007f1373425fa0 RCX: 00007f137319e159 [ 114.635347][ T9330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000680 [ 114.635354][ T9330] RBP: 00007f1373235024 R08: ffffffffffffffff R09: 0000000000000000 [ 114.635362][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.635369][ T9330] R13: 00007f1373426038 R14: 00007f1373425fa0 R15: 00007ffda01c2f48 [ 114.635386][ T9330] [ 114.860310][ T5733] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 114.860380][ T5733] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.385295][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.496980][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.565158][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.605819][ T5733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.608024][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.611987][ T5733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.616110][ T5733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.617229][ T5733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.655257][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.771486][ T13] bridge_slave_1: left allmulticast mode [ 115.771535][ T13] bridge_slave_1: left promiscuous mode [ 115.771662][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.778034][ T13] bridge_slave_0: left allmulticast mode [ 115.778050][ T13] bridge_slave_0: left promiscuous mode [ 115.778145][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.867456][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.873512][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.882227][ T13] bond0 (unregistering): Released all slaves [ 116.037485][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 116.121467][ T43] kauditd_printk_skb: 159 callbacks suppressed [ 116.121530][ T43] audit: type=1400 audit(1788563785.502:2114): avc: denied { write } for pid=9397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.169136][ T43] audit: type=1400 audit(1788563785.552:2115): avc: denied { write } for pid=9403 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.179888][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.182405][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.184936][ T9366] bridge_slave_0: entered allmulticast mode [ 116.188229][ T9366] bridge_slave_0: entered promiscuous mode [ 116.198505][ T13] hsr_slave_0: left promiscuous mode [ 116.201617][ T13] hsr_slave_1: left promiscuous mode [ 116.204825][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.204879][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.207682][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.207692][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.215931][ T13] veth1_macvtap: left promiscuous mode [ 116.215989][ T13] veth0_macvtap: left promiscuous mode [ 116.216075][ T13] veth1_vlan: left promiscuous mode [ 116.216119][ T13] veth0_vlan: left promiscuous mode [ 116.333251][ T13] team0 (unregistering): Port device team_slave_1 removed [ 116.341527][ T13] team0 (unregistering): Port device team_slave_0 removed [ 116.401966][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.404370][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.406756][ T9366] bridge_slave_1: entered allmulticast mode [ 116.409893][ T9366] bridge_slave_1: entered promiscuous mode [ 116.412623][ T5446] 8021q: adding VLAN 0 to HW filter on device eth11 [ 116.430662][ T9366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.432437][ T9366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.447602][ T9366] team0: Port device team_slave_0 added [ 116.449553][ T9366] team0: Port device team_slave_1 added [ 116.466367][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.466401][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.466415][ T9366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.467651][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.467662][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.467681][ T9366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.505903][ T9366] hsr_slave_0: entered promiscuous mode [ 116.506415][ T9366] hsr_slave_1: entered promiscuous mode [ 116.506687][ T9366] debugfs: 'hsr0' already exists in 'hsr' [ 116.506697][ T9366] Cannot create hsr debugfs directory [ 116.522799][ T43] audit: type=1400 audit(1788563785.902:2116): avc: denied { write } for pid=9406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.574351][ T43] audit: type=1800 audit(1788563785.952:2117): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27250 res=0 errno=0 [ 116.581880][ T43] audit: type=1800 audit(1788563785.952:2118): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27249 res=0 errno=0 [ 116.581905][ T43] audit: type=1800 audit(1788563785.952:2119): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159414 res=0 errno=0 [ 116.581924][ T43] audit: type=1400 audit(1788563785.952:2120): avc: denied { write } for pid=9409 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.633333][ T5446] 8021q: adding VLAN 0 to HW filter on device eth12 [ 116.647478][ T9366] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 116.652497][ T9366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.653063][ T9366] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 116.657613][ T9366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.658431][ T9366] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 116.663344][ T9366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.663786][ T9366] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 116.666238][ T9366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.710262][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.710806][ T43] audit: type=1400 audit(1788563786.092:2121): avc: denied { write } for pid=9418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.731751][ T9366] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.741182][ T43] audit: type=1800 audit(1788563786.122:2122): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 116.751349][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.751441][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.755888][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.755936][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.781400][ T43] audit: type=1400 audit(1788563786.152:2123): avc: denied { write } for pid=9421 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.827359][ T66] Bluetooth: hci0: unexpected event for opcode 0x080f [ 116.836241][ T5446] 8021q: adding VLAN 0 to HW filter on device eth13 [ 117.008605][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.187272][ T9366] veth0_vlan: entered promiscuous mode [ 117.190831][ T9366] veth1_vlan: entered promiscuous mode [ 117.205520][ T9366] veth0_macvtap: entered promiscuous mode [ 117.208001][ T9366] veth1_macvtap: entered promiscuous mode [ 117.216972][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.221029][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.278006][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.278285][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.278327][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.278360][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.307707][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.308009][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.327450][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.327494][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.668994][ T66] Bluetooth: hci3: command tx timeout [ 118.083943][ T9485] SELinux: ebitmap: high bit 8390784 is not equal to the expected value 1152 [ 118.089564][ T9485] SELinux: invalid class [ 118.091816][ T9485] SELinux: failed to load policy [ 118.123139][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 118.251043][ T9498] i2c i2c-0: new_device: Invalid device name [ 118.462977][ T9235] usb 5-1: 1:1: usb_set_interface failed (-110) [ 118.466325][ T62] usb 5-1: USB disconnect, device number 16 [ 118.629270][ T30] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 118.688645][ T9522] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 118.688695][ T9522] CPU: 1 UID: 0 PID: 9522 Comm: syz.0.1415 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.688723][ T9522] Tainted: [L]=SOFTLOCKUP [ 118.688728][ T9522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.688736][ T9522] Call Trace: [ 118.688741][ T9522] [ 118.688746][ T9522] dump_stack_lvl+0x100/0x190 [ 118.688783][ T9522] sysfs_warn_dup.cold+0x1c/0x28 [ 118.688802][ T9522] sysfs_create_dir_ns+0x24b/0x2b0 [ 118.688821][ T9522] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 118.688836][ T9522] ? find_held_lock+0x2b/0x80 [ 118.688852][ T9522] ? kobject_add_internal+0x25f/0x930 [ 118.688876][ T9522] ? kobject_add_internal+0x25f/0x930 [ 118.688893][ T9522] ? class_dir_child_ns_type+0xd/0x60 [ 118.688909][ T9522] kobject_add_internal+0x2c8/0x930 [ 118.688940][ T9522] kobject_add+0x16a/0x1e0 [ 118.688956][ T9522] ? __pfx_kobject_add+0x10/0x10 [ 118.688972][ T9522] ? get_device_parent+0x1b3/0x4c0 [ 118.688984][ T9522] ? kobject_put+0xb9/0x640 [ 118.689004][ T9522] device_add+0x294/0x1970 [ 118.689018][ T9522] ? lockdep_init_map_type+0x5c/0x250 [ 118.689031][ T9522] ? __pfx_device_add+0x10/0x10 [ 118.689042][ T9522] ? lockdep_init_map_type+0x5c/0x250 [ 118.689054][ T9522] ? __init_waitqueue_head+0xca/0x150 [ 118.689072][ T9522] tty_register_device_attr+0x388/0x7f0 [ 118.689091][ T9522] ? lockdep_init_map_type+0x5c/0x250 [ 118.689102][ T9522] ? __pfx_tty_register_device_attr+0x10/0x10 [ 118.689123][ T9522] ? tty_port_init+0x156/0x1c0 [ 118.689137][ T9522] gsm_activate_mux+0x155/0x2a0 [ 118.689149][ T9522] gsmld_ioctl+0xbbc/0x15c0 [ 118.689166][ T9522] ? __pfx_gsmld_ioctl+0x10/0x10 [ 118.689189][ T9522] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.689201][ T9522] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 118.689218][ T9522] ? __pfx_gsmld_ioctl+0x10/0x10 [ 118.689230][ T9522] tty_ioctl+0x11b4/0x1640 [ 118.689242][ T9522] ? __pfx_tty_ioctl+0x10/0x10 [ 118.689251][ T9522] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 118.689270][ T9522] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 118.689284][ T9522] ? __fget_files+0x34/0x3d0 [ 118.689305][ T9522] ? selinux_file_ioctl+0x13b/0x290 [ 118.689315][ T9522] ? selinux_file_ioctl+0xb6/0x290 [ 118.689327][ T9522] ? __pfx_tty_ioctl+0x10/0x10 [ 118.689339][ T9522] __x64_sys_ioctl+0x18e/0x210 [ 118.689359][ T9522] do_syscall_64+0x123/0x790 [ 118.689374][ T9522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.689386][ T9522] RIP: 0033:0x7f71f299e159 [ 118.689396][ T9522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.689407][ T9522] RSP: 002b:00007f71f3904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.689418][ T9522] RAX: ffffffffffffffda RBX: 00007f71f2c26090 RCX: 00007f71f299e159 [ 118.689425][ T9522] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 118.689432][ T9522] RBP: 00007f71f2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 118.689438][ T9522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.689444][ T9522] R13: 00007f71f2c26128 R14: 00007f71f2c26090 R15: 00007ffd7e4d0448 [ 118.689459][ T9522] [ 118.691963][ T9522] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 118.799971][ T30] usb 12-1: Using ep0 maxpacket: 32 [ 118.804600][ T30] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 118.805470][ T30] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 118.805491][ T30] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 118.805504][ T30] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.805517][ T30] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 118.807050][ T30] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.807062][ T30] usb 12-1: Product: syz [ 118.807069][ T30] usb 12-1: Manufacturer: syz [ 118.807076][ T30] usb 12-1: SerialNumber: syz [ 118.823132][ C1] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 118.827481][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input19 [ 119.011687][ T9526] ptn5150 0-001d: probe with driver ptn5150 failed with error -22 [ 119.014268][ T9526] i2c i2c-0: new_device: Instantiated device ptn5150 at 0x1d [ 119.059022][ T30] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 119.059070][ T30] (id 0x00) [ 119.129133][ T30] rc_core: IR keymap rc-imon-pad not found [ 119.129167][ T30] Registered IR keymap rc-empty [ 119.129676][ T30] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 119.129688][ T30] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 119.218630][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'. [ 119.221771][ T9538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1422'. [ 119.221790][ T9538] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 119.249676][ T30] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 119.250807][ T30] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input20 [ 119.254511][ T30] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:2> initialized [ 119.418884][ T9544] ipvlan0: Caught tx_queue_len zero misconfig [ 119.437284][ T9503] imon:vfd_write: invalid payload size [ 119.437869][ T10] usb 12-1: USB disconnect, device number 2 [ 119.595635][ T9557] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 119.741689][ T66] Bluetooth: hci3: command tx timeout [ 119.821651][ T9568] macvtap1: entered allmulticast mode [ 119.821907][ T9568] vlan0: entered allmulticast mode [ 119.821916][ T9568] veth0_vlan: entered allmulticast mode [ 119.822601][ T9568] team0: Device macvtap1 failed to register rx_handler [ 119.826562][ T9568] vlan0: left allmulticast mode [ 119.826575][ T9568] veth0_vlan: left allmulticast mode [ 119.986136][ T9580] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input21 [ 120.312178][ T9606] jffs2: notice: (9606) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 120.379240][ T30] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 120.539101][ T30] usb 9-1: Using ep0 maxpacket: 32 [ 120.544899][ T30] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 120.549424][ T30] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 120.560280][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.560323][ T30] usb 9-1: Product: syz [ 120.560364][ T30] usb 9-1: Manufacturer: syz [ 120.560389][ T30] usb 9-1: SerialNumber: syz [ 120.570860][ T30] usb 9-1: config 0 descriptor?? [ 120.573018][ T9589] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 120.576978][ T30] hub 9-1:0.0: bad descriptor, ignoring hub [ 120.579825][ T30] hub 9-1:0.0: probe with driver hub failed with error -5 [ 120.587979][ T30] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input22 [ 120.783860][ T5813] usb 9-1: USB disconnect, device number 5 [ 120.783867][ C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 121.308119][ T43] kauditd_printk_skb: 217 callbacks suppressed [ 121.309064][ T43] audit: type=1800 audit(1788563790.682:2341): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 121.358034][ T43] audit: type=1800 audit(1788563790.732:2342): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1459" name="bMaxPacketSize0" dev="configfs" ino=32240 res=0 errno=0 [ 121.384942][ T43] audit: type=1800 audit(1788563790.762:2343): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 121.431141][ T43] audit: type=1800 audit(1788563790.812:2344): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 121.474481][ T43] audit: type=1800 audit(1788563790.852:2345): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 121.527064][ T43] audit: type=1800 audit(1788563790.902:2346): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 121.535609][ T43] audit: type=1800 audit(1788563790.912:2347): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1464" name="max_write_same_blocks" dev="sysfs" ino=25358 res=0 errno=0 [ 121.574285][ T43] audit: type=1800 audit(1788563790.952:2348): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 121.586432][ T9632] FAULT_INJECTION: forcing a failure. [ 121.586432][ T9632] name failslab, interval 1, probability 0, space 0, times 0 [ 121.586497][ T9632] CPU: 3 UID: 0 PID: 9632 Comm: syz.4.1466 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.586525][ T9632] Tainted: [L]=SOFTLOCKUP [ 121.586530][ T9632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.586537][ T9632] Call Trace: [ 121.586541][ T9632] [ 121.586546][ T9632] dump_stack_lvl+0x100/0x190 [ 121.586565][ T9632] should_fail_ex.cold+0x5/0xa [ 121.586581][ T9632] should_failslab+0xc2/0x120 [ 121.586596][ T9632] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 121.586610][ T9632] ? key_alloc+0x423/0x1310 [ 121.586624][ T9632] kmemdup_noprof+0x29/0x60 [ 121.586641][ T9632] key_alloc+0x423/0x1310 [ 121.586656][ T9632] ? __kasan_kmalloc+0xaa/0xb0 [ 121.586668][ T9632] ? __pfx_key_alloc+0x10/0x10 [ 121.586682][ T9632] keyring_alloc+0x44/0xc0 [ 121.586696][ T9632] install_session_keyring_to_cred+0x190/0x230 [ 121.586714][ T9632] join_session_keyring+0x1bc/0x350 [ 121.586737][ T9632] lookup_user_key+0xbf9/0x1300 [ 121.586755][ T9632] ? __pfx_lookup_user_key+0x10/0x10 [ 121.586773][ T9632] ? lock_acquire+0x1d1/0x380 [ 121.586785][ T9632] ? __might_fault+0xc5/0x140 [ 121.586803][ T9632] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 121.586824][ T9632] ? strncpy_from_user+0x19d/0x2d0 [ 121.586837][ T9632] __do_sys_add_key+0x2a6/0x460 [ 121.586851][ T9632] ? __pfx___do_sys_add_key+0x10/0x10 [ 121.586870][ T9632] do_syscall_64+0x123/0x790 [ 121.586885][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.586897][ T9632] RIP: 0033:0x7f07cab9e159 [ 121.586906][ T9632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.586917][ T9632] RSP: 002b:00007f07cbb29028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 121.586928][ T9632] RAX: ffffffffffffffda RBX: 00007f07cae25fa0 RCX: 00007f07cab9e159 [ 121.586935][ T9632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 121.586941][ T9632] RBP: 00007f07cac35024 R08: fffffffffffffffd R09: 0000000000000000 [ 121.586948][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.586954][ T9632] R13: 00007f07cae26038 R14: 00007f07cae25fa0 R15: 00007ffff24533b8 [ 121.586968][ T9632] [ 121.620043][ T43] audit: type=1800 audit(1788563790.992:2349): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 121.819752][ T66] Bluetooth: hci3: command tx timeout [ 121.879006][ T6978] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 122.060573][ T6978] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 122.064160][ T6978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.067411][ T6978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.071756][ T43] audit: type=1800 audit(1788563791.452:2350): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161688 res=0 errno=0 [ 122.081333][ T6978] as10x_usb: device has been detected [ 122.083479][ T6978] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 122.107528][ T6978] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 122.170880][ T6978] as10x_usb: error during firmware upload part1 [ 122.174594][ T6978] Registered device Abilis Systems DVB-Titan [ 122.835950][ T6978] usb 5-1: USB disconnect, device number 17 [ 122.850625][ T6978] Unregistered device Abilis Systems DVB-Titan [ 122.851527][ T6978] as10x_usb: device has been disconnected [ 122.869234][ T42] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 123.020366][ T42] usb 12-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 123.028262][ T42] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.030989][ T42] usb 12-1: Product: syz [ 123.032406][ T42] usb 12-1: Manufacturer: syz [ 123.033987][ T42] usb 12-1: SerialNumber: syz [ 123.259220][ T9682] netlink: 'syz.5.1487': attribute type 29 has an invalid length. [ 123.287877][ T9684] FAULT_INJECTION: forcing a failure. [ 123.287877][ T9684] name fail_page_alloc, interval 1, probability 0, space 0, times 8 [ 123.287922][ T9684] CPU: 1 UID: 0 PID: 9684 Comm: syz.5.1488 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.287938][ T9684] Tainted: [L]=SOFTLOCKUP [ 123.287942][ T9684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.287949][ T9684] Call Trace: [ 123.287953][ T9684] [ 123.287957][ T9684] dump_stack_lvl+0x100/0x190 [ 123.287977][ T9684] should_fail_ex.cold+0x5/0xa [ 123.287991][ T9684] ? prepare_alloc_pages+0x16d/0x5b0 [ 123.288005][ T9684] should_fail_alloc_page+0xeb/0x140 [ 123.288020][ T9684] prepare_alloc_pages+0x1f0/0x5b0 [ 123.288034][ T9684] ? is_bpf_text_address+0x94/0x1a0 [ 123.288050][ T9684] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 123.288072][ T9684] ? stack_trace_save+0x8e/0xc0 [ 123.288089][ T9684] ? __pfx_stack_trace_save+0x10/0x10 [ 123.288104][ T9684] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 123.288121][ T9684] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.288137][ T9684] ? is_bpf_text_address+0x94/0x1a0 [ 123.288153][ T9684] ? kasan_save_stack+0x3f/0x50 [ 123.288163][ T9684] ? kasan_save_stack+0x30/0x50 [ 123.288174][ T9684] ? kasan_save_track+0x14/0x30 [ 123.288184][ T9684] ? __kasan_slab_alloc+0x89/0x90 [ 123.288196][ T9684] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 123.288206][ T9684] ? alloc_vmap_area+0x1814/0x2bb0 [ 123.288217][ T9684] ? __get_vm_area_node+0x1ed/0x350 [ 123.288229][ T9684] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 123.288242][ T9684] ? __vmalloc_node_noprof+0xad/0xf0 [ 123.288254][ T9684] ? __vmalloc_noprof+0xa3/0x120 [ 123.288266][ T9684] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 123.288279][ T9684] ? bpf_prog_alloc+0x3b/0x200 [ 123.288290][ T9684] ? bpf_prog_load+0x49e/0x2a80 [ 123.288303][ T9684] ? __sys_bpf+0x1f46/0x4a30 [ 123.288311][ T9684] ? __x64_sys_bpf+0xce/0x140 [ 123.288320][ T9684] ? do_syscall_64+0x123/0x790 [ 123.288333][ T9684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.288350][ T9684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.288363][ T9684] ? policy_nodemask+0xed/0x4f0 [ 123.288377][ T9684] alloc_pages_mpol+0x201/0x550 [ 123.288391][ T9684] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.288408][ T9684] alloc_pages_noprof+0x1a/0x160 [ 123.288425][ T9684] get_free_pages_noprof+0x10/0xb0 [ 123.288438][ T9684] __kasan_populate_vmalloc+0xa0/0x210 [ 123.288452][ T9684] alloc_vmap_area+0x95d/0x2bb0 [ 123.288467][ T9684] ? kasan_save_track+0x14/0x30 [ 123.288478][ T9684] ? __kasan_kmalloc+0xaa/0xb0 [ 123.288489][ T9684] ? __pfx_alloc_vmap_area+0x10/0x10 [ 123.288501][ T9684] ? __get_vm_area_node+0x124/0x350 [ 123.288515][ T9684] __get_vm_area_node+0x1ed/0x350 [ 123.288530][ T9684] __vmalloc_node_range_noprof+0x268/0x1420 [ 123.288544][ T9684] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 123.288559][ T9684] ? do_raw_spin_lock+0x128/0x260 [ 123.288574][ T9684] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 123.288587][ T9684] ? lock_acquire+0x1d1/0x380 [ 123.288599][ T9684] ? find_held_lock+0x2b/0x80 [ 123.288613][ T9684] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.288627][ T9684] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 123.288643][ T9684] ? avc_has_perm_noaudit+0x145/0x3b0 [ 123.288657][ T9684] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 123.288669][ T9684] __vmalloc_node_noprof+0xad/0xf0 [ 123.288682][ T9684] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 123.288697][ T9684] __vmalloc_noprof+0xa3/0x120 [ 123.288709][ T9684] ? __pfx___vmalloc_noprof+0x10/0x10 [ 123.288724][ T9684] ? rcu_is_watching+0x13/0xc0 [ 123.288738][ T9684] ? cap_capable+0x107/0x430 [ 123.288754][ T9684] bpf_prog_alloc_no_stats+0x59/0x690 [ 123.288767][ T9684] ? security_capable+0x80/0x260 [ 123.288783][ T9684] bpf_prog_alloc+0x3b/0x200 [ 123.288795][ T9684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.288807][ T9684] bpf_prog_load+0x49e/0x2a80 [ 123.288824][ T9684] ? __pfx_bpf_prog_load+0x10/0x10 [ 123.288857][ T9684] __sys_bpf+0x1f46/0x4a30 [ 123.288871][ T9684] ? __pfx___sys_bpf+0x10/0x10 [ 123.288881][ T9684] ? find_held_lock+0x2b/0x80 [ 123.288897][ T9684] ? futex_wake+0x4ea/0x5e0 [ 123.288939][ T9684] ? rcu_read_lock_any_held+0x6a/0x90 [ 123.288957][ T9684] ? find_held_lock+0x2b/0x80 [ 123.288972][ T9684] ? ksys_write+0x190/0x250 [ 123.288983][ T9684] ? ksys_write+0x190/0x250 [ 123.289002][ T9684] ? __x64_sys_futex+0x34f/0x4d0 [ 123.289017][ T9684] ? __x64_sys_futex+0x358/0x4d0 [ 123.289034][ T9684] ? xfd_validate_state+0x129/0x190 [ 123.289048][ T9684] ? __x64_sys_bpf+0xce/0x140 [ 123.289058][ T9684] __x64_sys_bpf+0xce/0x140 [ 123.289068][ T9684] ? do_syscall_64+0xae/0x790 [ 123.289081][ T9684] do_syscall_64+0x123/0x790 [ 123.289095][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.289107][ T9684] RIP: 0033:0x7f44a159e159 [ 123.289117][ T9684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.289127][ T9684] RSP: 002b:00007f44a23f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.289138][ T9684] RAX: ffffffffffffffda RBX: 00007f44a1825fa0 RCX: 00007f44a159e159 [ 123.289145][ T9684] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 123.289152][ T9684] RBP: 00007f44a1635024 R08: 0000000000000000 R09: 0000000000000000 [ 123.289158][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.289164][ T9684] R13: 00007f44a1826038 R14: 00007f44a1825fa0 R15: 00007ffe837ffda8 [ 123.289179][ T9684] [ 123.294387][ T9684] syz.5.1488: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 123.294432][ T9684] CPU: 1 UID: 0 PID: 9684 Comm: syz.5.1488 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.294448][ T9684] Tainted: [L]=SOFTLOCKUP [ 123.294453][ T9684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.294459][ T9684] Call Trace: [ 123.294463][ T9684] [ 123.294467][ T9684] dump_stack_lvl+0x100/0x190 [ 123.294486][ T9684] warn_alloc.cold+0x9e/0xb2 [ 123.294499][ T9684] ? __pfx_warn_alloc+0x10/0x10 [ 123.294516][ T9684] ? lockdep_hardirqs_on+0x7d/0x110 [ 123.294531][ T9684] ? __get_vm_area_node+0x2f0/0x350 [ 123.294547][ T9684] ? __get_vm_area_node+0x22b/0x350 [ 123.294563][ T9684] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 123.294580][ T9684] ? do_raw_spin_lock+0x128/0x260 [ 123.294595][ T9684] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 123.294609][ T9684] ? lock_acquire+0x1d1/0x380 [ 123.294622][ T9684] ? find_held_lock+0x2b/0x80 [ 123.294638][ T9684] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.294651][ T9684] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 123.294667][ T9684] ? avc_has_perm_noaudit+0x145/0x3b0 [ 123.294681][ T9684] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 123.294694][ T9684] __vmalloc_node_noprof+0xad/0xf0 [ 123.294707][ T9684] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 123.294722][ T9684] __vmalloc_noprof+0xa3/0x120 [ 123.294735][ T9684] ? __pfx___vmalloc_noprof+0x10/0x10 [ 123.294749][ T9684] ? rcu_is_watching+0x13/0xc0 [ 123.294764][ T9684] ? cap_capable+0x107/0x430 [ 123.294779][ T9684] bpf_prog_alloc_no_stats+0x59/0x690 [ 123.294791][ T9684] ? security_capable+0x80/0x260 [ 123.294806][ T9684] bpf_prog_alloc+0x3b/0x200 [ 123.294818][ T9684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.294831][ T9684] bpf_prog_load+0x49e/0x2a80 [ 123.294856][ T9684] ? __pfx_bpf_prog_load+0x10/0x10 [ 123.294882][ T9684] __sys_bpf+0x1f46/0x4a30 [ 123.294896][ T9684] ? __pfx___sys_bpf+0x10/0x10 [ 123.294907][ T9684] ? find_held_lock+0x2b/0x80 [ 123.294921][ T9684] ? futex_wake+0x4ea/0x5e0 [ 123.294947][ T9684] ? rcu_read_lock_any_held+0x6a/0x90 [ 123.294963][ T9684] ? find_held_lock+0x2b/0x80 [ 123.294978][ T9684] ? ksys_write+0x190/0x250 [ 123.294989][ T9684] ? ksys_write+0x190/0x250 [ 123.295009][ T9684] ? __x64_sys_futex+0x34f/0x4d0 [ 123.295023][ T9684] ? __x64_sys_futex+0x358/0x4d0 [ 123.295039][ T9684] ? xfd_validate_state+0x129/0x190 [ 123.295052][ T9684] ? __x64_sys_bpf+0xce/0x140 [ 123.295061][ T9684] __x64_sys_bpf+0xce/0x140 [ 123.295072][ T9684] ? do_syscall_64+0xae/0x790 [ 123.295085][ T9684] do_syscall_64+0x123/0x790 [ 123.295099][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.295110][ T9684] RIP: 0033:0x7f44a159e159 [ 123.295119][ T9684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.295130][ T9684] RSP: 002b:00007f44a23f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.295140][ T9684] RAX: ffffffffffffffda RBX: 00007f44a1825fa0 RCX: 00007f44a159e159 [ 123.295147][ T9684] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 123.295153][ T9684] RBP: 00007f44a1635024 R08: 0000000000000000 R09: 0000000000000000 [ 123.295160][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.295166][ T9684] R13: 00007f44a1826038 R14: 00007f44a1825fa0 R15: 00007ffe837ffda8 [ 123.295204][ T9684] [ 123.295211][ T9684] Mem-Info: [ 123.295217][ T9684] active_anon:18028 inactive_anon:0 isolated_anon:0 [ 123.295217][ T9684] active_file:2549 inactive_file:62291 isolated_file:0 [ 123.295217][ T9684] unevictable:1000 dirty:220 writeback:0 [ 123.295217][ T9684] slab_reclaimable:12646 slab_unreclaimable:76749 [ 123.295217][ T9684] mapped:30055 shmem:1566 pagetables:1583 [ 123.295217][ T9684] sec_pagetables:294 bounce:0 [ 123.295217][ T9684] kernel_misc_reclaimable:0 [ 123.295217][ T9684] free:411013 free_pcp:10227 free_cma:0 [ 123.295246][ T9684] Node 0 active_anon:72056kB inactive_anon:0kB active_file:10196kB inactive_file:248968kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:103836kB dirty:880kB writeback:0kB shmem:4264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:24576kB kernel_stack:14944kB pagetables:6088kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 123.295276][ T9684] Node 1 active_anon:56kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 123.295304][ T9684] Node 0 DMA free:10836kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:68kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.295337][ T9684] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 123.295357][ T9684] Node 0 DMA32 free:44328kB boost:0kB min:27760kB low:34700kB high:41640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:71988kB inactive_anon:0kB active_file:10196kB inactive_file:248968kB unevictable:2000kB writepending:880kB zspages:0kB present:2080628kB managed:1252980kB mlocked:0kB bounce:0kB free_pcp:24684kB local_pcp:6592kB free_cma:0kB [ 123.295390][ T9684] lowmem_reserve[]: 0 0 0 0 0 [ 123.295409][ T9684] Node 1 Normal free:1588888kB boost:0kB min:39480kB low:49348kB high:59216kB reserved_highatomic:0kB free_highatomic:0kB active_anon:56kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:16224kB local_pcp:5224kB free_cma:0kB [ 123.295438][ T9684] lowmem_reserve[]: 0 0 0 0 0 [ 123.295455][ T9684] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 6*16kB (UME) 3*32kB (UM) 2*64kB (UE) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (UM) 0*4096kB = 10836kB [ 123.295534][ T9684] Node 0 DMA32: 4*4kB (M) 93*8kB (UM) 165*16kB (UME) 59*32kB (UM) 31*64kB (M) 25*128kB (UME) 22*256kB (UM) 19*512kB (M) 12*1024kB (UM) 3*2048kB (U) 0*4096kB = 44264kB [ 123.295613][ T9684] Node 1 Normal: 0*4kB 1*8kB (U) 1*16kB (M) 2*32kB (UM) 9*64kB (UM) 16*128kB (UM) 8*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 385*4096kB (UM) = 1588888kB [ 123.295692][ T9684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.295701][ T9684] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.295708][ T9684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.295716][ T9684] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.295724][ T9684] 66405 total pagecache pages [ 123.295728][ T9684] 6 pages in swap cache [ 123.295731][ T9684] Free swap = 124972kB [ 123.295735][ T9684] Total swap = 124996kB [ 123.295739][ T9684] 1048443 pages RAM [ 123.295743][ T9684] 0 pages HighMem/MovableOnly [ 123.295746][ T9684] 285888 pages reserved [ 123.295749][ T9684] 0 pages cma reserved [ 123.346257][ T42] rtl8150 12-1:1.0: couldn't reset the device [ 123.346663][ T42] rtl8150 12-1:1.0: probe with driver rtl8150 failed with error -5 [ 123.361337][ T42] usb 12-1: USB disconnect, device number 3 [ 123.382678][ T9686] overlayfs: statfs failed on './file0' [ 123.395219][ T7570] block nbd1: Receive control failed (result -32) [ 123.398679][ T7570] block nbd1: Receive control failed (result -32) [ 123.423977][ T9694] ip_vti0: Master is either lo or non-ether device [ 123.899120][ T66] Bluetooth: hci3: command tx timeout [ 124.217081][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1512'. [ 124.514501][ T9763] Bluetooth: MGMT ver 1.23 [ 125.475796][ T9789] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 125.489261][ T9791] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 125.612138][ T9805] tps6598x 0-0038: failed to read vendor ID: -6, vid: 0x0 [ 125.612747][ T9805] i2c i2c-0: new_device: Instantiated device tps6598x at 0x38 [ 125.643204][ T9809] openvswitch: netlink: IPv4 tunnel dst address is zero [ 125.643264][ T9809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.710411][ T9821] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 126.166488][ T9856] jffs2: notice: (9856) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 126.325613][ T43] kauditd_printk_skb: 136 callbacks suppressed [ 126.329155][ T43] audit: type=1800 audit(1788563795.702:2487): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 126.345044][ T43] audit: type=1800 audit(1788563795.722:2488): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 126.366717][ T43] audit: type=1800 audit(1788563795.742:2489): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 126.394893][ T43] audit: type=1800 audit(1788563795.772:2490): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 126.481187][ T43] audit: type=1800 audit(1788563795.862:2491): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 126.518282][ T43] audit: type=1800 audit(1788563795.892:2492): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 126.545063][ T43] audit: type=1800 audit(1788563795.922:2493): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 126.568378][ T43] audit: type=1800 audit(1788563795.942:2494): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 126.580298][ T30] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 126.678972][ T43] audit: type=1800 audit(1788563796.052:2495): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 126.694742][ T43] audit: type=1800 audit(1788563796.072:2496): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 126.722503][ T9884] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 126.749454][ T30] usb 10-1: Using ep0 maxpacket: 8 [ 126.749995][ T30] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 126.750849][ T30] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.750865][ T30] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.750876][ T30] usb 10-1: config 0 interface 0 has no altsetting 0 [ 126.750892][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.752994][ T30] usb 10-1: config 0 descriptor?? [ 127.024834][ T9915] netlink: 'syz.4.1591': attribute type 11 has an invalid length. [ 127.077811][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1594'. [ 127.080752][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1594'. [ 127.088857][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1594'. [ 127.088908][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1594'. [ 127.141456][ T9923] smpboot: CPU 1 is now offline [ 127.170920][ T30] hid_parser_main: 5 callbacks suppressed [ 127.171109][ T30] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 127.171145][ T30] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 127.171335][ T30] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 127.171447][ T30] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 127.171551][ T30] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 127.171975][ T30] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 127.210930][ T9923] smpboot: CPU 3 is now offline [ 127.368800][ T10] usb 10-1: USB disconnect, device number 4 [ 127.498060][ T9943] serio: Serial port ptm0 [ 127.845170][ T9969] FAULT_INJECTION: forcing a failure. [ 127.845170][ T9969] name failslab, interval 1, probability 0, space 0, times 0 [ 127.845212][ T9969] CPU: 2 UID: 0 PID: 9969 Comm: syz.7.1611 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.845238][ T9969] Tainted: [L]=SOFTLOCKUP [ 127.845244][ T9969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.845250][ T9969] Call Trace: [ 127.845255][ T9969] [ 127.845259][ T9969] dump_stack_lvl+0x100/0x190 [ 127.845291][ T9969] should_fail_ex.cold+0x5/0xa [ 127.845308][ T9969] should_failslab+0xc2/0x120 [ 127.845325][ T9969] __kmalloc_cache_noprof+0x91/0x6d0 [ 127.845345][ T9969] ? cap_capable+0x107/0x430 [ 127.845360][ T9969] ? __x64_sys_futex+0x358/0x4d0 [ 127.845375][ T9969] ? fsnotify_alloc_group+0x8d/0x320 [ 127.845395][ T9969] fsnotify_alloc_group+0x8d/0x320 [ 127.845412][ T9969] __do_sys_fanotify_init+0x271/0xe30 [ 127.845430][ T9969] do_syscall_64+0x123/0x790 [ 127.845448][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.845459][ T9969] RIP: 0033:0x7fa39039e159 [ 127.845469][ T9969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.845479][ T9969] RSP: 002b:00007fa39131f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 127.845491][ T9969] RAX: ffffffffffffffda RBX: 00007fa390625fa0 RCX: 00007fa39039e159 [ 127.845498][ T9969] RDX: 0000000000000000 RSI: 0000000000101000 RDI: 0000000000000040 [ 127.845506][ T9969] RBP: 00007fa390435024 R08: 0000000000000000 R09: 0000000000000000 [ 127.845514][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.845521][ T9969] R13: 00007fa390626038 R14: 00007fa390625fa0 R15: 00007ffc6e4d79d8 [ 127.845536][ T9969] [ 128.226848][ T9996] SELinux: ebitmap: truncated map [ 128.228765][ T9996] SELinux: invalid class [ 128.235027][ T9996] SELinux: failed to load policy [ 128.531140][T10016] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.569237][ T25] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 128.721831][ T25] usb 10-1: not running at top speed; connect to a high speed hub [ 128.721870][ T25] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 128.727892][ T25] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.733395][ T25] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.733446][ T25] usb 10-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 128.733480][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.750542][ T25] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 128.761714][ T25] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 128.766021][ T25] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 128.768569][ T25] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 128.773168][ T25] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 128.861155][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.167735][ T25] usb 10-1: USB disconnect, device number 5 [ 129.176568][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 129.187534][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 129.187997][ T25] keyspan 10-1:1.0: device disconnected [ 129.212711][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1646'. [ 129.215137][T10050] loop6: detected capacity change from 0 to 2640 [ 129.244538][ T8784] buffer_io_error: 10 callbacks suppressed [ 129.244606][ T8784] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.244884][ T8784] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.245103][ T8784] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.245322][ T8784] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.245591][ T8784] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.263380][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.263494][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.263599][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.368764][T10058] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1649'. [ 129.423281][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.622939][T10080] can0: slcan on ttynull. [ 129.796104][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1665'. [ 129.814566][ T9692] block nbd2: Receive control failed (result -107) [ 129.869006][ T25] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 129.887396][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'. [ 129.887846][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'. [ 129.908168][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.956697][T10110] input: syz1 as /devices/virtual/input/input23 [ 130.039606][ T25] usb 12-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 130.040167][ T25] usb 12-1: config 0 has no interfaces? [ 130.041041][ T25] usb 12-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 130.041054][ T25] usb 12-1: Manufacturer: syz [ 130.054870][ T25] usb 12-1: config 0 descriptor?? [ 130.258680][ T25] usb 12-1: USB disconnect, device number 4 [ 130.323011][T10079] can0 (unregistered): slcan off ttynull. [ 130.724012][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1676'. [ 130.941115][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.360464][ T43] kauditd_printk_skb: 170 callbacks suppressed [ 131.360508][ T43] audit: type=1800 audit(1788563800.732:2667): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 131.558387][ T43] audit: type=1800 audit(1788563800.932:2668): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 131.580302][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.582364][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.653839][ T43] audit: type=1800 audit(1788563801.032:2669): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 131.745895][ T43] audit: type=1800 audit(1788563801.122:2670): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 131.796762][ T43] audit: type=1800 audit(1788563801.172:2671): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 131.820062][ T43] audit: type=1800 audit(1788563801.202:2672): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 131.895250][ T43] audit: type=1800 audit(1788563801.272:2673): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 131.936001][ T43] audit: type=1400 audit(1788563801.312:2674): avc: denied { connect } for pid=10188 comm="syz.4.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 131.979464][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.998555][ T43] audit: type=1800 audit(1788563801.372:2675): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 132.100977][ T43] audit: type=1800 audit(1788563801.482:2676): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16656 res=0 errno=0 [ 132.470900][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.637984][T10214] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 132.660034][T10214] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 132.830918][T10229] FAULT_INJECTION: forcing a failure. [ 132.830918][T10229] name failslab, interval 1, probability 0, space 0, times 0 [ 132.830960][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.7.1722 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.830988][T10229] Tainted: [L]=SOFTLOCKUP [ 132.830993][T10229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.831000][T10229] Call Trace: [ 132.831005][T10229] [ 132.831010][T10229] dump_stack_lvl+0x100/0x190 [ 132.831030][T10229] should_fail_ex.cold+0x5/0xa [ 132.831047][T10229] should_failslab+0xc2/0x120 [ 132.831063][T10229] kmem_cache_alloc_noprof+0x92/0x6a0 [ 132.831075][T10229] ? d_instantiate+0x8a/0xb0 [ 132.831090][T10229] ? alloc_empty_file+0x5b/0x1c0 [ 132.831107][T10229] alloc_empty_file+0x5b/0x1c0 [ 132.831125][T10229] alloc_file_pseudo+0x183/0x290 [ 132.831161][T10229] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 132.831178][T10229] ? mas_preallocate+0x528/0xee0 [ 132.831196][T10229] __shmem_file_setup+0x205/0x460 [ 132.831211][T10229] ? __pfx___shmem_file_setup+0x10/0x10 [ 132.831227][T10229] ? vm_area_alloc+0x1f/0x160 [ 132.831242][T10229] shmem_zero_setup+0x96/0x1b0 [ 132.831259][T10229] __mmap_region+0x2692/0x32c0 [ 132.831278][T10229] ? __pfx___mmap_region+0x10/0x10 [ 132.831296][T10229] ? __lock_acquire+0x4c5/0x1ec0 [ 132.831316][T10229] ? do_raw_spin_lock+0x128/0x260 [ 132.831332][T10229] ? lock_acquire+0x1d1/0x380 [ 132.831342][T10229] ? clockevents_program_event+0x1bf/0x820 [ 132.831358][T10229] ? find_held_lock+0x2b/0x80 [ 132.831372][T10229] ? clockevents_program_event+0x1bf/0x820 [ 132.831400][T10229] ? find_held_lock+0x2b/0x80 [ 132.831414][T10229] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 132.831431][T10229] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 132.831471][T10229] mmap_region+0x3db/0x6d0 [ 132.831488][T10229] ? __pfx_mmap_region+0x10/0x10 [ 132.831505][T10229] ? shmem_get_unmapped_area+0x141/0x960 [ 132.831519][T10229] ? selinux_mmap_addr+0x2b/0x110 [ 132.831534][T10229] ? bpf_lsm_mmap_addr+0x9/0x30 [ 132.831548][T10229] ? security_mmap_addr+0x71/0x1e0 [ 132.831559][T10229] ? __get_unmapped_area+0x255/0x3e0 [ 132.831573][T10229] do_mmap+0x12c7/0x1c30 [ 132.831588][T10229] ? lock_acquire+0x1d1/0x380 [ 132.831599][T10229] ? __pfx_do_mmap+0x10/0x10 [ 132.831612][T10229] ? selinux_mmap_file+0x154/0x1c0 [ 132.831627][T10229] ? __pfx_down_write_killable+0x10/0x10 [ 132.831645][T10229] vm_mmap_pgoff+0x28d/0x470 [ 132.831659][T10229] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 132.831673][T10229] ? __pfx_do_futex+0x10/0x10 [ 132.831689][T10229] ksys_mmap_pgoff+0xe4/0x610 [ 132.831702][T10229] ? __x64_sys_futex+0x358/0x4d0 [ 132.831716][T10229] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 132.831728][T10229] ? xfd_validate_state+0x129/0x190 [ 132.831742][T10229] __x64_sys_mmap+0x125/0x190 [ 132.831756][T10229] do_syscall_64+0x123/0x790 [ 132.831771][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.831783][T10229] RIP: 0033:0x7fa39039e159 [ 132.831798][T10229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.831809][T10229] RSP: 002b:00007fa39131f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 132.831822][T10229] RAX: ffffffffffffffda RBX: 00007fa390625fa0 RCX: 00007fa39039e159 [ 132.831829][T10229] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 00007ffff7ffe000 [ 132.831836][T10229] RBP: 00007fa390435024 R08: ffffffffffffffff R09: 0000000000000000 [ 132.831844][T10229] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 132.831851][T10229] R13: 00007fa390626038 R14: 00007fa390625fa0 R15: 00007ffc6e4d79d8 [ 132.831867][T10229] [ 133.001118][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.001241][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.001279][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.020525][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.022491][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.028583][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.028705][ T851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.089277][T10243] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 133.089344][T10243] SELinux: failed to load policy [ 133.606549][T10287] input: syz0 as /devices/virtual/input/input24 [ 133.734740][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 133.839510][T10306] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 133.839544][T10306] binder: 10304:10306 ioctl 4018620d 200000000080 returned -1 [ 134.115102][T10324] loop8: detected capacity change from 0 to 7 [ 134.120129][T10324] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 134.123021][T10324] loop8: partition table partially beyond EOD, truncated [ 134.128282][T10324] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 134.136271][T10324] loop8: p2 start 121280928 is beyond EOD, truncated [ 134.283635][ T9203] udevd[9203]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 134.318359][T10341] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 134.759101][ T25] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 134.766393][T10374] [ 134.767172][T10374] ====================================================== [ 134.769265][T10374] WARNING: possible circular locking dependency detected [ 134.771464][T10374] syzkaller #0 Tainted: G L [ 134.773415][T10374] ------------------------------------------------------ [ 134.775589][T10374] syz.0.1789/10374 is trying to acquire lock: [ 134.777481][T10374] ffff88802c746460 (sb_writers#6){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 134.780210][T10374] [ 134.780210][T10374] but task is already holding lock: [ 134.782509][T10374] ffff88802e519120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 134.785378][T10374] [ 134.785378][T10374] which lock already depends on the new lock. [ 134.785378][T10374] [ 134.788579][T10374] [ 134.788579][T10374] the existing dependency chain (in reverse order) is: [ 134.791378][T10374] [ 134.791378][T10374] -> #3 (&common->filesem){++++}-{4:4}: [ 134.793775][T10374] lock_acquire+0x1d1/0x380 [ 134.795372][T10374] down_read+0x99/0x4c0 [ 134.796858][T10374] fsg_show_file+0x20/0x180 [ 134.798443][T10374] configfs_read_iter+0x426/0x6f0 [ 134.800177][T10374] __kernel_read+0x397/0xad0 [ 134.801796][T10374] integrity_kernel_read+0x7e/0xb0 [ 134.803554][T10374] ima_calc_file_hash_tfm+0x25e/0x350 [ 134.805400][T10374] ima_calc_file_hash+0x1e3/0x380 [ 134.807095][T10374] ima_collect_measurement+0x94f/0xb30 [ 134.808936][T10374] process_measurement+0xdfe/0x2350 [ 134.810773][T10374] ima_file_check+0xc3/0x110 [ 134.812382][T10374] security_file_post_open+0xc4/0x210 [ 134.814213][T10374] path_openat+0x5cd/0x2440 [ 134.815783][T10374] do_file_open+0x20e/0x430 [ 134.817346][T10374] do_sys_openat2+0x10f/0x1e0 [ 134.818968][T10374] __x64_sys_openat+0x12d/0x210 [ 134.820650][T10374] do_syscall_64+0x123/0x790 [ 134.822254][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.824235][T10374] [ 134.824235][T10374] -> #2 (&p->frag_sem){++++}-{4:4}: [ 134.826521][T10374] lock_acquire+0x1d1/0x380 [ 134.828092][T10374] down_read+0x99/0x4c0 [ 134.829563][T10374] __configfs_open_file+0xe8/0x9c0 [ 134.831338][T10374] do_dentry_open+0x6ab/0x14d0 [ 134.832981][T10374] vfs_open+0x82/0x3f0 [ 134.834423][T10374] dentry_open+0x71/0xd0 [ 134.835921][T10374] ima_calc_file_hash+0xe1/0x380 [ 134.837616][T10374] ima_collect_measurement+0x94f/0xb30 [ 134.839462][T10374] process_measurement+0xdfe/0x2350 [ 134.841259][T10374] ima_file_check+0xc3/0x110 [ 134.842855][T10374] security_file_post_open+0xc4/0x210 [ 134.844697][T10374] path_openat+0x5cd/0x2440 [ 134.846260][T10374] do_file_open+0x20e/0x430 [ 134.847827][T10374] do_sys_openat2+0x10f/0x1e0 [ 134.849420][T10374] __x64_sys_openat+0x12d/0x210 [ 134.851095][T10374] do_syscall_64+0x123/0x790 [ 134.852683][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.854642][T10374] [ 134.854642][T10374] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 134.857290][T10374] lock_acquire+0x1d1/0x380 [ 134.858856][T10374] __mutex_lock+0x1a4/0x1bd0 [ 134.860445][T10374] process_measurement+0x5ab/0x2350 [ 134.862212][T10374] ima_file_check+0xc3/0x110 [ 134.863810][T10374] security_file_post_open+0xc4/0x210 [ 134.865632][T10374] path_openat+0x5cd/0x2440 [ 134.867206][T10374] do_file_open+0x20e/0x430 [ 134.868759][T10374] do_sys_openat2+0x10f/0x1e0 [ 134.870368][T10374] __x64_sys_openat+0x12d/0x210 [ 134.872047][T10374] do_syscall_64+0x123/0x790 [ 134.873636][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.875613][T10374] [ 134.875613][T10374] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 134.877900][T10374] check_prev_add+0xeb/0xe60 [ 134.879491][T10374] __lock_acquire+0x1492/0x1ec0 [ 134.881116][T10374] lock_acquire+0x1d1/0x380 [ 134.882640][T10374] mnt_want_write+0x6f/0x420 [ 134.884189][T10374] lookup_open+0x150/0x1990 [ 134.885686][T10374] path_openat+0xa2c/0x2440 [ 134.887250][T10374] do_file_open+0x20e/0x430 [ 134.888847][T10374] file_open_name+0x1c3/0x3e0 [ 134.890489][T10374] filp_open+0x2e/0x50 [ 134.892000][T10374] fsg_lun_open+0x6b/0x7b0 [ 134.893561][T10374] fsg_store_file+0x1e7/0x450 [ 134.895208][T10374] configfs_write_iter+0x302/0x4e0 [ 134.896977][T10374] vfs_write+0x6af/0x1050 [ 134.898510][T10374] ksys_write+0x12a/0x250 [ 134.900173][T10374] do_syscall_64+0x123/0x790 [ 134.901814][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.903823][T10374] [ 134.903823][T10374] other info that might help us debug this: [ 134.903823][T10374] [ 134.906955][T10374] Chain exists of: [ 134.906955][T10374] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 134.906955][T10374] [ 134.910832][T10374] Possible unsafe locking scenario: [ 134.910832][T10374] [ 134.913167][T10374] CPU0 CPU1 [ 134.914829][T10374] ---- ---- [ 134.916486][T10374] lock(&common->filesem); [ 134.917937][T10374] lock(&p->frag_sem); [ 134.920020][T10374] lock(&common->filesem); [ 134.922225][T10374] rlock(sb_writers#6); [ 134.923626][T10374] [ 134.923626][T10374] *** DEADLOCK *** [ 134.923626][T10374] [ 134.926197][T10374] locks held by syz.0.1789/10374: 5, last CPU#0: [ 134.928255][T10374] #0: ffff88802f23b7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 134.931050][T10374] #1: ffff888023a28460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 134.933818][T10374] #2: ffff888025fee080 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 134.936754][T10374] #3: ffff88803d4f4c70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 134.939577][T10374] #4: ffff88802e519120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 134.942534][T10374] [ 134.942534][T10374] stack backtrace: [ 134.944335][T10374] CPU: 0 UID: 0 PID: 10374 Comm: syz.0.1789 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.947668][T10374] Tainted: [L]=SOFTLOCKUP [ 134.949014][T10374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.952154][T10374] Call Trace: [ 134.953210][T10374] [ 134.954151][T10374] dump_stack_lvl+0x100/0x190 [ 134.955637][T10374] print_circular_bug.cold+0x178/0x1be [ 134.957359][T10374] check_noncircular+0x146/0x160 [ 134.958921][T10374] check_prev_add+0xeb/0xe60 [ 134.960362][T10374] __lock_acquire+0x1492/0x1ec0 [ 134.961919][T10374] lock_acquire+0x1d1/0x380 [ 134.963350][T10374] ? lookup_open+0x150/0x1990 [ 134.964830][T10374] ? __pfx___might_resched+0x10/0x10 [ 134.966476][T10374] ? find_held_lock+0x2b/0x80 [ 134.967966][T10374] mnt_want_write+0x6f/0x420 [ 134.969463][T10374] ? lookup_open+0x150/0x1990 [ 134.970995][T10374] lookup_open+0x150/0x1990 [ 134.972460][T10374] path_openat+0xa2c/0x2440 [ 134.973898][T10374] ? __pfx_path_openat+0x10/0x10 [ 134.975472][T10374] ? kasan_save_stack+0x3f/0x50 [ 134.977006][T10374] ? kasan_save_stack+0x30/0x50 [ 134.978539][T10374] ? kasan_save_track+0x14/0x30 [ 134.980078][T10374] ? __kasan_slab_alloc+0x89/0x90 [ 134.981683][T10374] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 134.983440][T10374] ? do_getname_kernel+0x5d/0x250 [ 134.985014][T10374] ? filp_open+0x1d/0x50 [ 134.986349][T10374] do_file_open+0x20e/0x430 [ 134.987794][T10374] ? __pfx_do_file_open+0x10/0x10 [ 134.989385][T10374] file_open_name+0x1c3/0x3e0 [ 134.990890][T10374] ? __pfx_file_open_name+0x10/0x10 [ 134.992542][T10374] ? do_getname_kernel+0x5d/0x250 [ 134.994174][T10374] ? __asan_memcpy+0x3c/0x60 [ 134.995655][T10374] ? do_getname_kernel+0x1be/0x250 [ 134.997267][T10374] filp_open+0x2e/0x50 [ 134.998551][T10374] fsg_lun_open+0x6b/0x7b0 [ 134.999959][T10374] ? __pfx_down_read+0x10/0x10 [ 135.001471][T10374] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 135.003197][T10374] fsg_store_file+0x1e7/0x450 [ 135.004669][T10374] configfs_write_iter+0x302/0x4e0 [ 135.006246][T10374] vfs_write+0x6af/0x1050 [ 135.007590][T10374] ? __pfx_configfs_write_iter+0x10/0x10 [ 135.009321][T10374] ? __pfx_vfs_write+0x10/0x10 [ 135.010835][T10374] ? find_held_lock+0x2b/0x80 [ 135.012308][T10374] ksys_write+0x12a/0x250 [ 135.013635][T10374] ? __pfx_ksys_write+0x10/0x10 [ 135.015140][T10374] do_syscall_64+0x123/0x790 [ 135.016572][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.018394][T10374] RIP: 0033:0x7f71f299e159 [ 135.019831][T10374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.025930][T10374] RSP: 002b:00007f71f3925028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.028458][T10374] RAX: ffffffffffffffda RBX: 00007f71f2c25fa0 RCX: 00007f71f299e159 [ 135.030669][T10374] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 135.032996][T10374] RBP: 00007f71f2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 135.035466][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.038005][T10374] R13: 00007f71f2c26038 R14: 00007f71f2c25fa0 R15: 00007ffd7e4d0448 [ 135.040676][T10374] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.053754][T10374] mass_storage.usb0/lun.0: unable to open backing file: P [ 135.068479][T10377] overlayfs: maximum fs stacking depth exceeded [ 135.189113][ T10] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 135.411341][ T25] usb 9-1: device descriptor read/all, error -71 [ 135.435504][ T5808] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.473801][ T5808] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.521654][ T5808] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.571767][ T5808] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.630020][ T5808] bridge_slave_1: left allmulticast mode [ 135.630051][ T5808] bridge_slave_1: left promiscuous mode [ 135.630245][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.634270][ T5808] bridge_slave_0: left allmulticast mode [ 135.634282][ T5808] bridge_slave_0: left promiscuous mode [ 135.634348][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.685660][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.696124][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.699895][ T5808] bond0 (unregistering): Released all slaves [ 135.701050][ T5808] bond1 (unregistering): Released all slaves [ 135.801674][ T5446] 8021q: adding VLAN 0 to HW filter on device eth14 [ 135.815516][ T5808] hsr_slave_0: left promiscuous mode [ 135.817531][ T5808] hsr_slave_1: left promiscuous mode [ 135.817796][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.817807][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.818117][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.818125][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.825187][ T5808] veth1_macvtap: left promiscuous mode [ 135.825204][ T5808] veth0_macvtap: left promiscuous mode [ 135.825234][ T5808] veth1_vlan: left promiscuous mode [ 135.825260][ T5808] veth0_vlan: left promiscuous mode [ 135.910490][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 135.915201][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 135.959323][ T5446] 8021q: adding VLAN 0 to HW filter on device eth15 [ 136.074718][ T5446] 8021q: adding VLAN 0 to HW filter on device eth17 [ 136.216231][ T5808] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.244330][ T5808] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.248293][ T5446] 8021q: adding VLAN 0 to HW filter on device eth16 [ 136.283801][ T5808] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.308479][ T5808] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.339836][ T5808] bridge_slave_1: left allmulticast mode [ 136.339907][ T5808] bridge_slave_1: left promiscuous mode [ 136.339975][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.344230][ T5808] bridge_slave_0: left allmulticast mode [ 136.344243][ T5808] bridge_slave_0: left promiscuous mode [ 136.344312][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.383886][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.387507][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.392284][ T5808] bond0 (unregistering): Released all slaves [ 136.434219][ T43] kauditd_printk_skb: 138 callbacks suppressed [ 136.434278][ T43] audit: type=1400 audit(1788563806.814:2815): avc: denied { write } for pid=10410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.465416][ T43] audit: type=1400 audit(1788563806.844:2816): avc: denied { write } for pid=10413 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.489278][ T5446] 8021q: adding VLAN 0 to HW filter on device eth18 [ 136.528185][ T43] audit: type=1400 audit(1788563806.904:2817): avc: denied { write } for pid=10416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.557064][ T43] audit: type=1400 audit(1788563806.934:2818): avc: denied { write } for pid=10419 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.576569][ T5808] hsr_slave_0: left promiscuous mode [ 136.578502][ T5808] hsr_slave_1: left promiscuous mode [ 136.578822][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.578832][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.580807][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.580817][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.587610][ T5808] veth1_macvtap: left promiscuous mode [ 136.587627][ T5808] veth0_macvtap: left promiscuous mode [ 136.629554][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 136.632277][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 136.662877][ T5446] 8021q: adding VLAN 0 to HW filter on device eth19 [ 136.714024][ T43] audit: type=1400 audit(1788563807.094:2819): avc: denied { write } for pid=10422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.751282][ T43] audit: type=1400 audit(1788563807.134:2820): avc: denied { write } for pid=10425 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.777430][ T5446] 8021q: adding VLAN 0 to HW filter on device eth20 [ 136.854302][ T43] audit: type=1400 audit(1788563807.234:2821): avc: denied { write } for pid=10429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.888195][ T43] audit: type=1400 audit(1788563807.264:2822): avc: denied { write } for pid=10432 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.909194][ T5446] 8021q: adding VLAN 0 to HW filter on device eth21