last executing test programs: 1.226072696s ago: executing program 3 (id=4): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d4) set_mempolicy(0x4000, &(0x7f0000000940)=0x2f2, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000005c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000980)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) removexattr(0x0, &(0x7f0000000200)=@known='user.syz\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000880)={0x10001, 0x1ff, 0x6, 0x8, 0xb849, 0x5, 0x400080, 0x0, 0xe91b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) timer_create(0x4, &(0x7f0000000440)={0x0, 0x2a, 0x2, @thr={&(0x7f00000002c0)="38eab6f08b4416eb6b89b51f4e5f477ccc21e9021c32f25c1f5e35da352a2ecbfcd97c879e6cecb9a2aef82f765224112f13a1bbbf265a3e45dfd6bbacb54631a573fcf928f40737c031a8c2322f13f7653f64b3a7b92f2da9fc655418ffebd93756581866ce164e79808fb2431b6929c16e3d5f67e68c8c2f38dc65f0f80f67b2ebfdf63b6a99391fdaa55d4a191ad5f9735b80a0bddf05b125a3b7f729c2b3f148e50dcb0a26d238b6141e0fa795fccedfc2cf7f1b271f1c66d930319fe092fbb5ff036074ce2965c5377b2048ab23de29d79ca10853b094a6ca39bb467936", &(0x7f00000003c0)="fcff24df687047c5656a787fc3facdc0053677b9ab76d54ba9ac7c4c3a699ac9986abf0d040ae9c1b519f20b57bdf7f9116764b2fc03aa004f25299b34b829e07a074a471fec6a52f7968cf5ba41c7528cb8bbaa4da3ca07bef65aaebd32105d8686dbf6a26384765fe8"}}, &(0x7f0000000480)=0x0) timer_getoverrun(r2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dbg/x86/topo/cpus/0\x00', 0x125401, 0x1a4) read(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)='j', 0x1, 0x2404c081, &(0x7f0000000180)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='veno', 0x4) shutdown(r0, 0x1) 1.201476561s ago: executing program 0 (id=1): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r2, @ANYBLOB="07020000000000000000010000002c0108802801078008000600b3000000ec000500ff"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}], 0xc8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$UI_DEV_CREATE(r5, 0x5501) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r1) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x1080}, 0x24008000) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0x24}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1.133621659s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x19, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0x75}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xf000, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) r3 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x100}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) r6 = fsmount(r3, 0x1, 0xa) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x4001}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000400)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', 0x1}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r9, &(0x7f0000000480)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r9, 0x5) write$tun(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005e00c0008"], 0x4a) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000340)='./file0\x00', r5}, 0x18) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x2008, 0x1, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 1.105624581s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f0000000100)='100', 0x3) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7f, 0x4d, 0x2ba8}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x4008, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x1, 0x1, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000300)={0x18, 0x101, 0x2}) 1.04369157s ago: executing program 3 (id=5): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x2c, 0x140f, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x40810) (fail_nth: 5) 1.043384246s ago: executing program 3 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x463}]}}}]}, 0x3c}}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40201) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x1ff) syz_open_procfs(0x0, &(0x7f0000000ac0)='net\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracing\x00', &(0x7f0000000500)='tracefs\x00', 0x2000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000580)='r&s/p ./file0:0', 0xf) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f00000001c0)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x24}}, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x7fff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xfff1, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@setneightbl={0x3c, 0x43, 0x1, 0x0, 0xfffffffe, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_PARMS={0x18, 0x6, 0x0, 0x1, [@NDTPA_IFINDEX={0x8, 0x1, r9}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0xcd0}]}]}, 0x3c}}, 0x0) mkdir(&(0x7f00000002c0)='./cgroup/../file0\x00', 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0x63f, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x8}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)=ANY=[@ANYBLOB="d5020000", @ANYRES16=r10, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000001c480)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r11) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SOCK(r1, 0xab00, r11) 963.590179ms ago: executing program 1 (id=7): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='pvfs2\x00', 0x800004, 0x0) 853.8277ms ago: executing program 0 (id=8): openat$comedi(0xffffffffffffff9c, &(0x7f0000000780)='/dev/comedi3\x00', 0x20000, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000001c80)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="7ba9"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000001cc0), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000001d40)=ANY=[], 0x15) close_range(r0, 0xffffffffffffffff, 0xfd) 130.610612ms ago: executing program 3 (id=9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x340, 0x0, 0xa, 0x148, 0xb8, 0x10, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'wg1\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0xc}, 'veth0_to_hsr\x00', {0x9}}}}, {{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x21, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x7, 0xfb88}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3a0) 130.283394ms ago: executing program 3 (id=10): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000080) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x680, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x18b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000780)=@generic={&(0x7f00000007c0)='./file0/file0\x00', r1}, 0x18) openat$nullb(0xffffffffffffff9c, 0x0, 0x6080, 0x0) io_submit(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000440)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000004c0)={0x4008, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000500)={0x1, 0x800, 0x7}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000880)={0x18, 0x1, 0x0, {0x7fffffffffffffff}}, 0x18) splice(r6, 0x0, r5, 0x0, 0x18, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80c42, 0x1ff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="8500000095000000854a5747ba7cffff0000837b27445c6357ad7a2c58ee4bd43d43901f311ef48abd3ee59c632dc01958f4cde84e80c98fc1f9a231168b10ef801f6992b21f8e"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x50, r8, 0x801, 0x0, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a38feb26fd7b61e1cdccdeac55"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008811}, 0x0) 129.7631ms ago: executing program 1 (id=11): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000016c0)={0x24, 0x464, 0x100, 0x70bd2b, 0x25dfdbfe, "59e8e54c819fa314778556698883f8fbc5"}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x2c04c090) 80.673132ms ago: executing program 3 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000048c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000004900)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000004940)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004980)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f00000049c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000004a00)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r4, &(0x7f0000004a40)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000049c0), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000005a80)=0x2) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000005ac0)={0x1, &(0x7f0000005b00)=[{0x6, 0x0, 0x0, 0x8}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000005b40)={0x1, &(0x7f0000005b80)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000005a40), r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002, 0x0, 0x1}, {0x1004}}}]}}]}]}]}}]}, 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 77.898703ms ago: executing program 1 (id=13): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000016c0)={0x24, 0x464, 0x100, 0x70bd2b, 0x25dfdbfe, "59e8e54c819fa314778556698883f8fbc5"}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x2c04c090) (fail_nth: 1) 308.768µs ago: executing program 1 (id=14): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000016c0)={0x24, 0x464, 0x100, 0x70bd2b, 0x25dfdbfe, "59e8e54c819fa314778556698883f8fbc5"}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x2c04c090) 0s ago: executing program 1 (id=15): r0 = socket$netlink(0x10, 0x3, 0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xf48, 0x0, 0xfffffe3f, 0x10000, 0x0, "4d0000000001000000fbd98ec08100", 0xfff, 0x800}) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x56, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @period={0x5d, 0x5, 0xc, 0x7, 0x7ff, {0x0, 0x6, 0x4, 0x7ff}, 0x0, 0x0}}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x38, 0x5, 0x20000a2e, 0xc00000c, 0x2, 0x3, 0x27ff, 0x400}}) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg/3:0:0:0\x00', 0x20002, 0x0) ioctl$BSG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000340)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x60240) (async, rerun: 32) r5 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r5, &(0x7f00000003c0), 0x48, 0x820b, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000400)=0x7, 0x4) (async) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port1\x00', 0xa3, 0x1b1c07, 0x6, 0x0, 0x1000, 0x0, 0xa3ca}) (async, rerun: 32) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0xc800, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x822b01) write$char_usb(r7, &(0x7f00000000c0)="e2", 0xff0f) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010040aa11f6bbf44d00000000008984", 0x9d}], 0x1) 0s ago: executing program 3 (id=16): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x1000004, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000740)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000780)={0xa, 0x7, 0x1051, @loopback, 0xffffffff}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8500000022"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/panic_on_warn\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/printk\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0 0 0 0\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/kernel/panic_on_warn\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0\n\x00', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r3) socket$rxrpc(0x21, 0x2, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x481c6, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000040)={0x28, 0x3, 0x0, r4, 0x0, 0x0, 0xdead, 0x0, 0x0}) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80e02, 0x0) kernel console output (not intermixed with test programs): [ 28.878634][ T42] audit: type=1400 audit(1793625687.781:113): avc: denied { write } for pid=5682 comm="sh" path="pipe:[7585]" dev="pipefs" ino=7585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 28.878805][ T42] audit: type=1400 audit(1793625687.781:114): avc: denied { rlimitinh } for pid=5682 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.878954][ T42] audit: type=1400 audit(1793625687.781:115): avc: denied { siginh } for pid=5682 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:33349' (ED25519) to the list of known hosts. [ 30.725677][ T42] audit: type=1400 audit(1793625689.631:116): avc: denied { name_bind } for pid=5689 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.753699][ T42] audit: type=1400 audit(1793625689.651:117): avc: denied { execute } for pid=5690 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.754500][ T42] audit: type=1400 audit(1793625689.651:118): avc: denied { execute_no_trans } for pid=5690 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.049408][ T42] audit: type=1400 audit(1793625689.951:119): avc: denied { write } for pid=5691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.088472][ T42] audit: type=1400 audit(1793625689.991:120): avc: denied { write } for pid=5694 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.157596][ T42] audit: type=1400 audit(1793625690.061:121): avc: denied { write } for pid=5697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.198577][ T42] audit: type=1400 audit(1793625690.101:122): avc: denied { write } for pid=5700 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.268008][ T42] audit: type=1400 audit(1793625690.171:123): avc: denied { write } for pid=5703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.317482][ T42] audit: type=1400 audit(1793625690.221:124): avc: denied { write } for pid=5706 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.381372][ T42] audit: type=1400 audit(1793625690.281:125): avc: denied { write } for pid=5709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.123839][ T5690] cgroup: Unknown subsys name 'net' [ 33.217568][ T5690] cgroup: Unknown subsys name 'cpuset' [ 33.222041][ T5690] cgroup: Unknown subsys name 'rlimit' [ 33.416353][ T5762] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.078598][ T5690] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.215785][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 37.215798][ T42] audit: type=1400 audit(1793625696.121:154): avc: denied { execmem } for pid=5768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.431475][ T42] audit: type=1400 audit(1793625696.331:155): avc: denied { create } for pid=5772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.431866][ T42] audit: type=1400 audit(1793625696.331:156): avc: denied { read write } for pid=5772 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.433539][ T42] audit: type=1400 audit(1793625696.331:157): avc: denied { open } for pid=5772 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.443265][ T42] audit: type=1400 audit(1793625696.341:158): avc: denied { ioctl } for pid=5773 comm="syz-executor" path="socket:[2390]" dev="sockfs" ino=2390 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.452265][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.452431][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.454688][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.455569][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.456192][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.456467][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.456890][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.457422][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.457863][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.458757][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.459317][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.459493][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.460047][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.461011][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.461060][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.461459][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.461709][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.461852][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.462327][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.462501][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.472653][ T42] audit: type=1400 audit(1793625696.371:159): avc: denied { read } for pid=5777 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.472682][ T42] audit: type=1400 audit(1793625696.371:160): avc: denied { read } for pid=5774 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.472705][ T42] audit: type=1400 audit(1793625696.371:161): avc: denied { open } for pid=5777 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.472726][ T42] audit: type=1400 audit(1793625696.371:162): avc: denied { mounton } for pid=5777 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.473149][ T42] audit: type=1400 audit(1793625696.371:163): avc: denied { module_request } for pid=5774 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.667824][ T5772] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.668367][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.669004][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.669649][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.719942][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.774110][ T5773] infiniband rxe0: set active [ 37.774123][ T5773] infiniband rxe0: added rxe_eth0 [ 37.784545][ T5773] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 37.784567][ T5773] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 37.784590][ T5773] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 37.798583][ T855] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.803899][ T5773] RDS/IB: rxe0: added [ 37.804014][ T5773] smc: adding ib device rxe0 with port count 1 [ 37.804048][ T5773] smc: ib device rxe0 port 1 has no pnetid [ 37.808601][ T5151] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.811101][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.922926][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.060683][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.060752][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.060832][ T5772] bridge_slave_0: entered allmulticast mode [ 38.061883][ T5772] bridge_slave_0: entered promiscuous mode [ 38.065853][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.065897][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.065956][ T5772] bridge_slave_1: entered allmulticast mode [ 38.066656][ T5772] bridge_slave_1: entered promiscuous mode [ 38.067559][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.099740][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.099784][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.099933][ T5774] bridge_slave_0: entered allmulticast mode [ 38.101071][ T5774] bridge_slave_0: entered promiscuous mode [ 38.109581][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.111678][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.111759][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.111798][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.111850][ T5774] bridge_slave_1: entered allmulticast mode [ 38.112660][ T5774] bridge_slave_1: entered promiscuous mode [ 38.137257][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.137351][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.137430][ T5777] bridge_slave_0: entered allmulticast mode [ 38.138836][ T5777] bridge_slave_0: entered promiscuous mode [ 38.147769][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.149793][ T5772] team0: Port device team_slave_0 added [ 38.149972][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.150048][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.150110][ T5777] bridge_slave_1: entered allmulticast mode [ 38.150847][ T5777] bridge_slave_1: entered promiscuous mode [ 38.158693][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.168552][ T5772] team0: Port device team_slave_1 added [ 38.201291][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.211286][ T5774] team0: Port device team_slave_0 added [ 38.211416][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.212679][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.213821][ T5774] team0: Port device team_slave_1 added [ 38.224698][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.224708][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.224722][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.226575][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.226584][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.226598][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.261331][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.261346][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.261367][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.265152][ T5777] team0: Port device team_slave_0 added [ 38.276771][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.276781][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.276796][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.281668][ T5777] team0: Port device team_slave_1 added [ 38.305928][ T5772] hsr_slave_0: entered promiscuous mode [ 38.306823][ T5772] hsr_slave_1: entered promiscuous mode [ 38.336801][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.336813][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.336826][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.337764][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.337771][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.337785][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.352882][ T5774] hsr_slave_0: entered promiscuous mode [ 38.353529][ T5774] hsr_slave_1: entered promiscuous mode [ 38.353855][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 38.353865][ T5774] Cannot create hsr debugfs directory [ 38.424706][ T5777] hsr_slave_0: entered promiscuous mode [ 38.425288][ T5777] hsr_slave_1: entered promiscuous mode [ 38.425596][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 38.425605][ T5777] Cannot create hsr debugfs directory [ 38.661300][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.667496][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.667939][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.671885][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.678361][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.684492][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.691058][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.693528][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.746922][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.752712][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.779342][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.782558][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.783295][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.787141][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.802569][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.806439][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.815573][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.815652][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.815751][ T5773] bridge_slave_0: entered allmulticast mode [ 38.816873][ T5773] bridge_slave_0: entered promiscuous mode [ 38.819961][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.820049][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.820140][ T5773] bridge_slave_1: entered allmulticast mode [ 38.821391][ T5773] bridge_slave_1: entered promiscuous mode [ 38.847585][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.847682][ T5772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.848098][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.848335][ T5772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.862932][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.864449][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.888409][ T5773] team0: Port device team_slave_0 added [ 38.888438][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.890305][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.890707][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.892115][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.897227][ T5773] team0: Port device team_slave_1 added [ 38.898113][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.898168][ T5774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.898272][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.898316][ T5774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.899588][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.902069][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.917903][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.922572][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.924675][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.927044][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.930024][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.932818][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.953985][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.953996][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.954010][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.955377][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.955386][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.955407][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.002872][ T5773] hsr_slave_0: entered promiscuous mode [ 39.003311][ T5773] hsr_slave_1: entered promiscuous mode [ 39.004021][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 39.004030][ T5773] Cannot create hsr debugfs directory [ 39.120274][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.167204][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.178749][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.182360][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.183229][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.186710][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.192010][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.192287][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.197453][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.199743][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.202890][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.217847][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.217901][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.222306][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.230877][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.230924][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.242374][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.242419][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.258050][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.262075][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.262125][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.302056][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.330548][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.330597][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.344190][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.344237][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.374694][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.389640][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.404693][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.422724][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.422845][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.429871][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.429990][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.546163][ T5786] Bluetooth: hci3: command tx timeout [ 39.546298][ T5786] Bluetooth: hci1: command tx timeout [ 39.546345][ T5786] Bluetooth: hci2: command tx timeout [ 39.546451][ T5781] Bluetooth: hci0: command tx timeout [ 39.587093][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.588874][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.629711][ T5772] veth0_vlan: entered promiscuous mode [ 39.631719][ T5774] veth0_vlan: entered promiscuous mode [ 39.642209][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.643477][ T5772] veth1_vlan: entered promiscuous mode [ 39.644546][ T5774] veth1_vlan: entered promiscuous mode [ 39.671234][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.688969][ T5774] veth0_macvtap: entered promiscuous mode [ 39.695628][ T5772] veth0_macvtap: entered promiscuous mode [ 39.698986][ T5774] veth1_macvtap: entered promiscuous mode [ 39.702837][ T5772] veth1_macvtap: entered promiscuous mode [ 39.722232][ T5777] veth0_vlan: entered promiscuous mode [ 39.727375][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.740910][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.744395][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.748452][ T5777] veth1_vlan: entered promiscuous mode [ 39.758795][ T5773] veth0_vlan: entered promiscuous mode [ 39.762957][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.783238][ T5773] veth1_vlan: entered promiscuous mode [ 39.808316][ T5777] veth0_macvtap: entered promiscuous mode [ 39.812130][ T5777] veth1_macvtap: entered promiscuous mode [ 39.829943][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.829961][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.859045][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.862922][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.862934][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.864089][ T5773] veth0_macvtap: entered promiscuous mode [ 39.867227][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.882987][ T5773] veth1_macvtap: entered promiscuous mode [ 39.886526][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.886538][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.913033][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.913047][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.917956][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.927494][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.949600][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.949614][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.978702][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.978716][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.981826][ T5774] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.009831][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.009845][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.034109][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.034123][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.045912][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.045939][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.045957][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.045975][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.055644][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.055869][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.055893][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.055911][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.055929][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.055947][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.055965][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.055982][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.056000][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.098335][ T5941] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 40.107632][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.107829][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.107987][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.160482][ T5946] FAULT_INJECTION: forcing a failure. [ 40.160482][ T5946] name failslab, interval 1, probability 0, space 0, times 1 [ 40.160504][ T5946] CPU: 3 UID: 0 PID: 5946 Comm: syz.3.5 Not tainted syzkaller #0 PREEMPT(full) [ 40.160518][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.160526][ T5946] Call Trace: [ 40.160537][ T5946] [ 40.160542][ T5946] dump_stack_lvl+0x100/0x190 [ 40.160588][ T5946] should_fail_ex.cold+0x5/0xa [ 40.160607][ T5946] should_failslab+0xc2/0x120 [ 40.160644][ T5946] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 40.160663][ T5946] ? __alloc_skb+0x140/0x710 [ 40.160685][ T5946] __alloc_skb+0x140/0x710 [ 40.160696][ T5946] ? __alloc_skb+0x5b7/0x710 [ 40.160708][ T5946] ? __pfx___alloc_skb+0x10/0x10 [ 40.160720][ T5946] ? __asan_memset+0x23/0x50 [ 40.160739][ T5946] nldev_get_chardev+0x7ac/0xa90 [ 40.160759][ T5946] ? __pfx_nldev_get_chardev+0x10/0x10 [ 40.160779][ T5946] ? __lock_acquire+0x5c0/0x1f40 [ 40.160836][ T5946] ? __pfx___might_resched+0x10/0x10 [ 40.160853][ T5946] ? down_read+0x136/0x4c0 [ 40.160881][ T5946] ? __alloc_skb+0x185/0x710 [ 40.160894][ T5946] ? __sys_sendmsg+0x160/0x210 [ 40.160905][ T5946] ? do_syscall_64+0x123/0x790 [ 40.160916][ T5946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.160929][ T5946] ? __pfx_nldev_get_chardev+0x10/0x10 [ 40.160948][ T5946] rdma_nl_rcv_msg+0x392/0x6f0 [ 40.160968][ T5946] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 40.160984][ T5946] ? __lock_acquire+0x5c0/0x1f40 [ 40.161004][ T5946] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 40.161021][ T5946] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 40.161042][ T5946] ? netlink_deliver_tap+0x1ae/0xb50 [ 40.161059][ T5946] netlink_unicast+0x668/0x950 [ 40.161074][ T5946] ? __pfx_netlink_unicast+0x10/0x10 [ 40.161092][ T5946] netlink_sendmsg+0x9ac/0x10c0 [ 40.161109][ T5946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.161126][ T5946] ? selinux_socket_sendmsg+0x198/0x2f0 [ 40.161144][ T5946] ? ____sys_sendmsg+0xa99/0xc30 [ 40.161159][ T5946] ____sys_sendmsg+0xa99/0xc30 [ 40.161175][ T5946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.161190][ T5946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 40.161210][ T5946] ? lock_acquire+0x1d1/0x380 [ 40.161225][ T5946] ? get_pid_task+0x2a/0x250 [ 40.161237][ T5946] ___sys_sendmsg+0x190/0x1e0 [ 40.161254][ T5946] ? __pfx____sys_sendmsg+0x10/0x10 [ 40.161271][ T5946] ? get_pid_task+0x106/0x250 [ 40.161287][ T5946] ? find_held_lock+0x2b/0x80 [ 40.161308][ T5946] __sys_sendmsg+0x160/0x210 [ 40.161321][ T5946] ? __pfx___sys_sendmsg+0x10/0x10 [ 40.161342][ T5946] do_syscall_64+0x123/0x790 [ 40.161354][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.161366][ T5946] RIP: 0033:0x7f05eb19fb19 [ 40.161375][ T5946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.161386][ T5946] RSP: 002b:00007f05ec0a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.161404][ T5946] RAX: ffffffffffffffda RBX: 00007f05eb425fa0 RCX: 00007f05eb19fb19 [ 40.161411][ T5946] RDX: 0000000000040810 RSI: 00002000000006c0 RDI: 0000000000000003 [ 40.161418][ T5946] RBP: 00007f05ec0a2090 R08: 0000000000000000 R09: 0000000000000000 [ 40.161424][ T5946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.161431][ T5946] R13: 00007f05eb426038 R14: 00007f05eb425fa0 R15: 00007ffdeda785e8 [ 40.161445][ T5946] [ 40.200067][ T5948] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 40.200765][ T5948] FAULT_INJECTION: forcing a failure. [ 40.200765][ T5948] name failslab, interval 1, probability 0, space 0, times 0 [ 40.200782][ T5948] CPU: 3 UID: 0 PID: 5948 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 40.200795][ T5948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.200802][ T5948] Call Trace: [ 40.200806][ T5948] [ 40.200811][ T5948] dump_stack_lvl+0x100/0x190 [ 40.200835][ T5948] should_fail_ex.cold+0x5/0xa [ 40.200853][ T5948] should_failslab+0xc2/0x120 [ 40.200866][ T5948] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 40.200884][ T5948] ? kasan_save_stack+0x3f/0x50 [ 40.200894][ T5948] ? kasan_save_stack+0x30/0x50 [ 40.200905][ T5948] ? shmem_alloc_inode+0x25/0x50 [ 40.200920][ T5948] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 40.200935][ T5948] shmem_alloc_inode+0x25/0x50 [ 40.200949][ T5948] alloc_inode+0x68/0x250 [ 40.200968][ T5948] new_inode+0x22/0x1c0 [ 40.200987][ T5948] shmem_get_inode+0x1e3/0xfe0 [ 40.201006][ T5948] ? __pfx_shmem_get_inode+0x10/0x10 [ 40.201034][ T5948] __shmem_file_setup+0x168/0x460 [ 40.201052][ T5948] ? __pfx___shmem_file_setup+0x10/0x10 [ 40.201070][ T5948] ? __rwlock_init+0x37/0x150 [ 40.201084][ T5948] drm_gem_object_init+0x180/0x1b0 [ 40.201102][ T5948] ? __pfx_drm_gem_object_init+0x10/0x10 [ 40.201118][ T5948] ? vgem_gem_create_object+0x3b/0xb0 [ 40.201137][ T5948] ? __pfx_vgem_gem_create_object+0x10/0x10 [ 40.201157][ T5948] __drm_gem_shmem_create+0x107/0x410 [ 40.201174][ T5948] drm_gem_shmem_create_with_handle+0x28/0x120 [ 40.201192][ T5948] drm_gem_shmem_dumb_create+0x83/0xa0 [ 40.201208][ T5948] ? find_held_lock+0x2b/0x80 [ 40.201221][ T5948] drm_mode_create_dumb+0x272/0x300 [ 40.201237][ T5948] drm_mode_create_dumb_ioctl+0x24/0xe0 [ 40.201251][ T5948] drm_ioctl_kernel+0x1f3/0x3e0 [ 40.201263][ T5948] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 40.201277][ T5948] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 40.201294][ T5948] drm_ioctl+0x5e6/0xc60 [ 40.201308][ T5948] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 40.201322][ T5948] ? __pfx_drm_ioctl+0x10/0x10 [ 40.201333][ T5948] ? __fget_files+0x34/0x3d0 [ 40.201352][ T5948] ? selinux_file_ioctl+0x1e0/0x290 [ 40.201371][ T5948] ? selinux_file_ioctl+0x1e7/0x290 [ 40.201389][ T5948] ? __pfx_drm_ioctl+0x10/0x10 [ 40.201401][ T5948] __x64_sys_ioctl+0x18e/0x210 [ 40.201421][ T5948] do_syscall_64+0x123/0x790 [ 40.201434][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.201446][ T5948] RIP: 0033:0x7f800e99fb19 [ 40.201456][ T5948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.201467][ T5948] RSP: 002b:00007f800f7be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.201479][ T5948] RAX: ffffffffffffffda RBX: 00007f800ec25fa0 RCX: 00007f800e99fb19 [ 40.201487][ T5948] RDX: 0000200000000280 RSI: 00000000c02064b2 RDI: 0000000000000005 [ 40.201493][ T5948] RBP: 00007f800ea37af8 R08: 0000000000000000 R09: 0000000000000000 [ 40.201500][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.201507][ T5948] R13: 00007f800ec26038 R14: 00007f800ec25fa0 R15: 00007fffedec0488 [ 40.201522][ T5948] [ 40.311344][ T5956] block nbd3: Cannot add socket to a running device [ 40.585880][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 40.736550][ T24] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 40.737714][ T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 40.737734][ T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 169, setting to 64 [ 40.737747][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 40.739212][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 40.739225][ T24] usb 5-1: Product: syz [ 40.739233][ T24] usb 5-1: Manufacturer: syz [ 40.739240][ T24] usb 5-1: SerialNumber: syz [ 40.741072][ T24] usb 5-1: config 0 descriptor?? [ 40.742582][ T5958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 40.750457][ T24] usb 5-1: selecting invalid altsetting 0 [ 40.948465][ T5957] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 40.951377][ T24] usb 5-1: USB disconnect, device number 2 [ 41.031576][ T68] block nbd3: Receive control failed (result -32) [ 41.033757][ T5950] block nbd3: shutting down sockets [ 41.067424][ T5961] xt_hashlimit: overflow, rate too high: 1 [ 41.081882][ T5954] orangefs_mount: mount request failed with -4 [ 41.166898][ T5969] FAULT_INJECTION: forcing a failure. [ 41.166898][ T5969] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.166920][ T5969] CPU: 2 UID: 0 PID: 5969 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) [ 41.166933][ T5969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.166941][ T5969] Call Trace: [ 41.166945][ T5969] [ 41.166949][ T5969] dump_stack_lvl+0x100/0x190 [ 41.166972][ T5969] should_fail_ex.cold+0x5/0xa [ 41.166991][ T5969] _copy_from_user+0x2e/0xd0 [ 41.167005][ T5969] copy_msghdr_from_user+0x9f/0x4c0 [ 41.167024][ T5969] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 41.167044][ T5969] ? lock_acquire+0x1d1/0x380 [ 41.167060][ T5969] ? get_pid_task+0x2a/0x250 [ 41.167072][ T5969] ___sys_sendmsg+0x106/0x1e0 [ 41.167090][ T5969] ? __pfx____sys_sendmsg+0x10/0x10 [ 41.167106][ T5969] ? get_pid_task+0x106/0x250 [ 41.167122][ T5969] ? find_held_lock+0x2b/0x80 [ 41.167143][ T5969] __sys_sendmsg+0x160/0x210 [ 41.167156][ T5969] ? __pfx___sys_sendmsg+0x10/0x10 [ 41.167176][ T5969] do_syscall_64+0x123/0x790 [ 41.167189][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.167215][ T5969] RIP: 0033:0x7f800e99fb19 [ 41.167227][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.167238][ T5969] RSP: 002b:00007f800f7be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.167250][ T5969] RAX: ffffffffffffffda RBX: 00007f800ec25fa0 RCX: 00007f800e99fb19 [ 41.167257][ T5969] RDX: 000000002c04c090 RSI: 00002000000017c0 RDI: 0000000000000003 [ 41.167264][ T5969] RBP: 00007f800f7be090 R08: 0000000000000000 R09: 0000000000000000 [ 41.167270][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.167277][ T5969] R13: 00007f800ec26038 R14: 00007f800ec25fa0 R15: 00007fffedec0488 [ 41.167291][ T5969] [ 41.340711][ T5981] ioremap: invalid physical address 8000000000000000 [ 41.340807][ T5981] ------------[ cut here ]------------ [ 41.340815][ T5981] 1 [ 41.340821][ T5981] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller.isra.0.cold+0x59/0xa4, CPU#3: syz.3.16/5981 [ 41.351639][ T5981] Modules linked in: [ 41.353539][ T5981] CPU: 3 UID: 0 PID: 5981 Comm: syz.3.16 Not tainted syzkaller #0 PREEMPT(full) [ 41.357549][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.361847][ T5981] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 41.364629][ T5981] Code: 48 8b 34 24 48 c7 c7 00 2e 0c 8c e8 4a 22 01 00 e9 db 24 9b 00 e8 f0 f1 ec 00 4c 89 ee 48 c7 c7 60 2c 0c 8c e8 31 22 01 00 90 <0f> 0b 90 e9 bb 24 9b 00 e8 d3 f1 ec 00 41 0f b6 d7 4c 89 ee 48 c7 [ 41.373273][ T5981] RSP: 0018:ffffc9000426f8d8 EFLAGS: 00010282 [ 41.376413][ T5981] RAX: 0000000000000032 RBX: 1ffff9200084df1f RCX: 0000000000000000 [ 41.379744][ T5981] RDX: 0000000000000032 RSI: ffffffff81ebf219 RDI: fffff5200084df0c [ 41.383041][ T5981] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 41.386467][ T5981] R10: ffffc9000426f69f R11: 0000000000000001 R12: 8000000000000fff [ 41.389812][ T5981] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 41.393139][ T5981] FS: 00007f05ec0a26c0(0000) GS:ffff8880d477d000(0000) knlGS:0000000000000000 [ 41.396982][ T5981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.399765][ T5981] CR2: 0000000000000000 CR3: 0000000059676000 CR4: 0000000000352ef0 [ 41.403117][ T5981] Call Trace: [ 41.404565][ T5981] [ 41.405900][ T5981] ? register_device+0x1bb/0x6a0 [ 41.408125][ T5981] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 41.410648][ T5981] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 41.412763][ T5981] ? register_device+0x164/0x6a0 [ 41.414436][ T5981] register_device+0x1bb/0x6a0 [ 41.416159][ T5981] phram_setup+0x3b1/0x4c0 [ 41.417623][ T5981] ? __pfx_phram_setup+0x10/0x10 [ 41.419521][ T5981] ? trace_contention_end+0x126/0x160 [ 41.421433][ T5981] ? param_attr_store+0xec/0x300 [ 41.423101][ T5981] ? __pfx___mutex_lock+0x10/0x10 [ 41.424941][ T5981] phram_param_call+0xa6/0xd0 [ 41.426613][ T5981] param_attr_store+0x199/0x300 [ 41.428249][ T5981] ? __pfx_param_attr_store+0x10/0x10 [ 41.430020][ T5981] module_attr_store+0x58/0x80 [ 41.431631][ T5981] ? __pfx_module_attr_store+0x10/0x10 [ 41.433468][ T5981] sysfs_kf_write+0xf2/0x150 [ 41.435190][ T5981] kernfs_fop_write_iter+0x3e0/0x5f0 [ 41.437069][ T5981] ? __pfx_sysfs_kf_write+0x10/0x10 [ 41.438771][ T5981] vfs_write+0x6af/0x1050 [ 41.440273][ T5981] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 41.442239][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 41.443909][ T5981] ? find_held_lock+0x2b/0x80 [ 41.445832][ T5981] ksys_write+0x12a/0x250 [ 41.447495][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 41.449237][ T5981] do_syscall_64+0x123/0x790 [ 41.450816][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.452907][ T5981] RIP: 0033:0x7f05eb19fb19 [ 41.454499][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.461106][ T5981] RSP: 002b:00007f05ec0a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.463804][ T5981] RAX: ffffffffffffffda RBX: 00007f05eb425fa0 RCX: 00007f05eb19fb19 [ 41.466878][ T5981] RDX: 000000000000001e RSI: 0000200000000540 RDI: 0000000000000009 [ 41.470145][ T5981] RBP: 00007f05eb237af8 R08: 0000000000000000 R09: 0000000000000000 [ 41.473113][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.476416][ T5981] R13: 00007f05eb426038 R14: 00007f05eb425fa0 R15: 00007ffdeda785e8 [ 41.479022][ T5981] [ 41.480117][ T5981] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 41.482519][ T5981] CPU: 3 UID: 0 PID: 5981 Comm: syz.3.16 Not tainted syzkaller #0 PREEMPT(full) [ 41.485557][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.488921][ T5981] Call Trace: [ 41.490052][ T5981] [ 41.491057][ T5981] dump_stack_lvl+0x100/0x190 [ 41.492628][ T5981] vpanic+0x2dc/0x6f8 [ 41.493986][ T5981] panic+0xd1/0xe0 [ 41.495311][ T5981] ? __pfx_panic+0x10/0x10 [ 41.496869][ T5981] check_panic_on_warn.cold+0x19/0x34 [ 41.498724][ T5981] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 41.500720][ T5981] __warn.cold+0x191/0x321 [ 41.502271][ T5981] __report_bug+0x30f/0x440 [ 41.503772][ T5981] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 41.505776][ T5981] ? __pfx___report_bug+0x10/0x10 [ 41.507485][ T5981] ? irq_work_queue+0xd1/0x100 [ 41.509085][ T5981] ? __wake_up_klogd+0x7a/0xb0 [ 41.510677][ T5981] ? vprintk_emit+0x1c9/0x6b0 [ 41.512296][ T5981] ? __pfx_vprintk_emit+0x10/0x10 [ 41.513982][ T5981] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 41.516046][ T5981] report_bug+0xb3/0x220 [ 41.517493][ T5981] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 41.519462][ T5981] handle_bug+0x16a/0x2a0 [ 41.520927][ T5981] exc_invalid_op+0x17/0x50 [ 41.522466][ T5981] asm_exc_invalid_op+0x1a/0x20 [ 41.524067][ T5981] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 41.526231][ T5981] Code: 48 8b 34 24 48 c7 c7 00 2e 0c 8c e8 4a 22 01 00 e9 db 24 9b 00 e8 f0 f1 ec 00 4c 89 ee 48 c7 c7 60 2c 0c 8c e8 31 22 01 00 90 <0f> 0b 90 e9 bb 24 9b 00 e8 d3 f1 ec 00 41 0f b6 d7 4c 89 ee 48 c7 [ 41.532541][ T5981] RSP: 0018:ffffc9000426f8d8 EFLAGS: 00010282 [ 41.534529][ T5981] RAX: 0000000000000032 RBX: 1ffff9200084df1f RCX: 0000000000000000 [ 41.537211][ T5981] RDX: 0000000000000032 RSI: ffffffff81ebf219 RDI: fffff5200084df0c [ 41.539799][ T5981] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 41.542423][ T5981] R10: ffffc9000426f69f R11: 0000000000000001 R12: 8000000000000fff [ 41.545038][ T5981] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 41.547635][ T5981] ? vprintk_emit+0x1c9/0x6b0 [ 41.549174][ T5981] ? __ioremap_caller.isra.0.cold+0x58/0xa4 [ 41.551156][ T5981] ? register_device+0x1bb/0x6a0 [ 41.552840][ T5981] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 41.554796][ T5981] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 41.557002][ T5981] ? register_device+0x164/0x6a0 [ 41.558816][ T5981] register_device+0x1bb/0x6a0 [ 41.560504][ T5981] phram_setup+0x3b1/0x4c0 [ 41.562185][ T5981] ? __pfx_phram_setup+0x10/0x10 [ 41.564029][ T5981] ? trace_contention_end+0x126/0x160 [ 41.566006][ T5981] ? param_attr_store+0xec/0x300 [ 41.567867][ T5981] ? __pfx___mutex_lock+0x10/0x10 [ 41.569720][ T5981] phram_param_call+0xa6/0xd0 [ 41.571492][ T5981] param_attr_store+0x199/0x300 [ 41.573290][ T5981] ? __pfx_param_attr_store+0x10/0x10 [ 41.575277][ T5981] module_attr_store+0x58/0x80 [ 41.577069][ T5981] ? __pfx_module_attr_store+0x10/0x10 [ 41.579069][ T5981] sysfs_kf_write+0xf2/0x150 [ 41.580779][ T5981] kernfs_fop_write_iter+0x3e0/0x5f0 [ 41.582690][ T5981] ? __pfx_sysfs_kf_write+0x10/0x10 [ 41.584586][ T5981] vfs_write+0x6af/0x1050 [ 41.586169][ T5981] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 41.588293][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 41.590029][ T5981] ? find_held_lock+0x2b/0x80 [ 41.591760][ T5981] ksys_write+0x12a/0x250 [ 41.593339][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 41.595132][ T5981] do_syscall_64+0x123/0x790 [ 41.596836][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.598980][ T5981] RIP: 0033:0x7f05eb19fb19 [ 41.600625][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.607494][ T5981] RSP: 002b:00007f05ec0a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.610488][ T5981] RAX: ffffffffffffffda RBX: 00007f05eb425fa0 RCX: 00007f05eb19fb19 [ 41.613355][ T5981] RDX: 000000000000001e RSI: 0000200000000540 RDI: 0000000000000009 [ 41.616216][ T5981] RBP: 00007f05eb237af8 R08: 0000000000000000 R09: 0000000000000000 [ 41.619050][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.621916][ T5981] R13: 00007f05eb426038 R14: 00007f05eb425fa0 R15: 00007ffdeda785e8 [ 41.624770][ T5981] [ 41.626573][ T5981] Kernel Offset: disabled [ 41.627938][ T5981] Rebooting in 86400 seconds..