last executing test programs: 9.893628559s ago: executing program 0 (id=28): r0 = socket(0xa, 0x3, 0xff) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/32, 0x20}], 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000082c01fc020000000000000000000000000000ffff00"/62], 0x0) 8.984751174s ago: executing program 0 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) (fail_nth: 20) 8.983594726s ago: executing program 0 (id=45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0xc7, 0x2, 0xfffffffd, "cedc28fd4aae8c9ffe7b26bc0b415144bc915758e7200400f929039257a33a0919d414c419f105481e51641c42b588960c055cca6313b9cc8531cf71f2dfe7e318b9f7f5e437d4515f6eb26dd131857e016ac24c05f205746a6f8200942b909dc7926b8c377ce4c4f5f70b16fe87425e44551d1758f4b09d65fc3f0a177462d11c45ef8d848233d69263b8995a8d393335d3f50c8c89726fd93a105b7507bc2e630582ac6fb298e9f17efe8f91fba59f14c04dde3af11a4b313c16d9906a71687fcedb9955e9dc"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) mount$overlay(0x0, &(0x7f0000000180)='./bus/file0\x00', 0x0, 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x7b) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 8.884011341s ago: executing program 0 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000003000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 8.883583289s ago: executing program 0 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/kallsyms\x00', 0x800, 0x0) syz_clone(0x108002000, &(0x7f0000000000)="84753f8a775d5bb6d41c7f19d06b1119b789c61285cc3705bd06e033aae18e2138cadc745995207ea0c0c917d9cb572fed54f08dd284b4ff58dac68d35dbd336de77f5ca01cd918e0376be3bce26e2e53f65f6adc15b3fa9658087ed1280bb0b110b3b002c8ab094f5154fad519e05b08333b93ce7f6c8", 0x77, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="626b58e72b31d6761199d9fd6f7559d44f11113476e082568b36766238aed6614b87d60c66c346344ed119a05d23451d1b6b59c0811397655af9d109122f94136231d609af9ab55cdde6f15a2efcbbf96ecc7a5e605d06ee4b8083d137b888ed8e") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0xf, 0x1, 0x6}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29, 0x0, 0xa}, 0x20) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000002100), 0x2802050, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r1, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e00), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xf7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xb, 0x30449040, 0x40, 0x68, 0x6, 0x1000009, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x100, r7}, 0x0) close(r7) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) close(0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000300), &(0x7f0000000540)=0x4) dup2(r8, r8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r9, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r9, &(0x7f0000000180)={0x50, 0x0, r10, {0x7, 0x2b, 0xfffffffe, 0x30004506, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x604842, 0x4) 8.782489155s ago: executing program 0 (id=49): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) listns(&(0x7f0000000300)={0x20, 0x0, 0x5, 0x20000}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000340)={r1, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40086610, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x5, 0x6, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000200)={r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x234}}, 0x0) 7.814593848s ago: executing program 1 (id=56): r0 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) preadv(r1, &(0x7f0000001680)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf0", 0xe}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/13, 0xd}], 0x1}, 0x9}], 0x2, 0x40000142, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bda69efcdbdf438e51c70008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8880) 6.614786915s ago: executing program 1 (id=68): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x300, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 6.614595439s ago: executing program 1 (id=69): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x45) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="00012cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010012034e05080001000800000008000100080000000c000180080001"], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x8044) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x805}, 0x4040080) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x845) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000002c0)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r6], 0x24}}, 0x0) 6.473434178s ago: executing program 1 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x800, 0x0) close(r0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) chdir(&(0x7f0000000340)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000280)={0x1, 0x1, 0x9, 0x9, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0xc}, {0x0, 0xfff2}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, 0x0) read$FUSE(r1, &(0x7f00000009c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002a00)={0x50, 0xffffffffffffffda, r8, {0x7, 0x2d, 0x8eb0, 0xffffffff8910000a, 0x7fff, 0x1, 0x5, 0x8990, 0x0, 0x0, 0x1, 0x240}}, 0x50) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002ec0), 0x103500, 0x0) r10 = openat(r1, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f00000002c0)="f8c8555cf918f975afa0b764c428ef65b98abc9609b02088ff684c26ed2685b49b20b0c4bdfeb52732b65171cc77aa253718e04c97258173e48855668c3c8b9e5b0ad4f98212e35adc4acd5703e163c7b08f71110a900aefa3d7fd", 0x5b) ioctl$TIOCGPTPEER(r9, 0x5441, 0x8) 6.222535218s ago: executing program 1 (id=78): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x5}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'N\xb0\xdd\'\x0e\xdf\x14\t>\x9b\xccH\x00\xbf!\xd9\xc8\x96;r\xcc?//\xa5\xa6c\xc3\x05\xd1\x17\xea\x8b\x9b\xedNs\xb0\xe7\x13N\xc9g\x9f'}]}, 0x38) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r8, 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) write$char_usb(r7, &(0x7f0000000600)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 5.574511407s ago: executing program 1 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f5, 0x0, 0x10000003c04}]}) r5 = getpgid(0xffffffffffffffff) r6 = syz_open_procfs(r5, &(0x7f0000000000)='task\x00') getdents64(r6, &(0x7f0000000240)=""/44, 0x7a) getdents64(r6, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d0004001e"], 0x1c}}, 0x4) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000140)) 5.389556602s ago: executing program 32 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f5, 0x0, 0x10000003c04}]}) r5 = getpgid(0xffffffffffffffff) r6 = syz_open_procfs(r5, &(0x7f0000000000)='task\x00') getdents64(r6, &(0x7f0000000240)=""/44, 0x7a) getdents64(r6, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d0004001e"], 0x1c}}, 0x4) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000140)) 995.276068ms ago: executing program 3 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000000c0)="080211000700cbc2ed40000186dd", 0xe, 0x0, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random}, 0x14) 995.010276ms ago: executing program 3 (id=102): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t', 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 595.38065ms ago: executing program 2 (id=104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x13, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000108520000fec35030095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 595.247014ms ago: executing program 2 (id=105): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000004000000000100000300000028000000", @ANYRES32, @ANYBLOB="00008f2efcd45e00000000000000000000000000823e247dd1c9e4fbe240", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, [], {0x95, 0x0, 0x0, 0x3000000}}, &(0x7f0000000bc0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d00)=[{0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) 524.87059ms ago: executing program 2 (id=106): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x20, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x2a}, 0x28) (async) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000240)=""/240) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x800, 0x100}, 0x18) 104.966916ms ago: executing program 3 (id=107): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000001000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003d08f1ff00000000850000001a000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 104.758188ms ago: executing program 2 (id=108): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000002c0)={'pcl812\x00', [0x140, 0x3, 0x7, 0xffffffff, 0x1, 0xfffffc00, 0x8002, 0x2725d640, 0x8, 0xc72e, 0x9, 0xffffffff, 0x4, 0x400008, 0xfffffffe, 0x80000000, 0xff, 0xed, 0x2, 0x8, 0x4, 0x1fffffe, 0x80, 0x4000b, 0x954, 0x2, 0xaf, 0x581, 0x9, 0x80, 0x4]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0\x00'}) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12', 0x2, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) flistxattr(0xffffffffffffffff, &(0x7f0000000380)=""/250, 0xfa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) 104.635261ms ago: executing program 3 (id=109): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="852f51009e000000620a00ff000000006100d81800000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 102.713497ms ago: executing program 2 (id=110): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r3}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f0000000100), 0x0}, 0x20) 24.612385ms ago: executing program 3 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1e6) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x8, 0x1300, 0x9, 0x9, 0x4ea, 0xc}) 24.386165ms ago: executing program 2 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f0000000040)=@type=0x2) r2 = socket(0xa, 0x3, 0x3a) ioctl$CDROM_CHANGER_NSLOTS(r1, 0x5328) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0xf, 0x5d, 0x401, 0x3a, @local, @loopback, 0x0, 0x700, 0x9, 0xff}}) 23.640155ms ago: executing program 3 (id=113): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/uevent_helper', 0x20000, 0xf3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r4, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x24}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008084}, 0x4004001) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004041) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1fe) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x82041, 0x102) mprotect(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x2000004) write(r11, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r2, &(0x7f0000000500)=ANY=[], 0xfdef) 0s ago: executing program 4 (id=89): r0 = socket(0x10, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000120001030000000000000000020000000000000000fbffffff00"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff00000000140001000710100002200000ffffffff00000000"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:41533' (ED25519) to the list of known hosts. [ 40.865379][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.865396][ T43] audit: type=1400 audit(1791503218.313:138): avc: denied { name_bind } for pid=5711 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.894397][ T43] audit: type=1400 audit(1791503218.343:139): avc: denied { execute } for pid=5712 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.894679][ T43] audit: type=1400 audit(1791503218.343:140): avc: denied { execute_no_trans } for pid=5712 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.506714][ T43] audit: type=1400 audit(1791503220.963:141): avc: denied { mounton } for pid=5712 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.509059][ T43] audit: type=1400 audit(1791503220.963:142): avc: denied { mount } for pid=5712 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.510475][ T5712] cgroup: Unknown subsys name 'net' [ 43.511651][ T43] audit: type=1400 audit(1791503220.963:143): avc: denied { unmount } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.659191][ T5712] cgroup: Unknown subsys name 'cpuset' [ 43.662042][ T5712] cgroup: Unknown subsys name 'rlimit' [ 43.798057][ T43] audit: type=1400 audit(1791503221.253:144): avc: denied { setattr } for pid=5712 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.798505][ T43] audit: type=1400 audit(1791503221.253:145): avc: denied { create } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.798874][ T43] audit: type=1400 audit(1791503221.253:146): avc: denied { write } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.799095][ T43] audit: type=1400 audit(1791503221.253:147): avc: denied { read } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 43.869370][ T5717] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 44.766364][ T5712] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.856062][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 48.856075][ T43] audit: type=1400 audit(1791503226.303:154): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.104158][ T43] audit: type=1400 audit(1791503226.553:155): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.104539][ T43] audit: type=1400 audit(1791503226.553:156): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.104912][ T43] audit: type=1400 audit(1791503226.553:157): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.123868][ T43] audit: type=1400 audit(1791503226.573:158): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[6494]" dev="sockfs" ino=6494 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.165518][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.165521][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.166759][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.166878][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.171194][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.171844][ T5737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.172213][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.172712][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.172780][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.175799][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.176126][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.177456][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.178003][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.183482][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.183485][ T5739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.186365][ T43] audit: type=1400 audit(1791503226.643:159): avc: denied { read } for pid=5723 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.186685][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.188835][ T43] audit: type=1400 audit(1791503226.643:160): avc: denied { open } for pid=5723 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.189280][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.189639][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.190047][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.190969][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.191587][ T43] audit: type=1400 audit(1791503226.643:161): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.195761][ T43] audit: type=1400 audit(1791503226.653:162): avc: denied { module_request } for pid=5724 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.202133][ T43] audit: type=1400 audit(1791503226.653:163): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.706726][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.707205][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.707515][ T5723] bridge_slave_0: entered allmulticast mode [ 49.709105][ T5723] bridge_slave_0: entered promiscuous mode [ 49.731031][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.731140][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.731231][ T5723] bridge_slave_1: entered allmulticast mode [ 49.732559][ T5723] bridge_slave_1: entered promiscuous mode [ 49.774115][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.776688][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.843198][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.843273][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.843561][ T5724] bridge_slave_0: entered allmulticast mode [ 49.844828][ T5724] bridge_slave_0: entered promiscuous mode [ 49.847296][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.847371][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.847645][ T5724] bridge_slave_1: entered allmulticast mode [ 49.849435][ T5724] bridge_slave_1: entered promiscuous mode [ 49.858435][ T5723] team0: Port device team_slave_0 added [ 49.896266][ T5723] team0: Port device team_slave_1 added [ 49.930876][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.955434][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.956329][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.956345][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.956366][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.970323][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.970337][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.970358][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.017283][ T5724] team0: Port device team_slave_0 added [ 50.028905][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.028980][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.029074][ T5728] bridge_slave_0: entered allmulticast mode [ 50.030391][ T5728] bridge_slave_0: entered promiscuous mode [ 50.033366][ T5724] team0: Port device team_slave_1 added [ 50.054250][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.054354][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.054445][ T5728] bridge_slave_1: entered allmulticast mode [ 50.055939][ T5728] bridge_slave_1: entered promiscuous mode [ 50.057233][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.057244][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.057264][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.098035][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.098050][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.098070][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.103578][ T5723] hsr_slave_0: entered promiscuous mode [ 50.104377][ T5723] hsr_slave_1: entered promiscuous mode [ 50.113133][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.143731][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.218235][ T5724] hsr_slave_0: entered promiscuous mode [ 50.218967][ T5724] hsr_slave_1: entered promiscuous mode [ 50.219556][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 50.219633][ T5724] Cannot create hsr debugfs directory [ 50.259206][ T5728] team0: Port device team_slave_0 added [ 50.290967][ T5728] team0: Port device team_slave_1 added [ 50.291109][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.291232][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.291321][ T5725] bridge_slave_0: entered allmulticast mode [ 50.292818][ T5725] bridge_slave_0: entered promiscuous mode [ 50.343086][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.343168][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.343476][ T5725] bridge_slave_1: entered allmulticast mode [ 50.344860][ T5725] bridge_slave_1: entered promiscuous mode [ 50.377428][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.377444][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.377461][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.411671][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.411686][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.411706][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.433188][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.459028][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.538963][ T5728] hsr_slave_0: entered promiscuous mode [ 50.539723][ T5728] hsr_slave_1: entered promiscuous mode [ 50.540289][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 50.540305][ T5728] Cannot create hsr debugfs directory [ 50.542220][ T5725] team0: Port device team_slave_0 added [ 50.574583][ T5725] team0: Port device team_slave_1 added [ 50.603884][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.603900][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.603919][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.614583][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.614595][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.614619][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.719341][ T5725] hsr_slave_0: entered promiscuous mode [ 50.721080][ T5725] hsr_slave_1: entered promiscuous mode [ 50.721615][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 50.721631][ T5725] Cannot create hsr debugfs directory [ 50.734279][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.743632][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.764955][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.768902][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.791025][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.794745][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.813586][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.817229][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.915295][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.923143][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.934570][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.940181][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.940791][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.943310][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.954016][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.957640][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.007166][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.012324][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.017525][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.022274][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.022920][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.027619][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.037917][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.042069][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.104350][ T5725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.106759][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.108331][ T5725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.113181][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.113705][ T5725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.116361][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.123227][ T5725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.125089][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.158790][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.199629][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.203221][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.221186][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.221309][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.226995][ T67] Bluetooth: hci2: command tx timeout [ 51.229123][ T5734] Bluetooth: hci0: command tx timeout [ 51.229273][ T5734] Bluetooth: hci1: command tx timeout [ 51.229426][ T67] Bluetooth: hci3: command tx timeout [ 51.234540][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.234619][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.252374][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.260545][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.260678][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.268984][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.269027][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.287205][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.320032][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.323321][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.346144][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.346195][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.355186][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.359938][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.359992][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.372660][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.372910][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.380627][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.380701][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.634929][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.684100][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.685521][ T5723] veth0_vlan: entered promiscuous mode [ 51.690778][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.696964][ T5723] veth1_vlan: entered promiscuous mode [ 51.751089][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.756559][ T5725] veth0_vlan: entered promiscuous mode [ 51.760603][ T5724] veth0_vlan: entered promiscuous mode [ 51.766750][ T5723] veth0_macvtap: entered promiscuous mode [ 51.773981][ T5723] veth1_macvtap: entered promiscuous mode [ 51.776100][ T5724] veth1_vlan: entered promiscuous mode [ 51.776847][ T5725] veth1_vlan: entered promiscuous mode [ 51.796483][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.800184][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.829346][ T5728] veth0_vlan: entered promiscuous mode [ 51.843546][ T5725] veth0_macvtap: entered promiscuous mode [ 51.846468][ T5724] veth0_macvtap: entered promiscuous mode [ 51.847607][ T5728] veth1_vlan: entered promiscuous mode [ 51.849204][ T5725] veth1_macvtap: entered promiscuous mode [ 51.855136][ T5724] veth1_macvtap: entered promiscuous mode [ 51.882097][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.883125][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.893384][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.903059][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.918752][ T5728] veth0_macvtap: entered promiscuous mode [ 51.922765][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.922779][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.951564][ T5728] veth1_macvtap: entered promiscuous mode [ 51.996958][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.996975][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.017875][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.033707][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.036420][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.036435][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.064697][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.064713][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.076700][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.084368][ T5723] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.096008][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.096108][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.096139][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.117495][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.117519][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.146528][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.146760][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.153686][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.153703][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.169708][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.169827][ T5801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.169940][ T5801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.170240][ T5801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.170516][ T5801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.183493][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.183772][ T5801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.184760][ T5801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.185954][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.185966][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.187079][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.216800][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.216812][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.280336][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.323768][ T5882] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 52.411034][ T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 52.644292][ T5916] FAULT_INJECTION: forcing a failure. [ 52.644292][ T5916] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.644313][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 52.644325][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.644331][ T5916] Call Trace: [ 52.644335][ T5916] [ 52.644340][ T5916] dump_stack_lvl+0x100/0x190 [ 52.644360][ T5916] should_fail_ex.cold+0x5/0xa [ 52.644376][ T5916] _copy_from_user+0x2e/0xd0 [ 52.644392][ T5916] tipc_setsockopt+0x8ee/0xe30 [ 52.644404][ T5916] ? __pfx_tipc_setsockopt+0x10/0x10 [ 52.644416][ T5916] ? __fget_files+0x215/0x3d0 [ 52.644434][ T5916] ? selinux_socket_setsockopt+0x6a/0x80 [ 52.644448][ T5916] ? __pfx_tipc_setsockopt+0x10/0x10 [ 52.644459][ T5916] do_sock_setsockopt+0xf3/0x1d0 [ 52.644483][ T5916] __sys_setsockopt+0x195/0x220 [ 52.644503][ T5916] __x64_sys_setsockopt+0xbd/0x160 [ 52.644520][ T5916] ? do_syscall_64+0xae/0x790 [ 52.644534][ T5916] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.644550][ T5916] do_syscall_64+0x123/0x790 [ 52.644566][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.644578][ T5916] RIP: 0033:0x7fde8bf9e199 [ 52.644588][ T5916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.644599][ T5916] RSP: 002b:00007fde8a1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.644610][ T5916] RAX: ffffffffffffffda RBX: 00007fde8c225fa0 RCX: 00007fde8bf9e199 [ 52.644617][ T5916] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 52.644623][ T5916] RBP: 00007fde8c035888 R08: 000000000000001c R09: 0000000000000000 [ 52.644629][ T5916] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 52.644635][ T5916] R13: 00007fde8c226038 R14: 00007fde8c225fa0 R15: 00007ffffc611b08 [ 52.644668][ T5916] [ 52.677232][ T62] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 52.680468][ T5921] FAULT_INJECTION: forcing a failure. [ 52.680468][ T5921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.680486][ T5921] CPU: 0 UID: 0 PID: 5921 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 52.680498][ T5921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.680504][ T5921] Call Trace: [ 52.680508][ T5921] [ 52.680512][ T5921] dump_stack_lvl+0x100/0x190 [ 52.680531][ T5921] should_fail_ex.cold+0x5/0xa [ 52.680547][ T5921] _copy_from_user+0x2e/0xd0 [ 52.680563][ T5921] bpf_check_core_relo+0x331/0x600 [ 52.680578][ T5921] ? __pfx_bpf_check_core_relo+0x10/0x10 [ 52.680591][ T5921] ? trace_kmalloc+0xc0/0x110 [ 52.680610][ T5921] ? bpf_check+0x1d2b/0xac70 [ 52.680628][ T5921] bpf_check+0x1f5d/0xac70 [ 52.680644][ T5921] ? __css_rstat_updated+0x1ce/0x590 [ 52.680659][ T5921] ? __lock_acquire+0x5c0/0x1f40 [ 52.680671][ T5921] ? __pfx___css_rstat_updated+0x10/0x10 [ 52.680694][ T5921] ? __pfx_bpf_check+0x10/0x10 [ 52.680710][ T5921] ? lock_acquire+0x1d1/0x380 [ 52.680722][ T5921] ? bpf_prog_load+0x1a27/0x2ab0 [ 52.680737][ T5921] ? find_held_lock+0x2b/0x80 [ 52.680753][ T5921] ? bpf_prog_load+0x1a27/0x2ab0 [ 52.680770][ T5921] ? __asan_memset+0x23/0x50 [ 52.680785][ T5921] ? bpf_prog_load+0x1ae1/0x2ab0 [ 52.680800][ T5921] bpf_prog_load+0x1ae1/0x2ab0 [ 52.680819][ T5921] ? __pfx_bpf_prog_load+0x10/0x10 [ 52.680845][ T5921] __sys_bpf+0x1f46/0x4a30 [ 52.680860][ T5921] ? __pfx___sys_bpf+0x10/0x10 [ 52.680872][ T5921] ? find_held_lock+0x2b/0x80 [ 52.680887][ T5921] ? get_pid_task+0xfc/0x250 [ 52.680902][ T5921] ? get_pid_task+0xfc/0x250 [ 52.680920][ T5921] ? find_held_lock+0x2b/0x80 [ 52.680939][ T5921] ? rcu_read_lock_any_held+0x6a/0x90 [ 52.680956][ T5921] ? find_held_lock+0x2b/0x80 [ 52.680971][ T5921] ? ksys_write+0x190/0x250 [ 52.680984][ T5921] ? ksys_write+0x190/0x250 [ 52.680997][ T5921] ? lock_acquire+0x1d1/0x380 [ 52.681017][ T5921] ? fput+0x7c/0x100 [ 52.681033][ T5921] ? ksys_write+0x1ac/0x250 [ 52.681047][ T5921] ? __x64_sys_bpf+0xce/0x140 [ 52.681058][ T5921] __x64_sys_bpf+0xce/0x140 [ 52.681070][ T5921] ? do_syscall_64+0xae/0x790 [ 52.681085][ T5921] do_syscall_64+0x123/0x790 [ 52.681101][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.681112][ T5921] RIP: 0033:0x7fde8bf9e199 [ 52.681122][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.681132][ T5921] RSP: 002b:00007fde8a1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.681142][ T5921] RAX: ffffffffffffffda RBX: 00007fde8c225fa0 RCX: 00007fde8bf9e199 [ 52.681149][ T5921] RDX: 0000000000000094 RSI: 0000200000000d40 RDI: 0000000000000005 [ 52.681155][ T5921] RBP: 00007fde8a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.681161][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.681167][ T5921] R13: 00007fde8c226038 R14: 00007fde8c225fa0 R15: 00007ffffc611b08 [ 52.681180][ T5921] [ 52.700621][ T5915] Zero length message leads to an empty skb [ 52.716640][ T5928] FAULT_INJECTION: forcing a failure. [ 52.716640][ T5928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.716658][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 52.716670][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.716676][ T5928] Call Trace: [ 52.716679][ T5928] [ 52.716684][ T5928] dump_stack_lvl+0x100/0x190 [ 52.716704][ T5928] should_fail_ex.cold+0x5/0xa [ 52.716720][ T5928] _copy_to_user+0x32/0xd0 [ 52.716739][ T5928] simple_read_from_buffer+0xcb/0x170 [ 52.716757][ T5928] proc_fail_nth_read+0x1af/0x230 [ 52.716773][ T5928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.716790][ T5928] ? rw_verify_area+0xce/0x6d0 [ 52.716801][ T5928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.716816][ T5928] vfs_read+0x1e4/0xb40 [ 52.716829][ T5928] ? lock_acquire+0x1d1/0x380 [ 52.716841][ T5928] ? __fget_files+0x34/0x3d0 [ 52.716856][ T5928] ? __pfx_vfs_read+0x10/0x10 [ 52.716868][ T5928] ? find_held_lock+0x2b/0x80 [ 52.716885][ T5928] ? __fget_files+0x215/0x3d0 [ 52.716902][ T5928] ? __fget_files+0x21f/0x3d0 [ 52.716921][ T5928] ksys_read+0x12a/0x250 [ 52.716933][ T5928] ? __pfx_ksys_read+0x10/0x10 [ 52.716950][ T5928] do_syscall_64+0x123/0x790 [ 52.716966][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.716977][ T5928] RIP: 0033:0x7fde8bf5e9ce [ 52.716986][ T5928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.716996][ T5928] RSP: 002b:00007fde8a1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.717006][ T5928] RAX: ffffffffffffffda RBX: 00007fde8a1f66c0 RCX: 00007fde8bf5e9ce [ 52.717013][ T5928] RDX: 000000000000000f RSI: 00007fde8a1f60a0 RDI: 0000000000000004 [ 52.717019][ T5928] RBP: 00007fde8a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.717025][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.717031][ T5928] R13: 00007fde8c226038 R14: 00007fde8c225fa0 R15: 00007ffffc611b08 [ 52.717045][ T5928] [ 53.197088][ T5824] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 53.224753][ T5888] ceph: No mds server is up or the cluster is laggy [ 53.295053][ T5944] FAULT_INJECTION: forcing a failure. [ 53.295053][ T5944] name failslab, interval 1, probability 0, space 0, times 1 [ 53.295084][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 53.295104][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.295114][ T5944] Call Trace: [ 53.295120][ T5944] [ 53.295128][ T5944] dump_stack_lvl+0x100/0x190 [ 53.295157][ T5944] should_fail_ex.cold+0x5/0xa [ 53.295183][ T5944] should_failslab+0xc2/0x120 [ 53.295210][ T5944] __kmalloc_node_noprof+0xff/0x880 [ 53.295233][ T5944] ? __get_vm_area_node+0x1ff/0x350 [ 53.295257][ T5944] ? __get_vm_area_node+0x22b/0x350 [ 53.295281][ T5944] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 53.295312][ T5944] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 53.295349][ T5944] ? bpf_check+0x1996/0xac70 [ 53.295380][ T5944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 53.295413][ T5944] ? avc_has_perm_noaudit+0x145/0x470 [ 53.295477][ T5944] ? bpf_check+0x1996/0xac70 [ 53.295503][ T5944] __vmalloc_node_noprof+0xad/0xf0 [ 53.295530][ T5944] ? bpf_check+0x1996/0xac70 [ 53.295573][ T5944] __vmalloc_noprof+0xa3/0x120 [ 53.295600][ T5944] ? __pfx___vmalloc_noprof+0x10/0x10 [ 53.295636][ T5944] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 53.295653][ T5944] ? security_bpf_prog_load+0x10f/0x2f0 [ 53.295680][ T5944] bpf_check+0x1996/0xac70 [ 53.295705][ T5944] ? __css_rstat_updated+0x1ce/0x590 [ 53.295744][ T5944] ? __lock_acquire+0x5c0/0x1f40 [ 53.295766][ T5944] ? __pfx___css_rstat_updated+0x10/0x10 [ 53.295801][ T5944] ? find_held_lock+0x2b/0x80 [ 53.295831][ T5944] ? __pfx_bpf_check+0x10/0x10 [ 53.295857][ T5944] ? lock_acquire+0x1d1/0x380 [ 53.295876][ T5944] ? bpf_prog_load+0x1a27/0x2ab0 [ 53.295902][ T5944] ? find_held_lock+0x2b/0x80 [ 53.295928][ T5944] ? bpf_prog_load+0x1a27/0x2ab0 [ 53.295958][ T5944] ? __asan_memset+0x23/0x50 [ 53.295983][ T5944] ? bpf_prog_load+0x1ae1/0x2ab0 [ 53.296008][ T5944] bpf_prog_load+0x1ae1/0x2ab0 [ 53.296039][ T5944] ? __pfx_bpf_prog_load+0x10/0x10 [ 53.296086][ T5944] __sys_bpf+0x1f46/0x4a30 [ 53.296112][ T5944] ? __pfx___sys_bpf+0x10/0x10 [ 53.296131][ T5944] ? find_held_lock+0x2b/0x80 [ 53.296157][ T5944] ? get_pid_task+0xfc/0x250 [ 53.296179][ T5944] ? get_pid_task+0xfc/0x250 [ 53.296210][ T5944] ? find_held_lock+0x2b/0x80 [ 53.296242][ T5944] ? rcu_read_lock_any_held+0x6a/0x90 [ 53.296270][ T5944] ? find_held_lock+0x2b/0x80 [ 53.296295][ T5944] ? ksys_write+0x190/0x250 [ 53.296317][ T5944] ? ksys_write+0x190/0x250 [ 53.296338][ T5944] ? lock_acquire+0x1d1/0x380 [ 53.296375][ T5944] ? fput+0x7c/0x100 [ 53.296401][ T5944] ? ksys_write+0x1ac/0x250 [ 53.296425][ T5944] ? __x64_sys_bpf+0xce/0x140 [ 53.296444][ T5944] __x64_sys_bpf+0xce/0x140 [ 53.296465][ T5944] ? do_syscall_64+0xae/0x790 [ 53.296491][ T5944] do_syscall_64+0x123/0x790 [ 53.296517][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.296536][ T5944] RIP: 0033:0x7fe15b39e199 [ 53.296551][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.296568][ T5944] RSP: 002b:00007fe15c345028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.296585][ T5944] RAX: ffffffffffffffda RBX: 00007fe15b625fa0 RCX: 00007fe15b39e199 [ 53.296597][ T5944] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 53.296608][ T5944] RBP: 00007fe15c345090 R08: 0000000000000000 R09: 0000000000000000 [ 53.296624][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.296634][ T5944] R13: 00007fe15b626038 R14: 00007fe15b625fa0 R15: 00007fff68a07438 [ 53.296658][ T5944] [ 53.296942][ T5944] syz.1.23: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 53.297051][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 53.297090][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.297101][ T5944] Call Trace: [ 53.297107][ T5944] [ 53.297113][ T5944] dump_stack_lvl+0x100/0x190 [ 53.297142][ T5944] warn_alloc.cold+0x9e/0xb2 [ 53.297163][ T5944] ? __pfx_warn_alloc+0x10/0x10 [ 53.297182][ T5944] ? dump_stack_lvl+0x17c/0x190 [ 53.297208][ T5944] ? rcu_is_watching+0x13/0xc0 [ 53.297235][ T5944] ? __kasan_kmalloc+0x8a/0xb0 [ 53.297259][ T5944] ? __kmalloc_node_noprof+0x360/0x880 [ 53.297281][ T5944] ? __get_vm_area_node+0x1ff/0x350 [ 53.297304][ T5944] ? __get_vm_area_node+0x22b/0x350 [ 53.297327][ T5944] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 53.297359][ T5944] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 53.297395][ T5944] ? bpf_check+0x1996/0xac70 [ 53.297425][ T5944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 53.297452][ T5944] ? avc_has_perm_noaudit+0x145/0x470 [ 53.297469][ T5944] ? bpf_check+0x1996/0xac70 [ 53.297489][ T5944] __vmalloc_node_noprof+0xad/0xf0 [ 53.297513][ T5944] ? bpf_check+0x1996/0xac70 [ 53.297535][ T5944] __vmalloc_noprof+0xa3/0x120 [ 53.297556][ T5944] ? __pfx___vmalloc_noprof+0x10/0x10 [ 53.297582][ T5944] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 53.297597][ T5944] ? security_bpf_prog_load+0x10f/0x2f0 [ 53.297626][ T5944] bpf_check+0x1996/0xac70 [ 53.297650][ T5944] ? __css_rstat_updated+0x1ce/0x590 [ 53.297670][ T5944] ? __lock_acquire+0x5c0/0x1f40 [ 53.297689][ T5944] ? __pfx___css_rstat_updated+0x10/0x10 [ 53.297719][ T5944] ? find_held_lock+0x2b/0x80 [ 53.297745][ T5944] ? __pfx_bpf_check+0x10/0x10 [ 53.297768][ T5944] ? lock_acquire+0x1d1/0x380 [ 53.297784][ T5944] ? bpf_prog_load+0x1a27/0x2ab0 [ 53.297807][ T5944] ? find_held_lock+0x2b/0x80 [ 53.297831][ T5944] ? bpf_prog_load+0x1a27/0x2ab0 [ 53.297858][ T5944] ? __asan_memset+0x23/0x50 [ 53.297882][ T5944] ? bpf_prog_load+0x1ae1/0x2ab0 [ 53.297906][ T5944] bpf_prog_load+0x1ae1/0x2ab0 [ 53.297937][ T5944] ? __pfx_bpf_prog_load+0x10/0x10 [ 53.297983][ T5944] __sys_bpf+0x1f46/0x4a30 [ 53.298008][ T5944] ? __pfx___sys_bpf+0x10/0x10 [ 53.298027][ T5944] ? find_held_lock+0x2b/0x80 [ 53.298052][ T5944] ? get_pid_task+0xfc/0x250 [ 53.298076][ T5944] ? get_pid_task+0xfc/0x250 [ 53.298106][ T5944] ? find_held_lock+0x2b/0x80 [ 53.298137][ T5944] ? rcu_read_lock_any_held+0x6a/0x90 [ 53.298163][ T5944] ? find_held_lock+0x2b/0x80 [ 53.298188][ T5944] ? ksys_write+0x190/0x250 [ 53.298211][ T5944] ? ksys_write+0x190/0x250 [ 53.298230][ T5944] ? lock_acquire+0x1d1/0x380 [ 53.298266][ T5944] ? fput+0x7c/0x100 [ 53.298291][ T5944] ? ksys_write+0x1ac/0x250 [ 53.298315][ T5944] ? __x64_sys_bpf+0xce/0x140 [ 53.298333][ T5944] __x64_sys_bpf+0xce/0x140 [ 53.298354][ T5944] ? do_syscall_64+0xae/0x790 [ 53.298378][ T5944] do_syscall_64+0x123/0x790 [ 53.298403][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.298420][ T5944] RIP: 0033:0x7fe15b39e199 [ 53.298433][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.298450][ T5944] RSP: 002b:00007fe15c345028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.298466][ T5944] RAX: ffffffffffffffda RBX: 00007fe15b625fa0 RCX: 00007fe15b39e199 [ 53.298477][ T5944] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 53.298487][ T5944] RBP: 00007fe15c345090 R08: 0000000000000000 R09: 0000000000000000 [ 53.298498][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.298508][ T5944] R13: 00007fe15b626038 R14: 00007fe15b625fa0 R15: 00007fff68a07438 [ 53.298533][ T5944] [ 53.298580][ T5944] Mem-Info: [ 53.298589][ T5944] active_anon:7238 inactive_anon:0 isolated_anon:0 [ 53.298589][ T5944] active_file:0 inactive_file:55049 isolated_file:0 [ 53.298589][ T5944] unevictable:1000 dirty:1783 writeback:0 [ 53.298589][ T5944] slab_reclaimable:11582 slab_unreclaimable:65063 [ 53.298589][ T5944] mapped:24157 shmem:1554 pagetables:1072 [ 53.298589][ T5944] sec_pagetables:292 bounce:0 [ 53.298589][ T5944] kernel_misc_reclaimable:0 [ 53.298589][ T5944] free:453489 free_pcp:19790 free_cma:0 [ 53.298634][ T5944] Node 0 active_anon:28952kB inactive_anon:0kB active_file:0kB inactive_file:220000kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96628kB dirty:7104kB writeback:0kB shmem:4216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13088kB pagetables:4068kB sec_pagetables:1168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 53.298677][ T5944] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:28kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 53.298717][ T5944] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 53.298764][ T5944] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 53.298794][ T5944] Node 0 DMA32 free:151440kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28952kB inactive_anon:0kB active_file:0kB inactive_file:220000kB unevictable:2000kB writepending:7104kB zspages:0kB present:2080628kB managed:1233708kB mlocked:0kB bounce:0kB free_pcp:74816kB local_pcp:12276kB free_cma:0kB [ 53.298842][ T5944] lowmem_reserve[]: 0 0 0 0 0 [ 53.298871][ T5944] Node 1 Normal free:1647156kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB writepending:28kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:4344kB local_pcp:408kB free_cma:0kB [ 53.298918][ T5944] lowmem_reserve[]: 0 0 0 0 0 [ 53.298947][ T5944] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 53.299047][ T5944] Node 0 DMA32: 1*4kB (E) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (ME) 1*256kB (U) 0*512kB 3*1024kB (UME) 2*2048kB (ME) 35*4096kB (M) = 151276kB [ 53.299175][ T5944] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 4*32kB (UM) 2*64kB (M) 4*128kB (UM) 1*256kB (U) 5*512kB (UM) 1*1024kB (U) 4*2048kB (UM) 399*4096kB (M) = 1647156kB [ 53.299308][ T5944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 53.299322][ T5944] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 53.299335][ T5944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 53.299347][ T5944] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 53.299360][ T5944] 56600 total pagecache pages [ 53.299366][ T5944] 0 pages in swap cache [ 53.299372][ T5944] Free swap = 124996kB [ 53.299378][ T5944] Total swap = 124996kB [ 53.299384][ T5944] 1048443 pages RAM [ 53.299390][ T5944] 0 pages HighMem/MovableOnly [ 53.299396][ T5944] 290706 pages reserved [ 53.299401][ T5944] 0 pages cma reserved [ 53.306649][ T5733] Bluetooth: hci1: command tx timeout [ 53.306674][ T5733] Bluetooth: hci0: command tx timeout [ 53.306693][ T5733] Bluetooth: hci2: command tx timeout [ 53.306826][ T67] Bluetooth: hci3: command tx timeout [ 53.393058][ T5948] batadv_slave_1: entered promiscuous mode [ 53.411370][ T5950] ip_tables: iptables: counters copy to user failed while replacing table [ 53.480596][ T5947] batadv_slave_1: left promiscuous mode [ 53.695404][ T5833] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 53.872141][ T5972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.33'. [ 53.934456][ T5976] netlink: 'syz.2.35': attribute type 1 has an invalid length. [ 53.934473][ T5976] netlink: 96 bytes leftover after parsing attributes in process `syz.2.35'. [ 53.956923][ T43] kauditd_printk_skb: 99 callbacks suppressed [ 53.956934][ T43] audit: type=1400 audit(1791503231.413:263): avc: denied { create } for pid=5977 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.957229][ T43] audit: type=1400 audit(1791503231.413:264): avc: denied { create } for pid=5977 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.957441][ T43] audit: type=1400 audit(1791503231.413:265): avc: denied { bind } for pid=5977 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.957462][ T43] audit: type=1400 audit(1791503231.413:266): avc: denied { bind } for pid=5977 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.966834][ T5833] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 53.982139][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'. [ 54.054862][ T5981] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET) [ 54.088618][ T5984] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 54.127936][ T43] audit: type=1400 audit(1791503231.583:267): avc: denied { create } for pid=5986 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.128910][ T43] audit: type=1400 audit(1791503231.583:268): avc: denied { connect } for pid=5986 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.129137][ T43] audit: type=1400 audit(1791503231.583:269): avc: denied { setopt } for pid=5986 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.129473][ T43] audit: type=1400 audit(1791503231.583:270): avc: denied { bind } for pid=5986 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.130932][ T43] audit: type=1400 audit(1791503231.583:271): avc: denied { write } for pid=5986 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.133026][ T43] audit: type=1400 audit(1791503231.583:272): avc: denied { map } for pid=5986 comm="syz.2.39" path="socket:[10433]" dev="sockfs" ino=10433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.141064][ T5989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5989 comm=syz.3.38 [ 54.336542][ T6008] SQUASHFS error: Failed to read block 0x0: -5 [ 54.336568][ T6008] unable to read squashfs_super_block [ 54.365482][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 54.365919][ T6011] FAULT_INJECTION: forcing a failure. [ 54.365919][ T6011] name failslab, interval 1, probability 0, space 0, times 0 [ 54.365943][ T6011] CPU: 2 UID: 0 PID: 6011 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(full) [ 54.365963][ T6011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.365973][ T6011] Call Trace: [ 54.365980][ T6011] [ 54.365987][ T6011] dump_stack_lvl+0x100/0x190 [ 54.366019][ T6011] should_fail_ex.cold+0x5/0xa [ 54.366044][ T6011] should_failslab+0xc2/0x120 [ 54.366072][ T6011] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 54.366096][ T6011] ? kernel_text_address+0x8d/0x100 [ 54.366114][ T6011] ? kstrdup_const+0x63/0x80 [ 54.366138][ T6011] kstrdup+0x51/0xe0 [ 54.366157][ T6011] kstrdup_const+0x63/0x80 [ 54.366176][ T6011] __kernfs_new_node+0x9b/0xa10 [ 54.366194][ T6011] ? mark_held_locks+0x40/0x70 [ 54.366214][ T6011] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.366239][ T6011] ? __pfx___kernfs_new_node+0x10/0x10 [ 54.366260][ T6011] ? lock_acquire+0x1d1/0x380 [ 54.366279][ T6011] ? kernfs_root+0x23/0x2a0 [ 54.366296][ T6011] ? find_held_lock+0x2b/0x80 [ 54.366321][ T6011] ? kernfs_root+0xee/0x2a0 [ 54.366336][ T6011] ? kernfs_root+0xee/0x2a0 [ 54.366358][ T6011] kernfs_create_dir_ns+0xa6/0x2b0 [ 54.366383][ T6011] sysfs_create_dir_ns+0x13a/0x2b0 [ 54.366410][ T6011] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 54.366435][ T6011] ? find_held_lock+0x2b/0x80 [ 54.366461][ T6011] ? kobject_add_internal+0x25f/0x930 [ 54.366478][ T6011] ? kobject_add_internal+0x25f/0x930 [ 54.366498][ T6011] ? class_dir_child_ns_type+0xd/0x60 [ 54.366519][ T6011] kobject_add_internal+0x2c8/0x930 [ 54.366542][ T6011] kobject_add+0x16a/0x1e0 [ 54.366560][ T6011] ? __pfx_kobject_add+0x10/0x10 [ 54.366579][ T6011] ? get_device_parent+0x1b3/0x4c0 [ 54.366611][ T6011] ? kobject_put+0xb9/0x640 [ 54.366645][ T6011] device_add+0x294/0x1970 [ 54.366666][ T6011] ? __pfx_device_add+0x10/0x10 [ 54.366685][ T6011] ? kfree_const+0x5a/0x70 [ 54.366703][ T6011] ? kfree+0x1e5/0x6d0 [ 54.366729][ T6011] device_create_groups_vargs+0x1f8/0x270 [ 54.366752][ T6011] device_create+0xed/0x130 [ 54.366771][ T6011] ? __pfx_device_create+0x10/0x10 [ 54.366788][ T6011] ? lockdep_init_map_type+0x5c/0x250 [ 54.366809][ T6011] ? timer_init_key+0x150/0x310 [ 54.366834][ T6011] ? ieee80211_roc_setup+0x136/0x270 [ 54.366854][ T6011] ? ieee80211_alloc_hw_nm+0x1a2a/0x2310 [ 54.366882][ T6011] mac80211_hwsim_new_radio+0x37c/0x6510 [ 54.366902][ T6011] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.366932][ T6011] ? rcu_is_watching+0x13/0xc0 [ 54.366957][ T6011] ? do_trace_netlink_extack+0x72/0x1e0 [ 54.366979][ T6011] ? __nla_validate_parse+0x1e7/0x28b0 [ 54.367001][ T6011] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 54.367028][ T6011] hwsim_new_radio_nl+0xc6b/0x13f0 [ 54.367046][ T6011] ? trace_kmalloc+0xeb/0x110 [ 54.367072][ T6011] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 54.367097][ T6011] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 54.367116][ T6011] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 54.367140][ T6011] genl_family_rcv_msg_doit+0x214/0x300 [ 54.367161][ T6011] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 54.367187][ T6011] ? bpf_lsm_capable+0x9/0x10 [ 54.367220][ T6011] ? security_capable+0x80/0x260 [ 54.367244][ T6011] ? ns_capable+0xd2/0xf0 [ 54.367263][ T6011] genl_rcv_msg+0x560/0x800 [ 54.367285][ T6011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 54.367302][ T6011] ? __lock_acquire+0x5c0/0x1f40 [ 54.367321][ T6011] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 54.367347][ T6011] netlink_rcv_skb+0x159/0x420 [ 54.367371][ T6011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 54.367389][ T6011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 54.367425][ T6011] ? netlink_deliver_tap+0x1ae/0xcc0 [ 54.367478][ T6011] genl_rcv+0x28/0x40 [ 54.367503][ T6011] netlink_unicast+0x585/0x850 [ 54.367533][ T6011] ? __pfx_netlink_unicast+0x10/0x10 [ 54.367566][ T6011] netlink_sendmsg+0x8b0/0xda0 [ 54.367598][ T6011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.367630][ T6011] ? selinux_socket_sendmsg+0x198/0x2f0 [ 54.367659][ T6011] ____sys_sendmsg+0xa4d/0xbe0 [ 54.367680][ T6011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.367709][ T6011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.367736][ T6011] ? lock_acquire+0x1d1/0x380 [ 54.367755][ T6011] ? get_pid_task+0x2a/0x250 [ 54.367783][ T6011] ___sys_sendmsg+0x190/0x1e0 [ 54.367807][ T6011] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.367830][ T6011] ? get_pid_task+0x106/0x250 [ 54.367864][ T6011] ? find_held_lock+0x2b/0x80 [ 54.367908][ T6011] __sys_sendmsg+0x160/0x210 [ 54.367937][ T6011] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.367979][ T6011] do_syscall_64+0x123/0x790 [ 54.368006][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.368025][ T6011] RIP: 0033:0x7fde8bf9e199 [ 54.368039][ T6011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.368055][ T6011] RSP: 002b:00007fde8a1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.368071][ T6011] RAX: ffffffffffffffda RBX: 00007fde8c225fa0 RCX: 00007fde8bf9e199 [ 54.368081][ T6011] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 54.368091][ T6011] RBP: 00007fde8a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 54.368100][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.368109][ T6011] R13: 00007fde8c226038 R14: 00007fde8c225fa0 R15: 00007ffffc611b08 [ 54.368133][ T6011] [ 54.368179][ T6011] kobject: kobject_add_internal failed for hwsim10 (error: -12 parent: mac80211_hwsim) [ 54.420925][ T6014] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 54.420966][ T6014] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 54.476156][ T5833] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 54.477233][ T5959] ceph: No mds server is up or the cluster is laggy [ 55.011173][ T6042] EXT4-fs warning (device sda1): verify_group_input:166: Cannot read last block (263401) [ 55.385894][ T5734] Bluetooth: hci2: command tx timeout [ 55.385930][ T5734] Bluetooth: hci0: command tx timeout [ 55.385950][ T5734] Bluetooth: hci1: command tx timeout [ 55.386083][ T67] Bluetooth: hci3: command tx timeout [ 55.525175][ T6048] FAULT_INJECTION: forcing a failure. [ 55.525175][ T6048] name failslab, interval 1, probability 0, space 0, times 0 [ 55.525196][ T6048] CPU: 3 UID: 0 PID: 6048 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT(full) [ 55.525209][ T6048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.525215][ T6048] Call Trace: [ 55.525218][ T6048] [ 55.525223][ T6048] dump_stack_lvl+0x100/0x190 [ 55.525242][ T6048] should_fail_ex.cold+0x5/0xa [ 55.525258][ T6048] should_failslab+0xc2/0x120 [ 55.525274][ T6048] __kmalloc_cache_noprof+0x91/0x6d0 [ 55.525286][ T6048] ? bpf_core_apply+0x14b/0xd50 [ 55.525301][ T6048] bpf_core_apply+0x14b/0xd50 [ 55.525313][ T6048] ? lock_acquire+0x1d1/0x380 [ 55.525325][ T6048] ? __fget_files+0x34/0x3d0 [ 55.525342][ T6048] ? lock_acquire+0x1d1/0x380 [ 55.525354][ T6048] ? __pfx_bpf_core_apply+0x10/0x10 [ 55.525366][ T6048] ? find_held_lock+0x2b/0x80 [ 55.525382][ T6048] ? __might_fault+0xc5/0x140 [ 55.525416][ T6048] bpf_check_core_relo+0x3d8/0x600 [ 55.525435][ T6048] ? __pfx_bpf_check_core_relo+0x10/0x10 [ 55.525447][ T6048] ? trace_kmalloc+0xc0/0x110 [ 55.525466][ T6048] ? bpf_check+0x1d2b/0xac70 [ 55.525484][ T6048] bpf_check+0x1f5d/0xac70 [ 55.525500][ T6048] ? __css_rstat_updated+0x1ce/0x590 [ 55.525514][ T6048] ? __lock_acquire+0x5c0/0x1f40 [ 55.525527][ T6048] ? __pfx___css_rstat_updated+0x10/0x10 [ 55.525555][ T6048] ? __pfx_bpf_check+0x10/0x10 [ 55.525570][ T6048] ? lock_acquire+0x1d1/0x380 [ 55.525582][ T6048] ? bpf_prog_load+0x1a27/0x2ab0 [ 55.525598][ T6048] ? find_held_lock+0x2b/0x80 [ 55.525614][ T6048] ? bpf_prog_load+0x1a27/0x2ab0 [ 55.525632][ T6048] ? __asan_memset+0x23/0x50 [ 55.525646][ T6048] ? bpf_prog_load+0x1ae1/0x2ab0 [ 55.525662][ T6048] bpf_prog_load+0x1ae1/0x2ab0 [ 55.525681][ T6048] ? __pfx_bpf_prog_load+0x10/0x10 [ 55.525708][ T6048] __sys_bpf+0x1f46/0x4a30 [ 55.525724][ T6048] ? __pfx___sys_bpf+0x10/0x10 [ 55.525735][ T6048] ? find_held_lock+0x2b/0x80 [ 55.525751][ T6048] ? get_pid_task+0xfc/0x250 [ 55.525765][ T6048] ? get_pid_task+0xfc/0x250 [ 55.525784][ T6048] ? find_held_lock+0x2b/0x80 [ 55.525803][ T6048] ? rcu_read_lock_any_held+0x6a/0x90 [ 55.525821][ T6048] ? find_held_lock+0x2b/0x80 [ 55.525836][ T6048] ? ksys_write+0x190/0x250 [ 55.525849][ T6048] ? ksys_write+0x190/0x250 [ 55.525861][ T6048] ? lock_acquire+0x1d1/0x380 [ 55.525883][ T6048] ? fput+0x7c/0x100 [ 55.525899][ T6048] ? ksys_write+0x1ac/0x250 [ 55.525913][ T6048] ? __x64_sys_bpf+0xce/0x140 [ 55.525925][ T6048] __x64_sys_bpf+0xce/0x140 [ 55.525937][ T6048] ? do_syscall_64+0xae/0x790 [ 55.525953][ T6048] do_syscall_64+0x123/0x790 [ 55.525969][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.525980][ T6048] RIP: 0033:0x7fe15b39e199 [ 55.525989][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.525999][ T6048] RSP: 002b:00007fe15c345028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.526010][ T6048] RAX: ffffffffffffffda RBX: 00007fe15b625fa0 RCX: 00007fe15b39e199 [ 55.526017][ T6048] RDX: 0000000000000094 RSI: 0000200000000d40 RDI: 0000000000000005 [ 55.526023][ T6048] RBP: 00007fe15c345090 R08: 0000000000000000 R09: 0000000000000000 [ 55.526029][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.526035][ T6048] R13: 00007fe15b626038 R14: 00007fe15b625fa0 R15: 00007fff68a07438 [ 55.526049][ T6048] [ 55.795672][ T35] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 55.947889][ T35] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 55.949495][ T35] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 55.949514][ T35] usb 6-1: config 0 has no interface number 0 [ 55.949541][ T35] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 55.949566][ T35] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 55.949593][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.952382][ T35] usb 6-1: config 0 descriptor?? [ 55.956191][ T6050] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 55.979678][ T35] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 55.984741][ T6062] FAULT_INJECTION: forcing a failure. [ 55.984741][ T6062] name fail_futex, interval 1, probability 0, space 0, times 1 [ 55.984765][ T6062] CPU: 3 UID: 0 PID: 6062 Comm: syz.2.61 Not tainted syzkaller #0 PREEMPT(full) [ 55.984783][ T6062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.984793][ T6062] Call Trace: [ 55.984798][ T6062] [ 55.984805][ T6062] dump_stack_lvl+0x100/0x190 [ 55.984838][ T6062] should_fail_ex.cold+0x5/0xa [ 55.984861][ T6062] get_futex_key+0x1d0/0x14f0 [ 55.984887][ T6062] ? __pfx_get_futex_key+0x10/0x10 [ 55.984915][ T6062] futex_wait_setup+0x91/0x540 [ 55.984939][ T6062] __futex_wait+0x19f/0x300 [ 55.984958][ T6062] ? __pfx___futex_wait+0x10/0x10 [ 55.984973][ T6062] ? __pfx_try_to_wake_up+0x10/0x10 [ 55.984990][ T6062] ? futex_hash+0x311/0x400 [ 55.985016][ T6062] ? __pfx_futex_wake_mark+0x10/0x10 [ 55.985038][ T6062] ? find_held_lock+0x2b/0x80 [ 55.985062][ T6062] ? futex_wake+0x4ea/0x5e0 [ 55.985085][ T6062] futex_wait+0xe6/0x370 [ 55.985102][ T6062] ? __pfx_futex_wait+0x10/0x10 [ 55.985124][ T6062] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 55.985148][ T6062] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 55.985175][ T6062] do_futex+0x265/0x440 [ 55.985198][ T6062] ? __pfx_do_futex+0x10/0x10 [ 55.985221][ T6062] ? rcu_is_watching+0x13/0xc0 [ 55.985243][ T6062] ? do_sock_setsockopt+0x101/0x1d0 [ 55.985260][ T6062] ? kfree+0x1e5/0x6d0 [ 55.985275][ T6062] ? selinux_socket_setsockopt+0x6a/0x80 [ 55.985299][ T6062] __x64_sys_futex+0x34f/0x4d0 [ 55.985324][ T6062] ? __pfx___x64_sys_futex+0x10/0x10 [ 55.985347][ T6062] ? __sys_setsockopt+0x1b5/0x220 [ 55.985377][ T6062] do_syscall_64+0x123/0x790 [ 55.985401][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.985418][ T6062] RIP: 0033:0x7f88b739e199 [ 55.985433][ T6062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.985470][ T6062] RSP: 002b:00007f88b824d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.985490][ T6062] RAX: ffffffffffffffda RBX: 00007f88b7625fa8 RCX: 00007f88b739e199 [ 55.985501][ T6062] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f88b7625fa8 [ 55.985511][ T6062] RBP: 00007f88b7625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 55.985523][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.985533][ T6062] R13: 00007f88b7626038 R14: 00007ffe77b03e40 R15: 00007ffe77b03f28 [ 55.985561][ T6062] [ 55.994106][ T35] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 56.178641][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 56.179931][ C3] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 56.184966][ T42] usb 6-1: USB disconnect, device number 2 [ 56.249611][ T5831] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 56.434560][ T6072] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 56.478435][ T6077] FAULT_INJECTION: forcing a failure. [ 56.478435][ T6077] name failslab, interval 1, probability 0, space 0, times 0 [ 56.478462][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: syz.3.65 Not tainted syzkaller #0 PREEMPT(full) [ 56.478478][ T6077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.478486][ T6077] Call Trace: [ 56.478491][ T6077] [ 56.478496][ T6077] dump_stack_lvl+0x100/0x190 [ 56.478522][ T6077] should_fail_ex.cold+0x5/0xa [ 56.478542][ T6077] should_failslab+0xc2/0x120 [ 56.478563][ T6077] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 56.478583][ T6077] ? bpf_check+0x1996/0xac70 [ 56.478603][ T6077] ? kvrealloc_node_align_noprof+0x43/0x120 [ 56.478624][ T6077] krealloc_node_align_noprof+0x321/0x3e0 [ 56.478641][ T6077] ? __pfx___vmalloc_noprof+0x10/0x10 [ 56.478664][ T6077] kvrealloc_node_align_noprof+0x43/0x120 [ 56.478689][ T6077] bpf_iarray_realloc+0x33/0xa0 [ 56.478710][ T6077] bpf_check+0x1a79/0xac70 [ 56.478730][ T6077] ? __css_rstat_updated+0x1ce/0x590 [ 56.478748][ T6077] ? __lock_acquire+0x5c0/0x1f40 [ 56.478764][ T6077] ? __pfx___css_rstat_updated+0x10/0x10 [ 56.478791][ T6077] ? find_held_lock+0x2b/0x80 [ 56.478813][ T6077] ? __pfx_bpf_check+0x10/0x10 [ 56.478833][ T6077] ? lock_acquire+0x1d1/0x380 [ 56.478847][ T6077] ? bpf_prog_load+0x1a27/0x2ab0 [ 56.478867][ T6077] ? find_held_lock+0x2b/0x80 [ 56.478887][ T6077] ? bpf_prog_load+0x1a27/0x2ab0 [ 56.478909][ T6077] ? __asan_memset+0x23/0x50 [ 56.478928][ T6077] ? bpf_prog_load+0x1ae1/0x2ab0 [ 56.478947][ T6077] bpf_prog_load+0x1ae1/0x2ab0 [ 56.478970][ T6077] ? __pfx_bpf_prog_load+0x10/0x10 [ 56.479006][ T6077] __sys_bpf+0x1f46/0x4a30 [ 56.479025][ T6077] ? __pfx___sys_bpf+0x10/0x10 [ 56.479039][ T6077] ? find_held_lock+0x2b/0x80 [ 56.479059][ T6077] ? get_pid_task+0xfc/0x250 [ 56.479081][ T6077] ? get_pid_task+0xfc/0x250 [ 56.479105][ T6077] ? find_held_lock+0x2b/0x80 [ 56.479129][ T6077] ? rcu_read_lock_any_held+0x6a/0x90 [ 56.479150][ T6077] ? find_held_lock+0x2b/0x80 [ 56.479169][ T6077] ? ksys_write+0x190/0x250 [ 56.479185][ T6077] ? ksys_write+0x190/0x250 [ 56.479200][ T6077] ? lock_acquire+0x1d1/0x380 [ 56.479228][ T6077] ? fput+0x7c/0x100 [ 56.479247][ T6077] ? ksys_write+0x1ac/0x250 [ 56.479265][ T6077] ? __x64_sys_bpf+0xce/0x140 [ 56.479279][ T6077] __x64_sys_bpf+0xce/0x140 [ 56.479295][ T6077] ? do_syscall_64+0xae/0x790 [ 56.479314][ T6077] do_syscall_64+0x123/0x790 [ 56.479333][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.479347][ T6077] RIP: 0033:0x7fbdc1d9e199 [ 56.479359][ T6077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.479371][ T6077] RSP: 002b:00007fbdc2c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.479385][ T6077] RAX: ffffffffffffffda RBX: 00007fbdc2025fa0 RCX: 00007fbdc1d9e199 [ 56.479394][ T6077] RDX: 000000000000002d RSI: 00002000002a0fb8 RDI: 0000000000000005 [ 56.479403][ T6077] RBP: 00007fbdc2c21090 R08: 0000000000000000 R09: 0000000000000000 [ 56.479410][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.479441][ T6077] R13: 00007fbdc2026038 R14: 00007fbdc2025fa0 R15: 00007ffefdae4ab8 [ 56.479461][ T6077] [ 56.513208][ T6079] capability: warning: `syz.3.66' uses deprecated v2 capabilities in a way that may be insecure [ 56.729889][ T6085] ip_tables: iptables: counters copy to user failed while replacing table [ 56.754209][ T6087] netlink: 252 bytes leftover after parsing attributes in process `syz.1.69'. [ 56.757390][ T42] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 56.806348][ T6062] ceph: No mds server is up or the cluster is laggy [ 56.850492][ T6089] 8021q: VLANs not supported on ip_vti0 [ 56.890452][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 56.890471][ T6093] openvswitch: netlink: Flow actions attr not present in new flow. [ 56.890878][ T6095] ======================================================= [ 56.890878][ T6095] WARNING: The mand mount option has been deprecated and [ 56.890878][ T6095] and is ignored by this kernel. Remove the mand [ 56.890878][ T6095] option from the mount to silence this warning. [ 56.890878][ T6095] ======================================================= [ 56.934686][ T6099] netlink: 'syz.3.74': attribute type 10 has an invalid length. [ 56.939868][ T6099] syz_tun: entered promiscuous mode [ 56.950861][ T6099] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 56.953848][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 57.030212][ T6103] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 57.030244][ T6103] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 57.030277][ T6103] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 57.032844][ T6103] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.048170][ T6103] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 57.466119][ T5733] Bluetooth: hci0: command tx timeout [ 57.466149][ T67] Bluetooth: hci1: command tx timeout [ 57.539851][ T6102] infiniband syz0: set down [ 57.539865][ T6102] infiniband syz0: added ipvlan0 [ 57.567147][ T6102] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 57.567170][ T6102] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 57.567190][ T6102] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 57.602335][ T6102] RDS/IB: syz0: added [ 57.602526][ T6102] smc: adding ib device syz0 with port count 1 [ 57.602565][ T6102] smc: ib device syz0 port 1 has no pnetid [ 57.788597][ T5801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.964588][ T5801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.043134][ T6128] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 58.100637][ T6129] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6129 comm=syz.2.82 [ 58.158208][ T5733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.160018][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.162807][ T5801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.164529][ T5733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.166166][ T5733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.168882][ T5733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.286797][ T5801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.524862][ T5801] bridge_slave_1: left allmulticast mode [ 58.524885][ T5801] bridge_slave_1: left promiscuous mode [ 58.525349][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.550581][ T5801] bridge_slave_0: left allmulticast mode [ 58.550603][ T5801] bridge_slave_0: left promiscuous mode [ 58.550799][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.788759][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.806458][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.809266][ T5801] bond0 (unregistering): Released all slaves [ 58.832534][ T5439] 8021q: adding VLAN 0 to HW filter on device eth3 [ 58.965654][ T43] kauditd_printk_skb: 3200 callbacks suppressed [ 58.965667][ T43] audit: type=1326 audit(1791503236.413:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.2.84" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b739e199 code=0x50000 [ 58.966341][ T43] audit: type=1326 audit(1791503236.423:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.2.84" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b739e199 code=0x50000 [ 58.966455][ T43] audit: type=1326 audit(1791503236.423:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.2.84" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b739e199 code=0x50000 [ 58.966567][ T43] audit: type=1326 audit(1791503236.423:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.2.84" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b739e199 code=0x50000 [ 58.966719][ T43] audit: type=1326 audit(1791503236.423:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.2.84" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b739e199 code=0x50000 [ 58.966828][ T43] audit: type=1326 audit(1791503236.423:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.2.84" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b739e199 code=0x50000 [ 58.966948][ T43] audit: type=1326 audit(1791503236.423:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.2.84" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b739e199 code=0x50000 [ 58.967065][ T43] audit: type=1326 audit(1791503236.423:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.2.84" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b739e199 code=0x50000 [ 58.967225][ T43] audit: type=1326 audit(1791503236.423:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.2.84" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b739e199 code=0x50000 [ 58.967441][ T43] audit: type=1326 audit(1791503236.423:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6137 comm="syz.2.84" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b739e199 code=0x50000 [ 59.244358][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 59.709538][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4 [ 60.121404][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5 [ 60.186608][ T5733] Bluetooth: hci3: command tx timeout [ 60.489208][ T5801] hsr_slave_0: left promiscuous mode [ 60.490582][ T5801] hsr_slave_1: left promiscuous mode [ 60.491021][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.491038][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.491818][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.491828][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.518048][ T5801] veth1_macvtap: left promiscuous mode [ 60.518092][ T5801] veth0_macvtap: left promiscuous mode [ 60.518176][ T5801] veth1_vlan: left promiscuous mode [ 60.518240][ T5801] veth0_vlan: left promiscuous mode [ 60.703895][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 60.713645][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 61.162790][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.162927][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.163028][ T6130] bridge_slave_0: entered allmulticast mode [ 61.177702][ T6130] bridge_slave_0: entered promiscuous mode [ 61.182192][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.184530][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.184627][ T6130] bridge_slave_1: entered allmulticast mode [ 61.196741][ T6130] bridge_slave_1: entered promiscuous mode [ 61.230442][ T6130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.233044][ T6130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.263627][ T6130] team0: Port device team_slave_0 added [ 61.268470][ T6130] team0: Port device team_slave_1 added [ 61.290445][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.290459][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.290478][ T6130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.291971][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.291982][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.292002][ T6130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.351239][ T6130] hsr_slave_0: entered promiscuous mode [ 61.351879][ T6130] hsr_slave_1: entered promiscuous mode [ 61.352265][ T6130] debugfs: 'hsr0' already exists in 'hsr' [ 61.352278][ T6130] Cannot create hsr debugfs directory [ 61.421924][ T6193] PKCS7: Unsupported SignedData version [ 61.664579][ T6130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.674533][ T6130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.675068][ T6130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.689201][ T6130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.689607][ T6130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.695350][ T6130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.705515][ T6130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.718029][ T6130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.735035][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.735154][ T6130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.735993][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.736084][ T6130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.759225][ T6212] xt_nfacct: accounting object `' does not exist [ 61.786971][ T6130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.801884][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.804038][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.842918][ T6130] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.857416][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.857506][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.876891][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.876966][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.911511][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 61.911674][ T6216] FAULT_INJECTION: forcing a failure. [ 61.911674][ T6216] name failslab, interval 1, probability 0, space 0, times 0 [ 61.911692][ T6216] CPU: 0 UID: 0 PID: 6216 Comm: syz.3.94 Not tainted syzkaller #0 PREEMPT(full) [ 61.911707][ T6216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.911715][ T6216] Call Trace: [ 61.911720][ T6216] [ 61.911725][ T6216] dump_stack_lvl+0x100/0x190 [ 61.911751][ T6216] should_fail_ex.cold+0x5/0xa [ 61.911771][ T6216] should_failslab+0xc2/0x120 [ 61.911792][ T6216] __kmalloc_cache_noprof+0x91/0x6d0 [ 61.911807][ T6216] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 61.911825][ T6216] ? device_create_groups_vargs+0x8a/0x270 [ 61.911845][ T6216] device_create_groups_vargs+0x8a/0x270 [ 61.911863][ T6216] device_create+0xed/0x130 [ 61.911878][ T6216] ? __pfx_device_create+0x10/0x10 [ 61.911891][ T6216] ? lockdep_init_map_type+0x5c/0x250 [ 61.911909][ T6216] ? timer_init_key+0x150/0x310 [ 61.911929][ T6216] ? ieee80211_roc_setup+0x136/0x270 [ 61.911944][ T6216] ? ieee80211_alloc_hw_nm+0x1a2a/0x2310 [ 61.911966][ T6216] mac80211_hwsim_new_radio+0x37c/0x6510 [ 61.911982][ T6216] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 61.912004][ T6216] ? rcu_is_watching+0x13/0xc0 [ 61.912026][ T6216] ? do_trace_netlink_extack+0x72/0x1e0 [ 61.912043][ T6216] ? __nla_validate_parse+0x1e7/0x28b0 [ 61.912061][ T6216] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 61.912081][ T6216] hwsim_new_radio_nl+0xc6b/0x13f0 [ 61.912095][ T6216] ? trace_kmalloc+0xeb/0x110 [ 61.912115][ T6216] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 61.912135][ T6216] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 61.912149][ T6216] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 61.912168][ T6216] genl_family_rcv_msg_doit+0x214/0x300 [ 61.912183][ T6216] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 61.912203][ T6216] ? bpf_lsm_capable+0x9/0x10 [ 61.912217][ T6216] ? security_capable+0x80/0x260 [ 61.912233][ T6216] ? ns_capable+0xd2/0xf0 [ 61.912249][ T6216] genl_rcv_msg+0x560/0x800 [ 61.912265][ T6216] ? __pfx_genl_rcv_msg+0x10/0x10 [ 61.912278][ T6216] ? __lock_acquire+0x5c0/0x1f40 [ 61.912294][ T6216] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 61.912315][ T6216] netlink_rcv_skb+0x159/0x420 [ 61.912335][ T6216] ? __pfx_genl_rcv_msg+0x10/0x10 [ 61.912349][ T6216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 61.912377][ T6216] ? netlink_deliver_tap+0x1ae/0xcc0 [ 61.912399][ T6216] genl_rcv+0x28/0x40 [ 61.912418][ T6216] netlink_unicast+0x585/0x850 [ 61.912441][ T6216] ? __pfx_netlink_unicast+0x10/0x10 [ 61.912467][ T6216] netlink_sendmsg+0x8b0/0xda0 [ 61.912489][ T6216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.912511][ T6216] ? selinux_socket_sendmsg+0x198/0x2f0 [ 61.912533][ T6216] ____sys_sendmsg+0xa4d/0xbe0 [ 61.912548][ T6216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.912575][ T6216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.912596][ T6216] ? lock_acquire+0x1d1/0x380 [ 61.912611][ T6216] ? get_pid_task+0x2a/0x250 [ 61.912631][ T6216] ___sys_sendmsg+0x190/0x1e0 [ 61.912650][ T6216] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.912667][ T6216] ? get_pid_task+0x106/0x250 [ 61.912693][ T6216] ? find_held_lock+0x2b/0x80 [ 61.912726][ T6216] __sys_sendmsg+0x160/0x210 [ 61.912748][ T6216] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.912780][ T6216] do_syscall_64+0x123/0x790 [ 61.912801][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.912816][ T6216] RIP: 0033:0x7fbdc1d9e199 [ 61.912827][ T6216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.912840][ T6216] RSP: 002b:00007fbdc2c21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.912854][ T6216] RAX: ffffffffffffffda RBX: 00007fbdc2025fa0 RCX: 00007fbdc1d9e199 [ 61.912863][ T6216] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 61.912872][ T6216] RBP: 00007fbdc2c21090 R08: 0000000000000000 R09: 0000000000000000 [ 61.912880][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.912887][ T6216] R13: 00007fbdc2026038 R14: 00007fbdc2025fa0 R15: 00007ffefdae4ab8 [ 61.912907][ T6216] [ 62.114284][ T6225] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.275725][ T5733] Bluetooth: hci3: command tx timeout [ 62.286544][ T6241] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 62.300168][ T6241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.309991][ T6241] bond1: (slave gretap1): making interface the new active one [ 62.311625][ T6241] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 62.313940][ T6241] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6241 comm=syz.3.100 [ 62.324375][ T6130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.491334][ T6130] veth0_vlan: entered promiscuous mode [ 62.498661][ T6130] veth1_vlan: entered promiscuous mode [ 62.525820][ T6130] veth0_macvtap: entered promiscuous mode [ 62.529467][ T6130] veth1_macvtap: entered promiscuous mode [ 62.549761][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.562170][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.722218][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 62.722241][ T6256] openvswitch: netlink: Flow actions attr not present in new flow. [ 63.312887][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.312901][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.315246][ T6273] EXT4-fs warning (device sda1): verify_group_input:166: Cannot read last block (263401) [ 63.333903][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.333916][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.365718][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.365756][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.365783][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.365808][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.626676][ T6145] ------------[ cut here ]------------ [ 64.626691][ T6145] virtio-pci 0000:00:01.0: [drm] vblank wait timed out on crtc 0 [ 64.626703][ T6145] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x322/0x590, CPU#0: kworker/0:4/6145 [ 64.638125][ T6145] Modules linked in: [ 64.639888][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 64.643783][ T6145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.647995][ T6145] Workqueue: events drm_fb_helper_damage_work [ 64.650535][ T6145] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 64.653186][ T6145] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 80 7a 32 fc 48 89 df e8 e8 32 92 00 48 89 c6 48 8d 3d 0e 04 77 0c 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 64.661188][ T6145] RSP: 0018:ffffc900034b7a40 EFLAGS: 00010293 [ 64.663727][ T6145] RAX: ffffffff8c719620 RBX: ffff888024b020d0 RCX: 0000000000000000 [ 64.667069][ T6145] RDX: ffff8880249299a0 RSI: ffffffff8c719620 RDI: ffffffff9250d3f0 [ 64.670353][ T6145] RBP: ffff8880249299a0 R08: 0000000000000005 R09: 0000000000000000 [ 64.673659][ T6145] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888029730000 [ 64.677185][ T6145] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000010fd [ 64.680470][ T6145] FS: 0000000000000000(0000) GS:ffff8880d4947000(0000) knlGS:0000000000000000 [ 64.684130][ T6145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.686727][ T6145] CR2: 00007fbdc1deb880 CR3: 000000004b299000 CR4: 0000000000352ef0 [ 64.690042][ T6145] Call Trace: [ 64.691468][ T6145] [ 64.692736][ T6145] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 64.695289][ T6145] ? __pfx_autoremove_wake_function+0x10/0x10 [ 64.697877][ T6145] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.700093][ T6145] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.702528][ T6145] ? drm_vblank_get+0x14f/0x2d0 [ 64.704608][ T6145] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 64.707303][ T6145] drm_fb_helper_damage_work+0x2e2/0xab0 [ 64.709661][ T6145] ? process_one_work+0xa2c/0x1b10 [ 64.711827][ T6145] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 64.714407][ T6145] ? process_one_work+0x906/0x1b10 [ 64.716461][ T6145] ? process_one_work+0x906/0x1b10 [ 64.718625][ T6145] process_one_work+0xac7/0x1b10 [ 64.720972][ T6145] ? __pfx_process_one_work+0x10/0x10 [ 64.723460][ T6145] ? lock_acquire+0x1d1/0x380 [ 64.725314][ T6145] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 64.727971][ T6145] worker_thread+0x5ef/0xe50 [ 64.729906][ T6145] ? __pfx_worker_thread+0x10/0x10 [ 64.732066][ T6145] ? kthread+0x13a/0x450 [ 64.733862][ T6145] ? __pfx_worker_thread+0x10/0x10 [ 64.735907][ T6145] kthread+0x373/0x450 [ 64.737628][ T6145] ? __pfx_kthread+0x10/0x10 [ 64.739547][ T6145] ret_from_fork+0x730/0xd60 [ 64.741499][ T6145] ? __pfx_ret_from_fork+0x10/0x10 [ 64.743654][ T6145] ? __switch_to+0x800/0x10f0 [ 64.745700][ T6145] ? __pfx_kthread+0x10/0x10 [ 64.747666][ T6145] ret_from_fork_asm+0x1a/0x30 [ 64.749691][ T6145] [ 64.751019][ T6145] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.754048][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 64.757906][ T6145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.762003][ T6145] Workqueue: events drm_fb_helper_damage_work [ 64.764567][ T6145] Call Trace: [ 64.765986][ T6145] [ 64.767216][ T6145] dump_stack_lvl+0x100/0x190 [ 64.769188][ T6145] vpanic+0x553/0x970 [ 64.770871][ T6145] ? __pfx_vpanic+0x10/0x10 [ 64.772809][ T6145] panic+0xd1/0xe0 [ 64.774408][ T6145] ? __pfx_panic+0x10/0x10 [ 64.776315][ T6145] check_panic_on_warn.cold+0x19/0x34 [ 64.778550][ T6145] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 64.780944][ T6145] __warn.cold+0x191/0x318 [ 64.782829][ T6145] __report_bug+0x30f/0x440 [ 64.784758][ T6145] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 64.787134][ T6145] ? __pfx___report_bug+0x10/0x10 [ 64.789249][ T6145] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.791452][ T6145] report_bug_entry+0xe2/0x290 [ 64.793479][ T6145] ? drm_crtc_wait_one_vblank+0x328/0x590 [ 64.795882][ T6145] handle_bug+0x1cd/0x2a0 [ 64.797723][ T6145] exc_invalid_op+0x17/0x50 [ 64.799658][ T6145] asm_exc_invalid_op+0x1a/0x20 [ 64.801710][ T6145] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 64.804392][ T6145] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 80 7a 32 fc 48 89 df e8 e8 32 92 00 48 89 c6 48 8d 3d 0e 04 77 0c 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 64.812299][ T6145] RSP: 0018:ffffc900034b7a40 EFLAGS: 00010293 [ 64.814878][ T6145] RAX: ffffffff8c719620 RBX: ffff888024b020d0 RCX: 0000000000000000 [ 64.818181][ T6145] RDX: ffff8880249299a0 RSI: ffffffff8c719620 RDI: ffffffff9250d3f0 [ 64.821440][ T6145] RBP: ffff8880249299a0 R08: 0000000000000005 R09: 0000000000000000 [ 64.824722][ T6145] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888029730000 [ 64.828002][ T6145] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000010fd [ 64.831300][ T6145] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 64.833856][ T6145] ? __pfx_autoremove_wake_function+0x10/0x10 [ 64.836398][ T6145] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.838582][ T6145] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.841041][ T6145] ? drm_vblank_get+0x14f/0x2d0 [ 64.843113][ T6145] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 64.845793][ T6145] drm_fb_helper_damage_work+0x2e2/0xab0 [ 64.848153][ T6145] ? process_one_work+0xa2c/0x1b10 [ 64.850307][ T6145] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 64.852870][ T6145] ? process_one_work+0x906/0x1b10 [ 64.855030][ T6145] ? process_one_work+0x906/0x1b10 [ 64.857191][ T6145] process_one_work+0xac7/0x1b10 [ 64.859234][ T6145] ? __pfx_process_one_work+0x10/0x10 [ 64.861486][ T6145] ? lock_acquire+0x1d1/0x380 [ 64.863490][ T6145] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 64.866071][ T6145] worker_thread+0x5ef/0xe50 [ 64.868027][ T6145] ? __pfx_worker_thread+0x10/0x10 [ 64.870171][ T6145] ? kthread+0x13a/0x450 [ 64.871982][ T6145] ? __pfx_worker_thread+0x10/0x10 [ 64.874156][ T6145] kthread+0x373/0x450 [ 64.875926][ T6145] ? __pfx_kthread+0x10/0x10 [ 64.877902][ T6145] ret_from_fork+0x730/0xd60 [ 64.879876][ T6145] ? __pfx_ret_from_fork+0x10/0x10 [ 64.882038][ T6145] ? __switch_to+0x800/0x10f0 [ 64.884058][ T6145] ? __pfx_kthread+0x10/0x10 [ 64.886033][ T6145] ret_from_fork_asm+0x1a/0x30 [ 64.888092][ T6145] [ 65.988232][ T6145] Shutting down cpus with NMI [ 65.990920][ T6145] Kernel Offset: disabled [ 65.992742][ T6145] Rebooting in 86400 seconds..