last executing test programs: 923.580143ms ago: executing program 0 (id=6): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x47}], 0x1c) (async) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}, 0x24008043) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x7, 0x10}, 0xc) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) (async) sendmmsg$inet(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}], 0x1, 0x4040040) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002c0001"], 0x28}], 0x1}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) (async) set_mempolicy_home_node(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 854.170102ms ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x2240, 0x0) socket$xdp(0x2c, 0x3, 0x0) 853.826603ms ago: executing program 2 (id=3): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x4}]}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$mtd(&(0x7f00000000c0), 0x51e, 0x141002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000080)='}&-!.[[@\\\x00', 0xa, 0x3) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e07050514"], 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000240)=@ethtool_eeprom={0x7, 0xfffffffe, 0x6}}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001080), 0x101100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0xfffffffffffffffe}]}) write$UHID_INPUT(r5, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r9, &(0x7f00000009c0)="737562d751f911e16c3a65f406a35b36743a6d6f643a", 0x16) close_range(r0, 0xffffffffffffffff, 0x0) 853.508086ms ago: executing program 0 (id=8): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="680000003200050501000000000000000000000054000180500001800900010067617465000000004000028018000200030000000000000000000000000000a6ffffff001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 844.495444ms ago: executing program 3 (id=4): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0205647, &(0x7f0000000940)={0xf010000, @sdr={0x20343059, 0x37f8}}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x6, 0x9, 0xd053}, &(0x7f0000000240)=0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000000140)={&(0x7f00000000c0)=[r5, 0x0], 0x0, 0x6, 0x2, 0x3}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000002c0)={'bridge_slave_1\x00', @multicast}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r7, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r8, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r8, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100004601000001") 764.101737ms ago: executing program 0 (id=9): syz_emit_ethernet(0x25, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a0000000000000100000100001267000000"}}}, 0x0) 763.679824ms ago: executing program 0 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0xff000000, 0x0, 0x45}, 0x40000) 681.940676ms ago: executing program 3 (id=12): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xe, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x4, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xc, 0x0, 0x105, 0x4, 0x4002004c4, 0x1008, 0x8000000000000000, 0xc595, 0x2, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x8000000b3, 0x8d], 0xeeee8000, 0x14d3}) madvise(&(0x7f00004f1000/0x4000)=nil, 0x4000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x70}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 681.3455ms ago: executing program 0 (id=14): write(0xffffffffffffffff, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c102775", 0x1e) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$char_usb(r0, &(0x7f0000000700), 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_emit_vhci(0x0, 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000002}) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = syz_clone(0x4000000, &(0x7f0000001040)="1026a965153fccb956ae1759e756b092c6c8dad15e892b1e00550e6050492b04c426da3e93447ebba5bd2146fc04e8f2ec5efa0da7be762c2de3ef89360111ad5731cb18b7ba39e930e94382659a663f0f44d5784902207632359b840d7a40709c0586d68e6e2c9078c42303378f7bc10ff970253488ed903ceb312195ce4d8f24eeb79a5d4526e07663880850549e32b41131a1cc29a38b9b2f8a3d502736b3d88acee19b37fa515e1c7d113bb5c8a5aa6fd266b360638dae1f", 0xba, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)="5956ceb6d53aef85a1f772809479481ceb34f6fb51ed65b3cf4f5c53012d3eec299ff3097b0566295ef21d1074f1608c23c3faffeaa63935c0207fcec3dbbc63e48a0c3864f2e44e16d4b2b0c2ebe576d55b5325cd8eb56d6ef2766b0b4218cd36bab97e903fc46c12f574da56cdc7631addcb915a4d594bce8607d172d3e1f32e2fdc22e8b5aeb5f97ed5d91b0316dcdc107749e19a2ea7ec2f5f5a3ca6f22ca1e7acd93f63256e3abc6d713518db3cf89415b2c811fd488b72ce97c4d55c4a8a34d608134ccf08247b") ioctl$UBLK_U_CMD_ADD_DEV(r0, 0xc0207504, &(0x7f00000012c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000001280)=@any_dev={0x3, 0x6c4, 0x0, 0x0, 0x1000, 0x5, r7, 0x0, 0xd0}}) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl(r3, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 592.591197ms ago: executing program 3 (id=17): syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="f5ffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) 523.942725ms ago: executing program 3 (id=19): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x8ad00, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x3ff, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000140)='\x00') ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000280)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00p\x89\xd8@Tvn\xc1$\xcf\'\x8a\x8f\x8aN;\xf8*\x05~\xdb\t\x00\x00\x00\x00\x00\x00\x00<\x8d\x05\x9fW\xdb\xb7\xae\b\x03\by\xfaW\xe4g2U\x93\xe0EH\x10ui\x9a\x90\x94\xa7\xfd\x98\xa4\x1fk\xb0\xdc6\xe8\x88\xe0\xf4\n\x8f\xcd\x18^y\v\xf7c\x7fqGU\x0es\xd6\x9a%>\xc2\xa1\x0f\xe1j\xde}\xa1\xb2\xc3\xddA\xa5bF\x1bb]\x01\xa6\xb6-\xd0Z\xd1\x12\x9e\xf24\xdb\xbb\x12\xde\xd8\x87\xbeA\x87\xf77v>\x05\xfb\x83\xba\xed\x98\xc5\xc9\x1c\x17\vC\xbf') syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100000100001267000000001a990000000001000000334411223344"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}]}) chdir(0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9a}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 478.26926ms ago: executing program 3 (id=21): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) write$binfmt_format(r0, &(0x7f0000000380)='0\x00', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b40)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf25a39b000008000300", @ANYRES32=r4, @ANYBLOB="48007a80"], 0x64}, 0x1, 0x0, 0x0, 0x24040801}, 0x40080) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES16=r5, @ANYRESOCT=r0, @ANYRES32=r4, @ANYRESHEX], 0x30}}, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = socket(0x1d, 0x2, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000200)={0x1d, r9, 0x3, {0x2, 0x1}, 0xfe}, 0x18) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r9, 0x3}, 0x18) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r10, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r10, 0x5001, 0x0) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f"], 0x2c}}, 0x20008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x2240, 0x0) 273.235452ms ago: executing program 1 (id=23): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000094ffffff000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) 194.247691ms ago: executing program 1 (id=24): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000d00000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) 133.899359ms ago: executing program 1 (id=25): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x8, [@fwd={0xb}, @restrict={0xb, 0x0, 0x0, 0xb, 0x4}, @union={0x3, 0x4, 0x0, 0x5, 0x0, 0x5, [{0xf}, {0x2, 0x5, 0x546d40bb}, {0x8, 0x1, 0x2}, {0x6, 0x0, 0x9}]}]}, {0x0, [0x2e, 0x0, 0x5f, 0x30, 0x30, 0x1e]}}, &(0x7f0000000100)=""/4096, 0x74, 0x1000, 0x1, 0x5}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001200)={'ip6gre0\x00', &(0x7f0000001180)={'ip6_vti0\x00', 0x0, 0x79, 0x7, 0x2, 0x6, 0x2, @mcast1, @mcast2, 0x7800, 0x7800, 0x5, 0x8}}) sendmsg$nl_route(r2, &(0x7f0000001440)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f0000001240)=@dellinkprop={0x1a4, 0x6d, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x20, 0x200}, [@IFLA_CARRIER={0x5, 0x21, 0xd}, @IFLA_EVENT={0x8, 0x2c, 0x3}, @IFLA_VFINFO_LIST={0x158, 0x16, 0x0, 0x1, [{0xe0, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x401, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xac52, 0x8}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0xa54, 0x2, 0x88a8}}, {0x14, 0x1, {0x8, 0x7ea, 0x1, 0x88a8}}, {0x14, 0x1, {0x9, 0xa2e, 0x4, 0x88a8}}, {0x14, 0x1, {0x1, 0x2b, 0x7, 0x8100}}, {0x14, 0x1, {0x3, 0x597, 0x8, 0x88a8}}, {0x14, 0x1, {0x9, 0xf72, 0x0, 0x8100}}, {0x14, 0x1, {0xd, 0x687, 0x7, 0x88a8}}, {0x14, 0x1, {0x5, 0x824, 0x10000, 0x88a8}}, {0x14, 0x1, {0x1cf5ef71, 0xa8c, 0x1a, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7fff, 0xf6}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffa5, 0x7f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xd, 0x8000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x18000000, 0x3bdf}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x368}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x7ff}}, @IFLA_VF_RATE={0x10, 0x6, {0x8cf, 0x0, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x2}}]}]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6}]}}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x810}, 0x4000044) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000001480)={0x1, 0x6}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000014c0), 0x600, 0x0) write$selinux_load(r4, &(0x7f0000001500)={0xf97cff8c, 0x8, 'SE Linux', "12df6911178b516ff1"}, 0x19) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001580)={0x1, &(0x7f0000001540)=[{0x4, 0x80, 0x8, 0x2}]}) recvfrom$phonet(r4, &(0x7f00000015c0)=""/4096, 0x1000, 0x2, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f00000025c0)) fstat(r2, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r6, &(0x7f0000002680)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002800)={r4, &(0x7f0000002700), &(0x7f0000002740)=""/175}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000002840)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002900)={'syztnl0\x00', &(0x7f0000002880)={'ip6_vti0\x00', r7, 0x29, 0x1, 0x2, 0xffffffff, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x7, 0x700, 0x5, 0xfffffffb}}) socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000002940)={0x7f, 0x10, 0x5, 0x4, 0x3, 0x4}) r8 = openat(r4, &(0x7f0000002980)='./file0\x00', 0x400, 0x10) ioctl$ECCGETLAYOUT(r8, 0x81484d11, &(0x7f00000029c0)) ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875) socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r5, 0x1, r6, &(0x7f0000002b40)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x1c, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x95) setrlimit(0x0, &(0x7f0000002d00)={0x5, 0x2}) ioctl$VIDIOC_G_MODULATOR(r8, 0xc0445636, &(0x7f0000002d40)={0x7, "6c4c674be42286688bda7bf261bdfdfda42c904bbde9b6198a967d23d619006e", 0x40, 0x8, 0xffffffff, 0x4, 0x1}) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000002dc0)=0x1900, 0x4) 133.018418ms ago: executing program 1 (id=26): setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b0000000000050000001400050020010000000000000b0b0100000000001c000900"], 0x4c}}, 0x40000) 53.871435ms ago: executing program 1 (id=27): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000280)=0x80000a2c, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002142, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1f6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x101001, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100004601000001") 0s ago: executing program 1 (id=28): syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffffffff8001, 0x40400) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43673' (ED25519) to the list of known hosts. [ 40.105331][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.105343][ T43] audit: type=1400 audit(1789862774.514:138): avc: denied { name_bind } for pid=5717 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.145616][ T43] audit: type=1400 audit(1789862774.554:139): avc: denied { execute } for pid=5718 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.146305][ T43] audit: type=1400 audit(1789862774.554:140): avc: denied { execute_no_trans } for pid=5718 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.656135][ T43] audit: type=1400 audit(1789862777.064:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.657405][ T43] audit: type=1400 audit(1789862777.064:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.659352][ T5718] cgroup: Unknown subsys name 'net' [ 42.660623][ T43] audit: type=1400 audit(1789862777.064:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.767321][ T5718] cgroup: Unknown subsys name 'cpuset' [ 42.770205][ T5718] cgroup: Unknown subsys name 'rlimit' [ 42.910938][ T43] audit: type=1400 audit(1789862777.314:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.911481][ T43] audit: type=1400 audit(1789862777.314:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.911748][ T43] audit: type=1400 audit(1789862777.314:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.912122][ T43] audit: type=1400 audit(1789862777.314:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.989710][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.667758][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.266459][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 47.266476][ T43] audit: type=1400 audit(1789862781.674:158): avc: denied { execmem } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.491091][ T43] audit: type=1400 audit(1789862781.894:159): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.491427][ T43] audit: type=1400 audit(1789862781.894:160): avc: denied { read write } for pid=5730 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.491828][ T43] audit: type=1400 audit(1789862781.894:161): avc: denied { open } for pid=5730 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.507708][ T43] audit: type=1400 audit(1789862781.914:162): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[1974]" dev="sockfs" ino=1974 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.534826][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.537006][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.539483][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.539954][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.540539][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.541547][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.541798][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.542487][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.543189][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.543628][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.546896][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.547380][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.547583][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.548740][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.552317][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.552907][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.553496][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.553678][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.559387][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.563754][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.564570][ T43] audit: type=1400 audit(1789862781.964:163): avc: denied { read } for pid=5732 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.564610][ T43] audit: type=1400 audit(1789862781.964:164): avc: denied { open } for pid=5732 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.568054][ T43] audit: type=1400 audit(1789862781.974:165): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.576352][ T43] audit: type=1400 audit(1789862781.984:166): avc: denied { module_request } for pid=5730 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.598799][ T43] audit: type=1400 audit(1789862782.004:167): avc: denied { sys_module } for pid=5733 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.365713][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.366879][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.367311][ T5730] bridge_slave_0: entered allmulticast mode [ 48.369532][ T5730] bridge_slave_0: entered promiscuous mode [ 48.393346][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.393458][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.393995][ T5732] bridge_slave_0: entered allmulticast mode [ 48.395671][ T5732] bridge_slave_0: entered promiscuous mode [ 48.398734][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.398811][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.398909][ T5733] bridge_slave_0: entered allmulticast mode [ 48.400539][ T5733] bridge_slave_0: entered promiscuous mode [ 48.402323][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.402399][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.402677][ T5730] bridge_slave_1: entered allmulticast mode [ 48.404062][ T5730] bridge_slave_1: entered promiscuous mode [ 48.405375][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.405449][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.405604][ T5733] bridge_slave_1: entered allmulticast mode [ 48.406450][ T5733] bridge_slave_1: entered promiscuous mode [ 48.407389][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.407428][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.407569][ T5731] bridge_slave_0: entered allmulticast mode [ 48.408539][ T5731] bridge_slave_0: entered promiscuous mode [ 48.410515][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.410586][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.410644][ T5731] bridge_slave_1: entered allmulticast mode [ 48.411391][ T5731] bridge_slave_1: entered promiscuous mode [ 48.412494][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.412584][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.412863][ T5732] bridge_slave_1: entered allmulticast mode [ 48.414388][ T5732] bridge_slave_1: entered promiscuous mode [ 48.488098][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.490926][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.505595][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.506926][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.508263][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.516952][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.519094][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.520570][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.574423][ T5730] team0: Port device team_slave_0 added [ 48.584664][ T5733] team0: Port device team_slave_0 added [ 48.585567][ T5731] team0: Port device team_slave_0 added [ 48.588023][ T5732] team0: Port device team_slave_0 added [ 48.589249][ T5730] team0: Port device team_slave_1 added [ 48.590935][ T5732] team0: Port device team_slave_1 added [ 48.591987][ T5733] team0: Port device team_slave_1 added [ 48.592882][ T5731] team0: Port device team_slave_1 added [ 48.628756][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.628772][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.628791][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.642593][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.642608][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.642627][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.643358][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.643370][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.643386][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.645589][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.645597][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.645610][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.646087][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.646094][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.646106][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.646935][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.646946][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.646967][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.652136][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.652147][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.652166][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.653416][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.653426][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.653442][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.730195][ T5733] hsr_slave_0: entered promiscuous mode [ 48.731022][ T5733] hsr_slave_1: entered promiscuous mode [ 48.751213][ T5730] hsr_slave_0: entered promiscuous mode [ 48.752054][ T5730] hsr_slave_1: entered promiscuous mode [ 48.752638][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 48.752704][ T5730] Cannot create hsr debugfs directory [ 48.757049][ T5732] hsr_slave_0: entered promiscuous mode [ 48.757486][ T5732] hsr_slave_1: entered promiscuous mode [ 48.757806][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.757816][ T5732] Cannot create hsr debugfs directory [ 48.763388][ T5731] hsr_slave_0: entered promiscuous mode [ 48.764580][ T5731] hsr_slave_1: entered promiscuous mode [ 48.765151][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.765167][ T5731] Cannot create hsr debugfs directory [ 49.045756][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.051366][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.053859][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.059200][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.060035][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.064553][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.075377][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.078013][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.128445][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.130756][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.131919][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.134463][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.135092][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.139626][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.140053][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.143993][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.191224][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.193910][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.200569][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.202266][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.202684][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.205436][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.207276][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.212081][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.248457][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.268546][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.270812][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.277263][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.282032][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.291486][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.292699][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.294775][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.295106][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.298097][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.309178][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.309245][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.318948][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.318997][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.375284][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.399915][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.415133][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.418499][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.423150][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.423225][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.434540][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.434614][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.446448][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.457744][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.457819][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.478401][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.478451][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.491828][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.529523][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.542009][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.542126][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.547968][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.548046][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.627085][ T5740] Bluetooth: hci3: command tx timeout [ 49.627268][ T5740] Bluetooth: hci2: command tx timeout [ 49.627351][ T5746] Bluetooth: hci0: command tx timeout [ 49.635793][ T5746] Bluetooth: hci1: command tx timeout [ 49.703032][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.741390][ T5730] veth0_vlan: entered promiscuous mode [ 49.748410][ T5730] veth1_vlan: entered promiscuous mode [ 49.762363][ T5730] veth0_macvtap: entered promiscuous mode [ 49.768592][ T5730] veth1_macvtap: entered promiscuous mode [ 49.781305][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.786466][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.790744][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.825291][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.825429][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.825448][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.825466][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.831534][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.850441][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.857314][ T5732] veth0_vlan: entered promiscuous mode [ 49.879696][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.879710][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.892616][ T5732] veth1_vlan: entered promiscuous mode [ 49.921068][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.921084][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.938630][ T5733] veth0_vlan: entered promiscuous mode [ 49.939327][ T5731] veth0_vlan: entered promiscuous mode [ 49.946864][ T5731] veth1_vlan: entered promiscuous mode [ 49.948285][ T5732] veth0_macvtap: entered promiscuous mode [ 49.952461][ T5733] veth1_vlan: entered promiscuous mode [ 49.958628][ T5732] veth1_macvtap: entered promiscuous mode [ 49.978953][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.993013][ T5730] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.995339][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.007021][ T5731] veth0_macvtap: entered promiscuous mode [ 50.017306][ T5731] veth1_macvtap: entered promiscuous mode [ 50.020573][ T5733] veth0_macvtap: entered promiscuous mode [ 50.032270][ T5733] veth1_macvtap: entered promiscuous mode [ 50.060581][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.064666][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.064707][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.064738][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.077479][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.088632][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.093061][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.106841][ T5882] FAULT_INJECTION: forcing a failure. [ 50.106841][ T5882] name failslab, interval 1, probability 0, space 0, times 1 [ 50.106861][ T5882] CPU: 2 UID: 0 PID: 5882 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 50.106873][ T5882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.106879][ T5882] Call Trace: [ 50.106883][ T5882] [ 50.106888][ T5882] dump_stack_lvl+0x100/0x190 [ 50.106908][ T5882] should_fail_ex.cold+0x5/0xa [ 50.106924][ T5882] should_failslab+0xc2/0x120 [ 50.106938][ T5882] kmem_cache_alloc_noprof+0x92/0x6a0 [ 50.106951][ T5882] ? do_getname+0x35/0x390 [ 50.106972][ T5882] do_getname+0x35/0x390 [ 50.106989][ T5882] start_creating_user_path+0x26/0x60 [ 50.107002][ T5882] bpf_obj_pin_user+0xc3/0x3b0 [ 50.107020][ T5882] ? __pfx_bpf_obj_pin_user+0x10/0x10 [ 50.107038][ T5882] ? selinux_bpf+0x11a/0x150 [ 50.107056][ T5882] __sys_bpf+0x5ce/0x4a30 [ 50.107070][ T5882] ? __pfx___sys_bpf+0x10/0x10 [ 50.107100][ T5882] ? find_held_lock+0x2b/0x80 [ 50.107115][ T5882] ? get_pid_task+0xfc/0x250 [ 50.107130][ T5882] ? get_pid_task+0xfc/0x250 [ 50.107149][ T5882] ? find_held_lock+0x2b/0x80 [ 50.107167][ T5882] ? rcu_read_lock_any_held+0x6a/0x90 [ 50.107183][ T5882] ? find_held_lock+0x2b/0x80 [ 50.107212][ T5882] ? ksys_write+0x190/0x250 [ 50.107223][ T5882] ? ksys_write+0x190/0x250 [ 50.107234][ T5882] ? lock_acquire+0x1d1/0x380 [ 50.107254][ T5882] ? fput+0x7c/0x100 [ 50.107268][ T5882] ? ksys_write+0x1ac/0x250 [ 50.107280][ T5882] ? __x64_sys_bpf+0xce/0x140 [ 50.107290][ T5882] __x64_sys_bpf+0xce/0x140 [ 50.107302][ T5882] ? do_syscall_64+0xae/0x790 [ 50.107318][ T5882] do_syscall_64+0x123/0x790 [ 50.107335][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.107346][ T5882] RIP: 0033:0x7f3ad9d9e159 [ 50.107356][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.107366][ T5882] RSP: 002b:00007f3ad7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.107377][ T5882] RAX: ffffffffffffffda RBX: 00007f3ada025fa0 RCX: 00007f3ad9d9e159 [ 50.107384][ T5882] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000006 [ 50.107390][ T5882] RBP: 00007f3ad7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 50.107396][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.107402][ T5882] R13: 00007f3ada026038 R14: 00007f3ada025fa0 R15: 00007ffec4427368 [ 50.107416][ T5882] [ 50.119019][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.119036][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.125542][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.144322][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.144349][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.144367][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.144385][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.167669][ T5884] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 50.174418][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.174430][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.201710][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.201723][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.227259][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 50.249302][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.249317][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.254730][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.254933][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.256905][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.256914][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.288750][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.288762][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.297557][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.297740][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.387894][ T5906] team0: Device gtp0 is of different type [ 50.397042][ T5905] device-mapper: ioctl: Target spec extends beyond end of parameters [ 50.397051][ T5905] device-mapper: ioctl: unable to find target [ 50.404828][ T5908] sg_write: data in/out 589788/251 bytes for SCSI command 0x15-- guessing data in; [ 50.404828][ T5908] program syz.1.2 not setting count and/or reply_len properly [ 50.616873][ T5918] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 50.633129][ T5929] device-mapper: ioctl: Target spec extends beyond end of parameters [ 50.633138][ T5929] device-mapper: ioctl: unable to find target [ 50.644090][ T5932] overlayfs: failed to resolve './file2': -2 [ 50.685722][ T5934] netlink: 'syz.1.20': attribute type 49 has an invalid length. [ 50.688617][ T5934] bond0: (slave bond_slave_0): Releasing backup interface [ 50.750228][ T5934] bond_slave_0: entered promiscuous mode [ 50.750242][ T5934] bond_slave_0: entered allmulticast mode [ 50.935141][ T5952] sg_write: data in/out 851932/251 bytes for SCSI command 0x15-- guessing data in; [ 50.935141][ T5952] program syz.1.24 not setting count and/or reply_len properly [ 51.107357][ T5785] smpboot: CPU 1 is now offline [ 51.153962][ T5785] [ 51.155056][ T5785] ====================================================== [ 51.157841][ T5785] WARNING: possible circular locking dependency detected [ 51.160697][ T5785] syzkaller #0 Not tainted [ 51.162728][ T5785] ------------------------------------------------------ [ 51.165732][ T5785] kworker/u32:2/5785 is trying to acquire lock: [ 51.168384][ T5785] ffff88801cbc5698 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 [ 51.172107][ T5785] [ 51.172107][ T5785] but task is already holding lock: [ 51.175266][ T5785] ffffffff8ec7cad0 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 51.179524][ T5785] [ 51.179524][ T5785] which lock already depends on the new lock. [ 51.179524][ T5785] [ 51.183772][ T5785] [ 51.183772][ T5785] the existing dependency chain (in reverse order) is: [ 51.187514][ T5785] [ 51.187514][ T5785] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 51.190739][ T5785] lock_acquire+0x1d1/0x380 [ 51.192884][ T5785] percpu_down_write+0x53/0x3e0 [ 51.195195][ T5785] _cpu_up+0x68/0x960 [ 51.197141][ T5785] cpu_up+0x1ba/0x230 [ 51.199092][ T5785] cpuhp_bringup_mask+0xf8/0x180 [ 51.201206][ T5785] bringup_nonboot_cpus+0xd9/0x1b0 [ 51.203689][ T5785] smp_init+0x32/0x150 [ 51.205600][ T5785] kernel_init_freeable+0x44b/0x7b0 [ 51.207741][ T5785] kernel_init+0x21/0x1e0 [ 51.209733][ T5785] ret_from_fork+0x730/0xd60 [ 51.211908][ T5785] ret_from_fork_asm+0x1a/0x30 [ 51.214054][ T5785] [ 51.214054][ T5785] -> #2 (cpu_add_remove_lock){+.+.}-{4:4}: [ 51.217376][ T5785] lock_acquire+0x1d1/0x380 [ 51.219501][ T5785] __mutex_lock+0x1a4/0x1bd0 [ 51.221590][ T5785] cpu_device_down+0x46/0xc0 [ 51.223762][ T5785] device_offline+0x2f4/0x400 [ 51.225955][ T5785] acpi_bus_offline+0x28b/0x490 [ 51.228198][ T5785] acpi_device_hotplug+0x657/0xc40 [ 51.230573][ T5785] acpi_hotplug_work_fn+0x5e/0x90 [ 51.232861][ T5785] process_one_work+0xac7/0x1b10 [ 51.235172][ T5785] worker_thread+0x5ef/0xe50 [ 51.237284][ T5785] kthread+0x373/0x450 [ 51.239264][ T5785] ret_from_fork+0x730/0xd60 [ 51.240962][ T5785] ret_from_fork_asm+0x1a/0x30 [ 51.242681][ T5785] [ 51.242681][ T5785] -> #1 (&device->physical_node_lock){+.+.}-{4:4}: [ 51.245496][ T5785] lock_acquire+0x1d1/0x380 [ 51.247133][ T5785] __mutex_lock+0x1a4/0x1bd0 [ 51.248813][ T5785] acpi_companion_match+0xc0/0x180 [ 51.250609][ T5785] acpi_device_uevent_modalias+0x19/0x30 [ 51.252813][ T5785] platform_uevent+0x51/0xc0 [ 51.254471][ T5785] dev_uevent+0x1de/0x870 [ 51.256041][ T5785] kobject_uevent_env+0x6eb/0x18b0 [ 51.257775][ T5785] kobject_synth_uevent+0x6f0/0x7d0 [ 51.259545][ T5785] uevent_store+0x24/0x50 [ 51.261045][ T5785] dev_attr_store+0x58/0x80 [ 51.262734][ T5785] sysfs_kf_write+0xf2/0x150 [ 51.264308][ T5785] kernfs_fop_write_iter+0x3e0/0x5f0 [ 51.266158][ T5785] vfs_write+0x6af/0x1050 [ 51.267698][ T5785] ksys_write+0x12a/0x250 [ 51.269209][ T5785] do_syscall_64+0x123/0x790 [ 51.270812][ T5785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.273175][ T5785] [ 51.273175][ T5785] -> #0 (kn->active#5){++++}-{0:0}: [ 51.275490][ T5785] check_prev_add+0xeb/0xe60 [ 51.277111][ T5785] __lock_acquire+0x1528/0x1f40 [ 51.278825][ T5785] lock_acquire+0x1d1/0x380 [ 51.280371][ T5785] kernfs_drain+0x4f0/0x600 [ 51.282034][ T5785] __kernfs_remove+0x34c/0xb80 [ 51.283728][ T5785] kernfs_remove_by_name_ns+0x7c/0x120 [ 51.285653][ T5785] device_del+0x361/0x9b0 [ 51.287266][ T5785] device_unregister+0x1d/0xe0 [ 51.289000][ T5785] unregister_cpu+0xa0/0x140 [ 51.290558][ T5785] acpi_processor_post_eject+0x16f/0x390 [ 51.292934][ T5785] acpi_device_hotplug+0xa33/0xc40 [ 51.295190][ T5785] acpi_hotplug_work_fn+0x5e/0x90 [ 51.296976][ T5785] process_one_work+0xac7/0x1b10 [ 51.298798][ T5785] worker_thread+0x5ef/0xe50 [ 51.300443][ T5785] kthread+0x373/0x450 [ 51.302220][ T5785] ret_from_fork+0x730/0xd60 [ 51.304438][ T5785] ret_from_fork_asm+0x1a/0x30 [ 51.306649][ T5785] [ 51.306649][ T5785] other info that might help us debug this: [ 51.306649][ T5785] [ 51.310833][ T5785] Chain exists of: [ 51.310833][ T5785] kn->active#5 --> cpu_add_remove_lock --> cpu_hotplug_lock [ 51.310833][ T5785] [ 51.316258][ T5785] Possible unsafe locking scenario: [ 51.316258][ T5785] [ 51.319393][ T5785] CPU0 CPU1 [ 51.321642][ T5785] ---- ---- [ 51.323916][ T5785] lock(cpu_hotplug_lock); [ 51.325610][ T5785] lock(cpu_add_remove_lock); [ 51.328241][ T5785] lock(cpu_hotplug_lock); [ 51.330622][ T5785] lock(kn->active#5); [ 51.331991][ T5785] [ 51.331991][ T5785] *** DEADLOCK *** [ 51.331991][ T5785] [ 51.334750][ T5785] locks held by kworker/u32:2/5785: 6, last CPU#3: [ 51.336783][ T5785] #0: ffff888022f21940 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 51.340178][ T5785] #1: ffffc90004367d08 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 51.343504][ T5785] #2: ffffffff8fe1d380 (device_hotplug_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x82/0xc40 [ 51.346748][ T5785] #3: ffffffff8faf16a0 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x90/0xc40 [ 51.349780][ T5785] #4: ffffffff8ec7cb80 (cpu_add_remove_lock){+.+.}-{4:4}, at: acpi_processor_post_eject+0x141/0x390 [ 51.353753][ T5785] #5: ffffffff8ec7cad0 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 51.358184][ T5785] [ 51.358184][ T5785] stack backtrace: [ 51.360545][ T5785] CPU: 3 UID: 0 PID: 5785 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 51.364401][ T5785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.368733][ T5785] Workqueue: kacpi_hotplug acpi_hotplug_work_fn [ 51.371340][ T5785] Call Trace: [ 51.372747][ T5785] [ 51.374004][ T5785] dump_stack_lvl+0x100/0x190 [ 51.376084][ T5785] print_circular_bug.cold+0x178/0x1be [ 51.378409][ T5785] check_noncircular+0x146/0x160 [ 51.380556][ T5785] check_prev_add+0xeb/0xe60 [ 51.382504][ T5785] ? __lock_acquire+0x5c0/0x1f40 [ 51.384716][ T5785] __lock_acquire+0x1528/0x1f40 [ 51.386806][ T5785] lock_acquire+0x1d1/0x380 [ 51.388716][ T5785] ? __kernfs_remove+0x34c/0xb80 [ 51.390954][ T5785] ? kernfs_drain+0x4c7/0x600 [ 51.393021][ T5785] kernfs_drain+0x4f0/0x600 [ 51.395029][ T5785] ? __kernfs_remove+0x34c/0xb80 [ 51.397245][ T5785] ? __pfx_kernfs_drain+0x10/0x10 [ 51.399496][ T5785] ? find_held_lock+0x2b/0x80 [ 51.401494][ T5785] ? __kernfs_remove+0x224/0xb80 [ 51.403524][ T5785] ? __kernfs_remove+0x224/0xb80 [ 51.405615][ T5785] ? up_write+0x2dc/0x5b0 [ 51.407497][ T5785] __kernfs_remove+0x34c/0xb80 [ 51.409478][ T5785] kernfs_remove_by_name_ns+0x7c/0x120 [ 51.411874][ T5785] device_del+0x361/0x9b0 [ 51.413784][ T5785] ? __pfx_device_del+0x10/0x10 [ 51.415901][ T5785] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 51.418239][ T5785] device_unregister+0x1d/0xe0 [ 51.420366][ T5785] unregister_cpu+0xa0/0x140 [ 51.422348][ T5785] acpi_processor_post_eject+0x16f/0x390 [ 51.424295][ T5785] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 51.426820][ T5785] acpi_device_hotplug+0xa33/0xc40 [ 51.428883][ T5785] ? __pfx_acpi_device_hotplug+0x10/0x10 [ 51.431173][ T5785] acpi_hotplug_work_fn+0x5e/0x90 [ 51.433235][ T5785] process_one_work+0xac7/0x1b10 [ 51.435265][ T5785] ? __pfx_process_one_work+0x10/0x10 [ 51.437107][ T5785] ? lock_acquire+0x1d1/0x380 [ 51.438924][ T5785] ? __pfx_acpi_hotplug_work_fn+0x10/0x10 [ 51.440771][ T5785] worker_thread+0x5ef/0xe50 [ 51.442374][ T5785] ? kthread+0x13a/0x450 [ 51.443958][ T5785] ? __pfx_worker_thread+0x10/0x10 [ 51.445970][ T5785] kthread+0x373/0x450 [ 51.447502][ T5785] ? __pfx_kthread+0x10/0x10 [ 51.449303][ T5785] ret_from_fork+0x730/0xd60 [ 51.451168][ T5785] ? __pfx_ret_from_fork+0x10/0x10 [ 51.453021][ T5785] ? __switch_to+0x800/0x10f0 [ 51.454517][ T5785] ? __pfx_kthread+0x10/0x10 [ 51.455969][ T5785] ret_from_fork_asm+0x1a/0x30 [ 51.457515][ T5785] [ 51.634328][ T5746] Bluetooth: hci3: command tx timeout [ 51.704329][ T64] Bluetooth: hci0: command tx timeout [ 51.704384][ T5746] Bluetooth: hci1: command tx timeout [ 52.504328][ T5746] Bluetooth: hci2: command tx timeout [ 53.714354][ T5746] Bluetooth: hci3: command tx timeout [ 53.784780][ T64] Bluetooth: hci0: command tx timeout [ 53.784815][ T5746] Bluetooth: hci1: command tx timeout [ 54.584307][ T5746] Bluetooth: hci2: command tx timeout [ 55.784326][ T5746] Bluetooth: hci3: command tx timeout [ 55.864474][ T5746] Bluetooth: hci1: command tx timeout [ 55.864504][ T64] Bluetooth: hci0: command tx timeout