last executing test programs: 42.962839578s ago: executing program 3 (id=6256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x3, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x892}, 0x40000) 42.860750289s ago: executing program 3 (id=6259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 42.708910389s ago: executing program 3 (id=6263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) 42.624995744s ago: executing program 3 (id=6264): mkdir(&(0x7f0000000100)='./file0\x00', 0x197) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 42.619098161s ago: executing program 3 (id=6265): mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) statx(0xffffffffffffff9c, 0x0, 0x600, 0x8, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./mytrace\x00', 0x0, 0x1e6064, &(0x7f00000003c0)={[{@gid}, {@mode={'mode', 0x3d, 0x9}}]}) 42.163709857s ago: executing program 3 (id=6266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.163643032s ago: executing program 32 (id=6266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.443975194s ago: executing program 4 (id=6634): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x3004000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="80", 0x1) 21.305020747s ago: executing program 4 (id=6638): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r0, &(0x7f0000000180)=""/67, 0x43) 20.411874686s ago: executing program 4 (id=6647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3e8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 20.307036329s ago: executing program 4 (id=6649): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x1a474dc, 0x0) umount2(&(0x7f0000000140)='./file0/file0/..\x00', 0x4) 20.257230045s ago: executing program 4 (id=6651): memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\x0e\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_\x95\x00\x00\x00j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7-\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0xa7) write$cgroup_devices(r0, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYBLOB="c5"], 0xffdd) 19.054197059s ago: executing program 4 (id=6665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x95, @loopback, 0x9}, 0x66) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) shutdown(r0, 0x1) 18.940278397s ago: executing program 33 (id=6665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x95, @loopback, 0x9}, 0x66) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) shutdown(r0, 0x1) 8.036383688s ago: executing program 1 (id=6906): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f1ee01b1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b4007e2de8cd9c81f9139a5db8532d322dd474952c0be6bdd54c691276df6b9ff95660a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf4438c0078ec27b40b21188c8ad246eb1d5382b2c73931bbab99b0137e009ef1cc9d8f30c6c7fe1095dcf4ce670133c5785900"/253, 0xfd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 7.977513331s ago: executing program 1 (id=6908): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x10012, r1, 0x0) write(r0, &(0x7f00000008c0)='E/', 0x2) 7.888497491s ago: executing program 1 (id=6910): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) 7.805933281s ago: executing program 1 (id=6911): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0xb}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) 7.75445419s ago: executing program 1 (id=6912): syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 6.850664832s ago: executing program 1 (id=6936): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000140)) 1.320178051s ago: executing program 0 (id=7086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x3}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x12, 0x0, 0x7}]}) 1.163690882s ago: executing program 0 (id=7090): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c854}, 0x40) 1.116111199s ago: executing program 0 (id=7092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable', 0x8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 925.735592ms ago: executing program 2 (id=7098): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) setresuid(0x0, 0xee00, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) utimensat(r2, 0x0, 0x0, 0x0) 881.66815ms ago: executing program 2 (id=7099): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) 780.835235ms ago: executing program 2 (id=7109): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/flush\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) 609.182267ms ago: executing program 2 (id=7104): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000006c0)="cc", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20) 590.704732ms ago: executing program 5 (id=7105): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x0, 0x0, 0x40007, {{0x5, 0x4, 0x0, 0xb, 0x14, 0x64, 0x0, 0x28, 0x4, 0x0, @broadcast, @multicast2}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="0b031260fe814e3ab5ce8f94061cffff", 0x10, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'erspan0\x00', 0x0}) 557.423053ms ago: executing program 2 (id=7106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='off\n', 0x4) write(r0, &(0x7f0000000180)='on', 0x2) 547.047037ms ago: executing program 5 (id=7107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x64, 0x0, &(0x7f0000000840)=[@request_death, @request_death, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 507.376517ms ago: executing program 5 (id=7108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbef, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x24, 0xfe, "64a6e8c18f375388895621fa0a95d7c5f97dc7da3e13b06975cf3d11fd33cc74"}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000894}, 0x884) 426.274073ms ago: executing program 5 (id=7110): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 287.365658ms ago: executing program 5 (id=7111): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)={0x0, 0x2, 0x10001, 0x2, 0x1002, 0xffffff73}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 218.122321ms ago: executing program 0 (id=7112): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 157.834205ms ago: executing program 5 (id=7113): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) pread64(r0, &(0x7f0000000080)=""/4, 0x4, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000040)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101381) syz_emit_ethernet(0x0, 0x0, 0x0) 126.426268ms ago: executing program 0 (id=7114): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 90.105µs ago: executing program 0 (id=7115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04}]}) 0s ago: executing program 2 (id=7116): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) kernel console output (not intermixed with test programs): 13928][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.014230][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.014499][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.014766][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.015053][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.015317][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.015685][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.015971][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.016235][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.016502][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.016751][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.017010][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.017320][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.017587][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.017859][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.018170][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.019375][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.019636][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.019884][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.020181][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.020441][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.020776][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.021019][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.021321][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.021540][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.021743][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.021962][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.022164][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.022374][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.022576][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.022836][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.023048][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.023250][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.023452][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.023662][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.023871][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.024073][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.024282][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.024493][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.024741][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.024991][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.025211][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.025467][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.025713][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.025970][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.026225][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.026439][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.026681][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.026939][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.027158][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.027359][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.027610][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.027919][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.028168][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.028651][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.028902][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.029152][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.029378][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.029565][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.029823][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.030100][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.030352][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.030593][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.031208][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.031463][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.032190][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.032988][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.033272][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.033525][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.033779][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.033993][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.034239][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.034498][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.034792][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.034982][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.035139][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.035290][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.035440][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.035595][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.035743][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.035985][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.036220][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.036408][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.036636][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.036894][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.037141][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.037399][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.037638][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.037830][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.037987][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.038136][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.038288][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.039143][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.039296][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.039444][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.039599][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.039747][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.039906][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.040056][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.040206][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.040362][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.040511][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.040713][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.040874][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.041425][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.041580][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.041747][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.041916][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.042091][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.042275][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.042427][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.042584][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.042735][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.042889][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.043046][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.043196][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.043348][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.043516][T17715] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 217.218797][ T5821] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 217.348844][T17750] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.369223][ T5821] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 217.370192][ T5821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.370213][ T5821] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 217.370242][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.390700][ T5821] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 217.404936][ T5821] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 217.868487][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 218.049145][T17758] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 218.049650][T17758] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 218.052278][T17758] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 218.159396][T17758] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 218.164376][ T5837] usb 6-1: USB disconnect, device number 21 [ 218.173559][ T5837] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 218.173837][ T5837] spcp8x5 6-1:1.0: device disconnected [ 218.261974][ T43] kauditd_printk_skb: 55 callbacks suppressed [ 218.261991][ T43] audit: type=1800 audit(1790787850.197:1276): pid=17765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.5442" name="online" dev="sysfs" ino=764 res=0 errno=0 [ 218.493037][ T43] audit: type=1800 audit(1790787850.427:1277): pid=17780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5449" name="dbroot" dev="configfs" ino=62045 res=0 errno=0 [ 218.493761][T17780] db_root: cannot open: /dev/ptmx [ 218.493769][T17780] db_root: not a directory: /dev/ptmx [ 218.769815][T17713] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 218.771439][T17799] IPVS: Error during creation of socket; terminating [ 218.898363][ T43] audit: type=1400 audit(1790787850.838:1278): avc: denied { mount } for pid=17804 comm="syz.3.5459" name="/" dev="autofs" ino=62504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 218.907311][ T43] audit: type=1400 audit(1790787850.838:1279): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 218.994754][T17809] kvm: MONITOR instruction emulated as NOP! [ 219.609993][ T43] audit: type=1800 audit(1790787851.538:1280): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153753 res=0 errno=0 [ 219.724646][T17846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5477'. [ 219.724683][T17846] netlink: 'syz.3.5477': attribute type 7 has an invalid length. [ 219.724695][T17846] netlink: 'syz.3.5477': attribute type 8 has an invalid length. [ 219.724706][T17846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5477'. [ 219.732893][T17844] gadgetfs: bound to dummy_udc driver [ 219.788060][ T5837] usb 7-1: USB disconnect, device number 24 [ 219.881820][ T43] audit: type=1800 audit(1790787851.818:1281): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153781 res=0 errno=0 [ 219.890072][T17851] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 219.893135][ T43] audit: type=1800 audit(1790787851.828:1282): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153792 res=0 errno=0 [ 220.159761][ T43] audit: type=1800 audit(1790787852.088:1283): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153896 res=0 errno=0 [ 220.176569][ T5821] wiimote 0005:057E:0330.0010: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 220.178060][ T43] audit: type=1800 audit(1790787852.108:1284): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153918 res=0 errno=0 [ 220.187590][ T5821] wiimote 0005:057E:0330.0010: New device registered [ 220.202819][T17864] wiimote 0005:057E:0330.0010: Unhandled report 32 size 1 [ 220.222309][ T43] audit: type=1800 audit(1790787852.158:1285): pid=17863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=153898 res=0 errno=0 [ 220.253363][T17861] wiimote 0005:057E:0330.0010: Device removed [ 221.228114][ T5821] wiimote 0005:057E:0330.0010: detected device: Nintendo Wii Remote Plus (Gen 2) [ 221.259552][ T5821] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0010/input/input36 [ 221.281558][ T5821] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0010/input/input37 [ 221.300374][ T5821] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0010/input/input35 [ 221.952036][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 221.953664][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 222.037086][ T179] IPVS: starting estimator thread 0... [ 222.127879][T17884] IPVS: using max 44 ests per chain, 105600 per kthread [ 222.307850][ T63] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 222.458673][ T63] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.459856][ T63] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.459880][ T63] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.459914][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.672452][ T63] usb 7-1: GET_CAPABILITIES returned 0 [ 222.672493][ T63] usbtmc 7-1:16.0: can't read capabilities [ 222.875877][ T63] usb 7-1: USB disconnect, device number 25 [ 223.426605][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 223.426623][ T43] audit: type=1800 audit(1790787855.358:1334): pid=17901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5500" name="shmem_enabled" dev="sysfs" ino=1329 res=0 errno=0 [ 223.547064][T17910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5504'. [ 223.547100][T17910] netlink: 'syz.0.5504': attribute type 7 has an invalid length. [ 223.547112][T17910] netlink: 'syz.0.5504': attribute type 8 has an invalid length. [ 223.547123][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5504'. [ 223.760903][T17913] gadgetfs: bound to dummy_udc driver [ 223.932782][ T43] audit: type=1400 audit(1790787855.868:1335): avc: denied { listen } for pid=17922 comm="syz.3.5510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.933276][ T43] audit: type=1400 audit(1790787855.868:1336): avc: denied { accept } for pid=17922 comm="syz.3.5510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 224.130975][ T43] audit: type=1800 audit(1790787856.068:1337): pid=17926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.5511" name="shmem_enabled" dev="sysfs" ino=1329 res=0 errno=0 [ 224.220373][ T43] audit: type=1400 audit(1790787856.158:1338): avc: denied { mount } for pid=17929 comm="syz.3.5513" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 224.242636][ T43] audit: type=1400 audit(1790787856.178:1339): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 224.386807][ T43] audit: type=1400 audit(1790787856.318:1340): avc: denied { ioctl } for pid=17937 comm="syz.3.5518" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 224.401767][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5519'. [ 224.559054][ T43] audit: type=1400 audit(1790787856.488:1341): avc: denied { mount } for pid=17944 comm="syz.2.5521" name="/" dev="ramfs" ino=62814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 224.749258][T17955] tipc: Started in network mode [ 224.749280][T17955] tipc: Node identity 1000001, cluster identity 4369 [ 224.749291][T17955] tipc: Node number set to 16777217 [ 224.753783][T17955] tipc: Cannot configure node identity twice [ 224.756318][T17955] tipc: New replicast peer: 127.0.0.1 [ 224.756939][T17955] tipc: Enabled bearer , priority 10 [ 224.823008][ T43] audit: type=1800 audit(1790787856.758:1342): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154425 res=0 errno=0 [ 224.824313][T17961] base or size exceeds the MTRR width [ 224.824782][ T43] audit: type=1800 audit(1790787856.758:1343): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=154440 res=0 errno=0 [ 224.846530][T17960] input: syz0 as /devices/virtual/input/input38 [ 225.019987][ T35] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 225.188549][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 225.189059][ T35] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 225.189863][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.189874][ T35] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 225.189893][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 225.189907][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 225.189926][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.194010][ T35] hub 7-1:1.0: bad descriptor, ignoring hub [ 225.194023][ T35] hub 7-1:1.0: probe with driver hub failed with error -5 [ 225.194876][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 225.194885][ T35] cdc_wdm 7-1:1.0: skipping garbage [ 225.196118][ T35] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 225.196128][ T35] cdc_wdm 7-1:1.0: Unknown control protocol [ 225.364177][T17987] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 225.471741][T17990] program syz.3.5539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.811105][T17957] usb 7-1: reset high-speed USB device number 26 using dummy_hcd [ 226.300342][ T9213] usb 7-1: USB disconnect, device number 26 [ 226.823024][T18013] program syz.2.5549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.071812][T18040] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 227.199426][T18046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5566'. [ 227.202431][T18046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5566'. [ 227.294697][T18057] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 227.310134][T18059] netlink: 'syz.0.5571': attribute type 101 has an invalid length. [ 227.339412][T18061] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 227.602702][T18080] ip_tables: iptables: counters copy to user failed while replacing table [ 227.604533][T18080] ip_tables: iptables: counters copy to user failed while replacing table [ 228.067090][T18089] netlink: 'syz.3.5585': attribute type 101 has an invalid length. [ 228.694354][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 228.694367][ T43] audit: type=1800 audit(1790787860.629:1371): pid=18124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5601" name="routing_algo" dev="sysfs" ino=66645 res=0 errno=0 [ 229.108250][ T43] audit: type=1400 audit(1790787861.049:1372): avc: denied { mounton } for pid=18149 comm="syz.3.5614" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 229.178883][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5616'. [ 229.333445][T18176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5624'. [ 229.334021][T18176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5624'. [ 229.400207][T18182] ip_tables: iptables: counters copy to user failed while replacing table [ 229.402205][T18182] ip_tables: iptables: counters copy to user failed while replacing table [ 229.902574][ T43] audit: type=1400 audit(1790787861.839:1373): avc: denied { map } for pid=18219 comm="syz.1.5652" path="socket:[63953]" dev="sockfs" ino=63953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.047678][ T9213] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 230.081179][T18230] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 230.208131][ T9213] usb 7-1: Using ep0 maxpacket: 8 [ 230.209324][ T9213] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.214539][ T9213] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 230.214582][ T9213] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.214600][ T9213] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.214618][ T9213] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.214635][ T9213] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.214664][ T9213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.221204][ T43] audit: type=1800 audit(1790787862.159:1374): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155189 res=0 errno=0 [ 230.222621][ T43] audit: type=1800 audit(1790787862.159:1375): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=155218 res=0 errno=0 [ 230.225740][ T43] audit: type=1800 audit(1790787862.159:1376): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=155196 res=0 errno=0 [ 230.226452][ T43] audit: type=1800 audit(1790787862.159:1377): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=155197 res=0 errno=0 [ 230.229911][ T43] audit: type=1800 audit(1790787862.159:1378): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=155198 res=0 errno=0 [ 230.239001][ T43] audit: type=1800 audit(1790787862.179:1379): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155238 res=0 errno=0 [ 230.429249][ T9213] usb 7-1: usb_control_msg returned -32 [ 230.429285][ T9213] usbtmc 7-1:16.0: can't read capabilities [ 230.431517][ T43] audit: type=1800 audit(1790787862.369:1380): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155255 res=0 errno=0 [ 230.644933][T18249] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 230.783903][T18252] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 230.986772][ T9213] usb 7-1: USB disconnect, device number 27 [ 231.131549][T18258] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 231.576315][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 231.588217][T18271] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 231.588233][T18271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.634500][T18277] device-mapper: ioctl: Invalid ioctl structure: uuid ÿÿÿÿ, name , dev f3 [ 231.856977][T18296] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 231.856995][T18296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.005613][T18308] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 232.010767][ C3] vcan0: j1939_tp_rxtimer: 0xffff888035144400: rx timeout, send abort [ 232.013996][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888035144400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 232.018455][T18309] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 232.018488][T18309] CPU: 0 UID: 0 PID: 18309 Comm: syz.1.5683 Tainted: G S L syzkaller #0 PREEMPT(full) [ 232.018508][T18309] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 232.018514][T18309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.018521][T18309] Call Trace: [ 232.018526][T18309] [ 232.018531][T18309] dump_stack_lvl+0x100/0x190 [ 232.018553][T18309] sysfs_warn_dup.cold+0x1c/0x28 [ 232.018572][T18309] sysfs_create_dir_ns+0x24b/0x2b0 [ 232.018591][T18309] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 232.018606][T18309] ? find_held_lock+0x2b/0x80 [ 232.018623][T18309] ? kobject_add_internal+0x25f/0x930 [ 232.018639][T18309] ? kobject_add_internal+0x25f/0x930 [ 232.018656][T18309] ? class_dir_child_ns_type+0xd/0x60 [ 232.018675][T18309] kobject_add_internal+0x2c8/0x930 [ 232.018692][T18309] kobject_add+0x16a/0x1e0 [ 232.018706][T18309] ? __pfx_kobject_add+0x10/0x10 [ 232.018721][T18309] ? get_device_parent+0x1b3/0x4c0 [ 232.018736][T18309] ? kobject_put+0xb9/0x640 [ 232.018753][T18309] device_add+0x294/0x1970 [ 232.018770][T18309] ? lockdep_init_map_type+0x5c/0x250 [ 232.018785][T18309] ? __pfx_device_add+0x10/0x10 [ 232.018801][T18309] ? lockdep_init_map_type+0x5c/0x250 [ 232.018814][T18309] ? __init_waitqueue_head+0xca/0x150 [ 232.018832][T18309] tty_register_device_attr+0x388/0x7f0 [ 232.018847][T18309] ? lockdep_init_map_type+0x5c/0x250 [ 232.018861][T18309] ? __pfx_tty_register_device_attr+0x10/0x10 [ 232.018879][T18309] ? tty_port_init+0x156/0x1c0 [ 232.018896][T18309] gsm_activate_mux+0x155/0x2a0 [ 232.018911][T18309] gsmld_ioctl+0xbbc/0x15c0 [ 232.018925][T18309] ? __pfx_gsmld_ioctl+0x10/0x10 [ 232.018944][T18309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.018959][T18309] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 232.018973][T18309] ? __pfx_gsmld_ioctl+0x10/0x10 [ 232.018982][T18309] tty_ioctl+0x11b4/0x1640 [ 232.018996][T18309] ? __pfx_tty_ioctl+0x10/0x10 [ 232.019010][T18309] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 232.019026][T18309] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 232.019043][T18309] ? __fget_files+0x34/0x3d0 [ 232.019064][T18309] ? selinux_file_ioctl+0x13b/0x290 [ 232.019077][T18309] ? selinux_file_ioctl+0xb6/0x290 [ 232.019092][T18309] ? __pfx_tty_ioctl+0x10/0x10 [ 232.019106][T18309] __x64_sys_ioctl+0x18e/0x210 [ 232.019120][T18309] do_syscall_64+0x123/0x790 [ 232.019133][T18309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.019144][T18309] RIP: 0033:0x7f3219b9e159 [ 232.019154][T18309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.019164][T18309] RSP: 002b:00007f321ab27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.019175][T18309] RAX: ffffffffffffffda RBX: 00007f3219e26090 RCX: 00007f3219b9e159 [ 232.019182][T18309] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 232.019188][T18309] RBP: 00007f3219c3506b R08: 0000000000000000 R09: 0000000000000000 [ 232.019195][T18309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.019201][T18309] R13: 00007f3219e26128 R14: 00007f3219e26090 R15: 00007ffd264a0e58 [ 232.019215][T18309] [ 232.019262][T18309] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 232.177403][T18315] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 232.469976][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5694'. [ 232.497739][T18329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5694'. [ 232.581789][T18337] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 232.750577][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5706'. [ 232.750597][T18357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5706'. [ 232.882279][T18352] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 232.882616][T18352] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 233.376673][ T50] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 233.526574][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 233.527111][ T50] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 233.528124][ T50] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 233.528145][ T50] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 233.528158][ T50] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.528171][ T50] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 233.529903][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.529915][ T50] usb 6-1: Product: syz [ 233.529922][ T50] usb 6-1: Manufacturer: syz [ 233.529929][ T50] usb 6-1: SerialNumber: syz [ 233.540571][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 233.548317][ T50] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input39 [ 233.766608][ T50] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 233.766621][ T50] (id 0x00) [ 233.789971][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802d0cb400: rx timeout, send abort [ 233.790074][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d0cb400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 233.826679][ T50] rc_core: IR keymap rc-imon-pad not found [ 233.826691][ T50] Registered IR keymap rc-empty [ 233.826728][ T50] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 233.826737][ T50] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 233.917039][ T43] kauditd_printk_skb: 75 callbacks suppressed [ 233.917114][ T43] audit: type=1326 audit(1790787865.849:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="syz.2.5722" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f418699e159 code=0x0 [ 233.962604][ T50] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 233.963494][ T50] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input40 [ 233.975575][ T50] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:22> initialized [ 233.977208][ T43] audit: type=1800 audit(1790787865.909:1457): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=156573 res=0 errno=0 [ 233.978147][ T43] audit: type=1800 audit(1790787865.909:1458): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=156574 res=0 errno=0 [ 233.978988][ T43] audit: type=1800 audit(1790787865.909:1459): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=156553 res=0 errno=0 [ 233.981461][ T43] audit: type=1800 audit(1790787865.909:1460): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=156575 res=0 errno=0 [ 233.989966][ T43] audit: type=1800 audit(1790787865.919:1461): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156596 res=0 errno=0 [ 233.998723][ T43] audit: type=1800 audit(1790787865.919:1462): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156615 res=0 errno=0 [ 233.998754][ T43] audit: type=1800 audit(1790787865.929:1463): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=156631 res=0 errno=0 [ 233.998785][ T43] audit: type=1800 audit(1790787865.929:1464): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156751 res=0 errno=0 [ 233.998816][ T43] audit: type=1800 audit(1790787865.929:1465): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156810 res=0 errno=0 [ 234.145396][T18371] imon:vfd_write: invalid payload size [ 234.146883][ T50] usb 6-1: USB disconnect, device number 22 [ 234.444624][T18401] ima: policy update failed [ 234.653602][T18416] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 234.653620][T18416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.721588][T18424] binder: 18423:18424 ioctl c0306201 2000000001c0 returned -14 [ 234.738062][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5739'. [ 234.812896][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5743'. [ 234.812918][T18437] netlink: 'syz.3.5743': attribute type 30 has an invalid length. [ 234.857483][ T851] hsr0: entered promiscuous mode [ 234.857880][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5744'. [ 234.864983][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5743'. [ 234.865005][T18437] netlink: 'syz.3.5743': attribute type 30 has an invalid length. [ 235.059864][T18458] ima: policy update failed [ 235.989814][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5770'. [ 236.065345][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5783'. [ 236.100094][T18505] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5774'. [ 236.100718][T18505] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5774'. [ 236.135615][T18509] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 236.238214][ T851] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 236.406179][ T851] usb 8-1: Using ep0 maxpacket: 8 [ 236.407899][ T851] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 236.409294][ T851] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.409311][ T851] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.409343][ T851] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 236.409363][ T851] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 236.409393][ T851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.629333][T18557] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 237.778573][T18591] gadgetfs: bound to dummy_udc driver [ 238.016299][ T25] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 238.016558][ C2] gadgetfs: connected [ 238.020015][ T25] gadgetfs: disconnected [ 238.054104][T18593] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5820'. [ 238.455864][T18612] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 238.656340][T18630] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 238.841132][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5840'. [ 238.841158][T18636] block nbd0: Unsupported socket: should be TCP or UNIX. [ 238.970777][ T50] usb 8-1: USB disconnect, device number 25 [ 239.226701][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 239.226721][ T43] audit: type=1800 audit(1790787871.160:1506): pid=18657 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.5848" name="state" dev="sysfs" ino=232 res=0 errno=0 [ 239.330247][ T43] audit: type=1804 audit(1790787871.250:1507): pid=18663 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.5852" name="/newroot/1419/file0" dev="tmpfs" ino=7412 res=1 errno=0 [ 239.404154][ T43] audit: type=1800 audit(1790787871.330:1508): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157474 res=0 errno=0 [ 239.410994][ T43] audit: type=1800 audit(1790787871.340:1509): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157484 res=0 errno=0 [ 239.582076][ T43] audit: type=1800 audit(1790787871.510:1510): pid=18685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5859" name="state" dev="sysfs" ino=232 res=0 errno=0 [ 239.665409][ T43] audit: type=1800 audit(1790787871.590:1511): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157689 res=0 errno=0 [ 239.693639][ T43] audit: type=1400 audit(1790787871.620:1512): avc: denied { write } for pid=18691 comm="syz.0.5863" name="/" dev="9p" ino=71827691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.696246][ T43] audit: type=1400 audit(1790787871.620:1513): avc: denied { remove_name } for pid=18691 comm="syz.0.5863" name="file0" dev="9p" ino=71827693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.696372][ T43] audit: type=1400 audit(1790787871.630:1514): avc: denied { unlink } for pid=18691 comm="syz.0.5863" name="file0" dev="9p" ino=71827693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.729605][ T43] audit: type=1400 audit(1790787871.660:1515): avc: denied { write } for pid=18691 comm="syz.0.5863" name="/" dev="9p" ino=71827691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.937972][T18711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5871'. [ 239.937995][T18711] bond0: ARP target 8.4.0.0 is already present [ 239.938006][T18711] bond0: option arp_ip_target: invalid value (1032) [ 240.552121][T18742] syzkaller1: entered promiscuous mode [ 240.552138][T18742] syzkaller1: entered allmulticast mode [ 240.873028][T18776] syzkaller1: entered promiscuous mode [ 240.873049][T18776] syzkaller1: entered allmulticast mode [ 241.215063][T18815] ecryptfs_get_tree: kern_path() failed [ 241.216695][T18815] Reading sb failed; rc = [-2] [ 241.253729][T18822] binder: 18821:18822 ioctl 4018620d 0 returned -22 [ 241.369868][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5928'. [ 242.140390][T18846] syzkaller1: entered promiscuous mode [ 242.140412][T18846] syzkaller1: entered allmulticast mode [ 242.202509][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5938'. [ 242.316873][T18871] ecryptfs_get_tree: kern_path() failed [ 242.319849][T18871] Reading sb failed; rc = [-2] [ 242.370993][T18879] netlink: 1700 bytes leftover after parsing attributes in process `syz.0.5949'. [ 242.371008][T18879] netlink: 1700 bytes leftover after parsing attributes in process `syz.0.5949'. [ 242.595604][ T851] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 242.755480][ T851] usb 7-1: Using ep0 maxpacket: 8 [ 242.755970][ T851] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 242.756879][ T851] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 242.756902][ T851] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.756913][ T851] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.756925][ T851] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.756936][ T851] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.756956][ T851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.214616][T18903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5957'. [ 243.390322][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5968'. [ 243.393391][T18923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5968'. [ 244.451507][T18953] FAULT_INJECTION: forcing a failure. [ 244.451507][T18953] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 244.451530][T18953] CPU: 2 UID: 0 PID: 18953 Comm: syz.1.5981 Tainted: G S L syzkaller #0 PREEMPT(full) [ 244.451547][T18953] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 244.451551][T18953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.451558][T18953] Call Trace: [ 244.451562][T18953] [ 244.451566][T18953] dump_stack_lvl+0x100/0x190 [ 244.451585][T18953] should_fail_ex.cold+0x5/0xa [ 244.451604][T18953] _copy_from_user+0x2e/0xd0 [ 244.451620][T18953] bpf_prog_load+0x1490/0x2a80 [ 244.451639][T18953] ? __pfx_bpf_prog_load+0x10/0x10 [ 244.451666][T18953] __sys_bpf+0x1f46/0x4a30 [ 244.451683][T18953] ? __pfx___sys_bpf+0x10/0x10 [ 244.451694][T18953] ? find_held_lock+0x2b/0x80 [ 244.451710][T18953] ? futex_wake+0x4ea/0x5e0 [ 244.451731][T18953] ? rcu_read_lock_any_held+0x6a/0x90 [ 244.451749][T18953] ? find_held_lock+0x2b/0x80 [ 244.451766][T18953] ? ksys_write+0x190/0x250 [ 244.451787][T18953] ? ksys_write+0x190/0x250 [ 244.451809][T18953] ? __x64_sys_futex+0x34f/0x4d0 [ 244.451825][T18953] ? __x64_sys_futex+0x358/0x4d0 [ 244.451843][T18953] ? fput+0x7c/0x100 [ 244.451858][T18953] ? __pfx___x64_sys_futex+0x10/0x10 [ 244.451875][T18953] ? ksys_write+0x1ac/0x250 [ 244.451889][T18953] ? __x64_sys_bpf+0xce/0x140 [ 244.451902][T18953] __x64_sys_bpf+0xce/0x140 [ 244.451915][T18953] ? do_syscall_64+0xae/0x790 [ 244.451928][T18953] do_syscall_64+0x123/0x790 [ 244.451940][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.451951][T18953] RIP: 0033:0x7f3219b9e159 [ 244.451960][T18953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.451971][T18953] RSP: 002b:00007f321ab48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.451982][T18953] RAX: ffffffffffffffda RBX: 00007f3219e25fa0 RCX: 00007f3219b9e159 [ 244.451989][T18953] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 244.451995][T18953] RBP: 00007f3219c3506b R08: 0000000000000000 R09: 0000000000000000 [ 244.452002][T18953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.452008][T18953] R13: 00007f3219e26038 R14: 00007f3219e25fa0 R15: 00007ffd264a0e58 [ 244.452022][T18953] [ 244.507518][T18942] ceph: No mds server is up or the cluster is laggy [ 244.589787][T18958] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5982'. [ 244.631639][T18967] netlink: 1700 bytes leftover after parsing attributes in process `syz.1.5986'. [ 244.687897][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 244.687910][ T43] audit: type=1400 audit(1790788388.726:1531): avc: denied { read append } for pid=18974 comm="syz.0.5991" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 244.688053][ T43] audit: type=1400 audit(1790788388.726:1532): avc: denied { open } for pid=18974 comm="syz.0.5991" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 244.690726][ T43] audit: type=1400 audit(1790788388.726:1533): avc: denied { write } for pid=18974 comm="syz.0.5991" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 244.924124][ T43] audit: type=1800 audit(1790788388.956:1534): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158433 res=0 errno=0 [ 244.938269][T18994] fuse: fd is not a fuse device [ 244.972588][ T43] audit: type=1400 audit(1790788389.006:1535): avc: denied { setopt } for pid=18997 comm="syz.3.5999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.039704][ T43] audit: type=1400 audit(1790788389.076:1536): avc: denied { read } for pid=19003 comm="syz.3.6003" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 245.363100][ T5837] usb 7-1: USB disconnect, device number 28 [ 245.597535][ T5734] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 245.748406][T18989] ceph: No mds server is up or the cluster is laggy [ 245.748917][T19039] fuse: fd is not a fuse device [ 245.824502][T19043] __nla_validate_parse: 1 callbacks suppressed [ 245.824515][T19043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6022'. [ 245.824525][T19043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6022'. [ 245.824621][T19043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6022'. [ 245.824643][T19043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6022'. [ 245.898413][T19049] tipc: Enabled bearer , priority 10 [ 245.964895][T19056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6028'. [ 245.964920][T19056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6028'. [ 245.964928][T19056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6028'. [ 246.040841][ T43] audit: type=1400 audit(1790788390.076:1537): avc: denied { nosuid_transition } for pid=19057 comm="syz.0.6029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 246.041092][ T43] audit: type=1400 audit(1790788390.076:1538): avc: denied { transition } for pid=19057 comm="syz.0.6029" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 246.041462][ T43] audit: type=1400 audit(1790788390.076:1539): avc: denied { entrypoint } for pid=19057 comm="syz.0.6029" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=68 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 246.041615][ T43] audit: type=1400 audit(1790788390.076:1540): avc: denied { share } for pid=19057 comm="syz.0.6029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 246.262177][T19073] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 246.547203][T19094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6045'. [ 246.547219][T19094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6045'. [ 246.547316][T19094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6045'. [ 247.010183][T19113] netlink: 'syz.3.6054': attribute type 7 has an invalid length. [ 247.010196][T19113] netlink: 'syz.3.6054': attribute type 8 has an invalid length. [ 247.265510][T19125] ALSA: seq fatal error: cannot create timer (-19) [ 247.367197][T19132] input: syz1 as /devices/virtual/input/input41 [ 247.494870][T19138] input: syz1 as /devices/virtual/input/input42 [ 247.568798][T19143] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 247.585969][ T851] libceph: connect (1)127.0.0.1:6789 error -101 [ 247.586218][ T851] libceph: mon0 (1)127.0.0.1:6789 connect error [ 247.616779][ T851] kernel read not supported for file /trace_pipe (pid: 851 comm: kworker/0:2) [ 247.845944][ T851] libceph: connect (1)127.0.0.1:6789 error -101 [ 247.846090][ T851] libceph: mon0 (1)127.0.0.1:6789 connect error [ 247.900245][T19167] sit: non-ECT from 172.30.0.4 with TOS=0xcd [ 248.355903][ T851] libceph: connect (1)127.0.0.1:6789 error -101 [ 248.356066][ T851] libceph: mon0 (1)127.0.0.1:6789 connect error [ 248.380866][T19188] sctp: Failed to create the SCTP UDP tunneling v6 sock [ 248.384150][T19140] ceph: No mds server is up or the cluster is laggy [ 248.476022][ T25] kernel read not supported for file /trace_pipe (pid: 25 comm: kworker/2:0) [ 248.546776][T19198] input: syz1 as /devices/virtual/input/input43 [ 248.548012][T19197] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 248.738787][ T851] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 248.754305][T19215] sctp: Failed to create the SCTP UDP tunneling v6 sock [ 248.806400][T19217] kernel read not supported for file /policy (pid: 19217 comm: syz.2.6101) [ 248.827306][T19217] SELinux: ebitmap start bit (514745416) is not a multiple of the map unit size (64) [ 248.827521][T19217] SELinux: invalid class [ 248.829923][T19217] SELinux: failed to load policy [ 248.996765][ T851] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 249.131398][T19236] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 249.225656][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 249.512451][ T851] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 249.536766][T19208] ceph: No mds server is up or the cluster is laggy [ 249.670165][T19257] SELinux: ebitmap start bit (514745416) is not a multiple of the map unit size (64) [ 249.670515][T19257] SELinux: invalid class [ 249.673539][T19257] SELinux: failed to load policy [ 249.963280][T19296] mtrr: base(0x573be70b8fa6cd88000) is not aligned on a size(0xb1f7e145000) boundary [ 250.017338][ T43] kauditd_printk_skb: 45 callbacks suppressed [ 250.017351][ T43] audit: type=1800 audit(1790788394.056:1586): pid=19302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6141" name="remove_id" dev="sysfs" ino=28569 res=0 errno=0 [ 250.052034][T19305] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 250.058757][T19306] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.142050][ T43] audit: type=1400 audit(1790788394.176:1587): avc: denied { execute } for pid=19312 comm="syz.1.6146" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=69111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 250.158641][ T43] audit: type=1800 audit(1790788394.206:1588): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159033 res=0 errno=0 [ 250.161523][ T43] audit: type=1800 audit(1790788394.206:1589): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159048 res=0 errno=0 [ 250.179816][ T43] audit: type=1800 audit(1790788394.226:1590): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159063 res=0 errno=0 [ 250.284921][ T43] audit: type=1800 audit(1790788394.316:1591): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159078 res=0 errno=0 [ 250.285171][T19330] misc userio: Begin command sent, but we're already running [ 250.301926][ T43] audit: type=1400 audit(1790788394.336:1592): avc: denied { lock } for pid=19331 comm="syz.0.6154" path="socket:[68423]" dev="sockfs" ino=68423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 250.501474][T19349] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 250.514088][ T43] audit: type=1800 audit(1790788394.546:1593): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159133 res=0 errno=0 [ 250.517770][ T851] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 250.526440][ T43] audit: type=1400 audit(1790788394.556:1594): avc: denied { getattr } for pid=19350 comm="syz.2.6163" name="/" dev="9p" ino=71827691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 250.544629][T19351] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 250.592673][ T43] audit: type=1800 audit(1790788394.626:1595): pid=19355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.6167" name="bind" dev="sysfs" ino=36430 res=0 errno=0 [ 251.135678][ T851] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 251.309952][T19394] ovs-dp0: entered promiscuous mode [ 251.642399][T19434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.826710][T19444] type: 4261412864 invalid [ 251.867679][T19446] sch_tbf: burst 65537 is lower than device 04±ÿ)”ëfl mtu (65550) ! [ 252.515984][ T5837] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 252.677988][ T5837] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 252.679292][ T5837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.679314][ T5837] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 252.680905][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 252.680924][ T5837] usb 6-1: Product: syz [ 252.680937][ T5837] usb 6-1: Manufacturer: syz [ 252.840149][T19493] __nla_validate_parse: 7 callbacks suppressed [ 252.840169][T19493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6231'. [ 252.937469][T19498] ip_tables: iptables: counters copy to user failed while replacing table [ 253.660399][T19520] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6244'. [ 253.894308][T19536] device-mapper: ioctl: populate_table: next target spec (offset 0) overlaps previous target [ 254.000563][T19547] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6257'. [ 254.151251][T19557] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.6261'. [ 254.442642][T14816] syz_tun (unregistering): left allmulticast mode [ 254.442668][T14816] syz_tun (unregistering): left promiscuous mode [ 254.446755][T14816] bridge0: port 3(syz_tun) entered disabled state [ 254.749393][ T5828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.749416][ T5828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.851440][ T5828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.851462][ T5828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.871567][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.878507][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.880581][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.896445][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.897176][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.964240][ T5828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.964274][ T5828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.077388][ T5828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.077410][ T5828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.102332][T19573] kvm: user requested TSC rate below hardware speed [ 255.178985][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 255.178998][ T43] audit: type=1800 audit(1790788399.216:1623): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159918 res=0 errno=0 [ 255.179691][ T43] audit: type=1800 audit(1790788399.216:1624): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=159923 res=0 errno=0 [ 255.180169][ T43] audit: type=1800 audit(1790788399.216:1625): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=159927 res=0 errno=0 [ 255.180617][ T43] audit: type=1800 audit(1790788399.216:1626): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=159926 res=0 errno=0 [ 255.181400][ T43] audit: type=1800 audit(1790788399.216:1627): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=159929 res=0 errno=0 [ 255.220948][ T43] audit: type=1800 audit(1790788399.256:1628): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160004 res=0 errno=0 [ 255.222116][ T43] audit: type=1800 audit(1790788399.256:1629): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=160009 res=0 errno=0 [ 255.222866][ T43] audit: type=1800 audit(1790788399.256:1630): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=160013 res=0 errno=0 [ 255.223291][ T43] audit: type=1800 audit(1790788399.256:1631): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=160012 res=0 errno=0 [ 255.224026][ T43] audit: type=1800 audit(1790788399.256:1632): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=160015 res=0 errno=0 [ 255.281414][ T5837] usb 6-1: USB disconnect, device number 24 [ 255.290439][T19566] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 255.320826][ T5828] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.320849][ T5828] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.486664][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 255.506586][ T5828] bridge_slave_1: left promiscuous mode [ 255.506737][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.508718][ T5828] bridge_slave_0: left allmulticast mode [ 255.508731][ T5828] bridge_slave_0: left promiscuous mode [ 255.508823][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.641495][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.827038][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.830224][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.837569][ T5828] bond0 (unregistering): Released all slaves [ 255.847875][ T5828] bond1 (unregistering): Released all slaves [ 256.046931][ T5828] ovs-dp0: left promiscuous mode [ 256.071112][T19612] bond0: option slaves: interface -bond_slave_0 does not exist! [ 256.135176][ T5828] tipc: Disabling bearer [ 256.135622][ T5828] tipc: Left network mode [ 256.156307][T19614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6281'. [ 256.548554][T19566] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.548609][T19566] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.548694][T19566] bridge_slave_0: entered allmulticast mode [ 256.564075][T19566] bridge_slave_0: entered promiscuous mode [ 256.565697][T19566] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.565739][T19566] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.565808][T19566] bridge_slave_1: entered allmulticast mode [ 256.569059][T19566] bridge_slave_1: entered promiscuous mode [ 256.604330][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 256.686362][T19566] bond_slave_0: entered promiscuous mode [ 256.686470][T19566] bond_slave_0: entered allmulticast mode [ 256.687274][T19566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.714424][T19566] bond_slave_1: entered promiscuous mode [ 256.714622][T19566] bond_slave_1: entered allmulticast mode [ 256.714912][T19566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.758546][ T5828] hsr_slave_0: left promiscuous mode [ 256.764066][ T5828] hsr_slave_1: left promiscuous mode [ 256.764482][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.764493][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.764945][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.764954][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.777071][ T5828] veth1_macvtap: left promiscuous mode [ 256.777094][ T5828] veth0_macvtap: left promiscuous mode [ 256.777150][ T5828] veth0_vlan: left promiscuous mode [ 256.873814][T19654] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6294'. [ 256.927443][T19655] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6294'. [ 256.985887][ T5734] Bluetooth: hci1: command tx timeout [ 256.997529][ T50] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 257.052715][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 257.059684][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 257.156508][ T50] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.157597][ T50] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 257.157625][ T50] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 25959, setting to 64 [ 257.157644][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 257.159514][ T50] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 257.159531][ T50] usb 6-1: Product: syz [ 257.159543][ T50] usb 6-1: Manufacturer: syz [ 257.159554][ T50] usb 6-1: SerialNumber: syz [ 257.268120][T19654] gretap0: entered promiscuous mode [ 257.274279][T19655] 0ªî{X¹¦: renamed from gretap0 [ 257.282499][T19655] 0ªî{X¹¦: left promiscuous mode [ 257.282519][T19655] 0ªî{X¹¦: entered allmulticast mode [ 257.289777][T19655] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 257.319219][T19566] team0: Port device team_slave_0 added [ 257.363033][T19566] team0: Port device team_slave_1 added [ 257.482126][T19566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.482138][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.482151][T19566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.482939][T19566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.482947][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.482959][T19566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.621727][T19566] hsr_slave_0: entered promiscuous mode [ 257.632532][T19566] hsr_slave_1: entered promiscuous mode [ 257.633212][T19566] debugfs: 'hsr0' already exists in 'hsr' [ 257.633231][T19566] Cannot create hsr debugfs directory [ 257.718599][ T5828] IPVS: stop unused estimator thread 0... [ 257.940606][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6307'. [ 257.940620][T19683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6307'. [ 257.940635][T19683] netlink: 'syz.2.6307': attribute type 19 has an invalid length. [ 258.078663][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.089784][T19685] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 258.103644][T19685] 8021q: adding VLAN 0 to HW filter on device b [ 258.108371][T19685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.113137][ T5828] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.132602][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.132716][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.302515][T19696] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 258.350613][T19566] netdevsim netdevsim4 netdevsim0: renamed from eth7 [ 258.382298][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.389652][T19566] netdevsim netdevsim4 netdevsim1: renamed from eth8 [ 258.438098][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.442505][T19566] netdevsim netdevsim4 netdevsim2: renamed from eth9 [ 258.468741][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.469540][T19566] netdevsim netdevsim4 netdevsim3: renamed from eth10 [ 258.483987][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.487715][ T5440] 8021q: adding VLAN 0 to HW filter on device eth4 [ 258.637522][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.792854][T19566] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.852917][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.853030][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.902614][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.902707][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.066249][ T5734] Bluetooth: hci1: command tx timeout [ 259.231726][T19751] netlink: zone id is out of range [ 259.333593][T19756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6333'. [ 259.448792][T19762] team0 (unregistering): Port device team_slave_0 removed [ 259.458085][T19762] team0 (unregistering): Port device team_slave_1 removed [ 259.541951][T19566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.580606][T19767] netlink: 'syz.2.6336': attribute type 12 has an invalid length. [ 259.580628][T19767] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6336'. [ 259.584333][T19767] netlink: 'syz.2.6336': attribute type 12 has an invalid length. [ 259.584409][T19767] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6336'. [ 259.768852][ T25] usb 6-1: USB disconnect, device number 25 [ 260.119682][T19566] veth0_vlan: entered promiscuous mode [ 260.141841][T19566] veth1_vlan: entered promiscuous mode [ 260.187327][ T43] kauditd_printk_skb: 367 callbacks suppressed [ 260.187345][ T43] audit: type=1400 audit(1790788404.226:2000): avc: denied { read write } for pid=19796 comm="syz.2.6346" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 260.187773][ T43] audit: type=1400 audit(1790788404.226:2001): avc: denied { open } for pid=19796 comm="syz.2.6346" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 260.214101][ T43] audit: type=1800 audit(1790788404.246:2002): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167953 res=0 errno=0 [ 260.216047][ T43] audit: type=1800 audit(1790788404.256:2003): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=167957 res=0 errno=0 [ 260.261432][ T43] audit: type=1800 audit(1790788404.296:2004): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168027 res=0 errno=0 [ 260.263987][ T43] audit: type=1800 audit(1790788404.296:2005): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=168031 res=0 errno=0 [ 260.297634][ T43] audit: type=1800 audit(1790788404.336:2006): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168101 res=0 errno=0 [ 260.307274][ T43] audit: type=1800 audit(1790788404.336:2007): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=168105 res=0 errno=0 [ 260.311520][T19566] veth0_macvtap: entered promiscuous mode [ 260.331785][ T43] audit: type=1800 audit(1790788404.366:2008): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168175 res=0 errno=0 [ 260.335679][ T43] audit: type=1800 audit(1790788404.376:2009): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=168179 res=0 errno=0 [ 260.367527][T19566] veth1_macvtap: entered promiscuous mode [ 260.443168][T19566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.461366][T19566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.483856][ T5579] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.483927][ T5579] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.483980][ T5828] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.484020][ T5828] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.484049][ T5828] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.484078][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.484104][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.484129][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.484157][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.517275][T19566] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 260.522391][T19566] wireguard: wg0: Could not create IPv6 socket [ 260.527867][T19566] wireguard: wg1: Could not create IPv6 socket [ 260.539201][T19566] wireguard: wg2: Could not create IPv6 socket [ 260.544042][T19775] ceph: No mds server is up or the cluster is laggy [ 260.765679][ T1645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.765695][ T1645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.770839][T19816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6351'. [ 260.801058][T19816] hsr_slave_1 (unregistering): left promiscuous mode [ 260.868475][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.868489][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.993030][T19822] serio: Serial port ptm0 [ 261.126253][T19822] serio: Serial port ptm0 [ 261.158729][ T5734] Bluetooth: hci1: command tx timeout [ 261.296009][T19854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6365'. [ 261.530905][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6374'. [ 261.641148][T19883] macvlan0: left promiscuous mode [ 261.647078][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.777713][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.825319][T19901] netlink: 'syz.2.6382': attribute type 10 has an invalid length. [ 261.882176][T19901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.883398][T19901] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 261.965444][ T5440] 8021q: adding VLAN 0 to HW filter on device eth5 [ 262.024831][T19913] CIFS: Attempting to mount //127.0.0.1/share [ 262.108661][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 262.228776][T19933] size and base must be multiples of 4 kiB [ 262.228798][T19933] CPU: 3 UID: 0 PID: 19933 Comm: syz.4.6394 Tainted: G S L syzkaller #0 PREEMPT(full) [ 262.228828][T19933] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 262.228836][T19933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.228847][T19933] Call Trace: [ 262.228854][T19933] [ 262.228861][T19933] dump_stack_lvl+0x100/0x190 [ 262.228912][T19933] mtrr_add.cold+0x74/0x87 [ 262.228935][T19933] mtrr_ioctl+0x25a/0xcf0 [ 262.228955][T19933] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 262.229017][T19933] ? __pfx_mtrr_ioctl+0x10/0x10 [ 262.229042][T19933] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 262.229071][T19933] ? __fget_files+0x34/0x3d0 [ 262.229112][T19933] ? __pfx_mtrr_ioctl+0x10/0x10 [ 262.229134][T19933] proc_reg_unlocked_ioctl+0x229/0x320 [ 262.229155][T19933] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 262.229178][T19933] __x64_sys_ioctl+0x18e/0x210 [ 262.229203][T19933] do_syscall_64+0x123/0x790 [ 262.229231][T19933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.229251][T19933] RIP: 0033:0x7fe70139e159 [ 262.229267][T19933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.229284][T19933] RSP: 002b:00007fe7021ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.229304][T19933] RAX: ffffffffffffffda RBX: 00007fe701625fa0 RCX: 00007fe70139e159 [ 262.229317][T19933] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 262.229329][T19933] RBP: 00007fe70143506b R08: 0000000000000000 R09: 0000000000000000 [ 262.229342][T19933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.229354][T19933] R13: 00007fe701626038 R14: 00007fe701625fa0 R15: 00007fff84723468 [ 262.229382][T19933] [ 262.232589][T19928] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input45 [ 262.483690][T19947] netlink: 532 bytes leftover after parsing attributes in process `syz.1.6398'. [ 262.721920][T19966] SELinux: ebitmap start bit (8390656) is beyond the end of the bitmap (1088) [ 262.721962][T19966] SELinux: invalid class [ 262.724186][T19966] SELinux: failed to load policy [ 262.867797][T19913] CIFS: VFS: Error connecting to socket. Aborting operation. [ 262.867838][T19913] CIFS: VFS: cifs_mount failed w/return code = -4 [ 262.978904][ T5440] 8021q: adding VLAN 0 to HW filter on device eth6 [ 263.173115][T20008] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 263.226207][ T5734] Bluetooth: hci1: command tx timeout [ 263.378895][ T35] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 263.496285][ T50] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 263.636375][ T35] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 263.666669][ T50] usb 9-1: Using ep0 maxpacket: 8 [ 263.667162][ T50] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 263.667940][ T50] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 263.667963][ T50] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.667975][ T50] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.667986][ T50] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.667998][ T50] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.668016][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.095525][ T63] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 264.150361][ T5878] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 264.174126][T20020] ceph: No mds server is up or the cluster is laggy [ 264.246281][ T63] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 264.247256][ T63] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 264.247271][ T63] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 264.249489][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.249509][ T63] usb 7-1: Product: syz [ 264.249519][ T63] usb 7-1: Manufacturer: syz [ 264.249531][ T63] usb 7-1: SerialNumber: syz [ 265.275457][ T43] kauditd_printk_skb: 93 callbacks suppressed [ 265.275473][ T43] audit: type=1400 audit(1790788409.306:2103): avc: denied { write } for pid=20120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.375748][ T43] audit: type=1400 audit(1790788409.406:2104): avc: denied { write } for pid=20123 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.570710][ T43] audit: type=1400 audit(1790788409.606:2105): avc: denied { write } for pid=20126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.632685][ T43] audit: type=1400 audit(1790788409.666:2106): avc: denied { write } for pid=20129 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.697534][ T5440] wireguard: wg0: Could not create IPv6 socket [ 265.790230][ T43] audit: type=1400 audit(1790788409.826:2107): avc: denied { write } for pid=20132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.862777][ T43] audit: type=1400 audit(1790788409.896:2108): avc: denied { write } for pid=20135 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.917412][ T5440] wireguard: wg1: Could not create IPv6 socket [ 265.993496][ T43] audit: type=1400 audit(1790788410.026:2109): avc: denied { write } for pid=20138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.057181][ T43] audit: type=1400 audit(1790788410.096:2110): avc: denied { write } for pid=20141 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.104629][ T5440] wireguard: wg2: Could not create IPv6 socket [ 266.220037][ T43] audit: type=1400 audit(1790788410.256:2111): avc: denied { write } for pid=20144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.244458][ T35] usb 9-1: USB disconnect, device number 2 [ 266.318111][ T43] audit: type=1400 audit(1790788410.356:2112): avc: denied { write } for pid=20151 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.471795][T20172] debugfs: Invalid uid '0x00000000ffffffff' [ 266.700863][T20189] input: syz0 as /devices/virtual/input/input46 [ 266.869327][ T35] usb 7-1: USB disconnect, device number 29 [ 267.148560][T20235] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6479'. [ 267.217319][T20240] pim6reg1: entered promiscuous mode [ 267.217333][T20240] pim6reg1: entered allmulticast mode [ 267.263084][ T5734] Bluetooth: hci1: Dropping invalid advertising data [ 267.263396][ T5734] Bluetooth: hci1: unknown advertising packet type: 0x6e [ 267.263417][ T5734] Bluetooth: hci1: Malformed LE Event: 0x02 [ 267.433919][T20250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.471513][T20250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.572716][T20256] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6484'. [ 267.637276][T20259] tun0: tun_chr_ioctl cmd 1074025675 [ 267.637297][T20259] tun0: persist enabled [ 267.637692][T20259] tun0: tun_chr_ioctl cmd 1074025675 [ 267.637707][T20259] tun0: persist disabled [ 267.840500][T20273] pimreg: entered allmulticast mode [ 267.970612][T20287] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6494'. [ 268.070721][T20292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.378489][T20317] FAULT_INJECTION: forcing a failure. [ 268.378489][T20317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.378511][T20317] CPU: 2 UID: 0 PID: 20317 Comm: syz.2.6505 Tainted: G S L syzkaller #0 PREEMPT(full) [ 268.378528][T20317] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 268.378532][T20317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.378539][T20317] Call Trace: [ 268.378543][T20317] [ 268.378548][T20317] dump_stack_lvl+0x100/0x190 [ 268.378621][T20317] should_fail_ex.cold+0x5/0xa [ 268.378637][T20317] ? prepare_alloc_pages+0x16d/0x5b0 [ 268.378680][T20317] should_fail_alloc_page+0xeb/0x140 [ 268.378698][T20317] prepare_alloc_pages+0x1f0/0x5b0 [ 268.378714][T20317] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 268.378729][T20317] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 268.378743][T20317] ? rcu_is_watching+0x13/0xc0 [ 268.378761][T20317] ? trace_kmem_cache_alloc+0x51/0x100 [ 268.378778][T20317] ? kmem_cache_alloc_lru_noprof+0x2d1/0x6a0 [ 268.378793][T20317] ? __lock_acquire+0x5c0/0x1f40 [ 268.378806][T20317] ? __css_rstat_updated+0x1ce/0x590 [ 268.378820][T20317] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 268.378838][T20317] ? rcu_is_watching+0x13/0xc0 [ 268.378853][T20317] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 268.378868][T20317] ? find_held_lock+0x2b/0x80 [ 268.378888][T20317] ? __lock_acquire+0x5c0/0x1f40 [ 268.378901][T20317] ? rcu_is_watching+0x13/0xc0 [ 268.378915][T20317] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 268.378930][T20317] ? policy_nodemask+0xed/0x4f0 [ 268.378948][T20317] alloc_pages_mpol+0x201/0x550 [ 268.378964][T20317] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 268.378980][T20317] ? filemap_get_entry+0x22d/0x450 [ 268.378996][T20317] ? filemap_get_entry+0x22d/0x450 [ 268.379014][T20317] folio_alloc_noprof+0x22/0x250 [ 268.379028][T20317] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 268.379043][T20317] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 268.379057][T20317] ? rcu_is_watching+0x13/0xc0 [ 268.379072][T20317] ? trace_kmalloc+0xeb/0x110 [ 268.379088][T20317] __filemap_get_folio_mpol+0x653/0x1280 [ 268.379109][T20317] ioctx_alloc+0x7e1/0x21a0 [ 268.379125][T20317] ? __pfx_ioctx_alloc+0x10/0x10 [ 268.379140][T20317] __x64_sys_io_setup+0xc9/0x220 [ 268.379151][T20317] do_syscall_64+0x123/0x790 [ 268.379186][T20317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.379199][T20317] RIP: 0033:0x7f418699e159 [ 268.379210][T20317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.379221][T20317] RSP: 002b:00007f41877fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 268.379233][T20317] RAX: ffffffffffffffda RBX: 00007f4186c25fa0 RCX: 00007f418699e159 [ 268.379240][T20317] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f [ 268.379247][T20317] RBP: 00007f4186a3506b R08: 0000000000000000 R09: 0000000000000000 [ 268.379255][T20317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.379262][T20317] R13: 00007f4186c26038 R14: 00007f4186c25fa0 R15: 00007ffec466dc78 [ 268.379277][T20317] [ 268.820495][T20352] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 269.513441][T20373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.528921][T20373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.007568][ T50] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 270.168204][ T50] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.169314][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.169339][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.169356][ T50] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.169387][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.324829][ T43] kauditd_printk_skb: 66 callbacks suppressed [ 270.324848][ T43] audit: type=1400 audit(1790788414.356:2179): avc: denied { write } for pid=20403 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.345522][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 270.461499][ T43] audit: type=1400 audit(1790788414.496:2180): avc: denied { write } for pid=20405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.548525][ T43] audit: type=1400 audit(1790788414.586:2181): avc: denied { write } for pid=20410 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.691114][ T43] audit: type=1400 audit(1790788414.726:2182): avc: denied { write } for pid=20418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.763547][ T43] audit: type=1400 audit(1790788414.796:2183): avc: denied { write } for pid=20423 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.896071][ T43] audit: type=1400 audit(1790788414.936:2184): avc: denied { write } for pid=20427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.984487][ T43] audit: type=1400 audit(1790788415.016:2185): avc: denied { write } for pid=20434 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.148261][ T43] audit: type=1400 audit(1790788415.186:2186): avc: denied { write } for pid=20442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.224498][ T43] audit: type=1400 audit(1790788415.256:2187): avc: denied { write } for pid=20448 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.424061][ T43] audit: type=1400 audit(1790788415.456:2188): avc: denied { write } for pid=20458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.500781][T20472] i2c i2c-1: new_device: Invalid device name [ 271.691112][T20341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.877459][T20492] synth uevent: /bus/acpi: unknown uevent action string [ 272.048112][T20511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.416659][T20535] program syz.2.6557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.758729][ T63] usb 9-1: USB disconnect, device number 3 [ 272.797608][T20565] device-mapper: ioctl: name not supplied when creating device [ 273.330101][T20616] fuse: fd is not a fuse device [ 274.139591][T20662] netlink: 'syz.2.6596': attribute type 1 has an invalid length. [ 274.445186][T20688] syzkaller1: entered promiscuous mode [ 274.445208][T20688] syzkaller1: entered allmulticast mode [ 274.567008][T20698] bond0: (slave bond_slave_0): Releasing backup interface [ 274.603101][T20700] bridge0: port 4(veth0) entered blocking state [ 274.603222][T20700] bridge0: port 4(veth0) entered disabled state [ 274.603289][T20700] veth0: entered allmulticast mode [ 274.604117][T20700] veth0: entered promiscuous mode [ 274.615091][T20700] bridge0: port 4(veth0) entered blocking state [ 274.615144][T20700] bridge0: port 4(veth0) entered forwarding state [ 275.035061][T20747] input: syz0 as /devices/virtual/input/input47 [ 275.206598][T20760] jffs2: notice: (20760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 0 orphan) and 7 of xref (0 dead, 0 orphan) found. [ 275.479832][ T43] kauditd_printk_skb: 68 callbacks suppressed [ 275.479845][ T43] audit: type=1800 audit(1790788419.516:2257): pid=20774 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.6634" name="detach" dev="sysfs" ino=36521 res=0 errno=0 [ 275.497772][ T43] audit: type=1400 audit(1790788419.526:2258): avc: denied { write } for pid=20766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.667097][ T43] audit: type=1400 audit(1790788419.706:2259): avc: denied { write } for pid=20783 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.671524][T20786] fuse: fd is not a fuse device [ 275.749873][ T43] audit: type=1400 audit(1790788419.786:2260): avc: denied { read } for pid=20789 comm="syz.2.6641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.816158][ T43] audit: type=1400 audit(1790788419.846:2261): avc: denied { write } for pid=20794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.855471][ T3376] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 275.909968][ T43] audit: type=1400 audit(1790788419.946:2262): avc: denied { write } for pid=20799 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.928950][ T43] audit: type=1800 audit(1790788419.966:2263): pid=20801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6643" name="attach" dev="sysfs" ino=36522 res=0 errno=0 [ 275.931208][T20801] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 276.005482][ T3376] usb 6-1: Using ep0 maxpacket: 8 [ 276.017478][ T3376] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 276.018636][ T3376] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 276.018656][ T3376] usb 6-1: config 179 has no interface number 0 [ 276.018687][ T3376] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 276.018706][ T3376] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 276.018727][ T3376] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 276.018747][ T3376] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 276.018767][ T3376] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 276.018797][ T3376] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.025120][ T43] audit: type=1800 audit(1790788420.056:2264): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170203 res=0 errno=0 [ 276.026883][ T43] audit: type=1800 audit(1790788420.066:2265): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=170232 res=0 errno=0 [ 276.027423][ T43] audit: type=1800 audit(1790788420.066:2266): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=170210 res=0 errno=0 [ 276.100670][T20808] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.101263][T20808] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.666774][T20832] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6650'. [ 276.668093][T20832] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6650'. [ 276.669216][T20832] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6650'. [ 277.129304][T20860] sd 0:0:0:0: PR command failed: 1026 [ 277.129406][T20860] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 277.129447][T20860] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 277.216641][ T35] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 277.385685][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 277.386472][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 277.387326][ T35] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 277.387350][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.387362][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.387374][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.387385][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.387404][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.426807][T20875] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 277.627740][ T63] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 277.627758][ T63] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 278.059812][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.065951][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.074869][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.079680][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.080658][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.094489][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.095905][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.096153][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.097004][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.097496][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.343239][T20914] vcan0: tx address claim with dlc 0 [ 278.385865][T20897] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 278.622402][T20897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.622413][T20897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.622426][T20897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.639211][ T5878] usb 6-1: USB disconnect, device number 26 [ 278.751383][ T5828] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.766272][ T5828] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.815550][ T5579] netdevsim netdevsim5 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.885567][ T5579] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.479005][T20897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.506561][T20897] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 279.511410][T20897] wireguard: wg0: Could not create IPv6 socket [ 279.513592][T20897] wireguard: wg1: Could not create IPv6 socket [ 279.528781][T20897] wireguard: wg2: Could not create IPv6 socket [ 279.576810][ T1645] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 279.612508][ T1645] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 279.680378][ T66] Bluetooth: hci1: connection err: -111 [ 279.777788][T21027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6697'. [ 279.980163][ T1645] IPVS: starting estimator thread 0... [ 280.003360][ T50] usb 7-1: USB disconnect, device number 30 [ 280.068792][T21038] IPVS: using max 29 ests per chain, 69600 per kthread [ 280.187846][ T66] Bluetooth: hci1: command tx timeout [ 280.201589][T21053] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 280.494000][T21073] bond0: left promiscuous mode [ 280.494024][T21073] bond_slave_0: left promiscuous mode [ 280.494241][T21073] bond_slave_1: left promiscuous mode [ 280.494417][T21073] bond0: left allmulticast mode [ 280.494431][T21073] bond_slave_0: left allmulticast mode [ 280.494444][T21073] bond_slave_1: left allmulticast mode [ 280.609493][ T43] kauditd_printk_skb: 121 callbacks suppressed [ 280.609510][ T43] audit: type=1800 audit(1790788424.646:2388): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171942 res=0 errno=0 [ 280.622495][ T43] audit: type=1400 audit(1790788424.656:2389): avc: denied { write } for pid=21077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.641461][ T43] audit: type=1400 audit(1790788424.676:2390): avc: denied { write } for pid=21079 comm="syz.0.6719" name="/" dev="9p" ino=71827691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.652563][ T43] audit: type=1400 audit(1790788424.686:2391): avc: denied { write } for pid=21079 comm="syz.0.6719" name="/" dev="9p" ino=71827691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.692033][ T43] audit: type=1400 audit(1790788424.726:2392): avc: denied { write } for pid=21087 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.853483][ T43] audit: type=1400 audit(1790788424.886:2393): avc: denied { write } for pid=21091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.972609][ T43] audit: type=1400 audit(1790788425.006:2394): avc: denied { write } for pid=21102 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.047731][ T43] audit: type=1400 audit(1790788425.086:2395): avc: denied { getopt } for pid=21105 comm="syz.0.6726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 281.122554][ T43] audit: type=1400 audit(1790788425.156:2396): avc: denied { write } for pid=21107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.147893][T21114] could not open pipe file descriptor [ 281.196023][ T43] audit: type=1400 audit(1790788425.236:2397): avc: denied { write } for pid=21118 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.437534][T21152] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6743'. [ 281.966000][T21207] FAULT_INJECTION: forcing a failure. [ 281.966000][T21207] name fail_futex, interval 1, probability 0, space 0, times 0 [ 281.966025][T21207] CPU: 3 UID: 0 PID: 21207 Comm: syz.2.6756 Tainted: G S L syzkaller #0 PREEMPT(full) [ 281.966044][T21207] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 281.966050][T21207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.966057][T21207] Call Trace: [ 281.966061][T21207] [ 281.966066][T21207] dump_stack_lvl+0x100/0x190 [ 281.966086][T21207] should_fail_ex.cold+0x5/0xa [ 281.966103][T21207] get_futex_key+0x1d0/0x14f0 [ 281.966122][T21207] ? __pfx_get_futex_key+0x10/0x10 [ 281.966141][T21207] futex_wake+0xf4/0x5e0 [ 281.966154][T21207] ? __pfx_futex_wake+0x10/0x10 [ 281.966166][T21207] ? percpu_counter_add_batch+0xb9/0x230 [ 281.966181][T21207] ? errseq_sample+0x51/0x70 [ 281.966194][T21207] ? file_init_path+0x48e/0x670 [ 281.966212][T21207] do_futex+0x2b2/0x440 [ 281.966228][T21207] ? __pfx_do_futex+0x10/0x10 [ 281.966245][T21207] ? fd_install+0x223/0x580 [ 281.966263][T21207] __x64_sys_futex+0x34f/0x4d0 [ 281.966280][T21207] ? __sys_socket+0xac/0x260 [ 281.966331][T21207] ? __pfx___x64_sys_futex+0x10/0x10 [ 281.966353][T21207] do_syscall_64+0x123/0x790 [ 281.966367][T21207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.966380][T21207] RIP: 0033:0x7f418699e159 [ 281.966390][T21207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.966408][T21207] RSP: 002b:00007f41877fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.966420][T21207] RAX: ffffffffffffffda RBX: 00007f4186c25fa8 RCX: 00007f418699e159 [ 281.966428][T21207] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4186c25fac [ 281.966436][T21207] RBP: 00007f4186c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 281.966443][T21207] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 281.966450][T21207] R13: 00007f4186c26038 R14: 00007ffec466db90 R15: 00007ffec466dc78 [ 281.966465][T21207] [ 282.268285][ T66] Bluetooth: hci1: command tx timeout [ 282.497168][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 282.508740][T21265] binder: 21263:21265 ioctl c0306201 200000000080 returned -14 [ 282.577059][T21270] FAULT_INJECTION: forcing a failure. [ 282.577059][T21270] name fail_futex, interval 1, probability 0, space 0, times 0 [ 282.577081][T21270] CPU: 3 UID: 0 PID: 21270 Comm: syz.0.6772 Tainted: G S L syzkaller #0 PREEMPT(full) [ 282.577100][T21270] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 282.577105][T21270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 282.577111][T21270] Call Trace: [ 282.577121][T21270] [ 282.577125][T21270] dump_stack_lvl+0x100/0x190 [ 282.577152][T21270] should_fail_ex.cold+0x5/0xa [ 282.577169][T21270] get_futex_key+0x293/0x14f0 [ 282.577187][T21270] ? __pfx_get_futex_key+0x10/0x10 [ 282.577206][T21270] ? __mutex_unlock_slowpath+0x35d/0x930 [ 282.577225][T21270] futex_wake+0xf4/0x5e0 [ 282.577238][T21270] ? __pfx_futex_wake+0x10/0x10 [ 282.577251][T21270] ? lock_acquire+0x1d1/0x380 [ 282.577263][T21270] ? detach_task_ctx_data+0x83/0x490 [ 282.577286][T21270] do_futex+0x2b2/0x440 [ 282.577304][T21270] ? __pfx_do_futex+0x10/0x10 [ 282.577318][T21270] ? __might_fault+0xc5/0x140 [ 282.577333][T21270] mm_exit_exec_release+0x256/0x2f0 [ 282.577347][T21270] do_exit+0x707/0x2a50 [ 282.577360][T21270] ? lock_acquire+0x1d1/0x380 [ 282.577372][T21270] ? cgroup1_freezing+0x27/0x3b0 [ 282.577384][T21270] ? find_held_lock+0x2b/0x80 [ 282.577400][T21270] ? __pfx_do_exit+0x10/0x10 [ 282.577415][T21270] ? find_held_lock+0x2b/0x80 [ 282.577431][T21270] ? get_signal+0x7e0/0x21e0 [ 282.577459][T21270] do_group_exit+0xd5/0x2a0 [ 282.577477][T21270] get_signal+0x1ec7/0x21e0 [ 282.577494][T21270] ? __pfx_get_signal+0x10/0x10 [ 282.577507][T21270] ? do_futex+0x190/0x440 [ 282.577525][T21270] arch_do_signal_or_restart+0x91/0x7e0 [ 282.577543][T21270] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 282.577568][T21270] exit_to_user_mode_loop+0x139/0x700 [ 282.577582][T21270] ? rcu_is_watching+0x13/0xc0 [ 282.577603][T21270] do_syscall_64+0x661/0x790 [ 282.577616][T21270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.577627][T21270] RIP: 0033:0x7efd33f9e159 [ 282.577636][T21270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.577647][T21270] RSP: 002b:00007efd34f0d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 282.577662][T21270] RAX: fffffffffffffe00 RBX: 00007efd34225fa8 RCX: 00007efd33f9e159 [ 282.577669][T21270] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd34225fa8 [ 282.577676][T21270] RBP: 00007efd34225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 282.577683][T21270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.577689][T21270] R13: 00007efd34226038 R14: 00007ffe170d44d0 R15: 00007ffe170d45b8 [ 282.577703][T21270] [ 283.545266][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 283.545289][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 283.607958][T21314] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6777'. [ 283.821852][T21339] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 284.359356][ T66] Bluetooth: hci1: command tx timeout [ 284.433970][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6804'. [ 284.813743][T21429] kvm: apic: phys broadcast and lowest prio [ 284.908665][T21440] openvswitch: netlink: Message has 4 unknown bytes. [ 285.088480][T21468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=21468 comm=syz.0.6832 [ 285.246974][T21472] block device autoloading is deprecated and will be removed. [ 285.248683][ T5728] block device autoloading is deprecated and will be removed. [ 285.652599][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 285.652612][ T43] audit: type=1400 audit(1790788429.686:2435): avc: denied { write } for pid=21513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.677042][ T43] audit: type=1800 audit(1790788429.716:2436): pid=21521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6848" name="multicast_startup_query_count" dev="sysfs" ino=89913 res=0 errno=0 [ 285.706094][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 285.720286][ T43] audit: type=1400 audit(1790788429.756:2437): avc: denied { write } for pid=21522 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.855519][ T35] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 285.910493][ T43] audit: type=1400 audit(1790788429.946:2438): avc: denied { write } for pid=21534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.956954][ T43] audit: type=1400 audit(1790788429.996:2439): avc: denied { write } for pid=21545 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.005866][ T35] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 286.006718][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.006735][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.006754][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.009277][ T43] audit: type=1800 audit(1790788430.046:2440): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172543 res=0 errno=0 [ 286.015103][ T43] audit: type=1800 audit(1790788430.046:2441): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172555 res=0 errno=0 [ 286.017347][ T43] audit: type=1800 audit(1790788430.056:2442): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=172584 res=0 errno=0 [ 286.017942][ T43] audit: type=1800 audit(1790788430.056:2443): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=172562 res=0 errno=0 [ 286.018432][ T43] audit: type=1800 audit(1790788430.056:2444): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=172563 res=0 errno=0 [ 286.085895][T21554] syz.0.6858 (21554) used obsolete PPPIOCDETACH ioctl [ 286.378800][T21579] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 286.436724][ T66] Bluetooth: hci1: command tx timeout [ 286.681784][T21600] clocksource: Switched to clocksource acpi_pm [ 286.683308][T21600] clocksource: Switched to clocksource tsc [ 286.819035][T21611] loop9: detected capacity change from 0 to 7 [ 286.832246][T21611] Dev loop9: unable to read RDB block 7 [ 286.832283][T21611] loop9: unable to read partition table [ 286.832441][T21611] loop9: partition table beyond EOD, truncated [ 286.832461][T21611] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 287.249099][T21648] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 288.425907][T21705] FAULT_INJECTION: forcing a failure. [ 288.425907][T21705] name fail_futex, interval 1, probability 0, space 0, times 0 [ 288.425933][T21705] CPU: 3 UID: 0 PID: 21705 Comm: syz.2.6898 Tainted: G S L syzkaller #0 PREEMPT(full) [ 288.425950][T21705] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 288.425954][T21705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.425961][T21705] Call Trace: [ 288.425966][T21705] [ 288.425970][T21705] dump_stack_lvl+0x100/0x190 [ 288.425989][T21705] should_fail_ex.cold+0x5/0xa [ 288.426006][T21705] get_futex_key+0x1d0/0x14f0 [ 288.426023][T21705] ? __pfx_get_futex_key+0x10/0x10 [ 288.426044][T21705] futex_wake+0xf4/0x5e0 [ 288.426055][T21705] ? trace_kmem_cache_alloc+0xdd/0x100 [ 288.426072][T21705] ? __pfx_futex_wake+0x10/0x10 [ 288.426084][T21705] ? __lock_acquire+0x5c0/0x1f40 [ 288.426100][T21705] do_futex+0x2b2/0x440 [ 288.426117][T21705] ? __pfx_do_futex+0x10/0x10 [ 288.426131][T21705] ? lock_acquire+0x1d1/0x380 [ 288.426142][T21705] ? fd_install+0xa2/0x580 [ 288.426158][T21705] ? find_held_lock+0x2b/0x80 [ 288.426175][T21705] __x64_sys_futex+0x34f/0x4d0 [ 288.426192][T21705] ? fd_install+0x252/0x580 [ 288.426206][T21705] ? __pfx___x64_sys_futex+0x10/0x10 [ 288.426221][T21705] ? __anon_inode_getfd+0x95/0xe0 [ 288.426238][T21705] do_syscall_64+0x123/0x790 [ 288.426251][T21705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.426262][T21705] RIP: 0033:0x7f418699e159 [ 288.426272][T21705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.426281][T21705] RSP: 002b:00007f41877fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 288.426292][T21705] RAX: ffffffffffffffda RBX: 00007f4186c25fa8 RCX: 00007f418699e159 [ 288.426299][T21705] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4186c25fac [ 288.426306][T21705] RBP: 00007f4186c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 288.426312][T21705] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 288.426318][T21705] R13: 00007f4186c26038 R14: 00007ffec466db90 R15: 00007ffec466dc78 [ 288.426332][T21705] [ 288.624628][ T5878] usb 6-1: USB disconnect, device number 27 [ 288.843557][T21731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input48 [ 289.060497][T21750] netlink: 'syz.1.6910': attribute type 11 has an invalid length. [ 289.144399][T21755] netlink: 'syz.1.6911': attribute type 3 has an invalid length. [ 289.144415][T21755] netlink: 'syz.1.6911': attribute type 3 has an invalid length. [ 289.407652][T21774] netlink: zone id is out of range [ 289.407661][T21774] netlink: zone id is out of range [ 289.407666][T21774] netlink: zone id is out of range [ 289.407670][T21774] netlink: zone id is out of range [ 289.407673][T21774] netlink: zone id is out of range [ 289.407677][T21774] netlink: zone id is out of range [ 289.407877][T21774] netlink: zone id is out of range [ 289.407882][T21774] netlink: zone id is out of range [ 289.407886][T21774] netlink: zone id is out of range [ 289.407890][T21774] netlink: zone id is out of range [ 289.551869][T21783] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 290.509929][T21861] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 290.676900][ T43] kauditd_printk_skb: 68 callbacks suppressed [ 290.676917][ T43] audit: type=1400 audit(1790788434.723:2513): avc: denied { write } for pid=21870 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.807669][ T43] audit: type=1800 audit(1790788434.843:2514): pid=21888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6954" name="detach" dev="sysfs" ino=36521 res=0 errno=0 [ 290.864256][ T43] audit: type=1400 audit(1790788434.903:2515): avc: denied { write } for pid=21885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.950909][ T43] audit: type=1400 audit(1790788434.993:2516): avc: denied { write } for pid=21897 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.104190][ T43] audit: type=1800 audit(1790788435.143:2517): pid=21913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6963" name="attach" dev="sysfs" ino=36522 res=0 errno=0 [ 291.104793][T21913] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 291.158820][ T43] audit: type=1400 audit(1790788435.203:2518): avc: denied { write } for pid=21908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.207631][ T43] audit: type=1800 audit(1790788435.253:2519): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6967" name="pm_test" dev="sysfs" ino=869 res=0 errno=0 [ 291.253543][ T43] audit: type=1400 audit(1790788435.293:2520): avc: denied { write } for pid=21927 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.360641][ T43] audit: type=1800 audit(1790788435.403:2521): pid=21941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6975" name="namespace" dev="sysfs" ino=6420 res=0 errno=0 [ 291.416167][ T43] audit: type=1400 audit(1790788435.463:2522): avc: denied { write } for pid=21939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.569140][T21956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6979'. [ 291.679497][T21968] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6982'. [ 292.039652][T21996] ip_vti0: Master is either lo or non-ether device [ 292.143168][T22004] vcan0: tx address claim with dlc 0 [ 293.405768][T22088] serio: Serial port ptm0 [ 293.490315][ T5440] 8021q: adding VLAN 0 to HW filter on device eth7 [ 293.574840][T22104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7027'. [ 293.744639][ T5440] 8021q: adding VLAN 0 to HW filter on device eth8 [ 294.014736][ T5440] 8021q: adding VLAN 0 to HW filter on device eth9 [ 294.257115][T22177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7055'. [ 294.364784][ T5440] 8021q: adding VLAN 0 to HW filter on device eth10 [ 294.793663][T22252] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7079'. [ 294.793680][T22252] net_ratelimit: 500 callbacks suppressed [ 294.793686][T22252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.057373][T22288] netlink: 'syz.5.7073': attribute type 1 has an invalid length. [ 295.057387][T22288] netlink: 'syz.5.7073': attribute type 2 has an invalid length. [ 295.726955][T22322] Invalid logical block size (4) [ 295.944889][T22337] input input49: cannot allocate more than FF_MAX_EFFECTS effects [ 296.008639][ T43] kauditd_printk_skb: 54 callbacks suppressed [ 296.008651][ T43] audit: type=1800 audit(1790788440.053:2577): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173837 res=0 errno=0 [ 296.009754][ T43] audit: type=1800 audit(1790788440.053:2578): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=173841 res=0 errno=0 [ 296.189212][ T43] audit: type=1800 audit(1790788440.233:2579): pid=22354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7109" name="flush" dev="sysfs" ino=91838 res=0 errno=0 [ 296.257064][ T43] audit: type=1400 audit(1790788440.293:2580): avc: denied { write } for pid=22351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.334956][ T43] audit: type=1400 audit(1790788440.373:2581): avc: denied { write } for pid=22360 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.395153][T22369] binder: 22368:22369 ioctl c0306201 200000000080 returned -14 [ 296.423399][ T43] audit: type=1800 audit(1790788440.463:2582): pid=22370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7106" name="control" dev="sysfs" ino=5235 res=0 errno=0 [ 296.484067][ T43] audit: type=1400 audit(1790788440.523:2583): avc: denied { write } for pid=22366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.493907][T22370] smpboot: CPU 3 is now offline [ 296.560407][ T43] audit: type=1400 audit(1790788440.603:2584): avc: denied { write } for pid=22376 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.632683][ T43] audit: type=1800 audit(1790788440.673:2585): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=793 res=0 errno=0 [ 296.734890][T22374] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 296.815313][ T43] audit: type=1800 audit(1790788440.853:2586): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174056 res=0 errno=0 [ 296.846649][T22387] Ring buffer clock went backwards: 152721352009 -> 4115 [ 296.848357][T22374] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 296.901849][T22387] [CPU: 1]TIME DOES NOT MATCH expected:152721352011 actual:4117 delta:2 before:4115 after:4115 context:. [ 296.901849][T22387] trace clock:trace_clock_counter+0x0/0x40 [ 296.901883][T22387] [152707725600] PAGE TIME STAMP [ 296.901890][T22387] 0x0: [152707725600] delta:0 .d [ 296.901897][T22387] 0x44: [152707733464] delta:7864 .d [ 296.901904][T22387] 0x68: [152707740059] delta:6595 .d [ 296.901911][T22387] 0xac: [152707804786] delta:64727 .d [ 296.901918][T22387] 0xf0: [152712868886] delta:5064100 sd [ 296.901925][T22387] 0x118: [152713674513] delta:805627 .d [ 296.901932][T22387] 0x140: [152714027295] delta:352782 .d [ 296.901940][T22387] 0x164: [152714597824] delta:570529 .d [ 296.901947][T22387] 0x18c: [152715043694] delta:445870 .d [ 296.901953][T22387] 0x1d0: [152715056454] delta:12760 .d [ 296.901961][T22387] 0x1f8: [152715065938] delta:9484 .d [ 296.901968][T22387] 0x23c: [152715089766] delta:23828 .d [ 296.901974][T22387] 0x260: [152715152112] delta:62346 .d [ 296.901981][T22387] 0x288: [152715177289] delta:25177 .d [ 296.901988][T22387] 0x2ac: [152715186805] delta:9516 .d [ 296.901995][T22387] 0x2f0: [152717900581] delta:2713776 .d [ 296.902002][T22387] 0x334: [152717909594] delta:9013 .d [ 296.902009][T22387] 0x35c: [152717930930] delta:21336 .d [ 296.902016][T22387] 0x380: [152717941197] delta:10267 .d [ 296.902024][T22387] 0x3c4: [152721352009] delta:3410812 .d [ 296.902033][T22387] 0x408: [152721352009] delta:0 TIME EXTEND [ 296.902039][T22387] 0x410: [152721352009] delta:0 . [ 296.902048][T22387] expected end:0x444 last event actually ended at:0x444 [ 296.902160][T22387] ------------[ cut here ]------------ [ 296.902168][T22387] system_state != SYSTEM_BOOTING [ 296.902175][T22387] WARNING: kernel/trace/ring_buffer.c:4783 at check_buffer.cold+0x1a2/0x1ef, CPU#1: syz.5.7113/22387 [ 296.964573][T22387] Modules linked in: [ 296.968170][T22387] CPU: 1 UID: 0 PID: 22387 Comm: syz.5.7113 Tainted: G S L syzkaller #0 PREEMPT(full) [ 296.972353][T22387] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 296.974577][T22387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.978446][T22387] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 296.980678][T22387] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d 8c e5 21 10 31 ff 89 ee e8 3f 17 e9 00 85 ed 0f 84 58 b2 eb 00 e8 c2 1c e9 00 90 <0f> 0b 90 e9 03 b0 eb 00 49 c7 c7 60 5e f6 8b e9 51 fe ff ff e8 98 [ 296.987397][T22387] RSP: 0018:ffffc900037df748 EFLAGS: 00010293 [ 296.989384][T22387] RAX: 0000000000000000 RBX: 1ffff920006fbeef RCX: 0000000000000003 [ 296.991867][T22387] RDX: ffff8880419a8000 RSI: ffffffff8123280e RDI: ffff8880419a8000 [ 296.994464][T22387] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 296.997114][T22387] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000001015 [ 296.999584][T22387] R13: ffff88801d6c5800 R14: ffff88801f697000 R15: ffffffff8bf65a00 [ 297.002125][T22387] FS: 0000555576799500(0000) GS:ffff8880d5c4f000(0000) knlGS:0000000000000000 [ 297.005105][T22387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.007342][T22387] CR2: 00007faa2acc6d58 CR3: 0000000040762000 CR4: 0000000000352ef0 [ 297.010141][T22387] Call Trace: [ 297.011432][T22387] [ 297.012411][T22387] ? __pfx_trace_clock_counter+0x10/0x10 [ 297.014346][T22387] ? __pfx_check_buffer+0x10/0x10 [ 297.016541][T22387] ? sched_mm_cid_fork+0x20c/0xeb0 [ 297.018597][T22387] ? sched_mm_cid_fork+0x20c/0xeb0 [ 297.020719][T22387] __rb_reserve_next.constprop.0+0x486/0x1640 [ 297.023157][T22387] ring_buffer_write+0x4a7/0x1910 [ 297.025387][T22387] ? __pfx_ring_buffer_write+0x10/0x10 [ 297.027909][T22387] ? __pfx_cgroup_post_fork+0x10/0x10 [ 297.030298][T22387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.032626][T22387] trace_buffer_unlock_commit_regs+0x414/0x540 [ 297.035073][T22387] ? ring_buffer_event_data+0xf0/0x150 [ 297.037195][T22387] trace_event_buffer_commit+0x1ed/0xa80 [ 297.038967][T22387] trace_event_raw_event_sched_process_fork+0x346/0x460 [ 297.041217][T22387] ? __pfx_trace_event_raw_event_sched_process_fork+0x10/0x10 [ 297.044200][T22387] ? lockdep_hardirqs_on+0x7d/0x110 [ 297.046352][T22387] ? __pfx_add_device_randomness+0x10/0x10 [ 297.048681][T22387] ? _copy_from_user+0x59/0xd0 [ 297.050666][T22387] kernel_clone+0x461/0x9d0 [ 297.052508][T22387] ? rcu_read_unlock+0x2d/0xb0 [ 297.054455][T22387] ? __pfx_kernel_clone+0x10/0x10 [ 297.056148][T22387] ? __lock_acquire+0x5c0/0x1f40 [ 297.058019][T22387] __do_sys_clone3+0x214/0x290 [ 297.059980][T22387] ? __pfx___do_sys_clone3+0x10/0x10 [ 297.062125][T22387] ? __might_fault+0xc5/0x140 [ 297.064010][T22387] ? _copy_to_user+0xaf/0xd0 [ 297.065898][T22387] do_syscall_64+0x123/0x790 [ 297.067775][T22387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.070141][T22387] RIP: 0033:0x7faa29d9ef49 [ 297.071723][T22387] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 297.078368][T22387] RSP: 002b:00007ffdd34dd0f8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 297.081270][T22387] RAX: ffffffffffffffda RBX: 00007faa29d5a4e0 RCX: 00007faa29d9ef49 [ 297.083907][T22387] RDX: 00007faa29d5a4e0 RSI: 0000000000000058 RDI: 00007ffdd34dd150 [ 297.086711][T22387] RBP: 00007faa2acc66c0 R08: 00007faa2acc66c0 R09: 00007ffdd34dd237 [ 297.089387][T22387] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 297.092037][T22387] R13: 000000000000006e R14: 00007ffdd34dd150 R15: 00007ffdd34dd238 [ 297.094703][T22387] [ 297.095816][T22387] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 297.098173][T22387] CPU: 1 UID: 0 PID: 22387 Comm: syz.5.7113 Tainted: G S L syzkaller #0 PREEMPT(full) [ 297.101715][T22387] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 297.103714][T22387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.106980][T22387] Call Trace: [ 297.108120][T22387] [ 297.109195][T22387] dump_stack_lvl+0x100/0x190 [ 297.110996][T22387] vpanic+0x553/0x970 [ 297.112518][T22387] ? __pfx_vpanic+0x10/0x10 [ 297.114072][T22387] panic+0xd1/0xe0 [ 297.115289][T22387] ? __pfx_panic+0x10/0x10 [ 297.116734][T22387] check_panic_on_warn.cold+0x19/0x34 [ 297.118783][T22387] ? check_buffer.cold+0x1a2/0x1ef [ 297.120388][T22387] __warn.cold+0x191/0x318 [ 297.121707][T22387] __report_bug+0x30f/0x440 [ 297.123134][T22387] ? check_buffer.cold+0x1a2/0x1ef [ 297.124787][T22387] ? __pfx___report_bug+0x10/0x10 [ 297.126552][T22387] ? irq_work_queue+0xd1/0x100 [ 297.128293][T22387] ? __wake_up_klogd+0xe5/0x140 [ 297.129975][T22387] ? vprintk_emit+0x1c9/0x6b0 [ 297.131538][T22387] ? __pfx_vprintk_emit+0x10/0x10 [ 297.133130][T22387] ? check_buffer.cold+0x1a2/0x1ef [ 297.134735][T22387] report_bug+0xb3/0x220 [ 297.136078][T22387] ? check_buffer.cold+0x1a2/0x1ef [ 297.137837][T22387] handle_bug+0x16a/0x2a0 [ 297.139256][T22387] exc_invalid_op+0x17/0x50 [ 297.140706][T22387] asm_exc_invalid_op+0x1a/0x20 [ 297.142237][T22387] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 297.144025][T22387] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d 8c e5 21 10 31 ff 89 ee e8 3f 17 e9 00 85 ed 0f 84 58 b2 eb 00 e8 c2 1c e9 00 90 <0f> 0b 90 e9 03 b0 eb 00 49 c7 c7 60 5e f6 8b e9 51 fe ff ff e8 98 [ 297.150136][T22387] RSP: 0018:ffffc900037df748 EFLAGS: 00010293 [ 297.152166][T22387] RAX: 0000000000000000 RBX: 1ffff920006fbeef RCX: 0000000000000003 [ 297.154743][T22387] RDX: ffff8880419a8000 RSI: ffffffff8123280e RDI: ffff8880419a8000 [ 297.157234][T22387] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 297.159842][T22387] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000001015 [ 297.162334][T22387] R13: ffff88801d6c5800 R14: ffff88801f697000 R15: ffffffff8bf65a00 [ 297.164814][T22387] ? check_buffer.cold+0x1a1/0x1ef [ 297.166425][T22387] ? check_buffer.cold+0x1a1/0x1ef [ 297.168132][T22387] ? __pfx_trace_clock_counter+0x10/0x10 [ 297.169921][T22387] ? __pfx_check_buffer+0x10/0x10 [ 297.171554][T22387] ? sched_mm_cid_fork+0x20c/0xeb0 [ 297.173210][T22387] ? sched_mm_cid_fork+0x20c/0xeb0 [ 297.174890][T22387] __rb_reserve_next.constprop.0+0x486/0x1640 [ 297.176933][T22387] ring_buffer_write+0x4a7/0x1910 [ 297.178671][T22387] ? __pfx_ring_buffer_write+0x10/0x10 [ 297.180573][T22387] ? __pfx_cgroup_post_fork+0x10/0x10 [ 297.182291][T22387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.184213][T22387] trace_buffer_unlock_commit_regs+0x414/0x540 [ 297.186209][T22387] ? ring_buffer_event_data+0xf0/0x150 [ 297.188065][T22387] trace_event_buffer_commit+0x1ed/0xa80 [ 297.190066][T22387] trace_event_raw_event_sched_process_fork+0x346/0x460 [ 297.192289][T22387] ? __pfx_trace_event_raw_event_sched_process_fork+0x10/0x10 [ 297.194694][T22387] ? lockdep_hardirqs_on+0x7d/0x110 [ 297.196344][T22387] ? __pfx_add_device_randomness+0x10/0x10 [ 297.198247][T22387] ? _copy_from_user+0x59/0xd0 [ 297.199823][T22387] kernel_clone+0x461/0x9d0 [ 297.201344][T22387] ? rcu_read_unlock+0x2d/0xb0 [ 297.202890][T22387] ? __pfx_kernel_clone+0x10/0x10 [ 297.204532][T22387] ? __lock_acquire+0x5c0/0x1f40 [ 297.206123][T22387] __do_sys_clone3+0x214/0x290 [ 297.207650][T22387] ? __pfx___do_sys_clone3+0x10/0x10 [ 297.209422][T22387] ? __might_fault+0xc5/0x140 [ 297.210952][T22387] ? _copy_to_user+0xaf/0xd0 [ 297.212472][T22387] do_syscall_64+0x123/0x790 [ 297.213980][T22387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.215878][T22387] RIP: 0033:0x7faa29d9ef49 [ 297.217328][T22387] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 297.223643][T22387] RSP: 002b:00007ffdd34dd0f8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 297.226284][T22387] RAX: ffffffffffffffda RBX: 00007faa29d5a4e0 RCX: 00007faa29d9ef49 [ 297.228790][T22387] RDX: 00007faa29d5a4e0 RSI: 0000000000000058 RDI: 00007ffdd34dd150 [ 297.231381][T22387] RBP: 00007faa2acc66c0 R08: 00007faa2acc66c0 R09: 00007ffdd34dd237 [ 297.233994][T22387] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 297.237070][T22387] R13: 000000000000006e R14: 00007ffdd34dd150 R15: 00007ffdd34dd238 [ 297.239818][T22387] [ 297.243834][T22387] Kernel Offset: disabled [ 297.245201][T22387] Rebooting in 86400 seconds..