last executing test programs: 4.120218974s ago: executing program 1 (id=272): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') listen(0xffffffffffffffff, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000500), 0xc, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000001c0)={0x80, 0x6, 0x206, 0x44, 0x0, 0xffff874c, 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1c1}, 0x0) listen(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) syz_usbip_server_init(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(r1, &(0x7f0000000200)='./trace/set_event\x00', 0x400002, 0x0) read(r5, &(0x7f0000000240)=""/210, 0xd2) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f0000000440)={0xc, [0x36, 0x6aa6, 0x9, 0x1, 0x0, 0x3, 0x4, 0x81, 0x8, 0xa33, 0x1, 0x4, 0x6, 0x6, 0xe2, 0xf, 0x3, 0x7, 0xd, 0x40, 0xf, 0x7ff, 0x1440, 0xac9, 0x5, 0x7, 0x2d41, 0xc048, 0x3, 0x4, 0x4d8d, 0x6, 0x3, 0xfff7, 0x7, 0x8, 0xffff, 0xa3, 0x5, 0x7fff, 0x7, 0xa2c1, 0x7, 0xfff7, 0x7, 0x6, 0xa8a, 0x1], 0x7}) r7 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r8 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r7, 0x1, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x40106183, &(0x7f0000000240)) 2.499771449s ago: executing program 1 (id=291): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x1b0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 2.39082669s ago: executing program 1 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000003c0)='netdevsim0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700020000010100e3ff05000000180001801400020076657468315f746f5f6873720000000005000700010000006f25525d50daafafcee1affe6cd899a85819d5af72964e496fbc127f7febd20a9f39e5356e8f8a22ab4e55"], 0x34}}, 0x40800) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) getgroups(0x1, &(0x7f0000000280)=[0xee00]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_MTU={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.10591536s ago: executing program 1 (id=299): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') listen(0xffffffffffffffff, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000500), 0xc, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000001c0)={0x80, 0x6, 0x206, 0x44, 0x0, 0xffff874c, 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1c1}, 0x0) listen(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) syz_usbip_server_init(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(r1, &(0x7f0000000200)='./trace/set_event\x00', 0x400002, 0x0) read(r5, &(0x7f0000000240)=""/210, 0xd2) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f0000000440)={0xc, [0x36, 0x6aa6, 0x9, 0x1, 0x0, 0x3, 0x4, 0x81, 0x8, 0xa33, 0x1, 0x4, 0x6, 0x6, 0xe2, 0xf, 0x3, 0x7, 0xd, 0x40, 0xf, 0x7ff, 0x1440, 0xac9, 0x5, 0x7, 0x2d41, 0xc048, 0x3, 0x4, 0x4d8d, 0x6, 0x3, 0xfff7, 0x7, 0x8, 0xffff, 0xa3, 0x5, 0x7fff, 0x7, 0xa2c1, 0x7, 0xfff7, 0x7, 0x6, 0xa8a, 0x1], 0x7}) r7 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) syz_usb_ep_read(r7, 0x1, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40106183, &(0x7f0000000240)) 1.591264703s ago: executing program 2 (id=303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_io_uring_setup(0x22f1, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c0", 0x1}], 0x1) 1.240621188s ago: executing program 3 (id=306): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x1c0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1.236379726s ago: executing program 0 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000003c0)='netdevsim0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700020000010100e3ff05000000180001801400020076657468315f746f5f6873720000000005000700010000006f25525d50daafafcee1affe6cd899a85819d5af72964e496fbc127f7febd20a9f39e5356e8f8a22ab4e55"], 0x34}}, 0x40800) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) getgroups(0x1, &(0x7f0000000280)=[0xee00]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_MTU={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.127462926s ago: executing program 3 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) 971.335016ms ago: executing program 3 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2180, 0x1c) read(r0, 0x0, 0x0) 878.642533ms ago: executing program 2 (id=310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85220000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="66b9ee0800000f32dee0652e660ffdb2b300660f300f32660f1ac636660f3882480965660f38825200da841000b800008ec8", 0x32}], 0x1, 0x38, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl(r5, 0xaaa, &(0x7f00000005c0)="2ab739d5c98d986f87194b8acbb98d1e3fb6e1d84bad25658f96dae063c248b82869a2d6bf38f0ee3f3736677592108258e6f76bd0c2a5fe07f3e407e137088ea21692ccf54866969c5f51aea5fb341e49e799e5e726317e329cbc9bf821d160e7dcccf7ea94acdc608b0fdbcd436f6f3aeac5fc734aef25620c30d4e31724d508108c376c28c68103414ca1d65dc2b555305a5785edfb6a0a288b") r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xc8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @empty}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000841}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1, 0x0, '\x00', r10}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xc, &(0x7f00000001c0)=@raw=[@generic={0x5, 0x1, 0x4, 0xfff, 0x9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000240)='GPL\x00', 0x3, 0xdd, &(0x7f0000000280)=""/221, 0x41100, 0x0, '\x00', r10, 0x0, r6, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x95bb}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 878.460317ms ago: executing program 3 (id=311): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) (async) 877.64086ms ago: executing program 0 (id=312): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00000000010000ffffffffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 729.862708ms ago: executing program 3 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000009", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r0], 0xb8}}, 0x2) 650.869015ms ago: executing program 0 (id=314): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0x4}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='p', 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = getuid() setresuid(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}]}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000005c0)={0x3, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x7f, @private=0xa010100}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000700)={0xff, {{0x2, 0x4e24, @private=0xa010100}}, {{0x2, 0x4e22, @empty}}}, 0x108) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 599.096284ms ago: executing program 3 (id=315): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="f1168cfd72e8ff25ae2eb5ecdc41136c49a3c9039a13db0fa92d37c7f1e968bd5b8a91b2ccd751d7003b7e0758bd6de18777282d6966206c58fd3e9f47adbd2ad4ee277425b7da8b9b7edd597f4e92b0560c48974738da5308a6db5a555e9da204834cf283826fa09a4a443f529f446f933b36", 0x73}], 0x1}}], 0x1, 0x800) 541.352202ms ago: executing program 0 (id=316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85220000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="66b9ee0800000f32dee0652e660ffdb2b300660f300f32660f1ac636660f3882480965660f38825200da841000b800008ec8", 0x32}], 0x1, 0x38, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 540.220364ms ago: executing program 1 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) 534.506158ms ago: executing program 2 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x8, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000000c0)=@sg0, r1, &(0x7f0000000100)) sendto$inet6(r0, 0x0, 0x0, 0x2004804d, &(0x7f0000000140)={0xa, 0x4001, 0xad9e, @loopback, 0xfffffffd}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) 355.774885ms ago: executing program 1 (id=319): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000240)={0x0, 0x9, 0x6, 0xaa, 0x2ea}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$pppl2tp(0x18, 0x1, 0x1) 355.642127ms ago: executing program 2 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2180, 0x1c) read(r0, 0x0, 0x0) 180.043421ms ago: executing program 2 (id=321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000003c0)='netdevsim0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700020000010100e3ff05000000180001801400020076657468315f746f5f6873720000000005000700010000006f25525d50daafafcee1affe6cd899a85819d5af72964e496fbc127f7febd20a9f39e5356e8f8a22ab4e55"], 0x34}}, 0x40800) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) getgroups(0x1, &(0x7f0000000280)=[0xee00]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_MTU={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 81.176994ms ago: executing program 0 (id=322): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x300, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 79.236224ms ago: executing program 2 (id=323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_io_uring_setup(0x22f1, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 0s ago: executing program 0 (id=324): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) write(0xffffffffffffffff, &(0x7f0000000280)='external:t', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r1, &(0x7f0000000580)='1:0', 0x3) write(r1, &(0x7f00000005c0)='1:1', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-ram0/size\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='1', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000600)='a', 0x1, 0x804, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r4, 0x0, &(0x7f00000002c0)="8a84", 0x2, 0x40000100, 0x1}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) setns(0xc9, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r9, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:37702' (ED25519) to the list of known hosts. [ 40.284341][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 40.284360][ T43] audit: type=1400 audit(1790010140.258:139): avc: denied { execute } for pid=5724 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.285331][ T43] audit: type=1400 audit(1790010140.258:140): avc: denied { execute_no_trans } for pid=5724 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.202963][ T43] audit: type=1400 audit(1790010143.178:141): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.208389][ T43] audit: type=1400 audit(1790010143.188:142): avc: denied { mount } for pid=5724 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.210207][ T5724] cgroup: Unknown subsys name 'net' [ 43.211867][ T43] audit: type=1400 audit(1790010143.188:143): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.340851][ T5724] cgroup: Unknown subsys name 'cpuset' [ 43.345425][ T5724] cgroup: Unknown subsys name 'rlimit' [ 43.472006][ T43] audit: type=1400 audit(1790010143.448:144): avc: denied { setattr } for pid=5724 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.472543][ T43] audit: type=1400 audit(1790010143.448:145): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.472796][ T43] audit: type=1400 audit(1790010143.448:146): avc: denied { write } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.473036][ T43] audit: type=1400 audit(1790010143.448:147): avc: denied { read } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.484257][ T43] audit: type=1400 audit(1790010143.458:148): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.528091][ T5730] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.451191][ T5724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.606631][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 48.606650][ T43] audit: type=1400 audit(1790010148.588:158): avc: denied { execmem } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.898661][ T43] audit: type=1400 audit(1790010148.878:159): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.899157][ T43] audit: type=1400 audit(1790010148.878:160): avc: denied { read write } for pid=5737 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.899978][ T43] audit: type=1400 audit(1790010148.878:161): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.922447][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.923868][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.927046][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.927313][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.928653][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.930123][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.930442][ T43] audit: type=1400 audit(1790010148.888:162): avc: denied { ioctl } for pid=5738 comm="syz-executor" path="socket:[6622]" dev="sockfs" ino=6622 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.951892][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.956829][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.958216][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.958637][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.960725][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.961139][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.961608][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.961894][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.962073][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.962207][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.974403][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.981821][ T43] audit: type=1400 audit(1790010148.948:163): avc: denied { read } for pid=5737 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.981848][ T43] audit: type=1400 audit(1790010148.948:164): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.982169][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.983529][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.990997][ T43] audit: type=1400 audit(1790010148.968:165): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.995157][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.003109][ T43] audit: type=1400 audit(1790010148.978:166): avc: denied { module_request } for pid=5737 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.023247][ T43] audit: type=1400 audit(1790010148.998:167): avc: denied { sys_module } for pid=5737 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.842775][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.842828][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.843049][ T5738] bridge_slave_0: entered allmulticast mode [ 49.846365][ T5738] bridge_slave_0: entered promiscuous mode [ 49.855156][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.855206][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.855277][ T5745] bridge_slave_0: entered allmulticast mode [ 49.856346][ T5745] bridge_slave_0: entered promiscuous mode [ 49.859082][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.859125][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.859287][ T5745] bridge_slave_1: entered allmulticast mode [ 49.860214][ T5745] bridge_slave_1: entered promiscuous mode [ 49.872332][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.872376][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.872452][ T5737] bridge_slave_0: entered allmulticast mode [ 49.873648][ T5737] bridge_slave_0: entered promiscuous mode [ 49.877380][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.877445][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.878206][ T5738] bridge_slave_1: entered allmulticast mode [ 49.879584][ T5738] bridge_slave_1: entered promiscuous mode [ 49.904496][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.904857][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.907243][ T5737] bridge_slave_1: entered allmulticast mode [ 49.908863][ T5737] bridge_slave_1: entered promiscuous mode [ 49.965694][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.975036][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.984114][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.003835][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.012441][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.024445][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.024565][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.024657][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.024723][ T5747] bridge_slave_0: entered allmulticast mode [ 50.025552][ T5747] bridge_slave_0: entered promiscuous mode [ 50.059279][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.059353][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.059412][ T5747] bridge_slave_1: entered allmulticast mode [ 50.060227][ T5747] bridge_slave_1: entered promiscuous mode [ 50.078995][ T5738] team0: Port device team_slave_0 added [ 50.080729][ T5745] team0: Port device team_slave_0 added [ 50.083031][ T5745] team0: Port device team_slave_1 added [ 50.102985][ T5738] team0: Port device team_slave_1 added [ 50.105087][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.115806][ T5737] team0: Port device team_slave_0 added [ 50.135709][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.144762][ T5737] team0: Port device team_slave_1 added [ 50.145283][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.145293][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.145305][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.147236][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.147246][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.147258][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.147908][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.147918][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.147931][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.168925][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.168940][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.168955][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.193889][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.193906][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.193926][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.208339][ T5747] team0: Port device team_slave_0 added [ 50.218728][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.218745][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.218765][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.233333][ T5747] team0: Port device team_slave_1 added [ 50.257877][ T5745] hsr_slave_0: entered promiscuous mode [ 50.258814][ T5745] hsr_slave_1: entered promiscuous mode [ 50.265473][ T5738] hsr_slave_0: entered promiscuous mode [ 50.266417][ T5738] hsr_slave_1: entered promiscuous mode [ 50.266948][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 50.267059][ T5738] Cannot create hsr debugfs directory [ 50.290635][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.290650][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.290673][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.304793][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.304806][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.304820][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.408939][ T5737] hsr_slave_0: entered promiscuous mode [ 50.409927][ T5737] hsr_slave_1: entered promiscuous mode [ 50.410821][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 50.410841][ T5737] Cannot create hsr debugfs directory [ 50.515107][ T5747] hsr_slave_0: entered promiscuous mode [ 50.515947][ T5747] hsr_slave_1: entered promiscuous mode [ 50.516635][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 50.516654][ T5747] Cannot create hsr debugfs directory [ 50.777486][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.782887][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.804241][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.808644][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.809115][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.812265][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.826543][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.829021][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.902176][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.907686][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.914815][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.919757][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.923528][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.929529][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.930039][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.933840][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.016174][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.019032][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.019746][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.021654][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.028867][ T5742] Bluetooth: hci3: command tx timeout [ 51.029103][ T5742] Bluetooth: hci2: command tx timeout [ 51.029180][ T5742] Bluetooth: hci0: command tx timeout [ 51.030637][ T65] Bluetooth: hci1: command tx timeout [ 51.032163][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.037910][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.038489][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.043729][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.140744][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.144584][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.145476][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.148684][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.157795][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.158442][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.163214][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.163885][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.168474][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.213176][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.243998][ T794] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.244153][ T794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.265810][ T794] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.265907][ T794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.273722][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.330973][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.351298][ T794] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.351348][ T794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.358143][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.376813][ T794] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.376865][ T794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.409448][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.423759][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.432210][ T794] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.432298][ T794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.457588][ T794] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.457683][ T794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.484067][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.510753][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.510834][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.528378][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.528469][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.775505][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.829295][ T5738] veth0_vlan: entered promiscuous mode [ 51.836728][ T5738] veth1_vlan: entered promiscuous mode [ 51.860167][ T5738] veth0_macvtap: entered promiscuous mode [ 51.862741][ T5738] veth1_macvtap: entered promiscuous mode [ 51.878407][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.883614][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.891092][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.929956][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.986564][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.986829][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.986919][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.986983][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.005030][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.012466][ T5745] veth0_vlan: entered promiscuous mode [ 52.046881][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.046933][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.063354][ T5747] veth0_vlan: entered promiscuous mode [ 52.064514][ T5745] veth1_vlan: entered promiscuous mode [ 52.089025][ T5747] veth1_vlan: entered promiscuous mode [ 52.107664][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.107684][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.145951][ T5745] veth0_macvtap: entered promiscuous mode [ 52.151699][ T5745] veth1_macvtap: entered promiscuous mode [ 52.152835][ T5737] veth0_vlan: entered promiscuous mode [ 52.174237][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.174824][ T5747] veth0_macvtap: entered promiscuous mode [ 52.182790][ T5738] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.183985][ T5737] veth1_vlan: entered promiscuous mode [ 52.194343][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.203186][ T5747] veth1_macvtap: entered promiscuous mode [ 52.252460][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.274362][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.280891][ T5737] veth0_macvtap: entered promiscuous mode [ 52.296235][ T5737] veth1_macvtap: entered promiscuous mode [ 52.323052][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.323075][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.348331][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.363318][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.396389][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396424][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396445][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396467][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396488][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396509][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396530][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396551][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396572][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396593][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396614][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.397367][ T794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.397381][ T794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.432455][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.432474][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.544792][ T798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.544816][ T798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.588810][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.610289][ T798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.610306][ T798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.694529][ T5889] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 52.702075][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.702110][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.071885][ T5903] FAULT_INJECTION: forcing a failure. [ 53.071885][ T5903] name failslab, interval 1, probability 0, space 0, times 1 [ 53.071923][ T5903] CPU: 0 UID: 0 PID: 5903 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 53.071944][ T5903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.071955][ T5903] Call Trace: [ 53.071962][ T5903] [ 53.071970][ T5903] dump_stack_lvl+0x100/0x190 [ 53.072003][ T5903] should_fail_ex.cold+0x5/0xa [ 53.072031][ T5903] should_failslab+0xc2/0x120 [ 53.072054][ T5903] __kvmalloc_node_noprof+0x113/0x9b0 [ 53.072075][ T5903] ? __pfx___mutex_lock+0x10/0x10 [ 53.072101][ T5903] ? nf_hook_entries_grow+0x255/0x870 [ 53.072126][ T5903] nf_hook_entries_grow+0x255/0x870 [ 53.072143][ T5903] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 53.072173][ T5903] __nf_register_net_hook+0x112/0x780 [ 53.072195][ T5903] nf_register_net_hook+0xdb/0x170 [ 53.072216][ T5903] nf_register_net_hooks+0x5d/0xd0 [ 53.072238][ T5903] nf_ct_netns_do_get+0x225/0x610 [ 53.072260][ T5903] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 53.072281][ T5903] ? find_held_lock+0x2b/0x80 [ 53.072305][ T5903] ? net_generic+0xea/0x2a0 [ 53.072322][ T5903] ? net_generic+0xea/0x2a0 [ 53.072344][ T5903] nf_ct_netns_get+0x3d/0x160 [ 53.072392][ T5903] synproxy_tg6_check+0x1d6/0x330 [ 53.072414][ T5903] ? __pfx_synproxy_tg6_check+0x10/0x10 [ 53.072434][ T5903] xt_check_target+0x117/0x1c0 [ 53.072471][ T5903] find_check_entry.isra.0+0x808/0xa00 [ 53.072500][ T5903] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 53.072529][ T5903] ? kasan_quarantine_put+0x104/0x240 [ 53.072552][ T5903] ? translate_table+0xbd8/0x1770 [ 53.072572][ T5903] ? kfree+0x22b/0x6d0 [ 53.072596][ T5903] ? xt_check_table_hooks+0x206/0x330 [ 53.072620][ T5903] translate_table+0xcb9/0x1770 [ 53.072659][ T5903] ? __pfx_translate_table+0x10/0x10 [ 53.072690][ T5903] do_ip6t_set_ctl+0x689/0xd00 [ 53.072714][ T5903] ? nf_sockopt_find.isra.0+0x222/0x290 [ 53.072740][ T5903] ? nf_sockopt_find.isra.0+0x222/0x290 [ 53.072767][ T5903] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 53.072788][ T5903] ? __mutex_unlock_slowpath+0x35d/0x930 [ 53.072816][ T5903] ? futex_wait+0x11e/0x370 [ 53.072833][ T5903] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 53.072868][ T5903] ? nf_sockopt_find.isra.0+0x222/0x290 [ 53.072894][ T5903] nf_setsockopt+0x8d/0xf0 [ 53.072919][ T5903] ipv6_setsockopt+0x135/0x170 [ 53.072945][ T5903] tcp_setsockopt+0xa7/0x100 [ 53.072964][ T5903] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 53.072992][ T5903] do_sock_setsockopt+0xf3/0x1d0 [ 53.073021][ T5903] __sys_setsockopt+0x195/0x220 [ 53.073046][ T5903] __x64_sys_setsockopt+0xbd/0x160 [ 53.073066][ T5903] ? do_syscall_64+0xae/0x790 [ 53.073091][ T5903] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.073116][ T5903] do_syscall_64+0x123/0x790 [ 53.073141][ T5903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.073160][ T5903] RIP: 0033:0x7fc7f519e159 [ 53.073176][ T5903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.073194][ T5903] RSP: 002b:00007fc7f607b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 53.073213][ T5903] RAX: ffffffffffffffda RBX: 00007fc7f5425fa0 RCX: 00007fc7f519e159 [ 53.073226][ T5903] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 53.073236][ T5903] RBP: 00007fc7f523506b R08: 00000000000002d0 R09: 0000000000000000 [ 53.073246][ T5903] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.073256][ T5903] R13: 00007fc7f5426038 R14: 00007fc7f5425fa0 R15: 00007ffc4ee7b8e8 [ 53.073279][ T5903] [ 53.119539][ T5751] Bluetooth: hci1: command tx timeout [ 53.119577][ T5751] Bluetooth: hci3: command tx timeout [ 53.119598][ T5751] Bluetooth: hci0: command tx timeout [ 53.119617][ T5751] Bluetooth: hci2: command tx timeout [ 53.273295][ T5905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.673700][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 53.673717][ T43] audit: type=1400 audit(1790010153.648:209): avc: denied { read write } for pid=5909 comm="syz.1.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.673984][ T43] audit: type=1400 audit(1790010153.648:210): avc: denied { open } for pid=5909 comm="syz.1.10" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.675279][ T43] audit: type=1400 audit(1790010153.648:211): avc: denied { ioctl } for pid=5909 comm="syz.1.10" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.712384][ T43] audit: type=1400 audit(1790010153.698:212): avc: denied { create } for pid=5909 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.713374][ T43] audit: type=1400 audit(1790010153.698:213): avc: denied { setopt } for pid=5909 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.717613][ T118] IPVS: starting estimator thread 0... [ 53.727002][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 53.727030][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 53.750308][ T43] audit: type=1400 audit(1790010153.728:214): avc: denied { create } for pid=5906 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.751690][ T43] audit: type=1400 audit(1790010153.728:215): avc: denied { write } for pid=5906 comm="syz.2.9" path="socket:[8875]" dev="sockfs" ino=8875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.752718][ T43] audit: type=1400 audit(1790010153.728:216): avc: denied { ioctl } for pid=5906 comm="syz.2.9" path="socket:[8875]" dev="sockfs" ino=8875 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.753348][ T65] Bluetooth: hci2: connection err: -111 [ 53.817171][ T5911] IPVS: using max 43 ests per chain, 103200 per kthread [ 53.817510][ T43] audit: type=1400 audit(1790010153.798:217): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 53.942439][ T5918] 8021q: VLANs not supported on gre0 [ 53.992950][ T43] audit: type=1400 audit(1790010153.968:218): avc: denied { perfmon } for pid=5919 comm="syz.1.14" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.228981][ T5905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.295435][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 54.331259][ T5933] team1: entered promiscuous mode [ 54.331302][ T5933] team1: entered allmulticast mode [ 54.332155][ T5933] 8021q: adding VLAN 0 to HW filter on device team1 [ 54.333312][ T5933] Zero length message leads to an empty skb [ 54.379200][ T5936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19'. [ 55.119688][ T5905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.147757][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b30b4a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 55.147793][ C0] Call Trace: [ 55.147797][ C0] [ 55.147804][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 55.147818][ C0] ? sched_clock_cpu+0x6c/0x570 [ 55.147828][ C0] ? find_held_lock+0x2b/0x80 [ 55.147843][ C0] ? tick_nohz_irq_exit+0x142/0x240 [ 55.147857][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 55.147870][ C0] mce_cpu_restart+0xd5/0x1f0 [ 55.147882][ C0] __flush_smp_call_function_queue+0x289/0x8c0 [ 55.147898][ C0] __sysvec_call_function+0x81/0x420 [ 55.147909][ C0] sysvec_call_function+0x9e/0xc0 [ 55.147924][ C0] [ 55.147927][ C0] [ 55.147931][ C0] asm_sysvec_call_function+0x1a/0x20 [ 55.147944][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 55.147959][ C0] Code: 47 94 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 58 1a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 55.147968][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000206 [ 55.147978][ C0] RAX: 00000000000b1935 RBX: ffffffff8ea91580 RCX: ffffffff8bd161c5 [ 55.147984][ C0] RDX: 0000000000000001 RSI: ffffffff8e38cf0c RDI: ffffffff8c623580 [ 55.147991][ C0] RBP: fffffbfff1d522b0 R08: 0000000000000001 R09: ffffed100d4867bd [ 55.147996][ C0] R10: ffff88806a433deb R11: 0000000000000001 R12: 0000000000000000 [ 55.148002][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 55.148011][ C0] ? ct_kernel_exit+0x125/0x180 [ 55.148029][ C0] default_idle+0x9/0x10 [ 55.148038][ C0] default_idle_call+0x6c/0xb0 [ 55.148048][ C0] do_idle+0x3ae/0x5b0 [ 55.148061][ C0] ? __pfx_do_idle+0x10/0x10 [ 55.148073][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 55.148090][ C0] cpu_startup_entry+0x4f/0x60 [ 55.148104][ C0] rest_init+0x2d3/0x2e0 [ 55.148115][ C0] ? __pfx_rest_init+0x10/0x10 [ 55.148135][ C0] ? __pfx_kernel_init+0x10/0x10 [ 55.148147][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 55.148158][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 55.148168][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 55.148185][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 55.148197][ C0] start_kernel+0x48e/0x490 [ 55.148214][ C0] x86_64_start_reservations+0x24/0x30 [ 55.148224][ C0] x86_64_start_kernel+0x12b/0x130 [ 55.148234][ C0] common_startup_64+0x13e/0x158 [ 55.148254][ C0] [ 55.188513][ T65] Bluetooth: hci2: command tx timeout [ 55.188542][ T65] Bluetooth: hci0: command tx timeout [ 55.188558][ T65] Bluetooth: hci3: command tx timeout [ 55.188605][ T65] Bluetooth: hci1: command tx timeout [ 55.195673][ T5951] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 55.229399][ T5905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.326603][ T5815] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.326635][ T5815] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.337496][ T5815] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.346139][ T5815] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.621587][ T5974] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 56.172816][ T5989] kvm: apic: phys broadcast and lowest prio [ 56.312473][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 56.327369][ T5996] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 56.342589][ T5996] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 56.601738][ T6006] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 57.100525][ T6010] cgroup: fork rejected by pids controller in /syz3 [ 57.267269][ T5751] Bluetooth: hci1: command tx timeout [ 57.267294][ T5751] Bluetooth: hci3: command tx timeout [ 57.267308][ T5751] Bluetooth: hci0: command tx timeout [ 57.267319][ T5751] Bluetooth: hci2: command tx timeout [ 57.308203][ T6048] netlink: 'syz.1.44': attribute type 49 has an invalid length. [ 57.345585][ T6048] bond0: (slave bond_slave_0): Releasing backup interface [ 57.369979][ T6054] binder: 6053:6054 ioctl c0805841 200000000240 returned -22 [ 57.442101][ T6048] bond_slave_0: entered promiscuous mode [ 57.442179][ T6048] bond_slave_0: entered allmulticast mode [ 57.557664][ T6073] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 57.563818][ T6073] netlink: 'syz.2.48': attribute type 30 has an invalid length. [ 57.643980][ T6081] ieee802154 phy0 wpan0: encryption failed: -22 [ 57.707338][ T6083] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 57.998472][ T6120] netlink: 'syz.2.63': attribute type 64 has an invalid length. [ 58.022630][ T6127] netlink: 'syz.2.63': attribute type 64 has an invalid length. [ 58.176899][ T6140] netlink: 'syz.2.67': attribute type 21 has an invalid length. [ 58.207151][ T6146] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 58.241094][ T6149] 8021q: VLANs not supported on gre0 [ 58.279744][ T6152] netlink: 'syz.2.72': attribute type 32 has an invalid length. [ 58.362108][ T6160] xt_cgroup: path and classid specified [ 58.403729][ T6166] syz.1.75 uses obsolete (PF_INET,SOCK_PACKET) [ 58.407596][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 58.407620][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 58.428412][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 58.428439][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 58.446327][ T5815] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.446485][ T5815] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.446514][ T5815] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.446543][ T5815] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.484167][ T6170] kvm: kvm [6168]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 58.564340][ T6176] binder: 6168:6176 ioctl 4008ae90 2000000001c0 returned -22 [ 58.677235][ T43] kauditd_printk_skb: 135 callbacks suppressed [ 58.677250][ T43] audit: type=1400 audit(1790010158.658:354): avc: denied { write } for pid=6180 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.678499][ T43] audit: type=1400 audit(1790010158.658:355): avc: denied { module_request } for pid=6179 comm="syz.1.80" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 58.707667][ T43] audit: type=1400 audit(1790010158.688:356): avc: denied { read write } for pid=6180 comm="syz.3.81" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.708464][ T43] audit: type=1400 audit(1790010158.688:357): avc: denied { read write open } for pid=6180 comm="syz.3.81" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.710285][ T6182] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000 out of range (51000000..2150000000) [ 58.710329][ T43] audit: type=1400 audit(1790010158.688:358): avc: denied { ioctl } for pid=6180 comm="syz.3.81" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 ioctlcmd=0x6f4c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.711467][ T43] audit: type=1400 audit(1790010158.688:359): avc: denied { ioctl } for pid=6180 comm="syz.3.81" path="socket:[12314]" dev="sockfs" ino=12314 ioctlcmd=0x6f04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.716834][ T43] audit: type=1400 audit(1790010158.698:360): avc: denied { create } for pid=6180 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.718614][ T43] audit: type=1400 audit(1790010158.698:361): avc: denied { read write } for pid=6180 comm="syz.3.81" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.718644][ T43] audit: type=1400 audit(1790010158.698:362): avc: denied { write } for pid=6180 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.719639][ T43] audit: type=1400 audit(1790010158.698:363): avc: denied { ioctl } for pid=6180 comm="syz.3.81" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 ioctlcmd=0x6f4c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.719681][ T6187] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000 out of range (51000000..2150000000) [ 58.751670][ T6189] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 58.898420][ T6193] 8021q: VLANs not supported on gre0 [ 59.083662][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 59.244537][ T6199] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 59.339729][ T6199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.357805][ T6209] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 59.376342][ T6211] Bluetooth: MGMT ver 1.23 [ 59.385085][ T6211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.86'. [ 59.683463][ T6225] lo: Caught tx_queue_len zero misconfig [ 59.867701][ T1040] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.038996][ T1040] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 60.045386][ T1040] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 60.045406][ T1040] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25866, setting to 1024 [ 60.059841][ T1040] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 60.059866][ T1040] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25866, setting to 1024 [ 60.073726][ T6239] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 60.084128][ T1040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.084144][ T1040] usb 7-1: Product: syz [ 60.084152][ T1040] usb 7-1: Manufacturer: syz [ 60.084159][ T1040] usb 7-1: SerialNumber: syz [ 60.105185][ T6219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 60.112577][ T1040] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 60.122157][ T1040] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 60.140679][ T1040] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 60.255486][ T6244] 8021q: VLANs not supported on gre0 [ 60.340953][ T65] Bluetooth: hci0: Zero size dump init pkt [ 61.536174][ T6297] 8021q: VLANs not supported on ip6gre0 [ 61.710524][ T6301] Invalid source name [ 61.741296][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 61.754241][ T6301] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.762326][ T6303] vlan2: entered allmulticast mode [ 61.762342][ T6303] bridge1: entered allmulticast mode [ 61.864918][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 61.871013][ T6301] syz.3.103 (6301) used greatest stack depth: 19288 bytes left [ 61.873064][ T6306] fuse: Bad value for 'fd' [ 62.122237][ T6313] affs: No valid root block on device nullb0 [ 62.128680][ T6316] affs: No valid root block on device nullb0 [ 62.202071][ T6318] loop2: detected capacity change from 0 to 2640 [ 62.209160][ T6318] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 62.209184][ T6318] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 62.209197][ T6318] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 62.209210][ T6318] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 62.209224][ T6318] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 62.209237][ T6318] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 62.209250][ T6318] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 62.209264][ T6318] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 62.209277][ T6318] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 62.209291][ T6318] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 62.343559][ T6283] Set syz1 is full, maxelem 65536 reached [ 62.522754][ T6324] FAULT_INJECTION: forcing a failure. [ 62.522754][ T6324] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.522788][ T6324] CPU: 1 UID: 0 PID: 6324 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full) [ 62.522809][ T6324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.522821][ T6324] Call Trace: [ 62.522828][ T6324] [ 62.522835][ T6324] dump_stack_lvl+0x100/0x190 [ 62.522900][ T6324] should_fail_ex.cold+0x5/0xa [ 62.522928][ T6324] strncpy_from_user+0x3b/0x2d0 [ 62.522952][ T6324] __do_sys_add_key+0xd4/0x460 [ 62.522977][ T6324] ? __pfx___do_sys_add_key+0x10/0x10 [ 62.523010][ T6324] do_syscall_64+0x123/0x790 [ 62.523039][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.523057][ T6324] RIP: 0033:0x7f228cd9e159 [ 62.523071][ T6324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.523086][ T6324] RSP: 002b:00007f228dd2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 62.523105][ T6324] RAX: ffffffffffffffda RBX: 00007f228d025fa0 RCX: 00007f228cd9e159 [ 62.523115][ T6324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 62.523126][ T6324] RBP: 00007f228ce3506b R08: ffffffffffffffff R09: 0000000000000000 [ 62.523136][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.523146][ T6324] R13: 00007f228d026038 R14: 00007f228d025fa0 R15: 00007ffe3bbbd648 [ 62.523168][ T6324] [ 62.525949][ T6324] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 62.562257][ T6326] 8021q: VLANs not supported on gre0 [ 62.598732][ T58] usb 7-1: USB disconnect, device number 2 [ 62.634827][ T58] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 62.643665][ T58] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 62.652554][ T58] ti_usb_3410_5052 7-1:2.0: device disconnected [ 63.388219][ T6356] 8021q: VLANs not supported on gre0 [ 63.697137][ T43] kauditd_printk_skb: 1988 callbacks suppressed [ 63.697151][ T43] audit: type=1400 audit(1790010163.678:2352): avc: denied { read write } for pid=6365 comm="syz.1.127" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.697336][ T43] audit: type=1400 audit(1790010163.678:2353): avc: denied { read write } for pid=5737 comm="syz-executor" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.697759][ T43] audit: type=1400 audit(1790010163.678:2354): avc: denied { read write open } for pid=6365 comm="syz.1.127" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.698484][ T43] audit: type=1400 audit(1790010163.678:2355): avc: denied { read write open } for pid=5737 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.698821][ T43] audit: type=1400 audit(1790010163.678:2356): avc: denied { ioctl } for pid=6365 comm="syz.1.127" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.699705][ T43] audit: type=1400 audit(1790010163.678:2357): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.762137][ T43] audit: type=1400 audit(1790010163.728:2358): avc: denied { create } for pid=6366 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.762171][ T43] audit: type=1400 audit(1790010163.728:2359): avc: denied { write } for pid=6366 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.762190][ T43] audit: type=1400 audit(1790010163.728:2360): avc: denied { read } for pid=6366 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.762210][ T43] audit: type=1400 audit(1790010163.728:2361): avc: denied { read } for pid=6366 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.052275][ T6381] fuse: Bad value for 'fd' [ 64.129509][ T6383] FAULT_INJECTION: forcing a failure. [ 64.129509][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.129601][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.0.132 Not tainted syzkaller #0 PREEMPT(full) [ 64.129627][ T6383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.129641][ T6383] Call Trace: [ 64.129648][ T6383] [ 64.129657][ T6383] dump_stack_lvl+0x100/0x190 [ 64.129714][ T6383] should_fail_ex.cold+0x5/0xa [ 64.129747][ T6383] strncpy_from_user+0x3b/0x2d0 [ 64.129782][ T6383] __do_sys_add_key+0xd4/0x460 [ 64.129816][ T6383] ? __pfx___do_sys_add_key+0x10/0x10 [ 64.129860][ T6383] do_syscall_64+0x123/0x790 [ 64.129901][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.129923][ T6383] RIP: 0033:0x7f228cd9e159 [ 64.129941][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.129960][ T6383] RSP: 002b:00007f228dd2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 64.129982][ T6383] RAX: ffffffffffffffda RBX: 00007f228d025fa0 RCX: 00007f228cd9e159 [ 64.129996][ T6383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 64.130010][ T6383] RBP: 00007f228ce3506b R08: ffffffffffffffff R09: 0000000000000000 [ 64.130023][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.130034][ T6383] R13: 00007f228d026038 R14: 00007f228d025fa0 R15: 00007ffe3bbbd648 [ 64.130063][ T6383] [ 64.170144][ T6383] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 64.567655][ T6395] process 'syz.2.136' launched './file1' with NULL argv: empty string added [ 64.633623][ T6395] warning: `syz.2.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.781019][ T6408] fuse: Bad value for 'fd' [ 64.884124][ T6406] FAULT_INJECTION: forcing a failure. [ 64.884124][ T6406] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 64.884150][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.1.142 Not tainted syzkaller #0 PREEMPT(full) [ 64.884164][ T6406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.884172][ T6406] Call Trace: [ 64.884177][ T6406] [ 64.884182][ T6406] dump_stack_lvl+0x100/0x190 [ 64.884206][ T6406] should_fail_ex.cold+0x5/0xa [ 64.884222][ T6406] ? prepare_alloc_pages+0x16d/0x5b0 [ 64.884240][ T6406] should_fail_alloc_page+0xeb/0x140 [ 64.884259][ T6406] prepare_alloc_pages+0x1f0/0x5b0 [ 64.884278][ T6406] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 64.884293][ T6406] ? __lock_acquire+0x5c0/0x1f40 [ 64.884312][ T6406] ? __lock_acquire+0x5c0/0x1f40 [ 64.884329][ T6406] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.884344][ T6406] ? __lock_acquire+0x5c0/0x1f40 [ 64.884361][ T6406] ? __lock_acquire+0x5c0/0x1f40 [ 64.884395][ T6406] ? __lock_acquire+0x5c0/0x1f40 [ 64.884409][ T6406] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.884426][ T6406] ? policy_nodemask+0xed/0x4f0 [ 64.884445][ T6406] alloc_pages_mpol+0x201/0x550 [ 64.884463][ T6406] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 64.884481][ T6406] ? lock_acquire+0x1d1/0x380 [ 64.884496][ T6406] folio_alloc_mpol_noprof+0x36/0x260 [ 64.884517][ T6406] vma_alloc_folio_noprof+0xed/0x1d0 [ 64.884536][ T6406] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 64.884556][ T6406] ? is_bpf_text_address+0x94/0x1a0 [ 64.884602][ T6406] do_anonymous_page+0xac9/0x2050 [ 64.884630][ T6406] ? __pfx_do_anonymous_page+0x10/0x10 [ 64.884647][ T6406] ? rcu_read_unlock+0x2d/0xb0 [ 64.884665][ T6406] ? rcu_read_unlock+0x2d/0xb0 [ 64.884683][ T6406] ? __pte_offset_map+0x179/0x310 [ 64.884703][ T6406] __handle_mm_fault+0x1ff3/0x2f60 [ 64.884743][ T6406] ? __pfx___handle_mm_fault+0x10/0x10 [ 64.884764][ T6406] ? pte_offset_map_lock+0x174/0x320 [ 64.884778][ T6406] ? find_held_lock+0x2b/0x80 [ 64.884800][ T6406] ? find_held_lock+0x2b/0x80 [ 64.884817][ T6406] ? follow_page_pte+0x536/0x1050 [ 64.884840][ T6406] handle_mm_fault+0x363/0xa20 [ 64.884865][ T6406] __get_user_pages+0x8ae/0x2c30 [ 64.884886][ T6406] ? __pfx___get_user_pages+0x10/0x10 [ 64.884901][ T6406] ? __pfx_down_read_killable+0x10/0x10 [ 64.884916][ T6406] ? __pfx_gup_fast_fallback+0x10/0x10 [ 64.884934][ T6406] get_user_pages_unlocked+0x1cb/0x7d0 [ 64.884952][ T6406] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 64.884967][ T6406] ? get_user_pages_fast_only+0xae/0xf0 [ 64.884982][ T6406] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 64.884998][ T6406] ? __pfx___might_resched+0x10/0x10 [ 64.885014][ T6406] hva_to_pfn+0x871/0xd60 [ 64.885030][ T6406] ? __pfx_hva_to_pfn+0x10/0x10 [ 64.885055][ T6406] kvm_follow_pfn+0x291/0x430 [ 64.885068][ T6406] __kvm_faultin_pfn+0x11c/0x1a0 [ 64.885080][ T6406] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 64.885092][ T6406] ? __pfx_xa_load+0x10/0x10 [ 64.885117][ T6406] kvm_mmu_faultin_pfn+0xb73/0x2280 [ 64.885138][ T6406] ? __pfx_fast_page_fault+0x10/0x10 [ 64.885154][ T6406] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 64.885172][ T6406] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 64.885190][ T6406] ? __lock_acquire+0x5c0/0x1f40 [ 64.885208][ T6406] kvm_tdp_page_fault+0x182/0x3d0 [ 64.885230][ T6406] kvm_mmu_do_page_fault+0x59b/0x6c0 [ 64.885251][ T6406] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 64.885276][ T6406] ? find_held_lock+0x2b/0x80 [ 64.885297][ T6406] kvm_mmu_page_fault+0x1dd/0x1ab0 [ 64.885312][ T6406] ? __schedule+0x126b/0x6920 [ 64.885327][ T6406] ? __pfx_clockevents_program_event+0x10/0x10 [ 64.885350][ T6406] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 64.885363][ T6406] ? __lock_acquire+0x5c0/0x1f40 [ 64.885377][ T6406] ? mark_held_locks+0x40/0x70 [ 64.885389][ T6406] ? irqentry_exit+0x24d/0xa10 [ 64.885408][ T6406] ? __pfx___schedule+0x10/0x10 [ 64.885423][ T6406] ? irqentry_exit+0x24d/0xa10 [ 64.885445][ T6406] handle_ept_violation+0x3a5/0x860 [ 64.885462][ T6406] ? __pfx_handle_ept_violation+0x10/0x10 [ 64.885477][ T6406] vmx_handle_exit+0x4c8/0x1d30 [ 64.885495][ T6406] vcpu_run+0x34b8/0x5e80 [ 64.885518][ T6406] ? __pfx_vcpu_run+0x10/0x10 [ 64.885535][ T6406] ? lock_acquire+0x1d1/0x380 [ 64.885548][ T6406] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 64.885565][ T6406] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 64.885583][ T6406] ? __local_bh_enable_ip+0xa5/0x120 [ 64.885600][ T6406] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 64.885615][ T6406] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 64.885635][ T6406] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 64.885650][ T6406] ? lock_acquire+0x1d1/0x380 [ 64.885663][ T6406] ? do_raw_write_lock+0x11e/0x260 [ 64.885679][ T6406] ? find_held_lock+0x2b/0x80 [ 64.885696][ T6406] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 64.885713][ T6406] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 64.885734][ T6406] kvm_vcpu_ioctl+0x730/0x1700 [ 64.885753][ T6406] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.885770][ T6406] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.885786][ T6406] ? do_vfs_ioctl+0x226/0x13e0 [ 64.885799][ T6406] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 64.885810][ T6406] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 64.885827][ T6406] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.885845][ T6406] ? __fget_files+0x34/0x3d0 [ 64.885867][ T6406] ? selinux_file_ioctl+0x13b/0x290 [ 64.885880][ T6406] ? selinux_file_ioctl+0xb6/0x290 [ 64.885896][ T6406] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.885914][ T6406] __x64_sys_ioctl+0x18e/0x210 [ 64.885928][ T6406] do_syscall_64+0x123/0x790 [ 64.885946][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.885958][ T6406] RIP: 0033:0x7faa0299e159 [ 64.885969][ T6406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.885979][ T6406] RSP: 002b:00007faa03922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.885990][ T6406] RAX: ffffffffffffffda RBX: 00007faa02c25fa0 RCX: 00007faa0299e159 [ 64.885997][ T6406] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 64.886003][ T6406] RBP: 00007faa03922090 R08: 0000000000000000 R09: 0000000000000000 [ 64.886009][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.886015][ T6406] R13: 00007faa02c26038 R14: 00007faa02c25fa0 R15: 00007ffed6034738 [ 64.886029][ T6406] [ 65.002893][ T6418] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 65.002912][ T6418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.003782][ T6418] vhci_hcd vhci_hcd.0: Device attached [ 65.268685][ T76] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 65.277220][ T5141] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.450054][ T5141] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 65.454596][ T5141] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.454626][ T5141] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 65.454639][ T5141] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 65.454659][ T5141] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.586256][ T6440] fuse: Bad value for 'fd' [ 65.682527][ T6444] 8021q: VLANs not supported on gre0 [ 65.759221][ T6449] netlink: 56 bytes leftover after parsing attributes in process `syz.3.157'. [ 65.762495][ T6449] ======================================================= [ 65.762495][ T6449] WARNING: The mand mount option has been deprecated and [ 65.762495][ T6449] and is ignored by this kernel. Remove the mand [ 65.762495][ T6449] option from the mount to silence this warning. [ 65.762495][ T6449] ======================================================= [ 65.914645][ T6455] FAULT_INJECTION: forcing a failure. [ 65.914645][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 65.914678][ T6455] CPU: 3 UID: 0 PID: 6455 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(full) [ 65.914699][ T6455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.914711][ T6455] Call Trace: [ 65.914718][ T6455] [ 65.914725][ T6455] dump_stack_lvl+0x100/0x190 [ 65.914759][ T6455] should_fail_ex.cold+0x5/0xa [ 65.914786][ T6455] should_failslab+0xc2/0x120 [ 65.914810][ T6455] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.914864][ T6455] ? prepare_creds+0x2c/0x950 [ 65.914907][ T6455] prepare_creds+0x2c/0x950 [ 65.914929][ T6455] lookup_user_key+0x8e9/0x1300 [ 65.914955][ T6455] ? __pfx_lookup_user_key+0x10/0x10 [ 65.914976][ T6455] ? lock_acquire+0x1d1/0x380 [ 65.914996][ T6455] ? __might_fault+0xc5/0x140 [ 65.915028][ T6455] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 65.915054][ T6455] ? strncpy_from_user+0x19d/0x2d0 [ 65.915079][ T6455] __do_sys_add_key+0x2a6/0x460 [ 65.915106][ T6455] ? __pfx___do_sys_add_key+0x10/0x10 [ 65.915139][ T6455] do_syscall_64+0x123/0x790 [ 65.915165][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.915185][ T6455] RIP: 0033:0x7faa0299e159 [ 65.915198][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.915213][ T6455] RSP: 002b:00007faa03922028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 65.915232][ T6455] RAX: ffffffffffffffda RBX: 00007faa02c25fa0 RCX: 00007faa0299e159 [ 65.915245][ T6455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 65.915258][ T6455] RBP: 00007faa02a3506b R08: ffffffffffffffff R09: 0000000000000000 [ 65.915270][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.915281][ T6455] R13: 00007faa02c26038 R14: 00007faa02c25fa0 R15: 00007ffed6034738 [ 65.915326][ T6455] [ 65.921565][ T6455] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 65.945208][ T6419] vhci_hcd: connection reset by peer [ 65.948165][ T12] vhci_hcd vhci_hcd.2: stop threads [ 65.948399][ T12] vhci_hcd vhci_hcd.2: release socket [ 65.948786][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 65.955190][ T5141] usb 7-1: USB disconnect, device number 3 [ 65.957481][ T6457] cxacru 7-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 65.958246][ T6457] cxacru 7-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 66.101509][ T6461] fuse: Bad value for 'fd' [ 66.312019][ T6464] FAULT_INJECTION: forcing a failure. [ 66.312019][ T6464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.312042][ T6464] CPU: 0 UID: 0 PID: 6464 Comm: syz.1.164 Not tainted syzkaller #0 PREEMPT(full) [ 66.312054][ T6464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.312061][ T6464] Call Trace: [ 66.312066][ T6464] [ 66.312071][ T6464] dump_stack_lvl+0x100/0x190 [ 66.312092][ T6464] should_fail_ex.cold+0x5/0xa [ 66.312108][ T6464] _copy_to_user+0x32/0xd0 [ 66.312122][ T6464] simple_read_from_buffer+0xcb/0x170 [ 66.312138][ T6464] proc_fail_nth_read+0x1af/0x230 [ 66.312154][ T6464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.312169][ T6464] ? rw_verify_area+0xce/0x6d0 [ 66.312186][ T6464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.312200][ T6464] vfs_read+0x1e4/0xb40 [ 66.312211][ T6464] ? lock_acquire+0x1d1/0x380 [ 66.312223][ T6464] ? __fget_files+0x34/0x3d0 [ 66.312236][ T6464] ? __pfx_vfs_read+0x10/0x10 [ 66.312246][ T6464] ? find_held_lock+0x2b/0x80 [ 66.312262][ T6464] ? __fget_files+0x215/0x3d0 [ 66.312278][ T6464] ? __fget_files+0x21f/0x3d0 [ 66.312295][ T6464] ksys_read+0x12a/0x250 [ 66.312306][ T6464] ? __pfx_ksys_read+0x10/0x10 [ 66.312321][ T6464] do_syscall_64+0x123/0x790 [ 66.312340][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.312351][ T6464] RIP: 0033:0x7faa0295e98e [ 66.312361][ T6464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.312371][ T6464] RSP: 002b:00007faa03921fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.312383][ T6464] RAX: ffffffffffffffda RBX: 00007faa039226c0 RCX: 00007faa0295e98e [ 66.312390][ T6464] RDX: 000000000000000f RSI: 00007faa039220a0 RDI: 000000000000000a [ 66.312396][ T6464] RBP: 00007faa03922090 R08: 0000000000000000 R09: 0000000000000000 [ 66.312407][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.312414][ T6464] R13: 00007faa02c26038 R14: 00007faa02c25fa0 R15: 00007ffed6034738 [ 66.312442][ T6464] [ 66.740007][ T6485] FAULT_INJECTION: forcing a failure. [ 66.740007][ T6485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.740030][ T6485] CPU: 1 UID: 0 PID: 6485 Comm: syz.0.170 Not tainted syzkaller #0 PREEMPT(full) [ 66.740044][ T6485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.740050][ T6485] Call Trace: [ 66.740055][ T6485] [ 66.740060][ T6485] dump_stack_lvl+0x100/0x190 [ 66.740083][ T6485] should_fail_ex.cold+0x5/0xa [ 66.740099][ T6485] strncpy_from_user+0x3b/0x2d0 [ 66.740115][ T6485] __do_sys_add_key+0xd4/0x460 [ 66.740134][ T6485] ? __pfx___do_sys_add_key+0x10/0x10 [ 66.740156][ T6485] do_syscall_64+0x123/0x790 [ 66.740175][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.740187][ T6485] RIP: 0033:0x7f228cd9e159 [ 66.740196][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.740207][ T6485] RSP: 002b:00007f228dd2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 66.740219][ T6485] RAX: ffffffffffffffda RBX: 00007f228d025fa0 RCX: 00007f228cd9e159 [ 66.740226][ T6485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 66.740233][ T6485] RBP: 00007f228ce3506b R08: ffffffffffffffff R09: 0000000000000000 [ 66.740240][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.740246][ T6485] R13: 00007f228d026038 R14: 00007f228d025fa0 R15: 00007ffe3bbbd648 [ 66.740260][ T6485] [ 66.742118][ T6485] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 66.857172][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 66.865719][ T6489] 8021q: VLANs not supported on gre0 [ 66.867819][ T6488] FAULT_INJECTION: forcing a failure. [ 66.867819][ T6488] name failslab, interval 1, probability 0, space 0, times 0 [ 66.867840][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: syz.2.173 Not tainted syzkaller #0 PREEMPT(full) [ 66.867854][ T6488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.867861][ T6488] Call Trace: [ 66.867866][ T6488] [ 66.867871][ T6488] dump_stack_lvl+0x100/0x190 [ 66.867893][ T6488] should_fail_ex.cold+0x5/0xa [ 66.867912][ T6488] should_failslab+0xc2/0x120 [ 66.867930][ T6488] __kmalloc_cache_noprof+0x91/0x6d0 [ 66.867949][ T6488] ? _raw_read_unlock_irqrestore+0x3b/0x80 [ 66.867966][ T6488] ? snd_pcm_attach_substream+0x436/0xd20 [ 66.867993][ T6488] snd_pcm_attach_substream+0x436/0xd20 [ 66.868010][ T6488] snd_pcm_open_substream+0x90/0x1850 [ 66.868025][ T6488] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 66.868037][ T6488] ? lockdep_init_map_type+0x5c/0x250 [ 66.868052][ T6488] ? lockdep_init_map_type+0x5c/0x250 [ 66.868070][ T6488] snd_pcm_oss_open+0x715/0x1380 [ 66.868094][ T6488] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 66.868114][ T6488] ? __pfx_default_wake_function+0x10/0x10 [ 66.868154][ T6488] ? do_raw_spin_lock+0x128/0x260 [ 66.868171][ T6488] ? soundcore_open+0x231/0x5a0 [ 66.868189][ T6488] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 66.868207][ T6488] soundcore_open+0x2e3/0x5a0 [ 66.868226][ T6488] ? __pfx_soundcore_open+0x10/0x10 [ 66.868241][ T6488] chrdev_open+0x234/0x6a0 [ 66.868257][ T6488] ? __pfx_chrdev_open+0x10/0x10 [ 66.868274][ T6488] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 66.868295][ T6488] do_dentry_open+0x6ab/0x14d0 [ 66.868307][ T6488] ? __pfx_chrdev_open+0x10/0x10 [ 66.868329][ T6488] vfs_open+0x82/0x3f0 [ 66.868351][ T6488] path_openat+0x19fa/0x2440 [ 66.868372][ T6488] ? __pfx_path_openat+0x10/0x10 [ 66.868396][ T6488] do_file_open+0x20e/0x430 [ 66.868417][ T6488] ? __pfx_do_file_open+0x10/0x10 [ 66.868443][ T6488] ? _raw_spin_unlock+0x28/0x50 [ 66.868466][ T6488] ? alloc_fd+0x471/0x7a0 [ 66.868486][ T6488] do_sys_openat2+0x10f/0x1e0 [ 66.868504][ T6488] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.868522][ T6488] ? __do_sys_add_key+0x37d/0x460 [ 66.868540][ T6488] ? kfree+0x1e5/0x6d0 [ 66.868559][ T6488] __x64_sys_openat+0x12d/0x210 [ 66.868575][ T6488] ? __pfx___x64_sys_openat+0x10/0x10 [ 66.868596][ T6488] do_syscall_64+0x123/0x790 [ 66.868614][ T6488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.868626][ T6488] RIP: 0033:0x7fc553d9e159 [ 66.868636][ T6488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.868647][ T6488] RSP: 002b:00007fc554be2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.868658][ T6488] RAX: ffffffffffffffda RBX: 00007fc554025fa0 RCX: 00007fc553d9e159 [ 66.868664][ T6488] RDX: 0000000000109842 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 66.868671][ T6488] RBP: 00007fc553e3506b R08: 0000000000000000 R09: 0000000000000000 [ 66.868677][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.868683][ T6488] R13: 00007fc554026038 R14: 00007fc554025fa0 R15: 00007ffdd4124ba8 [ 66.868697][ T6488] [ 66.938854][ T6491] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.379251][ T6506] FAULT_INJECTION: forcing a failure. [ 67.379251][ T6506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.379272][ T6506] CPU: 3 UID: 0 PID: 6506 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT(full) [ 67.379284][ T6506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.379290][ T6506] Call Trace: [ 67.379295][ T6506] [ 67.379299][ T6506] dump_stack_lvl+0x100/0x190 [ 67.379319][ T6506] should_fail_ex.cold+0x5/0xa [ 67.379336][ T6506] strncpy_from_user+0x3b/0x2d0 [ 67.379352][ T6506] __do_sys_add_key+0xd4/0x460 [ 67.379371][ T6506] ? __pfx___do_sys_add_key+0x10/0x10 [ 67.379392][ T6506] do_syscall_64+0x123/0x790 [ 67.379410][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.379421][ T6506] RIP: 0033:0x7fc553d9e159 [ 67.379430][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.379440][ T6506] RSP: 002b:00007fc554be2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 67.379452][ T6506] RAX: ffffffffffffffda RBX: 00007fc554025fa0 RCX: 00007fc553d9e159 [ 67.379459][ T6506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 67.379472][ T6506] RBP: 00007fc553e3506b R08: ffffffffffffffff R09: 0000000000000000 [ 67.379478][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.379484][ T6506] R13: 00007fc554026038 R14: 00007fc554025fa0 R15: 00007ffdd4124ba8 [ 67.379497][ T6506] [ 67.381875][ T6506] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 67.639090][ T6519] set match dimension is over the limit! [ 67.709736][ T6523] 8021q: VLANs not supported on gre0 [ 67.803423][ T6528] syz.3.189 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.813026][ T6528] netlink: 165 bytes leftover after parsing attributes in process `syz.3.189'. [ 67.879159][ T6531] FAULT_INJECTION: forcing a failure. [ 67.879159][ T6531] name failslab, interval 1, probability 0, space 0, times 0 [ 67.879181][ T6531] CPU: 3 UID: 0 PID: 6531 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) [ 67.879194][ T6531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.879200][ T6531] Call Trace: [ 67.879205][ T6531] [ 67.879210][ T6531] dump_stack_lvl+0x100/0x190 [ 67.879237][ T6531] should_fail_ex.cold+0x5/0xa [ 67.879257][ T6531] should_failslab+0xc2/0x120 [ 67.879275][ T6531] kmem_cache_alloc_noprof+0x92/0x6a0 [ 67.879294][ T6531] ? prepare_creds+0x2c/0x950 [ 67.879312][ T6531] prepare_creds+0x2c/0x950 [ 67.879327][ T6531] lookup_user_key+0x8e9/0x1300 [ 67.879350][ T6531] ? __pfx_lookup_user_key+0x10/0x10 [ 67.879366][ T6531] ? lock_acquire+0x1d1/0x380 [ 67.879378][ T6531] ? __might_fault+0xc5/0x140 [ 67.879395][ T6531] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 67.879411][ T6531] ? strncpy_from_user+0x19d/0x2d0 [ 67.879426][ T6531] __do_sys_add_key+0x2a6/0x460 [ 67.879443][ T6531] ? __pfx___do_sys_add_key+0x10/0x10 [ 67.879463][ T6531] do_syscall_64+0x123/0x790 [ 67.879482][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.879494][ T6531] RIP: 0033:0x7f228cd9e159 [ 67.879503][ T6531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.879513][ T6531] RSP: 002b:00007f228dd2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 67.879525][ T6531] RAX: ffffffffffffffda RBX: 00007f228d025fa0 RCX: 00007f228cd9e159 [ 67.879533][ T6531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 67.879539][ T6531] RBP: 00007f228ce3506b R08: ffffffffffffffff R09: 0000000000000000 [ 67.879546][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.879553][ T6531] R13: 00007f228d026038 R14: 00007f228d025fa0 R15: 00007ffe3bbbd648 [ 67.879567][ T6531] [ 67.881397][ T6531] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 68.162689][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 68.397487][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.525114][ T6558] set match dimension is over the limit! [ 68.536306][ T58] usb 5-1: device descriptor read/64, error -71 [ 68.614491][ T6561] 8021q: VLANs not supported on gre0 [ 68.717608][ T43] kauditd_printk_skb: 933 callbacks suppressed [ 68.717623][ T43] audit: type=1400 audit(1790010168.698:3294): avc: denied { ioctl } for pid=6539 comm="syz.0.196" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.743720][ T43] audit: type=1400 audit(1790010168.718:3295): avc: denied { read } for pid=6562 comm="syz.1.202" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.747913][ T43] audit: type=1400 audit(1790010168.718:3296): avc: denied { read open } for pid=6562 comm="syz.1.202" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.759682][ T43] audit: type=1400 audit(1790010168.728:3297): avc: denied { ioctl } for pid=6562 comm="syz.1.202" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.776083][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.785653][ T43] audit: type=1400 audit(1790010168.758:3298): avc: denied { ioctl } for pid=6539 comm="syz.0.196" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.785690][ T43] audit: type=1400 audit(1790010168.758:3299): avc: denied { ioctl } for pid=6539 comm="syz.0.196" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.785711][ T43] audit: type=1400 audit(1790010168.758:3300): avc: denied { ioctl } for pid=6539 comm="syz.0.196" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.798877][ T43] audit: type=1400 audit(1790010168.788:3301): avc: denied { read write } for pid=5738 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.799788][ T43] audit: type=1400 audit(1790010168.788:3302): avc: denied { read write open } for pid=5738 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.800623][ T43] audit: type=1400 audit(1790010168.788:3303): avc: denied { ioctl } for pid=5738 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.906244][ T58] usb 5-1: device descriptor read/64, error -71 [ 69.016860][ T58] usb usb5-port1: attempt power cycle [ 69.356280][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.380837][ T58] usb 5-1: device descriptor read/8, error -71 [ 69.495623][ T6576] syzkaller0: entered promiscuous mode [ 69.495644][ T6576] syzkaller0: entered allmulticast mode [ 69.506049][ T6576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'. [ 69.506070][ T6576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'. [ 69.616131][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.627211][ T6583] set match dimension is over the limit! [ 69.638493][ T58] usb 5-1: device descriptor read/8, error -71 [ 69.725904][ T6585] 8021q: VLANs not supported on gre0 [ 69.748922][ T58] usb usb5-port1: unable to enumerate USB device [ 69.834344][ T6590] exFAT-fs (nbd1): unable to read boot sector [ 69.834373][ T6590] exFAT-fs (nbd1): failed to read boot sector [ 69.834379][ T6590] exFAT-fs (nbd1): failed to recognize exfat type [ 70.005817][ T6598] netlink: 'syz.3.215': attribute type 29 has an invalid length. [ 70.009927][ T6597] netlink: 'syz.3.215': attribute type 29 has an invalid length. [ 70.010516][ T6597] netlink: 'syz.3.215': attribute type 29 has an invalid length. [ 70.283732][ T6609] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 70.386389][ T76] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 70.448979][ T6612] set match dimension is over the limit! [ 70.537433][ T6616] fuse: Bad value for 'fd' [ 71.074146][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 71.074175][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 71.074190][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 71.081569][ T6638] Unknown metaid 44052 dlen 5286 [ 71.101008][ T6640] Unknown metaid 44052 dlen 5286 [ 71.101971][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 71.101992][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 71.102004][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 71.315232][ T6648] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 71.486761][ T6654] fuse: Bad value for 'fd' [ 71.623627][ T6658] vlan1: entered promiscuous mode [ 71.623746][ T6658] vlan1: entered allmulticast mode [ 71.623753][ T6658] veth0_vlan: entered allmulticast mode [ 71.680876][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.680934][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.688218][ T9] cfg80211: failed to load regulatory.db [ 71.919215][ T6679] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 71.971245][ T6680] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.972795][ T6680] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.065317][ T6680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.070565][ T6680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.165070][ T6688] 9p: Bad value for 'source' [ 72.166433][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.166476][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.166506][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.166536][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.318885][ T6696] set match dimension is over the limit! [ 72.540190][ T6702] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 72.711459][ T6712] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 73.120009][ T6730] FAULT_INJECTION: forcing a failure. [ 73.120009][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 73.120042][ T6730] CPU: 2 UID: 0 PID: 6730 Comm: syz.0.256 Not tainted syzkaller #0 PREEMPT(full) [ 73.120061][ T6730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.120073][ T6730] Call Trace: [ 73.120079][ T6730] [ 73.120085][ T6730] dump_stack_lvl+0x100/0x190 [ 73.120118][ T6730] should_fail_ex.cold+0x5/0xa [ 73.120146][ T6730] should_failslab+0xc2/0x120 [ 73.120171][ T6730] __kmalloc_noprof+0xfc/0x840 [ 73.120191][ T6730] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 73.120218][ T6730] kernfs_fop_write_iter+0x26a/0x5f0 [ 73.120240][ T6730] vfs_write+0x6af/0x1050 [ 73.120259][ T6730] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 73.120281][ T6730] ? __pfx_vfs_write+0x10/0x10 [ 73.120296][ T6730] ? find_held_lock+0x2b/0x80 [ 73.120338][ T6730] ksys_write+0x12a/0x250 [ 73.120357][ T6730] ? __pfx_ksys_write+0x10/0x10 [ 73.120383][ T6730] do_syscall_64+0x123/0x790 [ 73.120411][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.120430][ T6730] RIP: 0033:0x7f228cd9e159 [ 73.120446][ T6730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.120460][ T6730] RSP: 002b:00007f228dd2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.120478][ T6730] RAX: ffffffffffffffda RBX: 00007f228d025fa0 RCX: 00007f228cd9e159 [ 73.120489][ T6730] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 73.120498][ T6730] RBP: 00007f228dd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 73.120507][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.120517][ T6730] R13: 00007f228d026038 R14: 00007f228d025fa0 R15: 00007ffe3bbbd648 [ 73.120542][ T6730] [ 73.628972][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.259'. [ 73.686502][ T6741] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 73.737870][ T43] kauditd_printk_skb: 1209 callbacks suppressed [ 73.737888][ T43] audit: type=1400 audit(1790010173.718:4513): avc: denied { ioctl } for pid=6738 comm="syz.2.261" path="/dev/virtual_nci" dev="devtmpfs" ino=708 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.739604][ T43] audit: type=1400 audit(1790010173.718:4514): avc: denied { write } for pid=6738 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.749219][ T43] audit: type=1400 audit(1790010173.728:4515): avc: denied { ioctl } for pid=6736 comm="syz.0.259" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.773064][ T43] audit: type=1400 audit(1790010173.748:4516): avc: denied { read write } for pid=5745 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.774311][ T43] audit: type=1400 audit(1790010173.748:4517): avc: denied { read write open } for pid=5745 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.775576][ T43] audit: type=1400 audit(1790010173.748:4518): avc: denied { ioctl } for pid=5745 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.787779][ T43] audit: type=1400 audit(1790010173.768:4519): avc: denied { read write } for pid=6746 comm="syz.1.262" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.789038][ T43] audit: type=1400 audit(1790010173.768:4520): avc: denied { read write open } for pid=6746 comm="syz.1.262" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.793168][ T43] audit: type=1400 audit(1790010173.768:4521): avc: denied { ioctl } for pid=6746 comm="syz.1.262" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.821123][ T43] audit: type=1400 audit(1790010173.798:4522): avc: denied { ioctl } for pid=6736 comm="syz.0.259" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.886120][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 74.058862][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 74.073016][ T9] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 74.073040][ T9] usb 5-1: config 1 has no interface number 0 [ 74.090595][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.090622][ T9] usb 5-1: Product: syz [ 74.090633][ T9] usb 5-1: Manufacturer: syz [ 74.090646][ T9] usb 5-1: SerialNumber: syz [ 74.123049][ T9] usb 5-1: 3:1 : does not exist [ 74.123065][ T9] usb 5-1: 3:2 : does not exist [ 74.310424][ T6760] FAULT_INJECTION: forcing a failure. [ 74.310424][ T6760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.310457][ T6760] CPU: 0 UID: 0 PID: 6760 Comm: syz.2.268 Not tainted syzkaller #0 PREEMPT(full) [ 74.310483][ T6760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.310494][ T6760] Call Trace: [ 74.310500][ T6760] [ 74.310507][ T6760] dump_stack_lvl+0x100/0x190 [ 74.310537][ T6760] should_fail_ex.cold+0x5/0xa [ 74.310563][ T6760] _copy_from_iter+0x1f4/0x1690 [ 74.310590][ T6760] ? __pfx__copy_from_iter+0x10/0x10 [ 74.310609][ T6760] ? trace_kmalloc+0xeb/0x110 [ 74.310630][ T6760] ? __kasan_kmalloc+0xaa/0xb0 [ 74.310652][ T6760] ? __kmalloc_noprof+0x350/0x840 [ 74.310671][ T6760] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 74.310695][ T6760] kernfs_fop_write_iter+0x186/0x5f0 [ 74.310718][ T6760] vfs_write+0x6af/0x1050 [ 74.310739][ T6760] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 74.310759][ T6760] ? __pfx_vfs_write+0x10/0x10 [ 74.310776][ T6760] ? find_held_lock+0x2b/0x80 [ 74.310844][ T6760] ksys_write+0x12a/0x250 [ 74.310862][ T6760] ? __pfx_ksys_write+0x10/0x10 [ 74.310887][ T6760] do_syscall_64+0x123/0x790 [ 74.310917][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.310950][ T6760] RIP: 0033:0x7fc553d9e159 [ 74.310967][ T6760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.310981][ T6760] RSP: 002b:00007fc554be2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.311000][ T6760] RAX: ffffffffffffffda RBX: 00007fc554025fa0 RCX: 00007fc553d9e159 [ 74.311010][ T6760] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 74.311019][ T6760] RBP: 00007fc554be2090 R08: 0000000000000000 R09: 0000000000000000 [ 74.311028][ T6760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.311037][ T6760] R13: 00007fc554026038 R14: 00007fc554025fa0 R15: 00007ffdd4124ba8 [ 74.311062][ T6760] [ 74.345142][ T58] usb 5-1: USB disconnect, device number 6 [ 74.457961][ T6763] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 74.714128][ T6768] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 74.714147][ T6768] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 74.715104][ T6768] vhci_hcd vhci_hcd.0: Device attached [ 74.956157][ T50] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 74.966663][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 74.981290][ T6776] set match dimension is over the limit! [ 75.118211][ T58] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 75.147918][ T58] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.147974][ T58] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 75.147998][ T58] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 75.148045][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.221036][ T6786] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 75.337701][ T6789] 8021q: VLANs not supported on gre0 [ 75.460421][ T6792] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 75.633239][ T58] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 75.633261][ T58] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 75.667770][ T6769] vhci_hcd: connection reset by peer [ 75.668871][ T58] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 75.670987][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 75.671005][ T5815] vhci_hcd vhci_hcd.1: release socket [ 75.671098][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 75.692385][ T58] usb 6-1: USB disconnect, device number 2 [ 76.020626][ T6809] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 76.291304][ T6817] set match dimension is over the limit! [ 76.580905][ T6825] 8021q: VLANs not supported on gre0 [ 76.702581][ T6829] FAULT_INJECTION: forcing a failure. [ 76.702581][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 76.702617][ T6829] CPU: 3 UID: 0 PID: 6829 Comm: syz.2.298 Not tainted syzkaller #0 PREEMPT(full) [ 76.702639][ T6829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.702650][ T6829] Call Trace: [ 76.702657][ T6829] [ 76.702665][ T6829] dump_stack_lvl+0x100/0x190 [ 76.702693][ T6829] should_fail_ex.cold+0x5/0xa [ 76.702720][ T6829] should_failslab+0xc2/0x120 [ 76.702743][ T6829] __kvmalloc_node_noprof+0x113/0x9b0 [ 76.702764][ T6829] ? __pfx___mutex_lock+0x10/0x10 [ 76.702818][ T6829] ? nf_hook_entries_grow+0x255/0x870 [ 76.702846][ T6829] nf_hook_entries_grow+0x255/0x870 [ 76.702868][ T6829] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 76.702900][ T6829] __nf_register_net_hook+0x112/0x780 [ 76.702923][ T6829] nf_register_net_hook+0xdb/0x170 [ 76.702943][ T6829] nf_register_net_hooks+0x5d/0xd0 [ 76.702969][ T6829] nf_synproxy_ipv6_init+0xa5/0x100 [ 76.702992][ T6829] synproxy_tg6_check+0x226/0x330 [ 76.703012][ T6829] ? __pfx_synproxy_tg6_check+0x10/0x10 [ 76.703030][ T6829] xt_check_target+0x117/0x1c0 [ 76.703051][ T6829] find_check_entry.isra.0+0x808/0xa00 [ 76.703077][ T6829] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 76.703107][ T6829] ? kasan_quarantine_put+0x104/0x240 [ 76.703130][ T6829] ? translate_table+0xbd8/0x1770 [ 76.703150][ T6829] ? kfree+0x22b/0x6d0 [ 76.703169][ T6829] ? xt_check_table_hooks+0x206/0x330 [ 76.703193][ T6829] translate_table+0xcb9/0x1770 [ 76.703225][ T6829] ? __pfx_translate_table+0x10/0x10 [ 76.703254][ T6829] do_ip6t_set_ctl+0x689/0xd00 [ 76.703274][ T6829] ? nf_sockopt_find.isra.0+0x222/0x290 [ 76.703291][ T6829] ? nf_sockopt_find.isra.0+0x222/0x290 [ 76.703318][ T6829] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 76.703338][ T6829] ? __mutex_unlock_slowpath+0x35d/0x930 [ 76.703366][ T6829] ? futex_wait+0x11e/0x370 [ 76.703384][ T6829] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.703421][ T6829] ? nf_sockopt_find.isra.0+0x222/0x290 [ 76.703448][ T6829] nf_setsockopt+0x8d/0xf0 [ 76.703476][ T6829] ipv6_setsockopt+0x135/0x170 [ 76.703504][ T6829] tcp_setsockopt+0xa7/0x100 [ 76.703541][ T6829] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.703573][ T6829] do_sock_setsockopt+0xf3/0x1d0 [ 76.703605][ T6829] __sys_setsockopt+0x195/0x220 [ 76.703634][ T6829] __x64_sys_setsockopt+0xbd/0x160 [ 76.703651][ T6829] ? do_syscall_64+0xae/0x790 [ 76.703676][ T6829] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.703701][ T6829] do_syscall_64+0x123/0x790 [ 76.703729][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.703747][ T6829] RIP: 0033:0x7fc553d9e159 [ 76.703763][ T6829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.703776][ T6829] RSP: 002b:00007fc554be2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.703792][ T6829] RAX: ffffffffffffffda RBX: 00007fc554025fa0 RCX: 00007fc553d9e159 [ 76.703804][ T6829] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 76.703814][ T6829] RBP: 00007fc553e3506b R08: 00000000000002d0 R09: 0000000000000000 [ 76.703825][ T6829] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.703837][ T6829] R13: 00007fc554026038 R14: 00007fc554025fa0 R15: 00007ffdd4124ba8 [ 76.703864][ T6829] [ 76.800798][ T6834] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 76.800827][ T6834] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.803542][ T6834] vhci_hcd vhci_hcd.0: Device attached [ 77.066158][ T1040] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 77.228512][ T1040] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 77.237030][ T1040] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.237067][ T1040] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 77.237081][ T1040] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 77.237106][ T1040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.552125][ T6856] set match dimension is over the limit! [ 77.652200][ T6860] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 77.652286][ T6860] FAULT_INJECTION: forcing a failure. [ 77.652286][ T6860] name failslab, interval 1, probability 0, space 0, times 0 [ 77.652311][ T6860] CPU: 3 UID: 0 PID: 6860 Comm: syz.3.308 Not tainted syzkaller #0 PREEMPT(full) [ 77.652333][ T6860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.652345][ T6860] Call Trace: [ 77.652352][ T6860] [ 77.652360][ T6860] dump_stack_lvl+0x100/0x190 [ 77.652395][ T6860] should_fail_ex.cold+0x5/0xa [ 77.652429][ T6860] should_failslab+0xc2/0x120 [ 77.652455][ T6860] __kvmalloc_node_noprof+0x113/0x9b0 [ 77.652497][ T6860] ? lock_acquire+0x1d1/0x380 [ 77.652519][ T6860] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 77.652551][ T6860] __nf_hook_entries_try_shrink+0x164/0x400 [ 77.652582][ T6860] __nf_unregister_net_hook+0x1d2/0x6a0 [ 77.652612][ T6860] nf_unregister_net_hooks+0x11b/0x170 [ 77.652638][ T6860] nf_ct_netns_do_put+0x168/0x2f0 [ 77.652663][ T6860] nf_ct_netns_put+0x39/0x90 [ 77.652685][ T6860] ? __pfx_synproxy_tg6_destroy+0x10/0x10 [ 77.652706][ T6860] cleanup_entry+0x29c/0x3b0 [ 77.652733][ T6860] ? __pfx_cleanup_entry+0x10/0x10 [ 77.652758][ T6860] ? kasan_quarantine_put+0x104/0x240 [ 77.652782][ T6860] ? translate_table+0xbd8/0x1770 [ 77.652804][ T6860] ? kfree+0x22b/0x6d0 [ 77.652832][ T6860] ? xt_check_table_hooks+0x206/0x330 [ 77.652863][ T6860] translate_table+0xd53/0x1770 [ 77.652898][ T6860] ? __pfx_translate_table+0x10/0x10 [ 77.652927][ T6860] do_ip6t_set_ctl+0x689/0xd00 [ 77.652949][ T6860] ? nf_sockopt_find.isra.0+0x222/0x290 [ 77.652974][ T6860] ? nf_sockopt_find.isra.0+0x222/0x290 [ 77.653003][ T6860] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 77.653027][ T6860] ? __mutex_unlock_slowpath+0x35d/0x930 [ 77.653058][ T6860] ? futex_wake+0x220/0x5e0 [ 77.653076][ T6860] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.653115][ T6860] ? nf_sockopt_find.isra.0+0x222/0x290 [ 77.653144][ T6860] nf_setsockopt+0x8d/0xf0 [ 77.653171][ T6860] ipv6_setsockopt+0x135/0x170 [ 77.653199][ T6860] tcp_setsockopt+0xa7/0x100 [ 77.653221][ T6860] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 77.653253][ T6860] do_sock_setsockopt+0xf3/0x1d0 [ 77.653284][ T6860] __sys_setsockopt+0x195/0x220 [ 77.653312][ T6860] __x64_sys_setsockopt+0xbd/0x160 [ 77.653334][ T6860] ? do_syscall_64+0xae/0x790 [ 77.653361][ T6860] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.653389][ T6860] do_syscall_64+0x123/0x790 [ 77.653427][ T6860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.653447][ T6860] RIP: 0033:0x7fc7f519e159 [ 77.653464][ T6860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.653484][ T6860] RSP: 002b:00007fc7f607b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 77.653504][ T6860] RAX: ffffffffffffffda RBX: 00007fc7f5425fa0 RCX: 00007fc7f519e159 [ 77.653516][ T6860] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 77.653527][ T6860] RBP: 00007fc7f523506b R08: 00000000000002d0 R09: 0000000000000000 [ 77.653538][ T6860] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.653550][ T6860] R13: 00007fc7f5426038 R14: 00007fc7f5425fa0 R15: 00007ffc4ee7b8e8 [ 77.653577][ T6860] [ 77.662854][ T1040] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 77.662867][ T1040] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 77.663764][ T1040] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 77.666347][ T6836] vhci_hcd: connection closed [ 77.666834][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 77.666857][ T5815] vhci_hcd vhci_hcd.1: release socket [ 77.666892][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 77.673854][ T1040] usb 6-1: USB disconnect, device number 3 [ 77.866235][ T6865] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 77.918184][ T6865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.934482][ T6868] bond2: (slave geneve2): making interface the new active one [ 77.935526][ T6868] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 77.946684][ T6865] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 77.957451][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.006262][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.006296][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.006318][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.098694][ T6876] 8021q: VLANs not supported on gre0 [ 78.150979][ T6878] netlink: 348 bytes leftover after parsing attributes in process `syz.0.314'. [ 78.278823][ T6884] FAULT_INJECTION: forcing a failure. [ 78.278823][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 78.278862][ T6884] CPU: 0 UID: 0 PID: 6884 Comm: syz.1.317 Not tainted syzkaller #0 PREEMPT(full) [ 78.278888][ T6884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.278900][ T6884] Call Trace: [ 78.278907][ T6884] [ 78.278916][ T6884] dump_stack_lvl+0x100/0x190 [ 78.278971][ T6884] should_fail_ex.cold+0x5/0xa [ 78.279000][ T6884] should_failslab+0xc2/0x120 [ 78.279034][ T6884] __kvmalloc_node_noprof+0x113/0x9b0 [ 78.279061][ T6884] ? __pfx___mutex_lock+0x10/0x10 [ 78.279097][ T6884] ? nf_hook_entries_grow+0x255/0x870 [ 78.279130][ T6884] nf_hook_entries_grow+0x255/0x870 [ 78.279155][ T6884] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 78.279189][ T6884] __nf_register_net_hook+0x112/0x780 [ 78.279215][ T6884] nf_register_net_hook+0xdb/0x170 [ 78.279239][ T6884] nf_register_net_hooks+0x5d/0xd0 [ 78.279265][ T6884] nf_synproxy_ipv6_init+0xa5/0x100 [ 78.279291][ T6884] synproxy_tg6_check+0x226/0x330 [ 78.279314][ T6884] ? __pfx_synproxy_tg6_check+0x10/0x10 [ 78.279334][ T6884] xt_check_target+0x117/0x1c0 [ 78.279372][ T6884] find_check_entry.isra.0+0x808/0xa00 [ 78.279406][ T6884] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 78.279442][ T6884] ? kasan_quarantine_put+0x104/0x240 [ 78.279466][ T6884] ? translate_table+0xbd8/0x1770 [ 78.279509][ T6884] ? kfree+0x22b/0x6d0 [ 78.279539][ T6884] ? xt_check_table_hooks+0x206/0x330 [ 78.279582][ T6884] translate_table+0xcb9/0x1770 [ 78.279616][ T6884] ? __pfx_translate_table+0x10/0x10 [ 78.279646][ T6884] do_ip6t_set_ctl+0x689/0xd00 [ 78.279666][ T6884] ? nf_sockopt_find.isra.0+0x222/0x290 [ 78.279687][ T6884] ? nf_sockopt_find.isra.0+0x222/0x290 [ 78.279710][ T6884] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 78.279730][ T6884] ? __mutex_unlock_slowpath+0x35d/0x930 [ 78.279759][ T6884] ? futex_wait+0x11e/0x370 [ 78.279778][ T6884] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.279814][ T6884] ? nf_sockopt_find.isra.0+0x222/0x290 [ 78.279844][ T6884] nf_setsockopt+0x8d/0xf0 [ 78.279871][ T6884] ipv6_setsockopt+0x135/0x170 [ 78.279899][ T6884] tcp_setsockopt+0xa7/0x100 [ 78.279922][ T6884] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 78.279955][ T6884] do_sock_setsockopt+0xf3/0x1d0 [ 78.279987][ T6884] __sys_setsockopt+0x195/0x220 [ 78.280018][ T6884] __x64_sys_setsockopt+0xbd/0x160 [ 78.280040][ T6884] ? do_syscall_64+0xae/0x790 [ 78.280068][ T6884] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.280097][ T6884] do_syscall_64+0x123/0x790 [ 78.280129][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.280150][ T6884] RIP: 0033:0x7faa0299e159 [ 78.280168][ T6884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.280187][ T6884] RSP: 002b:00007faa03922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.280208][ T6884] RAX: ffffffffffffffda RBX: 00007faa02c25fa0 RCX: 00007faa0299e159 [ 78.280222][ T6884] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 78.280234][ T6884] RBP: 00007faa02a3506b R08: 00000000000002d0 R09: 0000000000000000 [ 78.280245][ T6884] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.280257][ T6884] R13: 00007faa02c26038 R14: 00007faa02c25fa0 R15: 00007ffed6034738 [ 78.280285][ T6884] [ 78.657516][ T6890] Console: switching to colour dummy device 80x25 [ 78.699457][ T6897] set match dimension is over the limit! [ 78.757406][ T43] kauditd_printk_skb: 735 callbacks suppressed [ 78.757427][ T43] audit: type=1400 audit(1790010178.728:5256): avc: denied { read } for pid=6898 comm="syz.2.323" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.757456][ T43] audit: type=1400 audit(1790010178.738:5257): avc: denied { read open } for pid=6898 comm="syz.2.323" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.757478][ T43] audit: type=1400 audit(1790010178.738:5258): avc: denied { create } for pid=6889 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.803472][ T43] audit: type=1400 audit(1790010178.778:5259): avc: denied { mounton } for pid=6901 comm="syz.0.324" path="/83/sys" dev="tmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.804632][ T43] audit: type=1400 audit(1790010178.778:5260): avc: denied { mount } for pid=6901 comm="syz.0.324" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.824802][ T6895] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 78.844905][ T43] audit: type=1400 audit(1790010178.818:5261): avc: denied { ioctl } for pid=6898 comm="syz.2.323" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.854915][ T6895] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 78.855100][ T6895] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 78.855171][ T6895] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 78.855533][ T6895] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 78.869025][ T6895] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 78.885183][ T6902] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.888582][ T43] audit: type=1400 audit(1790010178.868:5262): avc: denied { allowed } for pid=6898 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.893271][ T43] audit: type=1400 audit(1790010178.868:5263): avc: denied { prog_load } for pid=6898 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.894626][ T43] audit: type=1400 audit(1790010178.868:5264): avc: denied { bpf } for pid=6898 comm="syz.2.323" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.899196][ T43] audit: type=1400 audit(1790010178.878:5265): avc: denied { write } for pid=6898 comm="syz.2.323" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.923498][ T6895] pci 0000:00:01.0: Adding to iommu group 1 [ 78.929409][ T6895] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 78.929445][ T6895] pci 0000:00:01.0: vgaarb: bridge control possible [ 78.929455][ T6895] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 78.945192][ T6895] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 78.955951][ T6895] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 78.961802][ T6895] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 79.028301][ T6895] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 79.028361][ T6895] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 79.029847][ T6895] [drm] features: -virgl +edid -resource_blob -host_visible [ 79.029863][ T6895] [drm] features: -context_init -blob_alignment [ 79.050449][ T6895] ------------[ cut here ]------------ [ 79.050460][ T6895] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 79.050469][ T6895] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#2: syz.1.319/6895 [ 79.061206][ T6895] Modules linked in: [ 79.062945][ T6895] CPU: 2 UID: 0 PID: 6895 Comm: syz.1.319 Not tainted syzkaller #0 PREEMPT(full) [ 79.066536][ T6895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.070817][ T6895] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 79.073279][ T6895] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 f2 1a 70 09 85 c0 75 e0 48 8d 3d 97 f0 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 72 1c 70 09 48 85 c0 0f [ 79.081132][ T6895] RSP: 0018:ffffc9002431ef18 EFLAGS: 00010246 [ 79.083372][ T6895] RAX: 0000000000000000 RBX: ffff888025a057c0 RCX: fffff52004863dbe [ 79.086323][ T6895] RDX: 0000000000000000 RSI: ffffffff8c91a0e0 RDI: ffffffff9149ccb0 [ 79.089827][ T6895] RBP: ffffffff8c91a0e0 R08: 0000000000000000 R09: fffffbfff228a88b [ 79.093223][ T6895] R10: ffffc9002431ef18 R11: 0000000000000001 R12: 0000000000000000 [ 79.096719][ T6895] R13: ffffc9002431ef88 R14: 00000000000000d8 R15: ffff88804b174fce [ 79.099372][ T6895] FS: 00007faa039016c0(0000) GS:ffff8880d5d54000(0000) knlGS:0000000000000000 [ 79.102472][ T6895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.104727][ T6895] CR2: 00007f0da533d473 CR3: 000000005a0b9000 CR4: 0000000000352ef0 [ 79.107753][ T6895] Call Trace: [ 79.109132][ T6895] [ 79.110266][ T6895] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 79.112177][ T6895] ? __pfx__printk+0x10/0x10 [ 79.113914][ T6895] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 79.116111][ T6895] ? lockdep_init_map_type+0x5c/0x250 [ 79.118370][ T6895] virtio_gpu_init.cold+0x40d/0x1293 [ 79.120204][ T6895] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 79.122756][ T6895] ? __pfx_virtio_gpu_init+0x10/0x10 [ 79.124972][ T6895] ? is_console_locked+0x9/0x20 [ 79.127279][ T6895] ? con_is_bound+0x141/0x190 [ 79.129170][ T6895] ? vga_remove_vgacon+0x21/0x30 [ 79.131247][ T6895] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 79.133602][ T6895] virtio_gpu_probe+0x21c/0x360 [ 79.135330][ T6895] virtio_dev_probe+0x6a2/0xbe0 [ 79.137210][ T6895] ? __pfx_virtio_dev_probe+0x10/0x10 [ 79.138836][ T6895] ? kernfs_create_link+0x1bd/0x240 [ 79.140526][ T6895] ? kernfs_put+0x3f/0x60 [ 79.142093][ T6895] ? sysfs_do_create_link_sd+0xbb/0x140 [ 79.144109][ T6895] ? sysfs_create_link+0x68/0xc0 [ 79.146268][ T6895] ? __pfx_virtio_dev_probe+0x10/0x10 [ 79.148256][ T6895] really_probe+0x241/0xa60 [ 79.149998][ T6895] __driver_probe_device+0x210/0x460 [ 79.151965][ T6895] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.154134][ T6895] driver_probe_device+0x4a/0x140 [ 79.156361][ T6895] __device_attach_driver+0x1df/0x320 [ 79.158379][ T6895] ? __pfx___device_attach_driver+0x10/0x10 [ 79.160874][ T6895] bus_for_each_drv+0x159/0x1e0 [ 79.163140][ T6895] ? __pfx_bus_for_each_drv+0x10/0x10 [ 79.165569][ T6895] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.167670][ T6895] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.169688][ T6895] __device_attach+0x1e4/0x4d0 [ 79.171494][ T6895] ? __pfx___device_attach+0x10/0x10 [ 79.173376][ T6895] ? do_raw_spin_unlock+0x145/0x1e0 [ 79.175026][ T6895] device_initial_probe+0xaf/0xd0 [ 79.176855][ T6895] bus_probe_device+0x64/0x160 [ 79.178278][ T6895] device_add+0x121d/0x1970 [ 79.179780][ T6895] ? __pfx_device_add+0x10/0x10 [ 79.181289][ T6895] ? __pfx___might_resched+0x10/0x10 [ 79.183146][ T6895] ? __init_waitqueue_head+0xca/0x150 [ 79.185310][ T6895] ? ioread8+0x8f/0xd0 [ 79.187049][ T6895] register_virtio_device+0x4f0/0x5d0 [ 79.189106][ T6895] ? __pfx_register_virtio_device+0x10/0x10 [ 79.191751][ T6895] ? __pfx_pcibios_set_master+0x10/0x10 [ 79.194066][ T6895] ? __raw_spin_lock_init+0x3a/0x110 [ 79.196686][ T6895] ? __pfx_virtio_pci_probe+0x10/0x10 [ 79.198702][ T6895] virtio_pci_probe+0x255/0x410 [ 79.200834][ T6895] local_pci_probe+0xdd/0x1b0 [ 79.202342][ T6895] pci_call_probe+0x176/0x800 [ 79.204099][ T6895] ? pci_match_device+0x147/0x7d0 [ 79.206144][ T6895] ? __pfx_pci_call_probe+0x10/0x10 [ 79.207932][ T6895] ? __pfx_pci_match_device+0x10/0x10 [ 79.209905][ T6895] ? pci_find_host_bridge+0x3c/0x80 [ 79.210538][ T6906] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 79.210563][ T6906] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 79.212645][ T6906] vhci_hcd vhci_hcd.0: Device attached [ 79.220008][ T6895] ? up_write+0x2dc/0x5b0 [ 79.221849][ T6895] pci_device_probe+0x25b/0x400 [ 79.223520][ T6895] ? __pfx_pci_device_probe+0x10/0x10 [ 79.225407][ T6895] ? kernfs_create_link+0x1bd/0x240 [ 79.227600][ T6895] ? sysfs_create_link+0x68/0xc0 [ 79.229397][ T6895] ? __pfx_pci_device_probe+0x10/0x10 [ 79.231500][ T6895] really_probe+0x241/0xa60 [ 79.233060][ T6895] __driver_probe_device+0x210/0x460 [ 79.234890][ T6895] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.237673][ T6895] driver_probe_device+0x4a/0x140 [ 79.240008][ T6895] __device_attach_driver+0x1df/0x320 [ 79.242101][ T6895] ? __pfx___device_attach_driver+0x10/0x10 [ 79.244220][ T6895] bus_for_each_drv+0x159/0x1e0 [ 79.245939][ T6895] ? __pfx_bus_for_each_drv+0x10/0x10 [ 79.248169][ T6895] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.250005][ T6895] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.252083][ T6895] __device_attach+0x1e4/0x4d0 [ 79.254186][ T6895] ? __pfx___device_attach+0x10/0x10 [ 79.256864][ T6895] ? do_raw_spin_unlock+0x145/0x1e0 [ 79.258829][ T6895] device_initial_probe+0xaf/0xd0 [ 79.260843][ T6895] pci_bus_add_device+0xc5/0x100 [ 79.262713][ T6895] pci_bus_add_devices+0x9a/0x1f0 [ 79.264579][ T6895] pci_rescan_bus+0x2a/0x40 [ 79.266682][ T6895] rescan_store+0xfb/0x130 [ 79.268245][ T6895] ? __pfx_rescan_store+0x10/0x10 [ 79.269917][ T6895] ? sysfs_file_kobj+0xe4/0x290 [ 79.271989][ T6895] ? __pfx_rescan_store+0x10/0x10 [ 79.274022][ T6895] bus_attr_store+0x74/0xb0 [ 79.275872][ T6895] ? __pfx_bus_attr_store+0x10/0x10 [ 79.278110][ T6895] sysfs_kf_write+0xf2/0x150 [ 79.280247][ T6895] kernfs_fop_write_iter+0x3e0/0x5f0 [ 79.282509][ T6895] ? __pfx_sysfs_kf_write+0x10/0x10 [ 79.285075][ T6895] vfs_write+0x6af/0x1050 [ 79.287109][ T6895] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 79.289367][ T6895] ? __pfx_vfs_write+0x10/0x10 [ 79.291197][ T6895] ? find_held_lock+0x2b/0x80 [ 79.292841][ T6895] ksys_write+0x12a/0x250 [ 79.294414][ T6895] ? __pfx_ksys_write+0x10/0x10 [ 79.296857][ T6895] do_syscall_64+0x123/0x790 [ 79.298381][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.300459][ T6895] RIP: 0033:0x7faa0299e159 [ 79.301963][ T6895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.309401][ T6895] RSP: 002b:00007faa03901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.312141][ T6895] RAX: ffffffffffffffda RBX: 00007faa02c26090 RCX: 00007faa0299e159 [ 79.314598][ T6895] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 79.317866][ T6895] RBP: 00007faa02a3506b R08: 0000000000000000 R09: 0000000000000000 [ 79.320499][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.323051][ T6895] R13: 00007faa02c26128 R14: 00007faa02c26090 R15: 00007ffed6034738 [ 79.325859][ T6895] [ 79.326879][ T6895] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.329111][ T6895] CPU: 2 UID: 0 PID: 6895 Comm: syz.1.319 Not tainted syzkaller #0 PREEMPT(full) [ 79.332564][ T6895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.336715][ T6895] Call Trace: [ 79.338005][ T6895] [ 79.338973][ T6895] dump_stack_lvl+0x100/0x190 [ 79.340442][ T6895] vpanic+0x553/0x970 [ 79.341720][ T6895] ? __pfx_vpanic+0x10/0x10 [ 79.343208][ T6895] panic+0xd1/0xe0 [ 79.344634][ T6895] ? __pfx_panic+0x10/0x10 [ 79.346317][ T6895] check_panic_on_warn.cold+0x19/0x34 [ 79.348372][ T6895] ? __kmem_cache_create_args+0xa9/0x430 [ 79.350496][ T6895] __warn.cold+0x191/0x318 [ 79.352128][ T6895] __report_bug+0x30f/0x440 [ 79.353979][ T6895] ? __kmem_cache_create_args+0xa9/0x430 [ 79.356219][ T6895] ? __pfx___report_bug+0x10/0x10 [ 79.358243][ T6895] ? __mutex_lock+0x26c/0x1bd0 [ 79.360476][ T6895] ? __kmem_cache_create_args+0x44/0x430 [ 79.362826][ T6895] report_bug_entry+0xe2/0x290 [ 79.364811][ T6895] ? __kmem_cache_create_args+0xac/0x430 [ 79.366754][ T6895] handle_bug+0x1cd/0x2a0 [ 79.368392][ T6895] exc_invalid_op+0x17/0x50 [ 79.370187][ T6895] asm_exc_invalid_op+0x1a/0x20 [ 79.372118][ T6895] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 79.374185][ T6895] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 f2 1a 70 09 85 c0 75 e0 48 8d 3d 97 f0 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 72 1c 70 09 48 85 c0 0f [ 79.381610][ T6895] RSP: 0018:ffffc9002431ef18 EFLAGS: 00010246 [ 79.384657][ T6895] RAX: 0000000000000000 RBX: ffff888025a057c0 RCX: fffff52004863dbe [ 79.388426][ T6895] RDX: 0000000000000000 RSI: ffffffff8c91a0e0 RDI: ffffffff9149ccb0 [ 79.391498][ T6895] RBP: ffffffff8c91a0e0 R08: 0000000000000000 R09: fffffbfff228a88b [ 79.394339][ T6895] R10: ffffc9002431ef18 R11: 0000000000000001 R12: 0000000000000000 [ 79.397324][ T6895] R13: ffffc9002431ef88 R14: 00000000000000d8 R15: ffff88804b174fce [ 79.400071][ T6895] ? __kmem_cache_create_args+0x9e/0x430 [ 79.401865][ T6895] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 79.403519][ T6895] ? __pfx__printk+0x10/0x10 [ 79.404994][ T6895] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 79.407043][ T6895] ? lockdep_init_map_type+0x5c/0x250 [ 79.408773][ T6895] virtio_gpu_init.cold+0x40d/0x1293 [ 79.410419][ T6895] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 79.412953][ T6895] ? __pfx_virtio_gpu_init+0x10/0x10 [ 79.414786][ T6895] ? is_console_locked+0x9/0x20 [ 79.416424][ T6895] ? con_is_bound+0x141/0x190 [ 79.418002][ T6895] ? vga_remove_vgacon+0x21/0x30 [ 79.419886][ T6895] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 79.422514][ T6895] virtio_gpu_probe+0x21c/0x360 [ 79.424376][ T6895] virtio_dev_probe+0x6a2/0xbe0 [ 79.426271][ T6895] ? __pfx_virtio_dev_probe+0x10/0x10 [ 79.428329][ T6895] ? kernfs_create_link+0x1bd/0x240 [ 79.430374][ T6895] ? kernfs_put+0x3f/0x60 [ 79.432041][ T6895] ? sysfs_do_create_link_sd+0xbb/0x140 [ 79.434042][ T6895] ? sysfs_create_link+0x68/0xc0 [ 79.436380][ T6895] ? __pfx_virtio_dev_probe+0x10/0x10 [ 79.438857][ T6895] really_probe+0x241/0xa60 [ 79.440678][ T6895] __driver_probe_device+0x210/0x460 [ 79.442445][ T6895] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.444726][ T6895] driver_probe_device+0x4a/0x140 [ 79.446628][ T6895] __device_attach_driver+0x1df/0x320 [ 79.448162][ T6895] ? __pfx___device_attach_driver+0x10/0x10 [ 79.449932][ T6895] bus_for_each_drv+0x159/0x1e0 [ 79.451854][ T6895] ? __pfx_bus_for_each_drv+0x10/0x10 [ 79.454119][ T6895] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.456244][ T6895] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.458563][ T6895] __device_attach+0x1e4/0x4d0 [ 79.460645][ T6895] ? __pfx___device_attach+0x10/0x10 [ 79.462758][ T6895] ? do_raw_spin_unlock+0x145/0x1e0 [ 79.464709][ T6895] device_initial_probe+0xaf/0xd0 [ 79.466569][ T6895] bus_probe_device+0x64/0x160 [ 79.468368][ T6895] device_add+0x121d/0x1970 [ 79.470051][ T6895] ? __pfx_device_add+0x10/0x10 [ 79.471826][ T6895] ? __pfx___might_resched+0x10/0x10 [ 79.473896][ T6895] ? __init_waitqueue_head+0xca/0x150 [ 79.475809][ T6895] ? ioread8+0x8f/0xd0 [ 79.477328][ T6895] register_virtio_device+0x4f0/0x5d0 [ 79.479450][ T6895] ? __pfx_register_virtio_device+0x10/0x10 [ 79.481864][ T6895] ? __pfx_pcibios_set_master+0x10/0x10 [ 79.483970][ T6895] ? __raw_spin_lock_init+0x3a/0x110 [ 79.485876][ T6895] ? __pfx_virtio_pci_probe+0x10/0x10 [ 79.487767][ T6895] virtio_pci_probe+0x255/0x410 [ 79.489265][ T6895] local_pci_probe+0xdd/0x1b0 [ 79.490798][ T6895] pci_call_probe+0x176/0x800 [ 79.492553][ T6895] ? pci_match_device+0x147/0x7d0 [ 79.494600][ T6895] ? __pfx_pci_call_probe+0x10/0x10 [ 79.496992][ T6895] ? __pfx_pci_match_device+0x10/0x10 [ 79.499326][ T6895] ? pci_find_host_bridge+0x3c/0x80 [ 79.501382][ T6895] ? up_write+0x2dc/0x5b0 [ 79.502899][ T6895] pci_device_probe+0x25b/0x400 [ 79.504493][ T6895] ? __pfx_pci_device_probe+0x10/0x10 [ 79.506363][ T6895] ? kernfs_create_link+0x1bd/0x240 [ 79.508240][ T6895] ? sysfs_create_link+0x68/0xc0 [ 79.510201][ T6895] ? __pfx_pci_device_probe+0x10/0x10 [ 79.512392][ T6895] really_probe+0x241/0xa60 [ 79.514228][ T6895] __driver_probe_device+0x210/0x460 [ 79.516169][ T6895] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 79.518356][ T6895] driver_probe_device+0x4a/0x140 [ 79.520148][ T6895] __device_attach_driver+0x1df/0x320 [ 79.522193][ T6895] ? __pfx___device_attach_driver+0x10/0x10 [ 79.524837][ T6895] bus_for_each_drv+0x159/0x1e0 [ 79.527187][ T6895] ? __pfx_bus_for_each_drv+0x10/0x10 [ 79.529337][ T6895] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.531082][ T6895] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.533293][ T6895] __device_attach+0x1e4/0x4d0 [ 79.534699][ T6895] ? __pfx___device_attach+0x10/0x10 [ 79.536317][ T6895] ? do_raw_spin_unlock+0x145/0x1e0 [ 79.538015][ T6895] device_initial_probe+0xaf/0xd0 [ 79.539773][ T6895] pci_bus_add_device+0xc5/0x100 [ 79.541616][ T6895] pci_bus_add_devices+0x9a/0x1f0 [ 79.543497][ T6895] pci_rescan_bus+0x2a/0x40 [ 79.545147][ T6895] rescan_store+0xfb/0x130 [ 79.546879][ T6895] ? __pfx_rescan_store+0x10/0x10 [ 79.548903][ T6895] ? sysfs_file_kobj+0xe4/0x290 [ 79.551051][ T6895] ? __pfx_rescan_store+0x10/0x10 [ 79.552891][ T6895] bus_attr_store+0x74/0xb0 [ 79.554453][ T6895] ? __pfx_bus_attr_store+0x10/0x10 [ 79.556426][ T6895] sysfs_kf_write+0xf2/0x150 [ 79.558202][ T6895] kernfs_fop_write_iter+0x3e0/0x5f0 [ 79.560636][ T6895] ? __pfx_sysfs_kf_write+0x10/0x10 [ 79.562861][ T6895] vfs_write+0x6af/0x1050 [ 79.564569][ T6895] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 79.566892][ T6895] ? __pfx_vfs_write+0x10/0x10 [ 79.569167][ T6895] ? find_held_lock+0x2b/0x80 [ 79.573099][ T6895] ksys_write+0x12a/0x250 [ 79.575411][ T6895] ? __pfx_ksys_write+0x10/0x10 [ 79.577091][ T6895] do_syscall_64+0x123/0x790 [ 79.578579][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.581006][ T6895] RIP: 0033:0x7faa0299e159 [ 79.582740][ T6895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.589974][ T6895] RSP: 002b:00007faa03901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.593248][ T6895] RAX: ffffffffffffffda RBX: 00007faa02c26090 RCX: 00007faa0299e159 [ 79.596390][ T6895] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 79.600007][ T6895] RBP: 00007faa02a3506b R08: 0000000000000000 R09: 0000000000000000 [ 79.603785][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.606714][ T6895] R13: 00007faa02c26128 R14: 00007faa02c26090 R15: 00007ffed6034738 [ 79.609714][ T6895] [ 79.611662][ T6895] Kernel Offset: disabled [ 79.613360][ T6895] Rebooting in 86400 seconds..