last executing test programs: 4.849652815s ago: executing program 1 (id=3396): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="baa000ec6666f20f3066b9f508000066b8536bac1766badac1fc4a0f300f01c83e660f4c8f5f866626660f7ffb653e0f0133660f38815e0d67260fc77801baf80c66b84cbf5a8666efbafc0c66ed", 0x4e}], 0x1, 0x49, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8c0) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x3d, 0x4088010, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4}, &(0x7f00000008c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d6d6435290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005419a81690ced2afb3b3671179dec10e8b6ec46acf736d6a6ee1dae1b129b3133ee3fd0d814b0f"], 0x0, 0x0) 4.829168853s ago: executing program 1 (id=3397): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) close(r1) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) 3.175263154s ago: executing program 1 (id=3413): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x80086603, 0x0) 3.170636926s ago: executing program 1 (id=3414): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000280)={0x4000000, 0x81, 0x40000000200000}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 3.062472147s ago: executing program 1 (id=3417): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 2.920733797s ago: executing program 3 (id=3419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x100000008, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.761218773s ago: executing program 3 (id=3420): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1e9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 2.761057435s ago: executing program 3 (id=3421): r0 = io_uring_setup(0x7a36, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x8, 0x7, 0x7}) close_range(r0, r0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x109001, 0x0) 1.060311013s ago: executing program 0 (id=3449): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 857.679149ms ago: executing program 0 (id=3452): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r1 = fanotify_init(0x4, 0x101000) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000}) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) 831.848963ms ago: executing program 0 (id=3454): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 721.276742ms ago: executing program 0 (id=3457): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000010000), 0x88202, 0x0) ioctl$FIONCLEX(r1, 0x5450) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) 649.134954ms ago: executing program 0 (id=3459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x4, 0x2004cb, 0x8, 0xa1d, 0xf1, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xd, 0x80, 0x0, 0xffff040e, 0x4, 0x68, 0x4, 0x7, 0x5, 0xa5, 0x4, 0x0, 0x4, 0x0, 0x7, 0x5e, 0x21, 0x5, '\x00', 0x2, 0xfffffffffffffe01}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0x0, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, 0x8, 0x0, 0x6, 0xfc}, {0xeeee8000, 0xffff1000, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x200000, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0xeeef0000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0xfc, 0xca, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0x0, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 482.652377ms ago: executing program 0 (id=3464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 239.074801ms ago: executing program 2 (id=3471): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) write$P9_RLERRORu(r2, 0x0, 0x13) dup3(r2, r0, 0x80000) 171.03619ms ago: executing program 2 (id=3472): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000070c0)={&(0x7f0000006200)={0x50, 0xffffffffffffffda, 0x9, {0x7, 0x2d, 0x1, 0x790a048, 0x1, 0x5, 0xfffffffa, 0x8, 0x0, 0x0, 0x100, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r2, 0x6700000000000000) 137.273554ms ago: executing program 2 (id=3473): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000002340)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 127.471839ms ago: executing program 3 (id=3474): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mount$afs(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1007c14, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 61.702502ms ago: executing program 2 (id=3475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 61.538207ms ago: executing program 2 (id=3476): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@delchain={0x24, 0x65, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0x10, 0xc}, {0x8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 61.38112ms ago: executing program 3 (id=3477): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x45, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 357.015µs ago: executing program 2 (id=3478): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 133.708µs ago: executing program 1 (id=3479): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) write$ppp(r2, &(0x7f0000000200)='\x00\x00', 0x2) 0s ago: executing program 3 (id=3480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) pipe2(&(0x7f0000000500)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000014)="0500010001000000", 0x8) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000600)='trigger_packet', 0xe, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): [ 124.921771][T10559] bond0: invalid ARP target specified [ 124.988749][T10564] binder: Unknown parameter 'measure' [ 125.106285][T10572] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 125.157090][ T1170] nvmet: Created nvm controller 96 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 125.158703][T10572] nvme nvme95: creating 4 I/O queues. [ 125.163319][T10572] nvme nvme95: new ctrl: "testnqn" [ 125.266593][T10582] __nla_validate_parse: 2 callbacks suppressed [ 125.266615][T10582] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1761'. [ 125.402670][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1766'. [ 125.568053][T10598] syzkaller0: entered promiscuous mode [ 125.568076][T10598] syzkaller0: entered allmulticast mode [ 125.569325][T10600] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 125.630142][ T46] nvmet: Created nvm controller 97 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 125.636024][T10600] nvme nvme96: creating 4 I/O queues. [ 125.648233][T10600] nvme nvme96: new ctrl: "testnqn" [ 125.687665][T10611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1774'. [ 125.771923][T10618] netlink: 'syz.2.1777': attribute type 1 has an invalid length. [ 125.796833][T10618] 8021q: adding VLAN 0 to HW filter on device bond8 [ 125.963672][T10633] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 126.127329][T10647] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 126.140888][T10647] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.199371][T10654] binder: Unknown parameter 'measure' [ 126.317140][T10662] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 126.418475][T10667] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1794'. [ 126.500621][T10671] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 126.500673][T10671] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 126.527440][T10673] netlink: 'syz.2.1797': attribute type 1 has an invalid length. [ 126.553166][T10678] binder: Unknown parameter 'measure' [ 126.589615][T10673] 8021q: adding VLAN 0 to HW filter on device bond9 [ 126.648544][T10688] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 126.661857][T10687] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 126.683448][ T105] nvmet: Created nvm controller 98 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 126.685961][T10688] nvme nvme97: creating 4 I/O queues. [ 126.697154][T10688] nvme nvme97: new ctrl: "testnqn" [ 126.843434][T10709] binder: Unknown parameter 'measure' [ 127.018027][ T6333] nvmet: Created nvm controller 99 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 127.019295][T10716] nvme nvme98: creating 4 I/O queues. [ 127.029878][T10716] nvme nvme98: new ctrl: "testnqn" [ 127.373179][ T6333] nvmet: Created nvm controller 100 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 127.379614][T10726] nvme nvme99: creating 4 I/O queues. [ 127.389061][T10726] nvme nvme99: new ctrl: "testnqn" [ 127.450025][T10729] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 127.889544][T10757] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 127.936211][ T6333] nvmet: Created nvm controller 101 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 127.937604][T10757] nvme nvme100: creating 4 I/O queues. [ 127.939142][T10760] binder: Unknown parameter 'measure' [ 127.945278][T10757] nvme nvme100: new ctrl: "testnqn" [ 128.296640][ T5741] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 128.456771][T10797] syzkaller0: entered promiscuous mode [ 128.456786][T10797] syzkaller0: entered allmulticast mode [ 128.596861][T10812] netlink: 'syz.2.1848': attribute type 1 has an invalid length. [ 128.610240][T10812] 8021q: adding VLAN 0 to HW filter on device bond10 [ 128.705260][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1852'. [ 128.705279][T10821] ksmbd: Unknown IPC event: 0, ignore. [ 129.308077][T10858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1862'. [ 129.431293][T10865] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 129.446614][T10868] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 129.463787][ T1170] nvmet: Created nvm controller 102 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 129.473663][T10868] 8021q: adding VLAN 0 to HW filter on device bond11 [ 129.480944][T10865] nvme nvme101: creating 4 I/O queues. [ 129.492566][T10865] nvme nvme101: new ctrl: "testnqn" [ 129.568036][T10875] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 129.616131][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1870'. [ 129.616144][T10880] ksmbd: Unknown IPC event: 0, ignore. [ 129.691463][ T43] audit: type=1400 audit(1789431679.721:511): avc: denied { append } for pid=10888 comm="syz.1.1877" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 129.728712][T10895] binder: Unknown parameter 'measure' [ 130.762293][T10932] binder: Unknown parameter 'measure' [ 131.079528][T10978] netlink: 'syz.0.1912': attribute type 9 has an invalid length. [ 131.142212][T10982] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 131.161200][T10982] nvme_fabrics: missing parameter 'nqn=%s' [ 131.229903][T10994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1920'. [ 131.257326][T10996] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 131.278455][ T1160] nvmet: Created nvm controller 103 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 131.279881][T10996] nvme nvme102: creating 4 I/O queues. [ 131.288545][T10996] nvme nvme102: new ctrl: "testnqn" [ 131.298449][T11004] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1923'. [ 131.701757][T11034] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 131.789240][ T6333] nvmet: Created nvm controller 104 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 131.790527][T11034] nvme nvme103: creating 4 I/O queues. [ 131.800581][T11034] nvme nvme103: new ctrl: "testnqn" [ 131.865956][ T43] audit: type=1400 audit(1789431681.901:512): avc: denied { getopt } for pid=11047 comm="syz.3.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.151043][T11058] netlink: 'syz.3.1940': attribute type 1 has an invalid length. [ 132.167169][T11058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.347792][T11067] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 132.371925][ T1162] nvmet: Created nvm controller 105 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 132.372812][T11067] nvme nvme104: creating 4 I/O queues. [ 132.384373][T11067] nvme nvme104: new ctrl: "testnqn" [ 132.576680][T11078] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1948'. [ 132.606759][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.606790][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.853564][T11111] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 132.878438][T11117] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 132.882331][ T1160] nvmet: Created nvm controller 106 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 132.885192][T11111] nvme nvme105: creating 4 I/O queues. [ 132.896035][T11111] nvme nvme105: new ctrl: "testnqn" [ 132.928311][ T1162] nvmet: Created nvm controller 107 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 132.930133][T11117] nvme nvme106: creating 4 I/O queues. [ 132.933928][T11123] binder: Unknown parameter 'measure' [ 132.943501][T11117] nvme nvme106: new ctrl: "testnqn" [ 132.981697][ T43] audit: type=1400 audit(1789431683.011:513): avc: denied { write } for pid=11125 comm="syz.0.1968" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.083297][T11137] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 133.128105][T11146] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1976'. [ 133.129280][ T6333] nvmet: connect request for invalid subsystem t! [ 133.129359][T11137] nvme nvme107: Connect Invalid Data Parameter, subsysnqn "t" [ 133.163571][T11149] syzkaller0: entered promiscuous mode [ 133.163584][T11149] syzkaller0: entered allmulticast mode [ 133.428186][T11170] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 133.453345][T11173] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 133.472306][T11173] 8021q: adding VLAN 0 to HW filter on device bond12 [ 133.479567][ T46] nvmet: Created nvm controller 108 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 133.491299][T11170] nvme nvme107: creating 4 I/O queues. [ 133.497065][T11170] nvme nvme107: new ctrl: "testnqn" [ 133.531257][T11176] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1989'. [ 133.561117][ T43] audit: type=1400 audit(1789431683.591:514): avc: denied { ioctl } for pid=11180 comm="syz.3.1990" path="socket:[58940]" dev="sockfs" ino=58940 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.593792][T11184] binder: Unknown parameter 'measure' [ 133.834241][ T43] audit: type=1400 audit(1789431683.861:515): avc: denied { write } for pid=11198 comm="syz.2.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.881115][T11204] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 133.918479][T11204] 8021q: adding VLAN 0 to HW filter on device bond13 [ 133.979749][T11209] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 134.007049][ T64] nvmet: connect request for invalid subsystem t! [ 134.007150][T11209] nvme nvme108: Connect Invalid Data Parameter, subsysnqn "t" [ 134.136114][T11155] FAULT_INJECTION: forcing a failure. [ 134.136114][T11155] name fail_futex, interval 1, probability 0, space 0, times 0 [ 134.136139][T11155] CPU: 3 UID: 0 PID: 11155 Comm: syz.0.1979 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.136155][T11155] Tainted: [L]=SOFTLOCKUP [ 134.136159][T11155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.136166][T11155] Call Trace: [ 134.136169][T11155] [ 134.136174][T11155] dump_stack_lvl+0x100/0x190 [ 134.136201][T11155] should_fail_ex.cold+0x5/0xa [ 134.136217][T11155] get_futex_key+0x293/0x14f0 [ 134.136233][T11155] ? __pfx_get_futex_key+0x10/0x10 [ 134.136248][T11155] ? __mutex_unlock_slowpath+0x35d/0x930 [ 134.136287][T11155] futex_wake+0xf4/0x5e0 [ 134.136308][T11155] ? __pfx_futex_wake+0x10/0x10 [ 134.136327][T11155] ? lock_acquire+0x1d1/0x380 [ 134.136339][T11155] ? detach_task_ctx_data+0x83/0x490 [ 134.136364][T11155] do_futex+0x2b2/0x440 [ 134.136380][T11155] ? __pfx_do_futex+0x10/0x10 [ 134.136393][T11155] ? __might_fault+0xc5/0x140 [ 134.136413][T11155] mm_exit_exec_release+0x256/0x2f0 [ 134.136430][T11155] do_exit+0x707/0x2ae0 [ 134.136443][T11155] ? lock_acquire+0x1d1/0x380 [ 134.136454][T11155] ? cgroup1_freezing+0x27/0x3b0 [ 134.136465][T11155] ? find_held_lock+0x2b/0x80 [ 134.136481][T11155] ? __pfx_do_exit+0x10/0x10 [ 134.136495][T11155] ? find_held_lock+0x2b/0x80 [ 134.136510][T11155] ? get_signal+0x7e0/0x21e0 [ 134.136523][T11155] do_group_exit+0xd5/0x2a0 [ 134.136539][T11155] get_signal+0x1ec7/0x21e0 [ 134.136558][T11155] ? lock_acquire+0x1d1/0x380 [ 134.136571][T11155] ? __pfx_get_signal+0x10/0x10 [ 134.136584][T11155] ? __pfx___fput_deferred+0x10/0x10 [ 134.136599][T11155] ? __pfx___file_ref_put+0x10/0x10 [ 134.136614][T11155] arch_do_signal_or_restart+0x91/0x7e0 [ 134.136631][T11155] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 134.136647][T11155] ? fput+0xdc/0x100 [ 134.136667][T11155] exit_to_user_mode_loop+0x139/0x700 [ 134.136681][T11155] ? rcu_is_watching+0x13/0xc0 [ 134.136697][T11155] do_syscall_64+0x661/0x790 [ 134.136713][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.136725][T11155] RIP: 0033:0x7f110499e159 [ 134.136735][T11155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.136745][T11155] RSP: 002b:00007f11058d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 134.136757][T11155] RAX: fffffffffffffe00 RBX: 00007f1104c25fa0 RCX: 00007f110499e159 [ 134.136764][T11155] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000007 [ 134.136770][T11155] RBP: 00007f1104a3503b R08: 0000000000000000 R09: 0000000000000000 [ 134.136776][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.136783][T11155] R13: 00007f1104c26038 R14: 00007f1104c25fa0 R15: 00007ffface2b4f8 [ 134.136797][T11155] [ 134.299094][T11233] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 134.302817][T11230] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 134.302836][T11230] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 134.316408][T11237] binder: Unknown parameter 'measure' [ 134.337292][T11239] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2013'. [ 134.342163][ T6333] nvmet: Created nvm controller 109 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 134.343162][T11233] nvme nvme108: creating 4 I/O queues. [ 134.356679][T11233] nvme nvme108: new ctrl: "testnqn" [ 134.611055][T11269] netlink: 'syz.2.2024': attribute type 1 has an invalid length. [ 134.640283][T11271] binder: Unknown parameter 'measure' [ 134.751204][T11281] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 134.785471][ T46] nvmet: Created nvm controller 110 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 134.788077][T11281] nvme nvme109: creating 4 I/O queues. [ 134.803522][T11281] nvme nvme109: new ctrl: "testnqn" [ 134.859794][T11291] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 134.886825][ T46] nvmet: connect request for invalid subsystem test! [ 134.886898][T11291] nvme nvme110: Connect Invalid Data Parameter, subsysnqn "test" [ 135.346008][T11315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2043'. [ 135.691709][T11326] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 135.727644][T11326] nvme_fabrics: missing parameter 'transport=%s' [ 135.727656][T11326] nvme_fabrics: missing parameter 'nqn=%s' [ 135.777185][T11331] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 135.813321][ T1160] nvmet: Created nvm controller 111 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 135.814214][T11331] nvme nvme110: creating 4 I/O queues. [ 135.820894][T11331] nvme nvme110: new ctrl: "testnqn" [ 136.530663][T11355] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2057'. [ 136.802127][ T5741] Bluetooth: hci1: connection err: -111 [ 136.843574][ T43] audit: type=1400 audit(1789431686.871:516): avc: denied { read write } for pid=11384 comm="syz.0.2068" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 136.845473][ T43] audit: type=1400 audit(1789431686.871:517): avc: denied { open } for pid=11384 comm="syz.0.2068" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 136.854498][ T43] audit: type=1400 audit(1789431686.881:518): avc: denied { ioctl } for pid=11384 comm="syz.0.2068" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 137.490512][T11470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2105'. [ 137.497017][T11471] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 137.523635][T11471] nvme_fabrics: missing parameter 'nqn=%s' [ 137.567125][T11480] capability: warning: `syz.2.2109' uses 32-bit capabilities (legacy support in use) [ 137.854163][ T1160] nvmet: Created nvm controller 112 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 137.855984][T11499] nvme nvme111: creating 4 I/O queues. [ 137.861371][T11499] nvme nvme111: new ctrl: "testnqn" [ 137.877686][T11505] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 137.903369][T11505] nvme_fabrics: missing parameter 'nqn=%s' [ 138.903187][T11520] FAULT_INJECTION: forcing a failure. [ 138.903187][T11520] name fail_futex, interval 1, probability 0, space 0, times 0 [ 138.903222][T11520] CPU: 1 UID: 0 PID: 11520 Comm: syz.0.2123 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.903248][T11520] Tainted: [L]=SOFTLOCKUP [ 138.903254][T11520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.903265][T11520] Call Trace: [ 138.903271][T11520] [ 138.903279][T11520] dump_stack_lvl+0x100/0x190 [ 138.903323][T11520] should_fail_ex.cold+0x5/0xa [ 138.903351][T11520] get_futex_key+0x293/0x14f0 [ 138.903379][T11520] ? __pfx_get_futex_key+0x10/0x10 [ 138.903403][T11520] ? __mutex_unlock_slowpath+0x35d/0x930 [ 138.903440][T11520] futex_wake+0xf4/0x5e0 [ 138.903471][T11520] ? __pfx_futex_wake+0x10/0x10 [ 138.903502][T11520] ? lock_acquire+0x1d1/0x380 [ 138.903522][T11520] ? detach_task_ctx_data+0x83/0x490 [ 138.903559][T11520] do_futex+0x2b2/0x440 [ 138.903582][T11520] ? __pfx_do_futex+0x10/0x10 [ 138.903606][T11520] ? __might_fault+0xc5/0x140 [ 138.903638][T11520] mm_exit_exec_release+0x256/0x2f0 [ 138.903662][T11520] do_exit+0x707/0x2ae0 [ 138.903684][T11520] ? lock_acquire+0x1d1/0x380 [ 138.903702][T11520] ? cgroup1_freezing+0x27/0x3b0 [ 138.903719][T11520] ? find_held_lock+0x2b/0x80 [ 138.903745][T11520] ? __pfx_do_exit+0x10/0x10 [ 138.903770][T11520] ? find_held_lock+0x2b/0x80 [ 138.903794][T11520] ? get_signal+0x7e0/0x21e0 [ 138.903817][T11520] do_group_exit+0xd5/0x2a0 [ 138.903843][T11520] get_signal+0x1ec7/0x21e0 [ 138.903866][T11520] ? lock_acquire+0x1d1/0x380 [ 138.903889][T11520] ? __pfx_get_signal+0x10/0x10 [ 138.903910][T11520] ? __pfx___fput_deferred+0x10/0x10 [ 138.903935][T11520] ? __pfx___file_ref_put+0x10/0x10 [ 138.903960][T11520] arch_do_signal_or_restart+0x91/0x7e0 [ 138.903989][T11520] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 138.904014][T11520] ? fput+0xdc/0x100 [ 138.904049][T11520] exit_to_user_mode_loop+0x139/0x700 [ 138.904071][T11520] ? rcu_is_watching+0x13/0xc0 [ 138.904105][T11520] do_syscall_64+0x661/0x790 [ 138.904132][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.904151][T11520] RIP: 0033:0x7f110499e159 [ 138.904166][T11520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.904183][T11520] RSP: 002b:00007f11058d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 138.904201][T11520] RAX: fffffffffffffe00 RBX: 00007f1104c25fa0 RCX: 00007f110499e159 [ 138.904213][T11520] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000007 [ 138.904225][T11520] RBP: 00007f1104a3503b R08: 0000000000000000 R09: 0000000000000000 [ 138.904235][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.904246][T11520] R13: 00007f1104c26038 R14: 00007f1104c25fa0 R15: 00007ffface2b4f8 [ 138.904272][T11520] [ 139.003479][T11566] netlink: 13080 bytes leftover after parsing attributes in process `syz.2.2141'. [ 139.003507][T11566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.036336][ T6333] nvmet: Created nvm controller 113 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 139.040437][T11564] nvme nvme112: creating 4 I/O queues. [ 139.051113][T11564] nvme nvme112: new ctrl: "testnqn" [ 139.755776][T11606] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 139.776940][ T6333] nvmet: connect request for invalid subsystem test! [ 139.777031][T11606] nvme nvme113: Connect Invalid Data Parameter, subsysnqn "test" [ 139.839786][T11609] dlm: no locking on control device [ 139.920568][T11615] binder: Unknown parameter 'measure' [ 139.938279][ T43] audit: type=1400 audit(1789431689.961:519): avc: denied { view } for pid=11616 comm="syz.1.2161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 139.939943][T11619] syzkaller0: entered promiscuous mode [ 139.939963][T11619] syzkaller0: entered allmulticast mode [ 139.983960][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 139.984011][T11622] IPv6: Can't replace route, no match found [ 140.579811][T11666] smbdirect: ib_dev[syz0] removed [ 140.629024][ T43] audit: type=1400 audit(1789431690.661:520): avc: denied { read } for pid=11671 comm="syz.3.2182" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 140.629210][ T43] audit: type=1400 audit(1789431690.661:521): avc: denied { open } for pid=11671 comm="syz.3.2182" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 140.631525][ T43] audit: type=1400 audit(1789431690.661:522): avc: denied { ioctl } for pid=11671 comm="syz.3.2182" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 140.631624][T11672] autofs4:pid:11672:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 140.710234][ T43] audit: type=1400 audit(1789431690.741:523): avc: denied { read } for pid=11678 comm="syz.3.2185" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 140.710515][ T43] audit: type=1400 audit(1789431690.741:524): avc: denied { open } for pid=11678 comm="syz.3.2185" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 140.712405][ T43] audit: type=1400 audit(1789431690.741:525): avc: denied { ioctl } for pid=11678 comm="syz.3.2185" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 141.116030][T11717] futex_wake_op: syz.1.2203 tries to shift op by 144; fix this program [ 141.116240][T11717] futex_wake_op: syz.1.2203 tries to shift op by 144; fix this program [ 141.133554][T11723] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 141.180836][T11727] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 141.228631][ T64] nvmet: Created nvm controller 114 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:c82cd596-288e-42e9-b822-2c58659c4786. [ 141.233257][T11727] nvme nvme113: creating 4 I/O queues. [ 141.271816][T11727] nvme nvme113: new ctrl: "testnqn" [ 141.303760][T11738] dlm: Unknown command passed to DLM device : 134 [ 141.303760][T11738] [ 141.471815][T11758] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 141.471870][T11758] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 141.777494][T11786] syzkaller0: entered promiscuous mode [ 141.777516][T11786] syzkaller0: entered allmulticast mode [ 141.980202][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 141.980214][ T43] audit: type=1400 audit(1789431692.011:527): avc: denied { wake_alarm } for pid=11804 comm="syz.3.2236" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.089555][T11818] nftables ruleset with unbound chain [ 142.335311][T11839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2251'. [ 142.335344][T11839] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 142.889979][T11878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2264'. [ 143.410913][T11900] futex_wake_op: syz.3.2271 tries to shift op by 144; fix this program [ 143.411001][T11900] futex_wake_op: syz.3.2271 tries to shift op by 144; fix this program [ 143.445072][T11906] syzkaller0: entered promiscuous mode [ 143.445086][T11906] syzkaller0: entered allmulticast mode [ 144.395613][ T43] audit: type=1400 audit(1789431694.431:528): avc: denied { read } for pid=11932 comm="syz.2.2284" path="socket:[66367]" dev="sockfs" ino=66367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.510780][T11945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2289'. [ 144.615958][T11957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.766456][T11975] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 144.962519][T11989] 8021q: adding VLAN 0 to HW filter on device bond6 [ 145.284045][T12001] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 145.319639][T12001] nvme_fabrics: missing parameter 'transport=%s' [ 145.319655][T12001] nvme_fabrics: missing parameter 'nqn=%s' [ 145.819809][T12031] 8021q: adding VLAN 0 to HW filter on device bond7 [ 146.323097][ T43] audit: type=1400 audit(1789431696.351:529): avc: denied { write } for pid=12075 comm="syz.1.2333" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 146.323410][ T43] audit: type=1400 audit(1789431696.351:530): avc: denied { open } for pid=12075 comm="syz.1.2333" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 146.768129][T12108] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 146.787364][T12108] nvme_fabrics: missing parameter 'transport=%s' [ 146.787381][T12108] nvme_fabrics: missing parameter 'nqn=%s' [ 146.896673][T12119] syzkaller0: entered promiscuous mode [ 146.896688][T12119] syzkaller0: entered allmulticast mode [ 146.898478][ T43] audit: type=1400 audit(1789431696.931:531): avc: denied { getopt } for pid=12120 comm="syz.3.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.941440][T12125] binder: Unknown parameter 'measure' [ 147.044258][T12130] 8021q: adding VLAN 0 to HW filter on device bond8 [ 147.482065][T12156] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 147.497563][T12159] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 147.500843][T12156] 8021q: adding VLAN 0 to HW filter on device bond14 [ 147.550793][T12165] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 147.583308][T12165] nvme_fabrics: missing parameter 'nqn=%s' [ 147.991189][T12197] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 148.020526][T12197] nvme_fabrics: missing parameter 'nqn=%s' [ 148.053116][T12200] syzkaller0: entered promiscuous mode [ 148.053128][T12200] syzkaller0: entered allmulticast mode [ 148.150171][ T43] audit: type=1400 audit(1789431698.181:532): avc: denied { getopt } for pid=12201 comm="syz.1.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.305747][T12208] binder: Unknown parameter 'measure' [ 148.361227][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'. [ 148.799534][T12236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.850077][T12231] kvm [12230]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 148.850281][T12231] kvm [12230]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x80 [ 148.867466][T12231] kvm [12230]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 148.867667][T12231] kvm [12230]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x80 [ 148.939691][ T5741] Bluetooth: hci0: unexpected event for opcode 0x200c [ 149.083831][T12256] netlink: 'syz.2.2410': attribute type 1 has an invalid length. [ 149.095694][T12256] 8021q: adding VLAN 0 to HW filter on device bond15 [ 149.191013][ T5741] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 149.394212][T12276] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 149.416841][ T6333] nvmet: connect request for invalid subsystem test! [ 149.416916][T12276] nvme nvme114: Connect Invalid Data Parameter, subsysnqn "test" [ 149.544415][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2413'. [ 149.630560][ T43] audit: type=1400 audit(1789431699.661:533): avc: denied { read } for pid=12288 comm="syz.0.2416" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 149.630609][ T43] audit: type=1400 audit(1789431699.661:534): avc: denied { open } for pid=12288 comm="syz.0.2416" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 149.632242][ T43] audit: type=1400 audit(1789431699.661:535): avc: denied { ioctl } for pid=12288 comm="syz.0.2416" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 149.788179][T12303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2421'. [ 149.849521][T12310] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 149.893251][ T1170] nvmet: connect request for invalid subsystem test! [ 149.893360][T12310] nvme nvme114: Connect Invalid Data Parameter, subsysnqn "test" [ 149.922373][T12325] openvswitch: netlink: IP tunnel dst address not specified [ 150.064723][T12337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2434'. [ 150.278101][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'. [ 150.282479][T12364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.363451][T12371] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 150.443624][ T6332] nvmet: connect request for invalid subsystem testnq! [ 150.444150][T12371] nvme nvme114: Connect Invalid Data Parameter, subsysnqn "testnq" [ 150.553093][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 150.556924][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.558247][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.562107][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.597532][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.599356][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.603131][T12392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.603151][T12392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.609005][T12392] veth1_vlan: left promiscuous mode [ 150.610052][T12392] veth0_vlan: left promiscuous mode [ 150.611570][T12392] veth0_vlan: entered promiscuous mode [ 150.613581][T12392] veth1_vlan: entered promiscuous mode [ 150.619107][T12392] veth1_macvtap: left promiscuous mode [ 150.621145][T12392] veth0_macvtap: left promiscuous mode [ 150.622157][T12392] veth0_macvtap: entered promiscuous mode [ 150.623184][T12392] veth1_macvtap: entered promiscuous mode [ 150.630109][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.631189][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.633153][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.637690][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.658325][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.658415][ T6333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.659155][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.659234][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.695887][ T5543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.695930][ T5543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.695960][ T5543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.695990][ T5543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.715892][ T43] audit: type=1400 audit(1789431700.751:536): avc: denied { getopt } for pid=12399 comm="syz.2.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.774979][ T43] audit: type=1400 audit(1789431700.801:537): avc: denied { write } for pid=12406 comm="syz.0.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.948879][T12430] openvswitch: netlink: IP tunnel dst address not specified [ 151.232527][T12447] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 151.232587][T12447] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 151.747858][ T43] audit: type=1400 audit(1789431701.781:538): avc: denied { setopt } for pid=12471 comm="syz.1.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.788618][T12474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2489'. [ 151.788633][T12474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2489'. [ 151.788640][T12474] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 151.797575][ T43] audit: type=1400 audit(1789431701.831:539): avc: denied { write } for pid=12475 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.276401][ T43] audit: type=1400 audit(1789431702.311:540): avc: denied { create } for pid=12521 comm="syz.3.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.276950][ T43] audit: type=1400 audit(1789431702.311:541): avc: denied { getopt } for pid=12521 comm="syz.3.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.370557][T12534] program syz.3.2516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.673044][T12481] FAULT_INJECTION: forcing a failure. [ 152.673044][T12481] name fail_futex, interval 1, probability 0, space 0, times 0 [ 152.673080][T12481] CPU: 3 UID: 0 PID: 12481 Comm: syz.1.2492 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.673107][T12481] Tainted: [L]=SOFTLOCKUP [ 152.673114][T12481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.673125][T12481] Call Trace: [ 152.673131][T12481] [ 152.673139][T12481] dump_stack_lvl+0x100/0x190 [ 152.673181][T12481] should_fail_ex.cold+0x5/0xa [ 152.673208][T12481] get_futex_key+0x293/0x14f0 [ 152.673236][T12481] ? __pfx_get_futex_key+0x10/0x10 [ 152.673262][T12481] ? __mutex_unlock_slowpath+0x35d/0x930 [ 152.673300][T12481] futex_wake+0xf4/0x5e0 [ 152.673330][T12481] ? __pfx_futex_wake+0x10/0x10 [ 152.673361][T12481] ? lock_acquire+0x1d1/0x380 [ 152.673381][T12481] ? detach_task_ctx_data+0x83/0x490 [ 152.673418][T12481] do_futex+0x2b2/0x440 [ 152.673452][T12481] ? __pfx_do_futex+0x10/0x10 [ 152.673474][T12481] ? __might_fault+0xc5/0x140 [ 152.673507][T12481] mm_exit_exec_release+0x256/0x2f0 [ 152.673548][T12481] do_exit+0x707/0x2ae0 [ 152.673571][T12481] ? lock_acquire+0x1d1/0x380 [ 152.673590][T12481] ? cgroup1_freezing+0x27/0x3b0 [ 152.673613][T12481] ? find_held_lock+0x2b/0x80 [ 152.673639][T12481] ? __pfx_do_exit+0x10/0x10 [ 152.673663][T12481] ? find_held_lock+0x2b/0x80 [ 152.673687][T12481] ? get_signal+0x7e0/0x21e0 [ 152.673710][T12481] do_group_exit+0xd5/0x2a0 [ 152.673732][T12481] get_signal+0x1ec7/0x21e0 [ 152.673755][T12481] ? lock_acquire+0x1d1/0x380 [ 152.673776][T12481] ? __pfx_get_signal+0x10/0x10 [ 152.673796][T12481] ? __pfx___fput_deferred+0x10/0x10 [ 152.673819][T12481] ? __pfx___file_ref_put+0x10/0x10 [ 152.673843][T12481] arch_do_signal_or_restart+0x91/0x7e0 [ 152.673872][T12481] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 152.673897][T12481] ? fput+0xdc/0x100 [ 152.673930][T12481] exit_to_user_mode_loop+0x139/0x700 [ 152.673952][T12481] ? rcu_is_watching+0x13/0xc0 [ 152.673978][T12481] do_syscall_64+0x661/0x790 [ 152.674006][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.674025][T12481] RIP: 0033:0x7f50e899e159 [ 152.674041][T12481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.674057][T12481] RSP: 002b:00007f50e987f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 152.674075][T12481] RAX: fffffffffffffe00 RBX: 00007f50e8c25fa0 RCX: 00007f50e899e159 [ 152.674087][T12481] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000007 [ 152.674097][T12481] RBP: 00007f50e8a3503b R08: 0000000000000000 R09: 0000000000000000 [ 152.674107][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.674117][T12481] R13: 00007f50e8c26038 R14: 00007f50e8c25fa0 R15: 00007ffeef5c4bb8 [ 152.674139][T12481] [ 152.763276][T12558] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 152.821889][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2529'. [ 152.972572][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 153.059586][T12588] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.095121][T12595] 9pnet_fd: Insufficient options for proto=fd [ 153.178521][T12602] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 153.484756][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 153.666560][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 153.668277][ T35] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 153.669230][ T35] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.669250][ T35] usb 6-1: config 0 has no interface number 0 [ 153.671302][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.671323][ T35] usb 6-1: Product: syz [ 153.671335][ T35] usb 6-1: Manufacturer: syz [ 153.671347][ T35] usb 6-1: SerialNumber: syz [ 153.675795][ T35] usb 6-1: config 0 descriptor?? [ 153.685772][ T35] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 153.685797][ T35] usb 6-1: selecting invalid altsetting 1 [ 153.685811][ T35] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 153.704373][ T35] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.705851][ T35] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 153.705895][ T35] usb 6-1: media controller created [ 153.732120][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.839806][T12642] __nla_validate_parse: 3 callbacks suppressed [ 153.839885][T12642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2560'. [ 153.922104][T12648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2563'. [ 154.010366][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2565'. [ 154.082796][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 154.082815][ T43] audit: type=1400 audit(1789431704.111:544): avc: denied { create } for pid=12657 comm="syz.3.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 154.084067][ T43] audit: type=1400 audit(1789431704.111:545): avc: denied { ioctl } for pid=12657 comm="syz.3.2567" path="socket:[73005]" dev="sockfs" ino=73005 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 154.137885][ T43] audit: type=1400 audit(1789431704.171:546): avc: denied { bind } for pid=12659 comm="syz.0.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.191642][T12665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2570'. [ 154.242181][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2572'. [ 154.409595][T12688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2581'. [ 154.500970][ T43] audit: type=1400 audit(1789431704.531:547): avc: denied { getopt } for pid=12698 comm="syz.0.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 154.543965][ T43] audit: type=1400 audit(1789431704.571:548): avc: denied { read write } for pid=12706 comm="syz.0.2586" name="mouse0" dev="devtmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 154.544364][ T43] audit: type=1400 audit(1789431704.571:549): avc: denied { open } for pid=12706 comm="syz.0.2586" path="/dev/input/mouse0" dev="devtmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 154.613351][T12719] atomic_op ffff88805c2e41e0 conn xmit_atomic 0000000000000000 [ 154.864012][ T35] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 154.867412][T12739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2599'. [ 154.871410][ T35] zl10353_read_register: readreg error (reg=127, ret==-110) [ 154.887603][T12606] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 154.926963][ T35] usb 6-1: USB disconnect, device number 2 [ 155.111441][T12767] nbd: couldn't find a device at index 18 [ 155.428497][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 155.444703][ T50] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.617549][ T50] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 155.618610][ T50] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.618648][ T50] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.620584][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.620604][ T50] usb 5-1: Product: syz [ 155.620616][ T50] usb 5-1: Manufacturer: syz [ 155.620630][ T50] usb 5-1: SerialNumber: syz [ 155.811639][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2637'. [ 155.811675][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2637'. [ 155.908732][T12762] FAULT_INJECTION: forcing a failure. [ 155.908732][T12762] name fail_futex, interval 1, probability 0, space 0, times 0 [ 155.908769][T12762] CPU: 2 UID: 0 PID: 12762 Comm: syz.3.2609 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.908795][T12762] Tainted: [L]=SOFTLOCKUP [ 155.908801][T12762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.908810][T12762] Call Trace: [ 155.908816][T12762] [ 155.908825][T12762] dump_stack_lvl+0x100/0x190 [ 155.908869][T12762] should_fail_ex.cold+0x5/0xa [ 155.908897][T12762] get_futex_key+0x293/0x14f0 [ 155.908924][T12762] ? __pfx_get_futex_key+0x10/0x10 [ 155.908949][T12762] ? __mutex_unlock_slowpath+0x35d/0x930 [ 155.908986][T12762] futex_wake+0xf4/0x5e0 [ 155.909016][T12762] ? __pfx_futex_wake+0x10/0x10 [ 155.909047][T12762] ? lock_acquire+0x1d1/0x380 [ 155.909067][T12762] ? detach_task_ctx_data+0x83/0x490 [ 155.909102][T12762] do_futex+0x2b2/0x440 [ 155.909126][T12762] ? __pfx_do_futex+0x10/0x10 [ 155.909148][T12762] ? __might_fault+0xc5/0x140 [ 155.909181][T12762] mm_exit_exec_release+0x256/0x2f0 [ 155.909205][T12762] do_exit+0x707/0x2ae0 [ 155.909226][T12762] ? lock_acquire+0x1d1/0x380 [ 155.909244][T12762] ? cgroup1_freezing+0x27/0x3b0 [ 155.909262][T12762] ? find_held_lock+0x2b/0x80 [ 155.909288][T12762] ? __pfx_do_exit+0x10/0x10 [ 155.909310][T12762] ? find_held_lock+0x2b/0x80 [ 155.909332][T12762] ? get_signal+0x7e0/0x21e0 [ 155.909352][T12762] do_group_exit+0xd5/0x2a0 [ 155.909377][T12762] get_signal+0x1ec7/0x21e0 [ 155.909399][T12762] ? lock_acquire+0x1d1/0x380 [ 155.909423][T12762] ? __pfx_get_signal+0x10/0x10 [ 155.909444][T12762] ? __pfx___fput_deferred+0x10/0x10 [ 155.909469][T12762] ? __pfx___file_ref_put+0x10/0x10 [ 155.909499][T12762] arch_do_signal_or_restart+0x91/0x7e0 [ 155.909526][T12762] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 155.909552][T12762] ? fput+0xdc/0x100 [ 155.909605][T12762] exit_to_user_mode_loop+0x139/0x700 [ 155.909628][T12762] ? rcu_is_watching+0x13/0xc0 [ 155.909655][T12762] do_syscall_64+0x661/0x790 [ 155.909682][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.909701][T12762] RIP: 0033:0x7ffaedf9e159 [ 155.909716][T12762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.909733][T12762] RSP: 002b:00007ffaeeda5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 155.909751][T12762] RAX: fffffffffffffe00 RBX: 00007ffaee225fa0 RCX: 00007ffaedf9e159 [ 155.909763][T12762] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000007 [ 155.909774][T12762] RBP: 00007ffaee03503b R08: 0000000000000000 R09: 0000000000000000 [ 155.909785][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.909796][T12762] R13: 00007ffaee226038 R14: 00007ffaee225fa0 R15: 00007ffd05419608 [ 155.909821][T12762] [ 156.033247][ T2594] usb 5-1: USB disconnect, device number 4 [ 156.285176][ T5741] Bluetooth: hci0: command 0x0406 tx timeout [ 156.309540][ T43] audit: type=1400 audit(1789431706.341:550): avc: denied { connect } for pid=12871 comm="syz.2.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.309951][ T43] audit: type=1400 audit(1789431706.341:551): avc: denied { shutdown } for pid=12871 comm="syz.2.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.696417][T12906] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 156.727881][T12906] 8021q: adding VLAN 0 to HW filter on device bond16 [ 156.903255][T12929] binder: Unknown parameter 'measure' [ 156.918046][T12931] netlink: 'syz.2.2685': attribute type 1 has an invalid length. [ 156.950791][T12931] 8021q: adding VLAN 0 to HW filter on device bond17 [ 157.148041][T12964] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 157.168966][T12964] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.180577][T12969] ip_tables: iptables: counters copy to user failed while replacing table [ 157.184718][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.231674][T12976] binder: Unknown parameter 'measure' [ 157.330204][ T43] audit: type=1400 audit(1789431707.361:552): avc: denied { mount } for pid=12984 comm="syz.1.2707" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 157.331401][ T43] audit: type=1400 audit(1789431707.361:553): avc: denied { mounton } for pid=12984 comm="syz.1.2707" path="/569/sec/tomoyo/query" dev="securityfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 157.331542][T12985] kAFS: Can only specify source 'none' with -o dyn [ 157.366426][ T25] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 157.369348][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 157.369369][ T25] usb 5-1: Product: syz [ 157.369386][ T25] usb 5-1: Manufacturer: syz [ 157.718094][T13018] binder: Unknown parameter 'measure' [ 157.817770][ T25] scsi host6: uas [ 157.972032][T13036] ublk_ctrl_add_dev: invalid recovery flags 210 [ 158.015086][ C2] usb 5-1: stat urb: status -71 [ 158.015291][ C2] usb 5-1: cmd cmplt err -71 [ 158.016438][ T25] usb 5-1: USB disconnect, device number 5 [ 158.027783][ T25] scsi 6:0:0:0: tag#28 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 158.027896][ T25] scsi 6:0:0:0: tag#28 CDB: Inquiry 12 00 00 00 24 00 [ 158.162054][T13057] netlink: 'syz.1.2739': attribute type 1 has an invalid length. [ 158.172736][T13057] 8021q: adding VLAN 0 to HW filter on device bond9 [ 158.343323][T13074] binder: Unknown parameter 'measure' [ 158.375139][ T5836] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 158.438952][T13083] netlink: 'syz.1.2750': attribute type 1 has an invalid length. [ 158.449155][T13083] 8021q: adding VLAN 0 to HW filter on device bond10 [ 158.524860][ T5836] usb 8-1: Using ep0 maxpacket: 16 [ 158.533401][ T5735] Bluetooth: hci2: Unknown advertising packet type: 0x73 [ 158.533421][ T5735] Bluetooth: hci2: Malformed LE Event: 0x0d [ 158.547515][ T5836] usb 8-1: unable to get BOS descriptor or descriptor too short [ 158.547540][ T5836] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 158.548171][ T5836] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 158.548187][ T5836] usb 8-1: can't read configurations, error -71 [ 158.706419][ T5878] e1000 0000:00:06.0 eth0: Reset adapter [ 158.814061][T13097] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 158.965040][ T5878] e1000 0000:00:06.0 eth0: Reset adapter [ 159.085964][ T5878] e1000 0000:00:06.0 eth0: Reset adapter [ 159.091497][T13117] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 159.100989][T13119] ip_tables: iptables: counters copy to user failed while replacing table [ 159.193675][T13117] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.263839][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 159.263851][ T43] audit: type=1400 audit(1789431709.291:563): avc: denied { write } for pid=13125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.299445][ T5829] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 159.320439][ T43] audit: type=1400 audit(1789431709.351:564): avc: denied { write } for pid=13133 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.407373][ T43] audit: type=1400 audit(1789431709.441:565): avc: denied { write } for pid=13135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.462592][ T43] audit: type=1400 audit(1789431709.491:566): avc: denied { write } for pid=13138 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.551557][ T43] audit: type=1400 audit(1789431709.581:567): avc: denied { write } for pid=13140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.607129][ T43] audit: type=1400 audit(1789431709.641:568): avc: denied { write } for pid=13143 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.680430][ T43] audit: type=1400 audit(1789431709.711:569): avc: denied { write } for pid=13145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.723127][ T43] audit: type=1400 audit(1789431709.751:570): avc: denied { write } for pid=13148 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.245683][ T5836] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 165.290514][ T43] audit: type=1400 audit(1789431715.321:571): avc: denied { write } for pid=13156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.329952][ T43] audit: type=1400 audit(1789431715.361:572): avc: denied { write } for pid=13159 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.684263][ T43] audit: type=1400 audit(1789431717.711:573): avc: denied { write } for pid=13161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.732102][ T43] audit: type=1400 audit(1789431717.761:574): avc: denied { write } for pid=13164 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.167872][T13199] Bluetooth: hci4: Frame reassembly failed (-84) [ 169.770939][T13223] netlink: 'syz.0.2789': attribute type 4 has an invalid length. [ 170.149923][ T43] audit: type=1400 audit(1789431976.172:575): avc: denied { mount } for pid=13240 comm="syz.2.2796" name="/" dev="hugetlbfs" ino=75377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 170.216439][T13247] netlink: 'syz.3.2799': attribute type 3 has an invalid length. [ 170.216456][T13247] __nla_validate_parse: 11 callbacks suppressed [ 170.216464][T13247] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2799'. [ 170.460148][ T43] audit: type=1400 audit(1789431976.482:576): avc: denied { write } for pid=13266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.521235][ T43] audit: type=1400 audit(1789431976.542:577): avc: denied { write } for pid=13271 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.180819][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 171.316652][ T43] audit: type=1400 audit(1789431977.342:578): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 171.639124][T13322] netlink: 'syz.1.2829': attribute type 4 has an invalid length. [ 171.639139][T13322] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2829'. [ 171.642434][T13322] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2829'. [ 171.698494][ T43] audit: type=1400 audit(1789431977.722:579): avc: denied { connect } for pid=13328 comm="syz.0.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.715247][ T5741] Bluetooth: hci0: adv larger than maximum supported [ 171.715266][ T5741] Bluetooth: hci0: Malformed LE Event: 0x0d [ 172.123133][ T43] audit: type=1400 audit(1789431978.142:580): avc: denied { ioctl } for pid=13367 comm="syz.0.2851" path="socket:[72584]" dev="sockfs" ino=72584 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.545203][ T43] audit: type=1400 audit(1789431978.572:581): avc: denied { append } for pid=13406 comm="syz.1.2868" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.576119][T13410] ªªªªªª: renamed from vlan0 (while UP) [ 172.815431][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'. [ 173.131860][ T43] audit: type=1400 audit(1789431979.152:582): avc: denied { mount } for pid=13440 comm="syz.1.2880" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 173.134011][ T43] audit: type=1400 audit(1789431979.152:583): avc: denied { search } for pid=13440 comm="syz.1.2880" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 173.134565][ T43] audit: type=1400 audit(1789431979.152:584): avc: denied { read } for pid=13440 comm="syz.1.2880" name="trace_pipe" dev="tracefs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 173.134591][ T43] audit: type=1400 audit(1789431979.162:585): avc: denied { open } for pid=13440 comm="syz.1.2880" path="/616/mnt/trace_pipe" dev="tracefs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 173.436332][ T6333] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.436384][ T6333] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.436428][ T6333] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.436458][ T6333] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.436495][ T6333] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.437924][T13456] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 174.265953][T13470] »»»»»»: renamed from vlan0 (while UP) [ 174.452327][T13486] fuse: Bad value for 'fd' [ 174.562005][T13495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2907'. [ 175.486005][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 175.486559][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 175.542964][T13516] capability: warning: `syz.2.2917' uses deprecated v2 capabilities in a way that may be insecure [ 175.644153][ T5741] Bluetooth: hci0: command 0x0406 tx timeout [ 175.644184][ T5741] Bluetooth: hci1: command 0x0406 tx timeout [ 175.811199][T13542] pim6reg1: entered promiscuous mode [ 175.811212][T13542] pim6reg1: entered allmulticast mode [ 175.864850][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 175.864866][ T43] audit: type=1400 audit(1789431981.892:587): avc: denied { block_suspend } for pid=13547 comm="syz.1.2932" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.928080][T13552] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.988998][T13561] input: syz1 as /devices/virtual/input/input36 [ 176.034604][T13564] ip_vti0: Master is either lo or non-ether device [ 176.057273][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 176.105148][T13570] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.307859][ T43] audit: type=1400 audit(1789431982.333:588): avc: denied { ioctl } for pid=13592 comm="syz.1.2954" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 176.561764][T13612] pim6reg1: entered promiscuous mode [ 176.561818][T13612] pim6reg1: entered allmulticast mode [ 176.987750][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2973'. [ 176.991171][T13641] ip_vti0: entered promiscuous mode [ 176.991188][T13641] ip_vti0: entered allmulticast mode [ 177.086071][T13648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.457765][ T43] audit: type=1400 audit(1789431983.483:589): avc: denied { bind } for pid=13682 comm="syz.2.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.457999][ T43] audit: type=1400 audit(1789431983.483:590): avc: denied { listen } for pid=13682 comm="syz.2.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.583215][T13697] kAFS: No cell specified [ 177.623253][T13701] jffs2: notice: (13701) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 177.634150][ T43] audit: type=1400 audit(1789431983.653:591): avc: denied { write } for pid=13700 comm="syz.0.2999" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.634359][ T43] audit: type=1400 audit(1789431983.663:592): avc: denied { create } for pid=13700 comm="syz.0.2999" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 177.766424][T13709] device-mapper: ioctl: Invalid ioctl structure: name m, dev f802 [ 178.653655][ T5836] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 178.824599][ T5836] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 178.825516][ T5836] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 178.825542][ T5836] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 178.826954][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 178.826973][ T5836] usb 8-1: Product: syz [ 178.826985][ T5836] usb 8-1: Manufacturer: syz [ 178.963629][ T5878] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 179.035248][T13738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.035358][T13738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.042975][ T5836] dvb_ttusb_budget: ttusb_init_controller: error [ 179.042986][ T5836] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 179.067840][ T5836] DVB: Unable to find symbol cx22700_attach() [ 179.084934][ T5836] DVB: Unable to find symbol tda10046_attach() [ 179.084946][ T5836] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 179.115877][ T5878] usb 5-1: not running at top speed; connect to a high speed hub [ 179.115897][ T5878] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 179.116642][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.118120][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.118132][ T5878] usb 5-1: Product: syz [ 179.118140][ T5878] usb 5-1: Manufacturer: syz [ 179.118147][ T5878] usb 5-1: SerialNumber: syz [ 179.121774][ T5878] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 179.121906][ T5878] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 179.121936][ T5878] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 179.127953][ T5878] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 179.132197][ T5878] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 179.137380][ T5878] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 179.138120][ T5878] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 179.138995][ T5878] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 179.142368][ T5878] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 179.143615][ T5878] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 179.144656][ T5878] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 179.294333][T13764] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 179.298434][T13764] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 179.347986][ T2029] usb 8-1: USB disconnect, device number 4 [ 179.351982][ T43] audit: type=1400 audit(1789431985.373:593): avc: denied { mmap_zero } for pid=13768 comm="syz.2.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 179.455722][ T5829] usb 5-1: USB disconnect, device number 6 [ 179.474645][ T5829] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 179.479293][ T5829] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 179.486779][ T5829] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 179.491912][ T5829] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 179.493860][ T5829] keyspan 5-1:1.0: device disconnected [ 180.135193][ T5829] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 180.284505][ T6333] IPVS: starting estimator thread 0... [ 180.295056][ T5829] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 180.296066][ T5829] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.296080][ T5829] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 180.297814][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.297829][ T5829] usb 8-1: Product: syz [ 180.297837][ T5829] usb 8-1: Manufacturer: syz [ 180.297844][ T5829] usb 8-1: SerialNumber: syz [ 180.317701][ T43] audit: type=1400 audit(1789431986.343:594): avc: denied { bind } for pid=13796 comm="syz.2.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.319751][ T43] audit: type=1400 audit(1789431986.343:595): avc: denied { map } for pid=13796 comm="syz.2.3035" path="socket:[79012]" dev="sockfs" ino=79012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.319878][ T43] audit: type=1400 audit(1789431986.343:596): avc: denied { read } for pid=13796 comm="syz.2.3035" path="socket:[79012]" dev="sockfs" ino=79012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.373712][T13795] IPVS: using max 43 ests per chain, 103200 per kthread [ 180.511183][ T5829] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 180.853367][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 181.013308][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 181.013924][ T25] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 181.015100][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 181.015125][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.015157][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.055549][ T25] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 181.078128][ T25] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 181.083732][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 181.083748][ T43] audit: type=1400 audit(1789431987.103:603): avc: denied { create } for pid=13851 comm="syz.0.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 181.107165][T13852] use of bytesused == 0 is deprecated and will be removed in the future, [ 181.107180][T13852] use the actual size instead. [ 181.403426][ T5829] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.503014][T13861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.506584][T13861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.527142][ T25] usb 8-1: USB disconnect, device number 5 [ 181.534539][ T25] usblp0: removed [ 181.556343][ T5829] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.557491][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.557536][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.565422][ T5829] usb 5-1: config 0 descriptor?? [ 181.772905][ T5829] usbhid 5-1:0.0: can't add hid device: -71 [ 181.772967][ T5829] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 181.774126][ T5829] usb 5-1: USB disconnect, device number 7 [ 182.017173][ T50] usb 6-1: USB disconnect, device number 3 [ 182.068984][ T50] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 182.069430][ T50] kobil_sct 6-1:1.0: device disconnected [ 182.181995][T13878] syzkaller1: entered promiscuous mode [ 182.182016][T13878] syzkaller1: entered allmulticast mode [ 182.224026][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 182.393164][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 182.393909][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 182.394974][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.395011][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.397321][ T25] usb 5-1: config 0 descriptor?? [ 182.404165][ T25] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 182.423713][ T25] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 182.713163][ T58] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 182.860247][ T25] usb 5-1: USB disconnect, device number 8 [ 182.864330][ T58] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 182.865817][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.865855][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.866850][ T25] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 182.916657][ T58] as10x_usb: device has been detected [ 182.922075][ T58] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 182.935649][ T58] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 182.971728][ T43] audit: type=1400 audit(1789431988.993:604): avc: denied { firmware_load } for pid=58 comm="kworker/1:1" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 182.972460][ T58] as10x_usb: error during firmware upload part1 [ 182.972889][ T58] Registered device Abilis Systems DVB-Titan [ 183.021013][T13907] netlink: 'syz.2.3077': attribute type 10 has an invalid length. [ 183.021996][ T43] audit: type=1400 audit(1789431989.043:605): avc: denied { shutdown } for pid=13908 comm="syz.1.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.028084][T13907] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 183.313637][ T2594] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 183.360147][ T5732] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 183.421584][T13920] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 183.463804][ T2594] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 183.464907][ T2594] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 183.464940][ T2594] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 183.464961][ T2594] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.464979][ T2594] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 183.464997][ T2594] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 183.466647][ T2594] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 183.466678][ T2594] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 183.466720][ T2594] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.466738][ T2594] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 183.466755][ T2594] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 183.467704][ T2594] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 183.467725][ T2594] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 183.467737][ T2594] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.467749][ T2594] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 183.467762][ T2594] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 183.470328][ T2594] usb 6-1: string descriptor 0 read error: -22 [ 183.470386][ T2594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.516792][ T2594] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 183.698382][ T6249] usb 6-1: USB disconnect, device number 4 [ 184.004497][T13947] fuse: fd is not a fuse device [ 184.041977][ T43] audit: type=1400 audit(1789431990.063:606): avc: denied { mount } for pid=13949 comm="syz.0.3095" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 184.054933][ T43] audit: type=1400 audit(1789431990.083:607): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 184.134606][ T43] audit: type=1400 audit(1789431990.163:608): avc: denied { read append } for pid=13958 comm="syz.0.3100" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 184.135506][ T43] audit: type=1400 audit(1789431990.163:609): avc: denied { open } for pid=13958 comm="syz.0.3100" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 184.229359][T13960] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 184.229713][T13960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.229745][T13960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 184.242889][T13960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 184.243123][T13960] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 184.251832][T13960] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 184.515695][ T43] audit: type=1400 audit(1789431990.544:610): avc: denied { map } for pid=13974 comm="syz.1.3106" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.676271][ T43] audit: type=1400 audit(1789431990.704:611): avc: denied { read write } for pid=13985 comm="syz.1.3109" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 184.676557][ T43] audit: type=1400 audit(1789431990.704:612): avc: denied { open } for pid=13985 comm="syz.1.3109" path="/651/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 184.741400][ T58] usb 8-1: USB disconnect, device number 6 [ 184.784540][ T58] Unregistered device Abilis Systems DVB-Titan [ 184.786120][ T58] as10x_usb: device has been disconnected [ 185.146781][T14005] FAULT_INJECTION: forcing a failure. [ 185.146781][T14005] name failslab, interval 1, probability 0, space 0, times 0 [ 185.146814][T14005] CPU: 3 UID: 0 PID: 14005 Comm: syz.0.3118 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.146841][T14005] Tainted: [L]=SOFTLOCKUP [ 185.146848][T14005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.146857][T14005] Call Trace: [ 185.146864][T14005] [ 185.146872][T14005] dump_stack_lvl+0x100/0x190 [ 185.146903][T14005] should_fail_ex.cold+0x5/0xa [ 185.146929][T14005] should_failslab+0xc2/0x120 [ 185.146955][T14005] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 185.146977][T14005] ? __d_alloc+0x35/0xa50 [ 185.147004][T14005] __d_alloc+0x35/0xa50 [ 185.147028][T14005] ? get_random_u64+0xe8/0x7c0 [ 185.147062][T14005] d_alloc_pseudo+0x1c/0xc0 [ 185.147079][T14005] alloc_file_pseudo+0x118/0x290 [ 185.147106][T14005] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 185.147151][T14005] __anon_inode_getfile+0xe8/0x280 [ 185.147175][T14005] do_seccomp+0xd78/0x27c0 [ 185.147208][T14005] ? __pfx_do_seccomp+0x10/0x10 [ 185.147233][T14005] ? __sys_socket+0xac/0x260 [ 185.147261][T14005] ? fput+0x7c/0x100 [ 185.147282][T14005] ? __pfx___x64_sys_futex+0x10/0x10 [ 185.147307][T14005] ? ksys_write+0x1ac/0x250 [ 185.147327][T14005] ? __pfx_ksys_write+0x10/0x10 [ 185.147358][T14005] do_syscall_64+0x123/0x790 [ 185.147385][T14005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.147406][T14005] RIP: 0033:0x7f110499e159 [ 185.147423][T14005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.147442][T14005] RSP: 002b:00007f11058d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 185.147462][T14005] RAX: ffffffffffffffda RBX: 00007f1104c25fa0 RCX: 00007f110499e159 [ 185.147473][T14005] RDX: 0000200000000580 RSI: 0000000000000008 RDI: 0000000000000001 [ 185.147486][T14005] RBP: 00007f1104a3503b R08: 0000000000000000 R09: 0000000000000000 [ 185.147496][T14005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.147506][T14005] R13: 00007f1104c26038 R14: 00007f1104c25fa0 R15: 00007ffface2b4f8 [ 185.147530][T14005] [ 185.194208][T14008] FAULT_INJECTION: forcing a failure. [ 185.194208][T14008] name failslab, interval 1, probability 0, space 0, times 0 [ 185.194243][T14008] CPU: 2 UID: 0 PID: 14008 Comm: syz.0.3119 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.194272][T14008] Tainted: [L]=SOFTLOCKUP [ 185.194281][T14008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.194294][T14008] Call Trace: [ 185.194302][T14008] [ 185.194311][T14008] dump_stack_lvl+0x100/0x190 [ 185.194344][T14008] should_fail_ex.cold+0x5/0xa [ 185.194374][T14008] should_failslab+0xc2/0x120 [ 185.194400][T14008] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 185.194425][T14008] ? trace_kmem_cache_alloc+0xdd/0x100 [ 185.194448][T14008] ? cond_bools_copy+0x45/0xf0 [ 185.194481][T14008] kmemdup_noprof+0x29/0x60 [ 185.194512][T14008] cond_bools_copy+0x45/0xf0 [ 185.194540][T14008] hashtab_duplicate+0x24a/0x5c0 [ 185.194563][T14008] ? __pfx_cond_bools_copy+0x10/0x10 [ 185.194594][T14008] ? __pfx_cond_bools_destroy+0x10/0x10 [ 185.194626][T14008] cond_policydb_dup+0x155/0x750 [ 185.194655][T14008] ? security_set_bools+0x115/0x6c0 [ 185.194707][T14008] ? __asan_memcpy+0x3c/0x60 [ 185.194731][T14008] security_set_bools+0x13f/0x6c0 [ 185.194769][T14008] sel_commit_bools_write+0x36d/0x420 [ 185.194804][T14008] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 185.194844][T14008] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 185.194883][T14008] vfs_writev+0x5ed/0xdd0 [ 185.194911][T14008] ? __pfx_vfs_writev+0x10/0x10 [ 185.194940][T14008] ? lock_acquire+0x1d1/0x380 [ 185.194962][T14008] ? __fget_files+0x34/0x3d0 [ 185.195001][T14008] ? __fget_files+0x21f/0x3d0 [ 185.195033][T14008] ? do_writev+0x13e/0x340 [ 185.195052][T14008] do_writev+0x13e/0x340 [ 185.195072][T14008] ? __pfx_do_writev+0x10/0x10 [ 185.195098][T14008] do_syscall_64+0x123/0x790 [ 185.195128][T14008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.195151][T14008] RIP: 0033:0x7f110499e159 [ 185.195169][T14008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.195189][T14008] RSP: 002b:00007f11058d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 185.195209][T14008] RAX: ffffffffffffffda RBX: 00007f1104c25fa0 RCX: 00007f110499e159 [ 185.195222][T14008] RDX: 0000000000000001 RSI: 0000200000003600 RDI: 0000000000000004 [ 185.195235][T14008] RBP: 00007f1104a3503b R08: 0000000000000000 R09: 0000000000000000 [ 185.195247][T14008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.195258][T14008] R13: 00007f1104c26038 R14: 00007f1104c25fa0 R15: 00007ffface2b4f8 [ 185.195286][T14008] [ 185.391768][T14020] pim6reg1: entered promiscuous mode [ 185.391792][T14020] pim6reg1: entered allmulticast mode [ 185.502861][ T2594] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.653568][ T2594] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.654669][ T2594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.654713][ T2594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.654736][ T2594] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.654770][ T2594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.656792][ T2594] usb 5-1: config 0 descriptor?? [ 185.772764][ T5878] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 185.923437][ T5878] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 185.924345][ T5878] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.924380][ T5878] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 185.924401][ T5878] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 185.924434][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.071168][ T2594] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 186.071198][ T2594] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 186.071212][ T2594] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 186.071224][ T2594] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 186.071237][ T2594] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 186.071249][ T2594] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 186.071262][ T2594] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 186.071274][ T2594] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 186.071286][ T2594] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 186.071299][ T2594] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 186.095973][ T2594] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 186.130662][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88803a12dc00: rx timeout, send abort [ 186.133993][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 186.134062][ T43] audit: type=1400 audit(1789431992.164:617): avc: denied { read } for pid=5121 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 186.134294][ T43] audit: type=1400 audit(1789431992.164:618): avc: denied { search } for pid=5121 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.134699][ T43] audit: type=1400 audit(1789431992.164:619): avc: denied { write search } for pid=5121 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.134837][ T43] audit: type=1400 audit(1789431992.164:620): avc: denied { add_name } for pid=5121 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.135015][ T43] audit: type=1400 audit(1789431992.164:621): avc: denied { create } for pid=5121 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.135410][ T43] audit: type=1400 audit(1789431992.164:622): avc: denied { append open } for pid=5121 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.135686][ T43] audit: type=1400 audit(1789431992.164:623): avc: denied { getattr } for pid=5121 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.282875][ T5732] Bluetooth: hci2: command 0x0405 tx timeout [ 186.282941][ T5732] Bluetooth: hci0: command 0x0406 tx timeout [ 186.282963][ T5735] Bluetooth: hci1: command 0x0406 tx timeout [ 186.339837][ T58] usb 5-1: USB disconnect, device number 9 [ 186.349120][ T5878] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 186.349284][ T5878] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 186.349297][ T5878] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 186.411303][ T5878] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 186.418557][ T5878] usb 8-1: USB disconnect, device number 7 [ 186.632542][ C2] vxcan1: j1939_tp_rxtimer: 0xffff88803a12dc00: abort rx timeout. Force session deactivation [ 186.942070][T14047] X25: received unknown 00 with LCI 000 [ 186.956663][ T6249] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 187.113361][ T6249] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 187.114346][ T6249] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 187.114384][ T6249] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 187.114405][ T6249] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.114425][ T6249] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 187.114445][ T6249] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 187.115722][ T6249] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 187.115767][ T6249] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 187.115788][ T6249] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.115809][ T6249] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 187.115829][ T6249] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 187.117635][ T6249] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 187.117673][ T6249] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 187.117693][ T6249] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.117712][ T6249] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 187.117732][ T6249] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 187.120339][ T6249] usb 6-1: string descriptor 0 read error: -22 [ 187.120433][ T6249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.145061][ T6249] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 187.345161][T14070] netlink: 'syz.0.3142': attribute type 1 has an invalid length. [ 187.360695][ T6249] usb 6-1: USB disconnect, device number 5 [ 187.386998][T14070] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.465048][T14079] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 187.584641][T14041] adutux: No device or device unplugged -19 [ 188.354046][T14087] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 188.364769][ T5735] Bluetooth: hci2: command 0x0405 tx timeout [ 188.372375][ T5735] Bluetooth: hci1: command 0x0406 tx timeout [ 188.400571][T14098] netlink: 'syz.1.3153': attribute type 1 has an invalid length. [ 188.424454][T14098] 8021q: adding VLAN 0 to HW filter on device bond11 [ 188.715409][T14125] netlink: 'syz.2.3164': attribute type 1 has an invalid length. [ 188.734639][T14125] 8021q: adding VLAN 0 to HW filter on device bond18 [ 188.771566][T14128] netlink: 'syz.2.3165': attribute type 1 has an invalid length. [ 188.788890][T14128] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 188.869087][ T43] audit: type=1400 audit(1789431994.894:624): avc: denied { mount } for pid=14130 comm="syz.2.3166" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 188.970582][T14143] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 188.986051][T14145] binder: 14144:14145 ioctl c0306201 2000000004c0 returned -22 [ 189.026615][ T43] audit: type=1400 audit(1789431995.054:625): avc: denied { append } for pid=14147 comm="syz.1.3174" name="loop8" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.042437][T14143] 8021q: adding VLAN 0 to HW filter on device bond19 [ 189.297716][T14165] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.430463][T14176] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 189.447856][T14176] 8021q: adding VLAN 0 to HW filter on device bond20 [ 189.812212][ T850] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 189.890438][T14202] netlink: 'syz.2.3194': attribute type 1 has an invalid length. [ 189.902052][T14202] 8021q: adding VLAN 0 to HW filter on device bond21 [ 189.972605][ T850] usb 5-1: Using ep0 maxpacket: 8 [ 189.974750][ T850] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.975662][ T850] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 189.975679][ T850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 189.975691][ T850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.975702][ T850] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.975721][ T850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.006314][T14213] jffs2: notice: (14213) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 190.143924][T14225] comedi comedi2: comedi_test: 320 microvolt, 4 microsecond waveform attached [ 190.144533][T14225] FAULT_INJECTION: forcing a failure. [ 190.144533][T14225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.144621][T14225] CPU: 3 UID: 0 PID: 14225 Comm: syz.1.3201 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.144651][T14225] Tainted: [L]=SOFTLOCKUP [ 190.144658][T14225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.144670][T14225] Call Trace: [ 190.144677][T14225] [ 190.144685][T14225] dump_stack_lvl+0x100/0x190 [ 190.144743][T14225] should_fail_ex.cold+0x5/0xa [ 190.144769][T14225] ? prepare_alloc_pages+0x16d/0x5b0 [ 190.144802][T14225] should_fail_alloc_page+0xeb/0x140 [ 190.144828][T14225] prepare_alloc_pages+0x1f0/0x5b0 [ 190.144858][T14225] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 190.144897][T14225] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 190.144925][T14225] ? __vmap_pages_range_noflush+0x3db/0x660 [ 190.144949][T14225] ? is_vmalloc_addr+0x86/0xa0 [ 190.144980][T14225] ? is_vmalloc_or_module_addr+0x47/0x60 [ 190.145011][T14225] ? kasan_unpoison+0x27/0x60 [ 190.145031][T14225] ? __kasan_unpoison_vmalloc+0x22/0x30 [ 190.145052][T14225] ? __vmalloc_node_range_noprof+0xfb6/0x1420 [ 190.145088][T14225] ? comedi_buf_alloc+0x2fe/0xa00 [ 190.145121][T14225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.145146][T14225] ? policy_nodemask+0xed/0x4f0 [ 190.145174][T14225] alloc_pages_mpol+0x201/0x550 [ 190.145201][T14225] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 190.145240][T14225] alloc_pages_noprof+0x1a/0x160 [ 190.145270][T14225] get_zeroed_page_noprof+0x18/0xb0 [ 190.145295][T14225] comedi_buf_alloc+0x648/0xa00 [ 190.145348][T14225] comedi_device_postconfig+0x3dc/0xbc0 [ 190.145378][T14225] ? waveform_common_attach+0xad/0xaa0 [ 190.145407][T14225] comedi_device_attach+0x42a/0x6b0 [ 190.145443][T14225] do_devconfig_ioctl+0x1b3/0x6d0 [ 190.145468][T14225] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 190.145503][T14225] ? kasan_quarantine_put+0x104/0x240 [ 190.145529][T14225] ? find_held_lock+0x2b/0x80 [ 190.145564][T14225] comedi_unlocked_ioctl+0x860/0x3310 [ 190.145590][T14225] ? tomoyo_path_number_perm+0x188/0x580 [ 190.145616][T14225] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 190.145647][T14225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.145671][T14225] ? do_vfs_ioctl+0x226/0x13e0 [ 190.145692][T14225] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 190.145710][T14225] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 190.145736][T14225] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 190.145763][T14225] ? __fget_files+0x34/0x3d0 [ 190.145798][T14225] ? selinux_file_ioctl+0x13b/0x290 [ 190.145819][T14225] ? selinux_file_ioctl+0xb6/0x290 [ 190.145842][T14225] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 190.145869][T14225] __x64_sys_ioctl+0x18e/0x210 [ 190.145891][T14225] do_syscall_64+0x123/0x790 [ 190.145928][T14225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.145948][T14225] RIP: 0033:0x7f50e899e159 [ 190.145966][T14225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.145986][T14225] RSP: 002b:00007f50e987f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.146006][T14225] RAX: ffffffffffffffda RBX: 00007f50e8c25fa0 RCX: 00007f50e899e159 [ 190.146020][T14225] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 190.146033][T14225] RBP: 00007f50e8a3503b R08: 0000000000000000 R09: 0000000000000000 [ 190.146044][T14225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.146056][T14225] R13: 00007f50e8c26038 R14: 00007f50e8c25fa0 R15: 00007ffeef5c4bb8 [ 190.146083][T14225] [ 190.146527][T14225] comedi comedi2: Buffer allocation failed [ 190.152827][T14227] overlayfs: failed to clone upperpath [ 190.179748][ T850] usb 5-1: GET_CAPABILITIES returned 0 [ 190.179788][ T850] usbtmc 5-1:16.0: can't read capabilities [ 190.207734][T14229] netlink: 'syz.1.3203': attribute type 1 has an invalid length. [ 190.237862][T14229] 8021q: adding VLAN 0 to HW filter on device bond12 [ 190.383574][T14242] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.400623][ C3] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 190.401976][ T850] usb 5-1: USB disconnect, device number 10 [ 190.452180][ T5735] Bluetooth: hci2: command 0x0405 tx timeout [ 190.492196][ T30] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 190.629846][T14262] netlink: 'syz.2.3214': attribute type 1 has an invalid length. [ 190.647726][ T30] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 190.648864][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.648899][ T30] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 190.648919][ T30] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.648935][ T30] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 190.656550][T14262] 8021q: adding VLAN 0 to HW filter on device bond22 [ 190.688287][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.688312][ T30] usb 8-1: Product: syz [ 190.688325][ T30] usb 8-1: Manufacturer: syz [ 190.688338][ T30] usb 8-1: SerialNumber: syz [ 190.692383][T14234] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 190.701248][ T30] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 190.701382][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 87 [ 190.701410][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 190.707231][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82 [ 190.707269][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 190.707299][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 190.707328][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 85 [ 190.707358][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 5 [ 190.709163][ T30] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 190.709846][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 83 [ 190.709880][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 190.709915][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 190.709945][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4 [ 190.709975][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 86 [ 190.710005][ T30] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 190.711677][ T30] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 190.831635][T14268] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.900072][ T30] usb 8-1: USB disconnect, device number 8 [ 190.906314][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 190.909966][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 190.910302][ T30] keyspan 8-1:1.0: device disconnected [ 191.295503][T14281] syz_tun: entered allmulticast mode [ 191.298418][T14280] syz_tun: left allmulticast mode [ 191.380778][T14287] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 191.413947][T14287] 8021q: adding VLAN 0 to HW filter on device bond23 [ 191.486797][T14296] fuse: fd is not a fuse device [ 191.715866][T14313] netlink: 'syz.1.3235': attribute type 1 has an invalid length. [ 191.752155][T14313] 8021q: adding VLAN 0 to HW filter on device bond13 [ 191.764418][T14316] xt_hashlimit: size too large, truncated to 1048576 [ 192.112935][T14337] 8021q: adding VLAN 0 to HW filter on device bond14 [ 192.287485][T14353] fuse: fd is not a fuse device [ 192.466385][T14363] 8021q: adding VLAN 0 to HW filter on device bond24 [ 193.280736][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 193.280748][ T43] audit: type=1400 audit(1789431999.305:633): avc: denied { write } for pid=14389 comm="syz.0.3265" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 193.529698][ T43] audit: type=1400 audit(1789431999.555:634): avc: denied { module_request } for pid=14407 comm="syz.2.3274" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 193.575660][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804769b800: rx timeout, send abort [ 193.612703][ T30] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 193.788783][ T30] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.789577][ T30] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.789592][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.789602][ T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.789622][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50675, setting to 1024 [ 193.790784][ T30] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.790797][ T30] usb 6-1: Product: syz [ 193.790804][ T30] usb 6-1: Manufacturer: syz [ 193.797752][T14398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.801094][ T30] cdc_wdm 6-1:1.0: skipping garbage [ 193.801111][ T30] cdc_wdm 6-1:1.0: skipping garbage [ 193.803484][ T30] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 193.803500][ T30] cdc_wdm 6-1:1.0: Unknown control protocol [ 194.032348][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 194.032461][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 194.033454][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 194.033473][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 194.033701][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 194.033717][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 194.033946][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 194.033962][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 194.034174][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 194.034190][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 194.034401][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 194.034417][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 194.034627][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 194.034663][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 194.034865][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 194.034881][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 194.035074][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 194.035089][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 194.035280][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 194.035295][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 194.052008][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.052040][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.056210][ T5829] usb 6-1: USB disconnect, device number 6 [ 194.075086][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055ec5400: rx timeout, send abort [ 194.078070][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804769b800: abort rx timeout. Force session deactivation [ 194.575115][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888055ec5400: abort rx timeout. Force session deactivation [ 194.881641][ T5829] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 194.939729][T14423] overlayfs: upper fs does not support file handles, falling back to index=off. [ 195.042716][ T5829] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.043553][ T5829] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.043566][ T5829] usb 6-1: config 0 has no interfaces? [ 195.044732][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.044744][ T5829] usb 6-1: Product: syz [ 195.044751][ T5829] usb 6-1: Manufacturer: syz [ 195.047532][ T5829] usb 6-1: config 0 descriptor?? [ 195.255271][ T5878] usb 6-1: USB disconnect, device number 7 [ 195.435247][ T43] audit: type=1400 audit(1789432001.465:635): avc: denied { bpf } for pid=14442 comm="syz.3.3287" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.435620][ T43] audit: type=1400 audit(1789432001.465:636): avc: denied { perfmon } for pid=14442 comm="syz.3.3287" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.671336][T14452] validate_nla: 2 callbacks suppressed [ 195.671348][T14452] netlink: 'syz.3.3291': attribute type 1 has an invalid length. [ 195.687299][T14452] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.707082][T14452] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 195.708331][T14452] netlink: 'syz.3.3291': attribute type 10 has an invalid length. [ 195.708358][T14452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3291'. [ 195.708456][T14452] dummy0: entered promiscuous mode [ 195.710337][T14452] bond6: (slave dummy0): Releasing backup interface [ 195.808243][T14459] netlink: 'syz.1.3295': attribute type 1 has an invalid length. [ 195.832633][T14459] 8021q: adding VLAN 0 to HW filter on device bond15 [ 195.881152][ T5735] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 195.881194][ T5735] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 195.887029][ T43] audit: type=1326 audit(1789432001.915:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.1.3299" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e899e159 code=0x0 [ 195.944724][T14475] jffs2: notice: (14475) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 195.946954][ T43] audit: type=1400 audit(1789432001.975:638): avc: denied { remount } for pid=14474 comm="syz.0.3301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 196.136480][T14491] batman_adv: batadv0: Adding interface: syzkaller0 [ 196.136497][T14491] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.138714][T14491] batman_adv: batadv0: Interface activated: syzkaller0 [ 196.381589][ T25] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 196.533485][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 196.533581][ T25] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 196.534548][ T25] usb 8-1: config 8 has an invalid interface number: 109 but max is 0 [ 196.534569][ T25] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 196.534586][ T25] usb 8-1: config 8 has no interface number 0 [ 196.534641][ T25] usb 8-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 196.534666][ T25] usb 8-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 196.534687][ T25] usb 8-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 196.537261][ T25] usb 8-1: string descriptor 0 read error: -22 [ 196.537436][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.540514][T14493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.542710][ T25] metro_usb 8-1:8.109: Metrologic USB to Serial converter detected [ 196.545050][ T25] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 196.745054][ T43] audit: type=1400 audit(1789432002.775:639): avc: denied { read } for pid=14492 comm="syz.3.3308" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 196.745242][ T43] audit: type=1400 audit(1789432002.775:640): avc: denied { open } for pid=14492 comm="syz.3.3308" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 196.748451][ T43] audit: type=1400 audit(1789432002.775:641): avc: denied { map } for pid=14492 comm="syz.3.3308" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 196.834593][ T43] audit: type=1800 audit(1789432002.865:642): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3318" name="nullb0" dev="tmpfs" ino=6258 res=0 errno=0 [ 196.899670][ T850] usb 8-1: USB disconnect, device number 9 [ 196.920770][ T850] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 196.921125][ T850] metro_usb 8-1:8.109: device disconnected [ 197.053240][T14537] netlink: 'syz.2.3325': attribute type 10 has an invalid length. [ 197.053261][T14537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3325'. [ 197.056115][T14537] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 197.056394][T14537] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 197.207455][T14544] fuse: fd is not a fuse device [ 198.132228][T14560] fuse: fd is not a fuse device [ 198.253775][T14567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.425942][T14504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.488233][T14587] overlayfs: failed to clone upperpath [ 199.597667][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 199.597687][ T43] audit: type=1400 audit(1789432005.625:645): avc: denied { read write } for pid=14592 comm="syz.0.3347" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 199.597921][ T43] audit: type=1400 audit(1789432005.625:646): avc: denied { open } for pid=14592 comm="syz.0.3347" path="/756/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 199.599675][ T43] audit: type=1400 audit(1789432005.625:647): avc: denied { ioctl } for pid=14592 comm="syz.0.3347" path="/756/file0/file0" dev="fuse" ino=67 ioctlcmd=0x542e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 199.709655][ T43] audit: type=1400 audit(1789432005.735:648): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 199.811440][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3358'. [ 199.950229][T14628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14628 comm=syz.3.3363 [ 199.953138][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3363'. [ 200.039132][ T43] audit: type=1400 audit(1789432006.065:649): avc: denied { read } for pid=14633 comm="syz.1.3366" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 200.039308][ T43] audit: type=1400 audit(1789432006.065:650): avc: denied { open } for pid=14633 comm="syz.1.3366" path="" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 200.053351][ T43] audit: type=1400 audit(1789432006.085:651): avc: denied { ioctl } for pid=14633 comm="syz.1.3366" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 200.163429][ T5735] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 200.163522][ T5735] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 200.196141][T14641] ftl_cs: FTL header not found. [ 200.236706][T14641] block2mtd: mtd2: [/dev/ram0] erase_size = 64KiB [65536] [ 200.298378][T14659] input: syz0 as /devices/virtual/input/input37 [ 200.389340][ T43] audit: type=1400 audit(1789432006.415:652): avc: denied { write } for pid=14662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.477869][ T43] audit: type=1400 audit(1789432006.505:653): avc: denied { write } for pid=14669 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.486155][T14671] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 200.593835][ T43] audit: type=1400 audit(1789432006.625:654): avc: denied { write } for pid=14677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.868696][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3385'. [ 201.660867][ T5836] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.836269][ T5836] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.837217][ T5836] usb 5-1: config index 0 descriptor too short (expected 8251, got 59) [ 201.837237][ T5836] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.837267][ T5836] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 201.838176][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.838193][ T5836] usb 5-1: SerialNumber: syz [ 201.846371][ T5836] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 202.086452][T14732] kvm: Disabled LAPIC found during irq injection [ 202.164686][ T850] usb 5-1: USB disconnect, device number 11 [ 202.330782][ T5829] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 202.450748][ T30] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 202.450748][ T5735] Bluetooth: hci0: command 0x0406 tx timeout [ 202.450767][ T30] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 202.491054][ T5829] usb 6-1: Using ep0 maxpacket: 32 [ 202.492334][ T5829] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 202.493379][ T5829] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 202.493412][ T5829] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 202.493433][ T5829] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.493453][ T5829] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 202.495706][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.495724][ T5829] usb 6-1: Product: syz [ 202.495736][ T5829] usb 6-1: Manufacturer: syz [ 202.495747][ T5829] usb 6-1: SerialNumber: syz [ 202.510222][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 202.520527][ T5829] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input38 [ 202.720669][ T5829] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 202.720688][ T5829] (id 0x00) [ 202.770659][ T5829] rc_core: IR keymap rc-imon-pad not found [ 202.770675][ T5829] Registered IR keymap rc-empty [ 202.770742][ T5829] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 202.770756][ T5829] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 202.934132][ T5829] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 202.936355][ T5829] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input39 [ 202.948118][ T5829] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:8> initialized [ 203.164655][T14746] imon:send_packet: task interrupted [ 203.164752][T14746] imon:send_packet: packet tx failed (-512) [ 203.165519][T14746] imon:vfd_write: send packet #0 failed [ 203.169885][ T25] usb 6-1: USB disconnect, device number 8 [ 203.809133][T14798] jffs2: notice: (14798) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 203.936088][T14804] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 203.988799][T14806] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.082719][ T50] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 204.101752][T14809] FAULT_INJECTION: forcing a failure. [ 204.101752][T14809] name failslab, interval 1, probability 0, space 0, times 0 [ 204.101786][T14809] CPU: 3 UID: 0 PID: 14809 Comm: syz.3.3420 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.101814][T14809] Tainted: [L]=SOFTLOCKUP [ 204.101821][T14809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.101831][T14809] Call Trace: [ 204.101838][T14809] [ 204.101846][T14809] dump_stack_lvl+0x100/0x190 [ 204.101877][T14809] should_fail_ex.cold+0x5/0xa [ 204.101905][T14809] should_failslab+0xc2/0x120 [ 204.101930][T14809] __kmalloc_cache_noprof+0x91/0x6d0 [ 204.101960][T14809] ? __sk_attach_prog+0x46/0x280 [ 204.101993][T14809] __sk_attach_prog+0x46/0x280 [ 204.102023][T14809] sk_attach_filter+0x47/0x150 [ 204.102051][T14809] sk_setsockopt+0x3a9b/0x5d80 [ 204.102080][T14809] ? __pfx_sk_setsockopt+0x10/0x10 [ 204.102106][T14809] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 204.102131][T14809] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 204.102160][T14809] ? find_held_lock+0x2b/0x80 [ 204.102192][T14809] ? selinux_socket_setsockopt+0x6a/0x80 [ 204.102233][T14809] do_sock_setsockopt+0x193/0x1d0 [ 204.102267][T14809] __sys_setsockopt+0x195/0x220 [ 204.102298][T14809] __x64_sys_setsockopt+0xbd/0x160 [ 204.102321][T14809] ? do_syscall_64+0xae/0x790 [ 204.102349][T14809] ? lockdep_hardirqs_on+0x7d/0x110 [ 204.102375][T14809] do_syscall_64+0x123/0x790 [ 204.102403][T14809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.102424][T14809] RIP: 0033:0x7ffaedf9e159 [ 204.102442][T14809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.102462][T14809] RSP: 002b:00007ffaeeda5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.102482][T14809] RAX: ffffffffffffffda RBX: 00007ffaee225fa0 RCX: 00007ffaedf9e159 [ 204.102496][T14809] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 204.102507][T14809] RBP: 00007ffaee03503b R08: 0000000000000010 R09: 0000000000000000 [ 204.102520][T14809] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.102533][T14809] R13: 00007ffaee226038 R14: 00007ffaee225fa0 R15: 00007ffd05419608 [ 204.102559][T14809] [ 204.231306][ T50] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 204.232423][ T50] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 204.232441][ T50] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 204.232465][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.237169][ T50] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 204.239114][ T50] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 204.394238][T14824] netlink: 'syz.2.3426': attribute type 1 has an invalid length. [ 204.400507][ T5829] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 204.405892][T14824] 8021q: adding VLAN 0 to HW filter on device bond25 [ 204.520594][ T5735] Bluetooth: hci1: command 0x0406 tx timeout [ 204.522802][ T30] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 204.522818][ T30] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 204.551100][ T5829] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.552040][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.552061][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.552076][ T5829] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.552101][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.560590][ T5829] usb 8-1: config 0 descriptor?? [ 204.601746][T14801] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 204.602448][T14801] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 204.602926][T14801] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 204.693198][T14801] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 204.696494][T14801] SPCP8x5 ttyUSB0: Set UART format 0x3700 failed (error = -32) [ 204.771883][T14851] netlink: 'syz.2.3435': attribute type 1 has an invalid length. [ 204.802000][T14851] 8021q: adding VLAN 0 to HW filter on device bond26 [ 204.824428][T14854] netlink: 'syz.0.3436': attribute type 1 has an invalid length. [ 204.982130][ T5829] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 205.765032][T14881] netlink: 'syz.0.3445': attribute type 1 has an invalid length. [ 205.781546][T14881] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.204342][T14913] FAULT_INJECTION: forcing a failure. [ 206.204342][T14913] name failslab, interval 1, probability 0, space 0, times 0 [ 206.204373][T14913] CPU: 1 UID: 0 PID: 14913 Comm: syz.0.3457 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.204399][T14913] Tainted: [L]=SOFTLOCKUP [ 206.204407][T14913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.204418][T14913] Call Trace: [ 206.204425][T14913] [ 206.204432][T14913] dump_stack_lvl+0x100/0x190 [ 206.204474][T14913] should_fail_ex.cold+0x5/0xa [ 206.204499][T14913] should_failslab+0xc2/0x120 [ 206.204527][T14913] __kmalloc_cache_noprof+0x91/0x6d0 [ 206.204555][T14913] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 206.204581][T14913] ? snd_seq_timer_new+0x44/0x1a0 [ 206.204608][T14913] snd_seq_timer_new+0x44/0x1a0 [ 206.204627][T14913] snd_seq_queue_alloc+0x177/0x540 [ 206.204657][T14913] snd_seq_ioctl_create_queue+0xa9/0x370 [ 206.204678][T14913] call_seq_client_ctl+0xa3/0x130 [ 206.204707][T14913] snd_seq_kernel_client_ctl+0x35/0x50 [ 206.204731][T14913] alloc_seq_queue+0xdb/0x180 [ 206.204755][T14913] ? __pfx_alloc_seq_queue+0x10/0x10 [ 206.204791][T14913] ? find_held_lock+0x2b/0x80 [ 206.204820][T14913] ? mark_held_locks+0x40/0x70 [ 206.204844][T14913] snd_seq_oss_open+0x2b2/0xa10 [ 206.204872][T14913] odev_open+0x6f/0x90 [ 206.204893][T14913] ? __pfx_odev_open+0x10/0x10 [ 206.204915][T14913] soundcore_open+0x2e3/0x5a0 [ 206.204941][T14913] ? __pfx_soundcore_open+0x10/0x10 [ 206.204964][T14913] chrdev_open+0x234/0x6a0 [ 206.204988][T14913] ? __pfx_chrdev_open+0x10/0x10 [ 206.205013][T14913] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 206.205047][T14913] do_dentry_open+0x6ab/0x14d0 [ 206.205067][T14913] ? __pfx_chrdev_open+0x10/0x10 [ 206.205095][T14913] vfs_open+0x82/0x3f0 [ 206.205124][T14913] path_openat+0x19fa/0x2440 [ 206.205152][T14913] ? __pfx_path_openat+0x10/0x10 [ 206.205183][T14913] do_file_open+0x20e/0x430 [ 206.205208][T14913] ? __pfx_do_file_open+0x10/0x10 [ 206.205251][T14913] ? _raw_spin_unlock+0x28/0x50 [ 206.205279][T14913] ? alloc_fd+0x471/0x7a0 [ 206.205311][T14913] do_sys_openat2+0x10f/0x1e0 [ 206.205338][T14913] ? __pfx_do_sys_openat2+0x10/0x10 [ 206.205374][T14913] __x64_sys_openat+0x12d/0x210 [ 206.205399][T14913] ? __pfx___x64_sys_openat+0x10/0x10 [ 206.205435][T14913] do_syscall_64+0x123/0x790 [ 206.205464][T14913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.205483][T14913] RIP: 0033:0x7f110499e159 [ 206.205499][T14913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.205517][T14913] RSP: 002b:00007f11058d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 206.205536][T14913] RAX: ffffffffffffffda RBX: 00007f1104c25fa0 RCX: 00007f110499e159 [ 206.205547][T14913] RDX: 0000000000060042 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 206.205558][T14913] RBP: 00007f1104a3503b R08: 0000000000000000 R09: 0000000000000000 [ 206.205569][T14913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.205580][T14913] R13: 00007f1104c26038 R14: 00007f1104c25fa0 R15: 00007ffface2b4f8 [ 206.205604][T14913] [ 206.265970][T14917] netlink: 'syz.2.3460': attribute type 10 has an invalid length. [ 206.275018][T14917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.276378][T14917] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 206.302169][T14919] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 206.507710][T14934] fuse: fd is not a fuse device [ 206.601724][ T5735] Bluetooth: hci2: command 0x0405 tx timeout [ 206.601831][ T30] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 206.601847][ T30] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 206.603094][ T30] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 206.657800][T14942] fuse: fd is not a fuse device [ 206.703213][T14944] fuse: fd is not a fuse device [ 206.773361][T14800] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 206.776387][ T2594] usb 6-1: USB disconnect, device number 9 [ 206.789588][ T2594] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 206.789925][ T2594] spcp8x5 6-1:1.0: device disconnected [ 206.802284][T14948] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.854839][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 206.854851][ T43] audit: type=1400 audit(1789432012.886:670): avc: denied { set_context_mgr } for pid=14953 comm="syz.3.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 206.862458][T14954] binder: 14953:14954 ioctl c0306201 200000000640 returned -22 [ 206.941561][T14927] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.3464/14927 [ 206.941584][T14927] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 206.941625][T14927] CPU: 0 UID: 0 PID: 14927 Comm: syz.0.3464 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.941666][T14927] Tainted: [L]=SOFTLOCKUP [ 206.941674][T14927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.941684][T14927] Call Trace: [ 206.941691][T14927] [ 206.941698][T14927] dump_stack_lvl+0x100/0x190 [ 206.941728][T14927] check_preemption_disabled+0xd2/0xe0 [ 206.941757][T14927] ? sk_stream_kill_queues+0x115/0x390 [ 206.941775][T14927] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 206.941801][T14927] ? kfree+0x1e5/0x6d0 [ 206.941827][T14927] ? sk_stream_kill_queues+0x115/0x390 [ 206.941846][T14927] trace_kfree_skb+0x18b/0x230 [ 206.941874][T14927] sk_skb_reason_drop+0xb7/0x1b0 [ 206.941899][T14927] sk_stream_kill_queues+0x115/0x390 [ 206.941921][T14927] inet_csk_destroy_sock+0x1aa/0x3d0 [ 206.941946][T14927] tcp_done+0x257/0x360 [ 206.941965][T14927] tcp_rcv_state_process+0x259e/0x7190 [ 206.941994][T14927] ? sk_reset_timer+0x35/0xd0 [ 206.942015][T14927] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 206.942039][T14927] ? tcp_write_xmit+0x18cb/0x8470 [ 206.942064][T14927] ? lock_acquire+0x1d1/0x380 [ 206.942089][T14927] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 206.942116][T14927] ? tcp_v4_do_rcv+0x691/0x1260 [ 206.942141][T14927] tcp_v4_do_rcv+0x691/0x1260 [ 206.942169][T14927] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 206.942195][T14927] __release_sock+0x35a/0x440 [ 206.942223][T14927] __tcp_close+0x572/0x10d0 [ 206.942241][T14927] ? __local_bh_enable_ip+0xa5/0x120 [ 206.942262][T14927] ? __pfx_tcp_close+0x10/0x10 [ 206.942278][T14927] tcp_close+0x28/0x110 [ 206.942296][T14927] sock_map_close+0x18b/0x400 [ 206.942317][T14927] inet_release+0xed/0x200 [ 206.942341][T14927] __sock_release+0xb3/0x260 [ 206.942362][T14927] ? __pfx_sock_close+0x10/0x10 [ 206.942383][T14927] sock_close+0x1c/0x30 [ 206.942403][T14927] __fput+0x3ff/0xb50 [ 206.942432][T14927] task_work_run+0x150/0x240 [ 206.942460][T14927] ? __pfx_task_work_run+0x10/0x10 [ 206.942494][T14927] exit_to_user_mode_loop+0x1d8/0x700 [ 206.942516][T14927] ? rcu_is_watching+0x13/0xc0 [ 206.942540][T14927] do_syscall_64+0x661/0x790 [ 206.942567][T14927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.942617][T14927] RIP: 0033:0x7f110499e159 [ 206.942635][T14927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.942653][T14927] RSP: 002b:00007ffface2b658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 206.942673][T14927] RAX: 0000000000000000 RBX: 00007f1104c27da0 RCX: 00007f110499e159 [ 206.942684][T14927] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 206.942695][T14927] RBP: 00007f1104c27da0 R08: 00007f1104c26038 R09: 0000000000000000 [ 206.942706][T14927] R10: 00000000003ffd38 R11: 0000000000000246 R12: 000000000003292a [ 206.942716][T14927] R13: 00007f1104c25fac R14: 0000000000032628 R15: 00007ffface2b760 [ 206.942741][T14927] [ 207.088597][ T25] usb 8-1: USB disconnect, device number 10 [ 207.131342][T14956] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.3478/14956 [ 207.131359][T14956] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.131384][T14956] CPU: 1 UID: 0 PID: 14956 Comm: syz.2.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.131399][T14956] Tainted: [L]=SOFTLOCKUP [ 207.131403][T14956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.131410][T14956] Call Trace: [ 207.131413][T14956] [ 207.131418][T14956] dump_stack_lvl+0x100/0x190 [ 207.131436][T14956] check_preemption_disabled+0xd2/0xe0 [ 207.131454][T14956] ? bpf_prog_test_run_skb+0x12c5/0x3530 [ 207.131465][T14956] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.131481][T14956] ? bpf_ctx_finish.isra.0+0x151/0x1c0 [ 207.131498][T14956] ? bpf_prog_test_run_skb+0x12c5/0x3530 [ 207.131510][T14956] trace_kfree_skb+0x18b/0x230 [ 207.131527][T14956] sk_skb_reason_drop+0xb7/0x1b0 [ 207.131542][T14956] bpf_prog_test_run_skb+0x12c5/0x3530 [ 207.131555][T14956] ? lock_acquire+0x1d1/0x380 [ 207.131572][T14956] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 207.131585][T14956] ? fput+0x7c/0x100 [ 207.131600][T14956] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 207.131612][T14956] __sys_bpf+0x2265/0x4a30 [ 207.131627][T14956] ? __pfx___sys_bpf+0x10/0x10 [ 207.131637][T14956] ? find_held_lock+0x2b/0x80 [ 207.131651][T14956] ? futex_wake+0x4ea/0x5e0 [ 207.131676][T14956] ? percpu_counter_add_batch+0xb9/0x230 [ 207.131698][T14956] ? __x64_sys_futex+0x34f/0x4d0 [ 207.131712][T14956] ? __x64_sys_futex+0x358/0x4d0 [ 207.131728][T14956] ? xfd_validate_state+0x129/0x190 [ 207.131743][T14956] ? __x64_sys_bpf+0xce/0x140 [ 207.131753][T14956] __x64_sys_bpf+0xce/0x140 [ 207.131764][T14956] ? do_syscall_64+0xae/0x790 [ 207.131780][T14956] do_syscall_64+0x123/0x790 [ 207.131795][T14956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.131807][T14956] RIP: 0033:0x7f71e6b9e159 [ 207.131817][T14956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.131828][T14956] RSP: 002b:00007f71e799c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.131839][T14956] RAX: ffffffffffffffda RBX: 00007f71e6e25fa0 RCX: 00007f71e6b9e159 [ 207.131846][T14956] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 207.131853][T14956] RBP: 00007f71e6c3503b R08: 0000000000000000 R09: 0000000000000000 [ 207.131859][T14956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.131866][T14956] R13: 00007f71e6e26038 R14: 00007f71e6e25fa0 R15: 00007ffc711adda8 [ 207.131878][T14956] [ 207.158704][T14955] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.3478/14955 [ 207.158719][T14955] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.158744][T14955] CPU: 3 UID: 0 PID: 14955 Comm: syz.2.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.158758][T14955] Tainted: [L]=SOFTLOCKUP [ 207.158762][T14955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.158769][T14955] Call Trace: [ 207.158772][T14955] [ 207.158777][T14955] dump_stack_lvl+0x100/0x190 [ 207.158806][T14955] check_preemption_disabled+0xd2/0xe0 [ 207.158826][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.158841][T14955] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.158858][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.158873][T14955] trace_kfree_skb+0x18b/0x230 [ 207.158889][T14955] sk_skb_reason_drop+0xb7/0x1b0 [ 207.158904][T14955] skb_queue_purge_reason+0x2aa/0x420 [ 207.158918][T14955] ? synchronize_rcu_expedited+0x3c3/0x450 [ 207.158932][T14955] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 207.158954][T14955] packet_release+0x839/0xd70 [ 207.158970][T14955] ? __pfx_packet_release+0x10/0x10 [ 207.158983][T14955] ? __pfx_down_write+0x10/0x10 [ 207.159002][T14955] __sock_release+0xb3/0x260 [ 207.159016][T14955] ? __pfx_sock_close+0x10/0x10 [ 207.159029][T14955] sock_close+0x1c/0x30 [ 207.159042][T14955] __fput+0x3ff/0xb50 [ 207.159059][T14955] task_work_run+0x150/0x240 [ 207.159076][T14955] ? __pfx_task_work_run+0x10/0x10 [ 207.159096][T14955] exit_to_user_mode_loop+0x1d8/0x700 [ 207.159109][T14955] ? rcu_is_watching+0x13/0xc0 [ 207.159125][T14955] do_syscall_64+0x661/0x790 [ 207.159140][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.159152][T14955] RIP: 0033:0x7f71e6b9e159 [ 207.159162][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.159172][T14955] RSP: 002b:00007ffc711adf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 207.159184][T14955] RAX: 0000000000000000 RBX: 00007f71e6e27da0 RCX: 00007f71e6b9e159 [ 207.159190][T14955] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 207.159197][T14955] RBP: 00007f71e6e27da0 R08: 00007f71e6e26038 R09: 0000000000000000 [ 207.159203][T14955] R10: 00000000003ffd10 R11: 0000000000000246 R12: 0000000000032ae5 [ 207.159210][T14955] R13: 00007f71e6e25fac R14: 00000000000327dd R15: 00007ffc711ae010 [ 207.159223][T14955] [ 207.159343][T14955] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.3478/14955 [ 207.159353][T14955] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.159372][T14955] CPU: 3 UID: 0 PID: 14955 Comm: syz.2.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.159386][T14955] Tainted: [L]=SOFTLOCKUP [ 207.159389][T14955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.159395][T14955] Call Trace: [ 207.159399][T14955] [ 207.159402][T14955] dump_stack_lvl+0x100/0x190 [ 207.159418][T14955] check_preemption_disabled+0xd2/0xe0 [ 207.159435][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.159449][T14955] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.159466][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.159481][T14955] trace_kfree_skb+0x18b/0x230 [ 207.159496][T14955] sk_skb_reason_drop+0xb7/0x1b0 [ 207.159525][T14955] skb_queue_purge_reason+0x2aa/0x420 [ 207.159539][T14955] ? synchronize_rcu_expedited+0x3c3/0x450 [ 207.159553][T14955] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 207.159575][T14955] packet_release+0x839/0xd70 [ 207.159589][T14955] ? __pfx_packet_release+0x10/0x10 [ 207.159603][T14955] ? __pfx_down_write+0x10/0x10 [ 207.159622][T14955] __sock_release+0xb3/0x260 [ 207.159635][T14955] ? __pfx_sock_close+0x10/0x10 [ 207.159648][T14955] sock_close+0x1c/0x30 [ 207.159661][T14955] __fput+0x3ff/0xb50 [ 207.159677][T14955] task_work_run+0x150/0x240 [ 207.159694][T14955] ? __pfx_task_work_run+0x10/0x10 [ 207.159714][T14955] exit_to_user_mode_loop+0x1d8/0x700 [ 207.159727][T14955] ? rcu_is_watching+0x13/0xc0 [ 207.159742][T14955] do_syscall_64+0x661/0x790 [ 207.159758][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.159768][T14955] RIP: 0033:0x7f71e6b9e159 [ 207.159777][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.159787][T14955] RSP: 002b:00007ffc711adf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 207.159797][T14955] RAX: 0000000000000000 RBX: 00007f71e6e27da0 RCX: 00007f71e6b9e159 [ 207.159804][T14955] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 207.159810][T14955] RBP: 00007f71e6e27da0 R08: 00007f71e6e26038 R09: 0000000000000000 [ 207.159816][T14955] R10: 00000000003ffd10 R11: 0000000000000246 R12: 0000000000032ae5 [ 207.159822][T14955] R13: 00007f71e6e25fac R14: 00000000000327dd R15: 00007ffc711ae010 [ 207.159835][T14955] [ 207.159878][T14955] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.3478/14955 [ 207.159888][T14955] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.159906][T14955] CPU: 3 UID: 0 PID: 14955 Comm: syz.2.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.159920][T14955] Tainted: [L]=SOFTLOCKUP [ 207.159924][T14955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.159930][T14955] Call Trace: [ 207.159933][T14955] [ 207.159937][T14955] dump_stack_lvl+0x100/0x190 [ 207.159952][T14955] check_preemption_disabled+0xd2/0xe0 [ 207.159969][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.159983][T14955] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.160013][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.160028][T14955] trace_kfree_skb+0x18b/0x230 [ 207.160044][T14955] sk_skb_reason_drop+0xb7/0x1b0 [ 207.160059][T14955] skb_queue_purge_reason+0x2aa/0x420 [ 207.160073][T14955] ? synchronize_rcu_expedited+0x3c3/0x450 [ 207.160086][T14955] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 207.160108][T14955] packet_release+0x839/0xd70 [ 207.160123][T14955] ? __pfx_packet_release+0x10/0x10 [ 207.160136][T14955] ? __pfx_down_write+0x10/0x10 [ 207.160155][T14955] __sock_release+0xb3/0x260 [ 207.160168][T14955] ? __pfx_sock_close+0x10/0x10 [ 207.160181][T14955] sock_close+0x1c/0x30 [ 207.160194][T14955] __fput+0x3ff/0xb50 [ 207.160210][T14955] task_work_run+0x150/0x240 [ 207.160227][T14955] ? __pfx_task_work_run+0x10/0x10 [ 207.160247][T14955] exit_to_user_mode_loop+0x1d8/0x700 [ 207.160259][T14955] ? rcu_is_watching+0x13/0xc0 [ 207.160275][T14955] do_syscall_64+0x661/0x790 [ 207.160295][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.160306][T14955] RIP: 0033:0x7f71e6b9e159 [ 207.160314][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.160324][T14955] RSP: 002b:00007ffc711adf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 207.160334][T14955] RAX: 0000000000000000 RBX: 00007f71e6e27da0 RCX: 00007f71e6b9e159 [ 207.160340][T14955] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 207.160346][T14955] RBP: 00007f71e6e27da0 R08: 00007f71e6e26038 R09: 0000000000000000 [ 207.160352][T14955] R10: 00000000003ffd10 R11: 0000000000000246 R12: 0000000000032ae5 [ 207.160359][T14955] R13: 00007f71e6e25fac R14: 00000000000327dd R15: 00007ffc711ae010 [ 207.160371][T14955] [ 207.161024][T14955] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.3478/14955 [ 207.161034][T14955] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.161053][T14955] CPU: 3 UID: 0 PID: 14955 Comm: syz.2.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.161067][T14955] Tainted: [L]=SOFTLOCKUP [ 207.161070][T14955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.161076][T14955] Call Trace: [ 207.161079][T14955] [ 207.161083][T14955] dump_stack_lvl+0x100/0x190 [ 207.161098][T14955] check_preemption_disabled+0xd2/0xe0 [ 207.161115][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.161129][T14955] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.161145][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.161160][T14955] trace_kfree_skb+0x18b/0x230 [ 207.161175][T14955] sk_skb_reason_drop+0xb7/0x1b0 [ 207.161190][T14955] skb_queue_purge_reason+0x2aa/0x420 [ 207.161204][T14955] ? synchronize_rcu_expedited+0x3c3/0x450 [ 207.161217][T14955] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 207.161239][T14955] packet_release+0x839/0xd70 [ 207.161253][T14955] ? __pfx_packet_release+0x10/0x10 [ 207.161266][T14955] ? __pfx_down_write+0x10/0x10 [ 207.161285][T14955] __sock_release+0xb3/0x260 [ 207.161302][T14955] ? __pfx_sock_close+0x10/0x10 [ 207.161315][T14955] sock_close+0x1c/0x30 [ 207.161327][T14955] __fput+0x3ff/0xb50 [ 207.161344][T14955] task_work_run+0x150/0x240 [ 207.161360][T14955] ? __pfx_task_work_run+0x10/0x10 [ 207.161379][T14955] exit_to_user_mode_loop+0x1d8/0x700 [ 207.161392][T14955] ? rcu_is_watching+0x13/0xc0 [ 207.161407][T14955] do_syscall_64+0x661/0x790 [ 207.161423][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.161434][T14955] RIP: 0033:0x7f71e6b9e159 [ 207.161442][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.161452][T14955] RSP: 002b:00007ffc711adf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 207.161462][T14955] RAX: 0000000000000000 RBX: 00007f71e6e27da0 RCX: 00007f71e6b9e159 [ 207.161469][T14955] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 207.161475][T14955] RBP: 00007f71e6e27da0 R08: 00007f71e6e26038 R09: 0000000000000000 [ 207.161481][T14955] R10: 00000000003ffd10 R11: 0000000000000246 R12: 0000000000032ae5 [ 207.161488][T14955] R13: 00007f71e6e25fac R14: 00000000000327dd R15: 00007ffc711ae010 [ 207.161514][T14955] [ 207.162000][T14955] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.3478/14955 [ 207.162010][T14955] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.162030][T14955] CPU: 3 UID: 0 PID: 14955 Comm: syz.2.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.162045][T14955] Tainted: [L]=SOFTLOCKUP [ 207.162048][T14955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.162054][T14955] Call Trace: [ 207.162058][T14955] [ 207.162061][T14955] dump_stack_lvl+0x100/0x190 [ 207.162078][T14955] check_preemption_disabled+0xd2/0xe0 [ 207.162095][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.162109][T14955] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.162126][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.162141][T14955] trace_kfree_skb+0x18b/0x230 [ 207.162157][T14955] sk_skb_reason_drop+0xb7/0x1b0 [ 207.162172][T14955] skb_queue_purge_reason+0x2aa/0x420 [ 207.162186][T14955] ? synchronize_rcu_expedited+0x3c3/0x450 [ 207.162200][T14955] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 207.162221][T14955] packet_release+0x839/0xd70 [ 207.162236][T14955] ? __pfx_packet_release+0x10/0x10 [ 207.162249][T14955] ? __pfx_down_write+0x10/0x10 [ 207.162268][T14955] __sock_release+0xb3/0x260 [ 207.162282][T14955] ? __pfx_sock_close+0x10/0x10 [ 207.162302][T14955] sock_close+0x1c/0x30 [ 207.162314][T14955] __fput+0x3ff/0xb50 [ 207.162331][T14955] task_work_run+0x150/0x240 [ 207.162348][T14955] ? __pfx_task_work_run+0x10/0x10 [ 207.162368][T14955] exit_to_user_mode_loop+0x1d8/0x700 [ 207.162381][T14955] ? rcu_is_watching+0x13/0xc0 [ 207.162396][T14955] do_syscall_64+0x661/0x790 [ 207.162412][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.162423][T14955] RIP: 0033:0x7f71e6b9e159 [ 207.162431][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.162441][T14955] RSP: 002b:00007ffc711adf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 207.162451][T14955] RAX: 0000000000000000 RBX: 00007f71e6e27da0 RCX: 00007f71e6b9e159 [ 207.162458][T14955] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 207.162464][T14955] RBP: 00007f71e6e27da0 R08: 00007f71e6e26038 R09: 0000000000000000 [ 207.162471][T14955] R10: 00000000003ffd10 R11: 0000000000000246 R12: 0000000000032ae5 [ 207.162477][T14955] R13: 00007f71e6e25fac R14: 00000000000327dd R15: 00007ffc711ae010 [ 207.162490][T14955] [ 207.162563][T14955] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.3478/14955 [ 207.162597][T14955] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.162617][T14955] CPU: 3 UID: 0 PID: 14955 Comm: syz.2.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.162631][T14955] Tainted: [L]=SOFTLOCKUP [ 207.162634][T14955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.162640][T14955] Call Trace: [ 207.162644][T14955] [ 207.162648][T14955] dump_stack_lvl+0x100/0x190 [ 207.162664][T14955] check_preemption_disabled+0xd2/0xe0 [ 207.162680][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.162694][T14955] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.162710][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.162725][T14955] trace_kfree_skb+0x18b/0x230 [ 207.162741][T14955] sk_skb_reason_drop+0xb7/0x1b0 [ 207.162756][T14955] skb_queue_purge_reason+0x2aa/0x420 [ 207.162769][T14955] ? synchronize_rcu_expedited+0x3c3/0x450 [ 207.162782][T14955] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 207.162804][T14955] packet_release+0x839/0xd70 [ 207.162830][T14955] ? __pfx_packet_release+0x10/0x10 [ 207.162846][T14955] ? __pfx_down_write+0x10/0x10 [ 207.162864][T14955] __sock_release+0xb3/0x260 [ 207.162878][T14955] ? __pfx_sock_close+0x10/0x10 [ 207.162891][T14955] sock_close+0x1c/0x30 [ 207.162903][T14955] __fput+0x3ff/0xb50 [ 207.162919][T14955] task_work_run+0x150/0x240 [ 207.162936][T14955] ? __pfx_task_work_run+0x10/0x10 [ 207.162956][T14955] exit_to_user_mode_loop+0x1d8/0x700 [ 207.162968][T14955] ? rcu_is_watching+0x13/0xc0 [ 207.162983][T14955] do_syscall_64+0x661/0x790 [ 207.162999][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.163010][T14955] RIP: 0033:0x7f71e6b9e159 [ 207.163018][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.163028][T14955] RSP: 002b:00007ffc711adf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 207.163037][T14955] RAX: 0000000000000000 RBX: 00007f71e6e27da0 RCX: 00007f71e6b9e159 [ 207.163044][T14955] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 207.163050][T14955] RBP: 00007f71e6e27da0 R08: 00007f71e6e26038 R09: 0000000000000000 [ 207.163056][T14955] R10: 00000000003ffd10 R11: 0000000000000246 R12: 0000000000032ae5 [ 207.163063][T14955] R13: 00007f71e6e25fac R14: 00000000000327dd R15: 00007ffc711ae010 [ 207.163075][T14955] [ 207.163246][T14955] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.3478/14955 [ 207.163255][T14955] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.163274][T14955] CPU: 3 UID: 0 PID: 14955 Comm: syz.2.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.163288][T14955] Tainted: [L]=SOFTLOCKUP [ 207.163296][T14955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.163301][T14955] Call Trace: [ 207.163305][T14955] [ 207.163309][T14955] dump_stack_lvl+0x100/0x190 [ 207.163325][T14955] check_preemption_disabled+0xd2/0xe0 [ 207.163341][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.163355][T14955] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 207.163372][T14955] ? skb_queue_purge_reason+0x2aa/0x420 [ 207.163387][T14955] trace_kfree_skb+0x18b/0x230 [ 207.163403][T14955] sk_skb_reason_drop+0xb7/0x1b0 [ 207.163418][T14955] skb_queue_purge_reason+0x2aa/0x420 [ 207.163445][T14955] ? synchronize_rcu_expedited+0x3c3/0x450 [ 207.163459][T14955] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 207.163482][T14955] packet_release+0x839/0xd70 [ 207.163496][T14955] ? __pfx_packet_release+0x10/0x10 [ 207.163510][T14955] ? __pfx_down_write+0x10/0x10 [ 207.163528][T14955] __sock_release+0xb3/0x260 [ 207.163542][T14955] ? __pfx_sock_close+0x10/0x10 [ 207.163555][T14955] sock_close+0x1c/0x30 [ 207.163568][T14955] __fput+0x3ff/0xb50 [ 207.163585][T14955] task_work_run+0x150/0x240 [ 207.163601][T14955] ? __pfx_task_work_run+0x10/0x10 [ 207.163621][T14955] exit_to_user_mode_loop+0x1d8/0x700 [ 207.163634][T14955] ? rcu_is_watching+0x13/0xc0 [ 207.163650][T14955] do_syscall_64+0x661/0x790 [ 207.163665][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.163676][T14955] RIP: 0033:0x7f71e6b9e159 [ 207.163684][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.163694][T14955] RSP: 002b:00007ffc711adf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 207.163704][T14955] RAX: 0000000000000000 RBX: 00007f71e6e27da0 RCX: 00007f71e6b9e159 [ 207.163711][T14955] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 207.163717][T14955] RBP: 00007f71e6e27da0 R08: 00007f71e6e26038 R09: 0000000000000000 [ 207.163723][T14955] R10: 00000000003ffd10 R11: 0000000000000246 R12: 0000000000032ae5 [ 207.163730][T14955] R13: 00007f71e6e25fac R14: 00000000000327dd R15: 00007ffc711ae010 [ 207.163743][T14955]