[ 67.034349][ T42] kauditd_printk_skb: 8 callbacks suppressed
[ 67.034369][ T42] audit: type=1400 audit(1792441116.253:208): avc: denied { write } for pid=6002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.082694][ T42] audit: type=1400 audit(1792441116.303:209): avc: denied { write } for pid=6005 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.596832][ T42] audit: type=1400 audit(1792441116.823:210): avc: denied { write } for pid=6008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.648310][ T42] audit: type=1400 audit(1792441116.873:211): avc: denied { write } for pid=6011 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 67.966445][ T42] audit: type=1400 audit(1792441117.193:212): avc: denied { write } for pid=6014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.013789][ T42] audit: type=1400 audit(1792441117.233:213): avc: denied { write } for pid=6017 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.432662][ T42] audit: type=1400 audit(1792441117.653:214): avc: denied { write } for pid=6020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.476995][ T42] audit: type=1400 audit(1792441117.703:215): avc: denied { write } for pid=6023 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.571908][ T42] audit: type=1400 audit(1792441117.793:216): avc: denied { write } for pid=6027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 68.633851][ T42] audit: type=1400 audit(1792441117.853:217): avc: denied { write } for pid=6031 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:33700' (ED25519) to the list of known hosts.
[*] Initializing reproducer for locking bug in __refill_objects_node...
[+] sysconf(_SC_NPROCESSORS_ONLN) = 4 online CPU(s).
[+] Signal handlers installed successfully.
[+] Alarm set to 30 seconds.
[+] setrlimit(RLIMIT_NOFILE, 65536) successful.
[+] mkdir /dev/cpu successful or already exists.
[+] MSR device nodes configured successfully.
[+] Successfully wrote 'on' to /sys/module/msr/parameters/allow_writes.
[*] Path /sys/module/msr_core/parameters/allow_writes not available: No such file or directory
[+] MSR writes successfully enabled.
[+] Verified allow_writes is now: on
[+] mmap shared_buf (67108864 bytes) successful.
[+] Pre-faulted shared_buf pages successfully.
[+] pthread_create th_msr0 successful.
[+] pthread_create th_msr1 successful.
[+] msr_interrupt_worker started on CPU 0.
[+] pthread_create th_bg successful.
[+] Successfully opened MSR device for CPU 0 (fd=3).
[+] pthread_create th_fork successful.
[+] CPU 0 APICBASE: 0xfee00d00
[ 69.606451][ C1]
[ 69.607325][ C1] =============================
[ 69.608933][ C1] [ BUG: Invalid wait context ]
[ 69.610551][ C1] syzkaller #0 Tainted: G S
[ 69.612536][ C1] -----------------------------
[ 69.614102][ C1] syz-executor177/6041 is trying to lock:
[*] All workers active across CPU 0 and CPU 1. Running stress race...
[*] CPU 0 initial write MSR_APIC_SELF_IPI: 8 (success)
[*] CPU 0 initial write MSR_APIC_ICR (self): 8 (success)
[*] CPU 0 initial write MSR_APIC_ICR (all): 8 (success)
[*] CPU 0 initial write MSR_APIC_ICR (other): 8 (success)
[+] msr_interrupt_worker started on CPU 1.
[+] cpu0_background_worker started on CPU 0.
[ 69.615900][ C1] ffff88801d040618 (&n->list_lock){-.-.}-{3:3}, at: __refill_objects_node+0x104/0xab0
[ 69.619116][ C1] other info that might help us debug this:
[ 69.621114][ C1] context-{2:2}
[ 69.622313][ C1] locks held by syz-executor177/6041: 1, last CPU#1:
[ 69.624521][ C1] #0: ffffffff9090b438 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x169/0x3c0
[ 69.627891][ C1] stack backtrace:
[ 69.629186][ C1] CPU: 1 UID: 0 PID: 6041 Comm: syz-executor177 Tainted: G S syzkaller #0 PREEMPT(full)
[ 69.632852][ C1] Tainted: [S]=CPU_OUT_OF_SPEC
[ 69.634441][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 69.637652][ C1] Call Trace:
[ 69.638754][ C1]
[ 69.639689][ C1] dump_stack_lvl+0x100/0x190
[ 69.641255][ C1] __lock_acquire+0xfcc/0x1f40
[ 69.642962][ C1] ? __sysvec_kvm_asyncpf_interrupt+0x2be/0x610
[ 69.644959][ C1] ? stack_trace_save+0x8e/0xc0
[ 69.646543][ C1] ? __pfx_stack_trace_save+0x10/0x10
[ 69.648329][ C1] lock_acquire+0x1d1/0x380
[ 69.649830][ C1] ? __refill_objects_node+0x104/0xab0
[ 69.651865][ C1] ? kasan_save_track+0x14/0x30
[ 69.653531][ C1] ? kasan_save_free_info+0x3b/0x70
[ 69.655457][ C1] ? __kasan_slab_free+0x5f/0x80
[ 69.657218][ C1] ? kfree+0x22b/0x6d0
[ 69.658572][ C1] ? __sysvec_kvm_asyncpf_interrupt+0x2be/0x610
[ 69.660734][ C1] _raw_spin_lock_irqsave+0x3a/0x60
[ 69.662466][ C1] ? __refill_objects_node+0x104/0xab0
[ 69.664183][ C1] __refill_objects_node+0x104/0xab0
[ 69.666214][ C1] ? do_file_open+0x20e/0x430
[ 69.668298][ C1] ? do_sys_openat2+0x10f/0x1e0
[ 69.670397][ C1] ? __x64_sys_openat+0x12d/0x210
[ 69.672583][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.674979][ C1] ? __lock_acquire+0x5c0/0x1f40
[ 69.677146][ C1] refill_objects+0x58/0x410
[ 69.679172][ C1] ? find_held_lock+0x2b/0x80
[ 69.681296][ C1] ? __pcs_replace_empty_main+0x132/0x650
[ 69.683628][ C1] __pcs_replace_empty_main+0x35e/0x650
[ 69.685828][ C1] __kmalloc_cache_noprof+0x4f4/0x6d0
[ 69.687688][ C1] ? __sysvec_kvm_asyncpf_interrupt+0x309/0x610
[ 69.690048][ C1] ? __sysvec_kvm_asyncpf_interrupt+0x334/0x610
[ 69.692763][ C1] __sysvec_kvm_asyncpf_interrupt+0x334/0x610
[ 69.695339][ C1] sysvec_kvm_asyncpf_interrupt+0x9e/0xc0
[ 69.697714][ C1]
[ 69.698941][ C1]
[ 69.700168][ C1] asm_sysvec_kvm_asyncpf_interrupt+0x1a/0x20
[ 69.702379][ C1] RIP: 0010:memcmp+0x156/0x1d0
[ 69.704290][ C1] Code: 0f 86 fb fe ff ff 48 89 d8 48 89 de 48 c1 e8 03 83 e6 07 42 0f b6 14 28 48 8d 43 07 48 89 c1 48 c1 e9 03 40 38 f2 40 0f 9e c6 <84> d2 42 0f b6 0c 29 0f 95 c2 40 84 d6 0f 84 45 ff ff ff be 08 00
[ 69.712251][ C1] RSP: 0018:ffffc90003ab7538 EFLAGS: 00000297
[ 69.714976][ C1] RAX: ffff8880220be413 RBX: ffff8880220be40c RCX: 1ffff11004417c82
[ 69.718376][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880220be40c
[ 69.721645][ C1] RBP: ffffffff8c58a940 R08: 0000000000000001 R09: 0000000000000066
[ 69.724839][ C1] R10: 0000000000000066 R11: 0000000000000001 R12: 0000000000000012
[ 69.728236][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000
[ 69.731681][ C1] ? tomoyo_profile+0x47/0x60
[ 69.733755][ C1] strstr+0x109/0x170
[ 69.735479][ C1] tomoyo_supervisor+0xf47/0x1340
[ 69.737598][ C1] ? __pfx_tomoyo_supervisor+0x10/0x10
[ 69.739864][ C1] ? tomoyo_check_path_acl+0x141/0x210
[ 69.742146][ C1] ? tomoyo_check_acl+0x1f7/0x410
[ 69.744229][ C1] tomoyo_path_permission+0x270/0x3b0
[ 69.746484][ C1] tomoyo_check_open_permission+0x37f/0x3c0
[ 69.748921][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 69.751643][ C1] ? hook_file_open+0x248/0x8e0
[ 69.753778][ C1] ? path_get+0x61/0x80
[ 69.755582][ C1] tomoyo_file_open+0x6b/0x90
[ 69.757546][ C1] security_file_open+0xb5/0x1e0
[ 69.759558][ C1] do_dentry_open+0x588/0x14d0
[ 69.761519][ C1] vfs_open+0x82/0x3f0
[ 69.763196][ C1] path_openat+0x1a23/0x2450
[ 69.765096][ C1] ? __pfx_path_openat+0x10/0x10
[ 69.767177][ C1] do_file_open+0x20e/0x430
[ 69.769145][ C1] ? __pfx_do_file_open+0x10/0x10
[ 69.771340][ C1] ? _raw_spin_unlock+0x28/0x50
[ 69.773414][ C1] ? alloc_fd+0x471/0x7a0
[ 69.775168][ C1] do_sys_openat2+0x10f/0x1e0
[ 69.776891][ C1] ? __pfx_do_sys_openat2+0x10/0x10
[ 69.778514][ C1] __x64_sys_openat+0x12d/0x210
[ 69.779979][ C1] ? __pfx___x64_sys_openat+0x10/0x10
[ 69.781746][ C1] ? ksys_write+0x1ac/0x250
[ 69.783243][ C1] do_syscall_64+0x123/0x790
[ 69.784884][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.787983][ C1] RIP: 0033:0x7f589f9da7be
[ 69.789520][ C1] Code: 08 0f 85 55 ec ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 69.797563][ C1] RSP: 002b:00007f589affe098 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 69.802095][ C1] RAX: ffffffffffffffda RBX: 00007f589affe6c0 RCX: 00007f589f9da7be
[ 69.805858][ C1] RDX: 0000000000000002 RSI: 00007f589affe1a0 RDI: ffffffffffffff9c
[ 69.809149][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 69.812597][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f589affe1a0
[ 69.816086][ C1] R13: 0000000000000001 R14: 00007ffef59973a0 R15: 00007ffef5997488
[ 69.819408][ C1]
[+] fork_worker started on CPU 1.
[+] Successfully opened MSR device for CPU 1 (fd=4).
[+] CPU 1 APICBASE: 0xfee00c00
[*] CPU 1 initial write MSR_APIC_SELF_IPI: 8 (success)
[*] CPU 1 initial write MSR_APIC_ICR (self): 8 (success)
[*] CPU 1 initial write MSR_APIC_ICR (all): 8 (success)
[*] CPU 1 initial write MSR_APIC_ICR (other): 8 (success)
[ 71.387044][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.387071][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[+] CPU 0 background_worker reached 2000 iterations.
[+] CPU 1 fork_worker reached 1000 iterations.
[ 76.497577][ T24] cfg80211: failed to load regulatory.db
[+] CPU 0 background_worker reached 4000 iterations.
[+] CPU 0 msr_interrupt_worker reached 25000 iterations.