last executing test programs: 26.391701855s ago: executing program 2 (id=391): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$video(&(0x7f0000000440), 0x200000000000008, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x100010, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="189352d526b2916c968ba1479e70000000472e0c9157f3903420aeaa143a0c53f9fe23"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, r3, 0x15, 0x0, @val=@tcx={@void, @value, @void, @void, r4}}, 0x1c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) getsockopt(r6, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}]}}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r10 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0x300, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x6) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r14, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0xd, 0x3, 0x7, 0x1, 0x7ad8, 0x100, 0x4256}, {0x80000019, 0xfffffffd, 0x2, 0x0, 0x7, 0x8, 0x7}, {0x1, 0x2, 0x6, 0x8, 0x0, 0x6fb6, 0x7fffffff}]}) mmap(&(0x7f00004e2000/0x2000)=nil, 0x2000, 0x1000009, 0x11, r9, 0x0) 25.422331058s ago: executing program 2 (id=392): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 25.241321082s ago: executing program 2 (id=394): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 25.089734186s ago: executing program 2 (id=396): socket$rds(0x15, 0x5, 0x0) syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, &(0x7f00000003c0)={0x0, &(0x7f0000000300)="cfb3073deba5d3c2a0af099f937c47ba02f8812694945d137ed13fc6c240b43776f7116c32e28c205abb94905127b04d544246e20b43246831203c009dfccda82d4f3735b07fe7d96d84994cc321e14c4f89ea849c6f3f45a06967afa61f26dd", 0x60}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a310001010a"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 24.352559829s ago: executing program 2 (id=404): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x10900, 0x0) r5 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) pread64(r7, &(0x7f00000000c0)=""/171, 0xab, 0x9b) sendmsg$nl_route(r0, 0x0, 0x40804) 21.609639324s ago: executing program 2 (id=444): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) read$nci(r2, 0x0, 0x0) close(r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000023, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x821, 0x0) 6.539490481s ago: executing program 32 (id=444): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) read$nci(r2, 0x0, 0x0) close(r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000023, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x821, 0x0) 3.878764028s ago: executing program 3 (id=679): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x202, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x34, 0x2000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) 3.819860441s ago: executing program 3 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r2, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x86, 0xfd}, {0x1}, @addr={0x5b, 0x5d}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7}, {}, {0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {0xff, 0xfd}, @connect={{0x7, 0x5f}, {0x2, 0x1}}}, {0x1, 0x0, 0x1, 0x0, @tick=0x6, {0x8, 0x1}, {0x4, 0x8}, @quote={{0x2, 0x7}, 0x8}}], 0x70) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="430f01c836450f30c421fc1029c422218c4907b805000000b98adf32540f01c166baf80cb8dd881885ef66bafc0cec0f01c2b805000000c4a20dddae007800006666460f3a0e711d060f01c466baf80cb83464e888ef66bafc0ced", 0x5b}], 0x1, 0x44, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) (async) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) (async) close(0x3) r4 = open(&(0x7f00000000c0)='./dev/ttyUSB0\x00', 0x4100, 0x106) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) recvmsg$inet_nvme(r5, &(0x7f0000000800)={&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000680)=""/225, 0xe1}], 0x2, &(0x7f00000007c0)=""/27, 0x1b}, 0x40000001) sendmsg$nl_netfilter(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x154, 0xa, 0x3, 0x101, 0x70bd26, 0x25dfdbfe, {0x1, 0x0, 0x3}, [@generic="0342e270294abe932d9278a9c4112df54d41f550977db43768e2f418e154cf21834b1064aaf5fa5d3c44f0fe84f9ad2664230c7c4e03e5b6420458025a4cafd8b7c8639a982f3a6f956b447ce973b14690c8ec2a27a5105124f493e362a5a95e9977a38cddd374f1f015a33940dba7de0fd3b77a681e3de64e9fa14b31c5fb92b2de22e73844c6e87ad519ac27", @generic="09a04833236168062bc2137f054dc2008975f93ba3ad745371931e7ecc59d4ee6c9395d64e44ffd00f9335464088dd31040d8be594609c3c50ca2f0409966500e671ea4f1e202c3e1713104175f26cf0d1d88d122e459f3c5f5fa8e265414ac0ef98c6535493abe73dd9723255d2138f836ffd25b4c6cfe4f44dc6d56cdd456f8d0847804f46b3c3329ff84af88591640ba2fedcb2affd3c11f58de5acdf9c89f80146bd2a12951cdb9e206c37fde6ae6a1f9d"]}, 0x154}, 0x1, 0x0, 0x0, 0x48041}, 0x4000083) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.291265961s ago: executing program 3 (id=701): r0 = fanotify_init(0x200, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000874, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x8000026, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x28) 2.170710643s ago: executing program 3 (id=703): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000008500000001000000150007000fd90000bf06000000000000bf6100000000000007010000060000008500000050000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.011800264s ago: executing program 3 (id=707): socket$rds(0x15, 0x5, 0x0) syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000080000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a310001010a"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.951088535s ago: executing program 3 (id=709): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000002280)={0x10}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:tmp_t:s0\x00', 0x1b) socket$inet(0x2, 0x1, 0x4) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000500)) r5 = dup(r4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x222200, 0x0) r7 = fcntl$dupfd(r3, 0x0, r6) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0xac, 0x100000004}) r9 = semget$private(0x0, 0x6, 0x0) semtimedop(r9, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r9, &(0x7f00000000c0)=[{0x2}], 0x1) 1.680314381s ago: executing program 0 (id=713): r0 = syz_open_dev$admmidi(0x0, 0x20, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000922) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x12c45, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="10080400895504002c001280110001006272696467655f736c61766500000000140005"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}}, 0x0) r9 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000400)=@IORING_OP_FTRUNCATE={0x37, 0x10, 0x0, r0, 0xd, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x6, 0x0, 0x2, 0x0, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xc}]}}]}, 0x38}}, 0x4048000) sendmsg$nl_route_sched(r14, 0x0, 0x0) 1.47421713s ago: executing program 0 (id=714): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000000100000015000700b0ff0000bf06000000000000bf6100000000000007010000060000008500000050000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.388224044s ago: executing program 0 (id=717): modify_ldt$read(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000811010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x18c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x93, 0x3, "c0840356b08a6de794653c7f1b8153d8b74c1f11583b7cc2c6bc306af421935fbf2a25bf85135e9f226fcbaa282a6578dc9586bd7b21912c8ae412fa2f9429a76bc67c8285919656669daf2ea8403ed7e85029c6240f94eda1896a3e9c12a509f4920b576542dc02ad46a365b49c809aa45ce4cd1e3385790048300003317b4b1e81d397b93a4c014b02a09dbcf519"}, @ETHTOOL_A_WOL_SOPASS={0xe1, 0x3, "1dfe5106fffc3d3ec597525040290c53668c99f54c6b3c5fc10ad25d3090e3961cf2ceb15865d5ffc02f7968bad5ae6bb9646596cca7df7d018c37f3bbc6832cdb794da347b9f3ba3e87766111fe5b616cc6a2a9f8bc53fda463c9da77dc47613f914e6ae44f8bc82894984b5ca694b1c717a43e412ad20e50606d49004af21f0883b0859f0674fa0761d5bf44e0f553061719793fc8bf452a219e4112e9c47b7b7541093ebc2cf263d57dcfa55bd2c561940324781a90d3bad8d4e4a9ea65ff0892af5664f89c417da143fd734536d32f9036d96c733e97cd17d92dda"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r1, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x2, 0x6, 0x0, {0x0, 0x19f0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x800, 0x2}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) 1.331902777s ago: executing program 4 (id=718): setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700000000000000004000", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00", [0x7f, 0x9]}}) 1.331760827s ago: executing program 4 (id=719): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x800155aa, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a73867000000000000000600", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00", [0x7f, 0x9]}}) 1.221823902s ago: executing program 4 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.22154932s ago: executing program 0 (id=721): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000600000085000000c2000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.221190568s ago: executing program 4 (id=722): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x8, 0x40009965, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ppoll(&(0x7f00000001c0)=[{r6}, {r5, 0x3004}], 0x2, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x1, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) close(r1) 1.142368118s ago: executing program 0 (id=723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x14, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.071511201s ago: executing program 0 (id=725): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbb9acb004500fe06006400004801907864010102ac1414bb0000907812340001"], 0x0) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) close(0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x806c2, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000000c0)={0x4, 0x401, 0x116d, 0x3, 0x4, "3ba97114d0b623c1ddf8845bc6949555bbcd34", 0x77, 0xc6a}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 1.021995105s ago: executing program 1 (id=727): syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0) syz_emit_ethernet(0xb9, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @broadcast, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0x7f}, {0xfff}, {0x3b, 0x0, 0x1}, {0x2}, {0x7}, {0x10}], @llc={@snap={0xaa, 0x0, "e3", "37eb86", 0x11, "8f88c2bcefbd62bf6d58c7079deeeffad32dcea5d6c90aef29108de0eeb690f991198f7d011841ca07fbdadf4e63eaceb190aefb3e669f718f3cbab9ee84a75ad5f847731ea10f1dd170adc35ca2447a6e128be0b4ba56dc720756ad5c0dcad4313f3e04c2ad311265b9450125a34945791f50663dbd3f5fb4e7cd61718c6986ae0731600713cb"}}}}}}, &(0x7f00000000c0)={0x0, 0x4, [0x8dd, 0x559, 0x4ed, 0xb1]}) 1.02187255s ago: executing program 1 (id=728): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)) 942.643917ms ago: executing program 1 (id=729): socket$rds(0x15, 0x5, 0x0) syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000001010a00000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a310001010a"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 889.499506ms ago: executing program 1 (id=730): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x800156ab, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a73867000000000000000600", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00", [0x7f, 0x9]}}) 842.514196ms ago: executing program 1 (id=731): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 602.320352ms ago: executing program 1 (id=732): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000840)=[{{&(0x7f0000000400)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x400c8c5) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000340)={r6, 0xfa}, 0x8) r7 = socket(0x27, 0x800, 0xfffffffe) r8 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8, r9}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001800010400000000000000000200000000000005000000000600150005000000240016802000010001000000000204000000000020010db8000000000000000000000001"], 0x48}}, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 291.181056ms ago: executing program 4 (id=733): r0 = syz_open_dev$admmidi(0x0, 0x20, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000922) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x12c45, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="10080400895504002c001280110001006272696467655f736c61766500000000140005"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}}, 0x0) r9 = syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000400)=@IORING_OP_FTRUNCATE={0x37, 0x10, 0x0, r0, 0xd, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x6, 0x0, 0x2, 0x0, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xc}]}}]}, 0x38}}, 0x4048000) sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x14, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): sr' [ 38.853779][ T5724] Cannot create hsr debugfs directory [ 38.886432][ T5728] hsr_slave_0: entered promiscuous mode [ 38.886996][ T5728] hsr_slave_1: entered promiscuous mode [ 38.887282][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 38.887293][ T5728] Cannot create hsr debugfs directory [ 39.043457][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.047988][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.065810][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.068189][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.082678][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.085577][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.086436][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.088296][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.122391][ T5726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.126455][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.126933][ T5726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.129310][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.130643][ T5726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.133236][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.133631][ T5726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.137394][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.143610][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.143657][ T5725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.143862][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.143919][ T5725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.196662][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.196746][ T5726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.196948][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.197018][ T5726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.208102][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.211909][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.213689][ T220] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.214702][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.230914][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.233926][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.234320][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.236642][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.240346][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.242685][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.243180][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.247409][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.335373][ T5724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.337696][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.344103][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.344309][ T5724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.347170][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.347852][ T5724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.351363][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.352311][ T5724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.357704][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.404100][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.413492][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.413540][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.426729][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.426958][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.441374][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.474716][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.489850][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.489936][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.491622][ T220] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.491701][ T220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.503442][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.508400][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.531637][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.534495][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.542928][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.542999][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.545368][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.545411][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.561074][ T220] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.561162][ T220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.562680][ T220] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.562743][ T220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.752663][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.782801][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.783881][ T5725] veth0_vlan: entered promiscuous mode [ 39.789466][ T5725] veth1_vlan: entered promiscuous mode [ 39.816047][ T5726] veth0_vlan: entered promiscuous mode [ 39.821097][ T5725] veth0_macvtap: entered promiscuous mode [ 39.825360][ T5725] veth1_macvtap: entered promiscuous mode [ 39.829413][ T5726] veth1_vlan: entered promiscuous mode [ 39.839894][ T5733] Bluetooth: hci2: command tx timeout [ 39.839893][ T5741] Bluetooth: hci1: command tx timeout [ 39.840419][ T5733] Bluetooth: hci3: command tx timeout [ 39.840500][ T5741] Bluetooth: hci0: command tx timeout [ 39.844063][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.852478][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.865646][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.872396][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.888000][ T5726] veth0_macvtap: entered promiscuous mode [ 39.892659][ T5726] veth1_macvtap: entered promiscuous mode [ 39.911306][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.912166][ T5728] veth0_vlan: entered promiscuous mode [ 39.933303][ T5728] veth1_vlan: entered promiscuous mode [ 39.936666][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.958844][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.962047][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.962060][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.993047][ T5724] veth0_vlan: entered promiscuous mode [ 39.994021][ T5728] veth0_macvtap: entered promiscuous mode [ 40.009505][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.009519][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.010245][ T5728] veth1_macvtap: entered promiscuous mode [ 40.013641][ T5724] veth1_vlan: entered promiscuous mode [ 40.029244][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.033133][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.050381][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.050394][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.065416][ T5725] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.077679][ T5724] veth0_macvtap: entered promiscuous mode [ 40.085768][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.085781][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.087838][ T5724] veth1_macvtap: entered promiscuous mode [ 40.099122][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.113458][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.132626][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.132640][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.136502][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.157175][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.157190][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.220425][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220454][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220472][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220490][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220507][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220525][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220543][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220562][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220579][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220597][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220615][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220633][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220650][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.221605][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.221617][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.250696][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.250709][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.259413][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.315042][ T5891] netlink: 'syz.2.5': attribute type 10 has an invalid length. [ 40.326161][ T5891] team0: Port device dummy0 added [ 40.351448][ T5891] netlink: 'syz.2.5': attribute type 16 has an invalid length. [ 40.496278][ T5902] netlink: 'syz.2.8': attribute type 3 has an invalid length. [ 40.496382][ T5902] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8'. [ 41.082598][ T5935] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 41.189940][ T5941] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 41.197817][ T5941] team0: Port device dummy0 added [ 41.243313][ T5945] (syz.2.15,5945,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 41.243332][ T5945] (syz.2.15,5945,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 41.271285][ T5945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 41.273834][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.350044][ T5955] process 'syz.0.17' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 41.414650][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'. [ 41.414671][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'. [ 41.415505][ T5961] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 41.434187][ T5960] Bluetooth: hci4: Frame reassembly failed (-84) [ 41.436428][ T5933] Bluetooth: hci4: Frame reassembly failed (-84) [ 41.452428][ T5963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'. [ 41.452440][ T5964] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 41.509493][ T30] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 41.619548][ T5973] overlayfs: empty lowerdir [ 41.661856][ T30] usb 6-1: not running at top speed; connect to a high speed hub [ 41.661887][ T30] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 41.663175][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.667768][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.667781][ T30] usb 6-1: Product: syz [ 41.667789][ T30] usb 6-1: Manufacturer: syz [ 41.667796][ T30] usb 6-1: SerialNumber: syz [ 41.679660][ T30] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 41.680779][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 41.680811][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 41.683460][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 41.687399][ T30] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 41.689317][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 41.696138][ T30] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 41.703371][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 41.704263][ T30] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 41.705301][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 41.708064][ T30] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 41.819940][ T5979] (syz.3.27,5979,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 41.819967][ T5979] (syz.3.27,5979,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 41.839415][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.27'. [ 41.842470][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.928829][ T5741] Bluetooth: hci0: command tx timeout [ 41.928861][ T5741] Bluetooth: hci1: command tx timeout [ 41.928878][ T5741] Bluetooth: hci2: command tx timeout [ 42.174891][ T6001] FAULT_INJECTION: forcing a failure. [ 42.174891][ T6001] name failslab, interval 1, probability 0, space 0, times 1 [ 42.174912][ T6001] CPU: 3 UID: 0 PID: 6001 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full) [ 42.174951][ T6001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.174958][ T6001] Call Trace: [ 42.174962][ T6001] [ 42.174967][ T6001] dump_stack_lvl+0x100/0x190 [ 42.174988][ T6001] should_fail_ex.cold+0x5/0xa [ 42.175017][ T6001] should_failslab+0xc2/0x120 [ 42.175034][ T6001] kmem_cache_alloc_noprof+0x92/0x6a0 [ 42.175045][ T6001] ? d_instantiate+0x8a/0xb0 [ 42.175060][ T6001] ? alloc_empty_file+0x5b/0x1c0 [ 42.175078][ T6001] alloc_empty_file+0x5b/0x1c0 [ 42.175095][ T6001] alloc_file_pseudo+0x183/0x290 [ 42.175111][ T6001] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 42.175127][ T6001] ? alloc_fd+0x471/0x7a0 [ 42.175141][ T6001] ? do_raw_spin_unlock+0x145/0x1e0 [ 42.175157][ T6001] __anon_inode_getfile+0xe8/0x280 [ 42.175171][ T6001] anon_inode_getfile_fmode+0x37/0xa0 [ 42.175182][ T6001] __do_sys_timerfd_create+0x2d6/0x3f0 [ 42.175194][ T6001] ? do_syscall_64+0xae/0x790 [ 42.175209][ T6001] do_syscall_64+0x123/0x790 [ 42.175225][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.175236][ T6001] RIP: 0033:0x7f258cf9e159 [ 42.175246][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.175256][ T6001] RSP: 002b:00007f258ddbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 42.175267][ T6001] RAX: ffffffffffffffda RBX: 00007f258d225fa0 RCX: 00007f258cf9e159 [ 42.175274][ T6001] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000007 [ 42.175285][ T6001] RBP: 00007f258d03503b R08: 0000000000000000 R09: 0000000000000000 [ 42.175291][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.175297][ T6001] R13: 00007f258d226038 R14: 00007f258d225fa0 R15: 00007ffff514d988 [ 42.175311][ T6001] [ 42.266543][ T6004] kvm: emulating exchange as write [ 42.338183][ T5818] usb 6-1: USB disconnect, device number 2 [ 42.351347][ T5818] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 42.353610][ T5818] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 42.356944][ T5818] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 42.364906][ T5818] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 42.365248][ T5818] keyspan 6-1:1.0: device disconnected [ 42.445419][ T6014] syzkaller0: entered promiscuous mode [ 42.445434][ T6014] syzkaller0: entered allmulticast mode [ 42.849312][ T44] kauditd_printk_skb: 104 callbacks suppressed [ 42.849325][ T44] audit: type=1400 audit(1789409285.183:276): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.917787][ T44] audit: type=1400 audit(1789409285.243:277): avc: denied { create } for pid=6032 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.918444][ T44] audit: type=1400 audit(1789409285.243:278): avc: denied { getopt } for pid=6032 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.971924][ T6035] Process accounting resumed [ 42.991950][ T6037] ======================================================= [ 42.991950][ T6037] WARNING: The mand mount option has been deprecated and [ 42.991950][ T6037] and is ignored by this kernel. Remove the mand [ 42.991950][ T6037] option from the mount to silence this warning. [ 42.991950][ T6037] ======================================================= [ 42.992323][ T44] audit: type=1400 audit(1789409285.323:279): avc: denied { mount } for pid=6036 comm="syz.1.46" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 42.995193][ T44] audit: type=1400 audit(1789409285.323:280): avc: denied { mount } for pid=6036 comm="syz.1.46" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.995633][ T44] audit: type=1400 audit(1789409285.323:281): avc: denied { remount } for pid=6036 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.034134][ T44] audit: type=1400 audit(1789409285.363:282): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 43.059735][ T6040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6040 comm=syz.1.47 [ 43.082419][ T6040] geneve2: entered allmulticast mode [ 43.135624][ T6043] FAULT_INJECTION: forcing a failure. [ 43.135624][ T6043] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.135653][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(full) [ 43.135673][ T6043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.135684][ T6043] Call Trace: [ 43.135690][ T6043] [ 43.135698][ T6043] dump_stack_lvl+0x100/0x190 [ 43.135728][ T6043] should_fail_ex.cold+0x5/0xa [ 43.135754][ T6043] _copy_from_iter+0x1f4/0x1690 [ 43.135776][ T6043] ? __asan_memset+0x23/0x50 [ 43.135795][ T6043] ? __pfx__copy_from_iter+0x10/0x10 [ 43.135813][ T6043] ? __pfx___alloc_skb+0x10/0x10 [ 43.135843][ T6043] netlink_sendmsg+0x808/0xda0 [ 43.135867][ T6043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.135889][ T6043] ? selinux_socket_sendmsg+0x198/0x2f0 [ 43.135912][ T6043] ____sys_sendmsg+0xa4d/0xbe0 [ 43.135937][ T6043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.135959][ T6043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 43.135990][ T6043] ? lock_acquire+0x1d1/0x380 [ 43.136009][ T6043] ? get_pid_task+0x2a/0x250 [ 43.136035][ T6043] ___sys_sendmsg+0x190/0x1e0 [ 43.136063][ T6043] ? __pfx____sys_sendmsg+0x10/0x10 [ 43.136089][ T6043] ? get_pid_task+0x106/0x250 [ 43.136122][ T6043] ? find_held_lock+0x2b/0x80 [ 43.136162][ T6043] __sys_sendmsg+0x160/0x210 [ 43.136185][ T6043] ? __pfx___sys_sendmsg+0x10/0x10 [ 43.136219][ T6043] do_syscall_64+0x123/0x790 [ 43.136246][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.136265][ T6043] RIP: 0033:0x7fa5b859e159 [ 43.136280][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.136296][ T6043] RSP: 002b:00007fa5b9540028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.136315][ T6043] RAX: ffffffffffffffda RBX: 00007fa5b8825fa0 RCX: 00007fa5b859e159 [ 43.136327][ T6043] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 43.136338][ T6043] RBP: 00007fa5b9540090 R08: 0000000000000000 R09: 0000000000000000 [ 43.136348][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.136358][ T6043] R13: 00007fa5b8826038 R14: 00007fa5b8825fa0 R15: 00007fffc667b598 [ 43.136381][ T6043] [ 43.178258][ T6047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.50'. [ 43.223461][ T44] audit: type=1400 audit(1789409285.553:283): avc: denied { create } for pid=6050 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.223489][ T44] audit: type=1400 audit(1789409285.553:284): avc: denied { setopt } for pid=6050 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.227827][ T44] audit: type=1400 audit(1789409285.553:285): avc: denied { bind } for pid=6050 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.229240][ T6051] Zero length message leads to an empty skb [ 43.440252][ T5731] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 43.487328][ T6053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6053 comm=syz.1.51 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 43.920556][ T5731] Bluetooth: hci3: command tx timeout [ 43.999050][ T5731] Bluetooth: hci2: command tx timeout [ 43.999073][ T5731] Bluetooth: hci0: command tx timeout [ 43.999085][ T5731] Bluetooth: hci1: command tx timeout [ 44.055447][ T6063] loop5: detected capacity change from 0 to 7 [ 44.064119][ T6063] Dev loop5: unable to read RDB block 7 [ 44.064153][ T6063] loop5: unable to read partition table [ 44.064302][ T6063] loop5: partition table beyond EOD, truncated [ 44.064316][ T6063] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 44.111716][ T6065] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 44.111733][ T6065] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.112285][ T6065] vhci_hcd vhci_hcd.0: Device attached [ 44.117129][ T6066] vhci_hcd: connection closed [ 44.119651][ T6065] netlink: 'syz.3.57': attribute type 10 has an invalid length. [ 44.123922][ T13] vhci_hcd vhci_hcd.3: stop threads [ 44.123938][ T13] vhci_hcd vhci_hcd.3: release socket [ 44.123963][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 44.127176][ T6065] team0: Port device dummy0 added [ 44.162224][ T6071] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 44.304074][ T6078] Invalid logical block size (65024) [ 44.504864][ T6086] syz.0.65 uses obsolete (PF_INET,SOCK_PACKET) [ 44.505305][ T6086] syzkaller1: entered promiscuous mode [ 44.505316][ T6086] syzkaller1: entered allmulticast mode [ 44.714811][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.71'. [ 44.835858][ T6110] tc_dump_action: action bad kind [ 44.837113][ T6113] tc_dump_action: action bad kind [ 44.902375][ T6121] netlink: 'syz.2.79': attribute type 10 has an invalid length. [ 45.077953][ T6135] nvme_fabrics: missing parameter 'transport=%s' [ 45.077971][ T6135] nvme_fabrics: missing parameter 'nqn=%s' [ 45.148787][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.231720][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'. [ 45.233132][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 45.257782][ T6153] genirq: Flags mismatch irq 8. 00200001 (pcmmio) vs. 00200001 (rtc0) [ 45.261144][ T5879] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 45.319673][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 45.320297][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 45.322583][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.322595][ T9] usb 5-1: Product: syz [ 45.322602][ T9] usb 5-1: Manufacturer: syz [ 45.322609][ T9] usb 5-1: SerialNumber: syz [ 45.324660][ T9] usb 5-1: config 0 descriptor?? [ 45.396191][ T6158] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 45.430250][ T5879] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 45.431084][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.431099][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.431116][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.432537][ T5879] usb 7-1: config 0 descriptor?? [ 45.528252][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 45.575373][ T6164] nvme_fabrics: missing parameter 'transport=%s' [ 45.575385][ T6164] nvme_fabrics: missing parameter 'nqn=%s' [ 45.624031][ T6170] xt_bpf: check failed: parse error [ 45.637533][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.639297][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.000027][ T66] Bluetooth: hci3: command tx timeout [ 46.078690][ T66] Bluetooth: hci2: command tx timeout [ 46.088774][ T5733] Bluetooth: hci1: command tx timeout [ 46.088807][ T66] Bluetooth: hci0: command tx timeout [ 46.146242][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 46.149715][ T9] usb 5-1: USB disconnect, device number 2 [ 46.240497][ T5879] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 46.240521][ T5879] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 46.240532][ T5879] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 46.240544][ T5879] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 46.240555][ T5879] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 46.248761][ T5879] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 46.505588][ T6181] smpboot: CPU 1 is now offline [ 46.536694][ T6181] smpboot: CPU 3 is now offline [ 46.705871][ T6189] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 46.706529][ T6189] SELinux: failed to load policy [ 46.817334][ T6195] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.817564][ T6195] binder: 6194:6195 ioctl 8010671f 2000000002c0 returned -22 [ 46.888736][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 46.889874][ T5731] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 46.994886][ T6204] nvme_fabrics: missing parameter 'transport=%s' [ 46.994896][ T6204] nvme_fabrics: missing parameter 'nqn=%s' [ 47.041224][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.102'. [ 47.203751][ T6217] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 47.440585][ T851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 47.489574][ T6239] FAULT_INJECTION: forcing a failure. [ 47.489574][ T6239] name failslab, interval 1, probability 0, space 0, times 0 [ 47.489594][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.3.110 Not tainted syzkaller #0 PREEMPT(full) [ 47.489606][ T6239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.489613][ T6239] Call Trace: [ 47.489617][ T6239] [ 47.489622][ T6239] dump_stack_lvl+0x100/0x190 [ 47.489642][ T6239] should_fail_ex.cold+0x5/0xa [ 47.489655][ T6239] ? __netlink_lookup+0x652/0x900 [ 47.489668][ T6239] should_failslab+0xc2/0x120 [ 47.489695][ T6239] kmem_cache_alloc_noprof+0x92/0x6a0 [ 47.489707][ T6239] ? skb_clone+0x190/0x400 [ 47.489722][ T6239] skb_clone+0x190/0x400 [ 47.489736][ T6239] netlink_deliver_tap+0xaed/0xcc0 [ 47.489769][ T6239] netlink_unicast+0x62b/0x850 [ 47.489783][ T6239] ? __pfx_netlink_unicast+0x10/0x10 [ 47.489799][ T6239] netlink_sendmsg+0x8b0/0xda0 [ 47.489813][ T6239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.489827][ T6239] ? selinux_socket_sendmsg+0x198/0x2f0 [ 47.489841][ T6239] ____sys_sendmsg+0xa4d/0xbe0 [ 47.489857][ T6239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.489870][ T6239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.489890][ T6239] ? lock_acquire+0x1d1/0x380 [ 47.489901][ T6239] ? get_pid_task+0x2a/0x250 [ 47.489918][ T6239] ___sys_sendmsg+0x190/0x1e0 [ 47.489935][ T6239] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.489951][ T6239] ? get_pid_task+0x106/0x250 [ 47.489971][ T6239] ? find_held_lock+0x2b/0x80 [ 47.489995][ T6239] __sys_sendmsg+0x160/0x210 [ 47.490009][ T6239] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.490029][ T6239] do_syscall_64+0x123/0x790 [ 47.490052][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.490064][ T6239] RIP: 0033:0x7fa5b859e159 [ 47.490073][ T6239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.490084][ T6239] RSP: 002b:00007fa5b9540028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.490095][ T6239] RAX: ffffffffffffffda RBX: 00007fa5b8825fa0 RCX: 00007fa5b859e159 [ 47.490102][ T6239] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 47.490108][ T6239] RBP: 00007fa5b9540090 R08: 0000000000000000 R09: 0000000000000000 [ 47.490115][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.490121][ T6239] R13: 00007fa5b8826038 R14: 00007fa5b8825fa0 R15: 00007fffc667b598 [ 47.490135][ T6239] [ 47.490171][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.110'. [ 47.596058][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 47.620877][ T851] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 47.623907][ T851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 47.623926][ T851] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 47.623954][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.645122][ T851] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 47.653903][ T851] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 47.657965][ T6242] nvme_fabrics: missing parameter 'transport=%s' [ 47.657976][ T6242] nvme_fabrics: missing parameter 'nqn=%s' [ 47.742655][ T6249] capability: warning: `syz.3.112' uses deprecated v2 capabilities in a way that may be insecure [ 47.938452][ T44] kauditd_printk_skb: 79 callbacks suppressed [ 47.938463][ T44] audit: type=1400 audit(1789409290.263:365): avc: denied { open } for pid=6256 comm="syz.3.115" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 47.943084][ T44] audit: type=1400 audit(1789409290.273:366): avc: denied { ioctl } for pid=6256 comm="syz.3.115" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 47.945068][ T6257] Cannot find add_set index 0 as target [ 47.946479][ T44] audit: type=1400 audit(1789409290.273:367): avc: denied { mmap_zero } for pid=6256 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 47.969670][ T6257] netlink: 196 bytes leftover after parsing attributes in process `syz.3.115'. [ 47.972968][ T6257] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 47.973079][ T6257] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 48.010097][ T6219] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 48.010516][ T6219] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 48.011769][ T6219] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 48.030041][ T6259] netlink: 'syz.3.115': attribute type 3 has an invalid length. [ 48.030056][ T6259] netlink: 224 bytes leftover after parsing attributes in process `syz.3.115'. [ 48.035884][ T9] usb 7-1: USB disconnect, device number 2 [ 48.085851][ T6261] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 48.108046][ T6219] tipc: Started in network mode [ 48.108062][ T6219] tipc: Node identity , cluster identity 4711 [ 48.108073][ T6219] tipc: Failed to obtain node identity [ 48.108094][ T6219] tipc: Enabling of bearer rejected, failed to enable media [ 48.112421][ T6219] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 48.117601][ T6219] SPCP8x5 ttyUSB0: Set UART format 0x3700 failed (error = -32) [ 48.303306][ T44] audit: type=1400 audit(1789409290.633:368): avc: denied { ioctl } for pid=6265 comm="syz.3.118" path="socket:[13902]" dev="sockfs" ino=13902 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.581560][ T5929] nvmet: connect request for invalid subsystem nqn.2014-! [ 48.582114][ T6275] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-" [ 48.582379][ T6282] netlink: 'syz.1.123': attribute type 10 has an invalid length. [ 48.586627][ T6282] team0: Port device dummy0 added [ 48.811161][ T6288] sctp: [Deprecated]: syz.3.126 (pid 6288) Use of int in max_burst socket option deprecated. [ 48.811161][ T6288] Use struct sctp_assoc_value instead [ 48.814543][ T6288] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 48.841074][ T44] audit: type=1400 audit(1789409291.173:369): avc: denied { write } for pid=6289 comm="syz.1.127" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.841826][ T44] audit: type=1400 audit(1789409291.173:370): avc: denied { map } for pid=6289 comm="syz.1.127" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.094504][ T6296] fuse: Bad value for 'group_id' [ 49.094518][ T6296] fuse: Bad value for 'group_id' [ 49.096510][ T44] audit: type=1400 audit(1789409291.423:371): avc: denied { setattr } for pid=6295 comm="syz.2.130" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 49.162941][ T44] audit: type=1400 audit(1789409291.493:372): avc: denied { watch } for pid=6298 comm="syz.2.132" path="/19/control" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.212859][ T6300] (syz.2.132,6300,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 49.212879][ T6300] (syz.2.132,6300,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 49.252516][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'. [ 49.394931][ T44] audit: type=1400 audit(1789409291.723:373): avc: denied { create } for pid=6311 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.448133][ T5929] nvmet: connect request for invalid subsystem nqn.2014-! [ 49.448809][ T6309] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-" [ 49.878523][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 49.886405][ T6329] 9p: Bad value for 'rfdno' [ 49.932218][ T6338] (syz.1.145,6338,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 49.932244][ T6338] (syz.1.145,6338,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 49.974965][ T6344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.148'. [ 49.990377][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.145'. [ 49.992961][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.169125][ T6215] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 50.170927][ T1039] usb 5-1: USB disconnect, device number 3 [ 50.173445][ T44] audit: type=1400 audit(1789409292.503:374): avc: denied { getopt } for pid=6349 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.182821][ T6353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.150'. [ 50.207123][ T1039] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 50.207494][ T1039] spcp8x5 5-1:1.0: device disconnected [ 50.307301][ T6359] Invalid logical block size (65481) [ 50.483333][ T6374] (syz.1.159,6374,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 50.483353][ T6374] (syz.1.159,6374,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 50.660858][ T5731] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 50.661308][ T5731] Bluetooth: Wrong link type (-22) [ 50.708737][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.775174][ T5933] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpr! [ 50.775245][ T6393] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpr" [ 50.879552][ T25] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 50.880741][ T25] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 50.880762][ T25] usb 8-1: config 1 has no interface number 0 [ 50.883005][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.883018][ T25] usb 8-1: Product: syz [ 50.883025][ T25] usb 8-1: Manufacturer: syz [ 50.883032][ T25] usb 8-1: SerialNumber: syz [ 50.915973][ T25] usb 8-1: 3:1 : does not exist [ 50.915988][ T25] usb 8-1: 3:2 : does not exist [ 50.965009][ T6400] netlink: 'syz.0.168': attribute type 30 has an invalid length. [ 50.996231][ T6400] bond1: option arp_missed_max: invalid value (0) [ 50.996246][ T6400] bond1: option arp_missed_max: allowed values 1 - 255 [ 50.999707][ T6400] bond1 (unregistering): Released all slaves [ 51.133320][ T6405] netlink: 'syz.0.169': attribute type 10 has an invalid length. [ 51.430533][ T6418] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 51.516523][ T6423] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 51.567674][ T6424] fuse: blksize only supported for fuseblk [ 51.575475][ T6424] hpfs: Unknown parameter 'group_id' [ 51.742789][ T1039] usb 8-1: USB disconnect, device number 2 [ 52.192990][ T6439] (syz.1.180,6439,2):ocfs2_get_sector:1713 ERROR: status = -5 [ 52.193017][ T6439] (syz.1.180,6439,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 52.193035][ T6439] (syz.1.180,6439,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 52.193052][ T6439] (syz.1.180,6439,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 52.409865][ T6442] (syz.3.181,6442,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 52.409884][ T6442] (syz.3.181,6442,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 52.451231][ T6442] __nla_validate_parse: 2 callbacks suppressed [ 52.451246][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.181'. [ 52.507083][ T6445] mtrr: base(0x573be70b8fa6cd88000) is not aligned on a size(0xb1f7e145000) boundary [ 52.647358][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 52.647471][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 52.857534][ T5933] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpr! [ 52.857612][ T6460] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpr" [ 52.870100][ T6457] cgroup2: Unknown parameter 'memory_re!"*Áiveprot' [ 52.957205][ T6470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.189'. [ 52.978477][ T6472] Invalid logical block size (4194304) [ 53.096775][ T6484] netlink: 'syz.3.194': attribute type 5 has an invalid length. [ 53.109627][ T6484] mtrr: base(0x573be70b8fa6cd88000) is not aligned on a size(0xb1f7e145000) boundary [ 53.127390][ T44] kauditd_printk_skb: 17 callbacks suppressed [ 53.127401][ T44] audit: type=1400 audit(1789409295.453:392): avc: denied { getopt } for pid=6477 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.203784][ T44] audit: type=1400 audit(1789409295.533:393): avc: denied { name_bind } for pid=6493 comm="syz.2.199" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 53.265860][ T6505] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 53.428804][ T5877] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 53.472969][ T44] audit: type=1400 audit(1789409295.803:394): avc: denied { read write } for pid=6515 comm="syz.1.204" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.473137][ T44] audit: type=1400 audit(1789409295.803:395): avc: denied { open } for pid=6515 comm="syz.1.204" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.475974][ T44] audit: type=1400 audit(1789409295.803:396): avc: denied { ioctl } for pid=6515 comm="syz.1.204" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.487325][ T44] audit: type=1400 audit(1789409295.813:397): avc: denied { setopt } for pid=6515 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.567836][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 53.580913][ T5877] usb 8-1: unable to get BOS descriptor or descriptor too short [ 53.581371][ T5877] usb 8-1: not running at top speed; connect to a high speed hub [ 53.581386][ T5877] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 53.585284][ T5877] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 53.585297][ T5877] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 53.585307][ T5877] usb 8-1: config 14 has no interface number 0 [ 53.585315][ T5877] usb 8-1: config 14 has no interface number 1 [ 53.585352][ T5877] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 53.585369][ T5877] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 53.585387][ T5877] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 53.585407][ T5877] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.585426][ T5877] usb 8-1: config 14 interface 57 has no altsetting 0 [ 53.585439][ T5877] usb 8-1: config 14 interface 228 has no altsetting 0 [ 53.587048][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.587059][ T5877] usb 8-1: Product: syz [ 53.587067][ T5877] usb 8-1: Manufacturer: syz [ 53.587074][ T5877] usb 8-1: SerialNumber: syz [ 53.647258][ T6520] tipc: Started in network mode [ 53.647276][ T6520] tipc: Node identity 7f000001, cluster identity 4711 [ 53.659198][ T6520] tipc: Enabled bearer , priority 10 [ 53.704345][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'. [ 53.794557][ T44] audit: type=1800 audit(1789409296.123:398): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.209" name="streebog512-generic" dev="sda1" ino=2039 res=0 errno=0 [ 53.795195][ T6526] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 53.816303][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.819890][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.833151][ T6527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6527 comm=syz.0.208 [ 53.838379][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 53.988353][ T5933] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.dis! [ 53.988499][ T6531] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.dis" [ 54.027773][ T5877] legousbtower 8-1:14.57: interrupt endpoints not found [ 54.112646][ T44] audit: type=1400 audit(1789409296.443:399): avc: denied { getopt } for pid=6535 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.116656][ T44] audit: type=1400 audit(1789409296.443:400): avc: denied { ioctl } for pid=6535 comm="syz.2.212" path="socket:[15499]" dev="sockfs" ino=15499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.117745][ T44] audit: type=1400 audit(1789409296.443:401): avc: denied { setopt } for pid=6535 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.170042][ T6541] netlink: 'syz.0.213': attribute type 33 has an invalid length. [ 54.237903][ T5877] legousbtower 8-1:14.228: get version request failed: -71 [ 54.237977][ T5877] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 54.238307][ T6544] (syz.0.214,6544,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 54.238335][ T6544] (syz.0.214,6544,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 54.252150][ T5877] usb 8-1: USB disconnect, device number 3 [ 54.285624][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.214'. [ 54.287442][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.318408][ T6548] jffs2: notice: (6548) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 54.508261][ T6567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.220'. [ 54.514644][ T6564] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.545515][ T6569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.221'. [ 54.545605][ T6569] FAULT_INJECTION: forcing a failure. [ 54.545605][ T6569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.545621][ T6569] CPU: 2 UID: 0 PID: 6569 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT(full) [ 54.545633][ T6569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.545639][ T6569] Call Trace: [ 54.545643][ T6569] [ 54.545647][ T6569] dump_stack_lvl+0x100/0x190 [ 54.545667][ T6569] should_fail_ex.cold+0x5/0xa [ 54.545682][ T6569] _copy_from_user+0x2e/0xd0 [ 54.545695][ T6569] kstrtouint_from_user+0xd6/0x1d0 [ 54.545709][ T6569] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 54.545727][ T6569] ? lock_acquire+0x1d1/0x380 [ 54.545741][ T6569] proc_fail_nth_write+0x83/0x220 [ 54.545756][ T6569] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 54.545773][ T6569] vfs_write+0x2aa/0x1050 [ 54.545785][ T6569] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 54.545798][ T6569] ? lock_acquire+0x1d1/0x380 [ 54.545809][ T6569] ? __fget_files+0x34/0x3d0 [ 54.545822][ T6569] ? __pfx_vfs_write+0x10/0x10 [ 54.545831][ T6569] ? find_held_lock+0x2b/0x80 [ 54.545847][ T6569] ? __fget_files+0x215/0x3d0 [ 54.545863][ T6569] ? __fget_files+0x21f/0x3d0 [ 54.545879][ T6569] ksys_write+0x12a/0x250 [ 54.545890][ T6569] ? __pfx_ksys_write+0x10/0x10 [ 54.545905][ T6569] do_syscall_64+0x123/0x790 [ 54.545922][ T6569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.545933][ T6569] RIP: 0033:0x7f258cf5e98e [ 54.545943][ T6569] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.545953][ T6569] RSP: 002b:00007f258ddbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.545964][ T6569] RAX: ffffffffffffffda RBX: 00007f258ddbf6c0 RCX: 00007f258cf5e98e [ 54.545971][ T6569] RDX: 0000000000000001 RSI: 00007f258ddbf0a0 RDI: 0000000000000004 [ 54.545977][ T6569] RBP: 00007f258ddbf090 R08: 0000000000000000 R09: 0000000000000000 [ 54.545984][ T6569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.545990][ T6569] R13: 00007f258d226038 R14: 00007f258d225fa0 R15: 00007ffff514d988 [ 54.546003][ T6569] [ 54.627799][ T6571] bridge0: port 3(veth0) entered blocking state [ 54.627876][ T6571] bridge0: port 3(veth0) entered disabled state [ 54.627959][ T6571] veth0: entered allmulticast mode [ 54.630397][ T6571] veth0: entered promiscuous mode [ 54.631293][ T6571] bridge0: port 3(veth0) entered blocking state [ 54.631338][ T6571] bridge0: port 3(veth0) entered forwarding state [ 54.636203][ T6571] Bluetooth: MGMT ver 1.23 [ 54.676233][ T6578] Invalid logical block size (16646144) [ 54.692244][ T6576] loop5: detected capacity change from 0 to 7 [ 54.696385][ T6576] Dev loop5: unable to read RDB block 7 [ 54.696408][ T6576] loop5: unable to read partition table [ 54.696490][ T6576] loop5: partition table beyond EOD, truncated [ 54.696500][ T6576] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 54.764754][ T5933] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discov! [ 54.764856][ T6583] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discov" [ 54.766687][ T5807] tipc: Node number set to 2130706433 [ 54.934045][ T6600] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.992374][ T6594] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 54.992390][ T6594] overlayfs: failed to set xattr on upper [ 54.992395][ T6594] overlayfs: ...falling back to redirect_dir=nofollow. [ 54.992399][ T6594] overlayfs: ...falling back to index=off. [ 54.992403][ T6594] overlayfs: ...falling back to uuid=null. [ 54.992412][ T6594] overlayfs: maximum fs stacking depth exceeded [ 55.167173][ T6619] (syz.3.238,6619,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 55.167195][ T6619] (syz.3.238,6619,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 55.328945][ T5910] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discov! [ 55.329267][ T6633] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discov" [ 55.470777][ T6645] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 55.497424][ T6647] fuse: Bad value for 'user_id' [ 55.497436][ T6647] fuse: Bad value for 'user_id' [ 55.509073][ T5807] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.661894][ T5807] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 55.665271][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.665287][ T5807] usb 7-1: Product: syz [ 55.665294][ T5807] usb 7-1: Manufacturer: syz [ 55.665301][ T5807] usb 7-1: SerialNumber: syz [ 55.779737][ T6661] (syz.3.252,6661,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 55.779755][ T6661] (syz.3.252,6661,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 55.780951][ T5807] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 56.035245][ T6672] device-mapper: ioctl: Unable to rename non-existent device, to j [ 56.206618][ T9] usb 7-1: USB disconnect, device number 3 [ 56.270521][ T6682] netlink: 'syz.0.260': attribute type 11 has an invalid length. [ 56.360742][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.360789][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.489572][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.489599][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.489617][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.489634][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.564726][ T6687] (syz.0.262,6687,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 56.564745][ T6687] (syz.0.262,6687,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 56.607127][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.784072][ T6697] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 56.799606][ T5807] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 56.799828][ T5807] ath9k_htc: Failed to initialize the device [ 56.802295][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 56.887331][ T6704] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 56.887345][ T6704] nbd: error processing sock list [ 56.888214][ T6704] block nbd0: shutting down sockets [ 57.042166][ T6712] (syz.3.272,6712,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 57.042193][ T6712] (syz.3.272,6712,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 57.258818][ T851] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.388706][ T851] usb 6-1: device descriptor read/64, error -71 [ 57.628776][ T851] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 57.760628][ T851] usb 6-1: device descriptor read/64, error -71 [ 57.782684][ T6743] Cannot find add_set index 0 as target [ 57.818188][ T6743] __nla_validate_parse: 5 callbacks suppressed [ 57.818202][ T6743] netlink: 196 bytes leftover after parsing attributes in process `syz.0.278'. [ 57.824806][ T6743] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 57.824912][ T6743] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 57.869888][ T851] usb usb6-port1: attempt power cycle [ 57.883564][ T6747] netlink: 'syz.0.278': attribute type 3 has an invalid length. [ 57.883576][ T6747] netlink: 224 bytes leftover after parsing attributes in process `syz.0.278'. [ 58.044885][ T6751] (syz.2.282,6751,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 58.044911][ T6751] (syz.2.282,6751,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 58.084702][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.282'. [ 58.142347][ T6757] syzkaller0: entered promiscuous mode [ 58.142359][ T6757] syzkaller0: entered allmulticast mode [ 58.143990][ T44] kauditd_printk_skb: 43 callbacks suppressed [ 58.143999][ T44] audit: type=1400 audit(1789409300.473:445): avc: denied { setopt } for pid=6756 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.144152][ T44] audit: type=1400 audit(1789409300.473:446): avc: denied { write } for pid=6756 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.197667][ T6761] netlink: 312 bytes leftover after parsing attributes in process `syz.3.288'. [ 58.204430][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.288'. [ 58.206381][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.288'. [ 58.215923][ T44] audit: type=1400 audit(1789409300.543:447): avc: denied { accept } for pid=6762 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.226400][ T851] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 58.226618][ T44] audit: type=1400 audit(1789409300.553:448): avc: denied { ioctl } for pid=6762 comm="syz.0.287" path="socket:[16252]" dev="sockfs" ino=16252 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.240617][ T851] usb 6-1: device descriptor read/8, error -71 [ 58.263851][ T44] audit: type=1400 audit(1789409300.593:449): avc: denied { associate } for pid=6766 comm="syz.2.289" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.315298][ T5914] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discover! [ 58.316790][ T6765] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discover" [ 58.353879][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 58.353902][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.292'. [ 58.354250][ T44] audit: type=1400 audit(1789409300.683:450): avc: denied { getopt } for pid=6773 comm="syz.3.292" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.429068][ T6780] Invalid logical block size (33554432) [ 58.463675][ T6782] syz_tun: entered allmulticast mode [ 58.478792][ T851] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 58.499206][ T851] usb 6-1: device descriptor read/8, error -71 [ 58.592096][ T6797] xt_IDLETIMER: label is empty or not nul-terminated [ 58.609397][ T851] usb usb6-port1: unable to enumerate USB device [ 58.734421][ T6795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.303'. [ 58.779287][ T44] audit: type=1800 audit(1789409301.113:451): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.304" name="streebog512-generic" dev="sda1" ino=2039 res=0 errno=0 [ 58.871286][ T5914] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discover! [ 58.876478][ T6808] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discover" [ 58.877304][ T6799] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 59.044640][ T44] audit: type=1400 audit(1789409301.363:452): avc: denied { write } for pid=6811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.091743][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 59.172943][ T44] audit: type=1400 audit(1789409301.503:453): avc: denied { write } for pid=6817 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.178352][ T6820] (syz.0.310,6820,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 59.178380][ T6820] (syz.0.310,6820,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 59.257967][ T44] audit: type=1804 audit(1789409301.583:454): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.308" name="/newroot/52/file0" dev="fuse" ino=1 res=1 errno=0 [ 59.375148][ T6839] binder: 6837:6839 ioctl c0306201 200000000140 returned -14 [ 59.375521][ T6839] binder: 6837:6839 ioctl c028660f 200000000000 returned -22 [ 59.375693][ T6839] binder: 6837:6839 ioctl c018620c 200000000240 returned -22 [ 59.442651][ T6846] bridge: RTM_NEWNEIGH with invalid ether address [ 59.443534][ T6848] bridge: RTM_NEWNEIGH with invalid ether address [ 59.444197][ T6846] bridge: RTM_NEWNEIGH with invalid ether address [ 59.475700][ T6850] netlink: 'syz.0.316': attribute type 12 has an invalid length. [ 59.503360][ T6855] loop5: detected capacity change from 0 to 7 [ 59.505383][ T6855] Dev loop5: unable to read RDB block 7 [ 59.505404][ T6855] loop5: unable to read partition table [ 59.505484][ T6855] loop5: partition table beyond EOD, truncated [ 59.506447][ T6855] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 59.565610][ T6842] netlink: 'syz.0.316': attribute type 12 has an invalid length. [ 59.610383][ T6859] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 59.623457][ T6842] netlink: 'syz.0.316': attribute type 12 has an invalid length. [ 59.781647][ T6842] netlink: 'syz.0.316': attribute type 12 has an invalid length. [ 59.856408][ T6842] netlink: 'syz.0.316': attribute type 12 has an invalid length. [ 59.951730][ T6842] netlink: 'syz.0.316': attribute type 12 has an invalid length. [ 60.006144][ T6881] input: syz0 as /devices/virtual/input/input6 [ 60.007285][ T6842] netlink: 'syz.0.316': attribute type 12 has an invalid length. [ 60.064165][ T6842] netlink: 'syz.0.316': attribute type 12 has an invalid length. [ 60.157544][ T6842] netlink: 'syz.0.316': attribute type 12 has an invalid length. [ 60.354178][ T6899] (syz.2.330,6899,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 60.354197][ T6899] (syz.2.330,6899,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 60.465335][ T6907] FAULT_INJECTION: forcing a failure. [ 60.465335][ T6907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.465364][ T6907] CPU: 0 UID: 0 PID: 6907 Comm: syz.0.335 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.465383][ T6907] Tainted: [L]=SOFTLOCKUP [ 60.465389][ T6907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.465397][ T6907] Call Trace: [ 60.465402][ T6907] [ 60.465408][ T6907] dump_stack_lvl+0x100/0x190 [ 60.465451][ T6907] should_fail_ex.cold+0x5/0xa [ 60.465472][ T6907] _copy_from_user+0x2e/0xd0 [ 60.465492][ T6907] memdup_user_nul+0x6c/0x120 [ 60.465512][ T6907] nvmf_dev_write+0x6d/0xb60 [ 60.465536][ T6907] ? rw_verify_area+0xce/0x6d0 [ 60.465560][ T6907] vfs_write+0x2aa/0x1050 [ 60.465574][ T6907] ? __pfx_nvmf_dev_write+0x10/0x10 [ 60.465592][ T6907] ? lock_acquire+0x1d1/0x380 [ 60.465608][ T6907] ? __fget_files+0x34/0x3d0 [ 60.465627][ T6907] ? __pfx_vfs_write+0x10/0x10 [ 60.465639][ T6907] ? find_held_lock+0x2b/0x80 [ 60.465658][ T6907] ? __fget_files+0x215/0x3d0 [ 60.465674][ T6907] ? __fget_files+0x215/0x3d0 [ 60.465694][ T6907] ? __fget_files+0x21f/0x3d0 [ 60.465717][ T6907] ksys_write+0x12a/0x250 [ 60.465732][ T6907] ? __pfx_ksys_write+0x10/0x10 [ 60.465753][ T6907] do_syscall_64+0x123/0x790 [ 60.465783][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.465798][ T6907] RIP: 0033:0x7f258cf9e159 [ 60.465810][ T6907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.465824][ T6907] RSP: 002b:00007f258ddbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.465839][ T6907] RAX: ffffffffffffffda RBX: 00007f258d225fa0 RCX: 00007f258cf9e159 [ 60.465849][ T6907] RDX: 0000000000000037 RSI: 0000200000000080 RDI: 0000000000000006 [ 60.465857][ T6907] RBP: 00007f258ddbf090 R08: 0000000000000000 R09: 0000000000000000 [ 60.465866][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.465875][ T6907] R13: 00007f258d226038 R14: 00007f258d225fa0 R15: 00007ffff514d988 [ 60.465895][ T6907] [ 60.765868][ T5914] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 60.766328][ T6912] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 60.798462][ T6930] Invalid logical block size (100663296) [ 61.041426][ T6941] loop5: detected capacity change from 0 to 7 [ 61.042352][ T6941] Dev loop5: unable to read RDB block 7 [ 61.042428][ T6941] loop5: unable to read partition table [ 61.042566][ T6941] loop5: partition table beyond EOD, truncated [ 61.042586][ T6941] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 61.139800][ T6943] FAULT_INJECTION: forcing a failure. [ 61.139800][ T6943] name failslab, interval 1, probability 0, space 0, times 0 [ 61.139822][ T6943] CPU: 2 UID: 0 PID: 6943 Comm: syz.2.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.139836][ T6943] Tainted: [L]=SOFTLOCKUP [ 61.139840][ T6943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.139847][ T6943] Call Trace: [ 61.139850][ T6943] [ 61.139855][ T6943] dump_stack_lvl+0x100/0x190 [ 61.139889][ T6943] should_fail_ex.cold+0x5/0xa [ 61.139905][ T6943] should_failslab+0xc2/0x120 [ 61.139919][ T6943] __kmalloc_cache_noprof+0x91/0x6d0 [ 61.139937][ T6943] ? nvmf_dev_write+0x14c/0xb60 [ 61.139954][ T6943] nvmf_dev_write+0x14c/0xb60 [ 61.139971][ T6943] vfs_write+0x2aa/0x1050 [ 61.139982][ T6943] ? __pfx_nvmf_dev_write+0x10/0x10 [ 61.139996][ T6943] ? lock_acquire+0x1d1/0x380 [ 61.140008][ T6943] ? __fget_files+0x34/0x3d0 [ 61.140021][ T6943] ? __pfx_vfs_write+0x10/0x10 [ 61.140031][ T6943] ? find_held_lock+0x2b/0x80 [ 61.140046][ T6943] ? __fget_files+0x215/0x3d0 [ 61.140059][ T6943] ? __fget_files+0x215/0x3d0 [ 61.140074][ T6943] ? __fget_files+0x21f/0x3d0 [ 61.140091][ T6943] ksys_write+0x12a/0x250 [ 61.140102][ T6943] ? __pfx_ksys_write+0x10/0x10 [ 61.140116][ T6943] do_syscall_64+0x123/0x790 [ 61.140134][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.140146][ T6943] RIP: 0033:0x7f6c23b9e159 [ 61.140155][ T6943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.140166][ T6943] RSP: 002b:00007f6c24a6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.140177][ T6943] RAX: ffffffffffffffda RBX: 00007f6c23e25fa0 RCX: 00007f6c23b9e159 [ 61.140184][ T6943] RDX: 0000000000000037 RSI: 0000200000000080 RDI: 0000000000000006 [ 61.140190][ T6943] RBP: 00007f6c24a6d090 R08: 0000000000000000 R09: 0000000000000000 [ 61.140196][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.140202][ T6943] R13: 00007f6c23e26038 R14: 00007f6c23e25fa0 R15: 00007ffdd06b0718 [ 61.140217][ T6943] [ 61.308151][ T6953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.411729][ T6963] Invalid logical block size (117440512) [ 61.495269][ T6964] input: syz0 as /devices/virtual/input/input7 [ 61.555767][ T6972] tipc: Started in network mode [ 61.555780][ T6972] tipc: Node identity 1000001, cluster identity 4369 [ 61.555787][ T6972] tipc: Node number set to 16777217 [ 61.555984][ T6972] tipc: Cannot configure node identity twice [ 61.569130][ T6972] tipc: New replicast peer: 127.0.0.1 [ 61.578239][ T6972] tipc: Enabled bearer , priority 10 [ 61.686158][ T6984] loop5: detected capacity change from 0 to 7 [ 61.696933][ T6984] Dev loop5: unable to read RDB block 7 [ 61.696956][ T6984] loop5: unable to read partition table [ 61.697037][ T6984] loop5: partition table beyond EOD, truncated [ 61.697053][ T6984] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 62.001179][ T64] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 62.003018][ T6995] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 62.048431][ T7010] (syz.1.371,7010,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 62.048462][ T7010] (syz.1.371,7010,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 62.460794][ T7032] gretap0: entered promiscuous mode [ 62.463364][ T7032] macvlan2: entered allmulticast mode [ 62.463377][ T7032] gretap0: entered allmulticast mode [ 62.485705][ T7036] raw_sendmsg: syz.3.380 forgot to set AF_INET. Fix it! [ 62.648110][ T7047] (syz.1.384,7047,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 62.648128][ T7047] (syz.1.384,7047,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 62.685026][ T7051] Invalid logical block size (199600449) [ 62.710698][ T7048] tipc: Started in network mode [ 62.710760][ T7048] tipc: Node identity 080211, cluster identity 4711 [ 62.711270][ T7048] tipc: Enabled bearer , priority 11 [ 62.979093][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.108689][ T9] usb 8-1: device descriptor read/64, error -71 [ 63.368905][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 63.498909][ T9] usb 8-1: device descriptor read/64, error -71 [ 63.519950][ T5731] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.609455][ T9] usb usb8-port1: attempt power cycle [ 63.832855][ T5519] tipc: Node number set to 134353152 [ 63.959021][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 63.979168][ T9] usb 8-1: device descriptor read/8, error -71 [ 64.229883][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 64.252398][ T9] usb 8-1: device descriptor read/8, error -71 [ 64.302135][ T7077] __nla_validate_parse: 12 callbacks suppressed [ 64.302149][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 64.303110][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 64.303273][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 64.308464][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 64.308561][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 64.313021][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 64.341003][ T7078] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 64.347540][ T7078] bond1 (unregistering): Released all slaves [ 64.358876][ T9] usb usb8-port1: unable to enumerate USB device [ 64.367753][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 64.367766][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 64.429012][ T7078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44197 sclass=netlink_route_socket pid=7078 comm=syz.0.397 [ 64.889110][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 65.230506][ T1175] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 65.230659][ T7096] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 65.339382][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.512981][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.514008][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.514031][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.514049][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.514079][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.540667][ T9] usb 7-1: config 0 descriptor?? [ 65.554311][ T7105] loop5: detected capacity change from 0 to 7 [ 65.565973][ T7105] Dev loop5: unable to read RDB block 7 [ 65.567465][ T7105] loop5: unable to read partition table [ 65.567600][ T7105] loop5: partition table beyond EOD, truncated [ 65.567618][ T7105] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 65.633774][ T7107] (syz.0.407,7107,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 65.633793][ T7107] (syz.0.407,7107,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 65.665701][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.407'. [ 65.799315][ T5806] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.799364][ T5806] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.799567][ T5806] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.799598][ T5806] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.844991][ T44] kauditd_printk_skb: 21 callbacks suppressed [ 65.845004][ T44] audit: type=1400 audit(1789409308.173:476): avc: denied { write } for pid=7116 comm="syz.3.411" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.017486][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 66.165178][ T44] audit: type=1400 audit(1789409308.493:477): avc: denied { mount } for pid=7093 comm="syz.2.404" name="/" dev="autofs" ino=19536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 66.165879][ T7131] (syz.1.417,7131,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 66.165895][ T7131] (syz.1.417,7131,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 66.188911][ T44] audit: type=1400 audit(1789409308.513:478): avc: denied { mounton } for pid=7093 comm="syz.2.404" path="/80/file1/dev" dev="autofs" ino=19543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 66.272600][ T7143] loop5: detected capacity change from 0 to 7 [ 66.273984][ T7143] Dev loop5: unable to read RDB block 7 [ 66.274005][ T7143] loop5: unable to read partition table [ 66.274134][ T7143] loop5: partition table beyond EOD, truncated [ 66.274144][ T7143] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 66.288238][ T144] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 66.288364][ T7129] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 66.522601][ T7154] FAULT_INJECTION: forcing a failure. [ 66.522601][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 66.522623][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.1.425 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.522639][ T7154] Tainted: [L]=SOFTLOCKUP [ 66.522643][ T7154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.522651][ T7154] Call Trace: [ 66.522655][ T7154] [ 66.522659][ T7154] dump_stack_lvl+0x100/0x190 [ 66.522692][ T7154] should_fail_ex.cold+0x5/0xa [ 66.522722][ T7154] should_failslab+0xc2/0x120 [ 66.522741][ T7154] __kmalloc_cache_noprof+0x91/0x6d0 [ 66.522759][ T7154] ? get_mountpoint+0x174/0x4f0 [ 66.522773][ T7154] get_mountpoint+0x174/0x4f0 [ 66.522784][ T7154] attach_recursive_mnt.isra.0+0x21f/0x1c50 [ 66.522806][ T7154] ? __pfx_attach_recursive_mnt.isra.0+0x10/0x10 [ 66.522844][ T7154] ? find_held_lock+0x2b/0x80 [ 66.522865][ T7154] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.522882][ T7154] ? graft_tree+0x19f/0x250 [ 66.522897][ T7154] ? do_lock_mount.part.0+0x40b/0xb10 [ 66.522911][ T7154] graft_tree+0x19f/0x250 [ 66.522929][ T7154] do_add_mount+0x1e2/0x360 [ 66.522951][ T7154] path_mount+0x907/0x24c0 [ 66.522969][ T7154] ? __pfx_path_mount+0x10/0x10 [ 66.522985][ T7154] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.523012][ T7154] ? __x64_sys_mount+0x293/0x310 [ 66.523028][ T7154] __x64_sys_mount+0x293/0x310 [ 66.523046][ T7154] ? __pfx___x64_sys_mount+0x10/0x10 [ 66.523066][ T7154] do_syscall_64+0x123/0x790 [ 66.523082][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.523094][ T7154] RIP: 0033:0x7fde3639e159 [ 66.523104][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.523115][ T7154] RSP: 002b:00007fde37277028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.523127][ T7154] RAX: ffffffffffffffda RBX: 00007fde36625fa0 RCX: 00007fde3639e159 [ 66.523134][ T7154] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 66.523140][ T7154] RBP: 00007fde3643503b R08: 0000000000000000 R09: 0000000000000000 [ 66.523146][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.523153][ T7154] R13: 00007fde36626038 R14: 00007fde36625fa0 R15: 00007ffe9e6062e8 [ 66.523167][ T7154] [ 66.678997][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.829637][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 66.830783][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 49941, setting to 1024 [ 66.830799][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 66.830837][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.834941][ T7150] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.836556][ T25] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 66.856193][ T25] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 66.917479][ T7168] (syz.3.431,7168,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 66.917515][ T7168] (syz.3.431,7168,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 66.958014][ T7170] team0: Port device vlan2 added [ 67.046921][ T5731] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 67.078579][ T7179] loop5: detected capacity change from 0 to 7 [ 67.086029][ T7179] Dev loop5: unable to read RDB block 7 [ 67.086065][ T7179] loop5: unable to read partition table [ 67.086323][ T7179] loop5: partition table beyond EOD, truncated [ 67.086368][ T7179] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 67.217867][ T44] audit: type=1400 audit(1789409309.543:479): avc: denied { ioctl } for pid=7182 comm="syz.1.435" path="socket:[19736]" dev="sockfs" ino=19736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.218266][ T44] audit: type=1400 audit(1789409309.543:480): avc: denied { setattr } for pid=7182 comm="syz.1.435" name="loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.237235][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.347512][ T38] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 67.356237][ T7187] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 67.369499][ T7191] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.547217][ T7202] xt_hashlimit: size too large, truncated to 1048576 [ 67.624933][ T7205] xt_hashlimit: size too large, truncated to 1048576 [ 67.741695][ T44] audit: type=1400 audit(1789409310.073:481): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 67.988466][ T9] usb 7-1: USB disconnect, device number 4 [ 68.482445][ T7226] syzkaller0: entered promiscuous mode [ 68.482463][ T7226] syzkaller0: entered allmulticast mode [ 68.692400][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.692416][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.812394][ T7232] (syz.3.450,7232,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 68.812414][ T7232] (syz.3.450,7232,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 69.150899][ T7246] syzkaller0: entered promiscuous mode [ 69.150914][ T7246] syzkaller0: entered allmulticast mode [ 69.300778][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.3.458 [ 69.300873][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.3.458 [ 69.300939][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.3.458 [ 69.301005][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.3.458 [ 69.301066][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.3.458 [ 69.301156][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.3.458 [ 69.301219][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.3.458 [ 69.301278][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.3.458 [ 69.301338][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7250 comm=syz.3.458 [ 69.308176][ T7252] fuse: Bad value for 'user_id' [ 69.308188][ T7252] fuse: Bad value for 'user_id' [ 69.373262][ T7257] __nla_validate_parse: 13 callbacks suppressed [ 69.373281][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.459'. [ 69.476674][ T851] usb 5-1: USB disconnect, device number 4 [ 69.491759][ T851] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 69.492340][ T851] spcp8x5 5-1:1.0: device disconnected [ 69.838861][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 69.839929][ T5731] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.128345][ T7275] syzkaller0: entered promiscuous mode [ 70.128359][ T7275] syzkaller0: entered allmulticast mode [ 70.292008][ T7279] loop5: detected capacity change from 0 to 7 [ 70.296089][ T7279] Dev loop5: unable to read RDB block 7 [ 70.296123][ T7279] loop5: unable to read partition table [ 70.296281][ T7279] loop5: partition table beyond EOD, truncated [ 70.296304][ T7279] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 70.394365][ T7281] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 70.394646][ T44] audit: type=1400 audit(1789409312.723:482): avc: denied { search } for pid=7280 comm="syz.3.468" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 70.394759][ T44] audit: type=1400 audit(1789409312.723:483): avc: denied { search } for pid=7280 comm="syz.3.468" name="events" dev="tracefs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 70.396589][ T44] audit: type=1400 audit(1789409312.723:484): avc: denied { search } for pid=7280 comm="syz.3.468" name="kvm" dev="tracefs" ino=20048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 70.397173][ T44] audit: type=1400 audit(1789409312.723:485): avc: denied { write } for pid=7280 comm="syz.3.468" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 70.549061][ T5927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.549076][ T5927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.552786][ T7288] (syz.1.471,7288,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 70.552805][ T7288] (syz.1.471,7288,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 70.628343][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'. [ 70.853396][ T144] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 70.857223][ T7299] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 71.014129][ T7304] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.202338][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.209973][ T43] cfg80211: failed to load regulatory.db [ 71.236176][ T7316] loop5: detected capacity change from 0 to 7 [ 71.237266][ T7316] Dev loop5: unable to read RDB block 7 [ 71.237311][ T7316] loop5: unable to read partition table [ 71.237397][ T7316] loop5: partition table beyond EOD, truncated [ 71.237405][ T7316] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 71.592947][ T7320] validate_nla: 1 callbacks suppressed [ 71.592960][ T7320] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 71.592967][ T7320] nbd: error processing sock list [ 71.596118][ T7320] block nbd0: shutting down sockets [ 71.665407][ T7323] netlink: 40 bytes leftover after parsing attributes in process `syz.0.483'. [ 71.794662][ T44] kauditd_printk_skb: 1 callbacks suppressed [ 71.794674][ T44] audit: type=1326 audit(1789409314.123:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.1.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3639e159 code=0x50000 [ 71.794698][ T44] audit: type=1326 audit(1789409314.123:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.1.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3639e159 code=0x50000 [ 71.794719][ T44] audit: type=1326 audit(1789409314.123:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.1.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3639e159 code=0x50000 [ 71.794739][ T44] audit: type=1326 audit(1789409314.123:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.1.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3639e159 code=0x50000 [ 71.794760][ T44] audit: type=1326 audit(1789409314.123:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.1.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3639e159 code=0x50000 [ 71.794781][ T44] audit: type=1326 audit(1789409314.123:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.1.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3639e159 code=0x50000 [ 71.794823][ T44] audit: type=1326 audit(1789409314.123:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.1.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3639e159 code=0x50000 [ 71.794844][ T44] audit: type=1326 audit(1789409314.123:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.1.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3639e159 code=0x50000 [ 71.794864][ T44] audit: type=1326 audit(1789409314.123:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.1.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3639e159 code=0x50000 [ 71.794884][ T44] audit: type=1326 audit(1789409314.123:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.1.486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3639e159 code=0x50000 [ 72.566820][ T7338] (syz.0.490,7338,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 72.566839][ T7338] (syz.0.490,7338,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 72.611552][ T7338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'. [ 72.885717][ T38] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 72.889385][ T7343] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 73.289100][ T7351] overlayfs: conflicting options: userxattr,redirect_dir=on [ 73.358900][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 73.359004][ T5731] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.441309][ T7353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.494'. [ 74.392345][ T7369] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 74.392365][ T7369] nbd: error processing sock list [ 74.397749][ T7369] block nbd0: shutting down sockets [ 74.899375][ T7384] (syz.0.507,7384,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 74.899395][ T7384] (syz.0.507,7384,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 74.922233][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.507'. [ 74.958529][ T38] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 74.961686][ T7385] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 74.986400][ T7391] loop5: detected capacity change from 0 to 7 [ 74.992792][ T7391] Dev loop5: unable to read RDB block 7 [ 74.992814][ T7391] loop5: unable to read partition table [ 74.992902][ T7391] loop5: partition table beyond EOD, truncated [ 74.992911][ T7391] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 75.023971][ T7393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.510'. [ 75.053255][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 75.231342][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 75.232176][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 75.232190][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 75.232208][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.266004][ T9] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 75.276108][ T7408] (syz.0.517,7408,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 75.276134][ T7408] (syz.0.517,7408,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 75.276769][ T9] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 75.330514][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 75.454354][ T7421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.523'. [ 75.472772][ T7423] loop5: detected capacity change from 0 to 7 [ 75.476049][ T7423] Dev loop5: unable to read RDB block 7 [ 75.476070][ T7423] loop5: unable to read partition table [ 75.476146][ T7423] loop5: partition table beyond EOD, truncated [ 75.482304][ T7423] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 75.640324][ T7377] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 75.640569][ T7377] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 75.641636][ T7377] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 75.732474][ T7377] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 75.734935][ T7377] SPCP8x5 ttyUSB0: Set UART format 0x3700 failed (error = -32) [ 75.787108][ T7441] gadgetfs: bound to dummy_udc driver [ 75.810890][ T7447] (syz.3.530,7447,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 75.810910][ T7447] (syz.3.530,7447,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 75.877433][ T7447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.530'. [ 76.196036][ T7472] (syz.0.541,7472,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 76.196055][ T7472] (syz.0.541,7472,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 76.217490][ T7470] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 76.235603][ T7470] team0 (unregistering): Port device team_slave_0 removed [ 76.246072][ T7470] team0 (unregistering): Port device team_slave_1 removed [ 76.260141][ T7470] team0 (unregistering): Port device dummy0 removed [ 76.265755][ T7472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.541'. [ 76.283302][ T7477] binder: BINDER_SET_CONTEXT_MGR already set [ 76.283312][ T7477] binder: 7469:7477 ioctl 4018620d 200000004a80 returned -16 [ 76.342917][ T7479] Invalid logical block size (-55) [ 76.524259][ T7485] netlink: 40 bytes leftover after parsing attributes in process `syz.0.545'. [ 76.979325][ T7514] (syz.0.557,7514,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 76.979342][ T7514] (syz.0.557,7514,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 76.999437][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.557'. [ 77.195473][ T44] kauditd_printk_skb: 25039 callbacks suppressed [ 77.195488][ T44] audit: type=1400 audit(1789409319.523:25536): avc: denied { write } for pid=7521 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.247906][ T44] audit: type=1400 audit(1789409319.573:25537): avc: denied { map } for pid=7525 comm="syz.3.562" path="/dev/video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.301114][ T7529] loop5: detected capacity change from 0 to 7 [ 77.302295][ T7529] Dev loop5: unable to read RDB block 7 [ 77.302317][ T7529] loop5: unable to read partition table [ 77.302407][ T7529] loop5: partition table beyond EOD, truncated [ 77.302443][ T7529] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 77.361652][ T44] audit: type=1400 audit(1789409319.693:25538): avc: denied { create } for pid=7532 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.382850][ T7534] fuse: Unknown parameter '0x000000000000000500000000000000000003ÞoN´' [ 77.415463][ T7536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.567'. [ 77.766446][ T7376] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 77.775508][ T7220] usb 6-1: USB disconnect, device number 7 [ 77.794081][ T7220] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 77.794360][ T7220] spcp8x5 6-1:1.0: device disconnected [ 77.899868][ T7552] (syz.0.573,7552,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.899888][ T7552] (syz.0.573,7552,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 77.947167][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.573'. [ 78.363711][ T44] audit: type=1400 audit(1789409320.693:25539): avc: denied { write } for pid=7573 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.496447][ T66] Bluetooth: hci2: hardware error 0x80 [ 78.627969][ T44] audit: type=1400 audit(1789409320.953:25540): avc: denied { create } for pid=7587 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 78.633540][ T44] audit: type=1400 audit(1789409320.963:25541): avc: denied { sys_admin } for pid=7587 comm="syz.0.589" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 78.808700][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 78.842945][ T44] audit: type=1400 audit(1789409321.173:25542): avc: denied { mount } for pid=7593 comm="syz.3.591" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.858534][ T7596] (syz.0.592,7596,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 78.858575][ T7596] (syz.0.592,7596,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 78.979501][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 78.980330][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 78.980344][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 78.980362][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.988412][ T9] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 79.018517][ T9] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 79.074833][ T44] audit: type=1400 audit(1789409321.403:25543): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.208866][ T9] usb 6-1: USB disconnect, device number 8 [ 79.244750][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 79.245025][ T9] spcp8x5 6-1:1.0: device disconnected [ 79.274322][ T44] audit: type=1400 audit(1789409321.603:25544): avc: denied { watch_mount } for pid=7613 comm="syz.3.599" path="/173" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.276852][ T44] audit: type=1400 audit(1789409321.603:25545): avc: denied { mount } for pid=7613 comm="syz.3.599" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 79.330430][ T7585] Console: switching to colour dummy device 80x25 [ 79.472556][ T7622] (syz.0.601,7622,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 79.472576][ T7622] (syz.0.601,7622,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 79.499978][ T64] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 79.500193][ T7620] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 79.646992][ T7629] loop5: detected capacity change from 0 to 7 [ 79.650033][ T7629] Dev loop5: unable to read RDB block 7 [ 79.650054][ T7629] loop5: unable to read partition table [ 79.650138][ T7629] loop5: partition table beyond EOD, truncated [ 79.650153][ T7629] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 79.821532][ T7617] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 79.837943][ T7617] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 79.838147][ T7617] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 79.838203][ T7617] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 79.838297][ T7617] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 79.853436][ T7617] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 79.869583][ T7617] pci 0000:00:01.0: Adding to iommu group 1 [ 79.872269][ T7617] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 79.872282][ T7617] pci 0000:00:01.0: vgaarb: bridge control possible [ 79.872291][ T7617] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 79.926047][ T7617] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 79.933408][ T7617] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 79.936730][ T7617] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 79.956065][ T7643] (syz.0.610,7643,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 79.956086][ T7643] (syz.0.610,7643,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 79.994534][ T7643] __nla_validate_parse: 2 callbacks suppressed [ 79.994549][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.610'. [ 80.021804][ T7617] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 80.021882][ T7617] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 80.022765][ T7617] [drm] features: -virgl +edid -resource_blob -host_visible [ 80.022775][ T7617] [drm] features: -context_init -blob_alignment [ 80.048066][ T7617] [drm] number of scanouts: 1 [ 80.048099][ T7617] [drm] number of cap sets: 0 [ 80.081167][ T7617] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 80.167910][ T7617] Console: switching to colour frame buffer device 160x50 [ 80.217712][ T7617] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 80.259840][ T7663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.617'. [ 80.497618][ T5927] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 80.497693][ T7674] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 80.527399][ T7678] netlink: 80 bytes leftover after parsing attributes in process `syz.3.620'. [ 80.572932][ T66] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 80.645824][ T7682] (syz.3.622,7682,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 80.645855][ T7682] (syz.3.622,7682,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 80.694675][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.622'. [ 80.803251][ T7691] SELinux: Context system_u:object_r:passwd_exec_t:s0 is not valid (left unmapped). [ 80.912537][ T7702] fuse: Bad value for 'user_id' [ 80.912550][ T7702] fuse: Bad value for 'user_id' [ 81.004524][ T7709] bridge_slave_0: left allmulticast mode [ 81.004540][ T7709] bridge_slave_0: left promiscuous mode [ 81.005024][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.009391][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.022534][ T7709] bridge_slave_1: left allmulticast mode [ 81.022550][ T7709] bridge_slave_1: left promiscuous mode [ 81.024859][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.037107][ T7709] bond0: (slave bond_slave_0): Releasing backup interface [ 81.042396][ T7709] bond0: (slave bond_slave_1): Releasing backup interface [ 81.044312][ T7709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.044325][ T7709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.045396][ T7709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.045406][ T7709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.046301][ T7709] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.181444][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 81.183235][ T9] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 81.184281][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 81.184317][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.192988][ T9] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected [ 81.195545][ T9] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 81.250606][ T7717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.637'. [ 81.329737][ T7220] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 81.491027][ T7220] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.497623][ T7220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.497651][ T7220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.497670][ T7220] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.497704][ T7220] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.518301][ T7220] usb 8-1: config 0 descriptor?? [ 81.556505][ T7731] evm: overlay not supported [ 81.574119][ T7731] Process accounting resumed [ 81.862286][ T5927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.862301][ T5927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.947438][ T7739] (syz.1.646,7739,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 81.947457][ T7739] (syz.1.646,7739,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 81.960738][ T7220] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 81.976796][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.646'. [ 82.162966][ T7220] usb 5-1: USB disconnect, device number 5 [ 82.174776][ T7220] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 82.175147][ T7220] kobil_sct 5-1:1.0: device disconnected [ 82.807351][ T7756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 82.838225][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 82.838238][ T44] audit: type=1400 audit(1789409325.163:25554): avc: denied { execute } for pid=7759 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 82.844389][ T44] audit: type=1400 audit(1789409325.163:25555): avc: denied { execute_no_trans } for pid=7759 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 82.860354][ T7756] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 82.986204][ T5731] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.987621][ T5731] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.989511][ T5731] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.001013][ T5731] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.001441][ T5731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.147476][ T7770] netlink: 40 bytes leftover after parsing attributes in process `syz.1.653'. [ 83.308254][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.362313][ T7778] (syz.1.655,7778,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 83.362333][ T7778] (syz.1.655,7778,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 83.392498][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.404532][ T7778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'. [ 83.440697][ T7784] loop5: detected capacity change from 0 to 7 [ 83.443992][ T7784] Dev loop5: unable to read RDB block 7 [ 83.444014][ T7784] loop5: unable to read partition table [ 83.444094][ T7784] loop5: partition table beyond EOD, truncated [ 83.444103][ T7784] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 83.506243][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.567976][ T7792] loop5: detected capacity change from 0 to 7 [ 83.575488][ T7792] Dev loop5: unable to read RDB block 7 [ 83.575511][ T7792] loop5: unable to read partition table [ 83.575598][ T7792] loop5: partition table beyond EOD, truncated [ 83.575607][ T7792] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 83.623307][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.671736][ T44] audit: type=1400 audit(1789409326.003:25556): avc: denied { write } for pid=7787 comm="syz.1.658" name="/" dev="9p" ino=74743239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.676338][ T44] audit: type=1400 audit(1789409326.003:25557): avc: denied { associate } for pid=7787 comm="syz.1.658" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.812454][ T7799] bridge0: port 3(syz_tun) entered blocking state [ 83.812500][ T7799] bridge0: port 3(syz_tun) entered disabled state [ 83.825886][ T7799] syz_tun: entered promiscuous mode [ 83.833676][ T7799] bridge0: port 3(syz_tun) entered blocking state [ 83.833724][ T7799] bridge0: port 3(syz_tun) entered forwarding state [ 84.026626][ T1039] usb 8-1: USB disconnect, device number 8 [ 84.217347][ T13] veth0: left allmulticast mode [ 84.217387][ T13] veth0: left promiscuous mode [ 84.218907][ T13] bridge0: port 3(veth0) entered disabled state [ 84.232081][ T13] bridge_slave_1: left allmulticast mode [ 84.232098][ T13] bridge_slave_1: left promiscuous mode [ 84.232945][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.236945][ T13] bridge_slave_0: left allmulticast mode [ 84.236961][ T13] bridge_slave_0: left promiscuous mode [ 84.237048][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.257975][ T7824] faux_driver vgem: [drm] Unknown color mode 135162; guessing buffer size. [ 84.258468][ T44] audit: type=1400 audit(1789409326.583:25558): avc: denied { map } for pid=7823 comm="syz.3.667" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.269322][ T44] audit: type=1400 audit(1789409326.583:25559): avc: denied { execute } for pid=7823 comm="syz.3.667" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.290829][ T44] audit: type=1400 audit(1789409326.613:25560): avc: denied { write } for pid=7830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.396012][ T44] audit: type=1400 audit(1789409326.723:25561): avc: denied { write } for pid=7834 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.518197][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.531631][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.532519][ T13] bond0 (unregistering): Released all slaves [ 84.557357][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 84.617220][ T44] audit: type=1400 audit(1789409326.943:25562): avc: denied { mount } for pid=7840 comm="syz.3.668" name="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 84.646192][ T44] audit: type=1400 audit(1789409326.973:25563): avc: denied { validate_trans } for pid=7842 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.657644][ T13] tipc: Disabling bearer [ 84.661795][ T13] tipc: Left network mode [ 84.662227][ T7761] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.662310][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.662419][ T7761] bridge_slave_0: entered allmulticast mode [ 84.666643][ T7761] bridge_slave_0: entered promiscuous mode [ 84.670777][ T7761] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.670818][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.670876][ T7761] bridge_slave_1: entered allmulticast mode [ 84.678312][ T7761] bridge_slave_1: entered promiscuous mode [ 84.755029][ T7761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.795292][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.668'. [ 84.809478][ T7761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.888010][ T7761] team0: Port device team_slave_0 added [ 84.894195][ T7761] team0: Port device team_slave_1 added [ 84.918980][ T7855] vlan2: entered promiscuous mode [ 84.918996][ T7855] hsr0: entered promiscuous mode [ 84.919178][ T7855] vlan2: entered allmulticast mode [ 84.919186][ T7855] hsr0: entered allmulticast mode [ 84.919193][ T7855] hsr_slave_0: entered allmulticast mode [ 84.919201][ T7855] hsr_slave_1: entered allmulticast mode [ 85.015925][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 85.034689][ T7864] loop5: detected capacity change from 0 to 7 [ 85.038172][ T7864] Dev loop5: unable to read RDB block 7 [ 85.038195][ T7864] loop5: unable to read partition table [ 85.038296][ T7864] loop5: partition table beyond EOD, truncated [ 85.041163][ T66] Bluetooth: hci4: command tx timeout [ 85.041928][ T7864] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.212518][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.212529][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.212542][ T7761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.216711][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.216721][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.216735][ T7761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.219243][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 85.240040][ T7855] hsr_slave_0: left promiscuous mode [ 85.246383][ T7855] hsr_slave_1: left promiscuous mode [ 85.371624][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 85.447121][ T13] hsr_slave_0: left promiscuous mode [ 85.452004][ T13] hsr_slave_1: left promiscuous mode [ 85.452513][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.452534][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.472863][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.472877][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.486194][ T13] veth1_macvtap: left promiscuous mode [ 85.486229][ T13] veth0_macvtap: left promiscuous mode [ 85.487552][ T13] veth1_vlan: left promiscuous mode [ 85.492398][ T13] veth0_vlan: left promiscuous mode [ 85.581081][ T7889] dlm: Unknown command passed to DLM device : 134 [ 85.581081][ T7889] [ 85.803953][ T7906] loop5: detected capacity change from 0 to 7 [ 85.806058][ T7906] Dev loop5: unable to read RDB block 7 [ 85.806136][ T13] team0 (unregistering): Port device team_slave_1 removed [ 85.806141][ T7906] loop5: unable to read partition table [ 85.806281][ T7906] loop5: partition table beyond EOD, truncated [ 85.806304][ T7906] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.836230][ T13] team0 (unregistering): Port device team_slave_0 removed [ 85.839390][ T851] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 86.009166][ T851] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 86.010168][ T851] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.010207][ T851] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 86.010228][ T851] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.010244][ T851] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 86.012175][ T851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.012191][ T851] usb 8-1: Product: syz [ 86.012201][ T851] usb 8-1: Manufacturer: syz [ 86.012212][ T851] usb 8-1: SerialNumber: syz [ 86.014224][ T7890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.017147][ T851] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 86.018880][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 87 [ 86.018915][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 86.029684][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82 [ 86.029736][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 86.029793][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 86.029839][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 85 [ 86.029870][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 5 [ 86.041069][ T851] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 86.043017][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 83 [ 86.043053][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 86.043082][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 86.043112][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4 [ 86.043141][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 86 [ 86.043207][ T851] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 86.045810][ T851] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 86.105441][ T13] team0 (unregistering): Port device dummy0 removed [ 86.136257][ T7761] hsr_slave_0: entered promiscuous mode [ 86.137019][ T7761] hsr_slave_1: entered promiscuous mode [ 86.173329][ T7912] syzkaller0: left promiscuous mode [ 86.173345][ T7912] syzkaller0: left allmulticast mode [ 86.445831][ T7890] kvm: MONITOR instruction emulated as NOP! [ 86.457305][ T5519] usb 8-1: USB disconnect, device number 9 [ 86.473518][ T5519] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 86.478550][ T5519] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 86.478918][ T5519] keyspan 8-1:1.0: device disconnected [ 86.553058][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 86.669115][ T7761] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.696456][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.696974][ T7761] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.699626][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.706806][ T7761] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.717954][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.720199][ T7933] loop5: detected capacity change from 0 to 7 [ 86.721913][ T7933] Dev loop5: unable to read RDB block 7 [ 86.721934][ T7933] loop5: unable to read partition table [ 86.722018][ T7933] loop5: partition table beyond EOD, truncated [ 86.722027][ T7933] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 86.733202][ T7761] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.743588][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.824830][ T7761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.836556][ T7761] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.852825][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.852871][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.868277][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.868330][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.986669][ T7955] (syz.0.698,7955,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 86.986703][ T7955] (syz.0.698,7955,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 87.046511][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 87.092004][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.698'. [ 87.119392][ T66] Bluetooth: hci4: command tx timeout [ 87.317959][ T7984] loop5: detected capacity change from 0 to 7 [ 87.328070][ T7984] Dev loop5: unable to read RDB block 7 [ 87.328092][ T7984] loop5: unable to read partition table [ 87.328179][ T7984] loop5: partition table beyond EOD, truncated [ 87.328188][ T7984] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 87.478303][ T7761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.546322][ T8011] loop5: detected capacity change from 0 to 7 [ 87.569132][ T8011] Dev loop5: unable to read RDB block 7 [ 87.569154][ T8011] loop5: unable to read partition table [ 87.569237][ T8011] loop5: partition table beyond EOD, truncated [ 87.569247][ T8011] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 87.671725][ T7761] veth0_vlan: entered promiscuous mode [ 87.682927][ T7761] veth1_vlan: entered promiscuous mode [ 87.692757][ T8017] (syz.0.713,8017,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 87.692777][ T8017] (syz.0.713,8017,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 87.703092][ T7761] veth0_macvtap: entered promiscuous mode [ 87.712472][ T7761] veth1_macvtap: entered promiscuous mode [ 87.720752][ T7761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.725801][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.713'. [ 87.726742][ T7761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.779358][ T5806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.780016][ T5806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.780038][ T5806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.780056][ T5806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.830369][ T5927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.830390][ T5927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.856822][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.856942][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.872195][ T44] kauditd_printk_skb: 23 callbacks suppressed [ 87.872214][ T44] audit: type=1400 audit(1789409330.203:25587): avc: denied { mounton } for pid=7761 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 87.873042][ T44] audit: type=1400 audit(1789409330.203:25588): avc: denied { mounton } for pid=7761 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 88.010993][ T8032] loop5: detected capacity change from 0 to 7 [ 88.011631][ T8032] Dev loop5: unable to read RDB block 7 [ 88.011662][ T8032] loop5: unable to read partition table [ 88.011764][ T8032] loop5: partition table beyond EOD, truncated [ 88.011775][ T8032] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.075084][ T8036] loop5: detected capacity change from 0 to 7 [ 88.076197][ T8036] Dev loop5: unable to read RDB block 7 [ 88.076216][ T8036] loop5: unable to read partition table [ 88.076295][ T8036] loop5: partition table beyond EOD, truncated [ 88.076305][ T8036] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.229674][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.229727][ T8045] bridge0: port 1(bridge_slave_0) entered listening state [ 88.452102][ T8059] loop5: detected capacity change from 0 to 7 [ 88.452487][ T8059] Dev loop5: unable to read RDB block 7 [ 88.452506][ T8059] loop5: unable to read partition table [ 88.452585][ T8059] loop5: partition table beyond EOD, truncated [ 88.452594][ T8059] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.578871][ T1039] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 88.655216][ T8061] netlink: 'syz.1.731': attribute type 21 has an invalid length. [ 88.655240][ T8061] netlink: 128 bytes leftover after parsing attributes in process `syz.1.731'. [ 88.655305][ T8061] netlink: 'syz.1.731': attribute type 4 has an invalid length. [ 88.655318][ T8061] netlink: 'syz.1.731': attribute type 5 has an invalid length. [ 88.655329][ T8061] netlink: 3 bytes leftover after parsing attributes in process `syz.1.731'. [ 88.730599][ T1039] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 88.733249][ T1039] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 88.733274][ T1039] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 88.733308][ T1039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.781672][ T1039] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 88.799439][ T1039] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 88.992257][ T1039] usb 5-1: USB disconnect, device number 6 [ 89.003177][ T1039] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 89.003456][ T1039] spcp8x5 5-1:1.0: device disconnected [ 89.034496][ T8053] Console: switching to colour dummy device 80x25 [ 89.134276][ T8069] (syz.4.733,8069,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 89.134306][ T8069] (syz.4.733,8069,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 89.155030][ T8067] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 89.172805][ T8067] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 89.172962][ T8067] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 89.173025][ T8067] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 89.173120][ T8067] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 89.173463][ T8067] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 89.189915][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.733'. [ 89.194922][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.209347][ T66] Bluetooth: hci4: command tx timeout [ 89.225654][ T8067] pci 0000:00:01.0: Adding to iommu group 1 [ 89.242087][ T8067] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 89.242103][ T8067] pci 0000:00:01.0: vgaarb: bridge control possible [ 89.242110][ T8067] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 89.263994][ T8067] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 89.264155][ T8067] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 89.280222][ T8067] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 89.350116][ T8067] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 89.350160][ T8067] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 89.351339][ T8067] [drm] features: -virgl +edid -resource_blob -host_visible [ 89.351351][ T8067] [drm] features: -context_init -blob_alignment [ 89.374224][ T8067] ------------[ cut here ]------------ [ 89.374233][ T8067] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 89.374239][ T8067] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#2: syz.0.725/8067 [ 89.385471][ T8067] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.387576][ T8067] CPU: 2 UID: 0 PID: 8067 Comm: syz.0.725 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.392462][ T8067] Tainted: [L]=SOFTLOCKUP [ 89.394532][ T8067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.398776][ T8067] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 89.401303][ T8067] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 72 a1 6f 09 85 c0 75 e0 48 8d 3d 17 dd ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 f2 a2 6f 09 48 85 c0 0f [ 89.409337][ T8067] RSP: 0018:ffffc900036f6f18 EFLAGS: 00010246 [ 89.412072][ T8067] RAX: 0000000000000000 RBX: ffff88802bd78b40 RCX: fffff520006dedbe [ 89.415118][ T8067] RDX: 0000000000000000 RSI: ffffffff8c9198a0 RDI: ffffffff9149b2b0 [ 89.418245][ T8067] RBP: ffffffff8c9198a0 R08: 0000000000000000 R09: fffffbfff228a54b [ 89.421279][ T8067] R10: ffffc900036f6f18 R11: 0000000000000000 R12: 0000000000000000 [ 89.424455][ T8067] R13: ffffc900036f6f88 R14: 00000000000000d8 R15: ffff8880506b4fce [ 89.428706][ T8067] FS: 00007f258dd9e6c0(0000) GS:ffff8880d5d59000(0000) knlGS:0000000000000000 [ 89.432399][ T8067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.435011][ T8067] CR2: 0000001b329d9ff8 CR3: 000000003ed7c000 CR4: 0000000000352ef0 [ 89.438127][ T8067] Call Trace: [ 89.439860][ T8067] [ 89.441069][ T8067] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 89.443269][ T8067] ? __pfx__printk+0x10/0x10 [ 89.445128][ T8067] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 89.447465][ T8067] ? lockdep_init_map_type+0x5c/0x250 [ 89.449698][ T8067] virtio_gpu_init.cold+0x40d/0x1293 [ 89.451822][ T8067] ? vga_remove_vgacon.cold+0x1d/0x99 [ 89.453977][ T8067] ? __pfx_virtio_gpu_init+0x10/0x10 [ 89.455967][ T8067] ? is_console_locked+0x9/0x20 [ 89.457736][ T8067] ? con_is_bound+0x141/0x190 [ 89.459792][ T8067] ? vga_remove_vgacon+0x21/0x30 [ 89.461803][ T8067] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 89.465536][ T8067] virtio_gpu_probe+0x21c/0x360 [ 89.467430][ T8067] virtio_dev_probe+0x6a2/0xbe0 [ 89.469576][ T8067] ? __pfx_virtio_dev_probe+0x10/0x10 [ 89.471746][ T8067] ? kernfs_create_link+0x1bd/0x240 [ 89.473820][ T8067] ? kernfs_put+0x3f/0x60 [ 89.475536][ T8067] ? sysfs_do_create_link_sd+0xbb/0x140 [ 89.477693][ T8067] ? sysfs_create_link+0x68/0xc0 [ 89.479789][ T8067] ? __pfx_virtio_dev_probe+0x10/0x10 [ 89.481938][ T8067] really_probe+0x241/0xa60 [ 89.483846][ T8067] __driver_probe_device+0x210/0x460 [ 89.485948][ T8067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.488158][ T8067] driver_probe_device+0x4a/0x140 [ 89.489898][ T8067] __device_attach_driver+0x1df/0x320 [ 89.491590][ T8067] ? __pfx___device_attach_driver+0x10/0x10 [ 89.493444][ T8067] bus_for_each_drv+0x159/0x1e0 [ 89.494974][ T8067] ? __pfx_bus_for_each_drv+0x10/0x10 [ 89.496634][ T8067] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.498250][ T8067] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.500245][ T8067] __device_attach+0x1e4/0x4d0 [ 89.501758][ T8067] ? __pfx___device_attach+0x10/0x10 [ 89.503419][ T8067] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.505370][ T8067] device_initial_probe+0xaf/0xd0 [ 89.507016][ T8067] bus_probe_device+0x64/0x160 [ 89.509173][ T8067] device_add+0x121d/0x1970 [ 89.511025][ T8067] ? __pfx_device_add+0x10/0x10 [ 89.513300][ T8067] ? __pfx___might_resched+0x10/0x10 [ 89.515002][ T8067] ? __init_waitqueue_head+0xca/0x150 [ 89.516717][ T8067] ? ioread8+0x8f/0xd0 [ 89.518043][ T8067] register_virtio_device+0x4f0/0x5d0 [ 89.519989][ T8067] ? __pfx_register_virtio_device+0x10/0x10 [ 89.521922][ T8067] ? __pfx_pcibios_set_master+0x10/0x10 [ 89.523691][ T8067] ? __raw_spin_lock_init+0x3a/0x110 [ 89.525402][ T8067] ? __pfx_virtio_pci_probe+0x10/0x10 [ 89.527176][ T8067] virtio_pci_probe+0x255/0x410 [ 89.528891][ T8067] local_pci_probe+0xdd/0x1b0 [ 89.530417][ T8067] pci_call_probe+0x176/0x800 [ 89.531995][ T8067] ? pci_match_device+0x147/0x7d0 [ 89.533652][ T8067] ? __pfx_pci_call_probe+0x10/0x10 [ 89.535333][ T8067] ? __pfx_pci_match_device+0x10/0x10 [ 89.537059][ T8067] ? pci_find_host_bridge+0x3c/0x80 [ 89.538819][ T8067] ? up_write+0x2dc/0x5b0 [ 89.540213][ T8067] pci_device_probe+0x25b/0x400 [ 89.541801][ T8067] ? __pfx_pci_device_probe+0x10/0x10 [ 89.543539][ T8067] ? kernfs_create_link+0x1bd/0x240 [ 89.545167][ T8067] ? sysfs_create_link+0x68/0xc0 [ 89.546684][ T8067] ? __pfx_pci_device_probe+0x10/0x10 [ 89.548435][ T8067] really_probe+0x241/0xa60 [ 89.550150][ T8067] __driver_probe_device+0x210/0x460 [ 89.552171][ T8067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.554139][ T8067] driver_probe_device+0x4a/0x140 [ 89.555950][ T8067] __device_attach_driver+0x1df/0x320 [ 89.557935][ T8067] ? __pfx___device_attach_driver+0x10/0x10 [ 89.560033][ T8067] bus_for_each_drv+0x159/0x1e0 [ 89.561628][ T8067] ? __pfx_bus_for_each_drv+0x10/0x10 [ 89.563388][ T8067] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.565136][ T8067] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.567033][ T8067] __device_attach+0x1e4/0x4d0 [ 89.568624][ T8067] ? __pfx___device_attach+0x10/0x10 [ 89.570330][ T8067] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.572026][ T8067] device_initial_probe+0xaf/0xd0 [ 89.573629][ T8067] pci_bus_add_device+0xc5/0x100 [ 89.575282][ T8067] pci_bus_add_devices+0x9a/0x1f0 [ 89.576925][ T8067] pci_rescan_bus+0x2a/0x40 [ 89.578399][ T8067] rescan_store+0xfb/0x130 [ 89.579907][ T8067] ? __pfx_rescan_store+0x10/0x10 [ 89.581547][ T8067] ? sysfs_file_kobj+0xe4/0x290 [ 89.583112][ T8067] ? __pfx_rescan_store+0x10/0x10 [ 89.584976][ T8067] bus_attr_store+0x74/0xb0 [ 89.586839][ T8067] ? __pfx_bus_attr_store+0x10/0x10 [ 89.588556][ T8067] sysfs_kf_write+0xf2/0x150 [ 89.590104][ T8067] kernfs_fop_write_iter+0x3e0/0x5f0 [ 89.591876][ T8067] ? __pfx_sysfs_kf_write+0x10/0x10 [ 89.593540][ T8067] vfs_write+0x6af/0x1050 [ 89.594945][ T8067] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 89.596823][ T8067] ? __pfx_vfs_write+0x10/0x10 [ 89.598363][ T8067] ? find_held_lock+0x2b/0x80 [ 89.600027][ T8067] ksys_write+0x12a/0x250 [ 89.601447][ T8067] ? __pfx_ksys_write+0x10/0x10 [ 89.603057][ T8067] do_syscall_64+0x123/0x790 [ 89.604573][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.607426][ T8067] RIP: 0033:0x7f258cf9e159 [ 89.609238][ T8067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.615604][ T8067] RSP: 002b:00007f258dd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.618540][ T8067] RAX: ffffffffffffffda RBX: 00007f258d226090 RCX: 00007f258cf9e159 [ 89.621180][ T8067] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000009 [ 89.623735][ T8067] RBP: 00007f258d03503b R08: 0000000000000000 R09: 0000000000000000 [ 89.626258][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.628855][ T8067] R13: 00007f258d226128 R14: 00007f258d226090 R15: 00007ffff514d988 [ 89.631405][ T8067] [ 89.632436][ T8067] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.635010][ T8067] CPU: 2 UID: 0 PID: 8067 Comm: syz.0.725 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.638205][ T8067] Tainted: [L]=SOFTLOCKUP [ 89.639769][ T8067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.642990][ T8067] Call Trace: [ 89.644035][ T8067] [ 89.644997][ T8067] dump_stack_lvl+0x100/0x190 [ 89.646505][ T8067] vpanic+0x553/0x970 [ 89.647770][ T8067] ? __pfx_vpanic+0x10/0x10 [ 89.649193][ T8067] panic+0xd1/0xe0 [ 89.650375][ T8067] ? __pfx_panic+0x10/0x10 [ 89.651845][ T8067] check_panic_on_warn.cold+0x19/0x34 [ 89.653597][ T8067] ? __kmem_cache_create_args+0xa9/0x430 [ 89.655403][ T8067] __warn.cold+0x191/0x318 [ 89.656852][ T8067] __report_bug+0x30f/0x440 [ 89.658264][ T8067] ? __kmem_cache_create_args+0xa9/0x430 [ 89.660374][ T8067] ? __pfx___report_bug+0x10/0x10 [ 89.662316][ T8067] ? __mutex_lock+0x26c/0x1bd0 [ 89.664205][ T8067] ? __kmem_cache_create_args+0x44/0x430 [ 89.666428][ T8067] report_bug_entry+0xe2/0x290 [ 89.668360][ T8067] ? __kmem_cache_create_args+0xac/0x430 [ 89.670598][ T8067] handle_bug+0x1cd/0x2a0 [ 89.672317][ T8067] exc_invalid_op+0x17/0x50 [ 89.673781][ T8067] asm_exc_invalid_op+0x1a/0x20 [ 89.675393][ T8067] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 89.677386][ T8067] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 72 a1 6f 09 85 c0 75 e0 48 8d 3d 17 dd ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 f2 a2 6f 09 48 85 c0 0f [ 89.683439][ T8067] RSP: 0018:ffffc900036f6f18 EFLAGS: 00010246 [ 89.685385][ T8067] RAX: 0000000000000000 RBX: ffff88802bd78b40 RCX: fffff520006dedbe [ 89.687895][ T8067] RDX: 0000000000000000 RSI: ffffffff8c9198a0 RDI: ffffffff9149b2b0 [ 89.690467][ T8067] RBP: ffffffff8c9198a0 R08: 0000000000000000 R09: fffffbfff228a54b [ 89.692989][ T8067] R10: ffffc900036f6f18 R11: 0000000000000000 R12: 0000000000000000 [ 89.695683][ T8067] R13: ffffc900036f6f88 R14: 00000000000000d8 R15: ffff8880506b4fce [ 89.698602][ T8067] ? __kmem_cache_create_args+0x9e/0x430 [ 89.700426][ T8067] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 89.702158][ T8067] ? __pfx__printk+0x10/0x10 [ 89.703642][ T8067] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 89.705519][ T8067] ? lockdep_init_map_type+0x5c/0x250 [ 89.707247][ T8067] virtio_gpu_init.cold+0x40d/0x1293 [ 89.708948][ T8067] ? vga_remove_vgacon.cold+0x1d/0x99 [ 89.710658][ T8067] ? __pfx_virtio_gpu_init+0x10/0x10 [ 89.712357][ T8067] ? is_console_locked+0x9/0x20 [ 89.713913][ T8067] ? con_is_bound+0x141/0x190 [ 89.715707][ T8067] ? vga_remove_vgacon+0x21/0x30 [ 89.717683][ T8067] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 89.719868][ T8067] virtio_gpu_probe+0x21c/0x360 [ 89.721507][ T8067] virtio_dev_probe+0x6a2/0xbe0 [ 89.723085][ T8067] ? __pfx_virtio_dev_probe+0x10/0x10 [ 89.724802][ T8067] ? kernfs_create_link+0x1bd/0x240 [ 89.726468][ T8067] ? kernfs_put+0x3f/0x60 [ 89.728081][ T8067] ? sysfs_do_create_link_sd+0xbb/0x140 [ 89.729871][ T8067] ? sysfs_create_link+0x68/0xc0 [ 89.731507][ T8067] ? __pfx_virtio_dev_probe+0x10/0x10 [ 89.733223][ T8067] really_probe+0x241/0xa60 [ 89.734726][ T8067] __driver_probe_device+0x210/0x460 [ 89.736830][ T8067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.738956][ T8067] driver_probe_device+0x4a/0x140 [ 89.740587][ T8067] __device_attach_driver+0x1df/0x320 [ 89.742365][ T8067] ? __pfx___device_attach_driver+0x10/0x10 [ 89.744251][ T8067] bus_for_each_drv+0x159/0x1e0 [ 89.745811][ T8067] ? __pfx_bus_for_each_drv+0x10/0x10 [ 89.747530][ T8067] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.749207][ T8067] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.751082][ T8067] __device_attach+0x1e4/0x4d0 [ 89.752596][ T8067] ? __pfx___device_attach+0x10/0x10 [ 89.754324][ T8067] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.756045][ T8067] device_initial_probe+0xaf/0xd0 [ 89.757683][ T8067] bus_probe_device+0x64/0x160 [ 89.759224][ T8067] device_add+0x121d/0x1970 [ 89.760639][ T8067] ? __pfx_device_add+0x10/0x10 [ 89.762166][ T8067] ? __pfx___might_resched+0x10/0x10 [ 89.763949][ T8067] ? __init_waitqueue_head+0xca/0x150 [ 89.765612][ T8067] ? ioread8+0x8f/0xd0 [ 89.766933][ T8067] register_virtio_device+0x4f0/0x5d0 [ 89.768583][ T8067] ? __pfx_register_virtio_device+0x10/0x10 [ 89.770941][ T8067] ? __pfx_pcibios_set_master+0x10/0x10 [ 89.772945][ T8067] ? __raw_spin_lock_init+0x3a/0x110 [ 89.775074][ T8067] ? __pfx_virtio_pci_probe+0x10/0x10 [ 89.777073][ T8067] virtio_pci_probe+0x255/0x410 [ 89.778612][ T8067] local_pci_probe+0xdd/0x1b0 [ 89.780145][ T8067] pci_call_probe+0x176/0x800 [ 89.781668][ T8067] ? pci_match_device+0x147/0x7d0 [ 89.783353][ T8067] ? __pfx_pci_call_probe+0x10/0x10 [ 89.785017][ T8067] ? __pfx_pci_match_device+0x10/0x10 [ 89.786779][ T8067] ? pci_find_host_bridge+0x3c/0x80 [ 89.788446][ T8067] ? up_write+0x2dc/0x5b0 [ 89.790142][ T8067] pci_device_probe+0x25b/0x400 [ 89.792114][ T8067] ? __pfx_pci_device_probe+0x10/0x10 [ 89.794152][ T8067] ? kernfs_create_link+0x1bd/0x240 [ 89.796209][ T8067] ? sysfs_create_link+0x68/0xc0 [ 89.798200][ T8067] ? __pfx_pci_device_probe+0x10/0x10 [ 89.800258][ T8067] really_probe+0x241/0xa60 [ 89.802049][ T8067] __driver_probe_device+0x210/0x460 [ 89.804045][ T8067] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.805898][ T8067] driver_probe_device+0x4a/0x140 [ 89.807607][ T8067] __device_attach_driver+0x1df/0x320 [ 89.809327][ T8067] ? __pfx___device_attach_driver+0x10/0x10 [ 89.811136][ T8067] bus_for_each_drv+0x159/0x1e0 [ 89.812679][ T8067] ? __pfx_bus_for_each_drv+0x10/0x10 [ 89.814389][ T8067] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.816073][ T8067] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.817925][ T8067] __device_attach+0x1e4/0x4d0 [ 89.819465][ T8067] ? __pfx___device_attach+0x10/0x10 [ 89.821143][ T8067] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.822868][ T8067] device_initial_probe+0xaf/0xd0 [ 89.824464][ T8067] pci_bus_add_device+0xc5/0x100 [ 89.826058][ T8067] pci_bus_add_devices+0x9a/0x1f0 [ 89.827665][ T8067] pci_rescan_bus+0x2a/0x40 [ 89.829118][ T8067] rescan_store+0xfb/0x130 [ 89.830570][ T8067] ? __pfx_rescan_store+0x10/0x10 [ 89.832204][ T8067] ? sysfs_file_kobj+0xe4/0x290 [ 89.833766][ T8067] ? __pfx_rescan_store+0x10/0x10 [ 89.835427][ T8067] bus_attr_store+0x74/0xb0 [ 89.837247][ T8067] ? __pfx_bus_attr_store+0x10/0x10 [ 89.839311][ T8067] sysfs_kf_write+0xf2/0x150 [ 89.841163][ T8067] kernfs_fop_write_iter+0x3e0/0x5f0 [ 89.843015][ T8067] ? __pfx_sysfs_kf_write+0x10/0x10 [ 89.844671][ T8067] vfs_write+0x6af/0x1050 [ 89.846067][ T8067] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 89.847948][ T8067] ? __pfx_vfs_write+0x10/0x10 [ 89.849462][ T8067] ? find_held_lock+0x2b/0x80 [ 89.851010][ T8067] ksys_write+0x12a/0x250 [ 89.852402][ T8067] ? __pfx_ksys_write+0x10/0x10 [ 89.854292][ T8067] do_syscall_64+0x123/0x790 [ 89.856156][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.858386][ T8067] RIP: 0033:0x7f258cf9e159 [ 89.859934][ T8067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.866109][ T8067] RSP: 002b:00007f258dd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.868793][ T8067] RAX: ffffffffffffffda RBX: 00007f258d226090 RCX: 00007f258cf9e159 [ 89.871614][ T8067] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000009 [ 89.874202][ T8067] RBP: 00007f258d03503b R08: 0000000000000000 R09: 0000000000000000 [ 89.876726][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.879241][ T8067] R13: 00007f258d226128 R14: 00007f258d226090 R15: 00007ffff514d988 [ 89.881802][ T8067] [ 89.883344][ T8067] Kernel Offset: disabled [ 89.884746][ T8067] Rebooting in 86400 seconds..