last executing test programs: 3.300269492s ago: executing program 3 (id=743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.300058819s ago: executing program 3 (id=744): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x21600, 0xd, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 3.220383287s ago: executing program 3 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001280)="0400", 0x2}], 0x1, 0x0, 0x40000000) 3.177606023s ago: executing program 3 (id=748): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f0000002200)='.\x00', 0x0, 0x320c465, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101020, 0x0) 3.177386928s ago: executing program 3 (id=749): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xd) 2.920113652s ago: executing program 3 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 928.955632ms ago: executing program 2 (id=788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 928.201135ms ago: executing program 2 (id=790): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x10141, 0x0) 848.518254ms ago: executing program 2 (id=791): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x80002, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x804) 848.35089ms ago: executing program 0 (id=792): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xe000200c}) 777.900646ms ago: executing program 2 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$P9_RWRITE(r0, &(0x7f0000002900)={0xb, 0x77, 0x2, 0x4}, 0xb) 777.610046ms ago: executing program 0 (id=794): r0 = syz_open_dev$evdev(&(0x7f0000007fc0), 0x1fcc, 0x80) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000500)=""/23) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000000c0)=""/230, &(0x7f00000001c0)=0xe6) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='0x1d6b', 0x6) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') add_key$keyring(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 777.363125ms ago: executing program 0 (id=795): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008800) write(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x33ff, &(0x7f0000000280)={0x0, 0x6af0, 0x80, 0x3, 0x161}, 0x0, 0x0, &(0x7f0000000380)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b020ff00080211000001080211000000505050505050"], 0x40}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) 716.523987ms ago: executing program 2 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) 618.576923ms ago: executing program 0 (id=799): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe342"], 0x10b8}, 0x106) 617.959363ms ago: executing program 2 (id=801): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r4, 0x4b71, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xbf, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x401, 0x9, 0x9, 0x7fff, 0xf, 0xa, 0x9, 0xffd, 0x8, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) 550.620076ms ago: executing program 0 (id=803): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0xe000200c}) 550.427767ms ago: executing program 1 (id=804): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 S', 0x1b, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) 550.28852ms ago: executing program 0 (id=805): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, 0x0, 0x0, 0xc040) ioprio_set$pid(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x111842, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 449.805302ms ago: executing program 1 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$P9_RWRITE(r0, &(0x7f0000002900)={0xb, 0x77, 0x2, 0x4}, 0xb) 306.79808ms ago: executing program 1 (id=807): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 258.887188ms ago: executing program 1 (id=808): madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000240), &(0x7f0000000340)=r2}, 0x20) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@random="cd25bedc5420", @empty, @void, {@x25={0x805, {0x0, 0x9e, 0x1}}}}, 0x0) 137.252145ms ago: executing program 1 (id=809): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 0s ago: executing program 1 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) kernel console output (not intermixed with test programs): 0) entered disabled state [ 47.982913][ T5729] bridge_slave_0: entered allmulticast mode [ 47.984184][ T5729] bridge_slave_0: entered promiscuous mode [ 47.987286][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.987357][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.987558][ T5729] bridge_slave_1: entered allmulticast mode [ 47.988333][ T5729] bridge_slave_1: entered promiscuous mode [ 47.999846][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.000004][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.000253][ T5735] bridge_slave_1: entered allmulticast mode [ 48.001511][ T5735] bridge_slave_1: entered promiscuous mode [ 48.039821][ T5726] team0: Port device team_slave_0 added [ 48.041318][ T5726] team0: Port device team_slave_1 added [ 48.051469][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.051479][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.051492][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.054239][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.075418][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.075433][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.075452][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.083623][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.083904][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.083913][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.083926][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.085340][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.085823][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.085835][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.085854][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.102203][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.143073][ T5729] team0: Port device team_slave_0 added [ 48.158724][ T5735] team0: Port device team_slave_0 added [ 48.163501][ T5736] hsr_slave_0: entered promiscuous mode [ 48.163992][ T5736] hsr_slave_1: entered promiscuous mode [ 48.168015][ T5729] team0: Port device team_slave_1 added [ 48.169785][ T5735] team0: Port device team_slave_1 added [ 48.205431][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.205443][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.205455][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.227835][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.227848][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.227860][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.231053][ T5726] hsr_slave_0: entered promiscuous mode [ 48.231590][ T5726] hsr_slave_1: entered promiscuous mode [ 48.231923][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 48.231976][ T5726] Cannot create hsr debugfs directory [ 48.244154][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.244168][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.244186][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.245613][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.245622][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.245635][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.323657][ T5729] hsr_slave_0: entered promiscuous mode [ 48.324106][ T5729] hsr_slave_1: entered promiscuous mode [ 48.324397][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 48.324408][ T5729] Cannot create hsr debugfs directory [ 48.354542][ T5735] hsr_slave_0: entered promiscuous mode [ 48.354956][ T5735] hsr_slave_1: entered promiscuous mode [ 48.355248][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 48.355259][ T5735] Cannot create hsr debugfs directory [ 48.510573][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.517823][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.532025][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.534310][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.550374][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.552197][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.566259][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.569248][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.606552][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.606880][ T5736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.607446][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.607491][ T5736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.611090][ T5726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.616933][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.617582][ T5726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.621793][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.622207][ T5726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.627813][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.633364][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.635730][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.657160][ T5726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.659984][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.709325][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.712066][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.712876][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.714539][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.715571][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.718445][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.720345][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.724150][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.784162][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.802473][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.804911][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.806082][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.810026][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.815753][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.818455][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.819086][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.821223][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.834301][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.847169][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.847217][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.860961][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.861006][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.875570][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.903269][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.921911][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.921957][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.930766][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.936629][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.936744][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.960377][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.970826][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.974574][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.974619][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.987016][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.987081][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.995776][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.009954][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.010032][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.028191][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.028279][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.083338][ T5735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.107195][ T5733] Bluetooth: hci0: command tx timeout [ 49.186204][ T5733] Bluetooth: hci3: command tx timeout [ 49.186368][ T5733] Bluetooth: hci1: command tx timeout [ 49.196716][ T5728] Bluetooth: hci2: command tx timeout [ 49.211300][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.239173][ T5736] veth0_vlan: entered promiscuous mode [ 49.241761][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.245953][ T5736] veth1_vlan: entered promiscuous mode [ 49.285288][ T5736] veth0_macvtap: entered promiscuous mode [ 49.290412][ T5736] veth1_macvtap: entered promiscuous mode [ 49.292477][ T5726] veth0_vlan: entered promiscuous mode [ 49.301344][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.303532][ T5726] veth1_vlan: entered promiscuous mode [ 49.308770][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.310711][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.319672][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.323830][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.374206][ T5726] veth0_macvtap: entered promiscuous mode [ 49.398239][ T5726] veth1_macvtap: entered promiscuous mode [ 49.400627][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.400639][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.403123][ T5735] veth0_vlan: entered promiscuous mode [ 49.406099][ T5729] veth0_vlan: entered promiscuous mode [ 49.415725][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.423756][ T5729] veth1_vlan: entered promiscuous mode [ 49.424908][ T5735] veth1_vlan: entered promiscuous mode [ 49.437335][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.442464][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.442476][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.470138][ T5729] veth0_macvtap: entered promiscuous mode [ 49.481699][ T5729] veth1_macvtap: entered promiscuous mode [ 49.485835][ T5735] veth0_macvtap: entered promiscuous mode [ 49.489355][ T5735] veth1_macvtap: entered promiscuous mode [ 49.500224][ T5736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.517999][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.524085][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.524990][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.525002][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.528907][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.529756][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.581172][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.581186][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.621780][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.621794][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.626671][ T5540] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.626879][ T5540] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627039][ T5540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627057][ T5540] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627074][ T5540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627091][ T5540] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627108][ T5540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627125][ T5540] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627141][ T5540] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627158][ T5540] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627175][ T5540] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627192][ T5540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627209][ T5540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627226][ T5540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.627243][ T5540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.655701][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.655713][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.696275][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.696288][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.718953][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.718974][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.779139][ T5889] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 49.787334][ T5883] zero sized request [ 49.832999][ T5892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.833036][ T5892] IPv6: NLM_F_CREATE should be set when creating new route [ 49.833054][ T5892] IPv6: NLM_F_CREATE should be set when creating new route [ 49.850204][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 49.850228][ T5902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 49.916720][ T5903] null_blk: rnullb0: using native zone append [ 49.931889][ T5834] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 49.935630][ T5907] ufs: You didn't specify the type of your ufs filesystem [ 49.935630][ T5907] [ 49.935630][ T5907] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 49.935630][ T5907] [ 49.935630][ T5907] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 49.935647][ T5907] ufs: failed to set blocksize [ 49.935816][ T5834] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 49.939700][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9'. [ 50.003396][ T5903] null_blk: disk rnullb0 created [ 50.051976][ T5905] ceph: No mds server is up or the cluster is laggy [ 50.268240][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 50.455232][ T5930] ftl_cs: FTL header not found. [ 50.455603][ T5934] netlink: Unknown NAT attribute (type=13925, max=9) [ 50.455622][ T5934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.476446][ T5930] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 50.518950][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 50.537864][ T5937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.787226][ T5950] xt_REDIRECT: bad rangesize 26624. [ 50.789564][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 51.009842][ T5967] ubi0: attaching mtd0 [ 51.011335][ T5967] ubi0: scanning is finished [ 51.011344][ T5967] ubi0: empty MTD device detected [ 51.187773][ T5728] Bluetooth: hci0: command tx timeout [ 51.266645][ T5728] Bluetooth: hci1: command tx timeout [ 51.266677][ T5728] Bluetooth: hci3: command tx timeout [ 51.276335][ T5733] Bluetooth: hci2: command tx timeout [ 51.340481][ T5967] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 51.340499][ T5967] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 51.340510][ T5967] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 51.340519][ T5967] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 51.340528][ T5967] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 51.340536][ T5967] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 51.340544][ T5967] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3809177148 [ 51.340554][ T5967] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 51.341442][ T5970] ubi0: background thread "ubi_bgt0d" started, PID 5970 [ 51.529992][ T5977] Zero length message leads to an empty skb [ 51.668788][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'. [ 51.668802][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'. [ 51.668809][ T5988] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 51.674561][ T5988] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 51.734923][ T5948] Set syz1 is full, maxelem 65536 reached [ 52.106308][ T5812] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.267365][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 52.269502][ T5812] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 52.272096][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.285586][ T5812] usb 6-1: config 0 descriptor?? [ 52.301670][ T5812] as10x_usb: device has been detected [ 52.302324][ T5812] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 52.323792][ T5812] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 52.343971][ T43] kauditd_printk_skb: 103 callbacks suppressed [ 52.343982][ T43] audit: type=1400 audit(1790329408.783:271): avc: denied { firmware_load } for pid=5812 comm="kworker/1:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 52.345267][ T5812] as10x_usb: error during firmware upload part1 [ 52.345708][ T5812] Registered device nBox DVB-T Dongle [ 52.364000][ T43] audit: type=1400 audit(1790329408.803:272): avc: denied { write } for pid=6001 comm="syz.2.36" path="socket:[9185]" dev="sockfs" ino=9185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.364108][ T6002] Bluetooth: MGMT ver 1.23 [ 52.558355][ T5820] usb 6-1: USB disconnect, device number 2 [ 52.579320][ T5820] Unregistered device nBox DVB-T Dongle [ 52.581458][ T5820] as10x_usb: device has been disconnected [ 52.609009][ T43] audit: type=1400 audit(1790329409.053:273): avc: denied { create } for pid=6007 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.723417][ T43] audit: type=1400 audit(1790329409.163:274): avc: denied { write } for pid=6007 comm="syz.0.38" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.726641][ T6012] 8021q: VLANs not supported on wg2 [ 52.728640][ T6013] 8021q: VLANs not supported on wg2 [ 53.125413][ T6019] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 53.127437][ T43] audit: type=1400 audit(1790329409.563:275): avc: denied { ioctl } for pid=6018 comm="syz.1.40" path="socket:[10116]" dev="sockfs" ino=10116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.127478][ T43] audit: type=1400 audit(1790329409.563:276): avc: denied { write } for pid=6018 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.266214][ T5733] Bluetooth: hci0: command tx timeout [ 53.346322][ T5733] Bluetooth: hci2: command tx timeout [ 53.346345][ T5733] Bluetooth: hci3: command tx timeout [ 53.346356][ T5733] Bluetooth: hci1: command tx timeout [ 53.380370][ T6034] bond0: (slave bond_slave_0): Releasing backup interface [ 53.450257][ T43] audit: type=1400 audit(1790329409.893:277): avc: denied { ioctl } for pid=6037 comm="syz.1.49" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.484027][ T6041] bond0: (slave bond_slave_0): Releasing backup interface [ 53.548604][ T6045] bond0: option slaves: interface -bond_slave_0 does not exist! [ 53.572495][ T6047] ufs: You didn't specify the type of your ufs filesystem [ 53.572495][ T6047] [ 53.572495][ T6047] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 53.572495][ T6047] [ 53.572495][ T6047] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 53.572513][ T6047] ufs: failed to set blocksize [ 53.582319][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.53'. [ 53.659073][ T6052] cdrom: dropping to single frame dma [ 53.690899][ T43] audit: type=1400 audit(1790329410.133:278): avc: denied { unlink } for pid=6050 comm="syz.0.54" name="#1" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 53.691685][ T6059] overlayfs: upper fs does not support file handles, falling back to index=off. [ 53.693946][ T43] audit: type=1400 audit(1790329410.133:279): avc: denied { mount } for pid=6050 comm="syz.0.54" name="/" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.695563][ T6061] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 53.868798][ T6075] netlink: 36 bytes leftover after parsing attributes in process `syz.1.63'. [ 54.550070][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 54.694908][ T64] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 54.717517][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 54.718462][ T42] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 54.719452][ T42] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 54.719489][ T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.719507][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 54.719525][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.719544][ T42] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.719574][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.722716][ T6108] warning: `syz.0.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.817356][ T6094] ceph: No mds server is up or the cluster is laggy [ 54.908930][ T6119] ufs: You didn't specify the type of your ufs filesystem [ 54.908930][ T6119] [ 54.908930][ T6119] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 54.908930][ T6119] [ 54.908930][ T6119] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 54.908949][ T6119] ufs: failed to set blocksize [ 54.909749][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 54.910618][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.81'. [ 54.913514][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 54.917734][ T6116] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 54.922235][ T6116] erspan1: entered allmulticast mode [ 54.938091][ T42] usb 6-1: usb_control_msg returned -32 [ 54.938115][ T42] usbtmc 6-1:16.0: can't read capabilities [ 54.988611][ T6130] netlink: 56 bytes leftover after parsing attributes in process `syz.0.85'. [ 55.242980][ T6144] MTRR 1 not used [ 55.282142][ T6146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'. [ 55.346938][ T5728] Bluetooth: hci0: command tx timeout [ 55.436257][ T5728] Bluetooth: hci1: command tx timeout [ 55.436273][ T5733] Bluetooth: hci2: command tx timeout [ 55.962942][ T1161] IPVS: starting estimator thread 0... [ 56.046557][ T6164] IPVS: using max 44 ests per chain, 105600 per kthread [ 56.104771][ T6177] mmap: syz.2.101 (6177) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.145800][ T6171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.97'. [ 56.181644][ T6181] ufs: You didn't specify the type of your ufs filesystem [ 56.181644][ T6181] [ 56.181644][ T6181] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 56.181644][ T6181] [ 56.181644][ T6181] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 56.181674][ T6181] ufs: failed to set blocksize [ 56.515604][ T6208] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 56.530248][ T6208] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 56.575102][ T6210] ufs: You didn't specify the type of your ufs filesystem [ 56.575102][ T6210] [ 56.575102][ T6210] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 56.575102][ T6210] [ 56.575102][ T6210] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 56.575121][ T6210] ufs: failed to set blocksize [ 56.818183][ T6221] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 56.840058][ T6221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.853484][ T6221] bond2: (slave geneve2): making interface the new active one [ 56.855744][ T6221] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 57.071267][ T6262] sch_fq: defrate 0 ignored. [ 57.078343][ T6263] sch_fq: defrate 0 ignored. [ 57.105225][ T6265] bond0: option slaves: invalid value (-bond_slave_0) [ 57.207484][ T5820] usb 6-1: USB disconnect, device number 3 [ 57.228187][ T6276] bond0: option slaves: interface -bond_slave_0 does not exist! [ 57.379540][ T6292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=6292 comm=syz.1.136 [ 57.380606][ T43] kauditd_printk_skb: 31320 callbacks suppressed [ 57.380617][ T43] audit: type=1400 audit(1790329413.823:31599): avc: denied { create } for pid=6291 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.392490][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 57.414111][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 57.414133][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 57.417238][ T6294] team0: entered promiscuous mode [ 57.417249][ T6294] team_slave_0: entered promiscuous mode [ 57.417400][ T6294] team_slave_1: entered promiscuous mode [ 57.419253][ T6294] bond0: entered promiscuous mode [ 57.419264][ T6294] bond_slave_0: entered promiscuous mode [ 57.419352][ T6294] bond_slave_1: entered promiscuous mode [ 57.425796][ T6294] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 57.451721][ T6296] syz.1.138 uses obsolete (PF_INET,SOCK_PACKET) [ 57.451970][ T43] audit: type=1400 audit(1790329413.893:31600): avc: denied { create } for pid=6295 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.454587][ T43] audit: type=1400 audit(1790329413.893:31601): avc: denied { ioctl } for pid=6295 comm="syz.1.138" path="socket:[10901]" dev="sockfs" ino=10901 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.500786][ T6301] MTRR 1 not used [ 57.505598][ T6304] MTRR 1 not used [ 57.505856][ T43] audit: type=1400 audit(1790329413.943:31602): avc: denied { write } for pid=6295 comm="syz.1.138" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.822520][ T6315] ufs: You didn't specify the type of your ufs filesystem [ 57.822520][ T6315] [ 57.822520][ T6315] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 57.822520][ T6315] [ 57.822520][ T6315] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 57.822539][ T6315] ufs: failed to set blocksize [ 57.824242][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.146'. [ 57.876272][ T43] audit: type=1400 audit(1790329414.323:31603): avc: denied { connect } for pid=6318 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.876416][ T43] audit: type=1400 audit(1790329414.323:31604): avc: denied { name_connect } for pid=6318 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 57.877806][ T43] audit: type=1400 audit(1790329414.323:31605): avc: denied { listen } for pid=6318 comm="syz.1.148" lport=53534 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.878353][ T43] audit: type=1400 audit(1790329414.323:31606): avc: denied { accept } for pid=6318 comm="syz.1.148" lport=53534 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.878821][ T43] audit: type=1400 audit(1790329414.323:31607): avc: denied { getopt } for pid=6318 comm="syz.1.148" lport=53534 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 57.909860][ T43] audit: type=1400 audit(1790329414.353:31608): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 58.192794][ T6345] bond0: option slaves: invalid value (-bond_slave_0) [ 58.279468][ T6351] MTRR 1 not used [ 58.480935][ T6365] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.702322][ T6372] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 58.893691][ T6391] bond0: option slaves: invalid value (-bond_slave_0) [ 58.970174][ T6399] can0: slcan on ttynull. [ 58.976690][ T6399] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.002188][ T6401] tipc: Started in network mode [ 59.002205][ T6401] tipc: Node identity 42469b4a53c3, cluster identity 4711 [ 59.002439][ T6401] tipc: Enabled bearer , priority 0 [ 59.005453][ T6403] ufs: You didn't specify the type of your ufs filesystem [ 59.005453][ T6403] [ 59.005453][ T6403] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 59.005453][ T6403] [ 59.005453][ T6403] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 59.005471][ T6403] ufs: failed to set blocksize [ 59.006804][ T6401] syzkaller0: MTU too low for tipc bearer [ 59.006815][ T6401] tipc: Disabling bearer [ 59.017934][ T6398] can0 (unregistered): slcan off ttynull. [ 59.077199][ T6410] xt_hashlimit: size too large, truncated to 1048576 [ 59.219552][ T6435] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 59.328997][ T6441] nbd: device at index 64 is going down [ 59.434730][ T5730] udevd[5730]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 59.463405][ T5540] syzkaller0: tun_net_xmit 76 [ 59.463501][ T5540] syzkaller0: tun_net_xmit 48 [ 59.467903][ T6451] syzkaller0: create flow: hash 2769964741 index 2 [ 59.483711][ T6451] syzkaller0: delete flow: hash 2769964741 index 2 [ 60.550052][ T6494] capability: warning: `syz.0.213' uses deprecated v2 capabilities in a way that may be insecure [ 60.623975][ T6504] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 60.636813][ T6504] 8021q: adding VLAN 0 to HW filter on device bond3 [ 60.711021][ T6506] bond3: (slave geneve3): making interface the new active one [ 60.714007][ T6506] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 61.310600][ T6527] __nla_validate_parse: 3 callbacks suppressed [ 61.310614][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 61.318212][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 62.077700][ T6552] input: syz1 as /devices/virtual/input/input6 [ 62.101476][ T6556] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 62.137156][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.234'. [ 67.520954][ T43] kauditd_printk_skb: 165 callbacks suppressed [ 67.520968][ T43] audit: type=1400 audit(1790329423.963:31774): avc: denied { create } for pid=6574 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.522737][ T6577] lapbether: lapb_data_request error - 4 [ 67.524883][ T43] audit: type=1400 audit(1790329423.963:31775): avc: denied { setopt } for pid=6574 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.524925][ T43] audit: type=1400 audit(1790329423.963:31776): avc: denied { write } for pid=6574 comm="syz.0.241" path="socket:[13173]" dev="sockfs" ino=13173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.536059][ T6578] bond0: option slaves: invalid value (-bond_slave_0) [ 67.547653][ T43] audit: type=1400 audit(1790329423.993:31777): avc: denied { execute } for pid=6572 comm="syz.3.240" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.781465][ T6602] FAULT_INJECTION: forcing a failure. [ 67.781465][ T6602] name failslab, interval 1, probability 0, space 0, times 0 [ 67.781488][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(full) [ 67.781502][ T6602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.781510][ T6602] Call Trace: [ 67.781514][ T6602] [ 67.781519][ T6602] dump_stack_lvl+0x100/0x190 [ 67.781540][ T6602] should_fail_ex.cold+0x5/0xa [ 67.781558][ T6602] should_failslab+0xc2/0x120 [ 67.781575][ T6602] __kmalloc_noprof+0xfc/0x840 [ 67.781588][ T6602] ? __memcg_list_lru_alloc+0x418/0x680 [ 67.781610][ T6602] __memcg_list_lru_alloc+0x418/0x680 [ 67.781627][ T6602] ? xa_load+0x149/0x2c0 [ 67.781642][ T6602] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 67.781666][ T6602] memcg_list_lru_alloc+0xd3/0x100 [ 67.781677][ T6602] ? zswap_store+0x60a/0x2e70 [ 67.781688][ T6602] zswap_store+0x696/0x2e70 [ 67.781703][ T6602] ? __pfx_zswap_store+0x10/0x10 [ 67.781714][ T6602] ? lock_acquire+0x1d1/0x380 [ 67.781727][ T6602] ? do_raw_spin_lock+0x128/0x260 [ 67.781741][ T6602] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 67.781756][ T6602] ? find_held_lock+0x2b/0x80 [ 67.781773][ T6602] ? swap_writeout+0xdd8/0x1b20 [ 67.781784][ T6602] ? swap_writeout+0xdd8/0x1b20 [ 67.781797][ T6602] swap_writeout+0xde0/0x1b20 [ 67.781811][ T6602] shrink_folio_list+0x4ffb/0x5e40 [ 67.781832][ T6602] ? __pfx_shrink_folio_list+0x10/0x10 [ 67.781855][ T6602] ? lock_acquire+0x1d1/0x380 [ 67.781878][ T6602] ? __lock_acquire+0x5c0/0x1f40 [ 67.781889][ T6602] ? __css_rstat_updated+0x1ce/0x590 [ 67.781904][ T6602] ? check_noncircular+0x97/0x160 [ 67.781934][ T6602] ? __pfx___css_rstat_updated+0x10/0x10 [ 67.781951][ T6602] reclaim_folio_list+0xe9/0x5e0 [ 67.781969][ T6602] ? __pfx_reclaim_folio_list+0x10/0x10 [ 67.781985][ T6602] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 67.782006][ T6602] ? lru_gen_update_size+0x431/0xe20 [ 67.782025][ T6602] ? lru_gen_del_folio+0x382/0x5f0 [ 67.782041][ T6602] reclaim_pages+0x428/0x5e0 [ 67.782059][ T6602] ? __pfx_reclaim_pages+0x10/0x10 [ 67.782075][ T6602] ? find_held_lock+0x2b/0x80 [ 67.782092][ T6602] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 67.782114][ T6602] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 67.782135][ T6602] ? rcu_read_unlock+0x17/0x60 [ 67.782145][ T6602] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 67.782162][ T6602] ? __mod_zone_page_state+0xdb/0x190 [ 67.782183][ T6602] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 67.782200][ T6602] walk_pgd_range+0xbef/0x1e00 [ 67.782216][ T6602] ? find_held_lock+0x2b/0x80 [ 67.782237][ T6602] ? __pfx_walk_pgd_range+0x10/0x10 [ 67.782249][ T6602] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 67.782268][ T6602] __walk_page_range+0x171/0x850 [ 67.782287][ T6602] walk_page_range_vma_unsafe+0x209/0x8f0 [ 67.782301][ T6602] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 67.782320][ T6602] ? find_held_lock+0x2b/0x80 [ 67.782349][ T6602] ? mlock_drain_local+0x254/0x4e0 [ 67.782364][ T6602] ? mlock_drain_local+0x254/0x4e0 [ 67.782378][ T6602] walk_page_range_vma+0x63/0x90 [ 67.782393][ T6602] madvise_pageout+0x29e/0x5b0 [ 67.782410][ T6602] ? __pfx_madvise_pageout+0x10/0x10 [ 67.782435][ T6602] madvise_vma_behavior+0x48b/0x2350 [ 67.782452][ T6602] ? mas_prev+0xa4/0x100 [ 67.782466][ T6602] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 67.782483][ T6602] ? mas_walk+0x260/0x310 [ 67.782501][ T6602] ? find_vma_prev+0xd8/0x150 [ 67.782514][ T6602] ? __pfx_find_vma_prev+0x10/0x10 [ 67.782528][ T6602] ? lock_acquire+0x1d1/0x380 [ 67.782547][ T6602] madvise_walk_vmas+0x30e/0xc50 [ 67.782566][ T6602] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 67.782583][ T6602] ? __pfx_futex_wake_mark+0x10/0x10 [ 67.782597][ T6602] ? lock_acquire+0x1d1/0x380 [ 67.782612][ T6602] madvise_do_behavior+0x1ea/0x510 [ 67.782630][ T6602] ? __pfx_madvise_do_behavior+0x10/0x10 [ 67.782647][ T6602] ? down_read+0x13b/0x4c0 [ 67.782665][ T6602] do_madvise+0x238/0x290 [ 67.782681][ T6602] ? __pfx_do_madvise+0x10/0x10 [ 67.782696][ T6602] ? do_futex+0x190/0x440 [ 67.782714][ T6602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 67.782736][ T6602] __x64_sys_madvise+0xa9/0x110 [ 67.782752][ T6602] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.782769][ T6602] do_syscall_64+0x123/0x790 [ 67.782781][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.782792][ T6602] RIP: 0033:0x7fd5fb59e159 [ 67.782803][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.782813][ T6602] RSP: 002b:00007fd5fc3cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 67.782828][ T6602] RAX: ffffffffffffffda RBX: 00007fd5fb825fa0 RCX: 00007fd5fb59e159 [ 67.782835][ T6602] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 67.782842][ T6602] RBP: 00007fd5fb63506b R08: 0000000000000000 R09: 0000000000000000 [ 67.782848][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.782855][ T6602] R13: 00007fd5fb826038 R14: 00007fd5fb825fa0 R15: 00007ffd54f63238 [ 67.782871][ T6602] [ 67.823846][ T6602] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 67.845395][ T6603] netlink: 60 bytes leftover after parsing attributes in process `syz.2.246'. [ 67.982538][ T43] audit: type=1400 audit(1790329424.423:31778): avc: denied { create } for pid=6608 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.983441][ T43] audit: type=1400 audit(1790329424.423:31779): avc: denied { setopt } for pid=6608 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.983926][ T43] audit: type=1400 audit(1790329424.423:31780): avc: denied { connect } for pid=6608 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.003621][ T43] audit: type=1400 audit(1790329424.443:31781): avc: denied { ioctl } for pid=6608 comm="syz.0.251" path="socket:[13196]" dev="sockfs" ino=13196 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.004755][ T6609] Cannot find add_set index 0 as target [ 68.048188][ T43] audit: type=1400 audit(1790329424.493:31782): avc: denied { read write } for pid=6610 comm="syz.0.252" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.049134][ T43] audit: type=1400 audit(1790329424.493:31783): avc: denied { open } for pid=6610 comm="syz.0.252" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.487641][ T6639] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 68.667535][ T6645] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 68.681281][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.267'. [ 68.818165][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 68.996704][ T1356] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.132467][ T6679] FAULT_INJECTION: forcing a failure. [ 69.132467][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 69.132490][ T6679] CPU: 3 UID: 0 PID: 6679 Comm: syz.3.277 Not tainted syzkaller #0 PREEMPT(full) [ 69.132503][ T6679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.132509][ T6679] Call Trace: [ 69.132513][ T6679] [ 69.132518][ T6679] dump_stack_lvl+0x100/0x190 [ 69.132538][ T6679] should_fail_ex.cold+0x5/0xa [ 69.132557][ T6679] should_failslab+0xc2/0x120 [ 69.132574][ T6679] __kmalloc_noprof+0xfc/0x840 [ 69.132588][ T6679] ? lsm_blob_alloc+0x68/0x90 [ 69.132663][ T6679] lsm_blob_alloc+0x68/0x90 [ 69.132686][ T6679] security_prepare_creds+0x2d/0x290 [ 69.132704][ T6679] prepare_creds+0x5d6/0x950 [ 69.132718][ T6679] keyctl_set_reqkey_keyring+0x8e/0x1c0 [ 69.132731][ T6679] __do_sys_keyctl+0x316/0x5a0 [ 69.132745][ T6679] do_syscall_64+0x123/0x790 [ 69.132758][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.132769][ T6679] RIP: 0033:0x7f4d5619e159 [ 69.132779][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.132790][ T6679] RSP: 002b:00007f4d56fa5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 69.132802][ T6679] RAX: ffffffffffffffda RBX: 00007f4d56426090 RCX: 00007f4d5619e159 [ 69.132809][ T6679] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 69.132815][ T6679] RBP: 00007f4d5623506b R08: 0000000000000000 R09: 0000000000000000 [ 69.132822][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.132828][ T6679] R13: 00007f4d56426128 R14: 00007f4d56426090 R15: 00007ffd90a514a8 [ 69.132845][ T6679] [ 69.147513][ T5953] IPVS: starting estimator thread 0... [ 69.166798][ T1356] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 69.169761][ T1356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.169782][ T1356] usb 7-1: Product: syz [ 69.169793][ T1356] usb 7-1: Manufacturer: syz [ 69.169805][ T1356] usb 7-1: SerialNumber: syz [ 69.212859][ T6684] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 69.212986][ T6684] SELinux: failed to load policy [ 69.228503][ T6684] tmpfs: Bad value for 'mpol' [ 69.235778][ T6680] IPVS: using max 44 ests per chain, 105600 per kthread [ 69.263668][ T5805] hid-sensor-hub 0003:1234:5678.0002: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 69.266478][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 69.292156][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 69.312413][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.341649][ T6694] fido_id[6694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.478481][ T6651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.269'. [ 69.479689][ T852] usb 7-1: USB disconnect, device number 2 [ 69.624706][ T6716] netlink: 240 bytes leftover after parsing attributes in process `syz.1.291'. [ 69.776314][ T5812] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.936898][ T5812] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 69.937730][ T5812] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 69.937755][ T5812] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 69.937768][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.939292][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 69.939303][ T5812] usb 5-1: Product: syz [ 69.939311][ T5812] usb 5-1: Manufacturer: syz [ 69.939318][ T5812] usb 5-1: SerialNumber: syz [ 69.940746][ T5812] usb 5-1: config 0 descriptor?? [ 69.944576][ T5812] hub 5-1:0.0: bad descriptor, ignoring hub [ 69.944590][ T5812] hub 5-1:0.0: probe with driver hub failed with error -5 [ 69.950183][ T5812] usb 5-1: selecting invalid altsetting 0 [ 70.116441][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'. [ 70.202817][ T5733] Bluetooth: hci1: ACL packet for unknown connection handle 969 [ 70.248475][ T42] usb 5-1: USB disconnect, device number 2 [ 70.306503][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 70.308065][ T9] ath9k_htc: Failed to initialize the device [ 70.310931][ T852] usb 7-1: ath9k_htc: USB layer deinitialized [ 70.324978][ T6739] ======================================================= [ 70.324978][ T6739] WARNING: The mand mount option has been deprecated and [ 70.324978][ T6739] and is ignored by this kernel. Remove the mand [ 70.324978][ T6739] option from the mount to silence this warning. [ 70.324978][ T6739] ======================================================= [ 70.326023][ T6739] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 70.326803][ T6739] exFAT-fs (nullb0): invalid boot record signature [ 70.326813][ T6739] exFAT-fs (nullb0): failed to read boot sector [ 70.326821][ T6739] exFAT-fs (nullb0): failed to recognize exfat type [ 70.355592][ T6739] kAFS: unable to lookup cell '(,c¾Ì' [ 70.402163][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'. [ 70.442624][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'. [ 70.442642][ T6741] nbd: device at index 64 is going down [ 70.504522][ T6631] udevd[6631]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 70.508475][ T6631] udevd[6631]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 70.509503][ T6750] can0: slcan on pts0. [ 70.523251][ T6750] can0: entered promiscuous mode [ 70.523266][ T6750] can0: entered allmulticast mode [ 70.578438][ T6749] can0 (unregistered): slcan off pts0. [ 70.734319][ T6779] netlink: 104 bytes leftover after parsing attributes in process `syz.2.317'. [ 70.838703][ T6790] binder: Unknown parameter 'subj_type' [ 70.842362][ T6790] syzkaller1: entered promiscuous mode [ 70.842377][ T6790] syzkaller1: entered allmulticast mode [ 70.937706][ T6799] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 70.953561][ T6799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.998746][ T6799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.999012][ T6799] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 70.999816][ T6799] bond2: (slave vti0): Error -95 calling set_mac_address [ 71.009527][ T6809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6809 comm=syz.3.322 [ 71.095077][ T6798] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 71.196072][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.197274][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.234587][ T35] cfg80211: failed to load regulatory.db [ 71.376059][ T1168] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.757539][ T5812] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 71.796102][ T6865] fuse: Bad value for 'user_id' [ 71.796236][ T6865] fuse: Bad value for 'user_id' [ 71.827849][ T6867] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 72.802918][ T6877] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 72.803100][ T6877] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 72.803118][ T6877] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 72.803130][ T6877] UDF-fs: Scanning with blocksize 512 failed [ 72.804157][ T6877] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 72.804283][ T6877] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 72.804301][ T6877] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 72.804312][ T6877] UDF-fs: Scanning with blocksize 1024 failed [ 72.804847][ T6877] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 72.804937][ T6877] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 72.804954][ T6877] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 72.804965][ T6877] UDF-fs: Scanning with blocksize 2048 failed [ 72.805374][ T6877] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 72.805451][ T6877] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 72.805467][ T6877] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 72.805478][ T6877] UDF-fs: Scanning with blocksize 4096 failed [ 72.805486][ T6877] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 72.891751][ T43] kauditd_printk_skb: 81 callbacks suppressed [ 72.891768][ T43] audit: type=1400 audit(1790329429.333:31865): avc: denied { read write } for pid=6884 comm="syz.2.350" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.892159][ T43] audit: type=1400 audit(1790329429.333:31866): avc: denied { open } for pid=6884 comm="syz.2.350" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.892870][ T43] audit: type=1400 audit(1790329429.333:31867): avc: denied { ioctl } for pid=6884 comm="syz.2.350" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.078056][ T6893] bond0: option slaves: interface -bond_slave does not exist! [ 73.131426][ T43] audit: type=1400 audit(1790329429.573:31868): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.152979][ T6897] tmpfs: Bad value for 'mpol' [ 73.436302][ T5728] Bluetooth: hci4: command 0x1003 tx timeout [ 73.439203][ T5733] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.629227][ T43] audit: type=1400 audit(1790329430.073:31869): avc: denied { create } for pid=6906 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.864077][ T6917] hfs: can't find a HFS filesystem on dev sr0 [ 73.887971][ T6918] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 73.921590][ T43] audit: type=1400 audit(1790329430.363:31870): avc: denied { cmd } for pid=6916 comm="syz.2.363" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 74.163277][ T6930] __nla_validate_parse: 4 callbacks suppressed [ 74.163295][ T6930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.366'. [ 74.194839][ T6932] loop7: detected capacity change from 0 to 7 [ 74.248253][ T6932] Dev loop7: unable to read RDB block 7 [ 74.248276][ T6932] loop7: unable to read partition table [ 74.248374][ T6932] loop7: partition table beyond EOD, truncated [ 74.248398][ T6932] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 74.300724][ T6654] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.301235][ T6654] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.301623][ T6654] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.301992][ T6654] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.302422][ T6654] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.303055][ T6932] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 74.629659][ T43] audit: type=1400 audit(1790329431.073:31871): avc: denied { mount } for pid=6937 comm="syz.1.369" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 74.634758][ T43] audit: type=1807 audit(1790329431.073:31872): action=measure uid>1 res=1 [ 75.253858][ T6943] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 75.253881][ T6943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.370'. [ 75.255525][ T6943] dummy0: entered promiscuous mode [ 75.257438][ T6943] bridge0: port 3(dummy0) entered blocking state [ 75.257583][ T6943] bridge0: port 3(dummy0) entered disabled state [ 75.257709][ T6943] dummy0: entered allmulticast mode [ 75.259542][ T6943] bridge0: port 3(dummy0) entered blocking state [ 75.259589][ T6943] bridge0: port 3(dummy0) entered forwarding state [ 76.627957][ T6907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.655158][ T6938] ima: policy update completed [ 76.655284][ T43] audit: type=1802 audit(1790329433.093:31873): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.1.369" res=1 errno=0 [ 76.667916][ T43] audit: type=1400 audit(1790329433.113:31874): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 76.799076][ T6958] cramfs: checking physical address 0x0000000101be0000 for linear cramfs image [ 76.799963][ T6958] cramfs: wrong magic [ 76.804051][ T6958] cramfs: wrong magic [ 76.883051][ T6969] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 76.883077][ T6969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.885831][ T6969] vhci_hcd vhci_hcd.0: Device attached [ 77.451387][ T6992] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 77.459420][ T6992] team0 (unregistering): Port device team_slave_0 removed [ 77.465986][ T6992] team0 (unregistering): Port device team_slave_1 removed [ 77.587110][ T1356] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 77.589131][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.736249][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 77.740011][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.740036][ T5875] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 77.740053][ T5875] usb 5-1: no configurations [ 77.740059][ T5875] usb 5-1: can't read configurations, error -22 [ 77.796963][ T6970] vhci_hcd: connection reset by peer [ 77.802915][ T5804] vhci_hcd vhci_hcd.0: stop threads [ 77.803383][ T5804] vhci_hcd vhci_hcd.0: release socket [ 77.804269][ T5804] vhci_hcd vhci_hcd.0: disconnect device [ 77.924830][ T7004] syzkaller0: entered promiscuous mode [ 77.924925][ T7004] syzkaller0: entered allmulticast mode [ 77.927866][ T7004] tipc: Started in network mode [ 77.927891][ T7004] tipc: Node identity 0ee67946236f, cluster identity 4711 [ 77.928045][ T7004] tipc: Enabled bearer , priority 0 [ 77.969341][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 77.969358][ T43] audit: type=1400 audit(1790329434.413:31880): avc: denied { read } for pid=7005 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.025789][ T43] audit: type=1400 audit(1790329434.463:31881): avc: denied { write } for pid=7007 comm="syz.3.394" name="usb_gadget" dev="configfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.030633][ T43] audit: type=1400 audit(1790329434.473:31882): avc: denied { write } for pid=7007 comm="syz.3.394" name="functions" dev="configfs" ino=15214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.040792][ T43] audit: type=1400 audit(1790329434.483:31883): avc: denied { write } for pid=7007 comm="syz.3.394" name="ss" dev="configfs" ino=15232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.041339][ T43] audit: type=1400 audit(1790329434.483:31884): avc: denied { create } for pid=7007 comm="syz.3.394" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 78.044495][ T43] audit: type=1400 audit(1790329434.483:31885): avc: denied { write } for pid=7007 comm="syz.3.394" name="header" dev="configfs" ino=15235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.045895][ T43] audit: type=1400 audit(1790329434.483:31886): avc: denied { write } for pid=7007 comm="syz.3.394" name="uncompressed" dev="configfs" ino=15236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.047231][ T43] audit: type=1400 audit(1790329434.493:31887): avc: denied { write } for pid=7007 comm="syz.3.394" name="u" dev="configfs" ino=15246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.048833][ T43] audit: type=1400 audit(1790329434.493:31888): avc: denied { write } for pid=7007 comm="syz.3.394" name="h" dev="configfs" ino=15245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.049308][ T43] audit: type=1400 audit(1790329434.493:31889): avc: denied { write } for pid=7007 comm="syz.3.394" name="h" dev="configfs" ino=15245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.277665][ T7020] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 78.315816][ T7020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.342138][ T7020] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 78.470100][ T5834] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 78.490060][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.399'. [ 78.617071][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 78.620025][ T5834] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 78.621619][ T5834] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 78.621657][ T5834] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 78.621677][ T5834] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.621699][ T5834] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 78.625342][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.625365][ T5834] usb 8-1: Product: syz [ 78.625376][ T5834] usb 8-1: Manufacturer: syz [ 78.625388][ T5834] usb 8-1: SerialNumber: syz [ 78.639629][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 78.660547][ T5834] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input9 [ 78.866852][ T5834] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 78.866869][ T5834] (id 0x00) [ 78.926234][ T5834] rc_core: IR keymap rc-imon-pad not found [ 78.926246][ T5834] Registered IR keymap rc-empty [ 78.926283][ T5834] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 78.926292][ T5834] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 78.955183][ T64] tipc: Node number set to 763984198 [ 79.051707][ T5834] imon:send_packet: packet tx failed (-71) [ 79.066287][ T5834] imon 8-1:155.0: remote input dev register failed [ 79.066361][ T5834] imon 8-1:155.0: imon_init_intf0: rc device setup failed [ 79.147303][ T5834] imon 8-1:155.0: unable to initialize intf0, err 0 [ 79.147322][ T5834] imon:imon_probe: failed to initialize context! [ 79.147332][ T5834] imon 8-1:155.0: unable to register, err -19 [ 79.152771][ T5834] usb 8-1: USB disconnect, device number 2 [ 80.301981][ T7069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.424292][ T13] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 80.424331][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 80.432096][ T13] bond3: active interface up! [ 82.030288][ T7101] ip_tables: iptables: counters copy to user failed while replacing table [ 82.181702][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 82.750027][ T1356] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 83.827564][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.443'. [ 83.888277][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 83.888292][ T43] audit: type=1400 audit(1790329440.333:31900): avc: denied { write } for pid=7167 comm="syz.0.446" name="ss" dev="configfs" ino=15232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.067160][ T43] audit: type=1400 audit(1790329440.513:31901): avc: denied { write } for pid=7186 comm="syz.0.456" name="ss" dev="configfs" ino=15232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.096254][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 84.135841][ T43] audit: type=1400 audit(1790329440.573:31902): avc: denied { write } for pid=7191 comm="syz.0.458" name="ss" dev="configfs" ino=15232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.256194][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 84.256961][ T64] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.257764][ T64] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 84.257788][ T64] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.257799][ T64] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.257810][ T64] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.257821][ T64] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.257840][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.466702][ T64] usb 7-1: usb_control_msg returned -32 [ 84.466726][ T64] usbtmc 7-1:16.0: can't read capabilities [ 84.666232][ T6993] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.816210][ T6993] usb 5-1: Using ep0 maxpacket: 32 [ 84.818384][ T6993] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 84.819431][ T6993] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 84.819467][ T6993] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 84.819486][ T6993] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.819507][ T6993] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 84.820436][ T43] audit: type=1400 audit(1790329441.263:31903): avc: denied { write } for pid=7161 comm="syz.2.442" name="usbtmc0" dev="devtmpfs" ino=2933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.821798][ T6993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.821815][ T6993] usb 5-1: Product: syz [ 84.821888][ T6993] usb 5-1: Manufacturer: syz [ 84.821899][ T6993] usb 5-1: SerialNumber: syz [ 84.824235][ T7203] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 84.831899][ T64] usb 7-1: USB disconnect, device number 3 [ 84.849413][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 84.861519][ T6993] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input11 [ 85.046804][ T6993] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 85.046817][ T6993] (id 0x00) [ 85.096288][ T6993] rc_core: IR keymap rc-imon-pad not found [ 85.096300][ T6993] Registered IR keymap rc-empty [ 85.096335][ T6993] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 85.096343][ T6993] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 85.270909][ T6993] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 85.271988][ T6993] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input12 [ 85.276583][ T6993] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:5> initialized [ 85.373672][ T43] audit: type=1400 audit(1790329441.813:31904): avc: denied { write } for pid=7224 comm="syz.2.469" name="cluster" dev="configfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.375327][ T43] audit: type=1400 audit(1790329441.813:31905): avc: denied { write } for pid=7224 comm="syz.2.469" name="node" dev="configfs" ino=18570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.375875][ T43] audit: type=1400 audit(1790329441.813:31906): avc: denied { read } for pid=7224 comm="syz.2.469" name="ipv4_address" dev="configfs" ino=18573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 85.378452][ T43] audit: type=1400 audit(1790329441.823:31907): avc: denied { write } for pid=7224 comm="syz.2.469" name="node" dev="configfs" ino=18570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.410346][ T1356] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 85.837810][ T1356] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 85.841350][ T1356] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 85.841365][ T1356] usb 8-1: config 0 has no interface number 0 [ 85.841383][ T1356] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 85.841396][ T1356] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 85.841408][ T1356] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 85.841420][ T1356] usb 8-1: config 0 interface 2 has no altsetting 0 [ 85.844668][ T1356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.844681][ T1356] usb 8-1: Product: syz [ 85.844688][ T1356] usb 8-1: Manufacturer: syz [ 85.844695][ T1356] usb 8-1: SerialNumber: syz [ 85.846278][ T1356] usb 8-1: config 0 descriptor?? [ 85.850213][ T7216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.850275][ T7216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.854954][ T1356] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.117221][ T1356] usb 8-1: USB disconnect, device number 3 [ 86.572969][ T43] audit: type=1400 audit(1790329443.013:31908): avc: denied { connect } for pid=7199 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.586511][ T7248] imon:send_packet: task interrupted [ 86.586527][ T7248] imon:send_packet: packet tx failed (-512) [ 86.587010][ T7248] imon:vfd_write: send packet #3 failed [ 86.765617][ T1356] usb 5-1: USB disconnect, device number 5 [ 86.936297][ T2220] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.100445][ T2220] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 87.107277][ T2220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.107344][ T2220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.109354][ T2220] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 87.109433][ T2220] usb 8-1: Manufacturer: syz [ 87.177751][ T2220] usb 8-1: config 0 descriptor?? [ 87.529216][ T7268] FAULT_INJECTION: forcing a failure. [ 87.529216][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 87.529237][ T7268] CPU: 1 UID: 0 PID: 7268 Comm: syz.1.481 Not tainted syzkaller #0 PREEMPT(full) [ 87.529252][ T7268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.529259][ T7268] Call Trace: [ 87.529264][ T7268] [ 87.529269][ T7268] dump_stack_lvl+0x100/0x190 [ 87.529290][ T7268] should_fail_ex.cold+0x5/0xa [ 87.529307][ T7268] should_failslab+0xc2/0x120 [ 87.529335][ T7268] __kmalloc_cache_noprof+0x91/0x6d0 [ 87.529356][ T7268] ? nfnetlink_rcv_batch+0x780/0x2880 [ 87.529376][ T7268] nfnetlink_rcv_batch+0x780/0x2880 [ 87.529400][ T7268] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 87.529420][ T7268] ? lock_acquire+0x1d1/0x380 [ 87.529434][ T7268] ? avc_has_perm_noaudit+0x56/0x470 [ 87.529457][ T7268] ? avc_has_perm_noaudit+0x145/0x470 [ 87.529488][ T7268] ? __nla_parse+0x40/0x60 [ 87.529502][ T7268] nfnetlink_rcv+0x3bd/0x440 [ 87.529519][ T7268] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 87.529539][ T7268] netlink_unicast+0x585/0x850 [ 87.529556][ T7268] ? __pfx_netlink_unicast+0x10/0x10 [ 87.529568][ T7268] ? __build_skb_around+0x278/0x390 [ 87.529584][ T7268] netlink_sendmsg+0x8b0/0xda0 [ 87.529601][ T7268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.529616][ T7268] ? selinux_socket_sendmsg+0x198/0x2f0 [ 87.529631][ T7268] ____sys_sendmsg+0xa4d/0xbe0 [ 87.529641][ T7268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.529655][ T7268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.529673][ T7268] ___sys_sendmsg+0x190/0x1e0 [ 87.529685][ T7268] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.529697][ T7268] ? irqentry_exit+0x24d/0xa10 [ 87.529714][ T7268] ? find_held_lock+0x2b/0x80 [ 87.529739][ T7268] __sys_sendmsg+0x160/0x210 [ 87.529754][ T7268] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.529785][ T7268] do_syscall_64+0x123/0x790 [ 87.529798][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.529810][ T7268] RIP: 0033:0x7f1342b9e159 [ 87.529821][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.529832][ T7268] RSP: 002b:00007f13439ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.529845][ T7268] RAX: ffffffffffffffda RBX: 00007f1342e25fa0 RCX: 00007f1342b9e159 [ 87.529852][ T7268] RDX: 000000000000c860 RSI: 0000200000007dc0 RDI: 0000000000000005 [ 87.529860][ T7268] RBP: 00007f1342c3506b R08: 0000000000000000 R09: 0000000000000000 [ 87.529867][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.529874][ T7268] R13: 00007f1342e26038 R14: 00007f1342e25fa0 R15: 00007ffc7587ee28 [ 87.529890][ T7268] [ 87.608259][ T7274] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 87.608280][ T7274] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.608411][ T7274] vhci_hcd vhci_hcd.0: Device attached [ 87.611161][ T7275] vhci_hcd: connection closed [ 87.614992][ T5540] vhci_hcd vhci_hcd.0: stop threads [ 87.615014][ T5540] vhci_hcd vhci_hcd.0: release socket [ 87.615031][ T5540] vhci_hcd vhci_hcd.0: disconnect device [ 87.876282][ T2765] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 88.209159][ T2765] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 88.214592][ T2765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.486561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 88.506172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.646169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.816904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.826161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.166836][ T5738] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 89.179200][ T7278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.185612][ T7278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.215214][ T2765] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 89.337279][ T5738] usb 5-1: unable to get BOS descriptor or descriptor too short [ 89.337304][ T5738] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 89.337922][ T5738] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 89.337939][ T5738] usb 5-1: can't read configurations, error -71 [ 89.455973][ T35] usb 6-1: USB disconnect, device number 4 [ 89.549596][ T2220] uclogic 0003:256C:006D.0003: v1 frame probing failed: -71 [ 89.549668][ T2220] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 89.549737][ T2220] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 89.552852][ T2220] usb 8-1: USB disconnect, device number 4 [ 89.609565][ T7305] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 89.609581][ T7305] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.609641][ T7305] vhci_hcd vhci_hcd.0: Device attached [ 89.615412][ T7305] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 89.622762][ T7305] batman_adv: batadv0: Adding interface: macvlan2 [ 89.622772][ T7305] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.622787][ T7305] batman_adv: batadv0: Interface activated: macvlan2 [ 89.629719][ T7306] vhci_hcd: connection closed [ 89.631048][ T5804] vhci_hcd vhci_hcd.2: stop threads [ 89.631066][ T5804] vhci_hcd vhci_hcd.2: release socket [ 89.631076][ T5804] vhci_hcd vhci_hcd.2: disconnect device [ 89.805101][ T43] audit: type=1400 audit(1790329446.243:31909): avc: denied { bind } for pid=7302 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.807534][ T43] audit: type=1400 audit(1790329446.253:31910): avc: denied { listen } for pid=7302 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.807954][ T43] audit: type=1400 audit(1790329446.253:31911): avc: denied { connect } for pid=7302 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.814106][ T43] audit: type=1400 audit(1790329446.253:31912): avc: denied { accept } for pid=7302 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.814543][ T43] audit: type=1400 audit(1790329446.253:31913): avc: denied { write } for pid=7302 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.866092][ T43] audit: type=1400 audit(1790329446.303:31914): avc: denied { read } for pid=7302 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.903327][ T43] audit: type=1400 audit(1790329446.343:31915): avc: denied { write } for pid=7311 comm="syz.0.499" name="ss" dev="configfs" ino=15232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.044755][ T43] audit: type=1400 audit(1790329446.483:31916): avc: denied { read write } for pid=7315 comm="syz.0.501" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.045020][ T43] audit: type=1400 audit(1790329446.483:31917): avc: denied { open } for pid=7315 comm="syz.0.501" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.141824][ T43] audit: type=1400 audit(1790329446.583:31918): avc: denied { write } for pid=7319 comm="syz.0.502" name="subsystems" dev="configfs" ino=5590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.354031][ T7339] syz.1.511 (7339) used greatest stack depth: 19592 bytes left [ 90.556271][ T5738] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 90.610831][ T7349] netlink: 60 bytes leftover after parsing attributes in process `syz.2.515'. [ 90.711117][ T5738] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 90.712119][ T5738] usb 5-1: config 1 has an invalid descriptor of length 81, skipping remainder of the config [ 90.715964][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.715985][ T5738] usb 5-1: Product: syz [ 90.715997][ T5738] usb 5-1: Manufacturer: syz [ 90.716008][ T5738] usb 5-1: SerialNumber: syz [ 90.724214][ T5738] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 91.771952][ T7387] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 91.918631][ T7397] loop0: detected capacity change from 0 to 1 [ 91.968279][ T7397] ldm_validate_privheads(): Disk read failed. [ 91.968313][ T7397] loop0: [ 91.968322][ T7397] loop0: partition table partially beyond EOD, truncated [ 92.970736][ T7434] FAULT_INJECTION: forcing a failure. [ 92.970736][ T7434] name fail_futex, interval 1, probability 0, space 0, times 1 [ 92.970794][ T7434] CPU: 2 UID: 0 PID: 7434 Comm: syz.2.548 Not tainted syzkaller #0 PREEMPT(full) [ 92.970808][ T7434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.970815][ T7434] Call Trace: [ 92.970819][ T7434] [ 92.970824][ T7434] dump_stack_lvl+0x100/0x190 [ 92.970846][ T7434] should_fail_ex.cold+0x5/0xa [ 92.970865][ T7434] get_futex_key+0x1d0/0x14f0 [ 92.970882][ T7434] ? __pfx_get_futex_key+0x10/0x10 [ 92.970920][ T7434] ? find_held_lock+0x2b/0x80 [ 92.970938][ T7434] ? futex_wake+0x4ea/0x5e0 [ 92.970953][ T7434] futex_wake+0xf4/0x5e0 [ 92.970966][ T7434] ? __pfx_futex_wake+0x10/0x10 [ 92.970978][ T7434] ? rcu_read_lock_any_held+0x6a/0x90 [ 92.970994][ T7434] ? find_held_lock+0x2b/0x80 [ 92.971010][ T7434] ? ksys_write+0x190/0x250 [ 92.971022][ T7434] ? ksys_write+0x190/0x250 [ 92.971036][ T7434] do_futex+0x2b2/0x440 [ 92.971052][ T7434] ? __pfx_do_futex+0x10/0x10 [ 92.971072][ T7434] __x64_sys_futex+0x34f/0x4d0 [ 92.971088][ T7434] ? fput+0x7c/0x100 [ 92.971102][ T7434] ? __pfx___x64_sys_futex+0x10/0x10 [ 92.971117][ T7434] ? ksys_write+0x1ac/0x250 [ 92.971134][ T7434] do_syscall_64+0x123/0x790 [ 92.971146][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.971157][ T7434] RIP: 0033:0x7f247679e159 [ 92.971167][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.971178][ T7434] RSP: 002b:00007f247766e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.971189][ T7434] RAX: ffffffffffffffda RBX: 00007f2476a25fa8 RCX: 00007f247679e159 [ 92.971197][ T7434] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2476a25fac [ 92.971203][ T7434] RBP: 00007f2476a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 92.971210][ T7434] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 92.971216][ T7434] R13: 00007f2476a26038 R14: 00007ffe5f05b6c0 R15: 00007ffe5f05b7a8 [ 92.971231][ T7434] [ 93.226851][ T7449] FAULT_INJECTION: forcing a failure. [ 93.226851][ T7449] name failslab, interval 1, probability 0, space 0, times 0 [ 93.226919][ T7449] CPU: 0 UID: 0 PID: 7449 Comm: syz.2.554 Not tainted syzkaller #0 PREEMPT(full) [ 93.226933][ T7449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.226940][ T7449] Call Trace: [ 93.226944][ T7449] [ 93.226948][ T7449] dump_stack_lvl+0x100/0x190 [ 93.226981][ T7449] should_fail_ex.cold+0x5/0xa [ 93.226999][ T7449] should_failslab+0xc2/0x120 [ 93.227015][ T7449] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 93.227029][ T7449] ? sock_alloc_inode+0x26/0x2c0 [ 93.227047][ T7449] ? __pfx_sock_alloc_inode+0x10/0x10 [ 93.227065][ T7449] sock_alloc_inode+0x26/0x2c0 [ 93.227086][ T7449] ? __pfx_sock_alloc_inode+0x10/0x10 [ 93.227103][ T7449] alloc_inode+0x68/0x250 [ 93.227116][ T7449] sock_alloc+0x44/0x280 [ 93.227132][ T7449] ? security_socket_create+0x7f/0x250 [ 93.227145][ T7449] __sock_create+0xc2/0x860 [ 93.227159][ T7449] __sys_socket+0x14d/0x260 [ 93.227171][ T7449] ? __pfx___sys_socket+0x10/0x10 [ 93.227187][ T7449] __x64_sys_socket+0x72/0xb0 [ 93.227198][ T7449] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.227215][ T7449] do_syscall_64+0x123/0x790 [ 93.227227][ T7449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.227239][ T7449] RIP: 0033:0x7f247679e159 [ 93.227249][ T7449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.227260][ T7449] RSP: 002b:00007f247764d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 93.227271][ T7449] RAX: ffffffffffffffda RBX: 00007f2476a26090 RCX: 00007f247679e159 [ 93.227278][ T7449] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 93.227284][ T7449] RBP: 00007f247683506b R08: 0000000000000000 R09: 0000000000000000 [ 93.227291][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.227297][ T7449] R13: 00007f2476a26128 R14: 00007f2476a26090 R15: 00007ffe5f05b7a8 [ 93.227311][ T7449] [ 93.227355][ T7449] socket: no more sockets [ 93.274073][ T5738] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 93.274088][ T5738] usb 5-1: 2:1 : unsupported format bits 0x2020000 [ 93.337792][ T5738] usb 5-1: USB disconnect, device number 8 [ 93.393842][ T6631] udevd[6631]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.692801][ T7480] 9p: Bad value for 'rfdno' [ 95.547280][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 95.547297][ T43] audit: type=1400 audit(1790329451.983:31924): avc: denied { read } for pid=7498 comm="syz.0.571" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.547552][ T43] audit: type=1400 audit(1790329451.993:31925): avc: denied { open } for pid=7498 comm="syz.0.571" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.551854][ T43] audit: type=1400 audit(1790329451.993:31926): avc: denied { ioctl } for pid=7498 comm="syz.0.571" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.596364][ T5738] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 95.615427][ T43] audit: type=1400 audit(1790329452.053:31927): avc: denied { wake_alarm } for pid=7500 comm="syz.1.574" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.650185][ T43] audit: type=1400 audit(1790329452.093:31928): avc: denied { write } for pid=7502 comm="syz.1.576" name="ss" dev="configfs" ino=15232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.714579][ T43] audit: type=1400 audit(1790329452.153:31929): avc: denied { write } for pid=7504 comm="syz.1.577" name="ss" dev="configfs" ino=15232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.757165][ T5738] usb 7-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 95.758351][ T5738] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.758414][ T5738] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.758448][ T5738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.815049][ T7509] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.944576][ T7509] md: personality for level is not loaded! [ 96.016016][ T7516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.166496][ T7516] md: could not open device unknown-block(1,0). [ 96.201055][ T7523] netlink: 'syz.0.583': attribute type 13 has an invalid length. [ 96.239226][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 96.239290][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 96.239299][ T7527] netlink: 'syz.0.585': attribute type 4 has an invalid length. [ 96.325861][ T7537] netlink: 56 bytes leftover after parsing attributes in process `syz.1.590'. [ 96.497229][ T43] audit: type=1400 audit(1790329452.943:31930): avc: denied { read } for pid=7548 comm="syz.1.595" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 96.497375][ T43] audit: type=1400 audit(1790329452.943:31931): avc: denied { open } for pid=7548 comm="syz.1.595" path="/137/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 96.507051][ T7550] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.507230][ T7550] block device autoloading is deprecated and will be removed. [ 96.511592][ T43] audit: type=1400 audit(1790329452.953:31932): avc: denied { ioctl } for pid=7548 comm="syz.1.595" path="/137/file0/file0" dev="fuse" ino=0 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 96.829562][ T43] audit: type=1400 audit(1790329453.273:31933): avc: denied { execute } for pid=7556 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 96.889648][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.890809][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.892933][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.896745][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.897462][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.210485][ T5738] usb 7-1: USB disconnect, device number 4 [ 97.391537][ T7583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.404654][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.404709][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.405577][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.405652][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.405755][ T7557] bridge_slave_0: entered allmulticast mode [ 97.407761][ T7557] bridge_slave_0: entered promiscuous mode [ 97.422009][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.422074][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.422189][ T7557] bridge_slave_1: entered allmulticast mode [ 97.423667][ T7557] bridge_slave_1: entered promiscuous mode [ 97.442756][ T7557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.444526][ T7557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.473511][ T7557] team0: Port device team_slave_0 added [ 97.475886][ T7557] team0: Port device team_slave_1 added [ 97.506037][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.506054][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.506076][ T7557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.508149][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.508164][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.508184][ T7557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.543898][ T7557] hsr_slave_0: entered promiscuous mode [ 97.544737][ T7557] hsr_slave_1: entered promiscuous mode [ 97.545345][ T7557] debugfs: 'hsr0' already exists in 'hsr' [ 97.545363][ T7557] Cannot create hsr debugfs directory [ 97.813901][ T7557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.945286][ T7557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.978057][ T7624] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 98.074431][ T7557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.169118][ T7557] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.336947][ T5728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.344524][ T5728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.346094][ T5728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.357302][ T5728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.357953][ T5728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.381185][ T7557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.383559][ T7557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.384071][ T7557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.399489][ T7557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.400051][ T7557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.402733][ T7557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.403261][ T7557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.407106][ T7557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.455935][ T7659] FAULT_INJECTION: forcing a failure. [ 98.455935][ T7659] name failslab, interval 1, probability 0, space 0, times 0 [ 98.455956][ T7659] CPU: 0 UID: 0 PID: 7659 Comm: syz.0.628 Not tainted syzkaller #0 PREEMPT(full) [ 98.455969][ T7659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.455976][ T7659] Call Trace: [ 98.455980][ T7659] [ 98.455985][ T7659] dump_stack_lvl+0x100/0x190 [ 98.456006][ T7659] should_fail_ex.cold+0x5/0xa [ 98.456024][ T7659] should_failslab+0xc2/0x120 [ 98.456040][ T7659] kmem_cache_alloc_noprof+0x92/0x6a0 [ 98.456054][ T7659] ? security_file_alloc+0x34/0x2c0 [ 98.456072][ T7659] security_file_alloc+0x34/0x2c0 [ 98.456089][ T7659] init_file+0x95/0x480 [ 98.456124][ T7659] alloc_empty_file+0x79/0x1c0 [ 98.456144][ T7659] alloc_file_pseudo+0x183/0x290 [ 98.456162][ T7659] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 98.456178][ T7659] ? inode_init_always_gfp+0xc90/0xfb0 [ 98.456199][ T7659] sock_alloc_file+0x50/0x210 [ 98.456217][ T7659] do_accept+0x242/0x530 [ 98.456230][ T7659] ? do_raw_spin_lock+0x128/0x260 [ 98.456245][ T7659] ? __pfx_do_accept+0x10/0x10 [ 98.456266][ T7659] __sys_accept4+0x108/0x200 [ 98.456280][ T7659] ? __pfx___sys_accept4+0x10/0x10 [ 98.456292][ T7659] ? xfd_validate_state+0x129/0x190 [ 98.456309][ T7659] __x64_sys_accept4+0x96/0x100 [ 98.456322][ T7659] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.456340][ T7659] do_syscall_64+0x123/0x790 [ 98.456351][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.456363][ T7659] RIP: 0033:0x7fd5fb59e159 [ 98.456373][ T7659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.456384][ T7659] RSP: 002b:00007fd5fc3cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 98.456396][ T7659] RAX: ffffffffffffffda RBX: 00007fd5fb825fa0 RCX: 00007fd5fb59e159 [ 98.456403][ T7659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 98.456411][ T7659] RBP: 00007fd5fb63506b R08: 0000000000000000 R09: 0000000000000000 [ 98.456418][ T7659] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000000 [ 98.456426][ T7659] R13: 00007fd5fb826038 R14: 00007fd5fb825fa0 R15: 00007ffd54f63238 [ 98.456441][ T7659] [ 98.492189][ T7557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.515794][ T7557] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.523380][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.523514][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.531376][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.531422][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.931469][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.931544][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.931646][ T7644] bridge_slave_0: entered allmulticast mode [ 98.932518][ T7644] bridge_slave_0: entered promiscuous mode [ 98.935570][ T7557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.935989][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.936031][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.936100][ T7644] bridge_slave_1: entered allmulticast mode [ 98.938451][ T7644] bridge_slave_1: entered promiscuous mode [ 98.946731][ T5733] Bluetooth: hci0: command tx timeout [ 98.957135][ T7644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.961418][ T7644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.984592][ T7644] team0: Port device team_slave_0 added [ 98.988726][ T7644] team0: Port device team_slave_1 added [ 99.022940][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.022956][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.022974][ T7644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.030394][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.030409][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.030429][ T7644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.130940][ T7644] hsr_slave_0: entered promiscuous mode [ 99.131394][ T7644] hsr_slave_1: entered promiscuous mode [ 99.131687][ T7644] debugfs: 'hsr0' already exists in 'hsr' [ 99.131699][ T7644] Cannot create hsr debugfs directory [ 99.148433][ T7557] veth0_vlan: entered promiscuous mode [ 99.184822][ T7557] veth1_vlan: entered promiscuous mode [ 99.302995][ T7557] veth0_macvtap: entered promiscuous mode [ 99.393823][ T7644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.448675][ T7557] veth1_macvtap: entered promiscuous mode [ 99.459986][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.464359][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.602374][ T7644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.666865][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.667503][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.667639][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.667753][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.728828][ T7644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.750747][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.750769][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.829408][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.829431][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.878218][ T7644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.059399][ T7644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.064409][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.065295][ T7644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.079647][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.080404][ T7644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.082519][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.083389][ T7644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.093021][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.102988][ T7760] bond0: option arp_validate: invalid value ( |-- 127.) [ 100.218898][ T7644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.232948][ T7644] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.241699][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.241744][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.251114][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.251165][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.387144][ T5733] Bluetooth: hci2: command tx timeout [ 100.668393][ T7644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.693467][ T7644] veth0_vlan: entered promiscuous mode [ 100.698857][ T7644] veth1_vlan: entered promiscuous mode [ 100.722581][ T7644] veth0_macvtap: entered promiscuous mode [ 100.731079][ T7644] veth1_macvtap: entered promiscuous mode [ 100.743113][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.754225][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.762108][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.816739][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.816779][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.816808][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.847608][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.847621][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.871597][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.871740][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.885937][ T7819] bond0: option arp_validate: invalid value ( |-- 127.) [ 101.026996][ T5733] Bluetooth: hci0: command tx timeout [ 101.081862][ T7840] .: renamed from bond0 (while UP) [ 101.193948][ T7853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.193968][ T7853] block device autoloading is deprecated and will be removed. [ 101.569719][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 101.569736][ T43] audit: type=1400 audit(1790329458.013:31951): avc: denied { read } for pid=7884 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.727663][ T43] audit: type=1400 audit(1790329458.173:31952): avc: denied { connect } for pid=7893 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.734943][ T7905] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.810891][ T43] audit: type=1400 audit(1790329458.253:31953): avc: denied { create } for pid=7912 comm="syz.3.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 101.811564][ T43] audit: type=1400 audit(1790329458.253:31954): avc: denied { write } for pid=7912 comm="syz.3.722" path="socket:[20298]" dev="sockfs" ino=20298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 101.912414][ T43] audit: type=1400 audit(1790329458.353:31955): avc: denied { block_suspend } for pid=7927 comm="syz.3.728" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.912433][ T7928] FAULT_INJECTION: forcing a failure. [ 101.912433][ T7928] name failslab, interval 1, probability 0, space 0, times 0 [ 101.912523][ T7928] CPU: 0 UID: 0 PID: 7928 Comm: syz.3.728 Not tainted syzkaller #0 PREEMPT(full) [ 101.912538][ T7928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.912544][ T7928] Call Trace: [ 101.912549][ T7928] [ 101.912554][ T7928] dump_stack_lvl+0x100/0x190 [ 101.912576][ T7928] should_fail_ex.cold+0x5/0xa [ 101.912593][ T7928] should_failslab+0xc2/0x120 [ 101.912610][ T7928] __kmalloc_cache_noprof+0x91/0x6d0 [ 101.912630][ T7928] ? device_add+0xd3f/0x1970 [ 101.912649][ T7928] device_add+0xd3f/0x1970 [ 101.912677][ T7928] ? dev_set_name+0xc7/0x100 [ 101.912688][ T7928] ? __pfx_dev_set_name+0x10/0x10 [ 101.912698][ T7928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.912712][ T7928] ? __pfx_device_add+0x10/0x10 [ 101.912733][ T7928] ? lockdep_init_map_type+0x5c/0x250 [ 101.912748][ T7928] ? __init_waitqueue_head+0xca/0x150 [ 101.912767][ T7928] wakeup_source_device_create+0x243/0x2e0 [ 101.912787][ T7928] wakeup_source_sysfs_add+0x1c/0x90 [ 101.912805][ T7928] wakeup_source_register+0x154/0x3e0 [ 101.912822][ T7928] ep_create_wakeup_source+0x1df/0x2e0 [ 101.912840][ T7928] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 101.912859][ T7928] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 101.912869][ T7928] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 101.912883][ T7928] do_epoll_ctl_file+0x1e26/0x36e0 [ 101.912899][ T7928] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 101.912909][ T7928] ? lock_acquire+0x1d1/0x380 [ 101.912921][ T7928] ? __fget_files+0x34/0x3d0 [ 101.912936][ T7928] ? find_held_lock+0x2b/0x80 [ 101.912952][ T7928] ? __fget_files+0x215/0x3d0 [ 101.912969][ T7928] ? __fget_files+0x21f/0x3d0 [ 101.912987][ T7928] ? do_epoll_ctl+0xfd/0x1a0 [ 101.912998][ T7928] do_epoll_ctl+0xfd/0x1a0 [ 101.913009][ T7928] ? __pfx_do_epoll_ctl+0x10/0x10 [ 101.913024][ T7928] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 101.913035][ T7928] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 101.913051][ T7928] do_syscall_64+0x123/0x790 [ 101.913064][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.913076][ T7928] RIP: 0033:0x7f5b8cd9e159 [ 101.913086][ T7928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.913097][ T7928] RSP: 002b:00007f5b8dce1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 101.913108][ T7928] RAX: ffffffffffffffda RBX: 00007f5b8d025fa0 RCX: 00007f5b8cd9e159 [ 101.913116][ T7928] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 101.913122][ T7928] RBP: 00007f5b8ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 101.913129][ T7928] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 101.913136][ T7928] R13: 00007f5b8d026038 R14: 00007f5b8d025fa0 R15: 00007ffe1418a9d8 [ 101.913151][ T7928] [ 101.989768][ T7930] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 102.186301][ T7953] loop0: detected capacity change from 0 to 1 [ 102.241155][ T7953] ldm_validate_privheads(): Disk read failed. [ 102.241209][ T7953] loop0: [ 102.241225][ T7953] loop0: partition table partially beyond EOD, truncated [ 102.435590][ T43] audit: type=1400 audit(1790329458.873:31956): avc: denied { mount } for pid=7967 comm="syz.3.746" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 102.462887][ T43] audit: type=1400 audit(1790329458.903:31957): avc: denied { unmount } for pid=7557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 102.476281][ T5733] Bluetooth: hci2: command tx timeout [ 102.737892][ T7980] sctp: [Deprecated]: syz.1.751 (pid 7980) Use of int in maxseg socket option. [ 102.737892][ T7980] Use struct sctp_assoc_value instead [ 102.761219][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.879190][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.969442][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.983326][ T43] audit: type=1400 audit(1790329459.423:31958): avc: denied { write } for pid=7993 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.019739][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.025432][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.035726][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.037835][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.038434][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.072216][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.240769][ T8018] FAULT_INJECTION: forcing a failure. [ 103.240769][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 103.240790][ T8018] CPU: 1 UID: 0 PID: 8018 Comm: syz.2.764 Not tainted syzkaller #0 PREEMPT(full) [ 103.240804][ T8018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.240811][ T8018] Call Trace: [ 103.240815][ T8018] [ 103.240820][ T8018] dump_stack_lvl+0x100/0x190 [ 103.240842][ T8018] should_fail_ex.cold+0x5/0xa [ 103.240858][ T8018] should_failslab+0xc2/0x120 [ 103.240875][ T8018] __kmalloc_node_noprof+0xff/0x880 [ 103.240888][ T8018] ? __get_vm_area_node+0x1ff/0x350 [ 103.240902][ T8018] ? __get_vm_area_node+0x22b/0x350 [ 103.240916][ T8018] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 103.240935][ T8018] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 103.240956][ T8018] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 103.240975][ T8018] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.240993][ T8018] ? __lock_acquire+0x5c0/0x1f40 [ 103.241006][ T8018] ? avc_has_perm_noaudit+0x11e/0x470 [ 103.241023][ T8018] ? avc_has_perm_noaudit+0x11e/0x470 [ 103.241041][ T8018] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 103.241056][ T8018] __vmalloc_node_noprof+0xad/0xf0 [ 103.241071][ T8018] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 103.241087][ T8018] __vmalloc_noprof+0xa3/0x120 [ 103.241103][ T8018] ? __pfx___vmalloc_noprof+0x10/0x10 [ 103.241123][ T8018] bpf_prog_alloc_no_stats+0x59/0x690 [ 103.241140][ T8018] bpf_prog_alloc+0x3b/0x200 [ 103.241153][ T8018] ? security_capable+0x80/0x260 [ 103.241172][ T8018] __get_filter+0x112/0x2c0 [ 103.241190][ T8018] sk_attach_filter+0x1c/0x150 [ 103.241204][ T8018] sk_setsockopt+0x3a9b/0x5d80 [ 103.241223][ T8018] ? __pfx_sk_setsockopt+0x10/0x10 [ 103.241239][ T8018] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 103.241254][ T8018] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 103.241273][ T8018] ? find_held_lock+0x2b/0x80 [ 103.241291][ T8018] ? selinux_socket_setsockopt+0x6a/0x80 [ 103.241306][ T8018] do_sock_setsockopt+0x193/0x1d0 [ 103.241325][ T8018] __sys_setsockopt+0x195/0x220 [ 103.241342][ T8018] __x64_sys_setsockopt+0xbd/0x160 [ 103.241356][ T8018] ? do_syscall_64+0xae/0x790 [ 103.241366][ T8018] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.241383][ T8018] do_syscall_64+0x123/0x790 [ 103.241395][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.241406][ T8018] RIP: 0033:0x7f247679e159 [ 103.241416][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.241427][ T8018] RSP: 002b:00007f247766e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.241439][ T8018] RAX: ffffffffffffffda RBX: 00007f2476a25fa0 RCX: 00007f247679e159 [ 103.241446][ T8018] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 103.241453][ T8018] RBP: 00007f247683506b R08: 0000000000000010 R09: 0000000000000000 [ 103.241460][ T8018] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 103.241466][ T8018] R13: 00007f2476a26038 R14: 00007f2476a25fa0 R15: 00007ffe5f05b7a8 [ 103.241481][ T8018] [ 103.241596][ T8018] syz.2.764: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.241687][ T8018] CPU: 1 UID: 0 PID: 8018 Comm: syz.2.764 Not tainted syzkaller #0 PREEMPT(full) [ 103.241711][ T8018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.241719][ T8018] Call Trace: [ 103.241723][ T8018] [ 103.241727][ T8018] dump_stack_lvl+0x100/0x190 [ 103.241746][ T8018] warn_alloc.cold+0x9e/0xb2 [ 103.241759][ T8018] ? __pfx_warn_alloc+0x10/0x10 [ 103.241771][ T8018] ? dump_stack_lvl+0x17c/0x190 [ 103.241788][ T8018] ? rcu_is_watching+0x13/0xc0 [ 103.241806][ T8018] ? __kasan_kmalloc+0x8a/0xb0 [ 103.241820][ T8018] ? __kmalloc_node_noprof+0x360/0x880 [ 103.241832][ T8018] ? __get_vm_area_node+0x1ff/0x350 [ 103.241846][ T8018] ? __get_vm_area_node+0x22b/0x350 [ 103.241860][ T8018] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 103.241879][ T8018] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 103.241899][ T8018] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 103.241917][ T8018] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.241933][ T8018] ? __lock_acquire+0x5c0/0x1f40 [ 103.241947][ T8018] ? avc_has_perm_noaudit+0x11e/0x470 [ 103.241963][ T8018] ? avc_has_perm_noaudit+0x11e/0x470 [ 103.241981][ T8018] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 103.241996][ T8018] __vmalloc_node_noprof+0xad/0xf0 [ 103.242013][ T8018] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 103.242029][ T8018] __vmalloc_noprof+0xa3/0x120 [ 103.242044][ T8018] ? __pfx___vmalloc_noprof+0x10/0x10 [ 103.242068][ T8018] bpf_prog_alloc_no_stats+0x59/0x690 [ 103.242091][ T8018] bpf_prog_alloc+0x3b/0x200 [ 103.242109][ T8018] ? security_capable+0x80/0x260 [ 103.242136][ T8018] __get_filter+0x112/0x2c0 [ 103.242154][ T8018] sk_attach_filter+0x1c/0x150 [ 103.242170][ T8018] sk_setsockopt+0x3a9b/0x5d80 [ 103.242222][ T8018] ? __pfx_sk_setsockopt+0x10/0x10 [ 103.242246][ T8018] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 103.242262][ T8018] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 103.242282][ T8018] ? find_held_lock+0x2b/0x80 [ 103.242302][ T8018] ? selinux_socket_setsockopt+0x6a/0x80 [ 103.242318][ T8018] do_sock_setsockopt+0x193/0x1d0 [ 103.242338][ T8018] __sys_setsockopt+0x195/0x220 [ 103.242356][ T8018] __x64_sys_setsockopt+0xbd/0x160 [ 103.242369][ T8018] ? do_syscall_64+0xae/0x790 [ 103.242379][ T8018] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.242396][ T8018] do_syscall_64+0x123/0x790 [ 103.242408][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.242419][ T8018] RIP: 0033:0x7f247679e159 [ 103.242429][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.242439][ T8018] RSP: 002b:00007f247766e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.242451][ T8018] RAX: ffffffffffffffda RBX: 00007f2476a25fa0 RCX: 00007f247679e159 [ 103.242458][ T8018] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 103.242464][ T8018] RBP: 00007f247683506b R08: 0000000000000010 R09: 0000000000000000 [ 103.242471][ T8018] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 103.242478][ T8018] R13: 00007f2476a26038 R14: 00007f2476a25fa0 R15: 00007ffe5f05b7a8 [ 103.242492][ T8018] [ 103.242529][ T8018] Mem-Info: [ 103.242537][ T8018] active_anon:10452 inactive_anon:0 isolated_anon:0 [ 103.242537][ T8018] active_file:0 inactive_file:65358 isolated_file:0 [ 103.242537][ T8018] unevictable:1000 dirty:362 writeback:0 [ 103.242537][ T8018] slab_reclaimable:12201 slab_unreclaimable:74647 [ 103.242537][ T8018] mapped:26440 shmem:1555 pagetables:1316 [ 103.242537][ T8018] sec_pagetables:296 bounce:0 [ 103.242537][ T8018] kernel_misc_reclaimable:0 [ 103.242537][ T8018] free:418401 free_pcp:17040 free_cma:0 [ 103.242582][ T8018] Node 0 active_anon:41796kB inactive_anon:0kB active_file:0kB inactive_file:261128kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:105760kB dirty:1448kB writeback:0kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15712kB pagetables:5060kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 103.242613][ T8018] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 103.242643][ T8018] Node 0 DMA free:8300kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 103.242676][ T8018] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 103.244435][ T8018] Node 0 DMA32 free:63232kB boost:6144kB min:33500kB low:40336kB high:47172kB reserved_highatomic:0kB free_highatomic:0kB active_anon:41796kB inactive_anon:0kB active_file:0kB inactive_file:261128kB unevictable:2000kB writepending:1448kB zspages:0kB present:2080628kB managed:1253172kB mlocked:0kB bounce:0kB free_pcp:42692kB local_pcp:9108kB free_cma:0kB [ 103.244516][ T8018] lowmem_reserve[]: 0 0 0 0 0 [ 103.244547][ T8018] Node 1 Normal free:1602072kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:25328kB local_pcp:5024kB free_cma:0kB [ 103.244579][ T8018] lowmem_reserve[]: 0 0 0 0 0 [ 103.244597][ T8018] Node 0 DMA: 5*4kB (UE) 9*8kB (U) 5*16kB (U) 6*32kB (UE) 4*64kB (UE) 2*128kB (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UE) 2*2048kB (M) 0*4096kB = 8300kB [ 103.244823][ T8018] Node 0 DMA32: 1*4kB (U) 2*8kB (UM) 82*16kB (UM) 88*32kB (UME) 67*64kB (UM) 92*128kB (UME) 64*256kB (UME) 24*512kB (M) 8*1024kB (M) 3*2048kB (UM) 0*4096kB = 63220kB [ 103.244916][ T8018] Node 1 Normal: 14*4kB (UM) 38*8kB (UME) 29*16kB (UME) 45*32kB (UME) 37*64kB (UME) 26*128kB (UM) 19*256kB (UME) 12*512kB (UME) 4*1024kB (UM) 5*2048kB (UME) 383*4096kB (UM) = 1602072kB [ 103.245011][ T8018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.245020][ T8018] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.245028][ T8018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.245036][ T8018] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.245044][ T8018] 66909 total pagecache pages [ 103.245049][ T8018] 0 pages in swap cache [ 103.245052][ T8018] Free swap = 124996kB [ 103.245056][ T8018] Total swap = 124996kB [ 103.245061][ T8018] 1048443 pages RAM [ 103.245067][ T8018] 0 pages HighMem/MovableOnly [ 103.245072][ T8018] 285840 pages reserved [ 103.245077][ T8018] 0 pages cma reserved [ 103.260988][ T12] bridge_slave_1: left allmulticast mode [ 103.261015][ T12] bridge_slave_1: left promiscuous mode [ 103.262653][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.281688][ T12] bridge_slave_0: left allmulticast mode [ 103.281707][ T12] bridge_slave_0: left promiscuous mode [ 103.281816][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.313378][ T43] audit: type=1400 audit(1790329459.753:31959): avc: denied { write } for pid=8023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.372304][ T43] audit: type=1400 audit(1790329459.813:31960): avc: denied { write } for pid=8030 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.509075][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.554405][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.564563][ T12] bond0 (unregistering): Released all slaves [ 103.575242][ T5441] 8021q: adding VLAN 0 to HW filter on device eth2 [ 103.811859][ T5441] 8021q: adding VLAN 0 to HW filter on device eth3 [ 103.964708][ T12] hsr_slave_0: left promiscuous mode [ 103.971110][ T12] hsr_slave_1: left promiscuous mode [ 103.971560][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.971584][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.975878][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.975897][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.020575][ T12] veth1_macvtap: left promiscuous mode [ 104.020630][ T12] veth0_macvtap: left promiscuous mode [ 104.020721][ T12] veth1_vlan: left promiscuous mode [ 104.020798][ T12] veth0_vlan: left promiscuous mode [ 104.228741][ T12] team0 (unregistering): Port device team_slave_1 removed [ 104.257045][ T12] team0 (unregistering): Port device team_slave_0 removed [ 104.354110][ T5441] 8021q: adding VLAN 0 to HW filter on device eth4 [ 104.423131][ T7992] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.423393][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.423501][ T7992] bridge_slave_0: entered allmulticast mode [ 104.425044][ T7992] bridge_slave_0: entered promiscuous mode [ 104.437812][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.437857][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.437922][ T7992] bridge_slave_1: entered allmulticast mode [ 104.438854][ T7992] bridge_slave_1: entered promiscuous mode [ 104.465125][ T7992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.468163][ T7992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.487821][ T7992] team0: Port device team_slave_0 added [ 104.493359][ T7992] team0: Port device team_slave_1 added [ 104.530034][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.530051][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.530072][ T7992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.536088][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.536100][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.536203][ T7992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.565753][ T7992] hsr_slave_0: entered promiscuous mode [ 104.565807][ T5728] Bluetooth: hci2: command tx timeout [ 104.566925][ T7992] hsr_slave_1: entered promiscuous mode [ 104.567338][ T7992] debugfs: 'hsr0' already exists in 'hsr' [ 104.567350][ T7992] Cannot create hsr debugfs directory [ 104.640789][ T5441] 8021q: adding VLAN 0 to HW filter on device eth5 [ 104.733454][ T8113] netlink: 72 bytes leftover after parsing attributes in process `syz.2.788'. [ 105.107334][ T5728] Bluetooth: hci0: command tx timeout [ 105.212733][ T8161] Console: switching to colour dummy device 80x25 [ 105.385547][ T8165] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 105.429802][ T8165] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 105.429994][ T8165] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 105.430072][ T8165] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 105.430201][ T8165] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 105.430874][ T8165] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 105.468304][ T8165] pci 0000:00:01.0: Adding to iommu group 1 [ 105.472512][ T8165] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 105.472531][ T8165] pci 0000:00:01.0: vgaarb: bridge control possible [ 105.472539][ T8165] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 105.504913][ T8165] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 105.512842][ T8165] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 105.522884][ T8165] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 105.657426][ T8165] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 105.657504][ T8165] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 105.658437][ T8165] [drm] features: -virgl +edid -resource_blob -host_visible [ 105.658446][ T8165] [drm] features: -context_init -blob_alignment [ 105.711129][ T8165] ------------[ cut here ]------------ [ 105.711144][ T8165] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 105.711154][ T8165] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#2: syz.0.805/8165 [ 105.720022][ T8165] Modules linked in: [ 105.721366][ T8165] CPU: 2 UID: 0 PID: 8165 Comm: syz.0.805 Not tainted syzkaller #0 PREEMPT(full) [ 105.724173][ T8165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.727321][ T8165] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 105.729466][ T8165] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 86 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 f2 b4 70 09 85 c0 75 e0 48 8d 3d a7 db ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 72 b6 70 09 48 85 c0 0f [ 105.736240][ T8165] RSP: 0018:ffffc900059eef18 EFLAGS: 00010246 [ 105.738119][ T8165] RAX: 0000000000000000 RBX: ffff8880254157c0 RCX: fffff52000b3ddbe [ 105.740571][ T8165] RDX: 0000000000000000 RSI: ffffffff8c91a3e0 RDI: ffffffff9149ddc0 [ 105.743036][ T8165] RBP: ffffffff8c91a3e0 R08: 0000000000000000 R09: fffffbfff228aaab [ 105.745482][ T8165] R10: ffffc900059eef18 R11: 0000000000000001 R12: 0000000000000000 [ 105.748034][ T8165] R13: ffffc900059eef88 R14: 00000000000000d8 R15: ffff888027fb4fce [ 105.750605][ T8165] FS: 00007fd5fc3ac6c0(0000) GS:ffff8880d5d52000(0000) knlGS:0000000000000000 [ 105.753415][ T8165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.755446][ T8165] CR2: 00007f898aded158 CR3: 00000000575aa000 CR4: 0000000000352ef0 [ 105.758477][ T8165] Call Trace: [ 105.759815][ T8165] [ 105.761093][ T8165] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 105.762776][ T8165] ? __pfx__printk+0x10/0x10 [ 105.764428][ T8165] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 105.766800][ T8165] ? lockdep_init_map_type+0x5c/0x250 [ 105.768806][ T8165] virtio_gpu_init.cold+0x40d/0x1293 [ 105.770581][ T8165] ? vga_remove_vgacon.cold+0x1d/0x99 [ 105.772288][ T8165] ? __pfx_virtio_gpu_init+0x10/0x10 [ 105.773959][ T8165] ? is_console_locked+0x9/0x20 [ 105.775475][ T8165] ? con_is_bound+0x141/0x190 [ 105.777152][ T8165] ? vga_remove_vgacon+0x21/0x30 [ 105.778704][ T8165] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 105.780939][ T8165] virtio_gpu_probe+0x21c/0x360 [ 105.782457][ T8165] virtio_dev_probe+0x6a2/0xbe0 [ 105.784126][ T8165] ? __pfx_virtio_dev_probe+0x10/0x10 [ 105.785810][ T8165] ? kernfs_create_link+0x1bd/0x240 [ 105.787601][ T8165] ? kernfs_put+0x3f/0x60 [ 105.788926][ T8165] ? sysfs_do_create_link_sd+0xbb/0x140 [ 105.790607][ T8165] ? sysfs_create_link+0x68/0xc0 [ 105.792135][ T8165] ? __pfx_virtio_dev_probe+0x10/0x10 [ 105.793755][ T8165] really_probe+0x241/0xa60 [ 105.795145][ T8165] __driver_probe_device+0x210/0x460 [ 105.796780][ T8165] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 105.798493][ T8165] driver_probe_device+0x4a/0x140 [ 105.800069][ T8165] __device_attach_driver+0x1df/0x320 [ 105.801703][ T8165] ? __pfx___device_attach_driver+0x10/0x10 [ 105.803810][ T8165] bus_for_each_drv+0x159/0x1e0 [ 105.805465][ T8165] ? __pfx_bus_for_each_drv+0x10/0x10 [ 105.807276][ T8165] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.808896][ T8165] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 105.810732][ T8165] __device_attach+0x1e4/0x4d0 [ 105.812235][ T8165] ? __pfx___device_attach+0x10/0x10 [ 105.813886][ T8165] ? do_raw_spin_unlock+0x145/0x1e0 [ 105.815490][ T8165] device_initial_probe+0xaf/0xd0 [ 105.817247][ T8165] bus_probe_device+0x64/0x160 [ 105.818744][ T8165] device_add+0x121d/0x1970 [ 105.820426][ T8165] ? __pfx_device_add+0x10/0x10 [ 105.822212][ T8165] ? __pfx___might_resched+0x10/0x10 [ 105.824118][ T8165] ? __init_waitqueue_head+0xca/0x150 [ 105.826059][ T8165] ? ioread8+0x8f/0xd0 [ 105.827750][ T8165] register_virtio_device+0x4f0/0x5d0 [ 105.829546][ T8165] ? __pfx_register_virtio_device+0x10/0x10 [ 105.831689][ T8165] ? __pfx_pcibios_set_master+0x10/0x10 [ 105.833756][ T8165] ? __raw_spin_lock_init+0x3a/0x110 [ 105.835671][ T8165] ? __pfx_virtio_pci_probe+0x10/0x10 [ 105.837719][ T8165] virtio_pci_probe+0x255/0x410 [ 105.839680][ T8165] local_pci_probe+0xdd/0x1b0 [ 105.841453][ T8165] pci_call_probe+0x176/0x800 [ 105.843212][ T8165] ? pci_match_device+0x147/0x7d0 [ 105.845100][ T8165] ? __pfx_pci_call_probe+0x10/0x10 [ 105.847187][ T8165] ? __pfx_pci_match_device+0x10/0x10 [ 105.849112][ T8165] ? pci_find_host_bridge+0x3c/0x80 [ 105.850993][ T8165] ? up_write+0x2dc/0x5b0 [ 105.852399][ T8165] pci_device_probe+0x25b/0x400 [ 105.854128][ T8165] ? __pfx_pci_device_probe+0x10/0x10 [ 105.855835][ T8165] ? kernfs_create_link+0x1bd/0x240 [ 105.857668][ T8165] ? sysfs_create_link+0x68/0xc0 [ 105.859441][ T8165] ? __pfx_pci_device_probe+0x10/0x10 [ 105.861423][ T8165] really_probe+0x241/0xa60 [ 105.863055][ T8165] __driver_probe_device+0x210/0x460 [ 105.864734][ T8165] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 105.866625][ T8165] driver_probe_device+0x4a/0x140 [ 105.868200][ T8165] __device_attach_driver+0x1df/0x320 [ 105.869889][ T8165] ? __pfx___device_attach_driver+0x10/0x10 [ 105.870702][ T7992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.873848][ T8165] bus_for_each_drv+0x159/0x1e0 [ 105.875360][ T8165] ? __pfx_bus_for_each_drv+0x10/0x10 [ 105.877098][ T8165] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.878700][ T8165] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 105.880494][ T8165] __device_attach+0x1e4/0x4d0 [ 105.881909][ T8165] ? __pfx___device_attach+0x10/0x10 [ 105.883516][ T8165] ? do_raw_spin_unlock+0x145/0x1e0 [ 105.885118][ T8165] device_initial_probe+0xaf/0xd0 [ 105.886854][ T8165] pci_bus_add_device+0xc5/0x100 [ 105.888378][ T8165] pci_bus_add_devices+0x9a/0x1f0 [ 105.889948][ T8165] pci_rescan_bus+0x2a/0x40 [ 105.891328][ T8165] rescan_store+0xfb/0x130 [ 105.892740][ T8165] ? __pfx_rescan_store+0x10/0x10 [ 105.894265][ T8165] ? sysfs_file_kobj+0xe4/0x290 [ 105.896083][ T8165] ? __pfx_rescan_store+0x10/0x10 [ 105.897728][ T8165] bus_attr_store+0x74/0xb0 [ 105.899138][ T8165] ? __pfx_bus_attr_store+0x10/0x10 [ 105.900763][ T8165] sysfs_kf_write+0xf2/0x150 [ 105.902070][ T8165] kernfs_fop_write_iter+0x3e0/0x5f0 [ 105.903601][ T8165] ? __pfx_sysfs_kf_write+0x10/0x10 [ 105.905199][ T8165] vfs_write+0x6af/0x1050 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 105.907029][ T8165] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 105.909071][ T8165] ? __pfx_vfs_write+0x10/0x10 [ 105.910745][ T8165] ? find_held_lock+0x2b/0x80 [ 105.912261][ T8165] ksys_write+0x12a/0x250 [ 105.913703][ T8165] ? __pfx_ksys_write+0x10/0x10 [ 105.915251][ T8165] do_syscall_64+0x123/0x790 [ 105.916752][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.918624][ T8165] RIP: 0033:0x7fd5fb59e159 [ 105.919967][ T8165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.925669][ T8165] RSP: 002b:00007fd5fc3ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.928268][ T8165] RAX: ffffffffffffffda RBX: 00007fd5fb826090 RCX: 00007fd5fb59e159 [ 105.930687][ T8165] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 105.933039][ T8165] RBP: 00007fd5fb63506b R08: 0000000000000000 R09: 0000000000000000 [ 105.936094][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.939298][ T8165] R13: 00007fd5fb826128 R14: 00007fd5fb826090 R15: 00007ffd54f63238 [ 105.942204][ T8165] [ 105.943414][ T8165] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.945653][ T8165] CPU: 2 UID: 0 PID: 8165 Comm: syz.0.805 Not tainted syzkaller #0 PREEMPT(full) [ 105.948400][ T8165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.951702][ T8165] Call Trace: [ 105.953033][ T8165] [ 105.954170][ T8165] dump_stack_lvl+0x100/0x190 [ 105.955806][ T8165] vpanic+0x553/0x970 [ 105.957176][ T8165] ? __pfx_vpanic+0x10/0x10 [ 105.958574][ T8165] panic+0xd1/0xe0 [ 105.959712][ T8165] ? __pfx_panic+0x10/0x10 [ 105.961066][ T8165] check_panic_on_warn.cold+0x19/0x34 [ 105.962688][ T8165] ? __kmem_cache_create_args+0xa9/0x430 [ 105.964358][ T8165] __warn.cold+0x191/0x318 [ 105.965711][ T8165] __report_bug+0x30f/0x440 [ 105.967085][ T8165] ? __kmem_cache_create_args+0xa9/0x430 [ 105.968829][ T8165] ? __pfx___report_bug+0x10/0x10 [ 105.970376][ T8165] ? preempt_schedule_thunk+0x16/0x40 [ 105.971986][ T8165] ? __mutex_lock+0x8f4/0x1bd0 [ 105.973474][ T8165] ? __kmem_cache_create_args+0x44/0x430 [ 105.975191][ T8165] report_bug_entry+0xe2/0x290 [ 105.976676][ T8165] ? __kmem_cache_create_args+0xac/0x430 [ 105.978341][ T8165] handle_bug+0x1cd/0x2a0 [ 105.979670][ T8165] exc_invalid_op+0x17/0x50 [ 105.981033][ T8165] asm_exc_invalid_op+0x1a/0x20 [ 105.982533][ T8165] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 105.984847][ T8165] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 86 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 f2 b4 70 09 85 c0 75 e0 48 8d 3d a7 db ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 72 b6 70 09 48 85 c0 0f [ 105.990628][ T8165] RSP: 0018:ffffc900059eef18 EFLAGS: 00010246 [ 105.992512][ T8165] RAX: 0000000000000000 RBX: ffff8880254157c0 RCX: fffff52000b3ddbe [ 105.995000][ T8165] RDX: 0000000000000000 RSI: ffffffff8c91a3e0 RDI: ffffffff9149ddc0 [ 105.997386][ T8165] RBP: ffffffff8c91a3e0 R08: 0000000000000000 R09: fffffbfff228aaab [ 105.999788][ T8165] R10: ffffc900059eef18 R11: 0000000000000001 R12: 0000000000000000 [ 106.002188][ T8165] R13: ffffc900059eef88 R14: 00000000000000d8 R15: ffff888027fb4fce [ 106.005342][ T8165] ? __kmem_cache_create_args+0x9e/0x430 [ 106.007558][ T8165] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 106.009749][ T8165] ? __pfx__printk+0x10/0x10 [ 106.011666][ T8165] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 106.014149][ T8165] ? lockdep_init_map_type+0x5c/0x250 [ 106.016361][ T8165] virtio_gpu_init.cold+0x40d/0x1293 [ 106.018491][ T8165] ? vga_remove_vgacon.cold+0x1d/0x99 [ 106.020771][ T8165] ? __pfx_virtio_gpu_init+0x10/0x10 [ 106.023176][ T8165] ? is_console_locked+0x9/0x20 [ 106.025364][ T8165] ? con_is_bound+0x141/0x190 [ 106.027293][ T8165] ? vga_remove_vgacon+0x21/0x30 [ 106.029340][ T8165] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 106.032170][ T8165] virtio_gpu_probe+0x21c/0x360 [ 106.034204][ T8165] virtio_dev_probe+0x6a2/0xbe0 [ 106.036212][ T8165] ? __pfx_virtio_dev_probe+0x10/0x10 [ 106.038417][ T8165] ? kernfs_create_link+0x1bd/0x240 [ 106.040580][ T8165] ? kernfs_put+0x3f/0x60 [ 106.042341][ T8165] ? sysfs_do_create_link_sd+0xbb/0x140 [ 106.044598][ T8165] ? sysfs_create_link+0x68/0xc0 [ 106.046646][ T8165] ? __pfx_virtio_dev_probe+0x10/0x10 [ 106.048811][ T8165] really_probe+0x241/0xa60 [ 106.050698][ T8165] __driver_probe_device+0x210/0x460 [ 106.052869][ T8165] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.055236][ T8165] driver_probe_device+0x4a/0x140 [ 106.057313][ T8165] __device_attach_driver+0x1df/0x320 [ 106.059510][ T8165] ? __pfx___device_attach_driver+0x10/0x10 [ 106.061903][ T8165] bus_for_each_drv+0x159/0x1e0 [ 106.063879][ T8165] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.066045][ T8165] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.068199][ T8165] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.070615][ T8165] __device_attach+0x1e4/0x4d0 [ 106.072557][ T8165] ? __pfx___device_attach+0x10/0x10 [ 106.074740][ T8165] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.076902][ T8165] device_initial_probe+0xaf/0xd0 [ 106.078961][ T8165] bus_probe_device+0x64/0x160 [ 106.080972][ T8165] device_add+0x121d/0x1970 [ 106.082855][ T8165] ? __pfx_device_add+0x10/0x10 [ 106.084870][ T8165] ? __pfx___might_resched+0x10/0x10 [ 106.086919][ T8165] ? __init_waitqueue_head+0xca/0x150 [ 106.089000][ T8165] ? ioread8+0x8f/0xd0 [ 106.090629][ T8165] register_virtio_device+0x4f0/0x5d0 [ 106.092811][ T8165] ? __pfx_register_virtio_device+0x10/0x10 [ 106.094832][ T8165] ? __pfx_pcibios_set_master+0x10/0x10 [ 106.096523][ T8165] ? __raw_spin_lock_init+0x3a/0x110 [ 106.098114][ T8165] ? __pfx_virtio_pci_probe+0x10/0x10 [ 106.099762][ T8165] virtio_pci_probe+0x255/0x410 [ 106.101276][ T8165] local_pci_probe+0xdd/0x1b0 [ 106.102780][ T8165] pci_call_probe+0x176/0x800 [ 106.104205][ T8165] ? pci_match_device+0x147/0x7d0 [ 106.105767][ T8165] ? __pfx_pci_call_probe+0x10/0x10 [ 106.107370][ T8165] ? __pfx_pci_match_device+0x10/0x10 [ 106.109039][ T8165] ? pci_find_host_bridge+0x3c/0x80 [ 106.110626][ T8165] ? up_write+0x2dc/0x5b0 [ 106.111970][ T8165] pci_device_probe+0x25b/0x400 [ 106.113510][ T8165] ? __pfx_pci_device_probe+0x10/0x10 [ 106.115134][ T8165] ? kernfs_create_link+0x1bd/0x240 [ 106.116720][ T8165] ? sysfs_create_link+0x68/0xc0 [ 106.118282][ T8165] ? __pfx_pci_device_probe+0x10/0x10 [ 106.119858][ T8165] really_probe+0x241/0xa60 [ 106.121217][ T8165] __driver_probe_device+0x210/0x460 [ 106.122818][ T8165] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.124674][ T8165] driver_probe_device+0x4a/0x140 [ 106.126195][ T8165] __device_attach_driver+0x1df/0x320 [ 106.127776][ T8165] ? __pfx___device_attach_driver+0x10/0x10 [ 106.129579][ T8165] bus_for_each_drv+0x159/0x1e0 [ 106.131039][ T8165] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.132677][ T8165] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.134210][ T8165] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.135937][ T8165] __device_attach+0x1e4/0x4d0 [ 106.137328][ T8165] ? __pfx___device_attach+0x10/0x10 [ 106.138809][ T8165] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.140417][ T8165] device_initial_probe+0xaf/0xd0 [ 106.141914][ T8165] pci_bus_add_device+0xc5/0x100 [ 106.143703][ T8165] pci_bus_add_devices+0x9a/0x1f0 [ 106.145704][ T8165] pci_rescan_bus+0x2a/0x40 [ 106.147489][ T8165] rescan_store+0xfb/0x130 [ 106.149175][ T8165] ? __pfx_rescan_store+0x10/0x10 [ 106.150658][ T8165] ? sysfs_file_kobj+0xe4/0x290 [ 106.152115][ T8165] ? __pfx_rescan_store+0x10/0x10 [ 106.153910][ T8165] bus_attr_store+0x74/0xb0 [ 106.155283][ T8165] ? __pfx_bus_attr_store+0x10/0x10 [ 106.156822][ T8165] sysfs_kf_write+0xf2/0x150 [ 106.158244][ T8165] kernfs_fop_write_iter+0x3e0/0x5f0 [ 106.159798][ T8165] ? __pfx_sysfs_kf_write+0x10/0x10 [ 106.161361][ T8165] vfs_write+0x6af/0x1050 [ 106.162697][ T8165] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 106.164480][ T8165] ? __pfx_vfs_write+0x10/0x10 [ 106.165917][ T8165] ? find_held_lock+0x2b/0x80 [ 106.167336][ T8165] ksys_write+0x12a/0x250 [ 106.168627][ T8165] ? __pfx_ksys_write+0x10/0x10 [ 106.170099][ T8165] do_syscall_64+0x123/0x790 [ 106.171465][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.173426][ T8165] RIP: 0033:0x7fd5fb59e159 [ 106.174844][ T8165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.180738][ T8165] RSP: 002b:00007fd5fc3ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.183758][ T8165] RAX: ffffffffffffffda RBX: 00007fd5fb826090 RCX: 00007fd5fb59e159 [ 106.186743][ T8165] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 106.189622][ T8165] RBP: 00007fd5fb63506b R08: 0000000000000000 R09: 0000000000000000 [ 106.192260][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.194967][ T8165] R13: 00007fd5fb826128 R14: 00007fd5fb826090 R15: 00007ffd54f63238 [ 106.197682][ T8165] [ 106.199503][ T8165] Kernel Offset: disabled [ 106.201071][ T8165] Rebooting in 86400 seconds..