last executing test programs: 1m20.614856305s ago: executing program 0 (id=1033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001c00)=r1) 1m8.606310817s ago: executing program 1 (id=1034): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(0x0, 0x1, &(0x7f0000001100)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1m0.263472719s ago: executing program 0 (id=1035): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) 53.275396435s ago: executing program 1 (id=1036): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="c6", 0xfffffdd1}], 0x1}, 0x4040004) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x22) 45.062735725s ago: executing program 0 (id=1037): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000340)=0x100, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000380)={0x2c, 0x3, r2, 0x1f}, 0x10) 39.814009053s ago: executing program 1 (id=1038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040045, &(0x7f00000001c0)={0xa, 0x2, 0x40398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r0, 0x1) 35.354758912s ago: executing program 0 (id=1039): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000500)={0x7, {{0x2, 0x4e23, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f000001e800)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4b}}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 24.776870338s ago: executing program 1 (id=1040): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x430002d7) umount2(&(0x7f0000000080)='./file0\x00', 0xb) 21.110424628s ago: executing program 0 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x24004810) 10.345350696s ago: executing program 1 (id=1042): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=@ocfs2={0xc, 0x300fe, {0x62, 0x0, 0x20000002}}, 0xc041) 5.856010725s ago: executing program 0 (id=1043): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1000007) r1 = dup(r0) fallocate(r1, 0x11, 0x20000, 0x200) 0s ago: executing program 1 (id=1044): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:59789' (ED25519) to the list of known hosts. syzkaller login: [ 616.907427][ T3204] cgroup: Unknown subsys name 'net' [ 617.871169][ T3204] cgroup: Unknown subsys name 'cpuset' [ 618.054360][ T3204] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 712.156999][ T3204] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 869.082605][ T3217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.788970][ T3217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.031588][ T3215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.421035][ T3215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.822384][ T3217] hsr_slave_0: entered promiscuous mode [ 893.933776][ T3217] hsr_slave_1: entered promiscuous mode [ 899.160981][ T3215] hsr_slave_0: entered promiscuous mode [ 899.192405][ T3215] hsr_slave_1: entered promiscuous mode [ 899.251840][ T3215] debugfs: 'hsr0' already exists in 'hsr' [ 899.262622][ T3215] Cannot create hsr debugfs directory [ 911.750233][ T3217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 912.318252][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 912.407961][ T3217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 912.667890][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 913.262732][ T3217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 913.468055][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.638242][ T3217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 913.771386][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 917.194206][ T3215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 917.358692][ T3215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 917.410838][ T3215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 917.937186][ T3215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 917.992908][ T3215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 918.131597][ T3215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.280674][ T3215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 918.446450][ T3215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 940.313056][ T3217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.524219][ T3215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.267080][ T3217] veth0_vlan: entered promiscuous mode [ 1044.890050][ T3217] veth1_vlan: entered promiscuous mode [ 1045.170776][ T3215] veth0_vlan: entered promiscuous mode [ 1048.292460][ T3215] veth1_vlan: entered promiscuous mode [ 1051.706091][ T3217] veth0_macvtap: entered promiscuous mode [ 1053.015847][ T3217] veth1_macvtap: entered promiscuous mode [ 1055.483551][ T3215] veth0_macvtap: entered promiscuous mode [ 1056.220445][ T3215] veth1_macvtap: entered promiscuous mode [ 1059.069750][ T2366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.248334][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.514011][ T3337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.927107][ T3828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.171551][ T3828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.183025][ T3828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.679938][ T3828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.047201][ T3828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.851714][ T3217] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1161.882863][ T3861] mmap: syz.0.12 (3861) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1222.929582][ T3884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'. [ 1359.666233][ T3932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'. [ 1360.420779][ T3934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'. [ 1364.281900][ T3937] ======================================================= [ 1364.281900][ T3937] WARNING: The mand mount option has been deprecated and [ 1364.281900][ T3937] and is ignored by this kernel. Remove the mand [ 1364.281900][ T3937] option from the mount to silence this warning. [ 1364.281900][ T3937] ======================================================= [ 1525.408905][ T3995] input: syz0 as /devices/virtual/input/input0 [ 1809.027509][ T4092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1809.031721][ T4092] IPv6: NLM_F_CREATE should be set when creating new route [ 1809.034058][ T4092] IPv6: NLM_F_CREATE should be set when creating new route [ 1809.463911][ T4092] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.94'. [ 1893.191041][ T4121] input: syz1 as /devices/virtual/input/input1 [ 1935.690678][ T3767] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1939.131415][ T3767] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1939.369496][ T3767] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1939.620959][ T3767] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1939.651990][ T3767] usb 2-1: can't read configurations, error -71 [ 2036.536956][ T4184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'. [ 2108.365606][ T4204] ptrace attach of "/syz-executor exec"[3217] was attempted by " Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ    ÿÿÿÿ   ÿÿÿÿ  [ 2175.391954][ T4231] netlink: 52 bytes leftover after parsing attributes in process `syz.1.145'. [ 2262.148985][ T4263] loop0: Can't mount, would change RO state [ 2457.160084][ T4334] input: syz0 as /devices/virtual/input/input2 [ 2533.213177][ T4358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.193'. [ 2742.012706][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 3076.877738][ T4493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3076.882615][ T4493] IPv6: NLM_F_CREATE should be set when creating new route [ 3076.891322][ T4493] IPv6: NLM_F_CREATE should be set when creating new route [ 3076.896285][ T4493] IPv6: NLM_F_CREATE should be set when creating new route [ 3076.990387][ T4493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3077.093732][ T4493] Zero length message leads to an empty skb [ 3080.454268][ T4496] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3084.047810][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3084.053432][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3084.062414][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3084.068562][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3084.072577][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3084.077606][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3084.081564][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3084.086531][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3084.090783][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3085.463262][ T4495] net_ratelimit: 183 callbacks suppressed [ 3085.463979][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3085.472150][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3085.477928][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3085.482532][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3085.488265][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3085.492232][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3085.498663][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3085.503692][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3085.510025][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3085.515697][ T4495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 3117.272605][ T4508] syz.0.255 uses obsolete (PF_INET,SOCK_PACKET) [ 3190.336411][ T4419] hid-generic 0040:0010:7FFFFFFF.0001: item fetching failed at offset 0/2 [ 3190.603669][ T4419] hid-generic 0040:0010:7FFFFFFF.0001: probe with driver hid-generic failed with error -22 [ 3295.519988][ T4591] process 'syz.1.288' launched './file2' with NULL argv: empty string added [ 3332.964342][ T42] bond0: (slave bond_slave_0): interface is now down [ 3333.020695][ T42] bond0: (slave bond_slave_1): interface is now down [ 3333.048749][ T42] bond0: (slave bond_slave_0): interface is now down [ 3333.058055][ T42] bond0: (slave bond_slave_1): interface is now down [ 3333.086315][ T42] bond0: (slave bond_slave_0): interface is now down [ 3333.095536][ T42] bond0: (slave bond_slave_1): interface is now down [ 3333.116811][ T4439] bond0: (slave bond_slave_0): interface is now down [ 3333.125527][ T4439] bond0: (slave bond_slave_1): interface is now down [ 3333.150340][ T3266] bond0: (slave bond_slave_0): interface is now down [ 3333.173912][ T3266] bond0: (slave bond_slave_1): interface is now down [ 3333.710912][ T3266] bond0: now running without any active interface! [ 3365.268305][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 3365.273667][ T4619] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 3365.391981][ T4619] netlink: 44 bytes leftover after parsing attributes in process `syz.1.300'. [ 3365.409960][ T4619] net_ratelimit: 502 callbacks suppressed [ 3365.427190][ T4619] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3370.940208][ T4621] sch_tbf: burst 1347 is lower than device lo mtu (65550) ! [ 3430.391608][ T4642] netlink: 48 bytes leftover after parsing attributes in process `syz.0.310'. [ 3442.432600][ T31] audit: type=1326 audit(3441.000:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.0.312" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0x7fffb17341ba code=0x0 [ 3513.557692][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 3513.579004][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 3551.419191][ T4694] netlink: 104 bytes leftover after parsing attributes in process `syz.1.332'. [ 3576.348828][ T4704] input: syz0 as /devices/virtual/input/input3 [ 3609.453180][ T4727] dummy0: mtu less than device minimum [ 3838.273809][ T4813] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 3847.194231][ T4814] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3974.425451][ T4860] capability: warning: `syz.1.395' uses 32-bit capabilities (legacy support in use) [ 4303.301764][ T4954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.432'. [ 4433.399389][ T5008] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 4486.771695][ T5028] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 4520.616642][ T5041] ªªªªªª: renamed from vlan0 (while UP) [ 4620.416810][ T5074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.475'. [ 4695.657011][ T31] audit: type=1400 audit(4950.244:3): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=5097 comm="syz.1.484" name="p" offset=92 [ 4845.046477][ T5151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 4845.076389][ T5151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 4963.939140][ T5205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.526'. [ 5139.186856][ T5274] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 5242.571769][ T5033] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 5242.626463][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 5242.928221][ T5033] usb 1-1: device descriptor read/64, error -32 [ 5243.458611][ T5033] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 5244.017230][ T5033] usb 1-1: Using ep0 maxpacket: 32 [ 5244.302842][ T5033] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 5244.739806][ T5033] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 5244.755893][ T5033] usb 1-1: config 0 interface 0 has no altsetting 0 [ 5244.776551][ T5033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5245.862224][ T5033] usb 1-1: config 0 descriptor?? [ 5253.987555][ T5033] usbhid 1-1:0.0: can't add hid device: -32 [ 5254.024290][ T5033] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 5257.469112][ T5033] usb 1-1: USB disconnect, device number 3 [ 5368.536793][ T5395] binder: BC_ATTEMPT_ACQUIRE not supported [ 5368.552827][ T5395] binder: 5394:5395 ioctl c0306201 2000000001c0 returned -22 [ 5377.560182][ T4594] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 5378.030506][ T4594] usb 2-1: Using ep0 maxpacket: 16 [ 5378.123822][ T4594] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 5378.478882][ T4594] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 5378.492756][ T4594] usb 2-1: config 0 has no interfaces? [ 5379.297931][ T4594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5379.322199][ T4594] usb 2-1: Product: syz [ 5379.341699][ T4594] usb 2-1: Manufacturer: syz [ 5379.359053][ T4594] usb 2-1: SerialNumber: syz [ 5380.181080][ T4594] usb 2-1: config 0 descriptor?? [ 5386.183091][ T4594] usb 2-1: USB disconnect, device number 4 [ 5574.417393][ T5481] vlan0: entered promiscuous mode [ 5574.439106][ T5481] bond0: entered promiscuous mode [ 5574.442724][ T5481] bond_slave_0: entered promiscuous mode [ 5574.618602][ T5481] bond_slave_1: entered promiscuous mode [ 5584.827366][ T5486] netlink: 'syz.1.627': attribute type 12 has an invalid length. [ 5600.242415][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 5735.374143][ T5531] bonding: no command found in bonding_masters - use +ifname or -ifname syzkaller syzkaller login: [ 5840.562561][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 6125.088666][ T5640] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 6125.098801][ T5640] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 6231.958360][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 6231.970359][ T5663] netlink: 'syz.1.695': attribute type 29 has an invalid length. [ 6232.021347][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 6426.878556][ T5704] netlink: 32 bytes leftover after parsing attributes in process `syz.1.710'. [ 6518.331921][ T31] audit: type=1400 audit(6772.954:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=5728 comm="syz.0.722" [ 6558.123128][ T5745] netlink: 'syz.0.730': attribute type 12 has an invalid length. [ 6699.211549][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 6699.671142][ T5799] netlink: 72 bytes leftover after parsing attributes in process `syz.0.753'. [ 6796.280665][ T5845] tun0: tun_chr_ioctl cmd 1074025675 [ 6796.289826][ T5845] tun0: persist enabled [ 6823.056831][ T5860] input: syz0 as /devices/virtual/input/input5 [ 6830.248058][ T5866] binder: 5865:5866 ioctl c0306201 200000000100 returned -14 [ 6924.034035][ T5904] block nbd0: shutting down sockets [ 6982.763493][ T5487] logitech-hidpp-device 0003:046D:C082.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 6988.736267][ T5944] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 7045.946551][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 7045.949001][ T5963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.816'. [ 7174.062859][ T31] audit: type=1800 audit(7428.624:5): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.830" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=8989 res=0 errno=0 [ 7213.442215][ T6010] bonding: bond0 is being created... [ 7214.333872][ T6010] bonding: bond0 already exists [ 7376.543018][ T6054] hub 1-0:1.0: USB hub found [ 7376.602928][ T6054] hub 1-0:1.0: 1 port detected [ 8110.832807][ T6272] device-mapper: ioctl: name not supplied when creating device [ 8205.877708][ T6298] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.947'. [ 8285.674478][ T6331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 8285.676775][ T6331] IPv6: NLM_F_CREATE should be set when creating new route [ 8339.989435][ T6354] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 8371.441902][ T6372] syzkaller1: entered promiscuous mode [ 8371.457901][ T6372] syzkaller1: entered allmulticast mode [ 8419.432463][ T6400] gadgetfs: bound to dummy_udc driver [ 8419.880502][ T6113] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 8419.887928][ C1] gadgetfs: connected [ 8419.920879][ T6113] gadgetfs: disconnected [ 8420.138152][ C1] gadgetfs: connected [ 8420.228623][ T6113] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 8420.234091][ T6113] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 8420.259018][ T6113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8420.620032][ C1] gadgetfs: configuration #1 [ 8423.208660][ T6399] gadgetfs: suspended from state 3 [ 8423.237320][ T6399] gadgetfs: disconnected [ 8423.297780][ T6113] usb 1-1: USB disconnect, device number 4 [ 8525.017978][ T6448] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 8548.313806][ T6453] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 8621.510752][ T6488] netlink: 'syz.1.1014': attribute type 4 has an invalid length. [ 8865.733005][ T6570] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1f pfn:0x98ef6 [ 8865.773846][ T6570] memcg:ffffaf8018faf100 [ 8865.795979][ T6570] flags: 0x1(locked|node=0|zone=0) [ 8865.826566][ T6570] raw: 0000000000000001 0000000000000000 dead000000000122 0000000000000000 [ 8865.833377][ T6570] raw: 000000000000001f 0000000000000000 00000001ffffffff ffffaf8018faf100 [ 8865.882455][ T6570] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 8865.952977][ T6570] page_owner tracks the page as allocated [ 8866.016449][ T6570] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6570, tgid 6568 (syz.1.1044), ts 8865722969900, free_ts 8865259607100 [ 8866.067463][ T6570] __set_page_owner+0x92/0x4b0 [ 8866.122301][ T6570] post_alloc_hook+0xe4/0x1a0 [ 8866.153554][ T6570] get_page_from_freelist+0x914/0x3950 [ 8866.214085][ T6570] __alloc_frozen_pages_noprof+0x224/0x2e58 [ 8866.249403][ T6570] alloc_pages_mpol+0x1f0/0x59c [ 8866.359299][ T6570] alloc_frozen_pages_noprof+0x156/0x2ce [ 8866.389075][ T6570] folio_alloc_noprof+0x24/0x1ae [ 8866.434291][ T6570] filemap_alloc_folio_noprof.part.0+0x382/0x436 [ 8866.552307][ T6570] filemap_alloc_folio_noprof+0xe6/0x12c [ 8866.614197][ T6570] page_cache_ra_order+0x55c/0x13de [ 8866.656989][ T6570] filemap_fault+0x17f4/0x2e3c [ 8866.670478][ T6570] __do_fault+0xee/0x6fc [ 8866.672397][ T6570] do_fault+0xbf2/0x14d6 [ 8866.674225][ T6570] __handle_mm_fault+0xff8/0x14fa [ 8866.741484][ T6570] handle_mm_fault+0x25a/0x8bc [ 8866.774235][ T6570] __get_user_pages+0xcb6/0x20b2 [ 8866.823237][ T6570] page last free pid 6569 tgid 6568 stack trace: [ 8866.872236][ T6570] __reset_page_owner+0x76/0x1bc [ 8866.908115][ T6570] free_unref_folios+0x9d2/0x1b80 [ 8866.931844][ T6570] folios_put_refs+0x46c/0x7c6 [ 8866.950642][ T6570] __folio_batch_release+0x62/0xb4 [ 8866.968280][ T6570] truncate_inode_pages_range+0x2ce/0xcec [ 8867.034520][ T6570] truncate_inode_pages+0x22/0x2e [ 8867.102336][ T6570] set_blocksize+0x2be/0x58c [ 8867.159958][ T6570] blkdev_bszset+0x3b4/0x5ba [ 8867.172612][ T6570] blkdev_ioctl+0x9dc/0x12e4 [ 8867.201445][ T6570] __riscv_sys_ioctl+0x17c/0x1e2 [ 8867.240360][ T6570] syscall_handler+0x92/0x114 [ 8867.460416][ T6570] do_trap_ecall_u+0x4ca/0x658 [ 8867.510179][ T6570] handle_exception+0x168/0x174 [ 8867.561857][ C0] ------------[ cut here ]------------ [ 8867.562297][ C0] kernel BUG at [] mm/filemap.c:858! [ 8867.563787][ C0] Kernel BUG [#1] [ 8867.564125][ C0] Modules linked in: [ 8867.565910][ C0] CPU: 0 UID: 0 PID: 6570 Comm: syz.1.1044 Tainted: G L syzkaller #0 PREEMPT [ 8867.566824][ C0] Tainted: [L]=SOFTLOCKUP [ 8867.567073][ C0] Hardware name: riscv-virtio,qemu (DT) [ 8867.567718][ C0] epc : __filemap_add_folio+0xfe8/0x13ca [ 8867.568549][ C0] ra : __filemap_add_folio+0xfe8/0x13ca [ 8867.569134][ C0] epc : ffffffff8090ad92 ra : ffffffff8090ad92 sp : ffff8f80026f70d0 [ 8867.569599][ C0] gp : ffffffff8a4c0280 tp : ffffaf801a7b4f80 t0 : 0000000000000000 [ 8867.570005][ C0] t1 : ffffffff8007dbbe t2 : ffffffff91898ba0 s0 : ffff8f80026f72a0 [ 8867.570408][ C0] s1 : 0000000000112cc0 a0 : ffffaf801a7b5444 a1 : ffffffff882410a8 [ 8867.570807][ C0] a2 : 0000000000080000 a3 : ffffffff80a2c58c a4 : ffff8f8005257630 [ 8867.571215][ C0] a5 : 000000000020b630 a6 : 0000000000000003 a7 : 0000000041b58ab3 [ 8867.571600][ C0] s2 : 0000000000000000 s3 : 0000000000112cc0 s4 : 0000000000000004 [ 8867.572004][ C0] s5 : ffff8d800263bd80 s6 : 0000000000000000 s7 : ffff8f80026f72e0 [ 8867.572394][ C0] s8 : ffff8f80026f7220 s9 : ffffaf8016491fc8 s10: 0000000000000000 [ 8867.572767][ C0] s11: 0000000000000000 t3 : ffffffff880c5bd0 t4 : fffffffef114108b [ 8867.573144][ C0] t5 : fffffffef114108c t6 : 0000000000000002 ssp : 0000000000000000 [ 8867.573546][ C0] status: 0000000200000120 badaddr: ffffffff8090ad92 cause: 0000000000000003 [ 8867.574082][ C0] [] __filemap_add_folio+0xfe8/0x13ca [ 8867.574940][ C0] [] filemap_add_folio+0x1b6/0xb34 [ 8867.575498][ C0] [] page_cache_ra_order+0x600/0x13de [ 8867.576018][ C0] [] filemap_fault+0x17f4/0x2e3c [ 8867.576566][ C0] [] __do_fault+0xee/0x6fc [ 8867.577154][ C0] [] do_fault+0xbf2/0x14d6 [ 8867.577813][ C0] [] __handle_mm_fault+0xff8/0x14fa [ 8867.578507][ C0] [] handle_mm_fault+0x25a/0x8bc [ 8867.579180][ C0] [] __get_user_pages+0xcb6/0x20b2 [ 8867.579689][ C0] [] populate_vma_page_range+0x244/0x3d0 [ 8867.580266][ C0] [] __mm_populate+0x10e/0x3ae [ 8867.580771][ C0] [] vm_mmap_pgoff+0x34c/0x416 [ 8867.581318][ C0] [] ksys_mmap_pgoff+0x2c4/0x706 [ 8867.582108][ C0] [] __riscv_sys_mmap+0x11c/0x18c [ 8867.582720][ C0] [] syscall_handler+0x92/0x114 [ 8867.583338][ C0] [] do_trap_ecall_u+0x4ca/0x658 [ 8867.584015][ C0] [] handle_exception+0x168/0x174 [ 8867.585631][ C0] Code: 01c0 8556 d597 0623 8593 3be5 1097 0012 80e7 78e0 (9002) a097 [ 8867.587186][ C0] ---[ end trace 0000000000000000 ]--- [ 8867.589301][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 8867.590501][ C0] SMP: stopping secondary CPUs VM DIAGNOSIS: 20:52:16 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff82020794 mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000220 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f4b509 hedeleg 0000000000000000 mtvec 00000000800004f8 stvec ffffffff865c0ba0 vstvec 0000000000000000 mepc ffffffff80094c9e sepc ffffffff8090ad92 vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000003 vscause 0000000000000000 mtval 0000000000000000 stval ffffffff8090ad92 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080049000 sscratch 0000000000000000 satp 906570000009bb62 x0/zero 0000000000000000 x1/ra ffffffff82020764 x2/sp ffff8f80026f6890 x3/gp ffffffff8a4c0280 x4/tp ffffaf801a7b4f80 x5/t0 552030203a555043 x6/t1 ffffffff8a5d4a40 x7/t2 49552030203a5550 x8/s0 ffff8f80026f68d0 x9/s1 0000000000000000 x10/a0 ffffffff91886888 x11/a1 000000000000001f x12/a2 0000000000000000 x13/a3 ffffffff82020764 x14/a4 1ffffffff2310d11 x15/a5 ffff8f800006b000 x16/a6 000000001f000100 x17/a7 0000000000000003 x18/s2 ffffffff91886840 x19/s3 0000000000000036 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 0000000000000000 x23/s7 000000000000000a x24/s8 0000000000000001 x25/s9 1ffff1f0004ded24 x26/s10 ffffffff91886898 x27/s11 0000000000000036 x28/t3 ffffffff8203364a x29/t4 fffff1ef004ded04 x30/t5 fffff1ef004ded05 x31/t6 ffffffff916941f7 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8008b3e0 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f4b509 hedeleg 0000000000000000 mtvec 00000000800004f8 stvec ffffffff865c0ba0 vstvec 0000000000000000 mepc ffffffff8025204c sepc ffffffff8022db1a vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000001 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080047000 sscratch 0000000000000000 satp 9011f000000a1c61 x0/zero 0000000000000000 x1/ra ffffffff8008b3dc x2/sp ffff8f8000017e10 x3/gp ffffffff8a4c0280 x4/tp ffffaf801ace3500 x5/t0 ffff8f8000010000 x6/t1 fffffffef14ba920 x7/t2 ffffffff91898ba8 x8/s0 ffff8f8000017e40 x9/s1 ffffffff86a0cdc8 x10/a0 0000000000000001 x11/a1 0000000000000004 x12/a2 0000000000000001 x13/a3 ffffffff8008b3dc x14/a4 0000000000000000 x15/a5 ffffaf801ace3500 x16/a6 fffffffef14ba921 x17/a7 0000000000000003 x18/s2 0000000000000001 x19/s3 ffffffff86869000 x20/s4 ffffffff8008b126 x21/s5 ffffaf8012118800 x22/s6 0000000000000000 x23/s7 0000000000000001 x24/s8 0000000000000007 x25/s9 ffffffff91898ba8 x26/s10 ffffffff86a718e0 x27/s11 0000000000000004 x28/t3 ffffffff880c5bd0 x29/t4 fffffffef14ba920 x30/t5 fffffffef14ba921 x31/t6 ffffffff86880f80 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000