last executing test programs: 25.475386712s ago: executing program 0 (id=1215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{&(0x7f00000010c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000840)='\a', 0x1}], 0x1}}], 0x1, 0x800) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r1, 0x4}, 0x8) 25.393754125s ago: executing program 0 (id=1217): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x20fe, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc) 25.392240717s ago: executing program 0 (id=1218): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x8, 0x0, 0x5}, 0x62}}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup3(r0, r2, 0x80000) read$FUSE(r3, &(0x7f0000000780)={0x2020}, 0x2020) 25.307346244s ago: executing program 0 (id=1219): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 25.256587319s ago: executing program 0 (id=1222): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 25.19580916s ago: executing program 0 (id=1226): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='p:s/- ./file0:0', 0xf) 10.210196997s ago: executing program 32 (id=1226): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='p:s/- ./file0:0', 0xf) 1.636987118s ago: executing program 2 (id=1776): pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r1, 0xfffffffffffffc01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.537199032s ago: executing program 2 (id=1777): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40000, 0x111) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x68, 0x64, 0x0, 0x8, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x20, 0x606f, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0x14, 0xf989, "e0625660bac570f7f163f1bb3603f207"}, @timestamp={0x8, 0xa, 0x9, 0x6}, @window={0x3, 0x0, 0x1}, @exp_smc={0xfe, 0x6}, @nop, @mss={0x2, 0x3, 0x200}, @mss={0x2, 0x4, 0x5}, @timestamp={0x8, 0xa, 0xe6, 0x10000}]}}}}}}}, 0x0) 1.436903817s ago: executing program 3 (id=1779): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 1.436691138s ago: executing program 3 (id=1780): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x4000800, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.386764124s ago: executing program 3 (id=1781): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4309, 0x4) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/212, 0xd4}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x200}], 0x3, 0x40008060, 0x0) 1.386557463s ago: executing program 3 (id=1782): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000100)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0xa0a}) 1.266141593s ago: executing program 3 (id=1783): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000597000/0x400000)=nil) read(r0, &(0x7f00000000c0)=""/175, 0x20) 696.943814ms ago: executing program 2 (id=1800): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@iv={0x28, 0x117, 0x2, 0x10, "f748e9a6030fdb350470a55c5850c0e3"}], 0x28, 0x40000}, 0x0) 696.805035ms ago: executing program 2 (id=1801): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 696.651965ms ago: executing program 1 (id=1802): r0 = socket$packet(0x11, 0x3, 0x300) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x200c0000, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="76d1eef3ef91"}, 0x14) 636.94103ms ago: executing program 2 (id=1803): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 636.752212ms ago: executing program 1 (id=1804): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x200, 0x716e) 616.980447ms ago: executing program 1 (id=1805): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 396.689772ms ago: executing program 4 (id=1806): r0 = fsopen(&(0x7f0000000ac0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='sysfs\x00', &(0x7f00000003c0)='=', 0x1) 396.437927ms ago: executing program 3 (id=1807): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 396.328284ms ago: executing program 4 (id=1808): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r1, 0x11f90aaf22dbaef5, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) 325.822289ms ago: executing program 4 (id=1809): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x401, @private1={0xfc, 0x1, '\x00', 0xff}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x20040040, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x20}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0x3, 0x2da}, 0xc) 325.636509ms ago: executing program 1 (id=1810): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000740)="9723af4501000000000001008cc5595c4a9b8f99595311dc93a46126", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844) 325.529808ms ago: executing program 4 (id=1811): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x10}) 247.480189ms ago: executing program 4 (id=1812): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2920"], 0x6a) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 247.304544ms ago: executing program 1 (id=1813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0xc000, {}, 0x1, 0x8}, {"d07ee511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) 156.075824ms ago: executing program 4 (id=1814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 95.333325ms ago: executing program 2 (id=1815): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 91.509498ms ago: executing program 1 (id=1816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = gettid() setns(0xc9, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 0s ago: executing program 33 (id=1815): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 0s ago: executing program 4 (id=1818): creat(&(0x7f0000000000)='file0\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='file0', 0x5) kernel console output (not intermixed with test programs): l (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.848957][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.854131][ T5727] team0: Port device team_slave_1 added [ 46.867167][ T5719] team0: Port device team_slave_1 added [ 46.869309][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.872061][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.881224][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.913694][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.915937][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.924013][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.928423][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.930666][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.938587][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.960302][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.962489][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.970816][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.974657][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.978126][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.986187][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.997315][ T5721] hsr_slave_0: entered promiscuous mode [ 47.000459][ T5721] hsr_slave_1: entered promiscuous mode [ 47.006465][ T5720] hsr_slave_0: entered promiscuous mode [ 47.008757][ T5720] hsr_slave_1: entered promiscuous mode [ 47.011132][ T5720] debugfs: 'hsr0' already exists in 'hsr' [ 47.012983][ T5720] Cannot create hsr debugfs directory [ 47.087746][ T5719] hsr_slave_0: entered promiscuous mode [ 47.090501][ T5719] hsr_slave_1: entered promiscuous mode [ 47.092987][ T5719] debugfs: 'hsr0' already exists in 'hsr' [ 47.095186][ T5719] Cannot create hsr debugfs directory [ 47.103434][ T5727] hsr_slave_0: entered promiscuous mode [ 47.105645][ T5727] hsr_slave_1: entered promiscuous mode [ 47.107727][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 47.109634][ T5727] Cannot create hsr debugfs directory [ 47.310554][ T5720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.317593][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.320352][ T5720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.327135][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.338118][ T5720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.342167][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.344905][ T5720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.349275][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.390626][ T5721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.395563][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.398855][ T5721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.403034][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.407270][ T5721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.412841][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.416217][ T5721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.421531][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.477182][ T5719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.482980][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.486439][ T5719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.492132][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.498476][ T5719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.504777][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.521194][ T5719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.526138][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.583171][ T5727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.589215][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.593538][ T5727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.600191][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.603655][ T5727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.609526][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.613109][ T5727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.616700][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.629265][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.667795][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.684174][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.686779][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.696126][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.698466][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.704013][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.727211][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.744111][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.746902][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.759888][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.762854][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.779820][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.816564][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.823387][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.841460][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.843783][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.847848][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.850164][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.860536][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.875286][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.877617][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.885043][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.887348][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.012179][ T5733] Bluetooth: hci0: command tx timeout [ 48.014715][ T5731] Bluetooth: hci2: command tx timeout [ 48.014760][ T5734] Bluetooth: hci1: command tx timeout [ 48.052341][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.070353][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.090394][ T5720] veth0_vlan: entered promiscuous mode [ 48.090829][ T5734] Bluetooth: hci3: command tx timeout [ 48.098018][ T5720] veth1_vlan: entered promiscuous mode [ 48.119257][ T5721] veth0_vlan: entered promiscuous mode [ 48.126136][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.131570][ T5720] veth0_macvtap: entered promiscuous mode [ 48.134875][ T5721] veth1_vlan: entered promiscuous mode [ 48.143638][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.146795][ T5720] veth1_macvtap: entered promiscuous mode [ 48.173760][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.184481][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.200062][ T5719] veth0_vlan: entered promiscuous mode [ 48.207592][ T5721] veth0_macvtap: entered promiscuous mode [ 48.217002][ T5719] veth1_vlan: entered promiscuous mode [ 48.223420][ T5727] veth0_vlan: entered promiscuous mode [ 48.228266][ T5721] veth1_macvtap: entered promiscuous mode [ 48.244323][ T5727] veth1_vlan: entered promiscuous mode [ 48.254815][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.276019][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.286560][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.287947][ T5719] veth0_macvtap: entered promiscuous mode [ 48.290202][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.300141][ T5719] veth1_macvtap: entered promiscuous mode [ 48.318389][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.321926][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.323866][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.329475][ T5727] veth0_macvtap: entered promiscuous mode [ 48.334667][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 48.334677][ T42] audit: type=1400 audit(1786244222.130:169): avc: denied { mount } for pid=5720 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.343652][ T42] audit: type=1400 audit(1786244222.130:170): avc: denied { mounton } for pid=5720 comm="syz-executor" path="/syzkaller.uByx20/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.351184][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.353071][ T42] audit: type=1400 audit(1786244222.130:171): avc: denied { mount } for pid=5720 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.360249][ T42] audit: type=1400 audit(1786244222.130:172): avc: denied { mounton } for pid=5720 comm="syz-executor" path="/syzkaller.uByx20/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 48.361330][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.368169][ T42] audit: type=1400 audit(1786244222.130:173): avc: denied { mounton } for pid=5720 comm="syz-executor" path="/syzkaller.uByx20/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 48.380196][ T42] audit: type=1400 audit(1786244222.150:174): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.381767][ T5727] veth1_macvtap: entered promiscuous mode [ 48.386174][ T42] audit: type=1400 audit(1786244222.160:175): avc: denied { mounton } for pid=5720 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 48.395027][ T42] audit: type=1400 audit(1786244222.160:176): avc: denied { mount } for pid=5720 comm="syz-executor" name="/" dev="gadgetfs" ino=8584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 48.398739][ T5720] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.402208][ T42] audit: type=1400 audit(1786244222.160:177): avc: denied { mount } for pid=5720 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.415509][ T42] audit: type=1400 audit(1786244222.160:178): avc: denied { mounton } for pid=5720 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 48.415872][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.438622][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.449998][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.452420][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.463047][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.473033][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.475386][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.484018][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 48.495519][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.498037][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.511960][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.514396][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.550382][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.560522][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.574510][ T5878] netlink: 'syz.3.6': attribute type 10 has an invalid length. [ 48.586858][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.590283][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.598798][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.601117][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.603982][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.606255][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.611088][ T5878] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 48.615502][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.618042][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.641248][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.661223][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.668857][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.689870][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.695562][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.698673][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.702097][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.704861][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.707552][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.711236][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.714050][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.716745][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.719467][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.724775][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.731961][ T5893] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 49.049069][ T5934] kAFS: bad VL server IP address [ 49.165291][ T5942] ima: Unable to open file: /e (-2) [ 49.165522][ T5941] ima: policy update failed [ 49.195875][ T5944] ehci-pci 0000:00:1d.7: remove, state 1 [ 49.199041][ T5944] usb usb1: USB disconnect, device number 1 [ 49.201202][ T5944] usb 1-1: USB disconnect, device number 2 [ 49.245558][ T5944] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 49.407548][ T5952] process 'syz.1.37' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 49.467459][ T5956] Bluetooth: MGMT ver 1.23 [ 49.499261][ T5961] syz.1.41 uses obsolete (PF_INET,SOCK_PACKET) [ 49.512536][ T9] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 49.666883][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 49.669393][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 49.691190][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 49.694152][ T9] usb 2-1: Product: QEMU USB Tablet [ 49.696375][ T9] usb 2-1: Manufacturer: QEMU [ 49.697950][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 49.733962][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input6 [ 49.822280][ T9] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 49.853040][ T5981] warning: `syz.0.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.879867][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.905703][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.52'. [ 49.951506][ T5990] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 50.029652][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 50.032666][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 50.036759][ T29] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 50.039393][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 50.048288][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 50.056180][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 50.059321][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.064086][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.099769][ T5734] Bluetooth: hci0: command tx timeout [ 50.100148][ T5733] Bluetooth: hci2: command tx timeout [ 50.100427][ T5731] Bluetooth: hci1: command tx timeout [ 50.144919][ T6005] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 50.148425][ T6005] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 50.171003][ T5733] Bluetooth: hci3: command tx timeout [ 50.283403][ T29] usb 8-1: GET_CAPABILITIES returned 0 [ 50.289300][ T29] usbtmc 8-1:16.0: can't read capabilities [ 50.332991][ T6021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.335364][ T6021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.342337][ T6021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.345611][ T6021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.347520][ T6021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.350894][ T6021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.354633][ T6021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.356641][ T6021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.362087][ T6021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.366467][ T6021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.368930][ T6021] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.374384][ T6021] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.470867][ T6034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.472906][ T6034] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.474856][ T6034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.477937][ T6034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.485745][ T24] usb 8-1: USB disconnect, device number 2 [ 50.540081][ T6035] block nbd1: Device being setup by another task [ 50.544065][ T6031] block nbd1: shutting down sockets [ 50.619620][ T5831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.770538][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.775217][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.780501][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.783666][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.787924][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.792781][ T5831] usb 5-1: config 0 descriptor?? [ 50.866928][ T6069] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 51.097940][ T6085] xt_hashlimit: size too large, truncated to 1048576 [ 51.195366][ T6093] block nbd2: NBD_DISCONNECT [ 51.209047][ T5831] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 51.212771][ T5831] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 51.217377][ T5831] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 51.220113][ T5831] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 51.223011][ T5831] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 51.225424][ T5831] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 51.227785][ T5831] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 51.231907][ T5831] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 51.234220][ T5831] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 51.236549][ T5831] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 51.244868][ T5831] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 51.287669][ T6102] loop5: detected capacity change from 0 to 2640 [ 51.346180][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 51.351822][ T6102] loop5: detected capacity change from 2640 to 524287999 [ 51.351949][ T5732] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.357600][ T5732] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.361164][ T5732] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.364174][ T5732] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.366934][ T5732] Buffer I/O error on dev loop5, logical block 0, async page read [ 51.414209][ T6112] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 51.461978][ T5831] usb 5-1: USB disconnect, device number 2 [ 51.470652][ T6114] netlink: 56 bytes leftover after parsing attributes in process `syz.2.111'. [ 51.516828][ T6118] udc usbip-vudc.0: soft-connect without a gadget driver [ 51.622003][ T6128] Zero length message leads to an empty skb [ 51.766668][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 51.769707][ T6150] netlink: 'syz.2.128': attribute type 5 has an invalid length. [ 51.773467][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 51.798253][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 51.802073][ T6150] netlink: 'syz.2.128': attribute type 5 has an invalid length. [ 51.804580][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 51.809904][ T5816] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.812705][ T5816] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.816899][ T5816] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.820775][ T5816] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.016082][ T6176] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of opcode x1 drop +0 instances [ 52.289472][ T6212] netlink: 168 bytes leftover after parsing attributes in process `syz.3.157'. [ 52.301637][ T6214] i2c i2c-0: delete_device: Can't find device in list [ 52.499722][ T5733] Bluetooth: hci3: command 0x0419 tx timeout [ 52.499829][ T5734] Bluetooth: hci2: command 0x0419 tx timeout [ 52.500647][ T5731] Bluetooth: hci0: command 0x0419 tx timeout [ 52.500688][ T5731] Bluetooth: hci1: command 0x0419 tx timeout [ 52.762171][ T6273] Bluetooth: hci5: Frame reassembly failed (-84) [ 52.764894][ T61] Bluetooth: hci5: Frame reassembly failed (-84) [ 52.817033][ T6277] ALSA: seq fatal error: cannot create timer (-19) [ 53.012589][ T6286] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 53.348564][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 53.477387][ T42] kauditd_printk_skb: 162 callbacks suppressed [ 53.477403][ T42] audit: type=1400 audit(1786244228.276:341): avc: denied { write } for pid=6300 comm="syz.2.197" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.598733][ T42] audit: type=1400 audit(1786244228.396:342): avc: denied { map } for pid=6302 comm="syz.2.198" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.838871][ T42] audit: type=1400 audit(1786244228.636:343): avc: denied { write } for pid=6304 comm="syz.2.199" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.848218][ T42] audit: type=1400 audit(1786244228.636:344): avc: denied { open } for pid=6304 comm="syz.2.199" path="/dev/input/event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.855987][ T42] audit: type=1400 audit(1786244228.646:345): avc: denied { ioctl } for pid=6304 comm="syz.2.199" path="/dev/input/event0" dev="devtmpfs" ino=940 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.969074][ T42] audit: type=1400 audit(1786244228.766:346): avc: denied { ioctl } for pid=6312 comm="syz.2.203" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 54.050917][ T42] audit: type=1326 audit(1786244228.856:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.3.206" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd51599e0d9 code=0x0 [ 54.188478][ T6328] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.470923][ T6342] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 54.470980][ T42] audit: type=1400 audit(1786244229.276:348): avc: denied { write } for pid=6341 comm="syz.2.217" name="core" dev="configfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.502937][ T42] audit: type=1400 audit(1786244229.306:349): avc: denied { getopt } for pid=6343 comm="syz.2.218" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.529384][ T6346] gretap0: entered promiscuous mode [ 54.570111][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 54.570240][ T5081] Bluetooth: hci0: command 0x0419 tx timeout [ 54.572384][ T5731] Bluetooth: hci1: command 0x0419 tx timeout [ 54.572416][ T5731] Bluetooth: hci3: command 0x0419 tx timeout [ 54.729625][ T5081] Bluetooth: hci4: command 0x1003 tx timeout [ 54.729642][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 54.810338][ T5734] Bluetooth: hci5: command 0xfc11 tx timeout [ 54.811615][ T5733] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 54.837527][ T42] audit: type=1400 audit(1786244229.636:350): avc: denied { ioctl } for pid=6358 comm="syz.1.224" path="socket:[12439]" dev="sockfs" ino=12439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.856445][ T6361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 55.008078][ T6378] ieee802154 phy0 wpan0: encryption failed: -22 [ 56.649821][ T5733] Bluetooth: hci2: command 0x0419 tx timeout [ 56.653807][ T5733] Bluetooth: hci0: command 0x0419 tx timeout [ 56.659714][ T5734] Bluetooth: hci1: command 0x0419 tx timeout [ 56.660274][ T5733] Bluetooth: hci3: command 0x0419 tx timeout [ 56.719905][ T3256] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.723791][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.849630][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.872189][ T3256] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.879436][ T3256] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.883839][ T3256] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 56.887787][ T3256] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 56.893860][ T3256] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.898378][ T3256] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.900164][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 56.904770][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 56.908028][ T3256] usb 8-1: config 0 descriptor?? [ 56.908113][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.913060][ T6501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 56.913600][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 56.914204][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.914220][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 56.915079][ T29] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 56.915092][ T29] usb 5-1: Manufacturer: syz [ 56.916788][ T29] usb 5-1: config 0 descriptor?? [ 57.010693][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 57.014346][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 57.016955][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 57.020024][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 57.022689][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 57.025869][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 57.030534][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 57.032977][ T9] usb 6-1: Product: syz [ 57.034251][ T9] usb 6-1: Manufacturer: syz [ 57.042913][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 57.044783][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 57.049122][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 57.051614][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 57.301265][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 57.301374][ T24] usb 6-1: USB disconnect, device number 2 [ 57.303450][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 57.307157][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 57.324544][ T3256] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 57.340229][ T3256] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 57.345565][ T29] hid_parser_main: 28 callbacks suppressed [ 57.345577][ T29] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 57.360785][ T29] appleir 0003:05AC:8243.0005: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 57.363666][ T41] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 57.582240][ T50] usb 5-1: USB disconnect, device number 3 [ 57.583043][ T847] usb 8-1: USB disconnect, device number 3 [ 57.631002][ T24] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 58.141041][ T24] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 58.180693][ T6547] ceph: No mds server is up or the cluster is laggy [ 58.247063][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 58.279734][ T6577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.356995][ T6576] infiniband syz1: set active [ 58.359595][ T6576] infiniband syz1: added syz_tun [ 58.369459][ T6576] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 58.374616][ T6576] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 58.379864][ T6576] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 58.397501][ T6576] RDS/IB: syz1: added [ 58.400016][ T6576] smc: adding ib device syz1 with port count 1 [ 58.402111][ T6576] smc: ib device syz1 port 1 has no pnetid [ 58.729669][ T5733] Bluetooth: hci2: command 0x0419 tx timeout [ 58.729699][ T5734] Bluetooth: hci3: command 0x0419 tx timeout [ 58.731628][ T5081] Bluetooth: hci0: command 0x0419 tx timeout [ 60.249673][ T6559] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 60.249687][ T5734] Bluetooth: hci1: command 0x0419 tx timeout [ 61.082403][ T6559] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.085178][ T6559] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.087267][ T6559] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.121543][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 61.121555][ T42] audit: type=1400 audit(1786244235.926:404): avc: denied { block_suspend } for pid=6592 comm="syz.2.322" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.151811][ T6599] jffs2: notice: (6599) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 61.164556][ T42] audit: type=1400 audit(1786244235.966:405): avc: denied { write } for pid=6597 comm="syz.0.326" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.180799][ T42] audit: type=1400 audit(1786244235.966:406): avc: denied { add_name } for pid=6597 comm="syz.0.326" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.187225][ T42] audit: type=1400 audit(1786244235.966:407): avc: denied { create } for pid=6597 comm="syz.0.326" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.197057][ T42] audit: type=1400 audit(1786244235.966:408): avc: denied { write } for pid=6597 comm="syz.0.326" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.220245][ T42] audit: type=1400 audit(1786244235.966:409): avc: denied { write } for pid=6597 comm="syz.0.326" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.227765][ T42] audit: type=1400 audit(1786244235.966:410): avc: denied { remove_name } for pid=6597 comm="syz.0.326" name="file1" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.235180][ T42] audit: type=1400 audit(1786244235.966:411): avc: denied { rename } for pid=6597 comm="syz.0.326" name="file1" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.242208][ T42] audit: type=1400 audit(1786244236.016:412): avc: denied { allowed } for pid=6605 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.298905][ T42] audit: type=1400 audit(1786244236.096:413): avc: denied { create } for pid=6614 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 61.437144][ T6626] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.655307][ T6643] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.822814][ T6675] bond0: invalid NS target ff00:: specified for addition [ 61.825112][ T6675] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 61.998457][ T6693] No fuse device found [ 62.115104][ T6701] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.169775][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 62.190904][ T6712] evm: overlay not supported [ 62.226444][ T6701] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.326486][ T6730] input: syz1 as /devices/virtual/input/input8 [ 62.330016][ T5734] Bluetooth: hci0: command 0x0419 tx timeout [ 62.363037][ T6701] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.486414][ T6701] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.600091][ T5816] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.620615][ T5816] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.623412][ T5816] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.629665][ T5816] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.779497][ T6767] usb3503 0-0008: unknown mode is requested [ 62.781619][ T6767] usb3503 0-0008: usb3503_probe: probed in standby mode [ 62.790786][ T6767] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 63.029646][ T5094] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 63.129627][ T5733] Bluetooth: hci3: command 0x0419 tx timeout [ 63.129638][ T5081] Bluetooth: hci2: command 0x0419 tx timeout [ 63.182465][ T5094] usb 7-1: unable to get BOS descriptor or descriptor too short [ 63.189623][ T5094] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 63.193335][ T5094] usb 7-1: config 100 has an invalid interface number: 173 but max is 0 [ 63.197273][ T5094] usb 7-1: config 100 has no interface number 0 [ 63.204917][ T5094] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 63.211118][ T5094] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 44581, setting to 8 [ 63.217554][ T6800] ======================================================= [ 63.217554][ T6800] WARNING: The mand mount option has been deprecated and [ 63.217554][ T6800] and is ignored by this kernel. Remove the mand [ 63.217554][ T6800] option from the mount to silence this warning. [ 63.217554][ T6800] ======================================================= [ 63.218197][ T5094] usb 7-1: config 100 interface 173 has no altsetting 0 [ 63.235939][ T5094] usb 7-1: string descriptor 0 read error: -22 [ 63.237972][ T5094] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.243830][ T6771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.248708][ T6771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.266739][ T5094] metro_usb 7-1:100.173: Metrologic USB to Serial converter detected [ 63.278819][ T5094] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 63.460782][ T6771] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 63.467427][ T5094] usb 7-1: USB disconnect, device number 2 [ 63.480425][ T5094] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 63.485613][ T5094] metro_usb 7-1:100.173: device disconnected [ 63.802597][ T6832] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 63.859249][ T6841] jffs2: notice: (6841) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 63.977580][ T6853] netlink: 144 bytes leftover after parsing attributes in process `syz.1.437'. [ 64.069287][ T6866] jffs2: notice: (6866) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 64.210855][ T6879] jffs2: notice: (6879) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 64.864198][ T6900] jffs2: notice: (6900) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 2 orphan) found. [ 64.889853][ T5733] Bluetooth: hci0: command 0x0419 tx timeout [ 64.891568][ T5734] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 64.923974][ T6911] device-mapper: ioctl: Unable to rename non-existent device, to B [ 65.031742][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.474'. [ 65.064768][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 65.067538][ T6937] netlink: 'syz.3.478': attribute type 10 has an invalid length. [ 65.070137][ T6935] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.070719][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 65.074926][ T6935] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 65.157214][ T5094] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 65.160030][ T5094] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 65.177134][ T5094] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 65.514839][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 65.538490][ T6981] bond0: invalid NS target ff00:: specified for addition [ 65.542217][ T6981] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 65.994717][ T6999] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 66.196619][ T7033] capability: warning: `syz.0.511' uses deprecated v2 capabilities in a way that may be insecure [ 66.202913][ T7033] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 66.206258][ T7033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.212201][ T7033] overlayfs: failed to set uuid (100/file1, err=-13); falling back to uuid=null. [ 66.275549][ T42] kauditd_printk_skb: 68 callbacks suppressed [ 66.275569][ T42] audit: type=1400 audit(1786244241.076:482): avc: denied { write } for pid=7040 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.284487][ T42] audit: type=1400 audit(1786244241.076:483): avc: denied { name_connect } for pid=7040 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 66.428761][ T42] audit: type=1400 audit(1786244241.226:484): avc: denied { create } for pid=7053 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.434697][ T42] audit: type=1400 audit(1786244241.236:485): avc: denied { ioctl } for pid=7053 comm="syz.0.518" path="socket:[15884]" dev="sockfs" ino=15884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.438418][ T7056] capability: warning: `syz.3.521' uses 32-bit capabilities (legacy support in use) [ 66.492039][ T7062] input: syz1 as /devices/virtual/input/input10 [ 66.659497][ T42] audit: type=1400 audit(1786244241.456:486): avc: denied { read } for pid=7069 comm="syz.0.527" path="socket:[16964]" dev="sockfs" ino=16964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.102801][ T42] audit: type=1807 audit(1786244241.906:487): UNKNOWN=m res=0 [ 67.104743][ T7080] ima: policy update failed [ 67.107521][ T42] audit: type=1802 audit(1786244241.906:488): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.530" res=0 errno=0 [ 67.113303][ T42] audit: type=1802 audit(1786244241.906:489): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.530" res=0 errno=0 [ 67.369319][ T7119] binder: 7118:7119 ioctl c0306201 200000000080 returned -14 [ 67.466015][ T7128] xt_hashlimit: size too large, truncated to 1048576 [ 67.711807][ T42] audit: type=1400 audit(1786244242.516:490): avc: denied { write } for pid=7152 comm="syz.3.565" name="dlm" dev="configfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.718423][ T42] audit: type=1400 audit(1786244242.516:491): avc: denied { write } for pid=7152 comm="syz.3.565" name="spaces" dev="configfs" ino=15977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.794274][ T7162] binder: 7160:7162 ioctl 4018620d 0 returned -22 [ 67.953667][ T7166] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.958638][ T7166] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 68.181215][ T7180] jffs2: notice: (7180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 3 orphan) found. [ 68.881331][ T7243] tun0: tun_chr_ioctl cmd 1074025675 [ 68.882983][ T7243] tun0: persist enabled [ 68.884586][ T7243] tun0: tun_chr_ioctl cmd 1074025675 [ 68.886174][ T7243] tun0: persist disabled [ 68.972010][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.474677][ T5734] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 69.530167][ T7269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.534550][ T7269] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.536986][ T7269] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.539095][ T7269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.583090][ T7280] overlayfs: failed to verify upper root origin [ 69.654016][ T7289] kvm: kvm [7286]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000075) [ 69.682029][ T7293] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.682656][ T7278] block nbd2: shutting down sockets [ 69.840930][ T7300] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.842975][ T7300] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.845005][ T7300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.846939][ T7300] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.851312][ T7318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.010445][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.014629][ T7335] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 70.015315][ T5094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.020403][ T7335] CPU: 1 UID: 0 PID: 7335 Comm: syz.1.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.020440][ T7335] Tainted: [L]=SOFTLOCKUP [ 70.020445][ T7335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.020458][ T7335] Call Trace: [ 70.020468][ T7335] [ 70.020472][ T7335] dump_stack_lvl+0x100/0x190 [ 70.020516][ T7335] sysfs_warn_dup.cold+0x1c/0x28 [ 70.020535][ T7335] sysfs_create_dir_ns+0x24b/0x2b0 [ 70.020552][ T7335] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 70.020564][ T7335] ? find_held_lock+0x2b/0x80 [ 70.020574][ T7335] ? kobject_add_internal+0x25f/0x930 [ 70.020616][ T7335] ? kobject_add_internal+0x25f/0x930 [ 70.020629][ T7335] ? class_dir_child_ns_type+0xd/0x60 [ 70.020653][ T7335] kobject_add_internal+0x2c8/0x930 [ 70.020667][ T7335] kobject_add+0x16a/0x1e0 [ 70.020678][ T7335] ? __pfx_kobject_add+0x10/0x10 [ 70.020691][ T7335] ? get_device_parent+0x1b3/0x4c0 [ 70.020707][ T7335] ? kobject_put+0xb9/0x640 [ 70.020720][ T7335] device_add+0x294/0x1970 [ 70.020737][ T7335] ? lockdep_init_map_type+0x5c/0x250 [ 70.020753][ T7335] ? __pfx_device_add+0x10/0x10 [ 70.020769][ T7335] ? lockdep_init_map_type+0x5c/0x250 [ 70.020784][ T7335] ? __init_waitqueue_head+0xca/0x150 [ 70.020805][ T7335] tty_register_device_attr+0x388/0x7f0 [ 70.020822][ T7335] ? lockdep_init_map_type+0x5c/0x250 [ 70.020841][ T7335] ? __pfx_tty_register_device_attr+0x10/0x10 [ 70.020864][ T7335] ? tty_port_init+0x156/0x1c0 [ 70.020885][ T7335] gsm_activate_mux+0x155/0x2a0 [ 70.020904][ T7335] gsmld_ioctl+0xbbc/0x15c0 [ 70.020923][ T7335] ? __pfx_gsmld_ioctl+0x10/0x10 [ 70.020940][ T7335] ? __ldsem_down_read_nested+0xf3/0x890 [ 70.020959][ T7335] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 70.020979][ T7335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.020994][ T7335] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 70.021006][ T7335] ? __pfx_gsmld_ioctl+0x10/0x10 [ 70.021021][ T7335] tty_ioctl+0x11b4/0x1640 [ 70.021035][ T7335] ? __pfx_tty_ioctl+0x10/0x10 [ 70.021048][ T7335] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.021071][ T7335] ? __fget_files+0x215/0x3d0 [ 70.021081][ T7335] ? hook_file_ioctl_common+0x140/0x440 [ 70.021098][ T7335] ? selinux_file_ioctl+0x13b/0x290 [ 70.021114][ T7335] ? selinux_file_ioctl+0xb6/0x290 [ 70.021131][ T7335] ? __pfx_tty_ioctl+0x10/0x10 [ 70.021145][ T7335] __x64_sys_ioctl+0x18e/0x210 [ 70.021162][ T7335] do_syscall_64+0x115/0x870 [ 70.021177][ T7335] ? clear_bhb_loop+0x70/0xc0 [ 70.021190][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.021202][ T7335] RIP: 0033:0x7f9ce719e0d9 [ 70.021212][ T7335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.021223][ T7335] RSP: 002b:00007f9ce53d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.021250][ T7335] RAX: ffffffffffffffda RBX: 00007f9ce7426090 RCX: 00007f9ce719e0d9 [ 70.021258][ T7335] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 70.021265][ T7335] RBP: 00007f9ce7235024 R08: 0000000000000000 R09: 0000000000000000 [ 70.021272][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.021280][ T7335] R13: 00007f9ce7426128 R14: 00007f9ce7426090 R15: 00007fffdd31d348 [ 70.021295][ T7335] [ 70.021363][ T7335] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 70.028057][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.230804][ T7343] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check. [ 70.469111][ T7359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.474105][ T7359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.478098][ T7359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.485567][ T7359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.221974][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.223994][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.849808][ T5734] Bluetooth: hci3: command 0x0419 tx timeout [ 71.849854][ T5733] Bluetooth: hci2: command 0x0419 tx timeout [ 71.851089][ T5081] Bluetooth: hci0: command 0x0419 tx timeout [ 72.569743][ T5733] Bluetooth: hci1: command 0x0419 tx timeout [ 72.569859][ T7360] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 73.468060][ T7360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.470993][ T7360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.473548][ T7360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.726554][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 73.729428][ T7416] netlink: 'syz.3.680': attribute type 5 has an invalid length. [ 73.732730][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'. [ 73.736725][ T7415] block nbd0: NBD_DISCONNECT [ 73.755885][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 73.760057][ T5816] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.763425][ T5816] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.766899][ T5816] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.767600][ T7416] netlink: 'syz.3.680': attribute type 5 has an invalid length. [ 73.776332][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'. [ 73.779273][ T5816] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.781250][ T7421] xt_hashlimit: size too large, truncated to 1048576 [ 73.790054][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 73.790066][ T42] audit: type=1400 audit(1786244248.586:506): avc: denied { append } for pid=7419 comm="syz.0.683" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.793537][ T7422] loop5: detected capacity change from 0 to 2640 [ 73.817043][ T5739] Buffer I/O error on dev loop5, logical block 0, async page read [ 73.823523][ T5739] Buffer I/O error on dev loop5, logical block 0, async page read [ 73.895677][ T42] audit: type=1400 audit(1786244248.696:507): avc: denied { mount } for pid=7433 comm="syz.2.697" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.904705][ T7434] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 73.915625][ T42] audit: type=1400 audit(1786244248.716:508): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.919757][ T7422] loop5: detected capacity change from 2640 to 524287999 [ 73.925565][ T5739] Buffer I/O error on dev loop5, logical block 0, async page read [ 73.930712][ T5739] Buffer I/O error on dev loop5, logical block 0, async page read [ 73.935957][ T5739] Buffer I/O error on dev loop5, logical block 0, async page read [ 73.980855][ T42] audit: type=1400 audit(1786244248.786:509): avc: denied { create } for pid=7441 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.984054][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 73.990986][ T42] audit: type=1400 audit(1786244248.786:510): avc: denied { write } for pid=7441 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.339033][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 74.550901][ T24] net_ratelimit: 13 callbacks suppressed [ 74.550915][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.622740][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 74.658157][ T42] audit: type=1400 audit(1786244249.456:511): avc: denied { ioctl } for pid=7506 comm="syz.0.724" path="socket:[18772]" dev="sockfs" ino=18772 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.659716][ T5734] Bluetooth: hci0: command 0x0419 tx timeout [ 74.670854][ T5733] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 75.149923][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.429507][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.766'. [ 75.540002][ T5733] Bluetooth: hci3: command 0x0419 tx timeout [ 75.540145][ T5734] Bluetooth: hci2: command 0x0419 tx timeout [ 75.540703][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 75.576718][ T7614] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 75.702179][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.806607][ T7635] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check. [ 75.841091][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 75.870393][ T7645] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 75.874552][ T7645] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.880520][ T7645] overlayfs: failed to set uuid (212/file1, err=-13); falling back to uuid=null. [ 76.079114][ T7679] No fuse device found [ 76.126619][ T7687] ima: policy update failed [ 76.128748][ T42] audit: type=1807 audit(1786244250.926:512): UNKNOWN=m res=0 [ 76.131193][ T42] audit: type=1802 audit(1786244250.926:513): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.812" res=0 errno=0 [ 76.131590][ T7689] device-mapper: ioctl: Unable to rename non-existent device, to B [ 76.138144][ T42] audit: type=1802 audit(1786244250.926:514): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.812" res=0 errno=0 [ 76.332819][ T1036] cfg80211: failed to load regulatory.db [ 76.379509][ T42] audit: type=1400 audit(1786244251.176:515): avc: denied { write } for pid=7717 comm="syz.0.825" name="/" dev="9p" ino=75524173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.697650][ T7744] binder: 7743:7744 ioctl c0306201 200000000080 returned -14 [ 76.730075][ T5734] Bluetooth: hci0: command 0x0419 tx timeout [ 76.793481][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.820590][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.980345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.202814][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.205972][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.367725][ T7778] rdma_rxe: rxe_newlink: failed to add syz_tun [ 77.487216][ T7784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.494567][ T7784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.805069][ T7820] rdma_rxe: rxe_newlink: failed to add syz_tun [ 77.917398][ T1036] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 77.921944][ T1036] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 78.011239][ T5830] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.170372][ T5830] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.174431][ T5830] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.177459][ T5830] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 78.179947][ T1036] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 78.181111][ T5830] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.186097][ T5830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 78.190283][ T5830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 78.195179][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.197863][ T5830] usb 5-1: Product: syz [ 78.199271][ T5830] usb 5-1: Manufacturer: syz [ 78.208634][ T5830] cdc_wdm 5-1:1.0: skipping garbage [ 78.210521][ T5830] cdc_wdm 5-1:1.0: skipping garbage [ 78.217168][ T5830] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 78.219185][ T5830] cdc_wdm 5-1:1.0: Unknown control protocol [ 78.253280][ T5094] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 78.409686][ T5094] usb 8-1: Using ep0 maxpacket: 16 [ 78.412949][ T5094] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 78.418131][ T5094] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.420710][ T5094] usb 8-1: Product: syz [ 78.422051][ T5094] usb 8-1: Manufacturer: syz [ 78.423867][ T5094] usb 8-1: SerialNumber: syz [ 78.426996][ T5094] usb 8-1: config 0 descriptor?? [ 78.460839][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 78.463086][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 78.464878][ T847] usb 5-1: USB disconnect, device number 4 [ 78.465186][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 78.470861][ T7813] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 78.690098][ T5807] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 78.739519][ T7830] ceph: No mds server is up or the cluster is laggy [ 78.833670][ T5094] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 78.843383][ T5094] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.846838][ T5094] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 78.849804][ T5094] usb 8-1: media controller created [ 78.856693][ T5094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.921186][ T7863] rdma_rxe: rxe_newlink: failed to add syz_tun [ 79.040358][ T5094] zl10353_read_register: readreg error (reg=127, ret==0) [ 79.042633][ T5094] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 79.045337][ T5094] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 79.050501][ T5094] usb 8-1: USB disconnect, device number 4 [ 79.080605][ T5094] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 79.116474][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 79.116487][ T42] audit: type=1400 audit(1786244253.916:521): avc: denied { create } for pid=7865 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.124206][ T42] audit: type=1400 audit(1786244253.916:522): avc: denied { ioctl } for pid=7865 comm="syz.1.891" path="socket:[19408]" dev="sockfs" ino=19408 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.228658][ T5830] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 79.231115][ T5830] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 79.236664][ T5830] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 79.690201][ T60] net_ratelimit: 19 callbacks suppressed [ 79.690214][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.701427][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.799608][ T847] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 79.951281][ T847] usb 8-1: unable to get BOS descriptor or descriptor too short [ 79.953756][ T847] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 79.957893][ T847] usb 8-1: config 100 has an invalid interface number: 173 but max is 0 [ 79.961711][ T847] usb 8-1: config 100 has no interface number 0 [ 79.964368][ T847] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 79.967572][ T847] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 44581, setting to 8 [ 79.972504][ T847] usb 8-1: config 100 interface 173 has no altsetting 0 [ 79.977434][ T847] usb 8-1: string descriptor 0 read error: -22 [ 79.979513][ T847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.983932][ T7890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.986361][ T7890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.993008][ T847] metro_usb 8-1:100.173: Metrologic USB to Serial converter detected [ 80.002287][ T847] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 80.091009][ T42] audit: type=1400 audit(1786244254.896:523): avc: denied { write } for pid=7903 comm="syz.1.906" name="/" dev="9p" ino=75524173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.197074][ T7890] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 80.204348][ T5830] usb 8-1: USB disconnect, device number 5 [ 80.210903][ T5830] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 80.215919][ T5830] metro_usb 8-1:100.173: device disconnected [ 80.388548][ T7918] tun0: tun_chr_ioctl cmd 1074025675 [ 80.391242][ T7918] tun0: persist enabled [ 80.392991][ T7918] tun0: tun_chr_ioctl cmd 1074025675 [ 80.394717][ T7918] tun0: persist disabled [ 80.409779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.487137][ T7922] binder: 7921:7922 ioctl 4018620d 0 returned -22 [ 80.490888][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.590353][ T847] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 80.592751][ T847] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 80.597234][ T847] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 80.730372][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.733086][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.840444][ T7933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.290809][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.389149][ T7946] overlayfs: failed to verify upper root origin [ 81.499511][ T7964] xt_hashlimit: size too large, truncated to 1048576 [ 81.599443][ T42] audit: type=1400 audit(1786244256.396:524): avc: denied { read } for pid=7975 comm="syz.0.938" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.606642][ T42] audit: type=1400 audit(1786244256.396:525): avc: denied { open } for pid=7975 comm="syz.0.938" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.614308][ T42] audit: type=1400 audit(1786244256.396:526): avc: denied { ioctl } for pid=7975 comm="syz.0.938" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.772264][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.778198][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.811328][ T7985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.872192][ T42] audit: type=1400 audit(1786244256.676:527): avc: denied { connect } for pid=7995 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.878308][ T42] audit: type=1400 audit(1786244256.676:528): avc: denied { getopt } for pid=7995 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.884984][ T42] audit: type=1800 audit(1786244256.676:529): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.948" name="dead_threshold" dev="configfs" ino=21700 res=0 errno=0 [ 81.909358][ T42] audit: type=1400 audit(1786244256.706:530): avc: denied { map } for pid=8002 comm="syz.0.950" path="socket:[23714]" dev="sockfs" ino=23714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.945063][ T8011] __nla_validate_parse: 4 callbacks suppressed [ 81.945076][ T8011] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.954'. [ 81.956374][ T8009] SELinux: invalid class [ 81.962725][ T8009] SELinux: failed to load policy [ 82.308765][ T8052] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 82.348382][ T8056] xt_hashlimit: size too large, truncated to 1048576 [ 82.377610][ T8063] jffs2: notice: (8063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 3 orphan) found. [ 82.506067][ T8080] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 82.541285][ T8072] mmap: syz.2.981 (8072) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.035259][ T8134] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 83.502328][ T8143] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1013'. [ 83.689392][ T8153] ima: policy update completed [ 83.887843][ T8179] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 83.983696][ T8196] input: syz1 as /devices/virtual/input/input14 [ 84.029871][ T8199] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 84.033416][ T8199] CPU: 2 UID: 0 PID: 8199 Comm: syz.3.1037 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.033447][ T8199] Tainted: [L]=SOFTLOCKUP [ 84.033454][ T8199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.033479][ T8199] Call Trace: [ 84.033486][ T8199] [ 84.033495][ T8199] dump_stack_lvl+0x100/0x190 [ 84.033527][ T8199] sysfs_warn_dup.cold+0x1c/0x28 [ 84.033558][ T8199] sysfs_create_dir_ns+0x24b/0x2b0 [ 84.033581][ T8199] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 84.033601][ T8199] ? find_held_lock+0x2b/0x80 [ 84.033620][ T8199] ? kobject_add_internal+0x25f/0x930 [ 84.033685][ T8199] ? kobject_add_internal+0x25f/0x930 [ 84.033708][ T8199] ? class_dir_child_ns_type+0xd/0x60 [ 84.033741][ T8199] kobject_add_internal+0x2c8/0x930 [ 84.033768][ T8199] kobject_add+0x16a/0x1e0 [ 84.033787][ T8199] ? __pfx_kobject_add+0x10/0x10 [ 84.033809][ T8199] ? get_device_parent+0x1b3/0x4c0 [ 84.033836][ T8199] ? kobject_put+0xb9/0x640 [ 84.033861][ T8199] device_add+0x294/0x1970 [ 84.033889][ T8199] ? lockdep_init_map_type+0x5c/0x250 [ 84.033914][ T8199] ? __pfx_device_add+0x10/0x10 [ 84.033940][ T8199] ? lockdep_init_map_type+0x5c/0x250 [ 84.033965][ T8199] ? __init_waitqueue_head+0xca/0x150 [ 84.033998][ T8199] tty_register_device_attr+0x388/0x7f0 [ 84.034023][ T8199] ? lockdep_init_map_type+0x5c/0x250 [ 84.034048][ T8199] ? __pfx_tty_register_device_attr+0x10/0x10 [ 84.034078][ T8199] ? tty_port_init+0x156/0x1c0 [ 84.034106][ T8199] gsm_activate_mux+0x155/0x2a0 [ 84.034131][ T8199] gsmld_ioctl+0xbbc/0x15c0 [ 84.034165][ T8199] ? __pfx_gsmld_ioctl+0x10/0x10 [ 84.034194][ T8199] ? __ldsem_down_read_nested+0xf3/0x890 [ 84.034226][ T8199] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 84.034261][ T8199] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.034286][ T8199] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 84.034307][ T8199] ? __pfx_gsmld_ioctl+0x10/0x10 [ 84.034333][ T8199] tty_ioctl+0x11b4/0x1640 [ 84.034362][ T8199] ? __pfx_tty_ioctl+0x10/0x10 [ 84.034385][ T8199] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 84.034424][ T8199] ? __fget_files+0x215/0x3d0 [ 84.034445][ T8199] ? hook_file_ioctl_common+0x140/0x440 [ 84.034476][ T8199] ? selinux_file_ioctl+0x13b/0x290 [ 84.034503][ T8199] ? selinux_file_ioctl+0xb6/0x290 [ 84.034532][ T8199] ? __pfx_tty_ioctl+0x10/0x10 [ 84.034556][ T8199] __x64_sys_ioctl+0x18e/0x210 [ 84.034586][ T8199] do_syscall_64+0x115/0x870 [ 84.034610][ T8199] ? clear_bhb_loop+0x70/0xc0 [ 84.034633][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.034652][ T8199] RIP: 0033:0x7fd51599e0d9 [ 84.034668][ T8199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.034685][ T8199] RSP: 002b:00007fd5167e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.034713][ T8199] RAX: ffffffffffffffda RBX: 00007fd515c26090 RCX: 00007fd51599e0d9 [ 84.034726][ T8199] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 84.034739][ T8199] RBP: 00007fd515a35024 R08: 0000000000000000 R09: 0000000000000000 [ 84.034751][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.034763][ T8199] R13: 00007fd515c26128 R14: 00007fd515c26090 R15: 00007ffea50cbba8 [ 84.034791][ T8199] [ 84.034812][ T8199] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.040284][ T5807] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 84.120151][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 84.120163][ T42] audit: type=1800 audit(1786244258.926:610): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143464 res=0 errno=0 [ 84.159311][ T42] audit: type=1800 audit(1786244258.926:611): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143476 res=0 errno=0 [ 84.166105][ T42] audit: type=1800 audit(1786244258.926:612): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143488 res=0 errno=0 [ 84.172789][ T42] audit: type=1800 audit(1786244258.926:613): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143500 res=0 errno=0 [ 84.179313][ T42] audit: type=1800 audit(1786244258.926:614): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143512 res=0 errno=0 [ 84.188362][ T42] audit: type=1800 audit(1786244258.936:615): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143524 res=0 errno=0 [ 84.195666][ T42] audit: type=1800 audit(1786244258.936:616): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143536 res=0 errno=0 [ 84.202474][ T42] audit: type=1800 audit(1786244258.936:617): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143548 res=0 errno=0 [ 84.209062][ T42] audit: type=1800 audit(1786244258.936:618): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143560 res=0 errno=0 [ 84.215727][ T42] audit: type=1800 audit(1786244258.936:619): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143572 res=0 errno=0 [ 84.889980][ T847] net_ratelimit: 23 callbacks suppressed [ 84.889995][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.207599][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.209973][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.224061][ T8231] xt_hashlimit: size too large, truncated to 1048576 [ 85.291134][ T847] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 85.293678][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.379774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.389838][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 85.394316][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'. [ 85.401012][ T8244] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 85.415832][ T8246] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.449599][ T847] usb 6-1: Using ep0 maxpacket: 8 [ 85.451629][ T847] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.455188][ T847] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 85.457860][ T847] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 85.461671][ T847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.474146][ T8252] ip_tables: iptables: counters copy to user failed while replacing table [ 85.541551][ T8258] Mass Storage Function, version: 2009/09/11 [ 85.544535][ T8258] LUN: removable file: (no medium) [ 85.940979][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.943871][ T3256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.712371][ T8289] loop2: detected capacity change from 0 to 7 [ 86.721506][ T8289] Dev loop2: unable to read RDB block 7 [ 86.724829][ T8289] loop2: AHDI p1 p2 p3 [ 86.726481][ T8289] loop2: partition table partially beyond EOD, truncated [ 86.729512][ T8289] loop2: p1 start 1601398130 is beyond EOD, truncated [ 86.732765][ T8289] loop2: p2 start 1702059890 is beyond EOD, truncated [ 86.970030][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.081689][ T8314] ima: policy update completed [ 87.369972][ T3256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.419616][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.569630][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 87.572922][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 87.580402][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.583860][ T24] usb 5-1: Product: syz [ 87.585719][ T24] usb 5-1: Manufacturer: syz [ 87.587764][ T24] usb 5-1: SerialNumber: syz [ 87.594650][ T24] usb 5-1: config 0 descriptor?? [ 87.884673][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 87.888167][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'. [ 87.891964][ T8334] netlink: 'syz.2.1093': attribute type 19 has an invalid length. [ 88.010988][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 88.027137][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.030454][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.041955][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 88.047050][ T24] usb 5-1: media controller created [ 88.059937][ T5807] usb 6-1: USB disconnect, device number 3 [ 88.129154][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.219205][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 88.222455][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 88.225122][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 88.233347][ T24] usb 5-1: USB disconnect, device number 5 [ 88.266825][ T60] IPVS: starting estimator thread 0... [ 88.272960][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 88.379821][ T8354] IPVS: using max 42 ests per chain, 100800 per kthread [ 89.154128][ T42] kauditd_printk_skb: 205 callbacks suppressed [ 89.154141][ T42] audit: type=1800 audit(1786244263.956:825): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 89.166746][ T42] audit: type=1800 audit(1786244263.966:826): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1122" name="enable" dev="sysfs" ino=2848 res=0 errno=0 [ 89.188938][ T42] audit: type=1400 audit(1786244263.986:827): avc: denied { ioctl } for pid=8396 comm="syz.1.1124" path="socket:[23117]" dev="sockfs" ino=23117 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.205007][ T42] audit: type=1800 audit(1786244263.986:828): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 89.213743][ T42] audit: type=1800 audit(1786244264.006:829): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 89.224434][ T42] audit: type=1800 audit(1786244264.026:830): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145136 res=0 errno=0 [ 89.232995][ T42] audit: type=1800 audit(1786244264.026:831): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=13940 res=0 errno=0 [ 89.239326][ T42] audit: type=1400 audit(1786244264.036:832): avc: denied { write } for pid=8400 comm="syz.2.1126" name="/" dev="9p" ino=75524173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.246756][ T42] audit: type=1400 audit(1786244264.036:833): avc: denied { remove_name } for pid=8400 comm="syz.2.1126" name="file0" dev="9p" ino=75524175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.254063][ T42] audit: type=1400 audit(1786244264.036:834): avc: denied { unlink } for pid=8400 comm="syz.2.1126" name="file0" dev="9p" ino=75524175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.490467][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 89.493357][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 90.089838][ T5829] net_ratelimit: 127 callbacks suppressed [ 90.089852][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.174325][ T8456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.177155][ T8456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.179978][ T8456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.186104][ T8455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.203715][ T8455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.298142][ T8469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.301752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.303650][ T8471] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.562646][ T8500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.574216][ T8502] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 90.719523][ T5829] IPVS: starting estimator thread 0... [ 90.752386][ T8528] overlayfs: statfs failed on './file0' [ 90.820701][ T8526] IPVS: using max 43 ests per chain, 103200 per kthread [ 90.946761][ T5734] Bluetooth: hci2: unexpected cc 0x2029 length: 100 > 1 [ 90.950560][ T5734] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 91.688092][ T8569] netlink: 'syz.2.1201': attribute type 8 has an invalid length. [ 91.793668][ T8577] ±ÿ†Ý'É|d: renamed from lo [ 91.826009][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 92.055849][ T8596] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 92.113135][ T8594] kvm: MWAIT instruction emulated as NOP! [ 92.123076][ T8603] pim6reg9: entered allmulticast mode [ 92.740086][ T5829] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 92.890137][ T5829] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.893777][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.897160][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.900410][ T5829] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.904437][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.908790][ T5829] usb 7-1: config 0 descriptor?? [ 93.331835][ T5829] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 93.576236][ T3256] usb 7-1: USB disconnect, device number 3 [ 94.384656][ T42] kauditd_printk_skb: 120 callbacks suppressed [ 94.384682][ T42] audit: type=1800 audit(1786244269.186:955): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 94.450434][ T42] audit: type=1800 audit(1786244269.256:956): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145845 res=0 errno=0 [ 94.457022][ T42] audit: type=1800 audit(1786244269.256:957): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145856 res=0 errno=0 [ 94.494404][ T42] audit: type=1800 audit(1786244269.296:958): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 94.537127][ T42] audit: type=1800 audit(1786244269.336:959): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 94.547946][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 94.551500][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 94.557154][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 94.560266][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 94.580725][ T42] audit: type=1800 audit(1786244269.386:960): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 94.598864][ T42] audit: type=1400 audit(1786244269.396:961): avc: denied { write } for pid=8677 comm="syz.3.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.752852][ T8678] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 94.755605][ T8678] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 94.775992][ T42] audit: type=1800 audit(1786244269.576:962): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 94.786725][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1253'. [ 94.812000][ T42] audit: type=1800 audit(1786244269.616:963): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 94.851923][ T42] audit: type=1800 audit(1786244269.656:964): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 95.289811][ T5829] net_ratelimit: 7 callbacks suppressed [ 95.289824][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.540856][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.609654][ T37] wlan1: Trigger new scan to find an IBSS to join [ 95.891002][ T8702] jffs2: notice: (8702) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 1 orphan) and 6 of xref (0 dead, 3 orphan) found. [ 96.223311][ T8722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1269'. [ 96.333707][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.531268][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 96.681247][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1288'. [ 96.711605][ T8766] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1289'. [ 96.876773][ T8771] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode [ 96.879115][ T8771] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode [ 96.936269][ T8776] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.380069][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.527717][ T8822] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 97.611193][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.657058][ T8826] netlink: 'syz.2.1318': attribute type 23 has an invalid length. [ 98.010888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.409867][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.740643][ T7018] wlan1: Trigger new scan to find an IBSS to join [ 99.023015][ T8848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1328'. [ 99.401661][ T42] kauditd_printk_skb: 103 callbacks suppressed [ 99.401681][ T42] audit: type=1400 audit(1786244274.206:1068): avc: denied { setopt } for pid=8862 comm="syz.1.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.411240][ T42] audit: type=1800 audit(1786244274.216:1069): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 99.454219][ T42] audit: type=1800 audit(1786244274.256:1070): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 99.462524][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.485382][ T42] audit: type=1800 audit(1786244274.286:1071): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 99.492722][ T42] audit: type=1400 audit(1786244274.286:1072): avc: denied { write } for pid=8872 comm="syz.1.1340" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 99.522990][ T42] audit: type=1800 audit(1786244274.326:1073): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 99.554549][ T42] audit: type=1800 audit(1786244274.356:1074): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 99.568879][ T42] audit: type=1800 audit(1786244274.366:1075): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146570 res=0 errno=0 [ 99.595486][ T42] audit: type=1800 audit(1786244274.396:1076): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 99.603968][ T8886] Illegal XDP return value 4232642480 on prog (id 76) dev N/A, expect packet loss! [ 99.622936][ T42] audit: type=1800 audit(1786244274.426:1077): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 99.628438][ T8888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.664074][ T8892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.739913][ T37] wlan1: Creating new IBSS network, BSSID 2a:80:b0:f9:46:88 [ 100.493340][ T5829] net_ratelimit: 28 callbacks suppressed [ 100.493353][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.498883][ T8892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.652921][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.801814][ T5829] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 100.961056][ T5829] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 100.966896][ T5829] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 100.970550][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.976184][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.981528][ T5829] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 100.989192][ T5829] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 100.992352][ T5829] usb 6-1: Manufacturer: syz [ 101.003241][ T5829] usb 6-1: config 0 descriptor?? [ 101.418677][ T5829] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 101.438795][ T5829] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 101.539962][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.573789][ T8951] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 101.682546][ T5830] usb 6-1: USB disconnect, device number 4 [ 101.919221][ T8969] KVM: debugfs: duplicate directory 8969-4 [ 102.333996][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.366661][ T8980] __nla_validate_parse: 3 callbacks suppressed [ 102.366673][ T8980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1384'. [ 102.572376][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.672823][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.883367][ T9026] clocksource: Switched to clocksource acpi_pm [ 102.888937][ T9026] clocksource: Switched to clocksource tsc [ 102.931931][ T9034] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode [ 102.934273][ T9034] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode [ 102.939492][ T9028] kernel read not supported for file /policy (pid: 9028 comm: syz.2.1408) [ 103.049808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.053557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.126927][ T9055] loop5: detected capacity change from 0 to 7 [ 103.133174][ T9055] Dev loop5: unable to read RDB block 7 [ 103.134926][ T9055] loop5: AHDI p1 p3 p4 [ 103.136310][ T9055] loop5: partition table partially beyond EOD, truncated [ 103.138911][ T9055] loop5: p1 size 100663296 extends beyond EOD, truncated [ 103.145566][ T9055] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 103.229051][ T8202] udevd[8202]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 103.233106][ T5739] udevd[5739]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 103.337227][ T9077] lo: entered allmulticast mode [ 103.341872][ T9076] lo: left allmulticast mode [ 103.354615][ T9079] ip_tables: iptables: counters copy to user failed while replacing table [ 103.662890][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 103.672056][ T9101] gretap0: entered promiscuous mode [ 103.673916][ T9101] macvlan2: entered allmulticast mode [ 103.675638][ T9101] gretap0: entered allmulticast mode [ 104.143419][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 104.293757][ T9113] loop5: detected capacity change from 0 to 7 [ 104.297936][ T9113] Dev loop5: unable to read RDB block 7 [ 104.300320][ T9113] loop5: AHDI p2 [ 104.301849][ T9113] loop5: partition table partially beyond EOD, truncated [ 104.409653][ T42] kauditd_printk_skb: 123 callbacks suppressed [ 104.409666][ T42] audit: type=1400 audit(2000000001.420:1201): avc: denied { write } for pid=9126 comm="syz.2.1455" name="functions" dev="configfs" ino=12515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.430082][ T42] audit: type=1400 audit(2000000001.430:1202): avc: denied { write } for pid=9126 comm="syz.2.1455" name="functions" dev="configfs" ino=12515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.437884][ T42] audit: type=1800 audit(2000000001.450:1203): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 104.456428][ T42] audit: type=1800 audit(2000000001.470:1204): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 104.472438][ T42] audit: type=1800 audit(2000000001.480:1205): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 104.501919][ T42] audit: type=1800 audit(2000000001.520:1206): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 104.515127][ T42] audit: type=1800 audit(2000000001.530:1207): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 104.527049][ T9145] netlink: 'syz.3.1464': attribute type 8 has an invalid length. [ 104.530941][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 104.546210][ T42] audit: type=1800 audit(2000000001.560:1208): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 104.560480][ T42] audit: type=1400 audit(2000000001.570:1209): avc: denied { write } for pid=9146 comm="syz.2.1465" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.568506][ T42] audit: type=1800 audit(2000000001.580:1210): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 104.670588][ T9159] input: syz0 as /devices/virtual/input/input16 [ 104.759653][ T24] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 104.910223][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 104.914359][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.920669][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 8228, setting to 64 [ 104.924713][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 104.931024][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.938701][ T24] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 104.950638][ T24] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 104.953250][ T24] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 104.959803][ T24] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 104.965521][ T24] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 104.974009][ T24] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 104.983937][ T24] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 105.254640][ T24] usb 6-1: USB disconnect, device number 5 [ 105.260470][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 105.267907][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 105.271470][ T24] keyspan 6-1:1.0: device disconnected [ 105.689844][ T5831] net_ratelimit: 21 callbacks suppressed [ 105.689858][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.694368][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.935421][ T9213] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 105.985056][ T9217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.989160][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.076455][ T9226] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 106.079237][ T9226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.155702][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 106.411591][ T6037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.732145][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.736892][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.144293][ T9267] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1518'. [ 107.235811][ T9277] input: syz0 as /devices/virtual/input/input17 [ 107.418227][ T5733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.423686][ T5733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.428698][ T5733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.431816][ T5733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.436544][ T5733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.744012][ T5816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.847415][ T5816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.929362][ T5816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.971470][ T9291] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.973806][ T9291] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.976017][ T9291] bridge_slave_0: entered allmulticast mode [ 107.978694][ T9291] bridge_slave_0: entered promiscuous mode [ 107.983723][ T9291] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.987390][ T9291] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.989998][ T9291] bridge_slave_1: entered allmulticast mode [ 107.992743][ T9291] bridge_slave_1: entered promiscuous mode [ 108.022338][ T5816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.037730][ T9291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.042880][ T9291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.059527][ T9291] team0: Port device team_slave_0 added [ 108.062732][ T9291] team0: Port device team_slave_1 added [ 108.075937][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.078210][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.086386][ T9291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.090721][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.092958][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.101138][ T9291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.126176][ T9291] hsr_slave_0: entered promiscuous mode [ 108.128505][ T9291] hsr_slave_1: entered promiscuous mode [ 108.131119][ T9291] debugfs: 'hsr0' already exists in 'hsr' [ 108.133214][ T9291] Cannot create hsr debugfs directory [ 108.304226][ T5816] bridge_slave_1: left allmulticast mode [ 108.306449][ T5816] bridge_slave_1: left promiscuous mode [ 108.310582][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.316704][ T5816] bridge_slave_0: left allmulticast mode [ 108.319010][ T5816] bridge_slave_0: left promiscuous mode [ 108.321376][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.334041][ T5816] pim6reg9: left allmulticast mode [ 108.427965][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.432488][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.435974][ T5816] bond0 (unregistering): Released all slaves [ 108.647607][ T9291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.654415][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.657175][ T9291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.664193][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.666912][ T9291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.677491][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.681466][ T9291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.692309][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.695870][ T5434] 8021q: adding VLAN 0 to HW filter on device eth2 [ 108.780429][ T9291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.794627][ T9291] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.808906][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.811250][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.820357][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.822654][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.893592][ T5434] 8021q: adding VLAN 0 to HW filter on device eth3 [ 108.919525][ T5816] hsr_slave_0: left promiscuous mode [ 108.930292][ T5816] hsr_slave_1: left promiscuous mode [ 108.932538][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.935203][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.940448][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.943241][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.953819][ T5816] veth1_macvtap: left promiscuous mode [ 108.956231][ T5816] veth0_macvtap: left promiscuous mode [ 108.958248][ T5816] veth1_vlan: left promiscuous mode [ 108.962595][ T5816] veth0_vlan: left promiscuous mode [ 109.117793][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 109.127717][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 109.346892][ T5434] 8021q: adding VLAN 0 to HW filter on device eth4 [ 109.359705][ T9291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.378714][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 109.382653][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 109.388228][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 109.391209][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 109.425718][ T42] kauditd_printk_skb: 200 callbacks suppressed [ 109.425730][ T42] audit: type=1800 audit(2000000006.440:1411): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158383 res=0 errno=0 [ 109.445818][ T42] audit: type=1400 audit(2000000006.440:1412): avc: denied { write } for pid=9418 comm="syz.1.1555" name="/" dev="9p" ino=75524173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.457808][ T42] audit: type=1400 audit(2000000006.440:1413): avc: denied { associate } for pid=9418 comm="syz.1.1555" name="cgroup.kill" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 109.466587][ T42] audit: type=1400 audit(2000000006.470:1414): avc: denied { write } for pid=9422 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.495618][ T42] audit: type=1800 audit(2000000006.510:1415): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 109.517879][ T5434] 8021q: adding VLAN 0 to HW filter on device eth5 [ 109.523641][ T9291] veth0_vlan: entered promiscuous mode [ 109.524125][ T42] audit: type=1800 audit(2000000006.540:1416): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 109.528859][ T9291] veth1_vlan: entered promiscuous mode [ 109.539738][ T5734] Bluetooth: hci4: command tx timeout [ 109.544420][ T42] audit: type=1800 audit(2000000006.560:1417): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 109.548013][ T9431] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1561'. [ 109.553738][ T9291] veth0_macvtap: entered promiscuous mode [ 109.555678][ T9291] veth1_macvtap: entered promiscuous mode [ 109.562815][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.568228][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.578147][ T42] audit: type=1800 audit(2000000006.590:1418): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 109.606619][ T42] audit: type=1800 audit(2000000006.620:1419): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 109.622104][ T42] audit: type=1800 audit(2000000006.640:1420): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158402 res=0 errno=0 [ 109.630944][ T5773] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.639451][ T5773] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.668982][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.672108][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.691369][ T7018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.693926][ T7018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.709947][ T5773] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.721480][ T5773] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.796327][ T9457] pim6reg9: entered allmulticast mode [ 109.830889][ T9461] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1571'. [ 109.953070][ T9483] jffs2: notice: (9483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 1 orphan) and 6 of xref (0 dead, 3 orphan) found. [ 110.051679][ T9505] kernel read not supported for file /sg0 (pid: 9505 comm: syz.4.1589) [ 110.176401][ T9527] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.216534][ T9530] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 110.222504][ T9531] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1602'. [ 110.247177][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 110.309656][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 110.406599][ T9553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1613'. [ 110.453660][ T9561] mac80211_hwsim hwsim6 syzkaller1: entered promiscuous mode [ 110.456019][ T9561] mac80211_hwsim hwsim6 syzkaller1: entered allmulticast mode [ 110.459642][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 110.461732][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.470582][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 110.478397][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 110.484721][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.488126][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.495485][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.741899][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 110.743694][ T10] usbtmc 8-1:16.0: can't read capabilities [ 110.769779][ T5094] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 110.900830][ T60] net_ratelimit: 12 callbacks suppressed [ 110.900842][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.906439][ T9603] ±ÿ†Ý'É|d: renamed from lo (while UP) [ 110.941355][ T5807] usb 8-1: USB disconnect, device number 6 [ 110.941449][ T5094] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.948680][ T5094] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.952219][ T5094] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.955538][ T5094] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.960024][ T5094] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.967518][ T5094] usb 9-1: config 0 descriptor?? [ 111.387881][ T5094] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 111.531355][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.610081][ T5734] Bluetooth: hci4: command tx timeout [ 111.660796][ T9649] GUP no longer grows the stack in syz.2.1654 (9649): 200000004000-20000000a000 (200000002000) [ 111.665718][ T9649] CPU: 3 UID: 0 PID: 9649 Comm: syz.2.1654 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.665737][ T9649] Tainted: [L]=SOFTLOCKUP [ 111.665741][ T9649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.665758][ T9649] Call Trace: [ 111.665770][ T9649] [ 111.665775][ T9649] dump_stack_lvl+0x100/0x190 [ 111.665809][ T9649] gup_vma_lookup.cold+0x83/0x96 [ 111.665827][ T9649] __get_user_pages+0x241/0x32a0 [ 111.665849][ T9649] ? find_held_lock+0x2b/0x80 [ 111.665861][ T9649] ? mtree_load+0x311/0xa90 [ 111.665915][ T9649] ? __pfx___get_user_pages+0x10/0x10 [ 111.665937][ T9649] get_user_pages_remote+0x3d2/0xb10 [ 111.665954][ T9649] ? mas_root_expand+0x6e0/0x750 [ 111.665973][ T9649] ? __pfx_get_user_pages_remote+0x10/0x10 [ 111.665998][ T9649] __access_remote_vm+0x3bb/0x890 [ 111.666017][ T9649] ? __pfx___access_remote_vm+0x10/0x10 [ 111.666032][ T9649] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 111.666047][ T9649] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 111.666060][ T9649] proc_pid_cmdline_read+0x552/0x9a0 [ 111.666073][ T9649] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 111.666086][ T9649] ? rw_verify_area+0xce/0x6d0 [ 111.666103][ T9649] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 111.666114][ T9649] vfs_readv+0x5d8/0x8d0 [ 111.666134][ T9649] ? __pfx_vfs_readv+0x10/0x10 [ 111.666159][ T9649] ? __fget_files+0x21f/0x3d0 [ 111.666176][ T9649] ? do_preadv+0x1ac/0x270 [ 111.666193][ T9649] do_preadv+0x1ac/0x270 [ 111.666212][ T9649] ? __pfx_do_preadv+0x10/0x10 [ 111.666232][ T9649] do_syscall_64+0x115/0x870 [ 111.666247][ T9649] ? clear_bhb_loop+0x70/0xc0 [ 111.666269][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.666281][ T9649] RIP: 0033:0x7fe93719e0d9 [ 111.666290][ T9649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.666303][ T9649] RSP: 002b:00007fe9380c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 111.666328][ T9649] RAX: ffffffffffffffda RBX: 00007fe937425fa0 RCX: 00007fe93719e0d9 [ 111.666335][ T9649] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 111.666342][ T9649] RBP: 00007fe937235024 R08: 00000000fffffff9 R09: 0000000000000000 [ 111.666348][ T9649] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 111.666354][ T9649] R13: 00007fe937426038 R14: 00007fe937425fa0 R15: 00007ffef078f1b8 [ 111.666369][ T9649] [ 111.814946][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.930838][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.038663][ T9685] jffs2: notice: (9685) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 1 orphan) and 7 of xref (0 dead, 3 orphan) found. [ 112.102717][ T9694] erspan0: entered promiscuous mode [ 112.105688][ T9694] erspan0: left promiscuous mode [ 112.971171][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.975215][ T9736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1696'. [ 113.124407][ T9748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.126973][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.155239][ T9750] netlink: 'syz.1.1703': attribute type 2 has an invalid length. [ 113.158845][ T9750] netlink: 'syz.1.1703': attribute type 2 has an invalid length. [ 113.630454][ T9801] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.690043][ T5733] Bluetooth: hci4: command tx timeout [ 113.760363][ T10] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 113.765458][ T10] usb 9-1: device reset changed ep0 maxpacket size! [ 113.772160][ T5807] usb 9-1: USB disconnect, device number 2 [ 113.909698][ T5807] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 114.009769][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.060281][ T5807] usb 9-1: Using ep0 maxpacket: 8 [ 114.062353][ T5807] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 114.067523][ T5807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.070255][ T5807] usb 9-1: Product: syz [ 114.071587][ T5807] usb 9-1: Manufacturer: syz [ 114.073106][ T5807] usb 9-1: SerialNumber: syz [ 114.075910][ T5807] usb 9-1: config 0 descriptor?? [ 114.281520][ T5807] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 114.290214][ T5807] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 114.296749][ T5807] usb 9-1: USB disconnect, device number 3 [ 114.443357][ T42] kauditd_printk_skb: 195 callbacks suppressed [ 114.443370][ T42] audit: type=1800 audit(2000000011.460:1616): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 114.477115][ T42] audit: type=1800 audit(2000000011.490:1617): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 114.488271][ T9816] __nla_validate_parse: 1 callbacks suppressed [ 114.488283][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 114.494706][ T42] audit: type=1800 audit(2000000011.510:1618): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163471 res=0 errno=0 [ 114.529984][ T42] audit: type=1800 audit(2000000011.550:1619): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 114.563988][ T42] audit: type=1800 audit(2000000011.580:1620): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 114.579740][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.585700][ T42] audit: type=1800 audit(2000000011.600:1621): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 114.612262][ T42] audit: type=1800 audit(2000000011.630:1622): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 114.637459][ T42] audit: type=1800 audit(2000000011.650:1623): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 114.745914][ T42] audit: type=1800 audit(2000000011.760:1624): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 114.781049][ T42] audit: type=1800 audit(2000000011.800:1625): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 114.902395][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1745'. [ 114.905512][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1745'. [ 114.934173][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 114.937541][ T9848] netlink: 'syz.3.1747': attribute type 10 has an invalid length. [ 114.940075][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1747'. [ 114.950121][ T9848] geneve2: entered promiscuous mode [ 114.952451][ T9848] geneve2: entered allmulticast mode [ 115.053920][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.100693][ T9861] gadgetfs: bound to dummy_udc driver [ 115.176799][ T9867] CIFS: Attempting to mount //127.0.0.1/share [ 115.292325][ T9877] vcan0: tx address claim with dest, not broadcast [ 115.336027][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1764'. [ 115.689724][ T5734] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.751527][ T9902] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1772'. [ 115.779646][ T5734] Bluetooth: hci4: command tx timeout [ 116.008311][ T9867] CIFS: VFS: Error connecting to socket. Aborting operation. [ 116.011767][ T9867] CIFS: VFS: cifs_mount failed w/return code = -4 [ 116.020183][ T6037] net_ratelimit: 2 callbacks suppressed [ 116.020194][ T6037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.091178][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.456826][ T9944] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 116.568705][ T9953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.573238][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.616240][ T9955] pim6reg1: entered promiscuous mode [ 116.618347][ T9955] pim6reg1: entered allmulticast mode [ 116.661320][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.922578][ T37] smc: removing ib device syz1 [ 116.934043][ T847] syz1: Port: 1 Link DOWN [ 116.955284][ T37] smbdirect: ib_dev[syz1] removed [ 117.055333][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880283c4800: rx timeout, send abort [ 117.060089][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880283c4800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.153102][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.163955][ T9982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.166690][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.214654][ T9988] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 117.296503][ T5734] Bluetooth: hci4: unexpected cc 0x2029 length: 100 > 1 [ 117.481620][ T5773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.485617][ T5773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.511983][ T9997] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.569062][T10000] [ 117.570009][ T5773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.570063][T10000] ====================================================== [ 117.574256][ T5773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.577011][T10000] WARNING: possible circular locking dependency detected [ 117.583304][T10000] syzkaller #0 Tainted: G L [ 117.585748][T10000] ------------------------------------------------------ [ 117.588515][T10000] syz.4.1818/10000 is trying to acquire lock: [ 117.590918][T10000] ffff88804037abb8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 117.595077][T10000] [ 117.595077][T10000] but task is already holding lock: [ 117.598030][T10000] ffff88802c562120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 117.599742][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.601669][T10000] [ 117.601669][T10000] which lock already depends on the new lock. [ 117.601669][T10000] [ 117.604320][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.607725][T10000] [ 117.607725][T10000] the existing dependency chain (in reverse order) is: [ 117.607733][T10000] [ 117.607733][T10000] -> #2 (&common->filesem){++++}-{4:4}: [ 117.607768][T10000] lock_acquire+0x1b9/0x370 [ 117.611054][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.613698][T10000] down_read+0x99/0x4c0 [ 117.616951][ T5733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.618207][T10000] fsg_show_file+0x20/0x180 [ 117.618231][T10000] configfs_read_iter+0x426/0x6f0 [ 117.620887][ T5733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.621507][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.622298][T10000] __kernel_read+0x397/0xad0 [ 117.636175][T10000] integrity_kernel_read+0x7e/0xb0 [ 117.638342][T10000] ima_calc_file_hash_tfm+0x25e/0x350 [ 117.640582][T10000] ima_calc_file_hash+0x1e3/0x380 [ 117.642782][T10000] ima_collect_measurement+0x94f/0xb30 [ 117.645160][T10000] process_measurement+0xdfe/0x2350 [ 117.647408][T10000] ima_file_check+0xc3/0x110 [ 117.649462][T10000] security_file_post_open+0xc4/0x210 [ 117.651802][T10000] path_openat+0x985/0x4280 [ 117.653817][T10000] do_file_open+0x20e/0x430 [ 117.655747][T10000] do_sys_openat2+0x10f/0x1e0 [ 117.657748][T10000] __x64_sys_openat+0x12d/0x210 [ 117.659789][T10000] do_syscall_64+0x115/0x870 [ 117.661815][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.664435][T10000] [ 117.664435][T10000] -> #1 (&p->frag_sem){++++}-{4:4}: [ 117.667355][T10000] lock_acquire+0x1b9/0x370 [ 117.669390][T10000] down_read+0x99/0x4c0 [ 117.671299][T10000] __configfs_open_file+0xe8/0x9c0 [ 117.673536][T10000] do_dentry_open+0x6ab/0x14d0 [ 117.675602][T10000] vfs_open+0x82/0x3f0 [ 117.677335][T10000] dentry_open+0x71/0xd0 [ 117.679159][T10000] ima_calc_file_hash+0xe1/0x380 [ 117.681292][T10000] ima_collect_measurement+0x94f/0xb30 [ 117.683642][T10000] process_measurement+0xdfe/0x2350 [ 117.685906][T10000] ima_file_check+0xc3/0x110 [ 117.687894][T10000] security_file_post_open+0xc4/0x210 [ 117.690270][T10000] path_openat+0x985/0x4280 [ 117.692279][T10000] do_file_open+0x20e/0x430 [ 117.694177][T10000] do_sys_openat2+0x10f/0x1e0 [ 117.696181][T10000] __x64_sys_openat+0x12d/0x210 [ 117.698310][T10000] do_syscall_64+0x115/0x870 [ 117.700344][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.702852][T10000] [ 117.702852][T10000] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 117.706153][T10000] check_prev_add+0xeb/0xe60 [ 117.708199][T10000] __lock_acquire+0x136c/0x1a40 [ 117.710320][T10000] lock_acquire+0x1b9/0x370 [ 117.712300][T10000] __mutex_lock+0x1a4/0x1bd0 [ 117.714255][T10000] process_measurement+0x5ab/0x2350 [ 117.716458][T10000] ima_file_check+0xc3/0x110 [ 117.718314][T10000] security_file_post_open+0xc4/0x210 [ 117.720667][T10000] path_openat+0x985/0x4280 [ 117.722658][T10000] do_file_open+0x20e/0x430 [ 117.724670][T10000] file_open_name+0x1c3/0x3e0 [ 117.726714][T10000] filp_open+0x2e/0x50 [ 117.728613][T10000] fsg_lun_open+0x6b/0x7b0 [ 117.730576][T10000] fsg_store_file+0x1e7/0x450 [ 117.732638][T10000] configfs_write_iter+0x302/0x4e0 [ 117.734784][T10000] vfs_write+0x6ac/0x1050 [ 117.736645][T10000] ksys_write+0x12a/0x250 [ 117.738583][T10000] do_syscall_64+0x115/0x870 [ 117.740629][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.743159][T10000] [ 117.743159][T10000] other info that might help us debug this: [ 117.743159][T10000] [ 117.747144][T10000] Chain exists of: [ 117.747144][T10000] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &common->filesem [ 117.747144][T10000] [ 117.752494][T10000] Possible unsafe locking scenario: [ 117.752494][T10000] [ 117.755399][T10000] CPU0 CPU1 [ 117.757529][T10000] ---- ---- [ 117.759670][T10000] lock(&common->filesem); [ 117.761494][T10000] lock(&p->frag_sem); [ 117.764118][T10000] lock(&common->filesem); [ 117.766865][T10000] lock(&ima_iint_mutex_key[depth]); [ 117.769004][T10000] [ 117.769004][T10000] *** DEADLOCK *** [ 117.769004][T10000] [ 117.772160][T10000] 5 locks held by syz.4.1818/10000: [ 117.774240][T10000] #0: ffff88805b9975f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 117.777717][T10000] #1: ffff88802434e450 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 117.781272][T10000] #2: ffff888025501c80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 117.784982][T10000] #3: ffff88805b7c7370 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 117.788747][T10000] #4: ffff88802c562120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 117.792523][T10000] [ 117.792523][T10000] stack backtrace: [ 117.794862][T10000] CPU: 1 UID: 0 PID: 10000 Comm: syz.4.1818 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.794886][T10000] Tainted: [L]=SOFTLOCKUP [ 117.794892][T10000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.794912][T10000] Call Trace: [ 117.794923][T10000] [ 117.794928][T10000] dump_stack_lvl+0x100/0x190 [ 117.794946][T10000] print_circular_bug.cold+0x178/0x1c7 [ 117.794965][T10000] check_noncircular+0x146/0x160 [ 117.794980][T10000] check_prev_add+0xeb/0xe60 [ 117.794994][T10000] __lock_acquire+0x136c/0x1a40 [ 117.795010][T10000] lock_acquire+0x1b9/0x370 [ 117.795023][T10000] ? process_measurement+0x5ab/0x2350 [ 117.795035][T10000] ? __pfx___might_resched+0x10/0x10 [ 117.795050][T10000] __mutex_lock+0x1a4/0x1bd0 [ 117.795066][T10000] ? process_measurement+0x5ab/0x2350 [ 117.795077][T10000] ? process_measurement+0x5ab/0x2350 [ 117.795089][T10000] ? __pfx___mutex_lock+0x10/0x10 [ 117.795104][T10000] ? __pfx___might_resched+0x10/0x10 [ 117.795118][T10000] ? down_write+0x146/0x1f0 [ 117.795135][T10000] ? process_measurement+0x5ab/0x2350 [ 117.795145][T10000] process_measurement+0x5ab/0x2350 [ 117.795158][T10000] ? find_held_lock+0x2b/0x80 [ 117.795168][T10000] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 117.795180][T10000] ? __pfx_process_measurement+0x10/0x10 [ 117.795194][T10000] ? avc_has_perm+0x135/0x1e0 [ 117.795205][T10000] ? __pfx_avc_has_perm+0x10/0x10 [ 117.795221][T10000] ? hook_file_open+0x24f/0x8f0 [ 117.795238][T10000] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 117.795255][T10000] ima_file_check+0xc3/0x110 [ 117.795266][T10000] ? __pfx_ima_file_check+0x10/0x10 [ 117.795279][T10000] security_file_post_open+0xc4/0x210 [ 117.795296][T10000] path_openat+0x985/0x4280 [ 117.795311][T10000] ? __pfx_path_openat+0x10/0x10 [ 117.795322][T10000] ? kasan_save_stack+0x30/0x50 [ 117.795335][T10000] ? kasan_save_track+0x14/0x30 [ 117.795347][T10000] ? __kasan_slab_alloc+0x89/0x90 [ 117.795361][T10000] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 117.795373][T10000] ? do_getname_kernel+0x5d/0x250 [ 117.795385][T10000] ? filp_open+0x1d/0x50 [ 117.795398][T10000] ? fsg_lun_open+0x6b/0x7b0 [ 117.795410][T10000] ? fsg_store_file+0x1e7/0x450 [ 117.795423][T10000] do_file_open+0x20e/0x430 [ 117.795435][T10000] ? __pfx_do_file_open+0x10/0x10 [ 117.795452][T10000] ? rcu_is_watching+0x12/0xc0 [ 117.795470][T10000] file_open_name+0x1c3/0x3e0 [ 117.795484][T10000] ? __pfx_file_open_name+0x10/0x10 [ 117.795497][T10000] ? do_getname_kernel+0x5d/0x250 [ 117.795511][T10000] ? __asan_memcpy+0x3c/0x60 [ 117.795521][T10000] ? do_getname_kernel+0x1be/0x250 [ 117.795535][T10000] filp_open+0x2e/0x50 [ 117.795548][T10000] fsg_lun_open+0x6b/0x7b0 [ 117.795561][T10000] ? __pfx_down_read+0x10/0x10 [ 117.795577][T10000] fsg_store_file+0x1e7/0x450 [ 117.795591][T10000] configfs_write_iter+0x302/0x4e0 [ 117.795605][T10000] vfs_write+0x6ac/0x1050 [ 117.795615][T10000] ? __pfx_configfs_write_iter+0x10/0x10 [ 117.795629][T10000] ? __pfx_vfs_write+0x10/0x10 [ 117.795642][T10000] ksys_write+0x12a/0x250 [ 117.795651][T10000] ? __pfx_ksys_write+0x10/0x10 [ 117.795663][T10000] do_syscall_64+0x115/0x870 [ 117.795678][T10000] ? clear_bhb_loop+0x70/0xc0 [ 117.795690][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.795702][T10000] RIP: 0033:0x7f827979e0d9 [ 117.795711][T10000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.795724][T10000] RSP: 002b:00007f827a681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.795743][T10000] RAX: ffffffffffffffda RBX: 00007f8279a25fa0 RCX: 00007f827979e0d9 [ 117.795750][T10000] RDX: 0000000000000005 RSI: 0000200000000f00 RDI: 0000000000000004 [ 117.795757][T10000] RBP: 00007f8279835024 R08: 0000000000000000 R09: 0000000000000000 [ 117.795763][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.795770][T10000] R13: 00007f8279a26038 R14: 00007f8279a25fa0 R15: 00007fff93cb4a08 [ 117.795779][T10000] [ 117.947570][T10000] mass_storage.usb0/lun.0: file too small: file0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 117.991546][ T9997] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.067652][ T5773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.071396][ T5773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.121517][ T9997] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.170848][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.233930][ T9997] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.246550][ T5773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.250233][ T5773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.383015][ T5773] bridge_slave_1: left allmulticast mode [ 118.384923][ T5773] bridge_slave_1: left promiscuous mode [ 118.386840][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.390236][ T5773] bridge_slave_0: left allmulticast mode [ 118.392121][ T5773] bridge_slave_0: left promiscuous mode [ 118.394019][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.401728][ T5773] pim6reg9: left allmulticast mode [ 118.461975][ T5773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.465674][ T5773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.468924][ T5773] bond0 (unregistering): Released all slaves [ 118.475331][ T5434] 8021q: adding VLAN 0 to HW filter on device eth6 [ 118.563982][ T5434] 8021q: adding VLAN 0 to HW filter on device eth7 [ 118.651309][ T5434] 8021q: adding VLAN 0 to HW filter on device eth8 [ 118.736658][ T5773] hsr_slave_0: left promiscuous mode [ 118.738717][ T5773] hsr_slave_1: left promiscuous mode [ 118.741458][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.743856][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.746362][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.748653][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.753210][ T5773] veth1_macvtap: left promiscuous mode [ 118.755433][ T5773] veth0_macvtap: left promiscuous mode [ 118.757638][ T5773] veth1_vlan: left promiscuous mode [ 118.759782][ T5773] veth0_vlan: left promiscuous mode [ 118.848082][ T5773] team0 (unregistering): Port device team_slave_1 removed [ 118.856492][ T5773] team0 (unregistering): Port device team_slave_0 removed [ 118.908062][ T5434] 8021q: adding VLAN 0 to HW filter on device eth9 [ 118.995955][ T5434] 8021q: adding VLAN 0 to HW filter on device eth10 [ 119.078974][ T5434] 8021q: adding VLAN 0 to HW filter on device eth11 [ 119.164546][ T5434] 8021q: adding VLAN 0 to HW filter on device eth12 [ 119.234007][ T5773] IPVS: stop unused estimator thread 0... [ 119.288735][ T5434] 8021q: adding VLAN 0 to HW filter on device eth13 [ 119.304552][ T5773] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.413705][ T5773] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.492929][ T5773] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.573034][ T5773] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.638566][ T42] kauditd_printk_skb: 131 callbacks suppressed [ 119.638583][ T42] audit: type=1800 audit(2000000016.650:1757): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164747 res=0 errno=0 [ 119.650078][ T42] audit: type=1800 audit(2000000016.660:1758): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=164752 res=0 errno=0 [ 119.657792][ T42] audit: type=1800 audit(2000000016.660:1759): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=164756 res=0 errno=0 [ 119.666018][ T42] audit: type=1800 audit(2000000016.660:1760): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=164755 res=0 errno=0 [ 119.674482][ T42] audit: type=1800 audit(2000000016.660:1761): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=164758 res=0 errno=0 [ 119.682221][ T42] audit: type=1800 audit(2000000016.660:1762): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164833 res=0 errno=0 [ 119.688798][ T42] audit: type=1800 audit(2000000016.670:1763): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=164838 res=0 errno=0 [ 119.695550][ T42] audit: type=1800 audit(2000000016.670:1764): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=164842 res=0 errno=0 [ 119.696192][ T5773] bridge_slave_1: left allmulticast mode [ 119.703290][ T42] audit: type=1800 audit(2000000016.670:1765): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=164841 res=0 errno=0 [ 119.704890][ T5773] bridge_slave_1: left promiscuous mode [ 119.712310][ T42] audit: type=1800 audit(2000000016.670:1766): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=164844 res=0 errno=0 [ 119.715171][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.725479][ T5773] bridge_slave_0: left allmulticast mode [ 119.727294][ T5773] bridge_slave_0: left promiscuous mode [ 119.729121][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.758924][ T5773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.764176][ T5773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.768187][ T5773] bond0 (unregistering): Released all slaves [ 119.854421][ T5434] 8021q: adding VLAN 0 to HW filter on device eth14 [ 120.027733][ T5434] 8021q: adding VLAN 0 to HW filter on device eth15 [ 120.075953][ T5773] hsr_slave_0: left promiscuous mode [ 120.078028][ T5773] hsr_slave_1: left promiscuous mode [ 120.081416][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.083849][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.086413][ T5773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.088800][ T5773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.094069][ T5773] veth1_macvtap: left promiscuous mode [ 120.096426][ T5773] veth0_macvtap: left promiscuous mode [ 120.098198][ T5773] veth1_vlan: left promiscuous mode [ 120.101080][ T5773] veth0_vlan: left promiscuous mode [ 120.147992][ T5773] team0 (unregistering): Port device team_slave_1 removed [ 120.152212][ T5773] team0 (unregistering): Port device team_slave_0 removed [ 120.187441][ T5434] 8021q: adding VLAN 0 to HW filter on device eth16 [ 120.287875][ T5434] 8021q: adding VLAN 0 to HW filter on device eth17 [ 121.289930][ T34] net_ratelimit: 3 callbacks suppressed [ 121.289945][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.769803][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.330015][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.369791][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.419824][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.809936][ T3256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.449869][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.250051][ T5094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.499708][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.529841][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog