last executing test programs: 1m16.318505852s ago: executing program 0 (id=5609): unshare(0x2c020400) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') fstat(r0, &(0x7f0000000240)) 1m16.26262909s ago: executing program 0 (id=5611): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r0, 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x2) 1m16.247112779s ago: executing program 0 (id=5613): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r0, 0x804c4700, 0xfffffffffffffffe) 1m16.209221133s ago: executing program 0 (id=5615): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m16.173394114s ago: executing program 0 (id=5617): r0 = fanotify_init(0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x5a) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.801994788s ago: executing program 0 (id=5625): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@bridge_newneigh={0x3c, 0x1c, 0x114236db3b607435, 0x70bd24, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x40, 0xa2, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) 1m15.714643565s ago: executing program 32 (id=5625): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@bridge_newneigh={0x3c, 0x1c, 0x114236db3b607435, 0x70bd24, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x40, 0xa2, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) 16.332780111s ago: executing program 3 (id=7233): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x130}}, 0x0) 16.332470677s ago: executing program 3 (id=7234): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 16.271767913s ago: executing program 3 (id=7236): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 16.271376766s ago: executing program 3 (id=7238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000000)={0x24, r1, 0xbb34a96d50fa80b5, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) 16.202529474s ago: executing program 3 (id=7240): setresuid(0x0, 0xee01, 0x0) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x65, 0x10}, 0xb, 0x8000, 0xb0f0, 0x2, 0x0, 0x0, 0x6}) shmctl$SHM_UNLOCK(r0, 0xc) 16.17821413s ago: executing program 3 (id=7242): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x2, 0xffffffff, 0x5, {0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 1.833470796s ago: executing program 1 (id=7608): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) close(0x3) 1.651676157s ago: executing program 1 (id=7611): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1.583707853s ago: executing program 1 (id=7614): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x1, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000002240)={0x38, 0x0, 0x0, [{0x2, 0xf, 0xa, 0x8000000, '/dev/fuse\x00'}]}, 0x38) 1.483820617s ago: executing program 1 (id=7617): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r0, 0x5452, &(0x7f0000001840)=0x5d4) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x5392, &(0x7f0000000000)={@lba=0x100000, 0x0, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x0) 1.409633924s ago: executing program 1 (id=7620): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x5) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.321870752s ago: executing program 2 (id=7622): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 1.321737692s ago: executing program 1 (id=7623): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000b00)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0xc, r1}) 1.209309054s ago: executing program 2 (id=7626): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0}, {@any, 0x7ffffe}, 0x400, "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"}, 0x418}) 1.083738711s ago: executing program 2 (id=7627): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x545c, &(0x7f00000002c0)) 1.083593644s ago: executing program 33 (id=7242): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x2, 0xffffffff, 0x5, {0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 572.177083ms ago: executing program 4 (id=7635): pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) 514.649584ms ago: executing program 4 (id=7636): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x25dfdc00, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0x5792b24e}, 0xfffffffb, 0x1, 0x0, 0x3, 0x7, 0x12, 0x4, 0x1b, 0x0, 0x3d76d621, {0x0, 0x0, 0x0, 0x408000, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x8040) 383.25687ms ago: executing program 4 (id=7637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/make-it-fail\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 348.41735ms ago: executing program 4 (id=7638): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r2, &(0x7f00000001c0), 0x0}, 0x20) 232.33809ms ago: executing program 4 (id=7639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x571, 0x0, 0x6}]}) 223.258748ms ago: executing program 2 (id=7640): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$trusted_overlay_origin(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 125.197282ms ago: executing program 2 (id=7641): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv4/route/flush\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) 8.018038ms ago: executing program 2 (id=7642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0) write(r0, &(0x7f0000000940)='1', 0x1) 0s ago: executing program 4 (id=7643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="736573736e616d653d7331206465766963655f706174683d2f6465762f72616d3020706174683d69703a3132372e302e302e315cdf903f3a85629410457af1eedc1b5b87feb6d6dff9cddbb5ac1cb03e2c", 0x51) kernel console output (not intermixed with test programs): ceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 191.877303][ T42] audit: type=1400 audit(2000000023.129:36931): avc: denied { execheap } for pid=17910 comm="syz.2.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 191.947640][T15767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.947742][T15767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.214348][T15767] bridge_slave_1: left allmulticast mode [ 192.217946][T15767] bridge_slave_1: left promiscuous mode [ 192.223746][T15767] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.233543][T15767] bridge_slave_0: left allmulticast mode [ 192.233633][T15767] bridge_slave_0: left promiscuous mode [ 192.233842][T15767] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.254726][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 192.411607][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 192.412164][ T35] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 192.413107][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.413128][ T35] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 192.413146][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.413164][ T35] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 192.413180][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 192.413212][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.426300][ T35] usb 6-1: config 0 descriptor?? [ 192.596867][T17949] [U]  [ 192.643310][ T35] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 192.705609][T17953] netlink: 340 bytes leftover after parsing attributes in process `syz.2.5656'. [ 192.738198][T15767] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.751123][T15767] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.770723][T15767] .` (unregistering): Released all slaves [ 192.781839][T15767] bond0 (unregistering): Released all slaves [ 192.811206][T17881] xfrm0 speed is unknown, defaulting to 1000 [ 192.884748][T10826] syz0: Port: 1 Link DOWN [ 192.908377][T15767] : left promiscuous mode [ 193.171676][ T5733] Bluetooth: hci1: command tx timeout [ 193.212176][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 193.291069][T17973] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 193.424577][T17881] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.424871][T17881] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.425008][T17881] bridge_slave_0: entered allmulticast mode [ 193.432972][T17881] bridge_slave_0: entered promiscuous mode [ 193.438717][T17881] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.438798][T17881] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.438859][T17881] bridge_slave_1: entered allmulticast mode [ 193.439621][T17881] bridge_slave_1: entered promiscuous mode [ 193.511175][T17881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.542637][T17881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.543810][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 193.636392][T18001] zram0: detected capacity change from 0 to 8 [ 193.645147][T17881] team0: Port device team_slave_0 added [ 193.658887][T17881] team0: Port device team_slave_1 added [ 193.711874][T15767] hsr_slave_0: left promiscuous mode [ 193.714385][T15767] hsr_slave_1: left promiscuous mode [ 193.736068][T15767] veth1_macvtap: left promiscuous mode [ 193.736150][T15767] veth0_macvtap: left promiscuous mode [ 193.920909][T15767] team0 (unregistering): Port device team_slave_1 removed [ 193.931241][T15767] team0 (unregistering): Port device team_slave_0 removed [ 193.937768][ T1172] smc: removing ib device syz0 [ 194.022897][T17881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.022936][T17881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.022973][T17881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.023266][T18007] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5671'. [ 194.057998][T17881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.058052][T17881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.058087][T17881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.158759][T17881] hsr_slave_0: entered promiscuous mode [ 194.164170][T17881] hsr_slave_1: entered promiscuous mode [ 194.164810][T17881] debugfs: 'hsr0' already exists in 'hsr' [ 194.164828][T17881] Cannot create hsr debugfs directory [ 194.189321][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 194.189417][ T42] audit: type=1400 audit(2000000025.439:36941): avc: denied { write } for pid=18019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.316827][ T42] audit: type=1400 audit(2000000025.569:36942): avc: denied { write } for pid=18027 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.319565][T18029] comedi comedi3: pcl711: I/O port conflict (0x100,16) [ 194.349836][ T1172] smbdirect: ib_dev[syz0] removed [ 194.373998][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.451156][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4 [ 194.583797][T18038] openvswitch: netlink: VLAN attribute unexpected. [ 194.675115][T17881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.685491][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.685975][T17881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.700653][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.701218][T17881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.729712][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.733634][T17881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.737612][ T42] audit: type=1400 audit(2000000025.989:36943): avc: denied { write } for pid=18042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.738770][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.823609][ T42] audit: type=1400 audit(2000000026.079:36944): avc: denied { write } for pid=18053 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.834088][T17881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.864450][T17881] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.870473][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.870628][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.884843][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.884916][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.944331][ T5441] 8021q: adding VLAN 0 to HW filter on device eth5 [ 195.069939][T17887] usb 6-1: USB disconnect, device number 6 [ 195.134700][T17887] usblp0: removed [ 195.157454][T18073] erspan0: entered promiscuous mode [ 195.253518][ T5733] Bluetooth: hci1: command tx timeout [ 195.398104][T17881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.713317][T17881] veth0_vlan: entered promiscuous mode [ 195.719457][T17881] veth1_vlan: entered promiscuous mode [ 195.753307][T17881] veth0_macvtap: entered promiscuous mode [ 195.764158][T17881] veth1_macvtap: entered promiscuous mode [ 195.776912][T17881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.790407][T17881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.803818][T17887] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 195.872132][T15767] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.872191][T15767] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.876907][T15767] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.876933][T15767] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.925362][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.925456][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.951699][T17887] usb 7-1: Using ep0 maxpacket: 32 [ 195.954713][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.954784][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.962852][T17887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 195.962918][T17887] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 195.969459][T17887] usb 7-1: string descriptor 0 read error: -22 [ 195.969551][T17887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.978382][ T42] audit: type=1400 audit(2000000027.229:36945): avc: denied { mounton } for pid=17881 comm="syz-executor" path="/syzkaller.0RM4BK/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 195.980078][T17887] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 195.980104][T17887] dw2102: su3000_power_ctrl: 1, initialized 0 [ 195.980116][T17887] dvb-usb: bulk message failed: -22 (2/0) [ 195.995213][T17887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.995656][T17887] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 195.995680][T17887] usb 7-1: media controller created [ 195.995693][T17887] dvb-usb: bulk message failed: -22 (6/0) [ 195.995700][T17887] dw2102: i2c transfer failed. [ 195.995706][T17887] dvb-usb: bulk message failed: -22 (6/0) [ 195.995712][T17887] dw2102: i2c transfer failed. [ 195.995717][T17887] dvb-usb: bulk message failed: -22 (6/0) [ 195.995723][T17887] dw2102: i2c transfer failed. [ 195.995728][T17887] dvb-usb: bulk message failed: -22 (6/0) [ 195.995734][T17887] dw2102: i2c transfer failed. [ 195.995740][T17887] dvb-usb: bulk message failed: -22 (6/0) [ 195.995746][T17887] dw2102: i2c transfer failed. [ 195.995751][T17887] dvb-usb: bulk message failed: -22 (6/0) [ 195.995757][T17887] dw2102: i2c transfer failed. [ 195.995760][T17887] dvb-usb: MAC address: 02:02:02:02:02:02 [ 196.004751][T17887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.012766][ T42] audit: type=1400 audit(2000000027.269:36946): avc: denied { lock } for pid=18141 comm="syz.1.5716" path="socket:[53481]" dev="sockfs" ino=53481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.018878][T17887] dvb-usb: bulk message failed: -22 (3/0) [ 196.018895][T17887] dw2102: command 0x0e transfer failed. [ 196.018901][T17887] dvb-usb: bulk message failed: -22 (3/0) [ 196.018911][T17887] dw2102: command 0x0e transfer failed. [ 196.021346][ T42] audit: type=1400 audit(2000000027.269:36947): avc: denied { mounton } for pid=17881 comm="syz-executor" path="/syzkaller.0RM4BK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 196.025635][ T42] audit: type=1400 audit(2000000027.279:36948): avc: denied { mounton } for pid=17881 comm="syz-executor" path="/syzkaller.0RM4BK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=53483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 196.032224][ T42] audit: type=1400 audit(2000000027.289:36949): avc: denied { mounton } for pid=17881 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 196.032984][ T42] audit: type=1400 audit(2000000027.289:36950): avc: denied { mounton } for pid=17881 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 196.307415][T18156] netlink: 'syz.4.5722': attribute type 29 has an invalid length. [ 196.308434][T18156] netlink: 'syz.4.5722': attribute type 29 has an invalid length. [ 196.331650][T17887] dvb-usb: bulk message failed: -22 (3/0) [ 196.331693][T17887] dw2102: command 0x0e transfer failed. [ 196.331725][T17887] dvb-usb: bulk message failed: -22 (3/0) [ 196.331750][T17887] dw2102: command 0x0e transfer failed. [ 196.331771][T17887] dvb-usb: bulk message failed: -22 (1/0) [ 196.331796][T17887] dw2102: command 0x51 transfer failed. [ 196.332706][T18117] dvb-usb: bulk message failed: -22 (31/0) [ 196.332721][T18117] dw2102: i2c transfer failed. [ 196.371971][T17887] DVB: Unable to find symbol ds3000_attach() [ 196.372029][T17887] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 196.442045][T17887] rc_core: IR keymap rc-su3000 not found [ 196.442097][T17887] Registered IR keymap rc-empty [ 196.442626][T17887] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 196.443618][T17887] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input20 [ 196.447426][T17887] dvb-usb: schedule remote query interval to 150 msecs. [ 196.447439][T17887] dw2102: su3000_power_ctrl: 0, initialized 1 [ 196.447446][T17887] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 196.450249][T17887] usb 7-1: USB disconnect, device number 6 [ 196.527655][T17887] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 196.536339][T18169] netlink: 'syz.4.5727': attribute type 32 has an invalid length. [ 196.556805][T18169] bond1: Setting coupled_control to off (0) [ 196.556873][T18169] bond1: entered promiscuous mode [ 196.848046][T18189] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.901901][T18192] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 196.905528][T18192] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 196.906897][T18192] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 197.210983][T18221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5749'. [ 197.307398][T18231] ima: policy update failed [ 197.343896][ T5733] Bluetooth: hci1: command tx timeout [ 197.434098][T18244] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 197.544602][T18249] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.545247][T18249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.545512][T18249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 197.586408][T18249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 197.633144][T18249] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.633261][T18249] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.658725][T18249] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.675535][T18263] Context (ID=0x1) not attached to queue pair (handle=0x2:0x80009) [ 197.851924][T18288] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5780'. [ 198.205845][ T5832] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 198.352141][ T5832] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 198.352951][ T5832] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.352974][ T5832] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.354664][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.354682][ T5832] usb 7-1: Product: syz [ 198.354693][ T5832] usb 7-1: Manufacturer: syz [ 198.354704][ T5832] usb 7-1: SerialNumber: syz [ 199.171737][ T5081] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 199.223762][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 199.226078][ T42] audit: type=1400 audit(2000000030.469:36960): avc: denied { mount } for pid=18370 comm="syz.1.5817" name="/" dev="autofs" ino=54623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 199.285375][ T66] block nbd4: Receive control failed (result -32) [ 199.285804][T18342] block nbd4: shutting down sockets [ 199.331843][ T5081] usb 8-1: Using ep0 maxpacket: 8 [ 199.334072][ T5081] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.337619][ T5081] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 199.337653][ T5081] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 199.337676][ T5081] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.337701][ T5081] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.337740][ T5081] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.460013][T18386] jffs2: notice: (18386) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 199.464920][ T42] audit: type=1400 audit(2000000030.719:36961): avc: denied { add_name } for pid=18384 comm="syz.4.5823" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.465101][ T42] audit: type=1400 audit(2000000030.719:36962): avc: denied { create } for pid=18384 comm="syz.4.5823" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 199.472884][ T42] audit: type=1400 audit(2000000030.729:36963): avc: denied { read write open } for pid=18384 comm="syz.4.5823" path="/36/mnt/file2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 199.553012][ T5081] usb 8-1: GET_CAPABILITIES returned 0 [ 199.553093][ T5081] usbtmc 8-1:16.0: can't read capabilities [ 199.571859][ T5733] Bluetooth: hci2: command 0x0401 tx timeout [ 199.571961][ T5733] Bluetooth: hci3: command 0x0406 tx timeout [ 199.577498][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5827'. [ 199.580930][T18394] hsr_slave_0: left promiscuous mode [ 199.583992][T18394] hsr_slave_1: left promiscuous mode [ 199.651595][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.663193][ T5825] usb 7-1: USB disconnect, device number 7 [ 199.702793][ T42] audit: type=1400 audit(2000000030.959:36964): avc: denied { name_bind } for pid=18400 comm="syz.1.5831" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 199.757031][T17887] usb 8-1: USB disconnect, device number 7 [ 199.780255][T18405] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 199.863473][T18409] team0: No ports can be present during mode change [ 200.013336][T18418] netlink: 'syz.4.5839': attribute type 16 has an invalid length. [ 200.013389][T18418] netlink: 'syz.4.5839': attribute type 3 has an invalid length. [ 200.013430][T18418] netlink: 'syz.4.5839': attribute type 1 has an invalid length. [ 200.013439][T18418] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5839'. [ 200.352022][T18440] bridge_slave_0: invalid flags given to default FDB implementation [ 200.583902][ T42] audit: type=1400 audit(2000000031.839:36965): avc: denied { search } for pid=18454 comm="syz.4.5855" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 200.584244][ T42] audit: type=1400 audit(2000000031.839:36966): avc: denied { read write } for pid=18454 comm="syz.4.5855" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 200.584600][ T42] audit: type=1400 audit(2000000031.839:36967): avc: denied { open } for pid=18454 comm="syz.4.5855" path="/59/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 200.590187][T18456] nfsd: exp_rootfh path not found ӥ)3 @$/ [ 200.609879][ T42] audit: type=1400 audit(2000000031.869:36968): avc: denied { unmount } for pid=17881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 200.785588][ T42] audit: type=1326 audit(2000000032.039:36969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18467 comm="syz.1.5861" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8b9e159 code=0x7ffc0000 [ 200.848412][T18474] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 200.848465][T18474] syzkaller1: owner set to 805 [ 201.067941][T18430] ceph: No mds server is up or the cluster is laggy [ 201.241971][T18492] Failed to get privilege flags for destination (handle=0x2:0x1) [ 201.295780][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5876'. [ 201.533969][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 201.541984][ T10] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 201.651648][ T65] Bluetooth: hci2: command 0x0401 tx timeout [ 201.741648][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.217944][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5894'. [ 202.299410][T18550] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5897'. P- H @[ 202.610300][T18568] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5906'. [ 203.263745][T18595] zram0: detected capacity change from 8 to 0 [ 203.348960][T18599] sd 0:0:0:0: PR command failed: 1026 [ 203.349063][T18599] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 203.349131][T18599] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 203.381652][ T5805] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 203.392597][T18602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5921'. [ 203.532174][ T5805] usb 8-1: Using ep0 maxpacket: 32 [ 203.535804][ T5805] usb 8-1: unable to get BOS descriptor or descriptor too short [ 203.535898][ T5805] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 203.549510][ T5805] usb 8-1: string descriptor 0 read error: -22 [ 203.552670][ T5805] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.562377][ T5805] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 203.565907][ T5805] dw2102: su3000_power_ctrl: 1, initialized 0 [ 203.569325][ T5805] dvb-usb: bulk message failed: -22 (2/0) [ 203.580968][ T5805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.591462][ T5805] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 203.596474][ T5805] usb 8-1: media controller created [ 203.596545][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 203.596574][ T5805] dw2102: i2c transfer failed. [ 203.596603][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 203.596633][ T5805] dw2102: i2c transfer failed. [ 203.596660][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 203.596688][ T5805] dw2102: i2c transfer failed. [ 203.596714][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 203.596742][ T5805] dw2102: i2c transfer failed. [ 203.596769][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 203.596796][ T5805] dw2102: i2c transfer failed. [ 203.596822][ T5805] dvb-usb: bulk message failed: -22 (6/0) [ 203.596836][ T5805] dw2102: i2c transfer failed. [ 203.596842][ T5805] dvb-usb: MAC address: 02:02:02:02:02:02 [ 203.605914][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.622271][ T5805] dvb-usb: bulk message failed: -22 (3/0) [ 203.622291][ T5805] dw2102: command 0x0e transfer failed. [ 203.622299][ T5805] dvb-usb: bulk message failed: -22 (3/0) [ 203.622311][ T5805] dw2102: command 0x0e transfer failed. [ 203.709158][T18619] xfrm0 speed is unknown, defaulting to 1000 [ 203.732805][ T65] Bluetooth: hci2: command 0x0401 tx timeout [ 203.821675][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.931696][ T5805] dvb-usb: bulk message failed: -22 (3/0) [ 203.933494][ T5805] dw2102: command 0x0e transfer failed. [ 203.933501][ T5805] dvb-usb: bulk message failed: -22 (3/0) [ 203.933508][ T5805] dw2102: command 0x0e transfer failed. [ 203.933512][ T5805] dvb-usb: bulk message failed: -22 (1/0) [ 203.933518][ T5805] dw2102: command 0x51 transfer failed. [ 203.933641][T18589] dw2102: i2c wr: len=66 is too big! [ 203.933641][T18589] [ 203.993641][ T5805] DVB: Unable to find symbol ds3000_attach() [ 203.993699][ T5805] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 204.063007][ T5805] rc_core: IR keymap rc-su3000 not found [ 204.063076][ T5805] Registered IR keymap rc-empty [ 204.072718][ T5805] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 204.076990][ T5805] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input21 [ 204.081293][ T5805] dvb-usb: schedule remote query interval to 150 msecs. [ 204.081374][ T5805] dw2102: su3000_power_ctrl: 0, initialized 1 [ 204.081414][ T5805] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 204.092684][ T5805] usb 8-1: USB disconnect, device number 8 [ 204.153125][ T5805] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 204.236316][T18662] sch_fq: defrate 0 ignored. [ 204.279940][T18666] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 204.374019][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 204.374105][ T42] audit: type=1400 audit(2000000035.629:36982): avc: denied { write } for pid=18669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.399758][T18678] binder: BINDER_SET_CONTEXT_MGR already set [ 204.399829][T18678] binder: 18677:18678 ioctl 4018620d 200000000040 returned -16 [ 204.401591][ T42] audit: type=1400 audit(2000000035.649:36983): avc: denied { read write } for pid=18676 comm="syz.2.5953" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 204.401987][ T42] audit: type=1400 audit(2000000035.659:36984): avc: denied { open } for pid=18676 comm="syz.2.5953" path="/1495/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 204.425689][ T42] audit: type=1400 audit(2000000035.669:36985): avc: denied { write } for pid=18680 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.577181][T18694] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 204.577279][ T42] audit: type=1400 audit(2000000035.829:36986): avc: denied { ioctl } for pid=18693 comm="syz.3.5961" path="/1517/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 204.662095][ T42] audit: type=1807 audit(2000000035.909:36987): action=measure func=FILE_CHECK obj_type=unconfined_t res=1 [ 204.664646][T18702] ima: policy update completed [ 204.664854][ T42] audit: type=1802 audit(2000000035.919:36988): pid=18702 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.3.5964" res=1 errno=0 [ 204.889229][T18722] team0: Device gtp0 is of different type [ 204.892548][ T5832] e1000 0000:00:06.0 eth0: Reset adapter [ 204.930218][ T42] audit: type=1400 audit(2000000036.179:36989): avc: denied { write } for pid=18724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.000009][ T42] audit: type=1400 audit(2000000036.249:36990): avc: denied { write } for pid=18735 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.124872][ T42] audit: type=1400 audit(2000000036.379:36991): avc: denied { write } for pid=18737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.092906][ T5832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 209.671670][T18779] tipc: Started in network mode [ 209.671744][T18779] tipc: Node identity ac14140f, cluster identity 4711 [ 209.673708][T18779] tipc: New replicast peer: 172.30.0.5 [ 209.673965][T18779] tipc: Enabled bearer , priority 10 [ 209.682666][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5979'. [ 209.682748][T18779] tipc: Disabling bearer [ 209.743790][T18788] : renamed from vlan0 (while UP) [ 209.810746][T18796] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 209.810891][T18796] SELinux: failed to load policy [ 210.058046][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6002'. [ 210.070461][T18825] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6002'. [ 210.102430][T18826] Mount JFS Failure: -22 [ 210.102532][T18826] jfs_mount failed w/return code = -22 [ 210.388395][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 210.389494][ T42] audit: type=1400 audit(2000000041.639:37003): avc: denied { name_bind } for pid=18839 comm="syz.3.6009" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 210.501693][T18851] bridge0: port 3(syz_tun) entered blocking state [ 210.501862][T18851] bridge0: port 3(syz_tun) entered disabled state [ 210.501994][T18851] syz_tun: entered allmulticast mode [ 210.503376][T18851] syz_tun: entered promiscuous mode [ 210.543813][T18853] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6015'. [ 210.557532][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6016'. [ 210.596049][ T42] audit: type=1400 audit(2000000041.849:37004): avc: denied { read } for pid=18856 comm="syz.4.6017" lport=47216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.687032][T18863] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 210.687161][T18863] syzkaller1: linktype set to 776 [ 210.830924][T18867] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 210.870015][ T42] audit: type=1400 audit(2000000042.119:37005): avc: denied { write } for pid=18870 comm="syz.2.6024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 210.915434][ T42] audit: type=1400 audit(2000000042.169:37006): avc: denied { listen } for pid=18872 comm="syz.3.6025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.915881][ T42] audit: type=1400 audit(2000000042.169:37007): avc: denied { accept } for pid=18872 comm="syz.3.6025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.933174][T18877] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6026'. [ 210.934080][T18877] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6026'. [ 211.284739][T18899] jffs2: notice: (18899) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 211.468092][T18907] zram: failed to load dictionary d (err=-2) [ 211.629207][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6042'. [ 211.705794][T18922] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6046'. [ 211.828408][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6052'. [ 211.925023][ T42] audit: type=1400 audit(2000000043.179:37008): avc: denied { write } for pid=18946 comm="syz.2.6058" name="/" dev="9p" ino=78396525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.928906][ T42] audit: type=1400 audit(2000000043.179:37009): avc: denied { read append } for pid=18946 comm="syz.2.6058" name="file0" dev="9p" ino=78396527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.929047][ T42] audit: type=1400 audit(2000000043.179:37010): avc: denied { open } for pid=18946 comm="syz.2.6058" path="/1512/file0/file0" dev="9p" ino=78396527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.457458][T19001] serial 00:04: in use; can't configure [ 212.826019][ T42] audit: type=1400 audit(2000000044.079:37011): avc: denied { connect } for pid=19037 comm="syz.4.6100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 213.401637][ T56] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 213.429917][ T42] audit: type=1400 audit(2000000044.679:37012): avc: denied { read } for pid=19062 comm="syz.1.6113" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 213.511892][T19067] genirq: Flags mismatch irq 2. 00200000 (pcmmio) vs. 00200000 (pcl818) [ 213.556616][ T56] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 213.557923][ T56] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 213.557948][ T56] usb 7-1: config 1 has no interface number 0 [ 213.561065][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.561091][ T56] usb 7-1: Product: syz [ 213.561107][ T56] usb 7-1: Manufacturer: syz [ 213.561123][ T56] usb 7-1: SerialNumber: syz [ 213.568716][ T56] usb 7-1: 3:1 : does not exist [ 213.568735][ T56] usb 7-1: 3:2 : does not exist [ 213.772422][T17887] usb 7-1: USB disconnect, device number 8 [ 214.110162][T19090] binder: binder_mmap: 19089 200000000000-200000200000 bad vm_flags failed -1 [ 214.433096][T10826] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 214.446362][T19108] jffs2: notice: (19108) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 214.465400][T19112] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 215.543236][T19132] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 215.600651][T19139] macvlan2: entered promiscuous mode [ 215.624359][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 215.624458][ T42] audit: type=1400 audit(2000000046.879:37014): avc: denied { read } for pid=19142 comm="syz.2.6151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.741988][T19157] __nla_validate_parse: 2 callbacks suppressed [ 215.742266][T19157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6157'. [ 215.783976][T19161] SELinux: ebitmap: empty map [ 215.784048][T19161] SELinux: failed to load policy [ 215.864454][T19166] xfrm0 speed is unknown, defaulting to 1000 [ 215.884807][ T42] audit: type=1400 audit(2000000047.139:37015): avc: denied { read write } for pid=19169 comm="syz.1.6163" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 215.885094][ T42] audit: type=1400 audit(2000000047.139:37016): avc: denied { open } for pid=19169 comm="syz.1.6163" path="/1545/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 215.885717][ T42] audit: type=1400 audit(2000000047.139:37017): avc: denied { ioctl } for pid=19169 comm="syz.1.6163" path="/1545/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 215.938822][T19176] hugetlbfs: syz.3.6164 (19176): Using mlock ulimits for SHM_HUGETLB is obsolete [ 215.993626][T19181] MTRR 1 not used [ 216.015137][T19186] erspan0: entered promiscuous mode [ 216.038165][T19186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.038977][T19186] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.053575][T19186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.056450][T19193] netlink: 'syz.1.6169': attribute type 13 has an invalid length. [ 216.104124][T19186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.116296][T19186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.118791][T19195] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe00 [ 216.118809][T19195] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 216.118826][T19195] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 216.118836][T19195] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 216.118843][T19195] page dumped because: unmovable page [ 216.118850][T19195] page_owner tracks the page as allocated [ 216.118854][T19195] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5723, tgid 5723 (syz-executor), ts 48167165590 [ 216.118871][T19195] post_alloc_hook+0xfd/0x120 [ 216.118912][T19195] get_page_from_freelist+0x110d/0x35b0 [ 216.118930][T19195] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 216.119039][T19195] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 216.119061][T19195] __kasan_populate_vmalloc+0xf0/0x210 [ 216.119080][T19195] alloc_vmap_area+0x95d/0x2bb0 [ 216.119091][T19195] __get_vm_area_node+0x1ed/0x350 [ 216.119103][T19195] __vmalloc_node_range_noprof+0x268/0x1420 [ 216.119118][T19195] vmalloc_user_noprof+0x9e/0xe0 [ 216.119132][T19195] kcov_ioctl+0x4d/0x760 [ 216.119144][T19195] __x64_sys_ioctl+0x18e/0x210 [ 216.119161][T19195] do_syscall_64+0x123/0x790 [ 216.119174][T19195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.119185][T19195] page_owner free stack trace missing [ 216.123807][ T42] audit: type=1400 audit(2000000047.379:37018): avc: denied { read } for pid=5119 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 216.123838][ T42] audit: type=1400 audit(2000000047.379:37019): avc: denied { search } for pid=5119 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.123860][ T42] audit: type=1400 audit(2000000047.379:37020): avc: denied { write search } for pid=5119 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.123880][ T42] audit: type=1400 audit(2000000047.379:37021): avc: denied { add_name } for pid=5119 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.123901][ T42] audit: type=1400 audit(2000000047.379:37022): avc: denied { create } for pid=5119 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.123920][ T42] audit: type=1400 audit(2000000047.379:37023): avc: denied { append open } for pid=5119 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.143899][T19186] veth1_vlan: left promiscuous mode [ 216.148785][T19186] veth0_vlan: left promiscuous mode [ 216.149911][T19186] veth0_vlan: entered promiscuous mode [ 216.163332][T19186] veth1_vlan: entered promiscuous mode [ 216.180997][T19186] veth1_macvtap: left promiscuous mode [ 216.194786][T19186] veth1_macvtap: entered promiscuous mode [ 216.205250][T19186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.209630][T19186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.217596][T19186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.218904][T19186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.241731][T19186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.275509][T19186] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 216.330312][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.330394][ T75] bridge0: port 1(bridge_slave_0) entered listening state [ 216.331397][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.331442][ T75] bridge0: port 2(bridge_slave_1) entered listening state [ 216.401692][T15768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.401845][T15768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.401879][T15768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.401911][T15768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.580675][T19228] netlink: 'syz.2.6187': attribute type 1 has an invalid length. [ 216.580771][T19228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.800608][T19247] < [ 216.920844][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6200'. [ 217.425046][T19277] Bluetooth: hci4: Frame reassembly failed (-84) [ 217.435658][ T5733] Bluetooth: hci4: sending frame failed (-49) [ 217.439746][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 217.958316][T19331] i2c i2c-0: new_device: Can't parse I2C address [ 218.029435][T19340] random: crng reseeded on system resumption [ 218.106986][T19349] option changes via remount are deprecated (pid=19348 comm=syz.3.6244) [ 218.107044][T19349] cgroup: option or name mismatch, new: 0x0 "noprefix", old: 0x0 "" [ 218.181260][T19358] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 218.187044][T19358] bond4 (unregistering): Released all slaves [ 218.224013][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6249'. [ 218.224054][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6249'. [ 218.467473][ T56] Process accounting resumed [ 218.516421][T19388] vhci_hcd: not connected 4 [ 218.525901][T19390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6261'. [ 218.726406][T19403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6267'. [ 218.797835][T19412] loop3: detected capacity change from 0 to 7 [ 218.817583][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.817743][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 218.819932][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.820059][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 218.821320][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.821363][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 218.823931][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.823970][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 218.826420][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.826466][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 218.826736][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.826768][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 218.827026][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.827064][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 218.827172][T19412] ldm_validate_partition_table(): Disk read failed. [ 218.827295][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.827325][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 218.827571][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.827604][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 218.827731][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 218.827758][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 218.827909][T19412] Dev loop3: unable to read RDB block 0 [ 218.836109][T19412] loop3: unable to read partition table [ 218.836208][T19412] loop3: partition table beyond EOD, truncated [ 218.843104][T19412] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 218.873166][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6271'. [ 218.965599][T19425] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6276'. [ 219.142982][T19439] dummy0: entered allmulticast mode [ 219.145350][T19438] dummy0: left allmulticast mode [ 219.310195][T17887] logitech-hidpp-device 0003:046D:C082.0007: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 219.352369][T19451] fido_id[19451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.707207][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.710927][ T56] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 220.378471][T19507] netlink: 'syz.3.6312': attribute type 21 has an invalid length. [ 220.378539][T19507] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6312'. [ 220.378630][T19507] netlink: 'syz.3.6312': attribute type 5 has an invalid length. [ 220.378640][T19507] netlink: 'syz.3.6312': attribute type 6 has an invalid length. [ 220.378647][T19507] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6312'. [ 220.380378][T19507] netlink: 'syz.3.6312': attribute type 21 has an invalid length. [ 220.380421][T19507] netlink: 'syz.3.6312': attribute type 5 has an invalid length. [ 220.380429][T19507] netlink: 'syz.3.6312': attribute type 6 has an invalid length. [ 220.697841][T19538] MPI: mpi too large (16392 bits) [ 220.715031][T19540] can0: slcan on ttyS3. [ 220.820327][T19540] can0 (unregistered): slcan off ttyS3. [ 220.835897][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 220.836031][ T42] audit: type=1400 audit(2000000052.089:37035): avc: denied { write } for pid=19546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.910404][ T42] audit: type=1400 audit(2000000052.159:37036): avc: denied { write } for pid=19554 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.001210][ T42] audit: type=1400 audit(2000000052.249:37037): avc: denied { write } for pid=19564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.073087][ T42] audit: type=1400 audit(2000000052.329:37038): avc: denied { write } for pid=19570 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.225825][T19581] block nbd4: not configured, cannot reconfigure [ 221.523929][T17890] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 221.692433][T17890] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 221.702075][T17890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.702144][T17890] usb 8-1: Product: syz [ 221.702174][T17890] usb 8-1: Manufacturer: syz [ 221.702187][T17890] usb 8-1: SerialNumber: syz [ 221.843472][T19625] block2mtd: error: cannot open device /dev/loop0 [ 221.856979][T19627] __nla_validate_parse: 2 callbacks suppressed [ 221.860497][T19627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6365'. [ 221.863024][T19627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6365'. [ 221.957821][T17890] rtl8150 8-1:1.0: couldn't reset the device [ 221.958036][T17890] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 221.963682][T17890] usb 8-1: USB disconnect, device number 9 [ 222.012187][ T5832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 222.055041][ T42] audit: type=1400 audit(2000000053.309:37039): avc: denied { write } for pid=19640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.128418][ T42] audit: type=1400 audit(2000000053.379:37040): avc: denied { write } for pid=19652 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.234836][ T42] audit: type=1400 audit(2000000053.489:37041): avc: denied { write } for pid=19657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.295436][ T42] audit: type=1400 audit(2000000053.549:37042): avc: denied { write } for pid=19660 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.056183][ T42] audit: type=1400 audit(2000000054.309:37043): avc: denied { write } for pid=19665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.117984][ T42] audit: type=1400 audit(2000000054.369:37044): avc: denied { write } for pid=19668 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.151264][T19676] bond3: ARP target 9.0.0.0 is already present [ 223.151362][T19676] bond3: option arp_ip_target: invalid value (9) [ 223.158548][T19676] bond3 (unregistering): Released all slaves [ 223.440220][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6386'. [ 223.440289][T19699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6386'. [ 223.498739][T19703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6388'. [ 223.498822][T19703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6388'. [ 223.523263][T19705] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 223.884401][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6405'. [ 223.901450][T19744] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 223.902571][T19744] CPU: 0 UID: 0 PID: 19744 Comm: syz.1.6403 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.902591][T19744] Tainted: [L]=SOFTLOCKUP [ 223.902596][T19744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.902603][T19744] Call Trace: [ 223.902608][T19744] [ 223.902613][T19744] dump_stack_lvl+0x100/0x190 [ 223.902633][T19744] sysfs_warn_dup.cold+0x1c/0x28 [ 223.902652][T19744] sysfs_create_dir_ns+0x24b/0x2b0 [ 223.902667][T19744] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 223.902681][T19744] ? find_held_lock+0x2b/0x80 [ 223.902697][T19744] ? kobject_add_internal+0x25f/0x930 [ 223.902712][T19744] ? kobject_add_internal+0x25f/0x930 [ 223.902729][T19744] ? class_dir_child_ns_type+0xd/0x60 [ 223.902744][T19744] kobject_add_internal+0x2c8/0x930 [ 223.902761][T19744] kobject_add+0x16a/0x1e0 [ 223.902777][T19744] ? __pfx_kobject_add+0x10/0x10 [ 223.902793][T19744] ? get_device_parent+0x1b3/0x4c0 [ 223.902805][T19744] ? kobject_put+0xb9/0x640 [ 223.902824][T19744] device_add+0x294/0x1970 [ 223.902837][T19744] ? lockdep_init_map_type+0x5c/0x250 [ 223.902862][T19744] ? __pfx_device_add+0x10/0x10 [ 223.902875][T19744] ? lockdep_init_map_type+0x5c/0x250 [ 223.902888][T19744] ? __init_waitqueue_head+0xca/0x150 [ 223.902906][T19744] tty_register_device_attr+0x388/0x7f0 [ 223.902925][T19744] ? lockdep_init_map_type+0x5c/0x250 [ 223.902937][T19744] ? __pfx_tty_register_device_attr+0x10/0x10 [ 223.902959][T19744] ? tty_port_init+0x156/0x1c0 [ 223.902972][T19744] gsm_activate_mux+0x155/0x2a0 [ 223.902984][T19744] gsmld_ioctl+0xbbc/0x15c0 [ 223.902999][T19744] ? kasan_quarantine_put+0x104/0x240 [ 223.903011][T19744] ? __pfx_gsmld_ioctl+0x10/0x10 [ 223.903039][T19744] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.903055][T19744] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 223.903073][T19744] ? __pfx_gsmld_ioctl+0x10/0x10 [ 223.903085][T19744] tty_ioctl+0x11b4/0x1640 [ 223.903098][T19744] ? __pfx_tty_ioctl+0x10/0x10 [ 223.903108][T19744] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 223.903129][T19744] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 223.903150][T19744] ? __fget_files+0x34/0x3d0 [ 223.903171][T19744] ? selinux_file_ioctl+0x13b/0x290 [ 223.903189][T19744] ? selinux_file_ioctl+0xb6/0x290 [ 223.903209][T19744] ? __pfx_tty_ioctl+0x10/0x10 [ 223.903220][T19744] __x64_sys_ioctl+0x18e/0x210 [ 223.903239][T19744] do_syscall_64+0x123/0x790 [ 223.903253][T19744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.903265][T19744] RIP: 0033:0x7ffbd8b9e159 [ 223.903275][T19744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.903286][T19744] RSP: 002b:00007ffbd99cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.903298][T19744] RAX: ffffffffffffffda RBX: 00007ffbd8e26090 RCX: 00007ffbd8b9e159 [ 223.903305][T19744] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 223.903312][T19744] RBP: 00007ffbd8c35024 R08: 0000000000000000 R09: 0000000000000000 [ 223.903319][T19744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.903325][T19744] R13: 00007ffbd8e26128 R14: 00007ffbd8e26090 R15: 00007ffd6f4bc9a8 [ 223.903362][T19744] [ 223.903501][T19744] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 223.947514][T19748] ip_tables: iptables: counters copy to user failed while replacing table [ 224.123661][T19762] Line length is too long: Should be less than 4094 [ 224.160271][T19768] genirq: Flags mismatch irq 2. 00200000 (pcmmio) vs. 00200000 (pcl818) [ 224.318937][T19785] bridge0: port 3(veth0_vlan) entered blocking state [ 224.319001][T19785] bridge0: port 3(veth0_vlan) entered disabled state [ 224.319126][T19785] veth0_vlan: entered allmulticast mode [ 224.334962][T19785] veth0_vlan: left allmulticast mode [ 224.359727][T19790] genirq: Flags mismatch irq 2. 00200000 (pcmmio) vs. 00200000 (pcl818) [ 224.438472][T19801] lo: entered promiscuous mode [ 224.443723][T19799] binder: 19796:19799 ioctl c018620c 200000000040 returned -1 [ 224.445487][T19801] tunl0: entered promiscuous mode [ 224.448253][T19801] gre0: entered promiscuous mode [ 224.456728][T19801] gretap0: entered promiscuous mode [ 224.468982][T19801] ip_vti0: entered promiscuous mode [ 224.475007][T19801] ip6_vti0: entered promiscuous mode [ 224.476749][T19801] sit0: entered promiscuous mode [ 224.487011][T19801] ip6tnl0: entered promiscuous mode [ 224.489143][T19801] ip6gre0: entered promiscuous mode [ 224.506569][T19801] bridge0: port 3(syz_tun) entered disabled state [ 224.520997][T19801] vcan0: entered promiscuous mode [ 224.524066][T19801] bond0: entered promiscuous mode [ 224.524109][T19801] bond_slave_0: entered promiscuous mode [ 224.524211][T19801] @0: entered promiscuous mode [ 224.527513][T19801] team0: entered promiscuous mode [ 224.527525][T19801] team_slave_0: entered promiscuous mode [ 224.527621][T19801] team_slave_1: entered promiscuous mode [ 224.531929][T19801] nlmon0: entered promiscuous mode [ 224.532663][T19801] batadv0: entered promiscuous mode [ 224.538447][T19801] vxcan0: entered promiscuous mode [ 224.539848][T19801] vxcan1: entered promiscuous mode [ 224.542150][T19801] veth0: entered promiscuous mode [ 224.546497][T19801] veth1: entered promiscuous mode [ 224.550598][T19801] wg0: entered promiscuous mode [ 224.557005][T19801] wg1: entered promiscuous mode [ 224.558566][T19801] wg2: entered promiscuous mode [ 224.560649][T19801] veth0_to_bridge: entered promiscuous mode [ 224.570648][T19801] veth1_to_bridge: entered promiscuous mode [ 224.574690][T19801] veth0_to_bond: entered promiscuous mode [ 224.578486][T19801] veth1_to_bond: entered promiscuous mode [ 224.587285][T19801] veth0_to_team: entered promiscuous mode [ 224.592335][T19801] veth1_to_team: entered promiscuous mode [ 224.597702][T19801] veth0_to_batadv: entered promiscuous mode [ 224.600362][T19801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.603511][T19801] batadv_slave_0: entered promiscuous mode [ 224.604720][T19801] veth1_to_batadv: entered promiscuous mode [ 224.608187][T19801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.608217][T19801] batadv_slave_1: entered promiscuous mode [ 224.612148][T19801] xfrm0: entered promiscuous mode [ 224.615236][T19801] veth1_to_hsr: entered promiscuous mode [ 224.624625][T19801] ): entered promiscuous mode [ 224.635432][T19801] vlan0: entered promiscuous mode [ 224.638019][T19801] vlan1: entered promiscuous mode [ 224.646012][T19801] macvlan0: entered promiscuous mode [ 224.649552][T19801] macvlan1: entered promiscuous mode [ 224.651212][T19801] ipvlan0: entered promiscuous mode [ 224.651290][T19801] ipvlan1: entered promiscuous mode [ 224.661377][T19801] macvtap0: entered promiscuous mode [ 224.663148][T19801] macsec0: entered promiscuous mode [ 224.667937][T19801] geneve1: entered promiscuous mode [ 224.676427][T19801] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 224.682911][T19801] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 224.686780][T19801] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 224.691377][T19801] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 224.709593][T19801] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 224.717934][T19801] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 224.722542][T19801] bridge1: entered promiscuous mode [ 224.724990][T19801] bond1: entered promiscuous mode [ 224.725684][T19801] bridge2: entered promiscuous mode [ 224.725793][T19801] bridge3: entered promiscuous mode [ 224.725999][T19801] xfrm1: entered promiscuous mode [ 224.726124][T19801] bridge4: entered promiscuous mode [ 224.736842][T19801] bond2: entered promiscuous mode [ 224.737000][T19801] bond3: entered promiscuous mode [ 224.737095][T19801] vcan1: entered promiscuous mode [ 224.737204][T19801] bridge5: entered promiscuous mode [ 224.737335][T19801] bridge6: entered promiscuous mode [ 224.737479][T19801] ip6gre1: entered promiscuous mode [ 224.740697][T19801] vxlan0: entered promiscuous mode [ 224.741027][T19801] vxlan1: entered promiscuous mode [ 224.746679][T19801] gre1: entered promiscuous mode [ 224.750276][T19801] ip6tnl1: entered promiscuous mode [ 224.755000][T19801] ipvlan2: entered promiscuous mode [ 224.756121][T19801] macsec1: entered promiscuous mode [ 224.761276][T19801] veth0_vlan.4093: entered promiscuous mode [ 224.762067][T19801] syztnl0: entered promiscuous mode [ 224.762158][T19801] bond4: entered promiscuous mode [ 224.762249][T19801] geneve0.0004: entered promiscuous mode [ 224.770030][T19803] macsec2: entered allmulticast mode [ 224.770051][T19803] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 224.770081][T19803] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 224.770293][T19803] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 224.773429][T15767] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.773466][T15767] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.773505][T15767] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.773528][T15767] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.773556][T15767] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.773577][T15767] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.811787][T19811] team_slave_0: entered promiscuous mode [ 224.814512][T19811] team_slave_0: left promiscuous mode [ 224.837532][T19817] Falling back ldisc for ttyS3. [ 224.975592][T19827] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.189655][T19857] fuse: Bad value for 'fd' [ 225.407292][T19881] rnbd_client L213: map_device: Parameters missing [ 225.434047][ T5825] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 225.517079][T19897] netlink: 'syz.2.6477': attribute type 14 has an invalid length. [ 225.581694][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 225.582483][ T5825] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.585703][ T5825] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 225.585741][ T5825] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.585759][ T5825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.585774][ T5825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.585785][ T5825] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.585805][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.795690][ T5825] usb 6-1: GET_CAPABILITIES returned 0 [ 225.795768][ T5825] usbtmc 6-1:16.0: can't read capabilities [ 225.861204][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 225.861301][ T42] audit: type=1400 audit(2000000057.109:37047): avc: denied { accept } for pid=19933 comm="syz.2.6495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.935542][ T5805] hsr0: entered promiscuous mode [ 226.003994][ T5825] usb 6-1: USB disconnect, device number 7 [ 226.028599][T19945] sctp: Trying to GSO but underlying device doesn't support it. [ 226.106223][T19950] netlink: Only one type of NAT may be specified [ 226.106284][T19950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.593511][T19964] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 226.719108][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6511'. [ 226.807927][T19976] jffs2: notice: (19976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 227.513821][T19995] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 227.599558][T20003] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 227.600456][T20003] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 227.600590][T20003] overlayfs: failed to set uuid (1608/file2, err=-13); falling back to uuid=null. [ 227.788174][T20016] netlink: 'syz.4.6527': attribute type 13 has an invalid length. [ 227.820700][T20009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.827458][T20009] A link change request failed with some changes committed already. Interface wpan2 may have been left with an inconsistent configuration, please check. [ 227.946972][T20029] lo: Caught tx_queue_len zero misconfig [ 228.026062][T20037] db_root: cannot open: IMIX 'CD' 00000000000000000000 [ 228.339280][T20070] sd 0:0:0:0: PR command failed: 1026 [ 228.339408][T20070] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 228.339435][T20070] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 228.415090][T20075] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 228.478348][T20081] openvswitch: netlink: Unknown key attributes 1 [ 228.578237][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6564'. [ 228.942742][ T1162] wlan1: Trigger new scan to find an IBSS to join [ 229.574179][ T5733] Bluetooth: hci4: command 0x1003 tx timeout [ 229.575071][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 229.830648][T20122] < [ 229.863363][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6582'. [ 229.885758][ T42] audit: type=1326 audit(2000000061.139:37048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20127 comm="syz.2.6590" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdc8d9e159 code=0x0 [ 229.943456][T20136] Bluetooth: hci4: Frame reassembly failed (-84) [ 229.957416][ T5733] Bluetooth: hci4: sending frame failed (-49) [ 229.970570][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 230.190878][T20158] lo: Caught tx_queue_len zero misconfig [ 231.110937][T20213] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 231.160884][ T42] audit: type=1400 audit(2000000062.409:37049): avc: denied { attach_queue } for pid=20214 comm="syz.3.6625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 231.236957][T20217] 9p: Unknown uid 00000000004294967295 [ 231.288311][ T42] audit: type=1400 audit(2000000062.539:37050): avc: denied { write } for pid=20218 comm="syz.3.6634" name="/" dev="9p" ino=78396525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.659133][T20235] netlink: 'syz.3.6633': attribute type 29 has an invalid length. [ 231.663280][T20235] netlink: 'syz.3.6633': attribute type 29 has an invalid length. [ 231.673570][T20235] netlink: 'syz.3.6633': attribute type 29 has an invalid length. [ 231.709639][T20239] batadv_slave_0: entered promiscuous mode [ 231.711411][T20237] batadv_slave_0: left promiscuous mode [ 231.842497][ T42] audit: type=1400 audit(2000000063.099:37051): avc: denied { create } for pid=20250 comm="syz.2.6643" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 231.981716][ T37] wlan1: Trigger new scan to find an IBSS to join [ 232.905108][ T75] wlan1: Creating new IBSS network, BSSID 22:90:c6:ad:73:ea [ 233.046720][ T42] audit: type=1400 audit(2000000064.299:37052): avc: denied { search } for pid=20298 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.046889][ T42] audit: type=1400 audit(2000000064.299:37053): avc: denied { read write } for pid=20298 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 233.047340][ T42] audit: type=1400 audit(2000000064.299:37054): avc: denied { open } for pid=20298 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 233.047665][ T42] audit: type=1400 audit(2000000064.299:37055): avc: denied { lock } for pid=20298 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 233.048472][ T42] audit: type=1400 audit(2000000064.299:37056): avc: denied { read } for pid=20298 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 233.096200][T20302] block nbd2: not configured, cannot reconfigure [ 233.096509][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 233.099789][ T5733] Bluetooth: hci4: command 0x1003 tx timeout [ 233.162711][T20308] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.6668'. [ 233.162780][T20308] netlink: 'syz.1.6668': attribute type 1 has an invalid length. syzkaller syzkaller login: [ 233.190190][T20310] fuse: Bad value for 'fd' [ 233.201950][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6670'. [ 233.288586][T20315] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.340363][ T42] audit: type=1807 audit(2000000064.589:37057): action=measure res=1 [ 233.340876][T20321] ima: policy update completed [ 233.341224][ T42] audit: type=1802 audit(2000000064.589:37058): pid=20321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.2.6675" res=1 errno=0 [ 233.374720][T20315] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.489371][T20315] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.575452][T20315] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 233.594466][T20315] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.722046][T20326] rnbd_client L607: Mapping device / on session s1, (access_mode: rw, nr_poll_queues: 0) [ 233.750394][T20326] rnbd_client L1256: Session s1 not found, and path parameter not given [ 233.981127][T20341] TCP: TCP_TX_DELAY enabled [ 234.235850][T20359] netlink: 'syz.4.6692': attribute type 3 has an invalid length. [ 234.235914][T20359] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6692'. [ 235.202904][T20421] netlink: 'syz.2.6722': attribute type 10 has an invalid length. [ 235.207094][T20421] syz_tun: entered promiscuous mode [ 235.212014][T20421] syz_tun: entered allmulticast mode [ 235.212740][T20421] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 235.509957][T20440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6730'. [ 235.662742][T20444] bond2: ARP target 9.0.0.0 is already present [ 235.665530][T20444] bond2: option arp_ip_target: invalid value (9) [ 235.672253][T20444] bond2 (unregistering): Released all slaves [ 235.854012][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6740'. [ 235.854063][T20463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6740'. [ 235.983844][T20473] bond0: option arp_interval: invalid value (\A/U#]̮Ӵ&Z;-4YwԏQW8@;F$YLt1t?6teU-=FzvǵӆºU=qVܗk7N3ƟK[(Zgt';wբm\n #|[8},) [ 235.983894][T20473] bond0: option arp_interval: allowed values 0 - 2147483647 [ 236.155626][T20494] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6758'. [ 236.170449][T20498] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 236.176711][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 236.176798][ T42] audit: type=1800 audit(2000000067.439:37103): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 236.179955][ T42] audit: type=1800 audit(2000000067.439:37104): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177577 res=0 errno=0 [ 236.232165][ T42] audit: type=1800 audit(2000000067.489:37105): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 236.245932][T20504] ip_tables: iptables: counters copy to user failed while replacing table [ 236.289979][ T42] audit: type=1800 audit(2000000067.539:37106): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 236.296844][ T42] audit: type=1800 audit(2000000067.539:37107): pid=20508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.6763" name="console" dev="sysfs" ino=12866 res=0 errno=0 [ 236.305356][ T42] audit: type=1400 audit(2000000067.559:37108): avc: denied { ioctl } for pid=20509 comm="syz.1.6764" path="socket:[63741]" dev="sockfs" ino=63741 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 236.340992][ T42] audit: type=1800 audit(2000000067.589:37109): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 236.387477][ T42] audit: type=1800 audit(2000000067.639:37110): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 236.413458][ T42] audit: type=1800 audit(2000000067.669:37111): pid=20522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6776" name="state" dev="sysfs" ino=22542 res=0 errno=0 [ 236.440300][ T42] audit: type=1800 audit(2000000067.689:37112): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 236.614831][T20543] wg2: Caught tx_queue_len zero misconfig [ 236.786395][T20557] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 236.786509][T20557] CPU: 0 UID: 0 PID: 20557 Comm: syz.4.6784 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.786565][T20557] Tainted: [L]=SOFTLOCKUP [ 236.786577][T20557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.786592][T20557] Call Trace: [ 236.786600][T20557] [ 236.786609][T20557] dump_stack_lvl+0x100/0x190 [ 236.786678][T20557] sysfs_warn_dup.cold+0x1c/0x28 [ 236.786717][T20557] sysfs_create_dir_ns+0x24b/0x2b0 [ 236.786751][T20557] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 236.786782][T20557] ? find_held_lock+0x2b/0x80 [ 236.786818][T20557] ? kobject_add_internal+0x25f/0x930 [ 236.786852][T20557] ? kobject_add_internal+0x25f/0x930 [ 236.786896][T20557] ? class_dir_child_ns_type+0xd/0x60 [ 236.786933][T20557] kobject_add_internal+0x2c8/0x930 [ 236.786975][T20557] kobject_add+0x16a/0x1e0 [ 236.787012][T20557] ? __pfx_kobject_add+0x10/0x10 [ 236.787051][T20557] ? get_device_parent+0x1b3/0x4c0 [ 236.787079][T20557] ? kobject_put+0xb9/0x640 [ 236.787123][T20557] device_add+0x294/0x1970 [ 236.787156][T20557] ? lockdep_init_map_type+0x5c/0x250 [ 236.787187][T20557] ? __pfx_device_add+0x10/0x10 [ 236.787215][T20557] ? lockdep_init_map_type+0x5c/0x250 [ 236.787246][T20557] ? __init_waitqueue_head+0xca/0x150 [ 236.787319][T20557] tty_register_device_attr+0x388/0x7f0 [ 236.787365][T20557] ? lockdep_init_map_type+0x5c/0x250 [ 236.787397][T20557] ? __pfx_tty_register_device_attr+0x10/0x10 [ 236.787456][T20557] ? tty_port_init+0x156/0x1c0 [ 236.787489][T20557] gsm_activate_mux+0x155/0x2a0 [ 236.787518][T20557] gsmld_ioctl+0xbbc/0x15c0 [ 236.787553][T20557] ? kasan_quarantine_put+0x104/0x240 [ 236.787581][T20557] ? __pfx_gsmld_ioctl+0x10/0x10 [ 236.787638][T20557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.787670][T20557] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 236.787710][T20557] ? __pfx_gsmld_ioctl+0x10/0x10 [ 236.787741][T20557] tty_ioctl+0x11b4/0x1640 [ 236.787770][T20557] ? __pfx_tty_ioctl+0x10/0x10 [ 236.787793][T20557] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 236.787841][T20557] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 236.787889][T20557] ? __fget_files+0x34/0x3d0 [ 236.787937][T20557] ? selinux_file_ioctl+0x13b/0x290 [ 236.787976][T20557] ? selinux_file_ioctl+0xb6/0x290 [ 236.788019][T20557] ? __pfx_tty_ioctl+0x10/0x10 [ 236.788046][T20557] __x64_sys_ioctl+0x18e/0x210 [ 236.788086][T20557] do_syscall_64+0x123/0x790 [ 236.788115][T20557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.788140][T20557] RIP: 0033:0x7fe8eaf9e159 [ 236.788161][T20557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.788184][T20557] RSP: 002b:00007fe8e91f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.788208][T20557] RAX: ffffffffffffffda RBX: 00007fe8eb226090 RCX: 00007fe8eaf9e159 [ 236.788223][T20557] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 236.788239][T20557] RBP: 00007fe8eb035024 R08: 0000000000000000 R09: 0000000000000000 [ 236.788254][T20557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.788269][T20557] R13: 00007fe8eb226128 R14: 00007fe8eb226090 R15: 00007ffe8abefcd8 [ 236.788299][T20557] [ 236.796685][T20557] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 236.868020][T20561] udc dummy_udc.0: soft-connect without a gadget driver [ 236.921582][ T5825] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 237.105111][ T5825] usb 7-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 237.109860][ T5825] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.112490][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.112504][ T5825] usb 7-1: Product: syz [ 237.112512][ T5825] usb 7-1: Manufacturer: syz [ 237.112519][ T5825] usb 7-1: SerialNumber: syz [ 237.128303][ T5825] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 237.322626][ T5825] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 237.325568][ T5825] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 237.325740][ T5825] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 237.325763][ T5825] usb 7-1: media controller created [ 237.330998][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.712253][T20591] netlink: 'syz.4.6799': attribute type 10 has an invalid length. [ 237.715471][T20591] syz_tun: entered promiscuous mode [ 237.719215][T20591] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 237.882727][T20600] team_slave_0: entered promiscuous mode [ 237.882891][T20600] team_slave_0: left promiscuous mode [ 237.983948][T20605] fuse: Bad value for 'fd' [ 238.113891][T20619] binder: 20617:20619 ioctl c018620c 200000000040 returned -1 [ 238.378883][ T5825] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 238.412820][ T5825] usb 7-1: USB disconnect, device number 9 [ 238.551788][T17890] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 238.722796][T17890] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 238.724184][T17890] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 238.724209][T17890] usb 6-1: config 1 has no interface number 0 [ 238.728058][T17890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.728091][T17890] usb 6-1: Product: syz [ 238.728106][T17890] usb 6-1: Manufacturer: syz [ 238.728120][T17890] usb 6-1: SerialNumber: syz [ 238.741127][T17890] usb 6-1: 3:1 : does not exist [ 238.741147][T17890] usb 6-1: 3:2 : does not exist [ 238.808243][T20667] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6840'. [ 238.942520][T17890] usb 6-1: USB disconnect, device number 8 [ 238.973175][T20679] tipc: Started in network mode [ 238.973269][T20679] tipc: Node identity aaaaaaaaaaaa, cluster identity 3865 [ 238.973565][T20679] tipc: Enabled bearer , priority 0 [ 239.040642][T20682] kvm [20680]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 239.277873][T20703] bad cache= option: none26 [ 239.277873][T20703] nr_mlock 0 [ 239.277873][T20703] nr_zspages 148 [ 239.277873][T20703] nr_free_cma 0 [ 239.277873][T20703] numa_hit 1826909 [ 239.277873][T20703] numa_miss 967 [ 239.277873][T20703] numa_foreign 967 [ 239.277873][T20703] numa_interleave 7110 [ 239.277873][T20703] numa_local 1816613 [ 239.277873][T20703] numa_other 11263 [ 239.277873][T20703] nr_inactive_anon 6405 [ 239.277873][T20703] nr_active_anon 6374 [ 239.277873][T20703] nr_inactive_file 25435 [ 239.277873][T20703] nr_active_file 1407 [ 239.277873][T20703] nr_unevictable 1000 [ 239.277873][T20703] nr_slab_reclaimable 12302 [ 239.277873][T20703] nr_slab_unreclaimable 74476 [ 239.277873][T20703] nr_isolated_anon 0 [ 239.277873][T20703] nr_isolated_file 0 [ 239.277873][T20703] workingset_nodes 31 [ 239.277873][T20703] workingset_refault_anon 239 [ 239.277873][T20703] workingset_refault_file 10736 [ 239.277873][T20703] workingset_activate_anon 10 [ 239.277873][T20703] workingset_activate_file 1 [ 239.277873][T20703] workingset_restore_anon 10 [ 239.277873][T20703] workingset_restore_file 1 [ 239.277873][T20703] workingset_nodereclaim 4 [ 239.277873][T20703] nr_anon_pages 12225 [ 239.277873][T20703] nr_mapped 24701 [ 239.277873][T20703] nr_file_pages 28407 [ 239.277873][T20703] nr_dirty 226 [ 239.277873][T20703] nr_writeback 0 [ 239.277873][T20703] nr_shmem 1554 [ 239.277873][T20703] nr_shmem_hugepages 0 [ 239.277873][T20703] nr_shmem_pmdmapped 0 [ 239.277873][T20703] nr_file_hugepages 0 [ 239.277873][T20703] nr_file_pmdmapped 0 [ 239.277873][T20703] nr_anon_transparent_hugepages 0 [ 239.277873][T20703] nr_vmscan_write 849 [ 239.277873][T20703] nr_vmscan_immediate_reclaim 190 [ 239.277873][T20703] nr_dirtied 13181 [ 239.277873][T20703] nr_written 12955 [ 239.277873][T20703] nr_throttled_written 1116 [ 239.277873][T20703] nr_kernel_misc_reclaimable 0 [ 239.277873][T20703] nr_foll_pin_acquired 7084 [ 239.277873][T20703] nr_foll_pin_released 7084 [ 239.278223][T20703] CIFS: VFS: bad cache= option: none26 [ 239.278223][T20703] nr_mlock 0 [ 239.278223][T20703] nr_zspages 148 [ 239.278223][T20703] nr_free_cma 0 [ 239.278223][T20703] numa_hit 1826909 [ 239.278223][T20703] numa_miss 967 [ 239.278223][T20703] numa_foreign 967 [ 239.278223][T20703] numa_interleave 7110 [ 239.278223][T20703] numa_local 1816613 [ 239.278223][T20703] numa_other 11263 [ 239.278223][T20703] nr_inactive_anon 6405 [ 239.278223][T20703] nr_active_anon 6374 [ 239.278223][T20703] nr_inactive_file 25435 [ 239.278223][T20703] nr_active_file 1407 [ 239.278223][T20703] nr_unevictable 1000 [ 239.278223][T20703] nr_slab_reclaimable 12302 [ 239.278223][T20703] nr_slab_unreclaimable 74476 [ 239.278223][T20703] nr_isolated_anon 0 [ 239.278223][T20703] nr_isolated_file 0 [ 239.278223][T20703] workingset_nodes 31 [ 239.278223][T20703] workingset_refault_anon 239 [ 239.278223][T20703] workingset_refault_file 10736 [ 239.278223][T20703] workingset_activate_anon 10 [ 239.278223][T20703] workingset_activate_file 1 [ 239.278223][T20703] workingset_restore_anon 10 [ 239.278223][T20703] workingset_restore_file 1 [ 239.278223][T20703] workingset_nodereclaim 4 [ 239.278223][T20703] nr_anon_pages 12225 [ 239.278223][T20703] nr_mapped 24701 [ 239.278223][T20703] nr_file_pages 28407 [ 239.278223][T20703] nr_dirty 226 [ 239.278223][T20703] nr_writeback 0 [ 239.278223][T20703] nr_shmem 1554 [ 239.278223][T20703] nr_shmem_hugepages 0 [ 239.278223][T20703] nr_shmem_pmdmapped 0 [ 239.278223][T20703] nr_file_hugepages 0 [ 239.278223][T20703] nr_file_pmdmapped 0 [ 239.278223][T20703] nr_anon_transparent_hugepages 0 [ 239.278223][T20703] nr_vmscan_write 849 [ 239.278223][T20703] nr_vmscan_immediate_reclaim 190 [ 239.278223][T20703] nr_dirtied 13181 [ 239.278223][T20703] nr_written 12955 [ 239.278223][T20703] nr_throttled_written 1116 [ 239.278223][T20703] nr_kernel_misc_reclaimable 0 [ 239.278223][T20703] nr_foll_pin_acquired 7084 [ 239.338951][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6856'. [ 239.486172][T20717] 9p: Invalid gid '0x00000000ffffffff' [ 239.697041][T20741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6870'. [ 239.701716][T20739] i2c i2c-0: new_device: Missing parameters [ 240.105408][T17890] tipc: Node number set to 43690 [ 240.125169][T20783] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 240.213971][T20791] bridge_slave_0: Caught tx_queue_len zero misconfig [ 240.255823][T20796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6899'. [ 240.269744][T20797] option changes via remount are deprecated (pid=20795 comm=syz.2.6900) [ 240.271612][T20797] cgroup: option or name mismatch, new: 0x0 "noprefix", old: 0x0 "" [ 240.704915][T20833] i2c i2c-0: new_device: Extra parameters [ 241.011936][T20856] loop7: detected capacity change from 0 to 7 [ 241.040584][T20860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6928'. [ 241.041171][T20860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6928'. [ 241.060915][T20856] Dev loop7: unable to read RDB block 7 [ 241.060994][T20856] loop7: unable to read partition table [ 241.061146][T20856] loop7: partition table beyond EOD, truncated [ 241.061175][T20856] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 241.073559][T20864] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 241.073683][T20864] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 241.099424][T20866] base or size exceeds the MTRR width [ 241.279200][ T42] kauditd_printk_skb: 212 callbacks suppressed [ 241.279386][ T42] audit: type=1800 audit(2000000072.529:37325): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 241.308572][ T42] audit: type=1800 audit(2000000072.559:37326): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 241.319412][T20880] netlink: Unknown nat attribute (0) [ 241.319486][T20880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.340200][ T42] audit: type=1800 audit(2000000072.589:37327): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 241.380266][T20886] netlink: 'syz.2.6940': attribute type 29 has an invalid length. [ 241.382499][ T42] audit: type=1800 audit(2000000072.639:37328): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 241.395436][T20886] netlink: 'syz.2.6940': attribute type 29 has an invalid length. [ 241.404658][T20886] netlink: 'syz.2.6940': attribute type 29 has an invalid length. [ 241.437216][ T42] audit: type=1800 audit(2000000072.689:37329): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 241.493185][ T42] audit: type=1800 audit(2000000072.749:37330): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 241.501170][T20896] tipc: Enabled bearer , priority 0 [ 241.530885][ T42] audit: type=1800 audit(2000000072.779:37331): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 241.570979][ T42] audit: type=1800 audit(2000000072.819:37332): pid=20902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.6947" name="new_id" dev="sysfs" ino=45229 res=0 errno=0 [ 241.625079][ T42] audit: type=1800 audit(2000000072.879:37333): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 241.663116][ T42] audit: type=1800 audit(2000000072.919:37334): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 241.928954][T20925] batadv_slave_0: Caught tx_queue_len zero misconfig [ 242.033444][T20933] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 242.277479][T20953] kvm [20952]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000 [ 242.611681][ T25] tipc: Node number set to 2886997007 [ 242.677677][T20985] size and base must be multiples of 4 kiB [ 242.677775][T20985] CPU: 2 UID: 0 PID: 20985 Comm: syz.4.6985 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.677819][T20985] Tainted: [L]=SOFTLOCKUP [ 242.677828][T20985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.677840][T20985] Call Trace: [ 242.677847][T20985] [ 242.677855][T20985] dump_stack_lvl+0x100/0x190 [ 242.677891][T20985] mtrr_del.cold+0x72/0x85 [ 242.677911][T20985] mtrr_ioctl+0xbc8/0xcf0 [ 242.677931][T20985] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 242.677967][T20985] ? __pfx_mtrr_ioctl+0x10/0x10 [ 242.677990][T20985] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 242.678030][T20985] ? __fget_files+0x34/0x3d0 [ 242.678066][T20985] ? __pfx_mtrr_ioctl+0x10/0x10 [ 242.678086][T20985] proc_reg_unlocked_ioctl+0x229/0x320 [ 242.678131][T20985] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 242.678163][T20985] __x64_sys_ioctl+0x18e/0x210 [ 242.678197][T20985] do_syscall_64+0x123/0x790 [ 242.678224][T20985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.678246][T20985] RIP: 0033:0x7fe8eaf9e159 [ 242.678264][T20985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.678282][T20985] RSP: 002b:00007fe8ebd95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.678302][T20985] RAX: ffffffffffffffda RBX: 00007fe8eb225fa0 RCX: 00007fe8eaf9e159 [ 242.678315][T20985] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 242.678328][T20985] RBP: 00007fe8eb035024 R08: 0000000000000000 R09: 0000000000000000 [ 242.678340][T20985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.678353][T20985] R13: 00007fe8eb226038 R14: 00007fe8eb225fa0 R15: 00007ffe8abefcd8 [ 242.678387][T20985] [ 242.952676][T21007] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 243.005366][T21010] ip6tnl0: Caught tx_queue_len zero misconfig [ 243.110846][T21018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7001'. [ 243.171659][T17890] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 243.215920][T21024] loop4: detected capacity change from 0 to 7 [ 243.267366][ T5153] blk_print_req_error: 10 callbacks suppressed [ 243.267445][ T5153] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 243.267486][ T5153] buffer_io_error: 10 callbacks suppressed [ 243.267496][ T5153] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.273277][T21024] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 243.273315][T21024] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.273727][T21028] bonding: bond0 is being deleted... [ 243.273799][T21024] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 243.273822][T21024] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.273854][T21024] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 243.273875][T21024] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.273920][T21024] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 243.273943][T21024] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.273986][T21024] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 243.274009][T21024] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.274041][T21024] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 243.274063][T21024] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.274080][T21024] ldm_validate_partition_table(): Disk read failed. [ 243.274109][T21024] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 243.274131][T21024] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.274163][T21024] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 243.274185][T21024] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.274216][T21024] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 243.274237][T21024] Buffer I/O error on dev loop4, logical block 0, async page read [ 243.274275][T21024] Dev loop4: unable to read RDB block 0 [ 243.274378][T21024] loop4: unable to read partition table [ 243.274536][T21024] loop4: partition table beyond EOD, truncated [ 243.274586][T21024] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 243.330032][T21028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.333105][T17890] usb 7-1: Using ep0 maxpacket: 8 [ 243.334177][T17890] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 243.335154][T17890] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 243.335179][T17890] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 243.335199][T17890] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.335219][T17890] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.335279][T17890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.378271][T21028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.413431][T21028] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 243.424187][T21028] bond0 (unregistering): Released all slaves [ 243.547492][T17890] usb 7-1: GET_CAPABILITIES returned 0 [ 243.551240][T17890] usbtmc 7-1:16.0: can't read capabilities [ 243.757430][T17890] usb 7-1: USB disconnect, device number 10 [ 244.186491][T21075] loop7: detected capacity change from 0 to 7 [ 244.205204][T21077] tunl0: Caught tx_queue_len zero misconfig [ 244.241191][T21075] Dev loop7: unable to read RDB block 7 [ 244.241272][T21075] loop7: unable to read partition table [ 244.241566][T21075] loop7: partition table beyond EOD, truncated [ 244.241624][T21075] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 244.266584][T21085] veth0: Caught tx_queue_len zero misconfig [ 244.464950][T21104] veth0: entered promiscuous mode [ 244.468338][T21103] veth0: left promiscuous mode [ 244.538133][T21111] loop7: detected capacity change from 0 to 7 [ 244.607516][T21111] Dev loop7: unable to read RDB block 7 [ 244.607566][T21111] loop7: unable to read partition table [ 244.607696][T21111] loop7: partition table beyond EOD, truncated [ 244.607743][T21111] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 244.652902][T21122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7046'. [ 244.653030][T21122] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7046'. [ 244.710868][T21129] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7050'. [ 244.733455][T21134] team_slave_1: Caught tx_queue_len zero misconfig [ 244.866357][T21152] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 244.869348][T21153] loop7: detected capacity change from 0 to 7 [ 244.930200][T21153] Dev loop7: unable to read RDB block 7 [ 244.930276][T21153] loop7: unable to read partition table [ 244.930491][T21153] loop7: partition table beyond EOD, truncated [ 244.931954][T21153] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 245.424784][T21224] sda1: Can't mount, would change RO state [ 245.545961][T21240] jffs2: notice: (21240) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 245.786020][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7110'. [ 245.893943][ T75] wlan1: Trigger new scan to find an IBSS to join [ 245.954339][T21276] xt_hashlimit: size too large, truncated to 1048576 [ 246.101444][T21285] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7121'. [ 246.123489][ T1162] smbdirect: ib_dev[syz1] removed [ 246.145379][ T5825] xfrm0 speed is unknown, defaulting to 1000 [ 246.145459][ T5825] infiniband syz1: ib_query_port failed (-19) [ 246.287967][ T42] kauditd_printk_skb: 99 callbacks suppressed [ 246.288033][ T42] audit: type=1800 audit(2000000077.539:37434): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 246.300167][ T42] audit: type=1800 audit(2000000077.549:37435): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 246.323020][ T42] audit: type=1400 audit(2000000077.569:37436): avc: denied { shutdown } for pid=21294 comm="syz.4.7125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.331411][ T42] audit: type=1400 audit(2000000077.579:37437): avc: denied { write } for pid=21294 comm="syz.4.7125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.362421][ T42] audit: type=1800 audit(2000000077.609:37438): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16140 res=0 errno=0 [ 246.369770][ T42] audit: type=1800 audit(2000000077.619:37439): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 246.423324][ T42] audit: type=1800 audit(2000000077.679:37440): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 246.468760][ T42] audit: type=1800 audit(2000000333.777:37441): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 246.486815][T21317] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7135'. [ 246.510078][ T42] audit: type=1800 audit(2000000333.817:37442): pid=21319 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.7136" name="delay_retrans" dev="sysfs" ino=58895 res=0 errno=0 [ 246.648567][ T42] audit: type=1800 audit(2000000333.957:37443): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 246.677136][T10826] wiimote 0005:057E:0306.0009: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 246.678146][T10826] wiimote 0005:057E:0306.0009: New device registered [ 246.730695][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7146'. [ 246.853394][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 246.854261][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 246.970105][ T25] hid-generic 000A:FFFFFF1D:0002.000A: unknown main item tag 0x0 [ 246.970166][ T25] hid-generic 000A:FFFFFF1D:0002.000A: unknown main item tag 0x0 [ 246.970205][ T25] hid-generic 000A:FFFFFF1D:0002.000A: unknown main item tag 0x0 [ 246.970218][ T25] hid-generic 000A:FFFFFF1D:0002.000A: unknown main item tag 0x0 [ 246.970231][ T25] hid-generic 000A:FFFFFF1D:0002.000A: unknown main item tag 0x0 [ 246.970242][ T25] hid-generic 000A:FFFFFF1D:0002.000A: unknown main item tag 0x0 [ 246.970254][ T25] hid-generic 000A:FFFFFF1D:0002.000A: unknown main item tag 0x0 [ 246.970266][ T25] hid-generic 000A:FFFFFF1D:0002.000A: unknown main item tag 0x0 [ 246.970278][ T25] hid-generic 000A:FFFFFF1D:0002.000A: unknown main item tag 0x0 [ 246.970290][ T25] hid-generic 000A:FFFFFF1D:0002.000A: unknown main item tag 0x0 [ 246.973815][ T25] hid-generic 000A:FFFFFF1D:0002.000A: hidraw2: HID v0.04 Device [syz0] on syz1 [ 247.013320][T21357] fido_id[21357]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.148794][T21367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7159'. [ 247.740924][ T5832] wiimote 0005:057E:0306.0009: detected device: Nintendo Wii Remote (Gen 1) [ 247.859183][ T5832] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0009/input/input23 [ 247.890905][ T5832] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0009/input/input24 [ 247.931197][T21403] bonding: bond0 is being deleted... [ 247.942573][ T5832] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0009/input/input22 [ 247.996114][T21403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.002633][T21403] bond_slave_0: left allmulticast mode [ 248.017778][T21403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.022808][T21403] bond_slave_1: left allmulticast mode [ 248.028832][T21403] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 248.032860][T21403] syz_tun: left allmulticast mode [ 248.036059][T21403] bond0 (unregistering): Released all slaves [ 248.186949][T21421] loop6: detected capacity change from 0 to 8 [ 248.297266][T21428] pimreg: tun_chr_ioctl cmd 1074025672 [ 248.297342][T21428] pimreg: ignored: set checksum enabled [ 248.337529][T21418] pci_bus 0000:01: busn_res: [bus 01] is released [ 248.458395][T21441] xt_hashlimit: size too large, truncated to 1048576 [ 248.501333][T21447] nbd2: detected capacity change from 0 to 127 [ 248.514023][T19380] block nbd2: Receive control failed (result -104) [ 248.617815][T21455] MTRR 1 not used [ 248.851839][ T1172] wlan1: Trigger new scan to find an IBSS to join [ 249.665790][T21333] wiimote 0005:057E:0306.0009: Device removed [ 249.787757][T21494] input: syz0 as /devices/virtual/input/input25 [ 249.826731][ T1162] wlan1: Creating new IBSS network, BSSID ce:c1:c4:e6:8c:01 [ 249.911733][T10826] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 250.005082][T21505] ima: policy update failed [ 250.062046][T10826] usb 6-1: Using ep0 maxpacket: 8 [ 250.067309][T10826] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 250.072314][T10826] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.072362][T10826] usb 6-1: config 0 has no interface number 0 [ 250.072411][T10826] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.072469][T10826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.092300][T10826] usb 6-1: config 0 descriptor?? [ 250.112674][T10826] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 250.205349][T21522] kAFS: bad VL server IP address [ 250.319118][ T1351] usb 6-1: USB disconnect, device number 9 [ 251.812294][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 251.813493][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 251.813529][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 251.813553][ T26] block nbd2: Connection timed out, retrying (0/1 alive) [ 251.815323][ T26] block nbd2: Dead connection, failed to find a fallback [ 251.815338][ T26] block nbd2: shutting down sockets [ 251.815349][ T26] blk_print_req_error: 5 callbacks suppressed [ 251.815357][ T26] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.815378][ T26] buffer_io_error: 10 callbacks suppressed [ 251.815385][ T26] Buffer I/O error on dev nbd2, logical block 3, async page read [ 251.815609][ T26] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.815627][ T26] Buffer I/O error on dev nbd2, logical block 2, async page read [ 251.815642][ T26] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.815658][ T26] Buffer I/O error on dev nbd2, logical block 1, async page read [ 251.815671][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.815686][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 251.823882][ T1308] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.823906][ T1308] Buffer I/O error on dev nbd2, logical block 0, async page read [ 251.824706][ T1308] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.824725][ T1308] Buffer I/O error on dev nbd2, logical block 1, async page read [ 251.824781][ T1308] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.824797][ T1308] Buffer I/O error on dev nbd2, logical block 2, async page read [ 251.824851][ T1308] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.824873][ T1308] Buffer I/O error on dev nbd2, logical block 3, async page read [ 251.828444][ T1308] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.828472][ T1308] Buffer I/O error on dev nbd2, logical block 0, async page read [ 251.828495][ T1308] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 251.828515][ T1308] Buffer I/O error on dev nbd2, logical block 1, async page read [ 251.830217][T19689] ldm_validate_partition_table(): Disk read failed. [ 251.835523][T19689] Dev nbd2: unable to read RDB block 0 [ 251.836293][T19689] nbd2: unable to read partition table [ 251.836740][ T42] kauditd_printk_skb: 111 callbacks suppressed [ 251.836749][ T42] audit: type=1800 audit(2000000595.202:37555): pid=19689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20155 res=0 errno=0 [ 251.844224][T19689] ldm_validate_partition_table(): Disk read failed. [ 251.845290][T19689] Dev nbd2: unable to read RDB block 0 [ 251.846500][T19689] nbd2: unable to read partition table [ 252.150802][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7265'. [ 252.365418][T21622] openvswitch: netlink: IP tunnel TTL not specified. [ 252.365489][T21622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.469259][ T42] audit: type=1800 audit(2000000595.832:37556): pid=21628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.7278" name="nx_huge_pages_recovery_period_ms" dev="sysfs" ino=56833 res=0 errno=0 [ 252.604515][T21639] openvswitch: netlink: Missing key (keys=40, expected=100) [ 252.649006][T21644] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7286'. [ 252.678252][T21647] WARNING! power/level is deprecated; use power/control instead [ 252.678441][ T42] audit: type=1800 audit(2000000596.042:37557): pid=21647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7288" name="level" dev="sysfs" ino=27887 res=0 errno=0 [ 252.716502][ T42] audit: type=1804 audit(2000000596.082:37558): pid=21650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.7289" name="/newroot/1902/file1" dev="tmpfs" ino=9714 res=1 errno=0 [ 252.764203][T21656] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 252.799170][T21658] ALSA: mixer_oss: invalid OSS volume '' [ 252.799233][T21658] ALSA: mixer_oss: invalid OSS volume '@' [ 252.799483][T21658] ALSA: mixer_oss: invalid OSS volume '|' [ 252.799988][T21658] ALSA: mixer_oss: invalid OSS volume '' [ 253.036116][T21680] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 253.098190][T21682] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.174853][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7309'. [ 253.175016][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7309'. [ 253.178903][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7309'. [ 253.178926][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7309'. [ 253.516433][ T42] audit: type=1800 audit(2000000852.877:37559): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180408 res=0 errno=0 [ 253.565632][ T42] audit: type=1800 audit(2000000852.927:37560): pid=21723 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7324" name="algorithm_params" dev="sysfs" ino=22125 res=0 errno=0 [ 253.774878][T21737] gretap0: entered promiscuous mode [ 253.777345][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7331'. [ 253.777488][T21737] gretap0: left promiscuous mode [ 253.822478][T21741] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 253.824908][ T42] audit: type=1800 audit(2000000853.187:37561): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180438 res=0 errno=0 [ 253.956424][T21749] : renamed from vlan0 (while UP) [ 254.021958][T10826] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 254.170970][ T42] audit: type=1400 audit(2000000853.527:37562): avc: denied { ioctl } for pid=21756 comm="syz.1.7341" path="socket:[68183]" dev="sockfs" ino=68183 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.172063][T10826] usb 7-1: Using ep0 maxpacket: 8 [ 254.172832][T10826] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.173818][T10826] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.173839][T10826] usb 7-1: config 0 has no interface number 0 [ 254.173871][T10826] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.173905][T10826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.177183][ T42] audit: type=1800 audit(2000000853.537:37563): pid=19689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180458 res=0 errno=0 [ 254.177402][T10826] usb 7-1: config 0 descriptor?? [ 254.178598][ T42] audit: type=1800 audit(2000000853.537:37564): pid=19689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=180487 res=0 errno=0 [ 254.186282][T10826] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 254.391593][T10826] usb 7-1: USB disconnect, device number 11 [ 254.494585][T21768] vlan0: entered allmulticast mode [ 254.494646][T21768] macsec0: entered allmulticast mode [ 254.494716][T21768] veth1_macvtap: entered allmulticast mode [ 254.636752][T21776] overlay: filesystem on ./file0 not supported as upperdir [ 255.261948][T21812] ./dev/sda1: Can't open blockdev [ 255.492917][T21825] vcan0: Caught tx_queue_len zero misconfig [ 255.535997][T21827] netlink: 'syz.1.7373': attribute type 10 has an invalid length. [ 255.545160][T21827] team0: Port device veth0 added [ 256.179595][T21857] netlink: 'syz.2.7388': attribute type 10 has an invalid length. [ 256.193071][T21857] team0: Port device veth0 added [ 256.417932][T21878] block2mtd: device name too long [ 256.743964][T21907] bonding: b is being created... [ 256.914157][T21916] jffs2: notice: (21916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 257.040939][T21924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7419'. [ 257.138002][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 257.138226][ T42] audit: type=1800 audit(2000000856.497:37582): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.7421" name="uevent" dev="sysfs" ino=1702 res=0 errno=0 [ 257.142393][T21930] synth uevent: /bus/acpi: unknown uevent action string [ 257.207315][ T42] audit: type=1800 audit(2000000856.567:37583): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 257.248863][ T42] audit: type=1800 audit(2000000856.607:37584): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 257.275559][ T42] audit: type=1400 audit(2000000856.637:37585): avc: denied { setopt } for pid=21940 comm="syz.4.7427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 257.296491][ T42] audit: type=1800 audit(2000000856.657:37586): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 257.333828][ T42] audit: type=1800 audit(2000000856.697:37587): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 257.379806][ T42] audit: type=1800 audit(2000000856.737:37588): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 257.445185][T21957] jffs2: notice: (21957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 257.447264][ T42] audit: type=1800 audit(2000000856.807:37589): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 257.461196][ T42] audit: type=1400 audit(2000000856.817:37590): avc: denied { setattr } for pid=21956 comm="syz.4.7434" name="del2" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 257.496563][ T42] audit: type=1800 audit(2000000856.857:37591): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 257.557962][T21968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7439'. [ 257.727322][T21986] ima: policy update completed [ 258.761716][T22026] loop5: detected capacity change from 0 to 7 [ 258.772676][T22026] Dev loop5: unable to read RDB block 7 [ 258.772735][T22026] loop5: AHDI p1 [ 258.772784][T22026] loop5: partition table partially beyond EOD, truncated [ 259.241180][ T5832] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 259.295241][T22057] veth0_macvtap: Caught tx_queue_len zero misconfig [ 259.395531][ T5832] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 259.397087][ T5832] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.397107][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 259.397120][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 259.399455][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.399469][ T5832] usb 7-1: Product: syz [ 259.399479][ T5832] usb 7-1: Manufacturer: syz [ 259.399487][ T5832] usb 7-1: SerialNumber: syz [ 259.407911][ T5832] usb 7-1: config 0 descriptor?? [ 259.408635][T22043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.472751][T22065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7481'. [ 259.478481][T22065] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.501123][ T5832] rc_core: IR keymap rc-streamzap not found [ 259.501164][ T5832] Registered IR keymap rc-empty [ 259.503167][ T5832] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 259.517895][ T5832] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input26 [ 259.605685][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7482'. [ 259.616434][T17887] usb 7-1: USB disconnect, device number 12 [ 260.212302][T22085] kAFS: Invalid Command on /proc/fs/afs/cells file [ 260.353645][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7493'. [ 261.109396][T22141] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 261.395885][T22153] block2mtd: illegal erase size [ 261.675726][T22173] Bluetooth: MGMT ver 1.23 [ 261.675812][T22173] Bluetooth: hci1: expected 121 bytes, got 2 bytes [ 261.721565][T22177] batadv_slave_0: Caught tx_queue_len zero misconfig [ 261.828849][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7535'. [ 261.863277][T22186] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 262.175278][ T42] kauditd_printk_skb: 78 callbacks suppressed [ 262.175378][ T42] audit: type=1800 audit(2000000861.538:37670): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 262.207392][ T42] audit: type=1800 audit(2000000861.568:37671): pid=22216 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.7551" name="demote_size" dev="sysfs" ino=1266 res=0 errno=0 [ 262.236112][ T42] audit: type=1800 audit(2000000861.598:37672): pid=22220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7553" name="trace_method_name" dev="sysfs" ino=59472 res=0 errno=0 [ 262.283577][ T42] audit: type=1800 audit(2000000861.648:37673): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 262.365113][ T42] audit: type=1800 audit(2000000861.728:37674): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 262.392792][T22230] netlink: 'syz.2.7558': attribute type 1 has an invalid length. [ 262.392873][T22230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7558'. [ 262.440787][ T42] audit: type=1800 audit(2000000861.798:37675): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 262.498156][ T42] audit: type=1800 audit(2000000861.858:37676): pid=22238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.7562" name="reset" dev="sysfs" ino=22116 res=0 errno=0 [ 262.505291][ T42] audit: type=1800 audit(2000000861.868:37677): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 262.574908][ T42] audit: type=1800 audit(2000000861.938:37678): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 262.603456][ T42] audit: type=1800 audit(2000000861.968:37679): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181216 res=0 errno=0 [ 262.761927][T22258] jffs2: notice: (22258) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 263.842023][ T5805] hid_parser_main: 98 callbacks suppressed [ 263.842127][ T5805] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 263.842164][ T5805] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 263.842743][ T5805] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 263.842765][ T5805] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 263.842781][ T5805] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 263.842796][ T5805] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 263.842819][ T5805] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 263.842834][ T5805] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 263.842849][ T5805] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 263.842864][ T5805] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 263.845734][ T5805] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 263.845734][ T5805] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on [ 263.998920][T22292] fido_id[22292]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 264.202602][T22305] openvswitch: netlink: IP tunnel dst address not specified [ 264.202693][T22305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.349265][T22313] bcache: register_bcache() error : failed to open device [ 264.718965][T22335] loop3: detected capacity change from 0 to 7 [ 264.722869][ C3] blk_print_req_error: 128 callbacks suppressed [ 264.722950][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.723076][ C3] buffer_io_error: 138 callbacks suppressed [ 264.723091][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 264.723361][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.723475][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 264.723683][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.723791][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 264.724130][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.724236][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 264.724478][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.724582][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 264.724811][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.724914][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 264.725216][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.725310][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 264.725350][T22335] ldm_validate_partition_table(): Disk read failed. [ 264.725506][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.725599][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 264.725769][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.725861][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 264.726028][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.726120][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 264.726488][T22335] Dev loop3: unable to read RDB block 0 [ 264.727565][T22335] loop3: unable to read partition table [ 264.727938][T22335] loop3: partition table beyond EOD, truncated [ 264.730275][T22335] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 264.925096][T22339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.928025][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7609'. [ 264.929670][T22339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.930206][T22339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.991939][T22345] usbcore.quirks: string doesn't fit in 127 chars. [ 265.397485][T22378] block2mtd: illegal erase size [ 265.712901][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.721547][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.732643][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.738820][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.743329][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.447135][T22421] overlayfs: invalid origin (0000) [ 266.641630][T22430] Oops: general protection fault, probably for non-canonical address 0xdffffc000000001e: 0000 [#1] SMP KASAN NOPTI [ 266.645611][T22430] KASAN: null-ptr-deref in range [0x00000000000000f0-0x00000000000000f7] [ 266.648909][T22430] CPU: 1 UID: 0 PID: 22430 Comm: syz.2.7642 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.652364][T22430] Tainted: [L]=SOFTLOCKUP [ 266.653749][T22430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.654903][T22390] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.655401][T22390] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.655578][T22390] bridge_slave_0: entered allmulticast mode [ 266.660436][T22390] bridge_slave_0: entered promiscuous mode [ 266.664326][T22390] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.664464][T22390] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.664933][T22390] bridge_slave_1: entered allmulticast mode [ 266.667389][T22390] bridge_slave_1: entered promiscuous mode [ 266.673375][T22430] RIP: 0010:rebind_store+0x147/0x2d0 [ 266.675046][T22430] Code: 53 01 00 00 48 89 d8 48 c1 e0 07 4c 8b b0 30 e4 ca 9b 48 b8 00 00 00 00 00 fc ff df 49 8d be f0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 30 01 00 00 4d 8b be f0 00 00 00 4d 85 ff 74 3c [ 266.681167][T22430] RSP: 0018:ffffc900066f7c38 EFLAGS: 00010206 [ 266.683262][T22430] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 266.686142][T22430] RDX: 000000000000001e RSI: 0000000000000004 RDI: 00000000000000f0 [ 266.688768][T22430] RBP: ffffffff9bcae430 R08: 0000000000000000 R09: fffffbfff3795c88 [ 266.691359][T22430] R10: ffffffff9bcae443 R11: 0000000000000001 R12: 0000000000000001 [ 266.693893][T22430] R13: ffff88805bcc9960 R14: 0000000000000000 R15: ffff88802cef8200 [ 266.696457][T22430] FS: 00007fcdc9cf66c0(0000) GS:ffff8880d5c64000(0000) knlGS:0000000000000000 [ 266.699264][T22430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.701401][T22430] CR2: 000000110c317a65 CR3: 000000005bd74000 CR4: 0000000000352ef0 [ 266.703943][T22430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.706664][T22430] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 266.709315][T22430] Call Trace: [ 266.710393][T22430] [ 266.711345][T22430] ? __pfx_rebind_store+0x10/0x10 [ 266.712940][T22430] drv_attr_store+0x74/0xb0 [ 266.714354][T22430] ? __pfx_drv_attr_store+0x10/0x10 [ 266.715914][T22430] sysfs_kf_write+0xf2/0x150 [ 266.717299][T22430] kernfs_fop_write_iter+0x3e0/0x5f0 [ 266.718965][T22430] ? __pfx_sysfs_kf_write+0x10/0x10 [ 266.720747][T22430] vfs_write+0x6af/0x1050 [ 266.722220][T22430] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 266.723544][T22390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.726910][T22430] ? __pfx_vfs_write+0x10/0x10 [ 266.727348][T22390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.731277][T22430] ? find_held_lock+0x2b/0x80 [ 266.732748][T22430] ksys_write+0x12a/0x250 [ 266.734243][T22430] ? __pfx_ksys_write+0x10/0x10 [ 266.735962][T22430] do_syscall_64+0x123/0x790 [ 266.737450][T22430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.739489][T22430] RIP: 0033:0x7fcdc8d9e159 [ 266.740880][T22430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.746611][T22430] RSP: 002b:00007fcdc9cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.749193][T22430] RAX: ffffffffffffffda RBX: 00007fcdc9025fa0 RCX: 00007fcdc8d9e159 [ 266.751820][T22430] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000003 [ 266.754690][T22430] RBP: 00007fcdc8e35024 R08: 0000000000000000 R09: 0000000000000000 [ 266.757516][T22430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.758812][T22390] team0: Port device team_slave_0 added [ 266.762113][T22390] team0: Port device team_slave_1 added [ 266.764072][T22430] R13: 00007fcdc9026038 R14: 00007fcdc9025fa0 R15: 00007ffe966df568 [ 266.766591][T22430] [ 266.767597][T22430] Modules linked in: [ 266.770247][T22430] ---[ end trace 0000000000000000 ]--- [ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) ** replaying previous printk message ** [ 266.776947][T22430] RIP: 0010:rebind_store+0x147/0x2d0 [ 266.777022][T22430] Code: 53 01 00 00 48 89 d8 48 c1 e0 07 4c 8b b0 30 e4 ca 9b 48 b8 00 00 00 00 00 fc ff df 49 8d be f0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 30 01 00 00 4d 8b be f0 00 00 00 4d 85 ff 74 3c [ 266.777043][T22430] RSP: 0018:ffffc900066f7c38 EFLAGS: 00010206 [ 266.777063][T22430] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 266.777074][T22430] RDX: 000000000000001e RSI: 0000000000000004 RDI: 00000000000000f0 [ 266.777084][T22430] RBP: ffffffff9bcae430 R08: 0000000000000000 R09: fffffbfff3795c88 [ 266.777099][T22430] R10: ffffffff9bcae443 R11: 0000000000000001 R12: 0000000000000001 [ 266.777111][T22430] R13: ffff88805bcc9960 R14: 0000000000000000 R15: ffff88802cef8200 [ 266.777124][T22430] FS: 00007fcdc9cf66c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 266.777161][T22430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.777174][T22430] CR2: 00007fe8eb227dac CR3: 000000005bd74000 CR4: 0000000000352ef0 [ 266.777185][T22430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.777198][T22430] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 266.777212][T22430] Kernel panic - not syncing: Fatal exception [ 266.825211][T22430] Kernel Offset: disabled [ 266.826521][T22430] Rebooting in 86400 seconds..