last executing test programs: 607.001412ms ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x12) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001640)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x200000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000001540)={0x5, 0xe, 0x100, "77b26687a32d61d0b4ca2c6a7fe06f56181eb09776be5edd2a74984809032c16", 0x2036315a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1\n', 0x2) (fail_nth: 1) 458.354593ms ago: executing program 1 (id=5): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mount$tmpfs(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) writev(r4, &(0x7f0000000100)=[{&(0x7f00000004c0)='5', 0x1}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x2, 0x1, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "38ec00"}, 0x10}, 0x1, 0x0, 0x0, 0x88c0}, 0x4005) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000006) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000140)={r6}) r7 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r7}) close_range(r1, 0xffffffffffffffff, 0x0) 320.640257ms ago: executing program 1 (id=6): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000400dd0000008567000000000000fcffffffffffffff"], 0x18, 0x1000000}, 0x0) 318.390555ms ago: executing program 2 (id=3): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1d, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008040) 318.053661ms ago: executing program 1 (id=7): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x20004004) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x313, 0x7, 0x0, 0x6, 0x4, @random="59691f71853f"}, 0x10) setsockopt(r0, 0x80000001, 0xfffffff9, &(0x7f0000000280)="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", 0x1000) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000001380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x70, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb, 0x66}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ec60f5343e40"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xa40}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "23ed1aa80a75b2fe1b27d38c6502d38c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d4d393d88fb596f2e1b8ba944804726"}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000414}, 0x4e1e0c296de0fe) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001540)={0x400, 0x204, 0x7ff, 0x80, 0x0}, &(0x7f0000001580)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000015c0)={r4, 0xaa, "28764b5ad7aea9ea6f641873294864efe41fc2608f84fff13f3a9540d53031756a55e913d3812885c79475f914f17737149371a416b6e6072c75bf36ee3375b75253a3977e802e369488e007aa41c6d7d927653b94edb3cab17396ded304050f12e318dc8a4e568e74e2e7b14362fe96e0108d8ccde416ba3b1d8553e6d7f316fa60acb7c50aaeb34ec399f7be40e61747cafff87f4ece4e5ce5c8b21a7dfac19fba42d231ce811661d3"}, &(0x7f0000001680)=0xb2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000001880)={0xc, 0x8, 0xfa00, {&(0x7f0000001700)}}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000018c0)=0x4, 0x4) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001900)={0xffffffffffffffff, r2, 0x25, 0x10, @void}, 0x10) ioctl$BTRFS_IOC_ENCODED_WRITE(r7, 0x40809440, &(0x7f0000001a00)={&(0x7f00000019c0)=[{&(0x7f0000001940)="b08479e7e54324a8645d199e1c1b9b5cc9d13e1f6193370dce9dfd8d9421beaab83b41ead321df5bd757fdcb5eee665f020cf9b0626357d507ad595a885ea447069409a1e2b3bc3735bf7f504e93fe694f3459654fc85287e2e0b955fc92", 0x5e}], 0x1, 0x9, 0x0, 0x8, 0x5, 0x4, 0x8, 0x3}) socket$unix(0x1, 0x1, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000001a80)) r8 = syz_open_dev$vcsn(&(0x7f0000001ac0), 0x0, 0x101000) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000001b00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0x12, &(0x7f0000001b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001c00)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, 0x25, r8, 0x8, &(0x7f0000001c40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001c80)={0x3, 0x5, 0x4, 0x6}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000001cc0)=[{0x5, 0x4, 0xb, 0x6}, {0x1, 0x5, 0x8, 0x5}, {0x2, 0x1, 0xa, 0x9}, {0x2, 0x3, 0x8, 0xb}, {0x1, 0x5, 0x0, 0x8}, {0x4, 0x2, 0xf, 0x3}, {0x0, 0x4, 0xf}, {0x2, 0x1, 0xd}, {0x2, 0x2, 0x5, 0x4}, {0x0, 0x3, 0x5, 0xe}], 0x10, 0x10001}, 0x94) ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000001e40)=0x66) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000001e80)=0x0) fcntl$lock(r7, 0x5, &(0x7f0000001ec0)={0x0, 0x1, 0x7, 0xa, r9}) socket$unix(0x1, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001f00), &(0x7f0000001f40)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) 240.206183ms ago: executing program 0 (id=1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fbffffff29000100000000004ffe183f493fca8b19ced998e12a4ef100200000fc000000000000000000000000000001fc020000000000000038867454842030", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf6b6e000000000050001100fe8000000000000000000000000000aaac1e00010000000000000000000000007f000001000000000000000000000000ac14140400000000000000000000000032040000043500000a000200"], 0xa0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0x0, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x50deecda08de2091}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x9, 0xe5ae, 0x42, 0x7e71b34}, {0x8, 0x3, 0x7cb, 0x200, 0xf5b, 0x7}, 0x2000007, 0x80000000, 0x1cd9}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f00000009c0)={0x2, &(0x7f0000000740)=[{}, {}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r12, &(0x7f000046c000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="420f01c90f40730b0f01cab9f00b0000b8322a0000ba000000000f300fc7afbd4400006567450f30c744240007000000c744240260dd47fdc7442406000000000f011424420f01cac4c1e6510dbb000000b9490a00000f32", 0x58}], 0x1, 0x4085924e31a3b01a, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04031220"], 0x7) ioctl$BTRFS_IOC_QGROUP_CREATE(r12, 0x4010942a, &(0x7f0000000140)={0x0, 0x4}) syz_kvm_setup_cpu$x86(r6, r12, &(0x7f0000463000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="26f364663ed809bad10466ed6766c7442400000000006766c7442402070000006766c744240600000000670f011c240f01c80f228266b80d0000000f23c80f21f86635000000000f23f80fc7ada0c9b818018ec0ba4200ed660fe40f", 0x5c}], 0x1, 0x50, &(0x7f0000000100)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0x800000000d}], 0x2) 216.904003ms ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x12) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8, 0x7cc8, 0x0, 0x7, 0x2f, 0xffffffffffffffff}) fcntl$setown(r0, 0x8, r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getpid() r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001640)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x200000) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r4, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000001540)={0x5, 0xe, 0x100, "77b26687a32d61d0b4ca2c6a7fe06f56181eb09776be5edd2a74984809032c16", 0x2036315a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='1\n', 0x2) 140.662093ms ago: executing program 2 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="6be881ddc12d740ed826d914c55ba846e49b1cd3ef38538630a93e447b7d7b63f4c1f963634acf0eed0d819d9daa0e9323f35f6019b442776f2b30d6c69438633cc82a7f0dfa9ef405e111651f3c4fa7c57fac6127be488818f3a4e88181b60652fa1c3047d67f849ea17792faab93c9e47f38cdd9e7593bec9005bd1d037c2626b1f1333e737838cc9f54190133a2c47e216f530c6f4915aa7a3a06936be4509ceef0098cb5cfd9309e82378377d5a350f0485378ee0e7ad9894657f9f5c7ece4e84573a9327318b3065e3519457708a44ee3c922151a08b1060acc7ceee1240f", 0xe1) connect$inet6(r2, &(0x7f0000000500)={0xa, 0xfffd, 0x2, @loopback, 0x6}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000440), 0x1000a) sendfile(r2, r4, &(0x7f0000000080)=0x3, 0xffff) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) bind(r1, &(0x7f0000000340)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r10, 0x800, 0x400, 0x4}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797637d115b7fa774dc77f74052c8c7a30000000001c0004801873796e70726f787900000000040002801400000011000100"/205, @ANYRESOCT=r1, @ANYRESHEX=0x0], 0xcc}}, 0x40000) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002800000000000690788c1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) 140.476944ms ago: executing program 2 (id=9): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0xd, 0x80, "a9501603830f4610e686e09ee2a8f61f1773b52aa54d8e9184c571b90d9480ba", 0x44495658}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/dynamic_events\x00', 0x40000, 0x0) read(r2, &(0x7f0000000200)=""/256, 0x100) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff0000850000000700a162619600000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x12) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001640)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x200000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000001540)={0x5, 0xe, 0x100, "77b26687a32d61d0b4ca2c6a7fe06f56181eb09776be5edd2a74984809032c16", 0x2036315a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1\n', 0x2) (fail_nth: 2) kernel console output (not intermixed with test programs): [ 37.957666][ T42] audit: type=1400 audit(1785612498.472:115): avc: denied { siginh } for pid=5642 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.450180][ T42] audit: type=1400 audit(1785612498.992:116): avc: denied { write } for pid=5647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.520497][ T42] audit: type=1400 audit(1785612499.062:117): avc: denied { write } for pid=5650 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.693290][ T42] audit: type=1400 audit(1785612499.232:118): avc: denied { write } for pid=5653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.754102][ T42] audit: type=1400 audit(1785612499.292:119): avc: denied { write } for pid=5656 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.970806][ T42] audit: type=1400 audit(1785612499.512:120): avc: denied { write } for pid=5659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:56867' (ED25519) to the list of known hosts. [ 42.149805][ T5691] cgroup: Unknown subsys name 'net' [ 42.272206][ T5691] cgroup: Unknown subsys name 'cpuset' [ 42.276205][ T5691] cgroup: Unknown subsys name 'rlimit' [ 42.520741][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.242044][ T5691] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.435757][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 46.435770][ T42] audit: type=1400 audit(1785612506.972:158): avc: denied { execmem } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.617638][ T42] audit: type=1400 audit(1785612507.152:159): avc: denied { create } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.625273][ T42] audit: type=1400 audit(1785612507.152:160): avc: denied { read write } for pid=5736 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.632582][ T42] audit: type=1400 audit(1785612507.152:161): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.639657][ T42] audit: type=1400 audit(1785612507.162:162): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="socket:[2467]" dev="sockfs" ino=2467 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.647103][ T42] audit: type=1400 audit(1785612507.162:163): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[6646]" dev="sockfs" ino=6646 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.661140][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.662066][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.663017][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.665408][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.665448][ T5751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.668722][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.669749][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.669991][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.670638][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.670886][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.673175][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.673192][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.674342][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.674897][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.678653][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.680167][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.682648][ T42] audit: type=1400 audit(1785612507.222:164): avc: denied { read } for pid=5745 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.682819][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.683861][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.685595][ T42] audit: type=1400 audit(1785612507.222:165): avc: denied { open } for pid=5745 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.686390][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.694815][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.701092][ T42] audit: type=1400 audit(1785612507.222:166): avc: denied { mounton } for pid=5745 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.727620][ T42] audit: type=1400 audit(1785612507.222:167): avc: denied { module_request } for pid=5745 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.314934][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.318741][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.321947][ T5737] bridge_slave_0: entered allmulticast mode [ 47.325892][ T5737] bridge_slave_0: entered promiscuous mode [ 47.331647][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.334560][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.337486][ T5736] bridge_slave_0: entered allmulticast mode [ 47.341714][ T5736] bridge_slave_0: entered promiscuous mode [ 47.345546][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.347720][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.350259][ T5736] bridge_slave_1: entered allmulticast mode [ 47.354035][ T5736] bridge_slave_1: entered promiscuous mode [ 47.392873][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.396769][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.400473][ T5737] bridge_slave_1: entered allmulticast mode [ 47.404396][ T5737] bridge_slave_1: entered promiscuous mode [ 47.440162][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.443198][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.446178][ T5745] bridge_slave_0: entered allmulticast mode [ 47.450070][ T5745] bridge_slave_0: entered promiscuous mode [ 47.455001][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.457359][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.459908][ T5745] bridge_slave_1: entered allmulticast mode [ 47.462518][ T5745] bridge_slave_1: entered promiscuous mode [ 47.477809][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.484498][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.488513][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.491906][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.495462][ T5738] bridge_slave_0: entered allmulticast mode [ 47.499754][ T5738] bridge_slave_0: entered promiscuous mode [ 47.516053][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.522323][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.538614][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.541066][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.543370][ T5738] bridge_slave_1: entered allmulticast mode [ 47.546125][ T5738] bridge_slave_1: entered promiscuous mode [ 47.561529][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.571365][ T5737] team0: Port device team_slave_0 added [ 47.581961][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.593267][ T5737] team0: Port device team_slave_1 added [ 47.596656][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.607403][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.612260][ T5736] team0: Port device team_slave_0 added [ 47.646105][ T5736] team0: Port device team_slave_1 added [ 47.649059][ T5745] team0: Port device team_slave_0 added [ 47.651733][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.654969][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.663202][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.668572][ T5738] team0: Port device team_slave_0 added [ 47.678178][ T5738] team0: Port device team_slave_1 added [ 47.681127][ T5745] team0: Port device team_slave_1 added [ 47.683198][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.685578][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.693683][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.725900][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.728680][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.739467][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.750568][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.753450][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.762811][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.776437][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.778799][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.787655][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.793112][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.795329][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.803319][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.823068][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.825247][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.834168][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.838221][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.840977][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.850807][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.865275][ T5737] hsr_slave_0: entered promiscuous mode [ 47.868403][ T5737] hsr_slave_1: entered promiscuous mode [ 47.912301][ T5736] hsr_slave_0: entered promiscuous mode [ 47.914618][ T5736] hsr_slave_1: entered promiscuous mode [ 47.916770][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 47.918690][ T5736] Cannot create hsr debugfs directory [ 47.936123][ T5738] hsr_slave_0: entered promiscuous mode [ 47.938631][ T5738] hsr_slave_1: entered promiscuous mode [ 47.941120][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 47.942908][ T5738] Cannot create hsr debugfs directory [ 47.985688][ T5745] hsr_slave_0: entered promiscuous mode [ 47.989134][ T5745] hsr_slave_1: entered promiscuous mode [ 47.992060][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 47.994433][ T5745] Cannot create hsr debugfs directory [ 48.309896][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.319479][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.322344][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.327050][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.330634][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.334407][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.337146][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.341677][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.382938][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.388719][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.391482][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.395274][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.399800][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.403568][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.406192][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.409944][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.457596][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.463115][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.470528][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.474404][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.477223][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.481713][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.484350][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.488207][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.549913][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.553819][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.556575][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.562427][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.567537][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.572929][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.577516][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.580847][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.584465][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.616603][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.627506][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.630186][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.647215][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.652224][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.654534][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.679278][ T5095] Bluetooth: hci3: command tx timeout [ 48.694715][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.701106][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.703721][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.716285][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.718581][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.740049][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.759860][ T5095] Bluetooth: hci1: command tx timeout [ 48.759941][ T64] Bluetooth: hci2: command tx timeout [ 48.762296][ T5747] Bluetooth: hci0: command tx timeout [ 48.775509][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.784489][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.787295][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.797492][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.803231][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.805884][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.832082][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.844727][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.847006][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.855119][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.857418][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.870605][ T5738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.981163][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.011162][ T5737] veth0_vlan: entered promiscuous mode [ 49.022153][ T5737] veth1_vlan: entered promiscuous mode [ 49.035566][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.044710][ T5737] veth0_macvtap: entered promiscuous mode [ 49.049992][ T5737] veth1_macvtap: entered promiscuous mode [ 49.066135][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.074019][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.106937][ T5745] veth0_vlan: entered promiscuous mode [ 49.110370][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.128503][ T5745] veth1_vlan: entered promiscuous mode [ 49.141750][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.165833][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.168612][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.201855][ T5745] veth0_macvtap: entered promiscuous mode [ 49.206361][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.206675][ T5745] veth1_macvtap: entered promiscuous mode [ 49.209480][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.222186][ T5738] veth0_vlan: entered promiscuous mode [ 49.240363][ T5738] veth1_vlan: entered promiscuous mode [ 49.244651][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.252830][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.261648][ T5736] veth0_vlan: entered promiscuous mode [ 49.275921][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.277560][ T5736] veth1_vlan: entered promiscuous mode [ 49.310317][ T5738] veth0_macvtap: entered promiscuous mode [ 49.321748][ T5738] veth1_macvtap: entered promiscuous mode [ 49.344759][ T5736] veth0_macvtap: entered promiscuous mode [ 49.356353][ T5736] veth1_macvtap: entered promiscuous mode [ 49.361119][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.370184][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.371592][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.372795][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.393564][ T5891] FAULT_INJECTION: forcing a failure. [ 49.393564][ T5891] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.395243][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.398241][ T5891] CPU: 2 UID: 0 PID: 5891 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 49.398257][ T5891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.398264][ T5891] Call Trace: [ 49.398268][ T5891] [ 49.398272][ T5891] dump_stack_lvl+0x100/0x190 [ 49.398290][ T5891] should_fail_ex.cold+0x5/0xa [ 49.398304][ T5891] _copy_from_user+0x2e/0xd0 [ 49.398320][ T5891] kstrtoul_from_user+0xc6/0x1c0 [ 49.398331][ T5891] ? __pfx_kstrtoul_from_user+0x10/0x10 [ 49.398350][ T5891] event_enable_write+0x90/0x340 [ 49.398364][ T5891] ? __pfx_event_enable_write+0x10/0x10 [ 49.398381][ T5891] vfs_write+0x2aa/0x1050 [ 49.398399][ T5891] ? __pfx_event_enable_write+0x10/0x10 [ 49.398414][ T5891] ? __pfx_vfs_write+0x10/0x10 [ 49.398430][ T5891] ? __fget_files+0x215/0x3d0 [ 49.398449][ T5891] ? __fget_files+0x21f/0x3d0 [ 49.398463][ T5891] ksys_write+0x12a/0x250 [ 49.398479][ T5891] ? __pfx_ksys_write+0x10/0x10 [ 49.398499][ T5891] do_syscall_64+0x115/0x870 [ 49.398512][ T5891] ? clear_bhb_loop+0x40/0x90 [ 49.398525][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.398539][ T5891] RIP: 0033:0x7fe63ad9e019 [ 49.398551][ T5891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.398565][ T5891] RSP: 002b:00007fe63bca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.398584][ T5891] RAX: ffffffffffffffda RBX: 00007fe63b025fa0 RCX: 00007fe63ad9e019 [ 49.398593][ T5891] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000006 [ 49.398602][ T5891] RBP: 00007fe63bca3090 R08: 0000000000000000 R09: 0000000000000000 [ 49.398610][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.398619][ T5891] R13: 00007fe63b026038 R14: 00007fe63b025fa0 R15: 00007ffedad7a9f8 [ 49.398642][ T5891] [ 49.479594][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.485806][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.486265][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.489511][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.521013][ T5893] tmpfs: Bad value for 'mpol' [ 49.561251][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.564914][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.579441][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.620931][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.624070][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.631609][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.634768][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.646453][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.649718][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.679941][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.683721][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.686955][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.690950][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.693835][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.700226][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.703955][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.707618][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.711840][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.715145][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.718384][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.747943][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 49.769213][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.773923][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.790164][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.833708][ T5909] event trace: Could not enable event p [ 49.885664][ T5915] FAULT_INJECTION: forcing a failure. [ 49.885664][ T5915] name failslab, interval 1, probability 0, space 0, times 1 [ 49.891738][ T5915] CPU: 3 UID: 0 PID: 5915 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT(full) [ 49.891790][ T5915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.891797][ T5915] Call Trace: [ 49.891803][ T5915] [ 49.891807][ T5915] dump_stack_lvl+0x100/0x190 [ 49.891825][ T5915] should_fail_ex.cold+0x5/0xa [ 49.891840][ T5915] should_failslab+0xc2/0x120 [ 49.891854][ T5915] __kmalloc_noprof+0xfc/0x820 [ 49.891867][ T5915] ? tracepoint_add_func+0x3a8/0x1150 [ 49.891883][ T5915] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 49.891897][ T5915] tracepoint_add_func+0x3a8/0x1150 [ 49.891910][ T5915] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 49.891924][ T5915] ? tracing_update_buffers+0x81/0xf0 [ 49.891936][ T5915] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 49.891956][ T5915] tracepoint_probe_register+0xc4/0x110 [ 49.891969][ T5915] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 49.891983][ T5915] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 49.891998][ T5915] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 49.892015][ T5915] tracing_start_sched_switch+0xaf/0x170 [ 49.892028][ T5915] __ftrace_event_enable_disable+0x557/0x6f0 [ 49.892044][ T5915] event_enable_write+0x262/0x340 [ 49.892058][ T5915] ? __pfx_event_enable_write+0x10/0x10 [ 49.892076][ T5915] vfs_write+0x2aa/0x1050 [ 49.892093][ T5915] ? __pfx_event_enable_write+0x10/0x10 [ 49.892108][ T5915] ? __pfx_vfs_write+0x10/0x10 [ 49.892123][ T5915] ? __fget_files+0x215/0x3d0 [ 49.892137][ T5915] ? __fget_files+0x21f/0x3d0 [ 49.892152][ T5915] ksys_write+0x12a/0x250 [ 49.892168][ T5915] ? __pfx_ksys_write+0x10/0x10 [ 49.892188][ T5915] do_syscall_64+0x115/0x870 [ 49.892200][ T5915] ? clear_bhb_loop+0x40/0x90 [ 49.892213][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.892225][ T5915] RIP: 0033:0x7f522059e019 [ 49.892234][ T5915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.892245][ T5915] RSP: 002b:00007f52214e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.892255][ T5915] RAX: ffffffffffffffda RBX: 00007f5220825fa0 RCX: 00007f522059e019 [ 49.892262][ T5915] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000006 [ 49.892268][ T5915] RBP: 00007f52214e1090 R08: 0000000000000000 R09: 0000000000000000 [ 49.892274][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.892280][ T5915] R13: 00007f5220826038 R14: 00007f5220825fa0 R15: 00007ffc14dbea88 [ 49.892293][ T5915] [ 49.892299][ T5915] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 49.953828][ T5913] kvm: MWAIT instruction emulated as NOP! [ 50.030340][ T5915] ------------[ cut here ]------------ [ 50.032809][ T5915] IS_ERR(old) [ 50.032818][ T5915] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x837/0xd10, CPU#1: syz.3.10/5915 [ 50.037216][ T5915] Modules linked in: [ 50.039704][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT(full) [ 50.042687][ T5915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.045884][ T5915] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 50.047951][ T5915] Code: 09 e8 4d 20 fe ff 48 8d 73 f0 48 c7 c2 c0 30 0c 82 48 c7 c7 80 71 c7 8e e8 c6 c5 e1 ff eb ba bb fe ff ff ff e8 2a 20 fe ff 90 <0f> 0b 90 eb ac e8 1f 20 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 50.054328][ T5915] RSP: 0018:ffffc9000515fba8 EFLAGS: 00010293 [ 50.056244][ T5915] RAX: 0000000000000000 RBX: 00000000fffffffe RCX: ffffffff820c3f2a [ 50.058795][ T5915] RDX: ffff888034248000 RSI: ffffffff820c41b6 RDI: ffff888034248000 [ 50.061702][ T5915] RBP: 00000000fffffffb R08: 0000000000000005 R09: 0000000000000000 [ 50.064304][ T5915] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8212a020 [ 50.066755][ T5915] R13: 0000000000000000 R14: 0000000000010000 R15: ffff88802befd450 [ 50.069346][ T5915] FS: 00007f52214e16c0(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 50.072058][ T5915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.074059][ T5915] CR2: 00007f52205eb700 CR3: 00000000591f6000 CR4: 0000000000352ef0 [ 50.076449][ T5915] Call Trace: [ 50.077504][ T5915] [ 50.078467][ T5915] ? trace_uprobe_register+0x65/0x800 [ 50.080282][ T5915] tracing_stop_cmdline_record+0x66/0xa0 [ 50.082040][ T5915] __ftrace_event_enable_disable+0x6df/0x6f0 [ 50.083967][ T5915] event_enable_write+0x262/0x340 [ 50.085549][ T5915] ? __pfx_event_enable_write+0x10/0x10 [ 50.087289][ T5915] vfs_write+0x2aa/0x1050 [ 50.088711][ T5915] ? __pfx_event_enable_write+0x10/0x10 [ 50.090669][ T5915] ? __pfx_vfs_write+0x10/0x10 [ 50.092192][ T5915] ? __fget_files+0x215/0x3d0 [ 50.093699][ T5915] ? __fget_files+0x21f/0x3d0 [ 50.095184][ T5915] ksys_write+0x12a/0x250 [ 50.096560][ T5915] ? __pfx_ksys_write+0x10/0x10 [ 50.098115][ T5915] do_syscall_64+0x115/0x870 [ 50.099673][ T5915] ? clear_bhb_loop+0x40/0x90 [ 50.101170][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.103015][ T5915] RIP: 0033:0x7f522059e019 [ 50.104430][ T5915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.110679][ T5915] RSP: 002b:00007f52214e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.113303][ T5915] RAX: ffffffffffffffda RBX: 00007f5220825fa0 RCX: 00007f522059e019 [ 50.115748][ T5915] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000006 [ 50.118228][ T5915] RBP: 00007f52214e1090 R08: 0000000000000000 R09: 0000000000000000 [ 50.121034][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.123511][ T5915] R13: 00007f5220826038 R14: 00007f5220825fa0 R15: 00007ffc14dbea88 [ 50.126012][ T5915] [ 50.127000][ T5915] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.129334][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT(full) [ 50.132137][ T5915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.135274][ T5915] Call Trace: [ 50.136344][ T5915] [ 50.137284][ T5915] dump_stack_lvl+0x100/0x190 [ 50.138809][ T5915] vpanic+0x552/0x970 [ 50.140084][ T5915] ? __pfx_vpanic+0x10/0x10 [ 50.141518][ T5915] panic+0xd1/0xe0 [ 50.142704][ T5915] ? __pfx_panic+0x10/0x10 [ 50.144144][ T5915] ? check_panic_on_warn+0x1f/0x90 [ 50.145745][ T5915] check_panic_on_warn.cold+0x19/0x34 [ 50.147422][ T5915] ? tracepoint_probe_unregister+0x837/0xd10 [ 50.149362][ T5915] __warn.cold+0x191/0x318 [ 50.150787][ T5915] __report_bug+0x30f/0x440 [ 50.152204][ T5915] ? tracepoint_probe_unregister+0x837/0xd10 [ 50.154071][ T5915] ? __pfx___report_bug+0x10/0x10 [ 50.155645][ T5915] ? lockdep_hardirqs_on+0x78/0x100 [ 50.157288][ T5915] ? irqentry_exit+0x24d/0xa00 [ 50.158858][ T5915] ? tracepoint_probe_unregister+0x837/0xd10 [ 50.160735][ T5915] ? tracepoint_probe_unregister+0x837/0xd10 [ 50.162598][ T5915] report_bug+0xb2/0x220 [ 50.163961][ T5915] ? tracepoint_probe_unregister+0x837/0xd10 [ 50.165951][ T5915] handle_bug+0x16a/0x2a0 [ 50.167333][ T5915] exc_invalid_op+0x17/0x50 [ 50.168825][ T5915] asm_exc_invalid_op+0x1a/0x20 [ 50.170379][ T5915] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 50.172419][ T5915] Code: 09 e8 4d 20 fe ff 48 8d 73 f0 48 c7 c2 c0 30 0c 82 48 c7 c7 80 71 c7 8e e8 c6 c5 e1 ff eb ba bb fe ff ff ff e8 2a 20 fe ff 90 <0f> 0b 90 eb ac e8 1f 20 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 50.178072][ T5915] RSP: 0018:ffffc9000515fba8 EFLAGS: 00010293 [ 50.179978][ T5915] RAX: 0000000000000000 RBX: 00000000fffffffe RCX: ffffffff820c3f2a [ 50.182436][ T5915] RDX: ffff888034248000 RSI: ffffffff820c41b6 RDI: ffff888034248000 [ 50.184776][ T5915] RBP: 00000000fffffffb R08: 0000000000000005 R09: 0000000000000000 [ 50.187069][ T5915] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8212a020 [ 50.189471][ T5915] R13: 0000000000000000 R14: 0000000000010000 R15: ffff88802befd450 [ 50.191946][ T5915] ? __pfx_probe_sched_switch+0x10/0x10 [ 50.193713][ T5915] ? tracepoint_probe_unregister+0x5aa/0xd10 [ 50.195589][ T5915] ? tracepoint_probe_unregister+0x836/0xd10 [ 50.197480][ T5915] ? tracepoint_probe_unregister+0x836/0xd10 [ 50.199579][ T5915] ? trace_uprobe_register+0x65/0x800 [ 50.201355][ T5915] tracing_stop_cmdline_record+0x66/0xa0 [ 50.203134][ T5915] __ftrace_event_enable_disable+0x6df/0x6f0 [ 50.205019][ T5915] event_enable_write+0x262/0x340 [ 50.206606][ T5915] ? __pfx_event_enable_write+0x10/0x10 [ 50.208359][ T5915] vfs_write+0x2aa/0x1050 [ 50.209728][ T5915] ? __pfx_event_enable_write+0x10/0x10 [ 50.211463][ T5915] ? __pfx_vfs_write+0x10/0x10 [ 50.212983][ T5915] ? __fget_files+0x215/0x3d0 [ 50.214484][ T5915] ? __fget_files+0x21f/0x3d0 [ 50.215978][ T5915] ksys_write+0x12a/0x250 [ 50.217345][ T5915] ? __pfx_ksys_write+0x10/0x10 [ 50.218897][ T5915] do_syscall_64+0x115/0x870 [ 50.220366][ T5915] ? clear_bhb_loop+0x40/0x90 [ 50.221851][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.223715][ T5915] RIP: 0033:0x7f522059e019 [ 50.225135][ T5915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.231066][ T5915] RSP: 002b:00007f52214e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.233700][ T5915] RAX: ffffffffffffffda RBX: 00007f5220825fa0 RCX: 00007f522059e019 [ 50.236162][ T5915] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000006 [ 50.238620][ T5915] RBP: 00007f52214e1090 R08: 0000000000000000 R09: 0000000000000000 [ 50.241079][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.243571][ T5915] R13: 00007f5220826038 R14: 00007f5220825fa0 R15: 00007ffc14dbea88 [ 50.246047][ T5915] [ 50.247607][ T5915] Kernel Offset: disabled [ 50.248977][ T5915] Rebooting in 86400 seconds..