last executing test programs: 1.729071844s ago: executing program 0 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sec\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 32) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000a40)=0x1000, 0x4) (async, rerun: 32) sendto$inet(r0, &(0x7f0000000a80)="30c9", 0x2, 0x200400d4, &(0x7f0000000ac0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) mount(0x0, &(0x7f00000005c0)='./sec\x00', &(0x7f0000000600)='securityfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)="4d6b6ea73e60ddbed1b9ccad0a", 0xd) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x10083, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000060000002020782500000000002020207b1a00fe00000000bfa10000000000000701000000feffffb702000005000000b70300000000000085000000c700000095000000000000007d2e3c7ab0fe3cf9f0845ddb140b18d24e8b7c137f5426"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000009c0)={0x0, 0x0, 0x9, r3, 0x6}, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="38400000070a010100000006000000000a0040010900010073797a31", @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x20040851}, 0x44054) (async) r5 = openat$cdrom(0xffffff9c, &(0x7f0000000b00), 0x880, 0x0) ioctl$DVD_READ_STRUCT(r5, 0x2284, &(0x7f0000000b40)=@manufact={0x4, 0x1, 0x800, "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"}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000009, 0x2010, 0xffffffffffffffff, 0x888d0000) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04023904ff"], 0x3c) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (rerun: 64) syz_open_dev$sndctrl(&(0x7f0000000040), 0x800, 0x414200) 1.257102675s ago: executing program 1 (id=346): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debugfs\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000180)="a51d484e242000000000f7c8aff96b2fc08bfcd111602232e4611d7d6d9c5e86504a6d5e02029b003632db", 0x2b}], 0x2) 1.187716519s ago: executing program 1 (id=348): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016"], 0x60}}, 0x0) r0 = socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0xc01, 0x11) write(r1, &(0x7f0000000280)="703a742d73742f6576656e7431202e2f66696c65303a30783020617267323d5ca78c15bf92f2cb16bffa883f3f1a6b71a2799941fda9f8933a69341c5475bb26948a90849ad8c52af3ed9f9e3159a3bf5b6c1354726c439db3", 0x59) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.129034573s ago: executing program 1 (id=349): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x1b7b, &(0x7f0000000100)={0x0, 0x78e8, 0x200, 0x3, 0x80}) close(0x3) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000200)={r0, 0x0, 0x6, 0x9, 0x4}, 0x1) r1 = socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x1405, 0xa09, 0x70bd2b, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004090}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="f8", 0x1, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000001200), &(0x7f0000001240)=0x4) socket$kcm(0x21, 0x2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000011c0)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000300)=0xffffffffffffffff, 0x4) keyctl$revoke(0x3, r3) openat$cdrom(0xffffffffffffff9c, 0x0, 0x4903, 0x0) r5 = syz_open_dev$usbmon(0x0, 0x0, 0x121000) ioctl$MON_IOCX_GETX(r5, 0x4018920a, 0x0) 1.128438805s ago: executing program 1 (id=352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000340)={0x0, 0x0, 0x76, 0x6031}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/eth0/threaded\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e13010042000000aa"], 0x16) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)}], 0x1}, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04050400420016"], 0x7) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="03c90083"], 0x87) ioctl(r1, 0x4048aec9, &(0x7f0000000080)) 928.474231ms ago: executing program 3 (id=359): syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) mkdir(&(0x7f00000001c0)='mnt\x00', 0xc5) fsopen(&(0x7f0000000000)='qnx4\x00', 0x0) mount(0x0, &(0x7f0000000200)='mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='mnt/ttyUSB0\x00', 0x2, 0x0) 737.175749ms ago: executing program 0 (id=361): r0 = socket(0x80000000000000a, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0980, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa87aaaaaaaaaaaaaaaa86dd6038140900442fff528c0c9efc020000000000000000000000000000ff020000000000000000000000000001242088a80000060000000800000086dd88a888be08000001100200010100000000000004080022eb00000000200000000200000000000000002000000800655800000000"], 0x0) accept4(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x80, 0x80800) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000340)={0x6, 0x0, @pic={0x81, 0x7, 0x6, 0x6, 0x0, 0x5, 0x0, 0x9, 0x6, 0x2, 0x9, 0x80, 0x0, 0x2, 0x5, 0x2a}}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x1cb, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0980, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa87aaaaaaaaaaaaaaaa86dd6038140900442fff528c0c9efc020000000000000000000000000000ff020000000000000000000000000001242088a80000060000000800000086dd88a888be08000001100200010100000000000004080022eb00000000200000000200000000000000002000000800655800000000"], 0x0) (async) accept4(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x80, 0x80800) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000340)={0x6, 0x0, @pic={0x81, 0x7, 0x6, 0x6, 0x0, 0x5, 0x0, 0x9, 0x6, 0x2, 0x9, 0x80, 0x0, 0x2, 0x5, 0x2a}}) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x1cb, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) 518.943999ms ago: executing program 1 (id=363): r0 = openat$nsim_del_device(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$nsim_del_device(r0, &(0x7f00000016c0)={0x0}, 0x1) 357.479835ms ago: executing program 3 (id=364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x47) 307.255906ms ago: executing program 3 (id=365): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeaf28368fb2ad103, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x0, 0x100}, 0x0) dup(r0) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000000240)=[{&(0x7f0000000280)=""/116, 0x20001c34}], 0x1, 0x0) 306.993019ms ago: executing program 2 (id=366): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x5) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debugfs\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000180)="a51d484e242000000000f7c8aff96b2fc08bfcd111602232e4611d7d6d9c5e86504a6d5e02029b003632db", 0x2b}], 0x2) 257.941421ms ago: executing program 2 (id=367): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000400)={0x0, 0xed83, 0x400, 0x2, 0x2e3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="10134eab8aa0677d032ba8cc", 0xc}], 0x7}}], 0x1, 0x4008c50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x440201, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x19) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xd, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 179.04838ms ago: executing program 2 (id=368): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01022dbd7000fcdbdf251000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x40000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="0a000300010040", 0x7) 178.855652ms ago: executing program 0 (id=369): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff2, 0x3}, {0xfff1, 0x2}, {0xf93e0194ab2f7909, 0x2}}, ["", "", ""]}, 0x24}}, 0x0) 117.932019ms ago: executing program 2 (id=370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x2, 0x0, 0xe7}}}}}}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0}) r2 = syz_open_dev$video4linux(&(0x7f0000000140), 0x3, 0x40800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000180)={0x0, 0x0, 0x2012, 0x3, 0x2, 0x6, 0xfffffffc, 0x1}) 117.500517ms ago: executing program 0 (id=371): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000180000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 117.197209ms ago: executing program 3 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x35, 0x0, "c98d95ee50c3a78294c18d072a0bae4428949225ff1fa090b9bbf971504b8b197a685cd1f2ec7e03f6530f044e4670cd195506482871d4c255105aec233f88ced3505e0f4e0c2d9a306d9f5dc2a08def"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)="580000001200192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 69.148741ms ago: executing program 0 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x4d0, 0x0, 0x1ff}]}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000040)=""/3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000240)='7\x00', 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0xf}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x8091}, 0x44080) socket(0x27, 0x5, 0xc) 67.342363ms ago: executing program 2 (id=374): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x47) 2.388473ms ago: executing program 3 (id=375): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x5) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debugfs\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000180)="a51d484e242000000000f7c8aff96b2fc08bfcd111602232e4611d7d6d9c5e86504a6d5e02029b003632db", 0x2b}], 0x2) 2.146339ms ago: executing program 0 (id=376): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c0014"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0xe68af000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x100, 0x2, 0x4, 0xfffffffa, 0x5, 0x5, 0x3, 0x20000010, 0xfffffff9, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x3, 0x2, 0x7f, 0x1009, 0x48, 0x9, 0x4, 0xea7a, 0x5, 0x7, 0x8]}) 1.570792ms ago: executing program 2 (id=377): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x1ff, 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000340)=[{0x16, 0x4601, 0x41, &(0x7f0000000380)="21365217006a70cba8176eb127992f56f31114ffad30296a1891705a9b36b23590c15fa0abf9e75811839009152d5ed57e47ef6f8db423b038d83db5b5cf0b01a7"}], 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000780)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb0, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101bd, 0x4000000d, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0x1, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x40001, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0x9, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x405, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x81, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x7, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0xfffffffd, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c80)={0x0, &(0x7f0000000cc0)=[@wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0xa0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000dc0)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000ec0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000f00)=[@text32={0x20, &(0x7f0000000f40)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000f80)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) clock_settime(0x0, &(0x7f00000000c0)={0x77359400}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x9, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/188) 211.958µs ago: executing program 3 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x4}) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x7) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000200)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000540)=@attr_other={0x0, 0xa8e4, 0x3, &(0x7f0000000500)}) write(r4, &(0x7f0000000340)='100', 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7, 0x4, 0x1, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x200}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/sda1\x00', 0x2, 0x4) write(r0, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0080}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000004c0)=0x2000000) write$tun(r2, &(0x7f0000000500)={@val={0x0, 0x88b5}, @void, @llc={@snap={0x0, 0x1, ')', "981473", 0x809b}}}, 0xc) unlinkat(r0, &(0x7f0000000540)='./mnt\x00', 0x200) close_range(r2, r2, 0x0) r3 = fanotify_init(0x200, 0x1000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000140)={0x8c8, 0xfffffffa, 0x7fff}) fanotify_mark(r3, 0x1, 0x40000017, r1, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="87", 0x1}], 0x1) utimes(&(0x7f0000000240)='./trace\x00', &(0x7f0000000280)={{0x77359400}, {0x77359400}}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:35526' (ED25519) to the list of known hosts. [ 39.872017][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 39.872033][ T43] audit: type=1400 audit(1793604843.499:138): avc: denied { name_bind } for pid=5769 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.916765][ T43] audit: type=1400 audit(1793604843.549:139): avc: denied { execute } for pid=5770 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.917320][ T43] audit: type=1400 audit(1793604843.549:140): avc: denied { execute_no_trans } for pid=5770 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.208713][ T43] audit: type=1400 audit(1793604845.839:141): avc: denied { mounton } for pid=5770 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.210593][ T43] audit: type=1400 audit(1793604845.839:142): avc: denied { mount } for pid=5770 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.213122][ T5770] cgroup: Unknown subsys name 'net' [ 42.214402][ T43] audit: type=1400 audit(1793604845.839:143): avc: denied { unmount } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.357835][ T5770] cgroup: Unknown subsys name 'cpuset' [ 42.362526][ T5770] cgroup: Unknown subsys name 'rlimit' [ 42.502796][ T43] audit: type=1400 audit(1793604846.129:144): avc: denied { setattr } for pid=5770 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.503488][ T43] audit: type=1400 audit(1793604846.129:145): avc: denied { create } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.503590][ T43] audit: type=1400 audit(1793604846.129:146): avc: denied { write } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.503823][ T43] audit: type=1400 audit(1793604846.129:147): avc: denied { read } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.555426][ T5774] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.225769][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.305106][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 46.305125][ T43] audit: type=1400 audit(1793604849.939:154): avc: denied { execmem } for pid=5777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.546341][ T43] audit: type=1400 audit(1793604850.179:155): avc: denied { create } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.546923][ T43] audit: type=1400 audit(1793604850.179:156): avc: denied { read write } for pid=5781 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.547595][ T43] audit: type=1400 audit(1793604850.179:157): avc: denied { open } for pid=5781 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.556822][ T43] audit: type=1400 audit(1793604850.189:158): avc: denied { ioctl } for pid=5782 comm="syz-executor" path="socket:[5854]" dev="sockfs" ino=5854 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.598288][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.598686][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.599894][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.600053][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.601846][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.601975][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.602278][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.602974][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.603215][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.603293][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.603349][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.603927][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.605113][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.605227][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.605559][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.605670][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.605950][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.620071][ T43] audit: type=1400 audit(1793604850.249:159): avc: denied { read } for pid=5784 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.620303][ T43] audit: type=1400 audit(1793604850.249:160): avc: denied { open } for pid=5784 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.621819][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.621884][ T43] audit: type=1400 audit(1793604850.249:161): avc: denied { mounton } for pid=5784 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.625363][ T43] audit: type=1400 audit(1793604850.259:162): avc: denied { module_request } for pid=5784 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.631861][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.636361][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.643123][ T43] audit: type=1400 audit(1793604850.269:163): avc: denied { mounton } for pid=5790 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.821874][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.822620][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.822860][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.824197][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.831993][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.882560][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.903303][ T5784] infiniband rxe0: set active [ 46.903322][ T5784] infiniband rxe0: added rxe_eth0 [ 46.914395][ T5784] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 46.914418][ T5784] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 46.914441][ T5784] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 46.917802][ T42] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.922009][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.938131][ T5784] RDS/IB: rxe0: added [ 46.938248][ T5784] smc: adding ib device rxe0 with port count 1 [ 46.938283][ T5784] smc: ib device rxe0 port 1 has no pnetid [ 46.954406][ T1044] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.008172][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.011288][ T42] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.029630][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.123342][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.123754][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.123907][ T5782] bridge_slave_0: entered allmulticast mode [ 47.124571][ T5782] bridge_slave_0: entered promiscuous mode [ 47.129663][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.151750][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.151799][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.151865][ T5782] bridge_slave_1: entered allmulticast mode [ 47.152644][ T5782] bridge_slave_1: entered promiscuous mode [ 47.182475][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.182987][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.183031][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.183190][ T5781] bridge_slave_0: entered allmulticast mode [ 47.183901][ T5781] bridge_slave_0: entered promiscuous mode [ 47.189213][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.198011][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.198086][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.198351][ T5781] bridge_slave_1: entered allmulticast mode [ 47.199597][ T5781] bridge_slave_1: entered promiscuous mode [ 47.226008][ T5782] team0: Port device team_slave_0 added [ 47.241784][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.242856][ T5782] team0: Port device team_slave_1 added [ 47.245206][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.292482][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.292501][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.292520][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.293296][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.296071][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.296083][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.296106][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.297461][ T5781] team0: Port device team_slave_0 added [ 47.298789][ T5781] team0: Port device team_slave_1 added [ 47.339550][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.339628][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.339683][ T5790] bridge_slave_0: entered allmulticast mode [ 47.340403][ T5790] bridge_slave_0: entered promiscuous mode [ 47.342606][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.342615][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.342629][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.350422][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.350467][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.350704][ T5790] bridge_slave_1: entered allmulticast mode [ 47.351447][ T5790] bridge_slave_1: entered promiscuous mode [ 47.352477][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.352486][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.352500][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.359580][ T5782] hsr_slave_0: entered promiscuous mode [ 47.360166][ T5782] hsr_slave_1: entered promiscuous mode [ 47.402176][ T5781] hsr_slave_0: entered promiscuous mode [ 47.402646][ T5781] hsr_slave_1: entered promiscuous mode [ 47.402969][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 47.402978][ T5781] Cannot create hsr debugfs directory [ 47.404148][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.407112][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.429983][ T5790] team0: Port device team_slave_0 added [ 47.459307][ T5790] team0: Port device team_slave_1 added [ 47.527647][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.527658][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.527672][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.543701][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.543712][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.543727][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.646255][ T5790] hsr_slave_0: entered promiscuous mode [ 47.646684][ T5790] hsr_slave_1: entered promiscuous mode [ 47.647016][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 47.647025][ T5790] Cannot create hsr debugfs directory [ 47.772752][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.777544][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.786503][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.791646][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.792517][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.795863][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.813204][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.816911][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.913316][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.913376][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.913693][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.913739][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.917223][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.920513][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.920954][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.925909][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.926276][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.926352][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.926447][ T5784] bridge_slave_0: entered allmulticast mode [ 47.927759][ T5784] bridge_slave_0: entered promiscuous mode [ 47.935393][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.940196][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.940951][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.940993][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.941075][ T5784] bridge_slave_1: entered allmulticast mode [ 47.942182][ T5784] bridge_slave_1: entered promiscuous mode [ 47.958555][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.962259][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.971726][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.977343][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.017524][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.018436][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.031569][ T5784] team0: Port device team_slave_0 added [ 48.039723][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.043768][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.046094][ T5784] team0: Port device team_slave_1 added [ 48.070456][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.074298][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.075526][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.080652][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.081487][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.081499][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.081521][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.083578][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.089445][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.097528][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.097543][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.097565][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.146528][ T5784] hsr_slave_0: entered promiscuous mode [ 48.147371][ T5784] hsr_slave_1: entered promiscuous mode [ 48.148011][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 48.148026][ T5784] Cannot create hsr debugfs directory [ 48.228754][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.298307][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.331636][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.331762][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.339707][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.343501][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.350263][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.351980][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.352425][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.354825][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.357185][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.357307][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.357703][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.365450][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.389058][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.409728][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.439619][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.446175][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.446254][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.451135][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.455932][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.456023][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.473459][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.473527][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.487384][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.487519][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.563405][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.580891][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.584541][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.584587][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.590618][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.590665][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.657100][ T5795] Bluetooth: hci0: command tx timeout [ 48.664979][ T5795] Bluetooth: hci1: command tx timeout [ 48.665145][ T5791] Bluetooth: hci3: command tx timeout [ 48.665390][ T5795] Bluetooth: hci2: command tx timeout [ 48.771317][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.802376][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.805643][ T5781] veth0_vlan: entered promiscuous mode [ 48.811630][ T5781] veth1_vlan: entered promiscuous mode [ 48.833699][ T5781] veth0_macvtap: entered promiscuous mode [ 48.838206][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.839159][ T5781] veth1_macvtap: entered promiscuous mode [ 48.853011][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.866311][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.867534][ T5782] veth0_vlan: entered promiscuous mode [ 48.878621][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.879944][ T5782] veth1_vlan: entered promiscuous mode [ 48.942577][ T5790] veth0_vlan: entered promiscuous mode [ 48.963109][ T5782] veth0_macvtap: entered promiscuous mode [ 48.964012][ T5784] veth0_vlan: entered promiscuous mode [ 48.966089][ T5790] veth1_vlan: entered promiscuous mode [ 48.969624][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.969640][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.970499][ T5784] veth1_vlan: entered promiscuous mode [ 48.979680][ T5782] veth1_macvtap: entered promiscuous mode [ 48.998038][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.998054][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.022417][ T5790] veth0_macvtap: entered promiscuous mode [ 49.031817][ T5790] veth1_macvtap: entered promiscuous mode [ 49.034064][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.037588][ T5784] veth0_macvtap: entered promiscuous mode [ 49.039226][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.043783][ T5784] veth1_macvtap: entered promiscuous mode [ 49.048264][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.051420][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.060471][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.106093][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.119553][ T5781] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.127540][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.140151][ T497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.140164][ T497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.193633][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.193654][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.205044][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.205086][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.205116][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.205170][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.205200][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.205228][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.233710][ T497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.233727][ T497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.245918][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.245943][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.245961][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.245979][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.245997][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.246015][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.246032][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.246050][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.246068][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.275792][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.275807][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.280475][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.280488][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.311484][ T497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.311498][ T497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.382318][ T5951] FAULT_INJECTION: forcing a failure. [ 49.382318][ T5951] name failslab, interval 1, probability 0, space 0, times 1 [ 49.382344][ T5951] CPU: 2 UID: 0 PID: 5951 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 49.382366][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.382399][ T5951] Call Trace: [ 49.382406][ T5951] [ 49.382411][ T5951] dump_stack_lvl+0x100/0x190 [ 49.382447][ T5951] should_fail_ex.cold+0x5/0xa [ 49.382480][ T5951] should_failslab+0xc2/0x120 [ 49.382497][ T5951] __kvmalloc_node_noprof+0x113/0x9b0 [ 49.382525][ T5951] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 49.382549][ T5951] ? ip_vs_rht_alloc+0x142/0x710 [ 49.382578][ T5951] ip_vs_rht_alloc+0x142/0x710 [ 49.382599][ T5951] ? ip_vs_add_service+0x1659/0x2240 [ 49.382624][ T5951] ip_vs_svc_table_alloc.isra.0+0x2d/0xd0 [ 49.382642][ T5951] ip_vs_add_service+0x166e/0x2240 [ 49.382665][ T5951] ? __ip_vs_service_find+0x4d0/0x9c0 [ 49.382682][ T5951] ? find_held_lock+0x2b/0x80 [ 49.382702][ T5951] ? do_ip_vs_set_ctl+0x7e4/0xc90 [ 49.382729][ T5951] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 49.382751][ T5951] do_ip_vs_set_ctl+0xb86/0xc90 [ 49.382771][ T5951] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 49.382792][ T5951] ? rcu_is_watching+0x13/0xc0 [ 49.382819][ T5951] ? find_held_lock+0x2b/0x80 [ 49.382837][ T5951] ? nf_sockopt_find.isra.0+0x222/0x290 [ 49.382859][ T5951] ? nf_sockopt_find.isra.0+0x222/0x290 [ 49.382894][ T5951] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 49.382926][ T5951] ? nf_setsockopt+0x8d/0xf0 [ 49.382947][ T5951] nf_setsockopt+0x8d/0xf0 [ 49.382975][ T5951] ip_setsockopt+0xcb/0xf0 [ 49.382999][ T5951] tcp_setsockopt+0xa7/0x100 [ 49.383018][ T5951] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 49.383046][ T5951] do_sock_setsockopt+0xf3/0x1d0 [ 49.383072][ T5951] __sys_setsockopt+0x195/0x220 [ 49.383095][ T5951] __x64_sys_setsockopt+0xbd/0x160 [ 49.383109][ T5951] ? do_syscall_64+0xae/0x790 [ 49.383127][ T5951] ? lockdep_hardirqs_on+0x7d/0x110 [ 49.383145][ T5951] do_syscall_64+0x123/0x790 [ 49.383166][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.383187][ T5951] RIP: 0033:0x7fcc3ed9f559 [ 49.383203][ T5951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.383221][ T5951] RSP: 002b:00007fcc3fd0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.383240][ T5951] RAX: ffffffffffffffda RBX: 00007fcc3f025fa0 RCX: 00007fcc3ed9f559 [ 49.383252][ T5951] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000004 [ 49.383281][ T5951] RBP: 00007fcc3ee36b50 R08: 000000000000002c R09: 0000000000000000 [ 49.383294][ T5951] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 49.383306][ T5951] R13: 00007fcc3f026038 R14: 00007fcc3f025fa0 R15: 00007ffdbda251e8 [ 49.383333][ T5951] [ 49.439321][ T5954] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 49.439321][ T5954] program syz.3.4 not setting count and/or reply_len properly [ 49.444163][ T5956] bond0: entered allmulticast mode [ 49.444190][ T5956] bond_slave_0: entered allmulticast mode [ 49.444201][ T5956] bond_slave_1: entered allmulticast mode [ 49.576166][ T5962] FAULT_INJECTION: forcing a failure. [ 49.576166][ T5962] name failslab, interval 1, probability 0, space 0, times 0 [ 49.576186][ T5962] CPU: 0 UID: 0 PID: 5962 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(full) [ 49.576213][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.576220][ T5962] Call Trace: [ 49.576224][ T5962] [ 49.576229][ T5962] dump_stack_lvl+0x100/0x190 [ 49.576252][ T5962] should_fail_ex.cold+0x5/0xa [ 49.576270][ T5962] should_failslab+0xc2/0x120 [ 49.576284][ T5962] __kmalloc_cache_noprof+0x91/0x6d0 [ 49.576300][ T5962] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 49.576319][ T5962] ? blk_alloc_queue_stats+0x3f/0x110 [ 49.576340][ T5962] blk_alloc_queue_stats+0x3f/0x110 [ 49.576357][ T5962] blk_alloc_queue+0xda/0x790 [ 49.576377][ T5962] __blk_alloc_disk+0xa0/0x170 [ 49.576392][ T5962] ? __pfx___blk_alloc_disk+0x10/0x10 [ 49.576407][ T5962] ? __pfx___debug_object_init+0x10/0x10 [ 49.576432][ T5962] ? lockdep_init_map_type+0x5c/0x250 [ 49.576464][ T5962] ? lockdep_init_map_type+0x5c/0x250 [ 49.576486][ T5962] dm_create+0x5e8/0x1530 [ 49.576504][ T5962] dev_create+0x121/0x2a0 [ 49.576520][ T5962] ? __pfx_dev_create+0x10/0x10 [ 49.576540][ T5962] ctl_ioctl+0x4d2/0xcc0 [ 49.576556][ T5962] ? __pfx_dev_create+0x10/0x10 [ 49.576573][ T5962] ? __pfx_ctl_ioctl+0x10/0x10 [ 49.576603][ T5962] ? selinux_file_ioctl+0x1e0/0x290 [ 49.576625][ T5962] dm_ctl_ioctl+0x22/0x30 [ 49.576640][ T5962] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 49.576672][ T5962] __x64_sys_ioctl+0x18e/0x210 [ 49.576693][ T5962] do_syscall_64+0x123/0x790 [ 49.576708][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.576721][ T5962] RIP: 0033:0x7fcc3ed9f559 [ 49.576731][ T5962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.576742][ T5962] RSP: 002b:00007fcc3fd0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.576754][ T5962] RAX: ffffffffffffffda RBX: 00007fcc3f025fa0 RCX: 00007fcc3ed9f559 [ 49.576761][ T5962] RDX: 0000200000000c80 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 49.576768][ T5962] RBP: 00007fcc3ee36b50 R08: 0000000000000000 R09: 0000000000000000 [ 49.576775][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.576782][ T5962] R13: 00007fcc3f026038 R14: 00007fcc3f025fa0 R15: 00007ffdbda251e8 [ 49.576797][ T5962] [ 49.582764][ T5957] device-mapper: table: 248:0: ram2 too small for target: start=128, len=12360, dev_size=8192 [ 49.582788][ T5957] device-mapper: core: Cannot calculate initial queue limits [ 49.582796][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 49.582801][ T5957] device-mapper: ioctl: unable to set up device queue for new table. [ 49.734943][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.894875][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 49.897641][ T9] usb 8-1: New USB device found: idVendor=1430, idProduct=474b, bcdDevice=0.40 [ 49.899112][ T9] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 49.899132][ T9] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 49.899146][ T9] usb 8-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 49.899162][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 47, changing to 7 [ 49.901087][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.901108][ T9] usb 8-1: Product: 藩穁꼧甐穔䥾ᗕ幍㏮䨛꣛⎿䄳閡될晥⓾ᕺ凰Ҝ卭ᒡ⯸⑋ᵆ뗁刪ߠ噣떚㰦뼰셀᥊女脣滚釾燑 [ 49.901151][ T9] usb 8-1: Manufacturer: ф [ 49.901164][ T9] usb 8-1: SerialNumber: ᕏ쁊鶮턵㗟ጹ诌䪢঳㸶辱艉쭩飺賍⭑⹗ṡྋꣻ傤ꋅḶ緽⟝섻쏂洮䜮ךּ褅쫈埡⥳Ᾰ쫲Ỳퟙ豻쾬ҍᣎ쫣纝檢硅ܽ攴牅毷鲳쐂礊꟮멲⇳㇈귇律堯ކ燜㧯硸ᐦ浰䶊倇﹌펧唄㗏끠鱩➇ㄇ䚍⢻鱶ừ屷碀簴咳隿ࢭ둒唂듼탇籞ᣵ⇄쑠 [ 50.127567][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 50.127860][ T9] usb 8-1: MIDIStreaming interface descriptor not found [ 50.139119][ T5972] FAULT_INJECTION: forcing a failure. [ 50.139119][ T5972] name failslab, interval 1, probability 0, space 0, times 0 [ 50.139139][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 50.139152][ T5972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.139159][ T5972] Call Trace: [ 50.139163][ T5972] [ 50.139168][ T5972] dump_stack_lvl+0x100/0x190 [ 50.139190][ T5972] should_fail_ex.cold+0x5/0xa [ 50.139209][ T5972] should_failslab+0xc2/0x120 [ 50.139223][ T5972] __kvmalloc_node_noprof+0x113/0x9b0 [ 50.139243][ T5972] ? __sys_bpf+0xd3d/0x4b60 [ 50.139256][ T5972] __sys_bpf+0xd3d/0x4b60 [ 50.139284][ T5972] ? __pfx___sys_bpf+0x10/0x10 [ 50.139299][ T5972] ? find_held_lock+0x2b/0x80 [ 50.139312][ T5972] ? futex_wake+0x4ea/0x5e0 [ 50.139338][ T5972] ? percpu_counter_add_batch+0xb9/0x230 [ 50.139356][ T5972] ? errseq_sample+0x51/0x70 [ 50.139370][ T5972] ? file_init_path+0x48e/0x670 [ 50.139396][ T5972] ? __x64_sys_futex+0x34f/0x4d0 [ 50.139410][ T5972] ? __x64_sys_futex+0x358/0x4d0 [ 50.139424][ T5972] ? __sys_socket+0xac/0x260 [ 50.139442][ T5972] ? xfd_validate_state+0x129/0x190 [ 50.139459][ T5972] ? __x64_sys_bpf+0xce/0x140 [ 50.139469][ T5972] __x64_sys_bpf+0xce/0x140 [ 50.139480][ T5972] ? do_syscall_64+0xae/0x790 [ 50.139493][ T5972] do_syscall_64+0x123/0x790 [ 50.139506][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.139518][ T5972] RIP: 0033:0x7f9a3d79f559 [ 50.139529][ T5972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.139540][ T5972] RSP: 002b:00007f9a3e63b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.139551][ T5972] RAX: ffffffffffffffda RBX: 00007f9a3da25fa0 RCX: 00007f9a3d79f559 [ 50.139559][ T5972] RDX: 0000000000000020 RSI: 0000200000001240 RDI: 0000000000000004 [ 50.139566][ T5972] RBP: 00007f9a3d836b50 R08: 0000000000000000 R09: 0000000000000000 [ 50.139572][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.139579][ T5972] R13: 00007f9a3da26038 R14: 00007f9a3da25fa0 R15: 00007ffe5cd52cc8 [ 50.139594][ T5972] [ 50.191776][ T9] usb 8-1: USB disconnect, device number 2 [ 50.258997][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 50.478912][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 50.735015][ T5795] Bluetooth: hci0: command tx timeout [ 50.735050][ T5795] Bluetooth: hci1: command tx timeout [ 50.735128][ T5791] Bluetooth: hci3: command tx timeout [ 50.878304][ T6001] XFS (mtdblock0): Invalid superblock magic number [ 51.267174][ T6017] capability: warning: `syz.3.23' uses 32-bit capabilities (legacy support in use) [ 51.334102][ T6022] process 'syz.3.24' launched './file0' with NULL argv: empty string added [ 51.334246][ T43] kauditd_printk_skb: 124 callbacks suppressed [ 51.334255][ T43] audit: type=1400 audit(1793604854.959:288): avc: denied { execute } for pid=6019 comm="syz.3.24" name="file0" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.336046][ T43] audit: type=1400 audit(1793604854.959:289): avc: denied { execute_no_trans } for pid=6019 comm="syz.3.24" path="/5/file0" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.374978][ T5182] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.461241][ T43] audit: type=1400 audit(1793604855.089:290): avc: denied { create } for pid=6028 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.462784][ T43] audit: type=1400 audit(1793604855.089:291): avc: denied { ioctl } for pid=6028 comm="syz.3.27" path="socket:[9602]" dev="sockfs" ino=9602 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.463141][ T43] audit: type=1400 audit(1793604855.089:292): avc: denied { write } for pid=6028 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.463864][ T6029] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 51.469085][ T6029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.471112][ T6029] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 51.508856][ T43] audit: type=1400 audit(1793604855.139:293): avc: denied { append } for pid=6030 comm="syz.3.28" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.524783][ T5182] usb 6-1: Using ep0 maxpacket: 32 [ 51.525795][ T5182] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 51.526893][ T5182] usb 6-1: config 0 has no interfaces? [ 51.530966][ T5182] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.530987][ T5182] usb 6-1: Product: syz [ 51.530998][ T5182] usb 6-1: Manufacturer: syz [ 51.531009][ T5182] usb 6-1: SerialNumber: syz [ 51.534041][ T5182] usb 6-1: config 0 descriptor?? [ 51.659570][ T6039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29952 sclass=netlink_route_socket pid=6039 comm=syz.2.30 [ 51.668223][ T43] audit: type=1400 audit(1793604855.299:294): avc: denied { read append } for pid=6040 comm="syz.3.31" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.669704][ T6041] program syz.3.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.671432][ T6041] netlink: 'syz.3.31': attribute type 8 has an invalid length. [ 51.671443][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 51.680124][ T6041] IPv6: NLM_F_CREATE should be specified when creating new route [ 51.691724][ T43] audit: type=1400 audit(1793604855.319:295): avc: denied { mount } for pid=6040 comm="syz.3.31" name="/" dev="9p" ino=79691945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.695934][ T43] audit: type=1400 audit(1793604855.329:296): avc: denied { write } for pid=6040 comm="syz.3.31" name="/" dev="9p" ino=79691945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.695962][ T43] audit: type=1400 audit(1793604855.329:297): avc: denied { remove_name } for pid=6040 comm="syz.3.31" name="file0" dev="9p" ino=79691965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.700784][ T6041] syz.3.31 uses obsolete (PF_INET,SOCK_PACKET) [ 51.702854][ T6041] Zero length message leads to an empty skb [ 51.874133][ T6048] netlink: 'syz.2.35': attribute type 9 has an invalid length. [ 51.915165][ T1135] ata1.00: exception Emask 0x0 SAct 0x2000 SErr 0x0 action 0x6 [ 51.915183][ T1135] ata1.00: waking up from sleep [ 51.915219][ T1135] ata1: hard resetting link [ 51.986089][ T6057] capability: warning: `syz.3.38' uses deprecated v2 capabilities in a way that may be insecure [ 52.053745][ T5791] Bluetooth: to_multiplier 0 < 10 [ 52.060022][ T6063] GUP no longer grows the stack in syz.3.40 (6063): 200000007000-20000000a000 (200000004000) [ 52.060043][ T6063] CPU: 3 UID: 0 PID: 6063 Comm: syz.3.40 Not tainted syzkaller #0 PREEMPT(full) [ 52.060056][ T6063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.060063][ T6063] Call Trace: [ 52.060067][ T6063] [ 52.060072][ T6063] dump_stack_lvl+0x100/0x190 [ 52.060094][ T6063] gup_vma_lookup.cold+0x83/0x96 [ 52.060113][ T6063] __get_user_pages+0x252/0x2c20 [ 52.060135][ T6063] ? __pfx___get_user_pages+0x10/0x10 [ 52.060152][ T6063] ? __pfx_down_read_killable+0x10/0x10 [ 52.060167][ T6063] ? lock_acquire+0x1d1/0x380 [ 52.060184][ T6063] ? __pte_offset_map+0x9a/0x470 [ 52.060203][ T6063] __gup_longterm_locked+0x87d/0x16f0 [ 52.060222][ T6063] ? __pte_offset_map+0x1e9/0x470 [ 52.060239][ T6063] ? __pfx___gup_longterm_locked+0x10/0x10 [ 52.060256][ T6063] ? lock_acquire+0x1d1/0x380 [ 52.060271][ T6063] ? gup_fast_fallback+0xa3f/0x29d0 [ 52.060287][ T6063] ? find_held_lock+0x2b/0x80 [ 52.060303][ T6063] gup_fast_fallback+0x1726/0x29d0 [ 52.060340][ T6063] ? __pfx_gup_fast_fallback+0x10/0x10 [ 52.060358][ T6063] ? __lock_acquire+0x5c0/0x1f40 [ 52.060375][ T6063] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 52.060395][ T6063] get_user_pages_fast+0xa7/0xf0 [ 52.060412][ T6063] ? __pfx_get_user_pages_fast+0x10/0x10 [ 52.060428][ T6063] ? lock_acquire+0x1d1/0x380 [ 52.060443][ T6063] ? pipe_lock+0x69/0x80 [ 52.060471][ T6063] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 52.060488][ T6063] ? __mutex_lock+0x267/0x1c10 [ 52.060499][ T6063] ? pipe_lock+0x69/0x80 [ 52.060512][ T6063] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 52.060526][ T6063] ? __pfx___mutex_lock+0x10/0x10 [ 52.060538][ T6063] ? __fget_files+0x34/0x3d0 [ 52.060551][ T6063] ? import_ubuf+0x1b6/0x220 [ 52.060567][ T6063] iov_iter_get_pages2+0xa3/0x100 [ 52.060579][ T6063] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 52.060592][ T6063] ? wait_for_space+0x342/0x410 [ 52.060610][ T6063] __do_sys_vmsplice+0x7dd/0x13c0 [ 52.060630][ T6063] ? find_held_lock+0x2b/0x80 [ 52.060643][ T6063] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 52.060663][ T6063] ? __pfx_futex_wait+0x10/0x10 [ 52.060704][ T6063] ? do_syscall_64+0x123/0x790 [ 52.060715][ T6063] do_syscall_64+0x123/0x790 [ 52.060728][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.060739][ T6063] RIP: 0033:0x7f7666b9f559 [ 52.060749][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.060760][ T6063] RSP: 002b:00007f7667b38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 52.060771][ T6063] RAX: ffffffffffffffda RBX: 00007f7666e25fa0 RCX: 00007f7666b9f559 [ 52.060779][ T6063] RDX: 0000000000000001 RSI: 0000200000001880 RDI: 0000000000000008 [ 52.060785][ T6063] RBP: 00007f7666c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 52.060792][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.060798][ T6063] R13: 00007f7666e26038 R14: 00007f7666e25fa0 R15: 00007ffea7662fb8 [ 52.060813][ T6063] [ 52.174737][ T5876] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.239027][ T1135] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 52.242477][ T1135] ata1.00: configured for UDMA/100 [ 52.242669][ T1135] ata1: EH complete [ 52.327267][ T5876] usb 5-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 52.328085][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.328097][ T5876] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 52.330767][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 52.330782][ T5876] usb 5-1: Product: syz [ 52.330789][ T5876] usb 5-1: Manufacturer: syz [ 52.374574][ T1166] Bluetooth: hci4: Frame reassembly failed (-84) [ 52.424803][ T67] Bluetooth: hci2: command tx timeout [ 52.617870][ T6077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.42'. [ 52.620899][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.641613][ T6079] Bluetooth: MGMT ver 1.23 [ 52.731192][ T6084] ip6t_srh: unknown srh invflags 51E8 [ 52.806740][ T5866] usb 6-1: USB disconnect, device number 2 [ 52.816312][ T5795] Bluetooth: hci3: command tx timeout [ 52.816345][ T5795] Bluetooth: hci1: command tx timeout [ 52.824761][ T5795] Bluetooth: hci0: command tx timeout [ 53.047833][ T34] libceph: connect (1)[c::]:6789 error -101 [ 53.048043][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 53.091329][ T6093] ceph: No mds server is up or the cluster is laggy [ 53.315323][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.47'. [ 53.444789][ T6112] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.477845][ T6124] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.52'. [ 53.478011][ T6124] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.52'. [ 53.478263][ T6123] tipc: Enabling of bearer rejected, failed to enable media [ 53.686124][ T6135] usb usb7: usbfs: process 6135 (syz.1.55) did not claim interface 0 before use [ 53.686768][ T6135] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 54.415730][ T5795] Bluetooth: hci4: command 0x1003 tx timeout [ 54.417887][ T5791] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 54.505601][ T5791] Bluetooth: hci2: command tx timeout [ 54.612546][ T6167] xt_hashlimit: size too large, truncated to 1048576 [ 54.656317][ T67] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 54.753764][ T6173] Bluetooth: MGMT ver 1.23 [ 54.861378][ T6175] can: request_module (can-proto-3) failed. [ 54.894960][ T67] Bluetooth: hci3: command tx timeout [ 54.904810][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 54.904833][ T67] Bluetooth: hci1: command tx timeout [ 54.990796][ T5884] usb 5-1: USB disconnect, device number 2 [ 55.044958][ T6187] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 55.216142][ T42] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 55.265900][ T6197] kvm: MONITOR instruction emulated as NOP! [ 55.380610][ T42] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 55.381575][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 55.381594][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 55.381607][ T42] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 55.382421][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 55.382441][ T42] usb 7-1: SerialNumber: syz [ 55.388781][ T6185] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.388863][ T6185] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.471491][ T6202] xt_hashlimit: overflow, rate too high: 1 [ 55.472220][ T6202] ======================================================= [ 55.472220][ T6202] WARNING: The mand mount option has been deprecated and [ 55.472220][ T6202] and is ignored by this kernel. Remove the mand [ 55.472220][ T6202] option from the mount to silence this warning. [ 55.472220][ T6202] ======================================================= [ 55.562124][ T6204] SELinux: Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped). [ 55.566821][ T6204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.76'. [ 55.590512][ T6184] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.590618][ T6184] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.626633][ T6207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.701501][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 55.804358][ T42] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 55.824962][ T855] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.855297][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.994733][ T6207] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.011303][ T42] usb 7-1: USB disconnect, device number 2 [ 56.012253][ T42] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 56.017439][ T855] usb 6-1: Using ep0 maxpacket: 32 [ 56.024057][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.024256][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.031019][ T855] usb 6-1: unable to get BOS descriptor or descriptor too short [ 56.031047][ T855] usb 6-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 56.037358][ T855] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 56.037379][ T855] usb 6-1: can't read configurations, error -71 [ 56.114829][ T6226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.80'. [ 56.165225][ T6207] usb 5-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 56.166151][ T6207] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 56.166165][ T6207] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 56.167509][ T6207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 56.167522][ T6207] usb 5-1: Product: syz [ 56.167529][ T6207] usb 5-1: Manufacturer: syz [ 56.397238][ T43] kauditd_printk_skb: 74 callbacks suppressed [ 56.397257][ T43] audit: type=1400 audit(1793604860.029:372): avc: denied { mount } for pid=6212 comm="syz.0.79" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.526861][ T6207] usb 5-1: USB disconnect, device number 3 [ 56.601579][ T6241] FAULT_INJECTION: forcing a failure. [ 56.601579][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 56.601610][ T6241] CPU: 1 UID: 0 PID: 6241 Comm: syz.1.82 Not tainted syzkaller #0 PREEMPT(full) [ 56.601633][ T6241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.601644][ T6241] Call Trace: [ 56.601650][ T6241] [ 56.601665][ T6241] dump_stack_lvl+0x100/0x190 [ 56.601703][ T6241] should_fail_ex.cold+0x5/0xa [ 56.601735][ T6241] should_failslab+0xc2/0x120 [ 56.601758][ T6241] __kmalloc_cache_noprof+0x91/0x6d0 [ 56.601787][ T6241] ? ip_vs_rht_alloc+0x56/0x710 [ 56.601818][ T6241] ip_vs_rht_alloc+0x56/0x710 [ 56.601846][ T6241] ? ip_vs_rht_set_thresholds+0xa4/0x290 [ 56.601879][ T6241] ip_vs_conn_tab_alloc+0x3d/0xf0 [ 56.601905][ T6241] ip_vs_add_service+0x16db/0x2240 [ 56.601934][ T6241] ? __ip_vs_service_find+0x4d0/0x9c0 [ 56.601963][ T6241] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 56.601987][ T6241] do_ip_vs_set_ctl+0xb86/0xc90 [ 56.602015][ T6241] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 56.602037][ T6241] ? rcu_is_watching+0x13/0xc0 [ 56.602064][ T6241] ? find_held_lock+0x2b/0x80 [ 56.602086][ T6241] ? nf_sockopt_find.isra.0+0x222/0x290 [ 56.602111][ T6241] ? nf_sockopt_find.isra.0+0x222/0x290 [ 56.602149][ T6241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.602183][ T6241] ? nf_setsockopt+0x8d/0xf0 [ 56.602211][ T6241] nf_setsockopt+0x8d/0xf0 [ 56.602241][ T6241] ip_setsockopt+0xcb/0xf0 [ 56.602287][ T6241] tcp_setsockopt+0xa7/0x100 [ 56.602313][ T6241] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 56.602338][ T6241] do_sock_setsockopt+0xf3/0x1d0 [ 56.602368][ T6241] __sys_setsockopt+0x195/0x220 [ 56.602395][ T6241] __x64_sys_setsockopt+0xbd/0x160 [ 56.602415][ T6241] ? do_syscall_64+0xae/0x790 [ 56.602435][ T6241] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.602454][ T6241] do_syscall_64+0x123/0x790 [ 56.602475][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.602494][ T6241] RIP: 0033:0x7f8120f9f559 [ 56.602511][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.602530][ T6241] RSP: 002b:00007f8121daa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 56.602550][ T6241] RAX: ffffffffffffffda RBX: 00007f8121225fa0 RCX: 00007f8120f9f559 [ 56.602563][ T6241] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000004 [ 56.602573][ T6241] RBP: 00007f8121036b50 R08: 000000000000002c R09: 0000000000000000 [ 56.602585][ T6241] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 56.602597][ T6241] R13: 00007f8121226038 R14: 00007f8121225fa0 R15: 00007fff3b34a5d8 [ 56.602625][ T6241] [ 56.658095][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 56.666309][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.677416][ T6245] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 56.677416][ T6245] program syz.1.85 not setting count and/or reply_len properly [ 56.736106][ T6250] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 56.762688][ T43] audit: type=1400 audit(1793604860.389:373): avc: denied { bind } for pid=6253 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.763739][ T43] audit: type=1400 audit(1793604860.389:374): avc: denied { setopt } for pid=6253 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.919988][ T43] audit: type=1400 audit(1793604860.549:375): avc: denied { unmount } for pid=5784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 56.944708][ T43] audit: type=1400 audit(1793604860.569:376): avc: denied { name_connect } for pid=6242 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 56.953944][ T43] audit: type=1400 audit(1793604860.579:377): avc: denied { listen } for pid=6242 comm="syz.2.84" lport=35274 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.969750][ T6258] comedi comedi4: bad chanlist[1]=0x0000003a chan=58 range length=2 [ 56.975123][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 56.975158][ T67] Bluetooth: hci3: command tx timeout [ 56.975233][ T5182] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.099328][ T43] audit: type=1400 audit(1793604860.729:378): avc: denied { create } for pid=6267 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.134842][ T5795] Bluetooth: hci1: command 0x2016 tx timeout [ 57.136309][ T5182] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 57.137224][ T5182] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.137240][ T5182] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.137251][ T5182] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.137272][ T5182] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.138666][ T5182] usb 8-1: config 0 descriptor?? [ 57.212399][ T6273] sg_write: data in/out 8192/1 bytes for SCSI command 0x2-- guessing data in; [ 57.212399][ T6273] program syz.0.94 not setting count and/or reply_len properly [ 57.269011][ T43] audit: type=1400 audit(1793604860.899:379): avc: denied { create } for pid=6274 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.308064][ T43] audit: type=1400 audit(1793604860.939:380): avc: denied { ioctl } for pid=6274 comm="syz.1.95" path="socket:[11790]" dev="sockfs" ino=11790 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.333446][ T6277] overlay: Unknown parameter 'uid>00000000000000000000' [ 57.425139][ T43] audit: type=1400 audit(1793604861.059:381): avc: denied { write } for pid=6276 comm="syz.0.96" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.546621][ T5182] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 57.568354][ T5182] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 57.657382][ T6294] siw: device registration error -23 [ 57.674995][ T6290] infiniband syz1: set down [ 57.675055][ T6290] infiniband syz1: added ipvlan1 [ 57.686161][ T6290] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 57.686194][ T6290] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 57.686231][ T6290] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 57.704141][ T6290] RDS/IB: syz1: added [ 57.704182][ T6290] smc: adding ib device syz1 with port count 1 [ 57.704199][ T6290] smc: ib device syz1 port 1 has no pnetid [ 57.707684][ T6207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.755425][ T5182] usb 8-1: USB disconnect, device number 3 [ 57.884861][ T41] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 57.974686][ T1482] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.036220][ T41] usb 6-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 58.040644][ T41] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.040660][ T41] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 58.041942][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 58.041954][ T41] usb 6-1: Product: syz [ 58.041962][ T41] usb 6-1: Manufacturer: syz [ 58.148331][ T1482] usb 5-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 58.149183][ T1482] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.149997][ T1482] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.151640][ T1482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.151653][ T1482] usb 5-1: Product: syz [ 58.151660][ T1482] usb 5-1: Manufacturer: syz [ 58.151668][ T1482] usb 5-1: SerialNumber: syz [ 58.155407][ T1482] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 58.161963][ T1482] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 58.173946][ T1482] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 58.396792][ T6315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.401769][ T6207] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.663807][ T6326] netlink: 60 bytes leftover after parsing attributes in process `syz.2.109'. [ 58.665008][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.109'. [ 58.684164][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.684417][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.685559][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.686144][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.686781][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.686865][ T6290] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -71 [ 58.686974][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.687149][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.687326][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.687518][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.687714][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.687768][ T6290] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -71 [ 58.687787][ T6290] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -71 [ 58.687895][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.688270][ C3] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 58.688329][ T6290] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -71 [ 58.689904][ T6207] usb 5-1: USB disconnect, device number 4 [ 58.698695][ T5182] usb 6-1: USB disconnect, device number 5 [ 58.717461][ T6207] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 58.720749][ T6327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6327 comm=syz.2.109 [ 58.722068][ T6207] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 58.722501][ T6207] ti_usb_3410_5052 5-1:2.0: device disconnected [ 58.745063][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.895741][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.299294][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 59.322775][ T6339] netlink: 'syz.1.115': attribute type 12 has an invalid length. [ 59.322797][ T6339] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.115'. [ 59.466893][ T6348] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 59.466909][ T6348] CIFS mount error: No usable UNC path provided in device string! [ 59.466909][ T6348] [ 59.467016][ T6348] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 59.605553][ T6369] bridge0: port 3(syz_tun) entered blocking state [ 59.605857][ T6369] bridge0: port 3(syz_tun) entered disabled state [ 59.605965][ T6369] syz_tun: entered allmulticast mode [ 59.606765][ T6369] syz_tun: entered promiscuous mode [ 59.607239][ T6369] bridge0: port 3(syz_tun) entered blocking state [ 59.607286][ T6369] bridge0: port 3(syz_tun) entered forwarding state [ 59.655283][ T5876] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.698560][ T6207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.777224][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.825124][ T5876] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03 [ 59.825636][ T5876] usb 5-1: Dual-Role OTG device on HNP port [ 59.825856][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.839154][ T5876] gspca_main: spca501-2.14.0 probing 0000:0000 [ 59.841489][ T5876] gspca_spca501: reg write: error -32 [ 59.841498][ T5876] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 59.841573][ T5876] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 59.842242][ T5876] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 59.878555][ T6388] netlink: 'syz.3.131': attribute type 2 has an invalid length. [ 60.149546][ T6407] ipt_ah: unknown flags FF [ 60.345018][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.381754][ T6432] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 60.815837][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.975757][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.082248][ T6461] bond1 (unregistering): Released all slaves [ 61.218695][ T6489] syz.2.166 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.311989][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 61.329751][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 61.331084][ T6500] ip6erspan0: entered promiscuous mode [ 61.378129][ T6521] trusted_key: encrypted_key: insufficient parameters specified [ 61.379801][ T6521] trusted_key: encrypted_key: master key parameter 'defaul13S Ut' is invalid [ 61.397644][ T6527] ip_tables: iptables: counters copy to user failed while replacing table [ 61.397940][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.405441][ T6527] Cannot find del_set index 0 as target [ 61.420496][ T43] kauditd_printk_skb: 4233 callbacks suppressed [ 61.420508][ T43] audit: type=1400 audit(1793604865.049:4615): avc: denied { read } for pid=5781 comm="syz-executor" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.422056][ T43] audit: type=1400 audit(1793604865.049:4616): avc: denied { search } for pid=6528 comm="chmod" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 61.435873][ T43] audit: type=1400 audit(1793604865.059:4617): avc: denied { create } for pid=6516 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 61.446285][ T43] audit: type=1400 audit(1793604865.079:4618): avc: denied { write } for pid=6534 comm="syz.0.177" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 61.447993][ T43] audit: type=1400 audit(1793604865.079:4619): avc: denied { read } for pid=6534 comm="syz.0.177" dev="nsfs" ino=4026532888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 61.449185][ T43] audit: type=1400 audit(1793604865.079:4620): avc: denied { mounton } for pid=6534 comm="syz.0.177" path="/43/debugfs" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 61.457735][ T43] audit: type=1400 audit(1793604865.089:4621): avc: denied { search } for pid=6533 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 61.462242][ T43] audit: type=1400 audit(1793604865.089:4622): avc: denied { search } for pid=6499 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 61.463136][ T43] audit: type=1400 audit(1793604865.089:4623): avc: denied { read } for pid=5781 comm="syz-executor" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.467075][ T43] audit: type=1400 audit(1793604865.099:4624): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 61.865943][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.992702][ T6603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.194'. [ 62.038166][ T6605] batman_adv: batadv0: Adding interface: syz_tun [ 62.038179][ T6605] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.038196][ T6605] batman_adv: batadv0: Interface activated: syz_tun [ 62.258115][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.323367][ T6619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.201'. [ 62.384718][ T6617] netlink: 'syz.1.200': attribute type 5 has an invalid length. [ 62.469226][ T6629] veth1_macvtap: left promiscuous mode [ 62.519346][ T6629] macsec0: entered promiscuous mode [ 62.641265][ T6653] binfmt_misc: register: failed to install interpreter ./file0 [ 62.857319][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'. [ 62.922899][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 62.922965][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 62.923010][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 62.923054][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 62.923099][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'. [ 63.411932][ T6742] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.429524][ T5791] Bluetooth: hci2: Malformed LE Event: 0x1b [ 63.432525][ T6750] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 0, id = 0 [ 63.833886][ T6766] net_ratelimit: 3 callbacks suppressed [ 63.833900][ T6766] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 63.944908][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.972370][ T6774] FAULT_INJECTION: forcing a failure. [ 63.972370][ T6774] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.972391][ T6774] CPU: 3 UID: 0 PID: 6774 Comm: syz.1.258 Not tainted syzkaller #0 PREEMPT(full) [ 63.972417][ T6774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.972424][ T6774] Call Trace: [ 63.972444][ T6774] [ 63.972449][ T6774] dump_stack_lvl+0x100/0x190 [ 63.972480][ T6774] should_fail_ex.cold+0x5/0xa [ 63.972512][ T6774] _copy_to_user+0x32/0xd0 [ 63.972532][ T6774] simple_read_from_buffer+0xcb/0x170 [ 63.972548][ T6774] proc_fail_nth_read+0x1af/0x230 [ 63.972564][ T6774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.972580][ T6774] ? rw_verify_area+0xce/0x6d0 [ 63.972600][ T6774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.972615][ T6774] vfs_read+0x1e4/0xb40 [ 63.972625][ T6774] ? lock_acquire+0x1d1/0x380 [ 63.972642][ T6774] ? __fget_files+0x34/0x3d0 [ 63.972655][ T6774] ? __pfx_vfs_read+0x10/0x10 [ 63.972665][ T6774] ? find_held_lock+0x2b/0x80 [ 63.972677][ T6774] ? __fget_files+0x215/0x3d0 [ 63.972693][ T6774] ? __fget_files+0x21f/0x3d0 [ 63.972711][ T6774] ksys_read+0x12a/0x250 [ 63.972721][ T6774] ? __pfx_ksys_read+0x10/0x10 [ 63.972736][ T6774] do_syscall_64+0x123/0x790 [ 63.972753][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.972765][ T6774] RIP: 0033:0x7f8120f5fd8e [ 63.972775][ T6774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.972785][ T6774] RSP: 002b:00007f8121da9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.972797][ T6774] RAX: ffffffffffffffda RBX: 00007f8121daa6c0 RCX: 00007f8120f5fd8e [ 63.972804][ T6774] RDX: 000000000000000f RSI: 00007f8121daa0a0 RDI: 0000000000000003 [ 63.972810][ T6774] RBP: 00007f8121daa090 R08: 0000000000000000 R09: 0000000000000000 [ 63.972817][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.972823][ T6774] R13: 00007f8121226038 R14: 00007f8121225fa0 R15: 00007fff3b34a5d8 [ 63.972839][ T6774] [ 64.062130][ T6782] netlink: 'syz.2.261': attribute type 2 has an invalid length. [ 64.100367][ T6786] netlink: 'syz.2.264': attribute type 12 has an invalid length. [ 64.100382][ T6786] netlink: 'syz.2.264': attribute type 29 has an invalid length. [ 64.974863][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.057682][ T6845] IPv6: sit1: Disabled Multicast RS [ 65.058277][ T6845] sit1: entered allmulticast mode [ 65.131791][ T5791] Bluetooth: hci1: unexpected cc 0x042d length: 1 < 7 [ 65.131819][ T5791] Bluetooth: hci1: unexpected event for opcode 0x042d [ 65.175722][ T6861] ip_tables: iptables: counters copy to user failed while replacing table [ 65.307945][ T6874] bridge1: entered allmulticast mode [ 65.312554][ T6875] bridge2: entered allmulticast mode [ 65.390211][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 2 < 9 [ 65.390230][ T5791] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 65.525643][ T5791] Bluetooth: hci0: Invalid response length for 0x20a3 [ 65.525662][ T5791] Bluetooth: hci0: unexpected event for opcode 0x20a3 [ 65.576597][ T1482] e1000 0000:00:07.0 eth0: Reset adapter [ 65.577625][ T5791] Bluetooth: hci0: Invalid response length for 0x20a3 [ 65.577641][ T5791] Bluetooth: hci0: unexpected event for opcode 0x20a3 [ 65.670672][ T5791] Bluetooth: unknown link type 97 [ 65.670705][ T5791] Bluetooth: hci1: connection err: -111 [ 65.671600][ T6892] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 65.855255][ T1482] e1000 0000:00:07.0 eth0: Reset adapter [ 66.014895][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.160391][ T5884] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 66.426087][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.450451][ T43] kauditd_printk_skb: 26298 callbacks suppressed [ 66.450486][ T43] audit: type=1400 audit(1793604870.079:30923): avc: denied { search } for pid=6947 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 66.492025][ T43] audit: type=1400 audit(1793604870.119:30924): avc: denied { search } for pid=6948 comm="chmod" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 66.537370][ T43] audit: type=1400 audit(1793604870.169:30925): avc: denied { search } for pid=6949 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 66.543725][ T43] audit: type=1400 audit(1793604870.169:30926): avc: denied { search } for pid=6944 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 66.561117][ T43] audit: type=1400 audit(1793604870.179:30927): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.578356][ T43] audit: type=1400 audit(1793604870.209:30928): avc: denied { search } for pid=6950 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 66.582492][ T43] audit: type=1400 audit(1793604870.209:30929): avc: denied { search } for pid=6951 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 66.584961][ T43] audit: type=1400 audit(1793604870.209:30930): avc: denied { search } for pid=6951 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 66.584991][ T43] audit: type=1400 audit(1793604870.209:30931): avc: denied { search } for pid=6951 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 66.585012][ T43] audit: type=1400 audit(1793604870.209:30932): avc: denied { search } for pid=6951 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 67.055460][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.016245][ T1482] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 68.096901][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.135896][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.454964][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.174869][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.584924][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.214998][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.219943][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.219983][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.221798][ T29] cfg80211: failed to load regulatory.db [ 71.454755][ T43] kauditd_printk_skb: 37475 callbacks suppressed [ 71.454770][ T43] audit: type=1400 audit(1793604875.089:68408): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.454804][ T43] audit: type=1400 audit(1793604875.089:68409): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.454913][ T43] audit: type=1400 audit(1793604875.089:68410): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.455122][ T43] audit: type=1400 audit(1793604875.089:68411): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.455148][ T43] audit: type=1400 audit(1793604875.089:68412): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.455219][ T43] audit: type=1400 audit(1793604875.089:68413): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.455327][ T43] audit: type=1400 audit(1793604875.089:68414): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.455435][ T43] audit: type=1400 audit(1793604875.089:68415): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.455567][ T43] audit: type=1400 audit(1793604875.089:68416): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.455662][ T43] audit: type=1400 audit(1793604875.089:68417): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.856708][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.255149][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.295394][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.617982][ T1044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.335986][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.377208][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.697451][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.337224][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.415623][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.464823][ T43] kauditd_printk_skb: 35783 callbacks suppressed [ 76.464838][ T43] audit: type=1400 audit(1793604880.099:104201): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.465067][ T43] audit: type=1400 audit(1793604880.099:104202): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.465209][ T43] audit: type=1400 audit(1793604880.099:104203): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.465352][ T43] audit: type=1400 audit(1793604880.099:104204): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.465643][ T43] audit: type=1400 audit(1793604880.099:104205): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.465834][ T43] audit: type=1400 audit(1793604880.099:104206): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.466007][ T43] audit: type=1400 audit(1793604880.099:104207): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.466164][ T43] audit: type=1400 audit(1793604880.099:104208): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.466274][ T43] audit: type=1400 audit(1793604880.099:104209): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.466388][ T43] audit: type=1400 audit(1793604880.099:104210): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.454953][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.495070][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.734912][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.387495][ T7033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.387629][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.717370][ T7056] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 79.886916][ T7056] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 79.887057][ T7056] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 79.887134][ T7056] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 79.887205][ T7056] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 79.887274][ T7056] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 79.887344][ T7056] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 79.887414][ T7056] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 79.887499][ T7056] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 79.887578][ T7056] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 79.968036][ T7094] __nla_validate_parse: 66 callbacks suppressed [ 79.968049][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 79.968058][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 80.005833][ T5828] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.005862][ T5828] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.005881][ T5828] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.005898][ T5828] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.015070][ T7048] cgroup: fork rejected by pids controller in /syz0 [ 80.754236][ T7166] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.910357][ T7170] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.910381][ T7170] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.055990][ T7170] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.056083][ T7170] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.090056][ T7177] mmap: syz.3.365 (7177) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.134100][ T7170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.134125][ T7170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.232227][ T7170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.232250][ T7170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.444636][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 186.446823][ C1] rcu: 2-...!: (0 ticks this GP) idle=552c/1/0x4000000000000000 softirq=12111/12111 fqs=0 [ 186.449934][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-7): P5828/1:b..l.. [ 186.453198][ C1] rcu: (detected by 1, t=10502 jiffies, g=7437, q=1261 ncpus=4) [ 186.455588][ C1] Sending NMI from CPU 1 to CPUs 2: [ 186.457247][ C2] NMI backtrace for cpu 2 [ 186.457268][ C2] CPU: 2 UID: 0 PID: 5769 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) [ 186.457288][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.457299][ C2] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0xa/0x20 [ 186.457334][ C2] Code: 00 00 00 e9 38 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 89 f2 <89> fe bf 05 00 00 00 e9 0a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 [ 186.457350][ C2] RSP: 0000:ffffc9000161fd10 EFLAGS: 00000046 [ 186.457365][ C2] RAX: 0000000000000001 RBX: ffff888029840300 RCX: ffffffff89f1fb85 [ 186.457377][ C2] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 186.457387][ C2] RBP: 0000000000000001 R08: 0000000000000001 R09: fffff520002c3f95 [ 186.457398][ C2] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888029840300 [ 186.457408][ C2] R13: ffff88806a228a80 R14: ffffffff89f1fa90 R15: ffff88806a228840 [ 186.457420][ C2] FS: 00007f7ae3f67300(0000) GS:ffff8880d467d000(0000) knlGS:0000000000000000 [ 186.457453][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.457466][ C2] CR2: 00007f7666df62f8 CR3: 00000000258bd000 CR4: 0000000000352ef0 [ 186.457477][ C2] Call Trace: [ 186.457485][ C2] [ 186.457491][ C2] advance_sched+0xf5/0xd20 [ 186.457530][ C2] ? find_held_lock+0x2b/0x80 [ 186.457550][ C2] ? __hrtimer_run_queues+0x361/0x9a0 [ 186.457573][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 186.457591][ C2] ? __pfx_advance_sched+0x10/0x10 [ 186.457614][ C2] __hrtimer_run_queues+0x448/0x9a0 [ 186.457639][ C2] hrtimer_interrupt+0x441/0xaa0 [ 186.457667][ C2] __sysvec_apic_timer_interrupt+0x109/0x470 [ 186.457694][ C2] sysvec_apic_timer_interrupt+0x51/0xc0 [ 186.457722][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 186.457742][ C2] RIP: 0033:0x7f7ae405b3a0 [ 186.457756][ C2] Code: 06 00 00 ff ff ff ff f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 4d b1 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <53> 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d 66 [ 186.457771][ C2] RSP: 002b:00007ffcfafde838 EFLAGS: 00000206 [ 186.457784][ C2] RAX: 00007ffcfafde870 RBX: 000055776f1ee360 RCX: 00007ffcfafde970 [ 186.457795][ C2] RDX: 00007ffcfafde870 RSI: 0000000000000007 RDI: 000055776f1f9ce0 [ 186.457805][ C2] RBP: 00007ffcfafde8e0 R08: 0000000000000008 R09: 0000000000000000 [ 186.457816][ C2] R10: 0000000000003ce0 R11: 0000000000000001 R12: 0000000000000001 [ 186.457826][ C2] R13: 00007ffcfafde970 R14: 0000000000000051 R15: 0000000000000004 [ 186.457844][ C2] [ 186.535210][ C1] task:kworker/u32:2 state:R running task stack:25000 pid:5828 tgid:5828 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 186.539404][ C1] Workqueue: netns cleanup_net [ 186.540926][ C1] Call Trace: [ 186.541978][ C1] [ 186.542914][ C1] __schedule+0x125e/0x6990 [ 186.544381][ C1] ? lock_acquire+0x1d1/0x380 [ 186.545876][ C1] ? do_raw_spin_lock+0x128/0x260 [ 186.547447][ C1] ? __pfx___schedule+0x10/0x10 [ 186.548997][ C1] ? mark_held_locks+0x40/0x70 [ 186.550349][ C1] preempt_schedule_irq+0x4e/0x90 [ 186.551906][ C1] irqentry_exit+0x33f/0xab0 [ 186.553432][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 186.555306][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 186.556936][ C1] Code: 05 0f 01 d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e 69 81 10 0f 82 c9 02 00 00 8b 35 fe 98 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad 00 d1 13 0f 85 09 03 00 00 48 83 c4 [ 186.562878][ C1] RSP: 0018:ffffc900036c7780 EFLAGS: 00000206 [ 186.564806][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 186.567232][ C1] RDX: 0000000000000000 RSI: ffffffff8e601094 RDI: ffffffff8c835380 [ 186.569882][ C1] RBP: ffffffff8ffeb260 R08: 00000000ba61d691 R09: 0000000000000007 [ 186.572323][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 186.574761][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.577214][ C1] ? kernfs_root+0xee/0x2a0 [ 186.578673][ C1] ? kernfs_root+0xee/0x2a0 [ 186.580128][ C1] kernfs_root+0x34/0x2a0 [ 186.581487][ C1] ? kernfs_root+0x23/0x2a0 [ 186.582961][ C1] __kernfs_remove+0x177/0xbc0 [ 186.584469][ C1] ? kernfs_find_ns+0x33e/0x760 [ 186.586009][ C1] kernfs_remove_by_name_ns+0x7c/0x120 [ 186.587702][ C1] remove_files+0x96/0x1c0 [ 186.589141][ C1] sysfs_remove_group+0x8b/0x1b0 [ 186.590712][ C1] sysfs_remove_groups+0x60/0xb0 [ 186.592266][ C1] ib_free_port_attrs+0x10a/0x480 [ 186.593846][ C1] rdma_dev_exit_net+0x2fd/0x6b0 [ 186.595390][ C1] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 186.597118][ C1] ? __pfx___might_resched+0x10/0x10 [ 186.598798][ C1] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 186.600522][ C1] ops_undo_list+0x2ee/0xab0 [ 186.601970][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 186.603565][ C1] ? cleanup_net+0x332/0x920 [ 186.605026][ C1] ? idr_destroy+0x62/0x2e0 [ 186.606453][ C1] cleanup_net+0x499/0x920 [ 186.607863][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 186.609441][ C1] ? process_one_work+0xa2c/0x1b10 [ 186.611045][ C1] ? process_one_work+0x906/0x1b10 [ 186.612648][ C1] process_one_work+0xac7/0x1b10 [ 186.614199][ C1] ? __pfx_process_one_work+0x10/0x10 [ 186.615861][ C1] ? lock_acquire+0x1d1/0x380 [ 186.617341][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 186.618918][ C1] worker_thread+0x5ef/0xe50 [ 186.620412][ C1] ? __pfx_worker_thread+0x10/0x10 [ 186.622048][ C1] ? kthread+0x13a/0x450 [ 186.623395][ C1] ? __pfx_worker_thread+0x10/0x10 [ 186.625005][ C1] kthread+0x373/0x450 [ 186.626284][ C1] ? __pfx_kthread+0x10/0x10 [ 186.627729][ C1] ret_from_fork+0x730/0xd60 [ 186.629373][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 186.630996][ C1] ? __switch_to+0x800/0x10e0 [ 186.632468][ C1] ? __pfx_kthread+0x10/0x10 [ 186.633927][ C1] ret_from_fork_asm+0x1a/0x30 [ 186.635427][ C1] [ 186.636401][ C1] rcu: rcu_preempt kthread starved for 10518 jiffies! g7437 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 186.639857][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 186.643074][ C1] rcu: RCU grace-period kthread stack dump: [ 186.645111][ C1] task:rcu_preempt state:R running task stack:28552 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 186.650181][ C1] Call Trace: [ 186.651245][ C1] [ 186.652185][ C1] __schedule+0x125e/0x6990 [ 186.653651][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 186.655210][ C1] ? __pfx___schedule+0x10/0x10 [ 186.656739][ C1] ? find_held_lock+0x2b/0x80 [ 186.658221][ C1] ? schedule+0x225/0x2c0 [ 186.659591][ C1] schedule+0xdd/0x2c0 [ 186.660885][ C1] schedule_timeout+0x127/0x280 [ 186.662410][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 186.664096][ C1] ? __pfx_process_timeout+0x10/0x10 [ 186.665743][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 186.667550][ C1] ? prepare_to_swait_event+0xdf/0x4f0 [ 186.669246][ C1] rcu_gp_fqs_loop+0x1a9/0x930 [ 186.670736][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 186.672376][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 186.673942][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 186.675561][ C1] ? rcu_is_watching+0x13/0xc0 [ 186.677071][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 186.678951][ C1] rcu_gp_kthread+0x179/0x260 [ 186.680423][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 186.682053][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 186.683847][ C1] ? __kthread_parkme+0x18f/0x230 [ 186.685461][ C1] ? kthread+0x13a/0x450 [ 186.686777][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 186.688422][ C1] kthread+0x373/0x450 [ 186.689738][ C1] ? __pfx_kthread+0x10/0x10 [ 186.691176][ C1] ret_from_fork+0x730/0xd60 [ 186.692624][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 186.694227][ C1] ? __switch_to+0x800/0x10e0 [ 186.695713][ C1] ? __pfx_kthread+0x10/0x10 [ 186.697165][ C1] ret_from_fork_asm+0x1a/0x30 [ 186.698669][ C1] [ 186.699646][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 186.701612][ C1] CPU: 1 UID: 0 PID: 48 Comm: kcompactd0 Not tainted syzkaller #0 PREEMPT(full) [ 186.704417][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.707502][ C1] RIP: 0010:smp_call_function_many_cond+0x8f0/0x18c0 [ 186.709584][ C1] Code: 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 08 49 89 ce 83 e1 07 49 c1 ee 03 49 89 cd 49 01 c6 41 83 c5 03 e8 02 dc 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 ca 0d 00 00 8b 45 08 31 ff [ 186.715446][ C1] RSP: 0018:ffffc90000a1f150 EFLAGS: 00000293 [ 186.717329][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000001 [ 186.719770][ C1] RDX: ffff88801e7b4b00 RSI: ffffffff820169de RDI: 0000000000000005 [ 186.722199][ C1] RBP: ffff88806a2447a0 R08: 0000000000000000 R09: 0000000000000001 [ 186.724639][ C1] R10: ffff88806a1241c7 R11: 0000000000000000 R12: ffffed1003cf6c13 [ 186.727057][ C1] R13: 0000000000000003 R14: ffffed100d4488f5 R15: 0000000000000001 [ 186.729483][ C1] FS: 0000000000000000(0000) GS:ffff8880d457d000(0000) knlGS:0000000000000000 [ 186.732216][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.734251][ C1] CR2: 000000110c4503a3 CR3: 0000000026fe1000 CR4: 0000000000352ef0 [ 186.736687][ C1] Call Trace: [ 186.737734][ C1] [ 186.738664][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 186.740342][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 186.741957][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 186.743906][ C1] ? folio_lock_anon_vma_read+0x348/0xe30 [ 186.745679][ C1] ? rcu_is_watching+0x13/0xc0 [ 186.747164][ C1] ? trace_tlb_flush+0x14b/0x1a0 [ 186.748715][ C1] kvm_flush_tlb_multi+0x238/0x3b0 [ 186.750314][ C1] ? __pfx_kvm_flush_tlb_multi+0x10/0x10 [ 186.752091][ C1] arch_tlbbatch_flush+0x1c9/0x3f0 [ 186.753730][ C1] ? __pfx_arch_tlbbatch_flush+0x10/0x10 [ 186.755468][ C1] ? folio_get_anon_vma+0x15c/0x980 [ 186.757095][ C1] ? __pfx_try_to_migrate_one+0x10/0x10 [ 186.758810][ C1] ? __pfx_folio_not_mapped+0x10/0x10 [ 186.760496][ C1] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 186.762389][ C1] try_to_unmap_flush+0x6f/0xf0 [ 186.763909][ C1] migrate_pages_batch+0x2140/0x4700 [ 186.765580][ C1] ? __pfx_compaction_alloc+0x10/0x10 [ 186.767243][ C1] ? __pfx_compaction_free+0x10/0x10 [ 186.769047][ C1] ? __pfx_migrate_pages_batch+0x10/0x10 [ 186.771148][ C1] ? trace_sched_exit_tp+0x120/0x160 [ 186.772819][ C1] ? __schedule+0x1270/0x6990 [ 186.774444][ C1] ? __pfx_remove_migration_pte+0x10/0x10 [ 186.776572][ C1] migrate_pages_sync+0x12c/0x880 [ 186.778395][ C1] ? __pfx_compaction_alloc+0x10/0x10 [ 186.780064][ C1] ? __pfx_compaction_free+0x10/0x10 [ 186.781722][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 186.783525][ C1] ? __pfx_migrate_pages_sync+0x10/0x10 [ 186.785273][ C1] migrate_pages+0x1a79/0x2840 [ 186.786764][ C1] ? __pfx_compaction_alloc+0x10/0x10 [ 186.788472][ C1] ? __pfx_compaction_free+0x10/0x10 [ 186.790142][ C1] ? __pfx_migrate_pages+0x10/0x10 [ 186.791740][ C1] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 186.793693][ C1] ? __pfx___might_resched+0x10/0x10 [ 186.795337][ C1] compact_zone+0x263e/0x4630 [ 186.796834][ C1] ? do_raw_spin_lock+0xf1/0x260 [ 186.798378][ C1] ? __pfx_compact_zone+0x10/0x10 [ 186.799959][ C1] ? lock_acquire+0x1d1/0x380 [ 186.801436][ C1] compact_node+0x17f/0x2c0 [ 186.802859][ C1] ? __pfx_compact_node+0x10/0x10 [ 186.804440][ C1] ? trace_contention_end+0x126/0x160 [ 186.806118][ C1] ? kcompactd+0xa18/0xd20 [ 186.807509][ C1] ? rcu_is_watching+0x13/0xc0 [ 186.809004][ C1] kcompactd+0x6df/0xd20 [ 186.810335][ C1] ? __pfx_kcompactd+0x10/0x10 [ 186.811823][ C1] ? __kthread_parkme+0xbb/0x230 [ 186.813382][ C1] ? rcu_is_watching+0x13/0xc0 [ 186.814873][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 186.816762][ C1] ? __kthread_parkme+0x18f/0x230 [ 186.818329][ C1] ? kthread+0x13a/0x450 [ 186.819648][ C1] ? __pfx_kcompactd+0x10/0x10 [ 186.821149][ C1] kthread+0x373/0x450 [ 186.822419][ C1] ? __pfx_kthread+0x10/0x10 [ 186.823856][ C1] ret_from_fork+0x730/0xd60 [ 186.825314][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 186.826900][ C1] ? __switch_to+0x800/0x10e0 [ 186.828366][ C1] ? __pfx_kthread+0x10/0x10 [ 186.829809][ C1] ret_from_fork_asm+0x1a/0x30 [ 186.831310][ C1]