last executing test programs: 4m0.138877884s ago: executing program 0 (id=4547): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x6a, 0x3, 0x4, {0x1, @vbi={0x10000, 0xfffff7f3, 0x9, 0x20385655, [0x0, 0x4], [0x1, 0x6], 0x1}}, 0x88}) 4m0.084128875s ago: executing program 0 (id=4550): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x3d, 0x4) 4m0.083720949s ago: executing program 0 (id=4552): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=@polexpire={0xcc, 0x1b, 0x111, 0x70bd2d, 0x25dfdbfc, {{{@in6=@private2, @in6=@private2, 0x4e21, 0x0, 0x4e23, 0x3ff, 0x2, 0x60, 0x120, 0x73, 0x0, 0xffffffffffffffff}, {0x80000001, 0xfff, 0x6, 0x4, 0x10000000000, 0x7fffffff, 0x8, 0x7}, {0x1, 0x4c67, 0x9, 0x449f}, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xc, 0x5d}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) 4m0.030721781s ago: executing program 0 (id=4555): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 4m0.030124122s ago: executing program 0 (id=4558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)) 3m59.977032119s ago: executing program 0 (id=4560): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x60841, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 3m43.98329245s ago: executing program 32 (id=4560): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x60841, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 1m53.02396883s ago: executing program 4 (id=10027): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x1, 0x2, {0x3, 0xbc}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) 1m53.019118846s ago: executing program 4 (id=10030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) 1m52.978292405s ago: executing program 4 (id=10034): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0xffffffffffffffff) 1m52.924183287s ago: executing program 4 (id=10037): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m52.913877609s ago: executing program 4 (id=10040): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x4000, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) 1m52.502321484s ago: executing program 4 (id=10066): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x38}}, 0x4048000) 1m52.465765789s ago: executing program 33 (id=10066): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x38}}, 0x4048000) 1m36.906807953s ago: executing program 3 (id=10667): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m36.823425764s ago: executing program 3 (id=10671): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 1m36.789114028s ago: executing program 3 (id=10674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0020000", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000000800068004000200840001801c000280080002000300000008000200fe0b000008000400000000802c0004001400010002004e22e000000200000000000000001400020002004e2464010101000000000000000038000400200001000a004e200000000600000000000000000000ffffe00000014d0000001400020002004e246401010000000000000000004c000480340007800800030049000000080002000600000008000400010000000800020000000000080002000100000008000200240f00001300010062726f6164636173742d6c696e6b"], 0x2d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1m36.725999623s ago: executing program 3 (id=10676): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) 1m36.725508653s ago: executing program 3 (id=10677): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 1m36.677241677s ago: executing program 3 (id=10681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x2f, 0x520ea3af}) 1m20.258063206s ago: executing program 34 (id=10681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x2, 0x0, 0x2f, 0x520ea3af}) 1.964434499s ago: executing program 6 (id=12956): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g2\x00', 0x1ff) rmdir(&(0x7f0000000600)='./config/usb_gadget/g2\x00') 1.818309414s ago: executing program 6 (id=12960): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x1, 0x4) write(r0, &(0x7f0000000200)='1', 0x1) 1.749017973s ago: executing program 6 (id=12963): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x4}}, 0x20) 1.680392096s ago: executing program 1 (id=12965): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) 1.634892452s ago: executing program 6 (id=12967): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xfca33000) 1.596715594s ago: executing program 1 (id=12968): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800f0001"], 0x4c}}, 0x0) 1.524270067s ago: executing program 1 (id=12970): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x0, 0x0) 1.484114079s ago: executing program 2 (id=12971): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 1.458971292s ago: executing program 1 (id=12973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x572, 0x0, 0x9c}]}) 1.371461444s ago: executing program 5 (id=12974): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x40, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.352753181s ago: executing program 2 (id=12975): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) read(r0, 0x0, 0x0) 1.30995511s ago: executing program 1 (id=12976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000600)={@fallback=r0, r0, 0x2f}, 0x20) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f00000008c0)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853e", 0x1a}, {&(0x7f0000000580)="7d15a3e1540283bc2f8873cb", 0xc}], 0x3}, 0x40000) 1.254488505s ago: executing program 5 (id=12977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000070, 0x0, 0x206}]}) 1.233837834s ago: executing program 2 (id=12978): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0) 1.140407314s ago: executing program 2 (id=12979): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10001}}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.07442624s ago: executing program 1 (id=12980): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0000:00:01.0', 0xc) 1.054973546s ago: executing program 5 (id=12981): pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) 997.703542ms ago: executing program 5 (id=12982): setresgid(0xffffffffffffffff, 0x0, 0xee01) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000400)) 944.425176ms ago: executing program 2 (id=12983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 909.312217ms ago: executing program 5 (id=12984): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) 802.542661ms ago: executing program 5 (id=12985): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x85, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000040000000040100"}) 541.263681ms ago: executing program 6 (id=12986): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 125.668408ms ago: executing program 6 (id=12987): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='1000', 0x4, 0x0) 0s ago: executing program 2 (id=12988): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) timer_create(0x0, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) kernel console output (not intermixed with test programs): lock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x488f instead [ 288.764339][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 288.767900][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 288.771196][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x730d instead [ 288.775378][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x488f instead [ 288.779306][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 288.782805][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 288.786241][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x730d instead [ 288.789803][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x488f instead [ 288.793134][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 288.796366][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 288.802057][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x730d instead [ 288.805440][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x488f instead [ 288.808699][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 288.812294][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 288.815548][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x730d instead [ 288.818777][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x488f instead [ 288.824514][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 288.828023][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 288.831523][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x730d instead [ 288.834838][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x488f instead [ 288.838041][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 288.840439][T30022] i2c i2c-1: new_device: Instantiated device isp1301 at 0x02 [ 288.841546][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 288.841564][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x730d instead [ 288.841574][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x488f instead [ 288.841600][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 288.841609][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 288.841619][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x730d instead [ 288.841629][T29971] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x488f instead [ 288.841649][T29971] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 288.841654][T29971] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 289.019411][T30057] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 289.060474][T30065] vlan2: entered allmulticast mode [ 289.062165][T30065] bridge_slave_0: entered allmulticast mode [ 289.165210][T30077] 9p: Unknown uid 00000000004294967295 [ 289.167211][T30067] syz.2.11353 (30067): drop_caches: 2 [ 289.573551][T30126] device-mapper: ioctl: name not supplied when creating device [ 289.577488][T30124] input: syz0 as /devices/virtual/input/input34 [ 289.883018][T30148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.886727][T30148] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 289.919749][T30148] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.922033][T30148] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 289.930634][T30148] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.933302][T30148] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 289.943119][T30148] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 289.955363][T30148] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.957496][T30148] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 289.961493][T30148] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 290.028273][T30160] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 290.030237][T30160] syzkaller1: linktype set to 776 [ 290.098119][T30166] i2c i2c-1: new_device: Can't parse I2C address [ 290.153658][T30174] netlink: 'syz.2.11403': attribute type 11 has an invalid length. [ 290.344091][T30196] block2mtd: error: cannot open device /dev/loop0 [ 290.386175][T30202] vhci_hcd vhci_hcd.0: failed to lookup sock [ 290.917519][T30255] netlink: 'syz.6.11441': attribute type 1 has an invalid length. [ 291.045410][T30267] Context (ID=0x1) not attached to queue pair (handle=0x2:0x80009) [ 291.340259][ T850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 291.349198][ T850] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 291.595866][T30332] __nla_validate_parse: 11 callbacks suppressed [ 291.595878][T30332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11476'. [ 291.602430][T30332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11476'. [ 291.605326][T30332] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 291.684928][T30336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11478'. [ 291.688606][T30336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11478'. [ 292.038087][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 292.111022][ T5808] Bluetooth: hci4: command 0x0c1a tx timeout [ 292.111301][ T5797] Bluetooth: hci0: command 0x0c1a tx timeout [ 292.111603][ T5802] Bluetooth: hci3: command 0x0405 tx timeout [ 292.271486][T12443] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 292.294636][T30377] bond0: option arp_interval: invalid value (\A/U#]̮Ӵ&Z;-4YwԏQW8@;F$YLt1t?6teU-=FzvǵӆºU=qVܗk7N3ƟK[(Zgt';wբm\n #|[8},) [ 292.314063][T30377] bond0: option arp_interval: allowed values 0 - 2147483647 [ 292.442863][T12443] usb 7-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 292.446655][T12443] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.451017][T12443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 292.453895][T12443] usb 7-1: Product: syz [ 292.455322][T12443] usb 7-1: Manufacturer: syz [ 292.460084][T12443] navman 7-1:1.0: navman converter detected [ 292.481026][T12443] usb 7-1: navman converter now attached to ttyUSB0 [ 292.586829][T30393] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 292.644170][T30403] loop4: detected capacity change from 0 to 7 [ 292.685271][T12443] usb 7-1: USB disconnect, device number 12 [ 292.693256][T12443] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 292.696340][T12443] navman 7-1:1.0: device disconnected [ 292.730015][T30412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11515'. [ 292.737912][T30412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11515'. [ 292.841232][T30416] netlink: 27 bytes leftover after parsing attributes in process `syz.5.11517'. [ 293.014576][T30434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11527'. [ 293.023450][T30434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11527'. [ 293.172332][T30447] ima: policy update completed [ 293.263779][T30459] Console: switching to colour dummy device 80x25 [ 293.341857][T30465] net_ratelimit: 3258 callbacks suppressed [ 293.341875][T30465] openvswitch: netlink: Missing key (keys=40, expected=100) [ 293.373746][ T43] kauditd_printk_skb: 304 callbacks suppressed [ 293.373757][ T43] audit: type=1400 audit(2000000273.944:70513): avc: denied { read } for pid=30467 comm="syz.5.11542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.403751][ T43] audit: type=1400 audit(2000000273.963:70514): avc: denied { mount } for pid=30470 comm="syz.1.11544" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 293.423861][ T43] audit: type=1400 audit(2000000273.981:70515): avc: denied { unmount } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 293.435737][ T43] audit: type=1400 audit(2000000273.991:70516): avc: denied { write } for pid=30467 comm="syz.5.11542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.441504][T30473] blkio.reset_stats is deprecated [ 293.445540][ T43] audit: type=1400 audit(2000000274.000:70517): avc: denied { create } for pid=30477 comm="syz.2.11554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 293.454563][ T43] audit: type=1400 audit(2000000274.000:70518): avc: denied { write } for pid=30477 comm="syz.2.11554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 293.511290][ T43] audit: type=1400 audit(2000000274.075:70519): avc: denied { read } for pid=30483 comm="syz.2.11550" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 293.518274][ T43] audit: type=1400 audit(2000000274.075:70520): avc: denied { open } for pid=30483 comm="syz.2.11550" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 293.526759][ T43] audit: type=1400 audit(2000000274.075:70521): avc: denied { ioctl } for pid=30483 comm="syz.2.11550" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 293.551988][ T43] audit: type=1400 audit(2000000274.103:70522): avc: denied { module_request } for pid=30488 comm="syz.1.11551" kmod="netdev-macvtap0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 293.591883][T30496] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 293.667570][T30504] IPVS: Scheduler module ip_vs_sip not found [ 293.811351][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11567'. [ 294.248218][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 294.333917][ T5797] Bluetooth: hci3: command 0x0405 tx timeout [ 294.334149][ T5808] Bluetooth: hci0: command 0x0c1a tx timeout [ 294.344629][ T5808] Bluetooth: hci4: command 0x0c1a tx timeout [ 294.636785][T30558] netlink: 'syz.6.11585': attribute type 1 has an invalid length. [ 294.649508][T30560] Invalid option length (480) for dns_resolver key [ 295.063924][T30604] nvme_fcloop: unknown parameter or missing value 'wwn' [ 295.506434][ T29] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 295.509226][ T29] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 295.511663][ T29] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 295.514103][ T29] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 295.516502][ T29] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 295.518907][ T29] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 295.521520][ T29] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 295.524033][ T29] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 295.526452][ T29] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 295.533281][ T29] hid-generic 000A:FFFFFF1D:0002.0005: hidraw1: HID v0.04 Device [syz0] on syz1 [ 295.574643][T30641] fido_id[30641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 295.936958][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 295.951350][T30674] kvm: kvm [30673]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 P- H @[ 296.099152][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 296.103187][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 296.106512][ T34] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 296.125722][ T34] usb 7-1: string descriptor 0 read error: -22 [ 296.129702][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.143761][ T34] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 296.152555][ T34] dw2102: su3000_power_ctrl: 1, initialized 0 [ 296.154552][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 296.162688][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.173491][ T34] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 296.179460][ T34] usb 7-1: media controller created [ 296.181221][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 296.183210][ T34] dw2102: i2c transfer failed. [ 296.184722][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 296.186555][ T34] dw2102: i2c transfer failed. [ 296.188062][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 296.189981][ T34] dw2102: i2c transfer failed. [ 296.191532][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 296.191699][T30697] erspan0: entered promiscuous mode [ 296.193661][ T34] dw2102: i2c transfer failed. [ 296.195074][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 296.202759][ T34] dw2102: i2c transfer failed. [ 296.206985][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 296.208747][ T34] dw2102: i2c transfer failed. [ 296.213274][ T34] dvb-usb: MAC address: 02:02:02:02:02:02 [ 296.222025][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.235203][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 296.237430][ T34] dw2102: command 0x0e transfer failed. [ 296.239484][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 296.241259][ T34] dw2102: command 0x0e transfer failed. [ 296.289930][T30706] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 296.416257][T30720] overlayfs: workdir and upperdir must reside under the same mount [ 296.556808][ T5797] Bluetooth: hci0: command 0x0c1a tx timeout [ 296.567400][ T5797] Bluetooth: hci4: command 0x0c1a tx timeout [ 296.580386][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 296.582925][ T34] dw2102: command 0x0e transfer failed. [ 296.584873][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 296.587148][ T34] dw2102: command 0x0e transfer failed. [ 296.592166][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 296.594833][ T34] dw2102: command 0x51 transfer failed. [ 296.599783][T30658] dvb-usb: bulk message failed: -22 (6/0) [ 296.602214][T30658] dw2102: i2c transfer failed. [ 296.622981][ T34] DVB: Unable to find symbol ds3000_attach() [ 296.625509][ T34] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 296.674361][ T34] rc_core: IR keymap rc-su3000 not found [ 296.676238][ T34] Registered IR keymap rc-empty [ 296.678475][ T34] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 296.684502][ T34] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input35 [ 296.692673][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 296.695625][ T34] dw2102: su3000_power_ctrl: 0, initialized 1 [ 296.697604][ T34] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 296.702229][ T34] usb 7-1: USB disconnect, device number 13 [ 296.801784][T30751] zram0: detected capacity change from 0 to 8 [ 296.802475][ T34] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 297.501230][T30772] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 297.505049][T30770] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 297.541821][T30770] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 297.558027][T30770] pci_bus 0000:01: busn_res: [bus 01] is released [ 297.727774][T30780] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 298.050444][T30815] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 298.056049][T30815] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 298.273402][T30847] netlink: 'syz.1.11720': attribute type 1 has an invalid length. [ 298.276144][T30847] __nla_validate_parse: 7 callbacks suppressed [ 298.276152][T30847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11720'. [ 298.413581][T30864] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 298.437783][ T5797] Bluetooth: hci2: command 0x1003 tx timeout [ 298.442323][ T5808] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 298.553935][T30873] ima: policy update failed [ 298.613461][T30884] bond5: ARP target 9.0.0.0 is already present [ 298.616038][T30884] bond5: option arp_ip_target: invalid value (9) [ 298.620506][T30884] bond5 (unregistering): Released all slaves [ 298.682989][T12464] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 298.737534][ T43] kauditd_printk_skb: 243 callbacks suppressed [ 298.737546][ T43] audit: type=1400 audit(2000000278.960:70766): avc: denied { create } for pid=30889 comm="syz.1.11739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.740228][T30890] dummy0: entered allmulticast mode [ 298.746244][ T43] audit: type=1400 audit(2000000278.960:70767): avc: denied { setopt } for pid=30889 comm="syz.1.11739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.754172][T30889] dummy0: left allmulticast mode [ 298.822715][ T43] audit: type=1400 audit(2000000279.044:70768): avc: denied { read } for pid=30891 comm="syz.2.11740" dev="nsfs" ino=4026532961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 298.830708][ T43] audit: type=1400 audit(2000000279.044:70769): avc: denied { open } for pid=30891 comm="syz.2.11740" path="net:[4026532961]" dev="nsfs" ino=4026532961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 298.839519][ T43] audit: type=1400 audit(2000000279.044:70770): avc: denied { create } for pid=30891 comm="syz.2.11740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.842928][T30895] CUSE: unknown device info "" [ 298.847642][ T43] audit: type=1400 audit(2000000279.044:70771): avc: denied { setopt } for pid=30891 comm="syz.2.11740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.849475][T30895] CUSE: unknown device info "" [ 298.849489][T30895] CUSE: unknown device info "" [ 298.849497][T30895] CUSE: unknown device info "" [ 298.849505][T30895] CUSE: DEVNAME unspecified [ 298.854616][T12464] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 298.869994][T12464] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.872824][T12464] usb 10-1: Product: syz [ 298.874253][T12464] usb 10-1: Manufacturer: syz [ 298.876031][T12464] usb 10-1: SerialNumber: syz [ 298.902408][ T43] audit: type=1400 audit(2000000279.110:70772): avc: denied { write } for pid=30897 comm="syz.6.11743" name="001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 298.918466][ T43] audit: type=1400 audit(2000000279.128:70773): avc: denied { mounton } for pid=30896 comm="syz.1.11742" path="/2941/sys" dev="tmpfs" ino=14847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 298.931794][ T43] audit: type=1400 audit(2000000279.128:70774): avc: denied { mount } for pid=30896 comm="syz.1.11742" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 298.938623][ T43] audit: type=1400 audit(2000000279.128:70775): avc: denied { firmware_load } for pid=12463 comm="kworker/2:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 298.943207][T12463] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 299.021352][T30909] loop9: detected capacity change from 0 to 524287999 [ 299.032289][T30909] buffer_io_error: 27 callbacks suppressed [ 299.032301][T30909] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.037992][T30909] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.040594][T30909] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.042965][T30909] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.047676][T30909] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.050953][T29618] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.053923][T30909] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.056551][T30909] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.059096][T30909] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.061533][T30909] ldm_validate_partition_table(): Disk read failed. [ 299.063643][T30909] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.066166][T30909] Dev loop9: unable to read RDB block 0 [ 299.068040][T30909] loop9: unable to read partition table [ 299.069833][T30909] loop_reread_partitions: partition scan of loop9 (3 x) failed (rc=-5) [ 299.217291][ T34] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 299.334515][T30929] loop5: detected capacity change from 0 to 7 [ 299.342773][T30929] Dev loop5: unable to read RDB block 7 [ 299.344615][T30929] loop5: AHDI p1 [ 299.345905][T30929] loop5: partition table partially beyond EOD, truncated [ 299.377490][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 299.380724][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.385997][ T34] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 299.388695][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 299.391952][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 299.395068][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 299.398554][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 299.402323][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.406558][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.448478][T30935] sd 0:0:0:0: PR command failed: 1026 [ 299.450250][T30935] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 299.452585][T30935] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 299.557023][T30946] macsec2: entered allmulticast mode [ 299.558806][T30946] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 299.563066][T30946] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 299.567179][T30946] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 299.637776][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 299.639478][ T34] usbtmc 6-1:16.0: can't read capabilities [ 299.726152][T30954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11768'. [ 299.775286][T30947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.782017][T30947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.851694][T30956] block device autoloading is deprecated and will be removed. [ 299.856029][T30956] md: loop0 has zero or unknown size, marking faulty! [ 299.863152][ T34] usb 6-1: USB disconnect, device number 19 [ 299.919558][T30964] : renamed from vlan0 (while UP) [ 300.072804][T12463] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 300.075407][T12463] ath9k_htc: Failed to initialize the device [ 300.115186][T12463] usb 10-1: ath9k_htc: USB layer deinitialized [ 300.170416][T12464] usb 10-1: USB disconnect, device number 2 [ 301.215722][T31032] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11805'. [ 301.430678][ T29] logitech-hidpp-device 0005:046D:B012.0006: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 301.485926][T31050] fido_id[31050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 301.566412][T31049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.571304][T31049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.575679][T31049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 301.590646][T31056] tipc: Started in network mode [ 301.592349][T31056] tipc: Node identity ac14140f, cluster identity 4711 [ 301.595132][T31056] tipc: Enabling of bearer rejected, failed to enable media [ 301.598784][T31056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11816'. [ 301.717538][T31049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.721102][T31049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.724563][T31049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 301.746826][T31068] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 301.805054][T31074] size and base must be multiples of 4 kiB [ 301.806953][T31074] CPU: 1 UID: 0 PID: 31074 Comm: syz.5.11824 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.806970][T31074] Tainted: [L]=SOFTLOCKUP [ 301.806974][T31074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.806981][T31074] Call Trace: [ 301.806985][T31074] [ 301.806990][T31074] dump_stack_lvl+0x100/0x190 [ 301.807014][T31074] mtrr_del.cold+0x72/0x85 [ 301.807029][T31074] mtrr_ioctl+0xbc8/0xcf0 [ 301.807053][T31074] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 301.807074][T31074] ? __pfx_mtrr_ioctl+0x10/0x10 [ 301.807089][T31074] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 301.807115][T31074] ? __pfx_mtrr_ioctl+0x10/0x10 [ 301.807131][T31074] proc_reg_unlocked_ioctl+0x229/0x320 [ 301.807146][T31074] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 301.807159][T31074] __x64_sys_ioctl+0x18e/0x210 [ 301.807178][T31074] do_syscall_64+0x123/0x790 [ 301.807192][T31074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.807204][T31074] RIP: 0033:0x7fb87bf9e0d9 [ 301.807213][T31074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.807223][T31074] RSP: 002b:00007fb87ceb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.807234][T31074] RAX: ffffffffffffffda RBX: 00007fb87c225fa0 RCX: 00007fb87bf9e0d9 [ 301.807240][T31074] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 301.807247][T31074] RBP: 00007fb87c035024 R08: 0000000000000000 R09: 0000000000000000 [ 301.807252][T31074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.807259][T31074] R13: 00007fb87c226038 R14: 00007fb87c225fa0 R15: 00007ffc89d9dd38 [ 301.807275][T31074] [ 301.812635][T31076] tipc: Enabled bearer , priority 0 [ 301.958977][T31049] bond0: (slave netdevsim1): Releasing backup interface [ 302.000546][T31049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.003730][T31049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.007458][T31049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.137232][T31049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.140401][T31049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.147773][T31049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.580298][T31120] smpboot: CPU 1 is now offline [ 302.658496][T12464] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 302.782589][T31120] smpboot: CPU 3 is now offline [ 302.830787][T12464] usb 11-1: Using ep0 maxpacket: 8 [ 302.840615][T12464] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 302.848259][T12464] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.856951][T12464] pvrusb2: Hardware description: Terratec Grabster AV400 [ 302.864072][T12464] pvrusb2: ********** [ 302.865432][T12464] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 302.869502][T31127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.874653][T12464] pvrusb2: Important functionality might not be entirely working. [ 302.877152][T12464] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 302.880687][T12464] pvrusb2: ********** [ 303.000141][ T850] tipc: Node number set to 2886997007 [ 303.083467][ T2510] pvrusb2: Invalid write control endpoint [ 303.107181][ T5777] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 303.191588][ T2510] pvrusb2: Invalid write control endpoint [ 303.194977][ T2510] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 303.199205][ T2510] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 303.201689][ T2510] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 303.204930][ T2510] pvrusb2: Device being rendered inoperable [ 303.211333][ T2510] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 303.214057][ T2510] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 303.231596][ T2510] pvrusb2: Attached sub-driver cx25840 [ 303.234174][ T2510] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 303.237902][ T2510] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 303.271238][ T5777] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 303.275442][ T5777] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.280950][ T5777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.283406][ T5777] usb 6-1: Product: syz [ 303.284675][ T5777] usb 6-1: Manufacturer: syz [ 303.286453][ T5777] usb 6-1: SerialNumber: syz [ 303.291247][T31119] pvrusb2: Killing an I2C write to 0 that is too large (desired=63 limit=61) [ 303.296955][ T5777] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 303.298803][T12463] usb 11-1: USB disconnect, device number 2 [ 303.299866][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 87 [ 303.304407][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 303.310193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.317355][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 303.322888][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 303.331123][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 303.337480][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 303.339990][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 85 [ 303.346514][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 303.361920][ T5777] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 303.368073][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 303.370741][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 303.374539][T12464] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 303.374940][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 303.382352][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 303.389023][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 86 [ 303.391481][ T5777] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 303.400396][ T5777] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 303.473456][T31163] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 303.535042][T12464] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.540662][T12464] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.546257][T12464] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.550585][T12464] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.554799][T12464] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.559112][T12464] usb 10-1: config 0 descriptor?? [ 303.625356][ T5777] usb 6-1: USB disconnect, device number 20 [ 303.641934][ T5777] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 303.655239][ T5777] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 303.658607][ T5777] keyspan 6-1:1.0: device disconnected [ 304.027123][T12464] hid_parser_main: 99 callbacks suppressed [ 304.027138][T12464] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.031410][T12464] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.038168][T12464] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.042347][T12464] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.045434][T12464] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.048678][T12464] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.051011][T12464] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.056391][T12464] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.059540][T12464] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.061972][T12464] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 304.080502][T12464] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 304.180169][ T43] kauditd_printk_skb: 201 callbacks suppressed [ 304.180183][ T43] audit: type=1400 audit(2000000284.051:70977): avc: denied { unmount } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 304.199670][ T43] audit: type=1400 audit(2000000284.060:70978): avc: denied { recv } for pid=5700 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48486 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 304.215874][ T43] audit: type=1400 audit(2000000284.079:70979): avc: denied { create } for pid=31180 comm="syz.1.11871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.227421][ T43] audit: type=1400 audit(2000000284.097:70980): avc: denied { ioctl } for pid=31180 comm="syz.1.11871" path="socket:[101359]" dev="sockfs" ino=101359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.265943][ T43] audit: type=1400 audit(2000000284.135:70981): avc: denied { create } for pid=31182 comm="syz.6.11872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.282588][ T43] audit: type=1400 audit(2000000284.144:70982): avc: denied { write } for pid=31182 comm="syz.6.11872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.294697][ T43] audit: type=1400 audit(2000000284.144:70983): avc: denied { read } for pid=31182 comm="syz.6.11872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.302221][ T43] audit: type=1400 audit(2000000284.144:70984): avc: denied { ioctl } for pid=31182 comm="syz.6.11872" path="socket:[102591]" dev="sockfs" ino=102591 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.321255][ T43] audit: type=1400 audit(2000000284.163:70985): avc: denied { read } for pid=31184 comm="syz.1.11873" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.332470][T12464] usb 10-1: USB disconnect, device number 3 [ 304.341724][ T43] audit: type=1400 audit(2000000284.163:70986): avc: denied { open } for pid=31184 comm="syz.1.11873" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.374760][T31187] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 304.420068][T31189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11875'. [ 304.423382][T31189] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11875'. [ 304.512029][T31193] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 304.610679][T31203] netlink: 'syz.2.11882': attribute type 29 has an invalid length. [ 304.614004][T31203] netlink: 'syz.2.11882': attribute type 29 has an invalid length. [ 304.727731][T31211] i2c i2c-0: delete_device: Can't find device in list [ 304.860493][T31221] batadv_slave_1: entered promiscuous mode [ 304.863470][T31219] batadv_slave_1: left promiscuous mode [ 304.949273][T31227] Bluetooth: hci1: expected 121 bytes, got 2 bytes [ 305.144117][T31243] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.11901'. [ 305.150226][T31246] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 305.152798][T31243] openvswitch: netlink: Message has 512 unknown bytes. [ 305.156783][T31247] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11902'. [ 305.230872][T31251] MPI: mpi too large (16392 bits) [ 305.371754][T31263] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 306.575458][T31334] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 306.578886][T31334] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 306.774718][T31342] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd [ 306.918753][T31350] usb 1-1: USB disconnect, device number 2 [ 307.065695][ T94] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 307.378361][T31382] veth0: entered promiscuous mode [ 307.380332][T31382] veth0: left promiscuous mode [ 307.393739][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 307.407300][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 307.412834][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x730d instead [ 307.418943][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x488f instead [ 307.422275][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 307.426171][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 307.436436][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 307.443842][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 307.463520][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 307.469367][T31387] IPVS: Error during creation of socket; terminating [ 307.513171][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 307.527603][T31383] jffs2: Further such events for this erase block will not be printed [ 307.533394][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 307.536566][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 307.539801][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x730d instead [ 307.543336][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x488f instead [ 307.548104][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 307.551294][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 307.554995][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 307.559090][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 307.562367][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 307.582236][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 307.590341][T31383] jffs2: Further such events for this erase block will not be printed [ 307.608219][T31400] batadv_slave_0: entered promiscuous mode [ 307.616870][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 307.627489][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 307.631045][T31399] batadv_slave_0: left promiscuous mode [ 307.642166][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x730d instead [ 307.650570][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x488f instead [ 307.654003][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 307.662380][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 307.680033][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x730d instead [ 307.685431][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x488f instead [ 307.688695][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 307.693524][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 307.696838][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x730d instead [ 307.700060][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x488f instead [ 307.704243][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 307.707502][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 307.720430][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x730d instead [ 307.727409][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x488f instead [ 307.733308][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 307.748157][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 307.754301][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x730d instead [ 307.760653][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x488f instead [ 307.768373][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 307.782769][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 307.786271][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x730d instead [ 307.796369][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x488f instead [ 307.804932][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 307.808206][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 307.815512][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x730d instead [ 307.818753][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x488f instead [ 307.822893][T31414] netlink: 'syz.5.11980': attribute type 8 has an invalid length. [ 307.828942][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 307.833711][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 307.840409][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x730d instead [ 307.846419][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x488f instead [ 307.853258][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 307.870480][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 307.877947][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x730d instead [ 307.886893][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x488f instead [ 307.893042][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 307.900741][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 307.906009][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x730d instead [ 307.912313][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x488f instead [ 307.934634][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 307.940400][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 307.943965][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x730d instead [ 307.947258][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x488f instead [ 307.952052][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 307.955370][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 307.959055][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x730d instead [ 307.968278][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x488f instead [ 307.975110][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 307.985260][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 307.989209][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x730d instead [ 307.995574][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x488f instead [ 308.010205][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 308.023738][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 308.040550][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x730d instead [ 308.045566][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x488f instead [ 308.049312][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 308.052466][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 308.061821][T12464] libceph: mon0 (1)[c::]:6789 connect error [ 308.063171][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x730d instead [ 308.074265][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x488f instead [ 308.081855][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 308.089306][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 308.093718][T12464] libceph: mon0 (1)[c::]:6789 connect error [ 308.095837][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x730d instead [ 308.095852][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x488f instead [ 308.095884][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 308.095894][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 308.095903][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x730d instead [ 308.095913][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x488f instead [ 308.095938][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 308.095947][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 308.095958][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x730d instead [ 308.096025][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x488f instead [ 308.096057][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 308.096067][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 308.096077][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x730d instead [ 308.096089][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x488f instead [ 308.096113][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 308.096123][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 308.096133][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x730d instead [ 308.096145][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x488f instead [ 308.096169][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 308.096179][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 308.096189][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x730d instead [ 308.096200][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x488f instead [ 308.096224][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 308.096233][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 308.096242][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x730d instead [ 308.096253][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x488f instead [ 308.096277][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 308.200346][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 308.203440][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x730d instead [ 308.214852][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x488f instead [ 308.217972][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 308.221105][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 308.224272][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x730d instead [ 308.229577][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x488f instead [ 308.233125][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 308.236636][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 308.249926][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x730d instead [ 308.253231][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x488f instead [ 308.256333][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 308.259791][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 308.264525][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x730d instead [ 308.269399][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x488f instead [ 308.280258][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 308.283496][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 308.286678][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x730d instead [ 308.291019][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x488f instead [ 308.294468][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 308.297605][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 308.301241][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x730d instead [ 308.304486][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x488f instead [ 308.307583][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 308.310677][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 308.314256][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x730d instead [ 308.317446][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x488f instead [ 308.320562][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 308.338133][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 308.344815][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x730d instead [ 308.351374][T31383] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x488f instead [ 308.356458][T31383] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 308.359505][T31383] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 308.389296][T12464] libceph: mon0 (1)[c::]:6789 connect error [ 308.513380][T31455] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 308.926121][T31429] ceph: No mds server is up or the cluster is laggy [ 308.934835][T12464] libceph: mon0 (1)[c::]:6789 connect error [ 308.939810][T31486] Failed to get privilege flags for destination (handle=0x2:0x1) [ 309.094832][T31494] synth uevent: /bus/acpi: unknown uevent action string [ 309.099254][T31492] udc dummy_udc.0: soft-connect without a gadget driver [ 309.541093][ T43] kauditd_printk_skb: 220 callbacks suppressed [ 309.541119][ T43] audit: type=1400 audit(2000000289.067:71207): avc: denied { create } for pid=31524 comm="syz.2.12032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 309.559200][ T43] audit: type=1400 audit(2000000289.085:71208): avc: denied { ioctl } for pid=31524 comm="syz.2.12032" path="socket:[104481]" dev="sockfs" ino=104481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 309.573484][ T43] audit: type=1400 audit(2000000289.085:71209): avc: denied { write } for pid=31524 comm="syz.2.12032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 309.585797][ T43] audit: type=1400 audit(2000000289.113:71210): avc: denied { bpf } for pid=31526 comm="syz.6.12033" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.592969][ T43] audit: type=1400 audit(2000000289.113:71211): avc: denied { perfmon } for pid=31526 comm="syz.6.12033" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.599957][ T43] audit: type=1400 audit(2000000289.113:71212): avc: denied { map_create } for pid=31526 comm="syz.6.12033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 309.618201][ T43] audit: type=1400 audit(2000000289.113:71213): avc: denied { map_read map_write } for pid=31526 comm="syz.6.12033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 309.655228][ T43] audit: type=1400 audit(2000000289.170:71214): avc: denied { mount } for pid=31528 comm="syz.6.12034" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 309.672630][ T43] audit: type=1400 audit(2000000289.188:71215): avc: denied { read } for pid=31531 comm="syz.2.12036" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.687580][ T43] audit: type=1400 audit(2000000289.198:71216): avc: denied { open } for pid=31531 comm="syz.2.12036" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 310.164816][T31568] binder: 31567:31568 ioctl 4018620d 0 returned -22 [ 310.175065][T31568] binder_alloc: binder_alloc_mmap_handler: 31567 200000fff000-200001000000 already mapped failed -16 [ 310.209190][T31571] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12055'. [ 310.226433][T31573] input: syz1 as /devices/virtual/input/input38 [ 310.247263][T31573] input: failed to attach handler leds to device input38, error: -6 [ 310.429550][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 310.432848][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 310.436326][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x730d instead [ 310.440455][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x488f instead [ 310.444262][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 310.450964][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 310.455590][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 310.460290][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 310.463929][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 310.467225][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 310.470846][T31593] jffs2: Further such events for this erase block will not be printed [ 310.473667][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 310.476892][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 310.480182][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x730d instead [ 310.483491][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x488f instead [ 310.487421][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 310.495521][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 310.499684][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 310.503278][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 310.506372][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 310.509556][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 310.512725][T31593] jffs2: Further such events for this erase block will not be printed [ 310.515499][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 310.518778][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 310.522085][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x730d instead [ 310.526061][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x488f instead [ 310.529385][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 310.532678][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 310.536081][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x730d instead [ 310.539742][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x488f instead [ 310.543003][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 310.546584][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 310.549905][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x730d instead [ 310.553192][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x488f instead [ 310.557789][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 310.561093][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 310.564374][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x730d instead [ 310.568394][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x488f instead [ 310.571875][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 310.575200][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 310.578996][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x730d instead [ 310.582340][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x488f instead [ 310.585676][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 310.591705][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 310.596008][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x730d instead [ 310.599890][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x488f instead [ 310.603508][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 310.607369][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 310.610955][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x730d instead [ 310.614495][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x488f instead [ 310.618018][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 310.621828][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 310.625166][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x730d instead [ 310.625601][T31600] XFS (mtdblock0): Invalid superblock magic number [ 310.628449][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x488f instead [ 310.634285][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 310.637612][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 310.641451][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x730d instead [ 310.652862][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x488f instead [ 310.663224][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 310.669445][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 310.686842][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x730d instead [ 310.690167][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x488f instead [ 310.693676][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 310.697380][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 310.706282][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x730d instead [ 310.710262][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x488f instead [ 310.713700][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 310.735407][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 310.738616][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x730d instead [ 310.741780][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x488f instead [ 310.745528][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 310.749191][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 310.752373][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x730d instead [ 310.755509][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x488f instead [ 310.778346][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 310.781874][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 310.784965][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x730d instead [ 310.788395][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x488f instead [ 310.792431][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 310.796306][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 310.799423][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x730d instead [ 310.811043][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x488f instead [ 310.824837][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 310.828095][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 310.831211][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x730d instead [ 310.834488][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x488f instead [ 310.837802][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 310.841103][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 310.848816][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x730d instead [ 310.864497][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x488f instead [ 310.871578][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 310.874912][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 310.878618][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x730d instead [ 310.881913][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x488f instead [ 310.885211][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 310.888588][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 310.891874][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x730d instead [ 310.895110][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x488f instead [ 310.899485][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 310.902791][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 310.905990][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x730d instead [ 310.909783][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x488f instead [ 310.913093][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 310.916373][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 310.920441][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x730d instead [ 310.923710][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x488f instead [ 310.927307][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 310.931295][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 310.934594][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x730d instead [ 310.940593][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x488f instead [ 310.943922][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 310.947138][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 310.950742][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x730d instead [ 310.954110][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x488f instead [ 310.957383][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 310.960586][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 310.964856][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x730d instead [ 310.968104][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x488f instead [ 310.971303][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 310.975529][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 310.978873][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x730d instead [ 310.982098][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x488f instead [ 310.985831][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 310.989119][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 310.992359][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x730d instead [ 310.995855][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x488f instead [ 310.999125][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 311.002414][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 311.005961][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x730d instead [ 311.009167][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x488f instead [ 311.012406][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 311.016379][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 311.019650][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x730d instead [ 311.022867][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x488f instead [ 311.026336][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 311.029557][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 311.032809][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x730d instead [ 311.037103][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x488f instead [ 311.040438][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 311.043658][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 311.047422][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x730d instead [ 311.050629][T31593] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x488f instead [ 311.053917][T31593] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 311.056833][T31593] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 311.454787][T31622] zram0: detected capacity change from 8 to 0 [ 311.601006][T31635] openvswitch: netlink: IP tunnel dst address not specified [ 311.612082][T31635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.380248][T31700] e1000e 0000:00:02.0: MSI/MSI-X disallowed for future drivers [ 313.524456][T31797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12161'. [ 313.997469][T31834] binder: 31832:31834 ioctl c0306201 2000000001c0 returned -22 [ 314.150076][T31839] openvswitch: netlink: IP tunnel dst address not specified [ 314.153926][T31839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.154109][T31841] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 314.279782][T31851] netlink: 'syz.2.12185': attribute type 2 has an invalid length. [ 314.293448][T31851] netlink: 'syz.2.12185': attribute type 1 has an invalid length. [ 314.305120][T31851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12185'. [ 314.312650][T31851] netlink: 'syz.2.12185': attribute type 2 has an invalid length. [ 314.315302][T31851] netlink: 'syz.2.12185': attribute type 1 has an invalid length. [ 314.318264][T31851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12185'. [ 314.321227][T31851] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 314.358738][T31857] openvswitch: netlink: VLAN attribute unexpected. [ 314.693059][T31887] loop4: detected capacity change from 0 to 7 [ 314.747738][ T11] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.751816][ T11] buffer_io_error: 7 callbacks suppressed [ 314.751826][ T11] Buffer I/O error on dev loop4, logical block 0, async page read [ 314.758382][T31887] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.767897][T31887] Buffer I/O error on dev loop4, logical block 0, async page read [ 314.780553][T31887] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.792053][T31887] Buffer I/O error on dev loop4, logical block 0, async page read [ 314.804076][T31887] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.811112][T31887] Buffer I/O error on dev loop4, logical block 0, async page read [ 314.819053][T31887] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.822122][T31887] Buffer I/O error on dev loop4, logical block 0, async page read [ 314.829377][T31887] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.834647][T31887] Buffer I/O error on dev loop4, logical block 0, async page read [ 314.837385][T31887] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.840365][T31887] Buffer I/O error on dev loop4, logical block 0, async page read [ 314.844340][T31887] ldm_validate_partition_table(): Disk read failed. [ 314.848871][T31887] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.852275][T31887] Buffer I/O error on dev loop4, logical block 0, async page read [ 314.854799][T31887] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.857627][T31887] Buffer I/O error on dev loop4, logical block 0, async page read [ 314.859972][T31887] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.863335][T31887] Buffer I/O error on dev loop4, logical block 0, async page read [ 314.865933][T31887] Dev loop4: unable to read RDB block 0 [ 314.869259][T31887] loop4: unable to read partition table [ 314.871352][T31887] loop4: partition table beyond EOD, truncated [ 314.874665][T31887] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 314.980734][ T43] kauditd_printk_skb: 173 callbacks suppressed [ 314.980749][ T43] audit: type=1400 audit(2000000294.157:71390): avc: denied { mount } for pid=31898 comm="syz.1.12207" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 314.993289][ T43] audit: type=1400 audit(2000000294.167:71391): avc: denied { read write } for pid=31898 comm="syz.1.12207" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 315.002634][ T43] audit: type=1400 audit(2000000294.167:71392): avc: denied { open } for pid=31898 comm="syz.1.12207" path="/3077/dev/cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 315.015133][ T43] audit: type=1400 audit(2000000294.185:71393): avc: denied { setopt } for pid=31893 comm="syz.5.12205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.032595][ T43] audit: type=1400 audit(2000000294.195:71394): avc: denied { read } for pid=31901 comm="syz.6.12208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 315.038630][ T43] audit: type=1400 audit(2000000294.204:71395): avc: denied { unmount } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 315.089092][ T43] audit: type=1400 audit(2000000294.260:71396): avc: denied { mount } for pid=31906 comm="syz.1.12210" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 315.147220][ T43] audit: type=1400 audit(2000000294.307:71397): avc: denied { read write } for pid=31909 comm="syz.1.12211" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 315.157429][ T43] audit: type=1400 audit(2000000294.307:71398): avc: denied { open } for pid=31909 comm="syz.1.12211" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 315.211574][ T43] audit: type=1400 audit(2000000294.373:71399): avc: denied { read } for pid=31913 comm="syz.1.12213" dev="nsfs" ino=4026533084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 315.316400][T31920] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 315.322268][T31920] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 315.326537][T31920] overlayfs: failed to set uuid (306/file2, err=-13); falling back to uuid=null. [ 315.394067][T31924] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12219'. [ 315.397301][T31924] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12219'. [ 315.740661][T31949] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12230'. [ 315.817702][T31955] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 315.823800][T31955] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 315.827837][T31955] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 315.840420][T31955] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 316.191687][T31976] bond0: no command found in slaves file - use +ifname or -ifname [ 316.201798][T31980] netlink: 'syz.2.12242': attribute type 4 has an invalid length. [ 316.208826][T31980] netlink: 'syz.2.12242': attribute type 8 has an invalid length. [ 316.217578][T31980] netlink: 212 bytes leftover after parsing attributes in process `syz.2.12242'. [ 316.330602][T31984] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input39 [ 316.859972][ T5777] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 317.030870][ T5777] usb 10-1: Using ep0 maxpacket: 8 [ 317.033355][ T5777] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 317.037905][ T5777] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 317.040552][ T5777] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 317.044720][ T5777] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 317.047854][ T5777] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 317.051482][ T5777] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 317.055049][ T5777] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.059435][ T5777] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.245869][T32023] kvm: apic: phys broadcast and lowest prio [ 317.281457][ T5777] usb 10-1: GET_CAPABILITIES returned 0 [ 317.283364][ T5777] usbtmc 10-1:16.0: can't read capabilities [ 317.498483][ T5777] usb 10-1: USB disconnect, device number 4 [ 317.686738][T32045] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 317.818271][T32055] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12282'. [ 318.058879][ T66] block nbd1: Receive control failed (result -32) [ 318.509530][T32120] ima: policy update completed [ 318.535883][T32124] Bluetooth: hci2: Frame reassembly failed (-84) [ 318.844843][T32150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12327'. [ 318.905469][T32155] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12329'. [ 318.912422][T32155] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12329'. [ 318.918155][T32155] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12329'. [ 318.921120][T32155] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12329'. [ 318.996053][T32164] kvm: user requested TSC rate below hardware speed [ 319.233574][T32185] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.274611][T32190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12345'. [ 319.361082][T32198] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12348'. [ 319.830688][T12463] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 319.896191][ T37] wlan1: Trigger new scan to find an IBSS to join [ 319.991513][T12463] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 319.995473][T12463] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 319.999800][T12463] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.005905][T12463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.008471][T12463] usb 7-1: Product: syz [ 320.009882][T12463] usb 7-1: Manufacturer: syz [ 320.011412][T12463] usb 7-1: SerialNumber: syz [ 320.020484][T12463] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 320.025177][T12463] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 320.029283][T12463] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 320.334731][ T43] kauditd_printk_skb: 192 callbacks suppressed [ 320.334787][ T43] audit: type=1400 audit(2000000555.171:71592): avc: denied { mount } for pid=32210 comm="syz.6.12354" name="/" dev="configfs" ino=3088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 320.357769][ T43] audit: type=1400 audit(2000000555.189:71593): avc: denied { unmount } for pid=28818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 320.371323][ T43] audit: type=1400 audit(2000000555.199:71594): avc: denied { recv } for pid=28818 comm="syz-executor" saddr=127.0.0.1 src=48486 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 320.397808][ T43] audit: type=1400 audit(2000000555.227:71595): avc: denied { create } for pid=32214 comm="syz.6.12356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 320.409939][ T43] audit: type=1400 audit(2000000555.227:71596): avc: denied { write } for pid=32214 comm="syz.6.12356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 320.424506][ T43] audit: type=1400 audit(2000000555.227:71597): avc: denied { read } for pid=32214 comm="syz.6.12356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 320.437391][ T43] audit: type=1400 audit(2000000555.246:71598): avc: denied { ioctl } for pid=32214 comm="syz.6.12356" path="socket:[107396]" dev="sockfs" ino=107396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 320.474108][ T43] audit: type=1400 audit(2000000555.302:71599): avc: denied { mount } for pid=32218 comm="syz.6.12358" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 320.501229][ T43] audit: type=1400 audit(2000000555.320:71600): avc: denied { unmount } for pid=28818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 320.548939][ T63] Bluetooth: hci5: Frame reassembly failed (-84) [ 320.719698][ T43] audit: type=1400 audit(2000000555.526:71601): avc: denied { read } for pid=32226 comm="syz.5.12361" dev="nsfs" ino=4026532914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 320.749658][ T5808] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 320.749761][ T5802] Bluetooth: hci2: command 0x1003 tx timeout [ 321.360280][T32209] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 321.369849][T32209] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 321.376044][T32209] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 321.382868][T32209] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 321.392252][ T5777] usb 7-1: USB disconnect, device number 14 [ 321.409251][ T5777] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 321.427159][ T5777] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 321.436932][ T5777] ti_usb_3410_5052 7-1:2.0: device disconnected [ 321.538908][T32268] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 321.844729][T32287] netlink: 'syz.1.12389': attribute type 1 has an invalid length. [ 321.847139][T32287] __nla_validate_parse: 1 callbacks suppressed [ 321.847147][T32287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12389'. [ 321.852170][T32287] netlink: 'syz.1.12389': attribute type 1 has an invalid length. [ 321.860971][T32287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12389'. [ 321.870655][T32287] iwpm_send_hello: Unable to send a nlmsg [ 322.715477][ T5797] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 322.719468][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 322.851630][T32356] block2mtd: parameter too long [ 323.167154][T32385] sd 0:0:0:0: PR command failed: 1026 [ 323.173943][T32385] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 323.186743][T32385] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 323.507730][T32412] loop9: detected capacity change from 0 to 7 [ 323.536163][T32412] Dev loop9: unable to read RDB block 7 [ 323.543835][T32412] loop9: unable to read partition table [ 323.551705][T32412] loop9: partition table beyond EOD, truncated [ 323.564331][T32412] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 323.582782][ C2] blk_print_req_error: 5 callbacks suppressed [ 323.582793][ C2] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 323.587915][ C2] buffer_io_error: 5 callbacks suppressed [ 323.587924][ C2] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 323.835253][ T49] Bluetooth: hci2: Frame reassembly failed (-84) [ 323.931334][T32432] SELinux: failed to load policy [ 323.979622][T32441] Mount JFS Failure: -22 [ 323.981995][T32441] jfs_mount failed w/return code = -22 [ 324.004226][T32443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12459'. [ 324.013316][T32443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12459'. [ 324.103215][T32447] openvswitch: netlink: Missing valid actions attribute. [ 324.105643][T32447] openvswitch: netlink: Actions may not be safe on all matching packets [ 324.159486][T32449] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 324.234541][T32455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12465'. [ 324.660429][T12463] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 324.825277][T12463] usb 11-1: Using ep0 maxpacket: 8 [ 324.830367][T12463] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 324.836247][T12463] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.851170][T12463] pvrusb2: Hardware description: Terratec Grabster AV400 [ 324.857902][T12463] pvrusb2: ********** [ 324.863589][T12463] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 324.868931][T12463] pvrusb2: Important functionality might not be entirely working. [ 324.878803][T12463] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 324.888120][T12463] pvrusb2: ********** [ 325.068429][ T2510] pvrusb2: Invalid write control endpoint [ 325.111716][ T1159] wlan1: Trigger new scan to find an IBSS to join [ 325.157713][ T2510] pvrusb2: Invalid write control endpoint [ 325.168486][ T2510] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 325.183392][ T2510] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 325.188247][ T2510] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 325.194752][ T2510] pvrusb2: Device being rendered inoperable [ 325.199514][ T2510] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 325.207696][ T2510] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 325.213760][ T2510] pvrusb2: Attached sub-driver cx25840 [ 325.221412][ T2510] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 325.229829][ T2510] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 325.296796][ T5777] usb 11-1: USB disconnect, device number 3 [ 325.696412][T12464] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 325.749476][ T43] kauditd_printk_skb: 185 callbacks suppressed [ 325.749490][ T43] audit: type=1400 audit(2000000560.234:71787): avc: denied { create } for pid=32539 comm="syz.2.12504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 325.770489][ T43] audit: type=1400 audit(2000000560.253:71788): avc: denied { create } for pid=32541 comm="syz.2.12505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 325.777219][ T43] audit: type=1400 audit(2000000560.253:71789): avc: denied { setopt } for pid=32541 comm="syz.2.12505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 325.857387][T12464] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 325.864299][T12464] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.869277][ T43] audit: type=1400 audit(2000000560.356:71790): avc: denied { mount } for pid=32543 comm="syz.2.12507" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 325.877172][T12464] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.884189][ T43] audit: type=1400 audit(2000000560.365:71791): avc: denied { create } for pid=32545 comm="syz.6.12506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.895060][T12464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.897693][T12464] usb 6-1: Product: syz [ 325.899004][T12464] usb 6-1: Manufacturer: syz [ 325.905180][T12464] usb 6-1: SerialNumber: syz [ 325.906754][ T43] audit: type=1400 audit(2000000560.365:71792): avc: denied { bind } for pid=32545 comm="syz.6.12506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.917064][ T43] audit: type=1400 audit(2000000560.365:71793): avc: denied { write } for pid=32545 comm="syz.6.12506" path="socket:[110102]" dev="sockfs" ino=110102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.930190][ T43] audit: type=1400 audit(2000000560.374:71794): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 325.930219][ T43] audit: type=1400 audit(2000000560.393:71795): avc: denied { mount } for pid=32547 comm="syz.2.12508" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 325.932621][T12464] symbolserial 6-1:1.0: symbol converter detected [ 325.941125][T12464] usb 6-1: symbol converter now attached to ttyUSB0 [ 326.015285][T32548] Console: switching to colour frame buffer device 50x37 [ 326.020973][ T43] audit: type=1400 audit(2000000560.487:71796): avc: denied { write } for pid=32552 comm="syz.6.12510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.049041][ T5808] Bluetooth: hci2: command 0x1003 tx timeout [ 326.049109][ T5797] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 326.126651][ T37] wlan1: Creating new IBSS network, BSSID 42:9f:bd:77:99:06 [ 326.194504][T32536] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 326.209992][T12464] usb 6-1: USB disconnect, device number 21 [ 326.226130][T12464] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 326.226384][T12464] symbolserial 6-1:1.0: device disconnected [ 326.803198][T32586] kvm: kvm [32585]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000057) = 0xffffffffffffffff [ 327.342282][ T5777] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 327.514798][ T5777] usb 11-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 327.523252][ T5777] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 327.529318][ T5777] usb 11-1: can't read configurations, error -71 [ 327.780104][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 327.952204][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 327.958178][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.963138][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.967671][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.971911][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.986573][ T10] usb 10-1: config 0 descriptor?? [ 328.802961][T32701] i2c i2c-0: new_device: Missing parameters [ 328.852483][T32706] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12584'. [ 328.930106][T32713] tipc: Enabling of bearer rejected, failed to enable media [ 329.209660][T32727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12594'. [ 329.703004][ T5797] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 329.974625][ T303] bcache: register_bcache() error : failed to open device [ 330.367584][ T333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12630'. [ 330.379199][ T333] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12630'. [ 330.716712][ T355] netlink: 'syz.2.12641': attribute type 11 has an invalid length. [ 330.747235][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 330.752924][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 330.763689][ T10] usb 10-1: USB disconnect, device number 5 [ 331.085760][ T379] bonding: unable to delete non-existent b [ 331.093321][ T43] kauditd_printk_skb: 152 callbacks suppressed [ 331.093333][ T43] audit: type=1400 audit(2000000565.232:71949): avc: denied { prog_load } for pid=380 comm="syz.5.12653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 331.116963][ T43] audit: type=1400 audit(2000000565.241:71950): avc: denied { bpf } for pid=380 comm="syz.5.12653" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.131057][ T43] audit: type=1400 audit(2000000565.241:71951): avc: denied { perfmon } for pid=380 comm="syz.5.12653" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.143826][ T43] audit: type=1400 audit(2000000565.251:71952): avc: denied { create } for pid=382 comm="syz.1.12655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.157215][ T43] audit: type=1400 audit(2000000565.251:71953): avc: denied { write } for pid=382 comm="syz.1.12655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.171806][ T43] audit: type=1400 audit(2000000565.251:71954): avc: denied { read } for pid=382 comm="syz.1.12655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.188079][ T43] audit: type=1400 audit(2000000565.260:71955): avc: denied { ioctl } for pid=382 comm="syz.1.12655" path="socket:[111175]" dev="sockfs" ino=111175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.398236][ T43] audit: type=1400 audit(2000000565.522:71956): avc: denied { listen } for pid=405 comm="syz.1.12664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.411211][ T43] audit: type=1400 audit(2000000565.531:71957): avc: denied { mount } for pid=407 comm="syz.6.12665" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 331.420942][ T43] audit: type=1400 audit(2000000565.531:71958): avc: denied { setopt } for pid=405 comm="syz.1.12664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.754755][T12464] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 331.872481][ T5797] Bluetooth: hci3: command 0x0405 tx timeout [ 331.921331][T12464] usb 7-1: Using ep0 maxpacket: 8 [ 331.931423][T12464] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.943455][T12464] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 331.953783][T12464] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 331.964643][T12464] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.974051][T12464] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.982956][ T456] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 331.986968][T12464] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.220245][T12464] usb 7-1: GET_CAPABILITIES returned 0 [ 332.222026][T12464] usbtmc 7-1:16.0: can't read capabilities [ 332.304652][ T480] binder: binder_mmap: 479 200000000000-200000200000 bad vm_flags failed -1 [ 332.375477][ T486] ima: policy update failed [ 332.445145][ T10] usb 7-1: USB disconnect, device number 15 [ 332.547393][ T5777] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 332.717047][ T5777] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 332.723560][ T5777] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 332.730061][ T5777] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 332.750461][ T5777] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 332.759265][ T5777] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 332.772152][ T5777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.776578][ T5777] usb 6-1: Product: syz [ 332.779525][ T5777] usb 6-1: Manufacturer: syz [ 332.782987][ T5777] usb 6-1: SerialNumber: syz [ 332.796328][ T5777] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 332.809282][ T5777] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 332.823614][ T5777] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 332.848324][ T518] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 332.874861][ T522] netlink: 'syz.6.12722': attribute type 1 has an invalid length. [ 332.952811][ T524] kvm: kvm [523]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x7eb7 [ 333.009564][ T476] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 333.049291][ T5777] usb 6-1: USB disconnect, device number 22 [ 333.072118][ T5777] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 333.086014][ T5777] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 333.103260][ T5777] ti_usb_3410_5052 6-1:2.0: device disconnected [ 333.755864][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.085471][ T5797] Bluetooth: hci3: command 0x0405 tx timeout [ 334.109449][ T557] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 334.667062][ T602] uhci_hcd 0000:00:1d.0: remove, state 1 [ 334.686444][ T602] usb usb2: USB disconnect, device number 1 [ 334.768946][ T37] wlan1: Trigger new scan to find an IBSS to join [ 334.872009][ T602] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 334.903050][ T602] extrace-0138 ex_trace_point : Method Begin [\_SB.PCI0._PRT] execution. [ 334.938132][ T602] extrace-0138 ex_trace_point : Method End [\_SB.PCI0._PRT] execution. [ 334.979420][ T617] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12765'. [ 335.392722][ T645] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 335.706872][ T674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12790'. [ 335.944825][ T694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12802'. [ 336.006512][ T697] ima: policy update completed [ 336.251388][ T712] openvswitch: netlink: IP tunnel dst address not specified [ 336.256508][ T712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.318152][ T5797] Bluetooth: hci3: command 0x0405 tx timeout [ 336.459690][ T43] kauditd_printk_skb: 222 callbacks suppressed [ 336.459702][ T43] audit: type=1400 audit(2000000570.258:72181): avc: denied { mount } for pid=719 comm="syz.5.12812" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 336.480917][ T43] audit: type=1800 audit(2000000570.258:72182): pid=720 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.12812" name="pages_to_scan" dev="sysfs" ino=1285 res=0 errno=0 [ 336.504109][ T43] audit: type=1800 audit(2000000570.305:72183): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 336.569760][ T43] audit: type=1800 audit(2000000570.361:72184): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 336.603845][ T43] audit: type=1400 audit(2000000570.389:72185): avc: denied { create } for pid=729 comm="syz.2.12817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 336.626808][ T43] audit: type=1800 audit(2000000570.408:72186): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15871 res=0 errno=0 [ 336.647312][ T43] audit: type=1400 audit(2000000570.436:72187): avc: denied { create } for pid=731 comm="syz.1.12818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.661730][ T43] audit: type=1800 audit(2000000570.436:72188): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 336.676097][ T43] audit: type=1400 audit(2000000570.464:72189): avc: denied { create } for pid=733 comm="syz.5.12819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 336.711913][ T43] audit: type=1800 audit(2000000570.492:72190): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15871 res=0 errno=0 [ 336.788456][ T740] rnbd_client L213: map_device: Parameters missing [ 336.878570][ T747] : renamed from vlan0 [ 337.056313][ T756] ima: policy update failed [ 337.138897][ T765] bond0: option slaves: interface +dumm{0}4`g_{ZX does not exist! [ 337.404048][ T787] db_root: cannot open: IMIX 'CD' 00000000000000000000 [ 337.477644][ T795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12848'. [ 337.508566][ T799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12851'. [ 337.849185][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b236ea (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 337.854970][ C0] Call Trace: [ 337.856091][ C0] [ 337.857043][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 337.859189][ C0] ? sched_clock_cpu+0x6c/0x570 [ 337.860895][ C0] ? handle_softirqs+0x7ee/0x9d0 [ 337.862508][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 337.864175][ C0] mce_cpu_restart+0xd5/0x1f0 [ 337.865812][ C0] __flush_smp_call_function_queue+0x289/0x8c0 [ 337.867975][ C0] __sysvec_call_function_single+0x81/0x420 [ 337.869943][ C0] sysvec_call_function_single+0x9e/0xc0 [ 337.871662][ C0] [ 337.872628][ C0] [ 337.873656][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 337.875624][ C0] RIP: 0010:write_comp_data+0x47/0xa0 [ 337.877412][ C0] Code: 00 01 00 ff 74 1e f6 c4 01 74 68 a9 00 00 00 0f 75 61 f7 c2 00 00 00 f0 75 59 8b 87 34 17 00 00 85 c0 74 4f 8b 87 08 17 00 00 <83> f8 03 75 44 48 8b 87 10 17 00 00 8b bf 0c 17 00 00 48 8b 30 48 [ 337.883781][ C0] RSP: 0018:ffffc90003957528 EFLAGS: 00000246 [ 337.885944][ C0] RAX: 0000000000000000 RBX: 00007f20bb597000 RCX: ffffffff82614c52 [ 337.888824][ C0] RDX: 0000000000000001 RSI: 00007f20bb59a000 RDI: ffff888026e04b00 [ 337.891722][ C0] RBP: 0000000000000001 R08: 0000000000000006 R09: 00007f20bb59a000 [ 337.894557][ C0] R10: 00007f20bb597000 R11: 0000000000000000 R12: 00007f20bb596000 [ 337.897142][ C0] R13: 800000001d6b0025 R14: dffffc0000000000 R15: 00007f20bb59a000 [ 337.900001][ C0] ? __zap_vma_range+0x14c2/0x48c0 [ 337.901881][ C0] __zap_vma_range+0x14c2/0x48c0 [ 337.903521][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 337.905164][ C0] ? mas_next_slot+0x10a3/0x1960 [ 337.906668][ C0] ? find_held_lock+0x2b/0x80 [ 337.908105][ C0] unmap_vmas+0x299/0x5f0 [ 337.909524][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 337.911077][ C0] ? mas_next_slot+0x10a3/0x1960 [ 337.912583][ C0] exit_mmap+0x1ef/0xa00 [ 337.914120][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 337.915826][ C0] ? rcu_is_watching+0x13/0xc0 [ 337.917596][ C0] ? find_held_lock+0x2b/0x80 [ 337.919238][ C0] ? uprobe_clear_state+0x5f/0x250 [ 337.921060][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 337.923011][ C0] __mmput+0x12a/0x410 [ 337.924543][ C0] mmput+0x67/0x80 [ 337.925880][ C0] do_exit+0x8b1/0x2ae0 [ 337.927437][ C0] ? lock_acquire+0x1b9/0x370 [ 337.929215][ C0] ? find_held_lock+0x2b/0x80 [ 337.931006][ C0] ? __pfx_do_exit+0x10/0x10 [ 337.932639][ C0] ? find_held_lock+0x2b/0x80 [ 337.934388][ C0] ? get_signal+0x7e0/0x21e0 [ 337.936051][ C0] do_group_exit+0xd5/0x2a0 [ 337.937729][ C0] get_signal+0x1ec7/0x21e0 [ 337.939437][ C0] ? __pfx_get_signal+0x10/0x10 [ 337.941206][ C0] ? do_futex+0x190/0x440 [ 337.942823][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 337.944772][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 337.946763][ C0] ? fput+0x7c/0x100 [ 337.948046][ C0] exit_to_user_mode_loop+0x139/0x700 [ 337.949780][ C0] ? rcu_is_watching+0x13/0xc0 [ 337.951337][ C0] do_syscall_64+0x661/0x790 [ 337.952842][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.954813][ C0] RIP: 0033:0x7f20ba79e0d9 [ 337.956270][ C0] Code: Unable to access opcode bytes at 0x7f20ba79e0af. [ 337.958701][ C0] RSP: 002b:00007f20bb5950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 337.961341][ C0] RAX: fffffffffffffe00 RBX: 00007f20baa25fa8 RCX: 00007f20ba79e0d9 [ 337.963832][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f20baa25fa8 [ 337.966283][ C0] RBP: 00007f20baa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 337.968851][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.971557][ C0] R13: 00007f20baa26038 R14: 00007ffdc829e140 R15: 00007ffdc829e228 [ 337.974123][ C0] [ 338.029031][ T94] wlan1: Trigger new scan to find an IBSS to join [ 338.348751][ T854] bridge_slave_0: invalid flags given to default FDB implementation [ 338.359883][T12464] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 338.529027][ T5797] Bluetooth: hci3: command 0x0405 tx timeout [ 338.531153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.275792][ T37] wlan1: Trigger new scan to find an IBSS to join [ 342.268576][ T94] wlan1: Creating new IBSS network, BSSID 6a:35:11:cd:24:bf [ 345.011016][ T43] kauditd_printk_skb: 159 callbacks suppressed [ 345.011028][ T43] audit: type=1400 audit(2000000578.260:72350): avc: denied { write } for pid=881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.080861][ T43] audit: type=1400 audit(2000000578.335:72351): avc: denied { write } for pid=884 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.482852][ T43] audit: type=1400 audit(2000000578.700:72352): avc: denied { create } for pid=887 comm="syz.5.12882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 345.491895][ T43] audit: type=1400 audit(2000000578.719:72353): avc: denied { create } for pid=887 comm="syz.5.12882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.520910][ T43] audit: type=1800 audit(2000000578.737:72354): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16387 res=0 errno=0 [ 345.549336][ T43] audit: type=1400 audit(2000000578.765:72355): avc: denied { read write } for pid=894 comm="syz.1.12883" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 345.561217][ T43] audit: type=1400 audit(2000000578.775:72356): avc: denied { open } for pid=894 comm="syz.1.12883" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 345.568266][ T43] audit: type=1400 audit(2000000578.775:72357): avc: denied { mounton } for pid=891 comm="syz.2.12884" path="/3526/sys" dev="tmpfs" ino=17879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 345.575175][ T43] audit: type=1400 audit(2000000578.775:72358): avc: denied { mount } for pid=891 comm="syz.2.12884" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 345.582218][ T43] audit: type=1800 audit(2000000578.784:72359): pid=896 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.12884" name="vendor" dev="sysfs" ino=2352 res=0 errno=0 [ 345.859584][ T919] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.091789][ T937] bad cache= option: none 321 [ 346.091789][ T937] nr_mlock 0 [ 346.091789][ T937] nr_zspages 263 [ 346.091789][ T937] nr_free_cma 0 [ 346.091789][ T937] numa_hit 2900666 [ 346.091789][ T937] numa_miss 74872 [ 346.091789][ T937] numa_foreign 74872 [ 346.091789][ T937] numa_interleave 7213 [ 346.091789][ T937] numa_local 2883960 [ 346.091789][ T937] numa_other 91578 [ 346.091789][ T937] nr_inactive_anon 15217 [ 346.091789][ T937] nr_active_anon 9703 [ 346.091789][ T937] nr_inactive_file 19914 [ 346.091789][ T937] nr_active_file 13050 [ 346.091789][ T937] nr_unevictable 1000 [ 346.091789][ T937] nr_slab_reclaimable 8273 [ 346.091789][ T937] nr_slab_unreclaimable 82089 [ 346.091789][ T937] nr_isolated_anon 0 [ 346.091789][ T937] nr_isolated_file 0 [ 346.091789][ T937] workingset_nodes 89 [ 346.091789][ T937] workingset_refault_anon 4768 [ 346.091789][ T937] workingset_refault_file 21390 [ 346.091789][ T937] workingset_activate_anon 71 [ 346.091789][ T937] workingset_activate_file 2038 [ 346.091789][ T937] workingset_restore_anon 34 [ 346.091789][ T937] workingset_restore_file 1915 [ 346.091789][ T937] workingset_nodereclaim 384 [ 346.091789][ T937] nr_anon_pages 7409 [ 346.091789][ T937] nr_mapped 24460 [ 346.091789][ T937] nr_file_pages 51489 [ 346.091789][ T937] nr_dirty 321 [ 346.091789][ T937] nr_writeback 0 [ 346.091789][ T937] nr_shmem 18520 [ 346.091789][ T937] nr_shmem_hugepages 0 [ 346.091789][ T937] nr_shmem_pmdmapped 0 [ 346.091789][ T937] nr_file_hugepages 0 [ 346.091789][ T937] nr_file_pmdmapped 0 [ 346.091789][ T937] nr_anon_transparent_hugepages 0 [ 346.091789][ T937] nr_vmscan_write 11924 [ 346.091789][ T937] nr_vmscan_immediate_reclaim 69 [ 346.091789][ T937] nr_dirtied 27486 [ 346.091789][ T937] nr_written 27165 [ 346.091789][ T937] nr_throttled_written 544 [ 346.091789][ T937] nr_kernel_misc_reclaimable 0 [ 346.091789][ T937] nr_foll_pin_acquired 4831 [ 346.092088][ T937] CIFS: VFS: bad cache= option: none 321 [ 346.092088][ T937] nr_mlock 0 [ 346.092088][ T937] nr_zspages 263 [ 346.092088][ T937] nr_free_cma 0 [ 346.092088][ T937] numa_hit 2900666 [ 346.092088][ T937] numa_miss 74872 [ 346.092088][ T937] numa_foreign 74872 [ 346.092088][ T937] numa_interleave 7213 [ 346.092088][ T937] numa_local 2883960 [ 346.092088][ T937] numa_other 91578 [ 346.092088][ T937] nr_inactive_anon 15217 [ 346.092088][ T937] nr_active_anon 9703 [ 346.092088][ T937] nr_inactive_file 19914 [ 346.092088][ T937] nr_active_file 13050 [ 346.092088][ T937] nr_unevictable 1000 [ 346.092088][ T937] nr_slab_reclaimable 8273 [ 346.092088][ T937] nr_slab_unreclaimable 82089 [ 346.092088][ T937] nr_isolated_anon 0 [ 346.092088][ T937] nr_isolated_file 0 [ 346.092088][ T937] workingset_nodes 89 [ 346.092088][ T937] workingset_refault_anon 4768 [ 346.092088][ T937] workingset_refault_file 21390 [ 346.092088][ T937] workingset_activate_anon 71 [ 346.092088][ T937] workingset_activate_file 2038 [ 346.092088][ T937] workingset_restore_anon 34 [ 346.092088][ T937] workingset_restore_file 1915 [ 346.092088][ T937] workingset_nodereclaim 384 [ 346.092088][ T937] nr_anon_pages 7409 [ 346.092088][ T937] nr_mapped 24460 [ 346.092088][ T937] nr_file_pages 51489 [ 346.092088][ T937] nr_dirty 321 [ 346.092088][ T937] nr_writeback 0 [ 346.092088][ T937] nr_shmem 18520 [ 346.092088][ T937] nr_shmem_hugepages 0 [ 346.092088][ T937] nr_shmem_pmdmapped 0 [ 346.092088][ T937] nr_file_hugepages 0 [ 346.092088][ T937] nr_file_pmdmapped 0 [ 346.092088][ T937] nr_anon_transparent_hugepages 0 [ 346.092088][ T937] nr_vmscan_write 11924 [ 346.092088][ T937] nr_vmscan_immediate_reclaim 69 [ 346.092088][ T937] nr_dirtied 27486 [ 346.092088][ T937] nr_written 27165 [ 346.092088][ T937] nr_throttled_written 544 [ 346.092088][ T937] nr_kernel_misc_reclaimable 0 [ 346.092088][ T937] nr_foll_pin_acquired 4831 [ 346.590101][ T982] netlink: 'syz.1.12916': attribute type 21 has an invalid length. [ 346.678347][ T982] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12916'. [ 346.681232][ T985] netlink: 'syz.1.12916': attribute type 21 has an invalid length. [ 346.681245][ T985] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12916'. [ 346.681288][ T985] netlink: 'syz.1.12916': attribute type 5 has an invalid length. [ 346.689907][ T986] vim2m vim2m.0: Removing vim2m [ 346.730907][ T985] netlink: 'syz.1.12916': attribute type 6 has an invalid length. [ 346.748604][ T985] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12916'. [ 346.755064][ T982] netlink: 'syz.1.12916': attribute type 5 has an invalid length. [ 346.757907][ T982] netlink: 'syz.1.12916': attribute type 6 has an invalid length. [ 346.760266][ T982] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12916'. [ 346.960764][ T1012] GUP no longer grows the stack in syz.2.12928 (1012): 200000007000-20000000a000 (200000004000) [ 346.979344][ T1012] CPU: 0 UID: 0 PID: 1012 Comm: syz.2.12928 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.979366][ T1012] Tainted: [L]=SOFTLOCKUP [ 346.979370][ T1012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.979378][ T1012] Call Trace: [ 346.979382][ T1012] [ 346.979387][ T1012] dump_stack_lvl+0x100/0x190 [ 346.979415][ T1012] gup_vma_lookup.cold+0x83/0x96 [ 346.979435][ T1012] __get_user_pages+0x252/0x3280 [ 346.979456][ T1012] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 346.979478][ T1012] ? __pfx___get_user_pages+0x10/0x10 [ 346.979495][ T1012] ? __pfx_down_read_killable+0x10/0x10 [ 346.979514][ T1012] __gup_longterm_locked+0x87d/0x16f0 [ 346.979535][ T1012] ? __pfx___gup_longterm_locked+0x10/0x10 [ 346.979566][ T1012] ? lock_acquire+0x1b9/0x370 [ 346.979588][ T1012] gup_fast_fallback+0x16dc/0x2790 [ 346.979614][ T1012] ? __pfx_gup_fast_fallback+0x10/0x10 [ 346.979632][ T1012] ? __lock_acquire+0x4c5/0x1ec0 [ 346.979649][ T1012] ? rcu_is_watching+0x13/0xc0 [ 346.979662][ T1012] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 346.979687][ T1012] get_user_pages_fast+0xa7/0xf0 [ 346.979704][ T1012] ? __pfx_get_user_pages_fast+0x10/0x10 [ 346.979724][ T1012] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 346.979747][ T1012] ? __mutex_lock+0x26c/0x1bc0 [ 346.979758][ T1012] ? pipe_lock+0x69/0x80 [ 346.979775][ T1012] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 346.979794][ T1012] ? __pfx___mutex_lock+0x10/0x10 [ 346.979806][ T1012] ? import_ubuf+0x1b6/0x220 [ 346.979825][ T1012] iov_iter_get_pages2+0xa3/0x100 [ 346.979842][ T1012] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 346.979859][ T1012] ? wait_for_space+0x2ca/0x3b0 [ 346.979881][ T1012] __do_sys_vmsplice+0x7dd/0x13c0 [ 346.979897][ T1012] ? __pfx_futex_hash+0x10/0x10 [ 346.979908][ T1012] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 346.979923][ T1012] ? __pfx_futex_wait+0x10/0x10 [ 346.979960][ T1012] ? do_syscall_64+0x123/0x790 [ 346.979972][ T1012] do_syscall_64+0x123/0x790 [ 346.979984][ T1012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.979996][ T1012] RIP: 0033:0x7f8ba259e0d9 [ 346.980007][ T1012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.980017][ T1012] RSP: 002b:00007f8ba344f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 346.980028][ T1012] RAX: ffffffffffffffda RBX: 00007f8ba2825fa0 RCX: 00007f8ba259e0d9 [ 346.980035][ T1012] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000004 [ 346.980041][ T1012] RBP: 00007f8ba2635024 R08: 0000000000000000 R09: 0000000000000000 [ 346.980047][ T1012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.980052][ T1012] R13: 00007f8ba2826038 R14: 00007f8ba2825fa0 R15: 00007ffc4330ce58 [ 346.980066][ T1012] [ 347.085085][ T1017] program syz.1.12929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.100279][ T1021] netlink: 80 bytes leftover after parsing attributes in process `syz.6.12932'. [ 347.178180][ T1023] ima: rule for LSM 'u' is undefined [ 347.187632][ T1020] bonding: no command found in bonding_masters - use +ifname or -ifname [ 347.194758][ T1022] ima: policy update completed [ 347.297702][ T1035] Attempt to restore checkpoint with obsolete wellknown handles [ 347.482174][ T1050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12945'. [ 347.485782][ T1050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12945'. [ 347.618200][ T1060] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 347.633546][ T1062] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 347.646195][ T1062] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 347.961669][ T1087] netlink: 'syz.5.12961': attribute type 4 has an invalid length. [ 348.005555][ T1094] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12964'. [ 348.048522][ T1097] input: syz1 as /devices/virtual/input/input42 [ 348.887117][ T1143] Console: switching to colour dummy device 80x25 [ 349.697174][ T1143] ============================================================================= [ 349.699038][ T1143] [ 349.699046][ T1143] ====================================================== [ 349.699051][ T1143] WARNING: possible circular locking dependency detected [ 349.699058][ T1143] syzkaller #0 Tainted: G L [ 349.699065][ T1143] ------------------------------------------------------ [ 349.699070][ T1143] syz.1.12980/1143 is trying to acquire lock: [ 349.699076][ T1143] ffffffff8ecf5cc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 349.699110][ T1143] [ 349.699110][ T1143] but task is already holding lock: [ 349.699114][ T1143] ffff888028d2c618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 349.699143][ T1143] [ 349.699143][ T1143] which lock already depends on the new lock. [ 349.699143][ T1143] [ 349.699147][ T1143] [ 349.699147][ T1143] the existing dependency chain (in reverse order) is: [ 349.699151][ T1143] [ 349.699151][ T1143] -> #3 (&n->list_lock){-.-.}-{3:3}: [ 349.699166][ T1143] lock_acquire+0x1b9/0x370 [ 349.699184][ T1143] _raw_spin_lock_irqsave+0x3a/0x60 [ 349.699200][ T1143] __refill_objects_node+0x120/0xaa0 [ 349.699212][ T1143] refill_objects+0x58/0x410 [ 349.699224][ T1143] __pcs_replace_empty_main+0x372/0x680 [ 349.699235][ T1143] __kmalloc_noprof+0x66b/0x820 [ 349.699248][ T1143] tty_buffer_alloc+0x29f/0x320 [ 349.699267][ T1143] __tty_buffer_request_room+0x129/0x2c0 [ 349.699282][ T1143] __tty_insert_flip_string_flags+0xdb/0x3f0 [ 349.699299][ T1143] tty_insert_flip_string_and_push_buffer+0x9c/0x230 [ 349.699318][ T1143] pty_write+0xd2/0x100 [ 349.699330][ T1143] n_tty_write+0xa9e/0x1160 [ 349.699341][ T1143] file_tty_write.isra.0+0x4d2/0x890 [ 349.699350][ T1143] vfs_write+0x6af/0x1050 [ 349.699362][ T1143] ksys_write+0x12a/0x250 [ 349.699374][ T1143] do_syscall_64+0x123/0x790 [ 349.699385][ T1143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.699403][ T1143] [ 349.699403][ T1143] -> #2 (&port->lock#2){-...}-{3:3}: [ 349.699420][ T1143] lock_acquire+0x1b9/0x370 [ 349.699436][ T1143] _raw_spin_lock_irq_disable+0x5e/0x90 [ 349.699453][ T1143] tty_port_tty_get+0x1f/0xf0 [ 349.699463][ T1143] tty_port_default_wakeup+0x15/0x60 [ 349.699474][ T1143] serial8250_tx_chars+0x68f/0x860 [ 349.699487][ T1143] __start_tx+0x3e4/0x490 [ 349.699496][ T1143] serial8250_start_tx+0x368/0x540 [ 349.699507][ T1143] __uart_start+0x295/0x510 [ 349.699522][ T1143] uart_write+0x211/0xb20 [ 349.699533][ T1143] n_tty_write+0x431/0x1160 [ 349.699544][ T1143] file_tty_write.isra.0+0x4d2/0x890 [ 349.699553][ T1143] redirected_tty_write+0xd4/0x120 [ 349.699562][ T1143] vfs_write+0x6af/0x1050 [ 349.699573][ T1143] ksys_write+0x12a/0x250 [ 349.699585][ T1143] do_syscall_64+0x123/0x790 [ 349.699595][ T1143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.699605][ T1143] [ 349.699605][ T1143] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 349.699618][ T1143] lock_acquire+0x1b9/0x370 [ 349.699631][ T1143] _raw_spin_lock_irqsave+0x3a/0x60 [ 349.699646][ T1143] serial8250_console_write+0x177/0x1a50 [ 349.699658][ T1143] console_flush_one_record+0x78e/0xf10 [ 349.699670][ T1143] console_unlock+0x103/0x260 [ 349.699680][ T1143] vprintk_emit+0x407/0x6b0 [ 349.699690][ T1143] _printk+0xcf/0x110 [ 349.699700][ T1143] register_console.cold+0xc0/0x248 [ 349.699710][ T1143] univ8250_console_init+0x6f/0x80 [ 349.699722][ T1143] console_init+0x3d5/0x5b0 [ 349.699737][ T1143] start_kernel+0x314/0x490 [ 349.699750][ T1143] x86_64_start_reservations+0x24/0x30 [ 349.699762][ T1143] x86_64_start_kernel+0x12b/0x130 [ 349.699773][ T1143] common_startup_64+0x13e/0x158 [ 349.699784][ T1143] [ 349.699784][ T1143] -> #0 (console_owner){-.-.}-{0:0}: [ 349.699797][ T1143] check_prev_add+0xeb/0xe60 [ 349.699810][ T1143] __lock_acquire+0x1492/0x1ec0 [ 349.699825][ T1143] lock_acquire+0x1b9/0x370 [ 349.699840][ T1143] console_lock_spinning_enable+0x72/0x80 [ 349.699851][ T1143] console_flush_one_record+0x737/0xf10 [ 349.699862][ T1143] console_unlock+0x103/0x260 [ 349.699872][ T1143] vprintk_emit+0x407/0x6b0 [ 349.699883][ T1143] _printk+0xcf/0x110 [ 349.699891][ T1143] __slab_bug+0x4f/0xb0 [ 349.699901][ T1143] slab_bug+0x5d/0x80 [ 349.699910][ T1143] __kmem_cache_shutdown.cold+0x39/0x177 [ 349.699922][ T1143] kmem_cache_destroy+0x73/0x190 [ 349.699934][ T1143] virtio_gpu_free_vbufs+0x38/0x80 [ 349.699950][ T1143] virtio_gpu_release+0x5c/0x1c0 [ 349.699960][ T1143] drm_dev_put.part.0+0xbd/0x140 [ 349.699971][ T1143] drm_dev_put+0x1f/0x30 [ 349.699979][ T1143] virtio_dev_remove+0xb8/0x170 [ 349.699989][ T1143] device_remove+0xcb/0x180 [ 349.700000][ T1143] device_release_driver_internal+0x44e/0x620 [ 349.700011][ T1143] bus_remove_device+0x2bc/0x560 [ 349.700026][ T1143] device_del+0x376/0x9b0 [ 349.700034][ T1143] device_unregister+0x1d/0xe0 [ 349.700043][ T1143] unregister_virtio_device+0x39/0x60 [ 349.700052][ T1143] virtio_pci_remove+0x7c/0x110 [ 349.700066][ T1143] pci_device_remove+0xb2/0x1d0 [ 349.700082][ T1143] device_remove+0xcb/0x180 [ 349.700090][ T1143] device_release_driver_internal+0x44e/0x620 [ 349.700101][ T1143] unbind_store+0xf8/0x110 [ 349.700115][ T1143] drv_attr_store+0x74/0xb0 [ 349.700127][ T1143] sysfs_kf_write+0xf2/0x150 [ 349.700142][ T1143] kernfs_fop_write_iter+0x3e0/0x5f0 [ 349.700154][ T1143] vfs_write+0x6af/0x1050 [ 349.700166][ T1143] ksys_write+0x12a/0x250 [ 349.700177][ T1143] do_syscall_64+0x123/0x790 [ 349.700187][ T1143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.700197][ T1143] [ 349.700197][ T1143] other info that might help us debug this: [ 349.700197][ T1143] [ 349.700201][ T1143] Chain exists of: [ 349.700201][ T1143] console_owner --> &port->lock#2 --> &n->list_lock [ 349.700201][ T1143] [ 349.700220][ T1143] Possible unsafe locking scenario: [ 349.700220][ T1143] [ 349.700223][ T1143] CPU0 CPU1 [ 349.700226][ T1143] ---- ---- [ 349.700229][ T1143] lock(&n->list_lock); [ 349.700235][ T1143] lock(&port->lock#2); [ 349.700244][ T1143] lock(&n->list_lock); [ 349.700251][ T1143] lock(console_owner); [ 349.700257][ T1143] [ 349.700257][ T1143] *** DEADLOCK *** [ 349.700257][ T1143] [ 349.700260][ T1143] locks held by syz.1.12980/1143: 10, last CPU#0: [ 349.700268][ T1143] #0: ffff888048a47eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 349.700292][ T1143] #1: ffff888048542460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 349.700319][ T1143] #2: ffff88803a927080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 349.700345][ T1143] #3: ffff888022f281f8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 349.700369][ T1143] #4: ffff88802712e1b0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 349.700399][ T1143] #5: ffffffff8ec7a830 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x190 [ 349.700426][ T1143] #6: ffffffff8ef940c0 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x190 [ 349.700452][ T1143] #7: ffff888028d2c618 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10c/0x330 [ 349.700484][ T1143] #8: ffffffff8edd6100 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 349.700508][ T1143] #9: ffffffff8edd6178 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10 [ 349.700536][ T1143] [ 349.700536][ T1143] stack backtrace: [ 349.700543][ T1143] CPU: 0 UID: 0 PID: 1143 Comm: syz.1.12980 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.700558][ T1143] Tainted: [L]=SOFTLOCKUP [ 349.700562][ T1143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.700569][ T1143] Call Trace: [ 349.700573][ T1143] [ 349.700578][ T1143] dump_stack_lvl+0x100/0x190 [ 349.700595][ T1143] print_circular_bug.cold+0x178/0x1be [ 349.700639][ T1143] check_noncircular+0x146/0x160 [ 349.700658][ T1143] check_prev_add+0xeb/0xe60 [ 349.700674][ T1143] __lock_acquire+0x1492/0x1ec0 [ 349.700694][ T1143] lock_acquire+0x1b9/0x370 [ 349.700709][ T1143] ? console_lock_spinning_enable+0x61/0x80 [ 349.700722][ T1143] ? console_lock_spinning_enable+0x4a/0x80 [ 349.700735][ T1143] console_lock_spinning_enable+0x72/0x80 [ 349.700747][ T1143] ? console_lock_spinning_enable+0x61/0x80 [ 349.700758][ T1143] console_flush_one_record+0x737/0xf10 [ 349.700771][ T1143] ? __pfx_console_flush_one_record+0x10/0x10 [ 349.700785][ T1143] ? is_printk_cpu_sync_owner+0x32/0x40 [ 349.700800][ T1143] console_unlock+0x103/0x260 [ 349.700810][ T1143] ? __pfx_console_unlock+0x10/0x10 [ 349.700823][ T1143] ? do_raw_spin_unlock+0x145/0x1e0 [ 349.700834][ T1143] ? _printk+0xcf/0x110 [ 349.700844][ T1143] vprintk_emit+0x407/0x6b0 [ 349.700856][ T1143] ? __pfx_vprintk_emit+0x10/0x10 [ 349.700870][ T1143] _printk+0xcf/0x110 [ 349.700879][ T1143] ? __pfx__printk+0x10/0x10 [ 349.700891][ T1143] __slab_bug+0x4f/0xb0 [ 349.700903][ T1143] slab_bug+0x5d/0x80 [ 349.700914][ T1143] __kmem_cache_shutdown.cold+0x39/0x177 [ 349.700929][ T1143] kmem_cache_destroy+0x73/0x190 [ 349.700939][ T1143] virtio_gpu_free_vbufs+0x38/0x80 [ 349.700954][ T1143] ? __pfx_virtio_gpu_release+0x10/0x10 [ 349.700965][ T1143] virtio_gpu_release+0x5c/0x1c0 [ 349.700975][ T1143] ? __pfx_virtio_gpu_release+0x10/0x10 [ 349.700986][ T1143] drm_dev_put.part.0+0xbd/0x140 [ 349.700997][ T1143] drm_dev_put+0x1f/0x30 [ 349.701006][ T1143] virtio_dev_remove+0xb8/0x170 [ 349.701016][ T1143] ? __pfx_virtio_dev_remove+0x10/0x10 [ 349.701026][ T1143] device_remove+0xcb/0x180 [ 349.701036][ T1143] device_release_driver_internal+0x44e/0x620 [ 349.701049][ T1143] bus_remove_device+0x2bc/0x560 [ 349.701065][ T1143] ? __pfx_bus_remove_device+0x10/0x10 [ 349.701081][ T1143] ? __pfx_device_remove_attrs+0x10/0x10 [ 349.701099][ T1143] device_del+0x376/0x9b0 [ 349.701109][ T1143] ? __pfx_device_del+0x10/0x10 [ 349.701119][ T1143] ? __pfx___might_resched+0x10/0x10 [ 349.701133][ T1143] ? __pfx_pci_device_is_present+0x10/0x10 [ 349.701147][ T1143] device_unregister+0x1d/0xe0 [ 349.701157][ T1143] unregister_virtio_device+0x39/0x60 [ 349.701168][ T1143] virtio_pci_remove+0x7c/0x110 [ 349.701183][ T1143] pci_device_remove+0xb2/0x1d0 [ 349.701197][ T1143] ? __pfx_pci_device_remove+0x10/0x10 [ 349.701211][ T1143] device_remove+0xcb/0x180 [ 349.701220][ T1143] device_release_driver_internal+0x44e/0x620 [ 349.701234][ T1143] unbind_store+0xf8/0x110 [ 349.701248][ T1143] ? __pfx_unbind_store+0x10/0x10 [ 349.701263][ T1143] drv_attr_store+0x74/0xb0 [ 349.701276][ T1143] ? __pfx_drv_attr_store+0x10/0x10 [ 349.701289][ T1143] sysfs_kf_write+0xf2/0x150 [ 349.701305][ T1143] kernfs_fop_write_iter+0x3e0/0x5f0 [ 349.701317][ T1143] ? __pfx_sysfs_kf_write+0x10/0x10 [ 349.701332][ T1143] vfs_write+0x6af/0x1050 [ 349.701345][ T1143] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 349.701360][ T1143] ? __pfx_vfs_write+0x10/0x10 [ 349.701372][ T1143] ? find_held_lock+0x2b/0x80 [ 349.701388][ T1143] ksys_write+0x12a/0x250 [ 349.701407][ T1143] ? __pfx_ksys_write+0x10/0x10 [ 349.701424][ T1143] do_syscall_64+0x123/0x790 [ 349.701437][ T1143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.701449][ T1143] RIP: 0033:0x7fd3eb59e0d9 [ 349.701461][ T1143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.701472][ T1143] RSP: 002b:00007fd3ec4b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.701483][ T1143] RAX: ffffffffffffffda RBX: 00007fd3eb825fa0 RCX: 00007fd3eb59e0d9 [ 349.701490][ T1143] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000003 [ 349.701496][ T1143] RBP: 00007fd3eb635024 R08: 0000000000000000 R09: 0000000000000000 [ 349.701503][ T1143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.701510][ T1143] R13: 00007fd3eb826038 R14: 00007fd3eb825fa0 R15: 00007ffecf4cf648 [ 349.701520][ T1143] [ 350.067660][ T1143] BUG virtio-gpu-vbufs (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 350.071026][ T1143] ----------------------------------------------------------------------------- [ 350.071026][ T1143] [ 350.074497][ T1143] Object 0xffff88802bb0c000 @offset=0 [ 350.076198][ T1143] Object 0xffff88802bb0c118 @offset=280 [ 350.077955][ T1143] Object 0xffff88802bb0c230 @offset=560 [ 350.079695][ T1143] Object 0xffff88802bb0c348 @offset=840 [ 350.081328][ T1143] Object 0xffff88802bb0cc08 @offset=3080 [ 350.083083][ T1143] Object 0xffff88802bb0cd20 @offset=3360 [ 350.084859][ T1143] Object 0xffff88802bb0ce38 @offset=3640 [ 350.086629][ T1143] Object 0xffff88802bb0d3b0 @offset=5040 [ 350.088399][ T1143] Object 0xffff88802bb0d4c8 @offset=5320 [ 350.090172][ T1143] Object 0xffff88802bb0dea0 @offset=7840 [ 350.091950][ T1143] Slab 0xffffea0000aec300 objects=29 used=10 fp=0xffff88802bb0d810 flags=0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 350.096412][ T1143] ------------[ cut here ]------------ [ 350.098142][ T1143] 1 [ 350.098148][ T1143] WARNING: mm/slub.c:1245 at __slab_err+0x15/0x20, CPU#0: syz.1.12980/1143 [ 350.101650][ T1143] Modules linked in: [ 350.102903][ T1143] CPU: 0 UID: 0 PID: 1143 Comm: syz.1.12980 Tainted: G B L syzkaller #0 PREEMPT(full) [ 350.106273][ T1143] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 350.108008][ T1143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.111162][ T1143] RIP: 0010:__slab_err+0x15/0x20 [ 350.112741][ T1143] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 9c 14 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 350.118764][ T1143] RSP: 0018:ffffc9000378f808 EFLAGS: 00010046 [ 350.120683][ T1143] RAX: 0000000000080000 RBX: ffffc9000378f858 RCX: ffffc90025241000 [ 350.123149][ T1143] RDX: 0000000000080000 RSI: ffffffff81c769bd RDI: ffff8880377b8000 [ 350.125640][ T1143] RBP: ffff888028d2c618 R08: 0000000000000007 R09: 0000000000000000 [ 350.128111][ T1143] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0 [ 350.130606][ T1143] R13: ffff88802bb0dfb8 R14: ffff888028d2c600 R15: ffffea0000aec300 [ 350.133101][ T1143] FS: 00007fd3ec4b16c0(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000 [ 350.135881][ T1143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.137940][ T1143] CR2: 0000001b2e318ff8 CR3: 000000004b5f1000 CR4: 0000000000352ef0 [ 350.140431][ T1143] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.142909][ T1143] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 350.145387][ T1143] Call Trace: [ 350.146457][ T1143] [ 350.147408][ T1143] __kmem_cache_shutdown.cold+0x16e/0x177 [ 350.149217][ T1143] kmem_cache_destroy+0x73/0x190 [ 350.150796][ T1143] virtio_gpu_free_vbufs+0x38/0x80 [ 350.152422][ T1143] ? __pfx_virtio_gpu_release+0x10/0x10 [ 350.154171][ T1143] virtio_gpu_release+0x5c/0x1c0 [ 350.155696][ T1143] ? __pfx_virtio_gpu_release+0x10/0x10 [ 350.157463][ T1143] drm_dev_put.part.0+0xbd/0x140 [ 350.159032][ T1143] drm_dev_put+0x1f/0x30 [ 350.160379][ T1143] virtio_dev_remove+0xb8/0x170 [ 350.161930][ T1143] ? __pfx_virtio_dev_remove+0x10/0x10 [ 350.163654][ T1143] device_remove+0xcb/0x180 [ 350.165077][ T1143] device_release_driver_internal+0x44e/0x620 [ 350.166992][ T1143] bus_remove_device+0x2bc/0x560 [ 350.168566][ T1143] ? __pfx_bus_remove_device+0x10/0x10 [ 350.170295][ T1143] ? __pfx_device_remove_attrs+0x10/0x10 [ 350.172074][ T1143] device_del+0x376/0x9b0 [ 350.173458][ T1143] ? __pfx_device_del+0x10/0x10 [ 350.174996][ T1143] ? __pfx___might_resched+0x10/0x10 [ 350.176682][ T1143] ? __pfx_pci_device_is_present+0x10/0x10 [ 350.178525][ T1143] device_unregister+0x1d/0xe0 [ 350.180041][ T1143] unregister_virtio_device+0x39/0x60 [ 350.181680][ T1143] virtio_pci_remove+0x7c/0x110 [ 350.183227][ T1143] pci_device_remove+0xb2/0x1d0 [ 350.184784][ T1143] ? __pfx_pci_device_remove+0x10/0x10 [ 350.186505][ T1143] device_remove+0xcb/0x180 [ 350.187946][ T1143] device_release_driver_internal+0x44e/0x620 [ 350.189863][ T1143] unbind_store+0xf8/0x110 [ 350.191290][ T1143] ? __pfx_unbind_store+0x10/0x10 [ 350.192901][ T1143] drv_attr_store+0x74/0xb0 [ 350.194375][ T1143] ? __pfx_drv_attr_store+0x10/0x10 [ 350.196018][ T1143] sysfs_kf_write+0xf2/0x150 [ 350.197504][ T1143] kernfs_fop_write_iter+0x3e0/0x5f0 [ 350.199171][ T1143] ? __pfx_sysfs_kf_write+0x10/0x10 [ 350.200862][ T1143] vfs_write+0x6af/0x1050 [ 350.202221][ T1143] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 350.204071][ T1143] ? __pfx_vfs_write+0x10/0x10 [ 350.205598][ T1143] ? find_held_lock+0x2b/0x80 [ 350.207093][ T1143] ksys_write+0x12a/0x250 [ 350.208472][ T1143] ? __pfx_ksys_write+0x10/0x10 [ 350.210023][ T1143] do_syscall_64+0x123/0x790 [ 350.211502][ T1143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.213368][ T1143] RIP: 0033:0x7fd3eb59e0d9 [ 350.214790][ T1143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.220772][ T1143] RSP: 002b:00007fd3ec4b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.223375][ T1143] RAX: ffffffffffffffda RBX: 00007fd3eb825fa0 RCX: 00007fd3eb59e0d9 [ 350.225860][ T1143] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000003 [ 350.228325][ T1143] RBP: 00007fd3eb635024 R08: 0000000000000000 R09: 0000000000000000 [ 350.230808][ T1143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.233288][ T1143] R13: 00007fd3eb826038 R14: 00007fd3eb825fa0 R15: 00007ffecf4cf648 [ 350.235765][ T1143] [ 350.236767][ T1143] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 350.239042][ T1143] CPU: 0 UID: 0 PID: 1143 Comm: syz.1.12980 Tainted: G B L syzkaller #0 PREEMPT(full) [ 350.242409][ T1143] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 350.244152][ T1143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.247271][ T1143] Call Trace: [ 350.248332][ T1143] [ 350.249256][ T1143] dump_stack_lvl+0x100/0x190 [ 350.250759][ T1143] vpanic+0x553/0x970 [ 350.252027][ T1143] ? __pfx_vpanic+0x10/0x10 [ 350.253456][ T1143] ? lock_release+0x24d/0x310 [ 350.254961][ T1143] panic+0xd1/0xe0 [ 350.256148][ T1143] ? __pfx_panic+0x10/0x10 [ 350.257541][ T1143] check_panic_on_warn.cold+0x19/0x34 [ 350.259222][ T1143] ? __slab_err+0x15/0x20 [ 350.260590][ T1143] __warn.cold+0x191/0x318 [ 350.262019][ T1143] __report_bug+0x30f/0x440 [ 350.263457][ T1143] ? __slab_err+0x15/0x20 [ 350.264833][ T1143] ? __pfx___report_bug+0x10/0x10 [ 350.266403][ T1143] ? irq_work_queue+0xd1/0x100 [ 350.267913][ T1143] ? __wake_up_klogd+0xe5/0x140 [ 350.269458][ T1143] ? vprintk_emit+0x1c9/0x6b0 [ 350.270896][ T1143] ? __pfx_vprintk_emit+0x10/0x10 [ 350.272437][ T1143] ? __slab_err+0x15/0x20 [ 350.273819][ T1143] report_bug+0xb3/0x220 [ 350.275198][ T1143] ? __slab_err+0x15/0x20 [ 350.276573][ T1143] handle_bug+0x16a/0x2a0 [ 350.277952][ T1143] exc_invalid_op+0x17/0x50 [ 350.279384][ T1143] asm_exc_invalid_op+0x1a/0x20 [ 350.280883][ T1143] RIP: 0010:__slab_err+0x15/0x20 [ 350.282364][ T1143] Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b fd ff ff be 01 00 00 00 bf 05 00 00 00 e8 9c 14 a3 00 90 <0f> 0b 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 350.287977][ T1143] RSP: 0018:ffffc9000378f808 EFLAGS: 00010046 [ 350.289815][ T1143] RAX: 0000000000080000 RBX: ffffc9000378f858 RCX: ffffc90025241000 [ 350.292151][ T1143] RDX: 0000000000080000 RSI: ffffffff81c769bd RDI: ffff8880377b8000 [ 350.294625][ T1143] RBP: ffff888028d2c618 R08: 0000000000000007 R09: 0000000000000000 [ 350.297093][ T1143] R10: 0000000000000000 R11: 0000000062616c53 R12: 0000000000001ea0 [ 350.299552][ T1143] R13: ffff88802bb0dfb8 R14: ffff888028d2c600 R15: ffffea0000aec300 [ 350.302011][ T1143] ? add_taint+0x6d/0xb0 [ 350.303357][ T1143] ? __slab_err+0x14/0x20 [ 350.304747][ T1143] __kmem_cache_shutdown.cold+0x16e/0x177 [ 350.306636][ T1143] kmem_cache_destroy+0x73/0x190 [ 350.308200][ T1143] virtio_gpu_free_vbufs+0x38/0x80 [ 350.309836][ T1143] ? __pfx_virtio_gpu_release+0x10/0x10 [ 350.311583][ T1143] virtio_gpu_release+0x5c/0x1c0 [ 350.313125][ T1143] ? __pfx_virtio_gpu_release+0x10/0x10 [ 350.314877][ T1143] drm_dev_put.part.0+0xbd/0x140 [ 350.316440][ T1143] drm_dev_put+0x1f/0x30 [ 350.317740][ T1143] virtio_dev_remove+0xb8/0x170 [ 350.319219][ T1143] ? __pfx_virtio_dev_remove+0x10/0x10 [ 350.320904][ T1143] device_remove+0xcb/0x180 [ 350.322337][ T1143] device_release_driver_internal+0x44e/0x620 [ 350.324265][ T1143] bus_remove_device+0x2bc/0x560 [ 350.325823][ T1143] ? __pfx_bus_remove_device+0x10/0x10 [ 350.327502][ T1143] ? __pfx_device_remove_attrs+0x10/0x10 [ 350.329272][ T1143] device_del+0x376/0x9b0 [ 350.330652][ T1143] ? __pfx_device_del+0x10/0x10 [ 350.332196][ T1143] ? __pfx___might_resched+0x10/0x10 [ 350.333906][ T1143] ? __pfx_pci_device_is_present+0x10/0x10 [ 350.335743][ T1143] device_unregister+0x1d/0xe0 [ 350.337231][ T1143] unregister_virtio_device+0x39/0x60 [ 350.338872][ T1143] virtio_pci_remove+0x7c/0x110 [ 350.340416][ T1143] pci_device_remove+0xb2/0x1d0 [ 350.341966][ T1143] ? __pfx_pci_device_remove+0x10/0x10 [ 350.343635][ T1143] device_remove+0xcb/0x180 [ 350.345030][ T1143] device_release_driver_internal+0x44e/0x620 [ 350.346893][ T1143] unbind_store+0xf8/0x110 [ 350.348247][ T1143] ? __pfx_unbind_store+0x10/0x10 [ 350.349784][ T1143] drv_attr_store+0x74/0xb0 [ 350.351185][ T1143] ? __pfx_drv_attr_store+0x10/0x10 [ 350.352766][ T1143] sysfs_kf_write+0xf2/0x150 [ 350.354204][ T1143] kernfs_fop_write_iter+0x3e0/0x5f0 [ 350.355802][ T1143] ? __pfx_sysfs_kf_write+0x10/0x10 [ 350.357407][ T1143] vfs_write+0x6af/0x1050 [ 350.358750][ T1143] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 350.360499][ T1143] ? __pfx_vfs_write+0x10/0x10 [ 350.361978][ T1143] ? find_held_lock+0x2b/0x80 [ 350.363429][ T1143] ksys_write+0x12a/0x250 [ 350.364780][ T1143] ? __pfx_ksys_write+0x10/0x10 [ 350.366278][ T1143] do_syscall_64+0x123/0x790 [ 350.367689][ T1143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.369487][ T1143] RIP: 0033:0x7fd3eb59e0d9 [ 350.370857][ T1143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.376524][ T1143] RSP: 002b:00007fd3ec4b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.379033][ T1143] RAX: ffffffffffffffda RBX: 00007fd3eb825fa0 RCX: 00007fd3eb59e0d9 [ 350.381416][ T1143] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000003 [ 350.383850][ T1143] RBP: 00007fd3eb635024 R08: 0000000000000000 R09: 0000000000000000 [ 350.386255][ T1143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.388650][ T1143] R13: 00007fd3eb826038 R14: 00007fd3eb825fa0 R15: 00007ffecf4cf648 [ 350.391113][ T1143] [ 350.392580][ T1143] Kernel Offset: disabled [ 350.393982][ T1143] Rebooting in 86400 seconds..