last executing test programs: 680.163788ms ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000180)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x18, 0x1, 'x'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 592.416753ms ago: executing program 0 (id=1): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x8200, 0x200, 0xa, [0x40]}}}}, 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x8010) 558.972524ms ago: executing program 2 (id=3): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000004e80)=ANY=[@ANYBLOB="1401000030000100000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 514.514729ms ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x40}, 0x8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000540)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, r4}) 470.612981ms ago: executing program 2 (id=5): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000002640)=0x0) read$msr(r1, &(0x7f0000002680)=""/231, 0xe7) io_submit(r3, 0x1, &(0x7f0000002780)=[&(0x7f0000002800)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000002840)='m', 0x1}]) 239.645708ms ago: executing program 2 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x4, 0x2, 0x1000, 0xc, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 90.116367ms ago: executing program 2 (id=7): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000740)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000780)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f00000007c0)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000700)={0x80002000, 0x0, 0xfffffff9}, 0x10) write(r0, &(0x7f0000000840)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) 0s ago: executing program 2 (id=8): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x404c091) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800800000000000000000009500000000000000a2b8f700979c2eaa17eebf00e414733031428133ed708a07c78462ffb4491a0dcf252d567cc34b4b46a327614688b464daae0cb064e9ef6fbf5c50eaf904e88f40732846cbdd3502dcadce3299af151e877b07d2d41475d39d3c3e89842df301ac2557e7e8493b24bff640e782dc16497c5d6d4275a212c24ad217d5d29da3453ba9b06f84de681fd57b54bd891d9d5a284da2c5207820fd51153a98f12339c53b2a118921eb290843953d851ec092acd100"/209], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 0s ago: executing program 0 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x400caed0, &(0x7f0000000a40)="0100000000000000ffffffff") kernel console output (not intermixed with test programs): [ 28.906857][ T43] audit: type=1400 audit(1792044985.000:115): avc: denied { siginh } for pid=5634 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:31103' (ED25519) to the list of known hosts. [ 30.386152][ T43] audit: type=1400 audit(1792044986.480:116): avc: denied { name_bind } for pid=5641 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.422158][ T43] audit: type=1400 audit(1792044986.520:117): avc: denied { execute } for pid=5642 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.422656][ T43] audit: type=1400 audit(1792044986.520:118): avc: denied { execute_no_trans } for pid=5642 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.660989][ T43] audit: type=1400 audit(1792044987.760:119): avc: denied { write } for pid=5643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.705018][ T43] audit: type=1400 audit(1792044987.800:120): avc: denied { write } for pid=5646 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.783920][ T43] audit: type=1400 audit(1792044987.880:121): avc: denied { write } for pid=5649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.851873][ T43] audit: type=1400 audit(1792044987.950:122): avc: denied { write } for pid=5652 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.934536][ T43] audit: type=1400 audit(1792044988.030:123): avc: denied { write } for pid=5655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.977549][ T43] audit: type=1400 audit(1792044988.070:124): avc: denied { write } for pid=5658 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.041622][ T43] audit: type=1400 audit(1792044988.140:125): avc: denied { write } for pid=5661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.581347][ T5642] cgroup: Unknown subsys name 'net' [ 32.681204][ T5642] cgroup: Unknown subsys name 'cpuset' [ 32.683366][ T5642] cgroup: Unknown subsys name 'rlimit' [ 32.925955][ T5688] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.712033][ T5642] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.352498][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 37.352511][ T43] audit: type=1400 audit(1792044993.450:154): avc: denied { execmem } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.548514][ T43] audit: type=1400 audit(1792044993.650:155): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.548952][ T43] audit: type=1400 audit(1792044993.650:156): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.549331][ T43] audit: type=1400 audit(1792044993.650:157): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.559070][ T43] audit: type=1400 audit(1792044993.650:158): avc: denied { ioctl } for pid=5724 comm="syz-executor" path="socket:[2619]" dev="sockfs" ino=2619 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.590288][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.590883][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.591523][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.591614][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.594518][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.594900][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.595345][ T5738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.596470][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.596697][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.596846][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.596965][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.597593][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.597922][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.597944][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.597982][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.598747][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.599931][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.600405][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.606356][ T43] audit: type=1400 audit(1792044993.700:159): avc: denied { read } for pid=5724 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.606699][ T43] audit: type=1400 audit(1792044993.700:160): avc: denied { open } for pid=5724 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.607931][ T43] audit: type=1400 audit(1792044993.700:161): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.608924][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.609917][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.614296][ T43] audit: type=1400 audit(1792044993.710:162): avc: denied { module_request } for pid=5724 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.617265][ T43] audit: type=1400 audit(1792044993.710:163): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.795476][ T5724] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.795957][ T5724] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.796570][ T5724] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.813311][ T5733] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.863179][ T5729] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.877884][ T5728] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.935876][ T5724] infiniband rxe0: set active [ 37.935894][ T5724] infiniband rxe0: added rxe_eth0 [ 37.943373][ T5724] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 37.943394][ T5724] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 37.943415][ T5724] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 37.951305][ T70] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.967692][ T5724] RDS/IB: rxe0: added [ 37.967803][ T5724] smc: adding ib device rxe0 with port count 1 [ 37.967836][ T5724] smc: ib device rxe0 port 1 has no pnetid [ 37.985574][ T70] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.998675][ T5724] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.122555][ T5724] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.158777][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.158821][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.158968][ T5733] bridge_slave_0: entered allmulticast mode [ 38.159738][ T5733] bridge_slave_0: entered promiscuous mode [ 38.180828][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.180897][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.180949][ T5733] bridge_slave_1: entered allmulticast mode [ 38.181945][ T5733] bridge_slave_1: entered promiscuous mode [ 38.227144][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.227165][ T5724] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.236175][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.270757][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.270893][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.270989][ T5729] bridge_slave_0: entered allmulticast mode [ 38.272462][ T5729] bridge_slave_0: entered promiscuous mode [ 38.278296][ T5733] team0: Port device team_slave_0 added [ 38.281270][ T5733] team0: Port device team_slave_1 added [ 38.293862][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.294118][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.294206][ T5729] bridge_slave_1: entered allmulticast mode [ 38.295533][ T5729] bridge_slave_1: entered promiscuous mode [ 38.316286][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.316297][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.316309][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.333387][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.333403][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.333421][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.335648][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.345666][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.410797][ T5724] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.418757][ T5733] hsr_slave_0: entered promiscuous mode [ 38.419354][ T5733] hsr_slave_1: entered promiscuous mode [ 38.421873][ T5729] team0: Port device team_slave_0 added [ 38.424432][ T5729] team0: Port device team_slave_1 added [ 38.443511][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.443560][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.443611][ T5728] bridge_slave_0: entered allmulticast mode [ 38.444634][ T5728] bridge_slave_0: entered promiscuous mode [ 38.464371][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.464413][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.464560][ T5728] bridge_slave_1: entered allmulticast mode [ 38.465330][ T5728] bridge_slave_1: entered promiscuous mode [ 38.473813][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.473822][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.473841][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.487747][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.487757][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.487776][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.507111][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.509076][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.536267][ T5728] team0: Port device team_slave_0 added [ 38.538210][ T5728] team0: Port device team_slave_1 added [ 38.583077][ T5729] hsr_slave_0: entered promiscuous mode [ 38.583526][ T5729] hsr_slave_1: entered promiscuous mode [ 38.583818][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 38.583879][ T5729] Cannot create hsr debugfs directory [ 38.588801][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.588812][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.588833][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.607845][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.607859][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.607880][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.686985][ T5728] hsr_slave_0: entered promiscuous mode [ 38.687734][ T5728] hsr_slave_1: entered promiscuous mode [ 38.688397][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 38.688413][ T5728] Cannot create hsr debugfs directory [ 38.818708][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.823135][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.823500][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.825430][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.841689][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.845096][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.845742][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.849677][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.941996][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.942090][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.942308][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.942351][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.944341][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.946716][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.955659][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.958737][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.959081][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.962562][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.962947][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.963017][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.963111][ T5724] bridge_slave_0: entered allmulticast mode [ 38.964660][ T5724] bridge_slave_0: entered promiscuous mode [ 38.966582][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.966644][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.966698][ T5724] bridge_slave_1: entered allmulticast mode [ 38.967625][ T5724] bridge_slave_1: entered promiscuous mode [ 38.972378][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.977311][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.013813][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.015683][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.029928][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.034808][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.065030][ T5724] team0: Port device team_slave_0 added [ 39.074292][ T5724] team0: Port device team_slave_1 added [ 39.100160][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.100170][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.100183][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.101233][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.103641][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.104232][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.106711][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.107181][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.107189][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.107201][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.121824][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.126885][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.128940][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.132635][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.171306][ T5724] hsr_slave_0: entered promiscuous mode [ 39.172039][ T5724] hsr_slave_1: entered promiscuous mode [ 39.172542][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 39.172560][ T5724] Cannot create hsr debugfs directory [ 39.248534][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.324994][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.360080][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.360193][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.364977][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.378436][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.378643][ T5724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.380691][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.381549][ T5724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.383273][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.384175][ T5724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.386062][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.387279][ T5724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.390766][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.395599][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.395664][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.427819][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.432592][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.440923][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.440989][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.453224][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.453302][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.455203][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.455315][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.470208][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.470284][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.580051][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.605345][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.612603][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.612684][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.613791][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.613872][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.638749][ T5089] Bluetooth: hci3: command tx timeout [ 39.638926][ T5089] Bluetooth: hci2: command tx timeout [ 39.639023][ T5736] Bluetooth: hci1: command tx timeout [ 39.639258][ T5089] Bluetooth: hci0: command tx timeout [ 39.801859][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.838294][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.844034][ T5733] veth0_vlan: entered promiscuous mode [ 39.847594][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.855070][ T5733] veth1_vlan: entered promiscuous mode [ 39.905810][ T5733] veth0_macvtap: entered promiscuous mode [ 39.916710][ T5728] veth0_vlan: entered promiscuous mode [ 39.919899][ T5729] veth0_vlan: entered promiscuous mode [ 39.924077][ T5733] veth1_macvtap: entered promiscuous mode [ 39.931187][ T5728] veth1_vlan: entered promiscuous mode [ 39.934287][ T5729] veth1_vlan: entered promiscuous mode [ 39.946077][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.959982][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.962925][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.982395][ T5729] veth0_macvtap: entered promiscuous mode [ 39.996436][ T5728] veth0_macvtap: entered promiscuous mode [ 39.997993][ T5729] veth1_macvtap: entered promiscuous mode [ 40.009076][ T5728] veth1_macvtap: entered promiscuous mode [ 40.019217][ T5801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.019347][ T5801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.019368][ T5801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.019387][ T5801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.039813][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.060178][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.062756][ T5724] veth0_vlan: entered promiscuous mode [ 40.065868][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.065879][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.073848][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.075305][ T5724] veth1_vlan: entered promiscuous mode [ 40.077535][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.101648][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.101662][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.118588][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.118640][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.118701][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.118730][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.118758][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.118786][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.118813][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.158767][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.174036][ T5724] veth0_macvtap: entered promiscuous mode [ 40.184124][ T5724] veth1_macvtap: entered promiscuous mode [ 40.185870][ T5733] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.203412][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.203424][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.211961][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.216928][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.218427][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.218438][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.238575][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.238591][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.257796][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.257810][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.269658][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.269685][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.269703][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.269721][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.313156][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.313176][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.337936][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.337950][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.405540][ T5887] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.568709][ T5836] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.621280][ T5894] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 40.630374][ T5895] syzkaller0: entered promiscuous mode [ 40.630386][ T5895] syzkaller0: entered allmulticast mode [ 40.633067][ T5895] tipc: Started in network mode [ 40.633081][ T5895] tipc: Node identity e23ea3d93119, cluster identity 4711 [ 40.633688][ T5895] tipc: Enabled bearer , priority 0 [ 40.636501][ T5895] tipc: Resetting bearer [ 40.640635][ T5893] tipc: Resetting bearer [ 40.647736][ T5893] tipc: Disabling bearer [ 40.718745][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 40.720412][ T5836] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 40.721474][ T5836] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 40.721496][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 40.721507][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 40.721519][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 40.721530][ T5836] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 40.721549][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.808938][ T5897] lo: entered allmulticast mode [ 40.812701][ T5896] lo: left allmulticast mode [ 40.934921][ T5901] ------------[ cut here ]------------ [ 40.934931][ T5901] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 40.934936][ T5901] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1a9e/0x22d0, CPU#2: syz.0.9/5901 [ 40.942781][ T5901] Modules linked in: [ 40.944672][ T5901] CPU: 2 UID: 0 PID: 5901 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 40.948176][ T5901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.951245][ T5901] RIP: 0010:__kvm_gpc_refresh+0x1a9e/0x22d0 [ 40.953084][ T5901] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 31 07 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 28 f6 ff ff e8 43 63 88 00 90 <0f> 0b 90 e9 52 f8 ff ff e8 35 63 88 00 48 c7 c6 c0 bb e2 8b 48 89 [ 40.959089][ T5901] RSP: 0018:ffffc90003b47230 EFLAGS: 00010283 [ 40.960971][ T5901] RAX: 000000000000073e RBX: ffffffffffffffff RCX: ffffc9000463b000 [ 40.963386][ T5901] RDX: 0000000000080000 RSI: ffffffff8183f34d RDI: ffff88802cd7a580 [ 40.965984][ T5901] RBP: ffff888000000000 R08: 0000000000000000 R09: 0000000000000001 [ 40.968549][ T5901] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000001001 [ 40.970991][ T5901] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90003b47450 [ 40.973912][ T5901] FS: 00007f6668ea96c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 40.977527][ T5901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.980395][ T5901] CR2: 000000110c2abf02 CR3: 000000005a59c000 CR4: 0000000000352ef0 [ 40.983671][ T5901] Call Trace: [ 40.985125][ T5901] [ 40.986360][ T5901] ? find_held_lock+0x2b/0x80 [ 40.988396][ T5901] ? kvm_xen_set_evtchn_fast+0x874/0xe80 [ 40.990688][ T5901] ? __pfx___mutex_lock+0x10/0x10 [ 40.992822][ T5901] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 40.995124][ T5901] ? lock_acquire+0x1d1/0x380 [ 40.997095][ T5901] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 40.999511][ T5901] kvm_gpc_refresh+0xc9/0x160 [ 41.001456][ T5901] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 41.003704][ T5901] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 41.006170][ T5901] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 41.008517][ T5901] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 41.010896][ T5901] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 41.012941][ T5901] ? stack_depot_save_flags+0x49a/0x9f0 [ 41.015197][ T5901] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 41.017465][ T5901] ? inode_doinit_with_dentry+0x9b7/0x1340 [ 41.019974][ T5901] ? kasan_save_stack+0x3f/0x50 [ 41.021947][ T5901] ? kasan_save_stack+0x30/0x50 [ 41.023762][ T5901] ? __lock_acquire+0x5c0/0x1f40 [ 41.025757][ T5901] ? __lock_acquire+0x5c0/0x1f40 [ 41.027815][ T5901] ? __lock_acquire+0x5c0/0x1f40 [ 41.030003][ T5901] ? __lock_acquire+0x5c0/0x1f40 [ 41.032127][ T5901] ? lock_acquire+0x1d1/0x380 [ 41.034046][ T5901] ? unwind_next_frame+0xbd/0x2090 [ 41.035945][ T5901] ? find_held_lock+0x2b/0x80 [ 41.037748][ T5901] ? is_bpf_text_address+0x8a/0x1a0 [ 41.039968][ T5901] ? is_bpf_text_address+0x8a/0x1a0 [ 41.042109][ T5901] ? bpf_ksym_find+0x128/0x1c0 [ 41.044095][ T5901] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 41.046590][ T5901] ? is_bpf_text_address+0x94/0x1a0 [ 41.049913][ T5901] ? kernel_text_address+0x8d/0x100 [ 41.052077][ T5901] ? __kernel_text_address+0xd/0x30 [ 41.054235][ T5901] ? unwind_get_return_address+0x59/0xa0 [ 41.056551][ T5901] ? arch_stack_walk+0xa6/0xf0 [ 41.058986][ T5901] ? tomoyo_path_number_perm+0x46d/0x580 [ 41.061299][ T5901] ? stack_trace_save+0x8e/0xc0 [ 41.063331][ T5901] ? __pfx_stack_trace_save+0x10/0x10 [ 41.065614][ T5901] ? stack_depot_save_flags+0x27/0x9f0 [ 41.067888][ T5901] ? __lock_acquire+0x5c0/0x1f40 [ 41.070521][ T5901] ? tomoyo_path_number_perm+0x46d/0x580 [ 41.073355][ T5901] kvm_vm_ioctl+0xcac/0x4170 [ 41.075139][ T5836] usb 6-1: usb_control_msg returned -32 [ 41.075160][ T5836] usbtmc 6-1:16.0: can't read capabilities [ 41.080215][ T5901] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 41.082202][ T5901] ? kasan_quarantine_put+0x104/0x240 [ 41.084170][ T5901] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.086326][ T5901] ? find_held_lock+0x2b/0x80 [ 41.088370][ T5901] ? tomoyo_path_number_perm+0x28f/0x580 [ 41.090369][ T5901] ? tomoyo_path_number_perm+0x28f/0x580 [ 41.092086][ T5901] ? tomoyo_path_number_perm+0x188/0x580 [ 41.093867][ T5901] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 41.095661][ T5901] ? __pfx_futex_wait+0x10/0x10 [ 41.097128][ T5901] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.099349][ T5901] ? do_vfs_ioctl+0x226/0x13e0 [ 41.100818][ T5901] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 41.102426][ T5901] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 41.104373][ T5901] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 41.106479][ T5901] ? __fget_files+0x34/0x3d0 [ 41.107959][ T5901] ? selinux_file_ioctl+0x13b/0x290 [ 41.109808][ T5901] ? selinux_file_ioctl+0xb6/0x290 [ 41.111388][ T5901] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 41.113040][ T5901] __x64_sys_ioctl+0x18e/0x210 [ 41.114547][ T5901] do_syscall_64+0x123/0x790 [ 41.115993][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.117858][ T5901] RIP: 0033:0x7f6667f9e559 [ 41.119546][ T5901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.125520][ T5901] RSP: 002b:00007f6668ea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.128145][ T5901] RAX: ffffffffffffffda RBX: 00007f6668225fa0 RCX: 00007f6667f9e559 [ 41.130606][ T5901] RDX: 0000200000000a40 RSI: 00000000400caed0 RDI: 0000000000000004 [ 41.133001][ T5901] RBP: 00007f66680358b0 R08: 0000000000000000 R09: 0000000000000000 [ 41.135403][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.137819][ T5901] R13: 00007f6668226038 R14: 00007f6668225fa0 R15: 00007ffc27c03cc8 [ 41.140320][ T5901] [ 41.141302][ T5901] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 41.143521][ T5901] CPU: 2 UID: 0 PID: 5901 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 41.146249][ T5901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.149298][ T5901] Call Trace: [ 41.150353][ T5901] [ 41.151294][ T5901] dump_stack_lvl+0x100/0x190 [ 41.152770][ T5901] vpanic+0x553/0x970 [ 41.154032][ T5901] ? __pfx_vpanic+0x10/0x10 [ 41.155433][ T5901] panic+0xd1/0xe0 [ 41.156605][ T5901] ? __pfx_panic+0x10/0x10 [ 41.157986][ T5901] check_panic_on_warn.cold+0x19/0x34 [ 41.159598][ T5901] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 41.161222][ T5901] __warn.cold+0x191/0x318 [ 41.162626][ T5901] __report_bug+0x30f/0x440 [ 41.164038][ T5901] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 41.165681][ T5901] ? __pfx___report_bug+0x10/0x10 [ 41.167224][ T5901] ? check_prev_add+0x354/0xe60 [ 41.168714][ T5901] ? __lock_acquire+0xe8b/0x1f40 [ 41.170260][ T5901] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 41.171953][ T5901] report_bug+0xb3/0x220 [ 41.173278][ T5901] ? __kvm_gpc_refresh+0x1a9e/0x22d0 [ 41.174916][ T5901] handle_bug+0x16a/0x2a0 [ 41.176270][ T5901] exc_invalid_op+0x17/0x50 [ 41.177652][ T5901] asm_exc_invalid_op+0x1a/0x20 [ 41.179142][ T5901] RIP: 0010:__kvm_gpc_refresh+0x1a9e/0x22d0 [ 41.180959][ T5901] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 31 07 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 28 f6 ff ff e8 43 63 88 00 90 <0f> 0b 90 e9 52 f8 ff ff e8 35 63 88 00 48 c7 c6 c0 bb e2 8b 48 89 [ 41.186804][ T5901] RSP: 0018:ffffc90003b47230 EFLAGS: 00010283 [ 41.188676][ T5901] RAX: 000000000000073e RBX: ffffffffffffffff RCX: ffffc9000463b000 [ 41.191147][ T5901] RDX: 0000000000080000 RSI: ffffffff8183f34d RDI: ffff88802cd7a580 [ 41.193585][ T5901] RBP: ffff888000000000 R08: 0000000000000000 R09: 0000000000000001 [ 41.196007][ T5901] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000001001 [ 41.198439][ T5901] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90003b47450 [ 41.200876][ T5901] ? __kvm_gpc_refresh+0x1a9d/0x22d0 [ 41.202517][ T5901] ? find_held_lock+0x2b/0x80 [ 41.203948][ T5901] ? kvm_xen_set_evtchn_fast+0x874/0xe80 [ 41.205649][ T5901] ? __pfx___mutex_lock+0x10/0x10 [ 41.207218][ T5901] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 41.208919][ T5901] ? lock_acquire+0x1d1/0x380 [ 41.210385][ T5901] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 41.212210][ T5901] kvm_gpc_refresh+0xc9/0x160 [ 41.213670][ T5901] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 41.215376][ T5901] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 41.217172][ T5901] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 41.218842][ T5901] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 41.220682][ T5901] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 41.222317][ T5901] ? stack_depot_save_flags+0x49a/0x9f0 [ 41.224044][ T5901] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 41.225734][ T5901] ? inode_doinit_with_dentry+0x9b7/0x1340 [ 41.227544][ T5901] ? kasan_save_stack+0x3f/0x50 [ 41.229060][ T5901] ? kasan_save_stack+0x30/0x50 [ 41.230548][ T5901] ? __lock_acquire+0x5c0/0x1f40 [ 41.232065][ T5901] ? __lock_acquire+0x5c0/0x1f40 [ 41.233591][ T5901] ? __lock_acquire+0x5c0/0x1f40 [ 41.235139][ T5901] ? __lock_acquire+0x5c0/0x1f40 [ 41.236681][ T5901] ? lock_acquire+0x1d1/0x380 [ 41.238145][ T5901] ? unwind_next_frame+0xbd/0x2090 [ 41.239721][ T5901] ? find_held_lock+0x2b/0x80 [ 41.241206][ T5901] ? is_bpf_text_address+0x8a/0x1a0 [ 41.242841][ T5901] ? is_bpf_text_address+0x8a/0x1a0 [ 41.244478][ T5901] ? bpf_ksym_find+0x128/0x1c0 [ 41.245960][ T5901] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 41.247843][ T5901] ? is_bpf_text_address+0x94/0x1a0 [ 41.249460][ T5901] ? kernel_text_address+0x8d/0x100 [ 41.251092][ T5901] ? __kernel_text_address+0xd/0x30 [ 41.252686][ T5901] ? unwind_get_return_address+0x59/0xa0 [ 41.254382][ T5901] ? arch_stack_walk+0xa6/0xf0 [ 41.255859][ T5901] ? tomoyo_path_number_perm+0x46d/0x580 [ 41.257553][ T5901] ? stack_trace_save+0x8e/0xc0 [ 41.259049][ T5901] ? __pfx_stack_trace_save+0x10/0x10 [ 41.260737][ T5901] ? stack_depot_save_flags+0x27/0x9f0 [ 41.262430][ T5901] ? __lock_acquire+0x5c0/0x1f40 [ 41.263978][ T5901] ? tomoyo_path_number_perm+0x46d/0x580 [ 41.265727][ T5901] kvm_vm_ioctl+0xcac/0x4170 [ 41.267182][ T5901] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 41.268716][ T5901] ? kasan_quarantine_put+0x104/0x240 [ 41.270348][ T5901] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.271983][ T5901] ? find_held_lock+0x2b/0x80 [ 41.273463][ T5901] ? tomoyo_path_number_perm+0x28f/0x580 [ 41.275164][ T5901] ? tomoyo_path_number_perm+0x28f/0x580 [ 41.276854][ T5901] ? tomoyo_path_number_perm+0x188/0x580 [ 41.278562][ T5901] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 41.280422][ T5901] ? __pfx_futex_wait+0x10/0x10 [ 41.281978][ T5901] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.283816][ T5901] ? do_vfs_ioctl+0x226/0x13e0 [ 41.285306][ T5901] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 41.286860][ T5901] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 41.288817][ T5901] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 41.290889][ T5901] ? __fget_files+0x34/0x3d0 [ 41.292345][ T5901] ? selinux_file_ioctl+0x13b/0x290 [ 41.293933][ T5901] ? selinux_file_ioctl+0xb6/0x290 [ 41.295522][ T5901] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 41.297054][ T5901] __x64_sys_ioctl+0x18e/0x210 [ 41.298542][ T5901] do_syscall_64+0x123/0x790 [ 41.299974][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.301760][ T5901] RIP: 0033:0x7f6667f9e559 [ 41.303152][ T5901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.308881][ T5901] RSP: 002b:00007f6668ea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.311393][ T5901] RAX: ffffffffffffffda RBX: 00007f6668225fa0 RCX: 00007f6667f9e559 [ 41.313765][ T5901] RDX: 0000200000000a40 RSI: 00000000400caed0 RDI: 0000000000000004 [ 41.316151][ T5901] RBP: 00007f66680358b0 R08: 0000000000000000 R09: 0000000000000000 [ 41.318524][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.320841][ T5901] R13: 00007f6668226038 R14: 00007f6668225fa0 R15: 00007ffc27c03cc8 [ 41.323243][ T5901] [ 41.324742][ T5901] Kernel Offset: disabled [ 41.326081][ T5901] Rebooting in 86400 seconds..