last executing test programs: 442.329993ms ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x6, 0xadb, 0xb}, 0x41}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000004300)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 230.922131ms ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x8001}, {0x3, 0x300}}}, 0x24}}, 0x0) 150.363881ms ago: executing program 2 (id=5): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffffff01, 0x3}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2001, {0x0, 0x0, 0x0, r6, {0xfff2, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffd, 0x6, 0x1000, 0x6}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x22}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000500)="27030200dc0f14000e0000000025c102000000061201000000f400930bf4533f00429c65112a", 0x26}], 0x1}, 0x4000011) 138.494805ms ago: executing program 3 (id=4): syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78", @ANYRES8], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000380)=""/131, 0x83) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 47.780863ms ago: executing program 1 (id=2): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/13], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) 0s ago: executing program 0 (id=6): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) kernel console output (not intermixed with test programs): [ 38.080337][ T42] audit: type=1400 audit(1787757607.591:115): avc: denied { siginh } for pid=5628 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:56855' (ED25519) to the list of known hosts. [ 39.930997][ T42] audit: type=1400 audit(1787757609.471:116): avc: denied { name_bind } for pid=5635 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.956106][ T42] audit: type=1400 audit(1787757609.501:117): avc: denied { execute } for pid=5636 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.965227][ T42] audit: type=1400 audit(1787757609.501:118): avc: denied { execute_no_trans } for pid=5636 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.382169][ T42] audit: type=1400 audit(1787757609.931:119): avc: denied { write } for pid=5637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.418987][ T42] audit: type=1400 audit(1787757609.961:120): avc: denied { write } for pid=5640 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.489195][ T42] audit: type=1400 audit(1787757610.031:121): avc: denied { write } for pid=5643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.529665][ T42] audit: type=1400 audit(1787757610.071:122): avc: denied { write } for pid=5646 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.610921][ T42] audit: type=1400 audit(1787757610.151:123): avc: denied { write } for pid=5649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.651896][ T42] audit: type=1400 audit(1787757610.201:124): avc: denied { write } for pid=5652 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.979864][ T42] audit: type=1400 audit(1787757610.521:125): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.357872][ T5636] cgroup: Unknown subsys name 'net' [ 42.505030][ T5636] cgroup: Unknown subsys name 'cpuset' [ 42.509264][ T5636] cgroup: Unknown subsys name 'rlimit' [ 42.715028][ T5705] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.376671][ T5636] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.955924][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 46.955936][ T42] audit: type=1400 audit(1787757616.501:159): avc: denied { execmem } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.131974][ T42] audit: type=1400 audit(1787757616.681:160): avc: denied { create } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.141502][ T42] audit: type=1400 audit(1787757616.681:161): avc: denied { read write } for pid=5720 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.148994][ T42] audit: type=1400 audit(1787757616.681:162): avc: denied { open } for pid=5720 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.156268][ T42] audit: type=1400 audit(1787757616.691:163): avc: denied { ioctl } for pid=5721 comm="syz-executor" path="socket:[6452]" dev="sockfs" ino=6452 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.168683][ T5726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.169567][ T5730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.172584][ T5726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.178642][ T5726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.179676][ T5729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.181331][ T5726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.184486][ T5729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.188873][ T5726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.190235][ T5729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.192090][ T5726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.195678][ T5729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.197746][ T5726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.201447][ T5729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.202455][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.202875][ T5732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.204136][ T5732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.205590][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.209583][ T42] audit: type=1400 audit(1787757616.751:164): avc: denied { read } for pid=5721 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.210298][ T5726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.214611][ T42] audit: type=1400 audit(1787757616.751:165): avc: denied { open } for pid=5721 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.215438][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.222818][ T42] audit: type=1400 audit(1787757616.751:166): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.223320][ T5726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.245783][ T42] audit: type=1400 audit(1787757616.761:167): avc: denied { module_request } for pid=5721 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.254488][ T42] audit: type=1400 audit(1787757616.791:168): avc: denied { sys_module } for pid=5721 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.778156][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.780749][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.783208][ T5721] bridge_slave_0: entered allmulticast mode [ 47.786456][ T5721] bridge_slave_0: entered promiscuous mode [ 47.798756][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.802432][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.804700][ T5721] bridge_slave_1: entered allmulticast mode [ 47.807421][ T5721] bridge_slave_1: entered promiscuous mode [ 47.857436][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.884097][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.927115][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.929310][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.931503][ T5724] bridge_slave_0: entered allmulticast mode [ 47.934744][ T5724] bridge_slave_0: entered promiscuous mode [ 47.953656][ T5721] team0: Port device team_slave_0 added [ 47.961943][ T5721] team0: Port device team_slave_1 added [ 47.968696][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.971877][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.974834][ T5724] bridge_slave_1: entered allmulticast mode [ 47.978790][ T5724] bridge_slave_1: entered promiscuous mode [ 47.982279][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.985434][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.988497][ T5731] bridge_slave_0: entered allmulticast mode [ 47.992427][ T5731] bridge_slave_0: entered promiscuous mode [ 47.996346][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.998937][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.002494][ T5720] bridge_slave_0: entered allmulticast mode [ 48.006177][ T5720] bridge_slave_0: entered promiscuous mode [ 48.024298][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.027517][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.030524][ T5731] bridge_slave_1: entered allmulticast mode [ 48.034573][ T5731] bridge_slave_1: entered promiscuous mode [ 48.037400][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.040252][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.043388][ T5720] bridge_slave_1: entered allmulticast mode [ 48.046873][ T5720] bridge_slave_1: entered promiscuous mode [ 48.051419][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.054113][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.064277][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.074575][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.077279][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.086755][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.114381][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.123153][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.133046][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.138796][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.148966][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.153758][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.188378][ T5724] team0: Port device team_slave_0 added [ 48.207585][ T5720] team0: Port device team_slave_0 added [ 48.211306][ T5724] team0: Port device team_slave_1 added [ 48.216584][ T5721] hsr_slave_0: entered promiscuous mode [ 48.218763][ T5721] hsr_slave_1: entered promiscuous mode [ 48.221964][ T5731] team0: Port device team_slave_0 added [ 48.225581][ T5720] team0: Port device team_slave_1 added [ 48.248703][ T5731] team0: Port device team_slave_1 added [ 48.272131][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.275069][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.282826][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.297143][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.299283][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.307031][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.310703][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.312905][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.320245][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.333921][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.336638][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.347064][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.360221][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.362428][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.370999][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.397723][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.399932][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.408514][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.451541][ T5724] hsr_slave_0: entered promiscuous mode [ 48.453726][ T5724] hsr_slave_1: entered promiscuous mode [ 48.455607][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 48.457388][ T5724] Cannot create hsr debugfs directory [ 48.471373][ T5720] hsr_slave_0: entered promiscuous mode [ 48.473472][ T5720] hsr_slave_1: entered promiscuous mode [ 48.475493][ T5720] debugfs: 'hsr0' already exists in 'hsr' [ 48.477185][ T5720] Cannot create hsr debugfs directory [ 48.493078][ T5731] hsr_slave_0: entered promiscuous mode [ 48.495583][ T5731] hsr_slave_1: entered promiscuous mode [ 48.497604][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.499321][ T5731] Cannot create hsr debugfs directory [ 48.704563][ T5721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.713565][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.719452][ T5721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.724839][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.737962][ T5721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.741996][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.748750][ T5721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.753181][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.791729][ T5724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.795561][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.800231][ T5724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.804793][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.807636][ T5724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.810824][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.813349][ T5724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.816862][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.861901][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.866634][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.869693][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.874833][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.877545][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.881045][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.884142][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.888307][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.956753][ T5720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.960576][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.964431][ T5720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.967955][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.974654][ T5720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.978111][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.980743][ T5720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.985729][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.003700][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.018650][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.022178][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.033940][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.036286][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.046595][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.048786][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.064420][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.084057][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.086496][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.108140][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.110973][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.140925][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.158298][ T5724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.166881][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.178874][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.185660][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.187939][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.194047][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.199629][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.202275][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.211394][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.214158][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.233515][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.235690][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.283799][ T5082] Bluetooth: hci3: command tx timeout [ 49.283802][ T5730] Bluetooth: hci0: command tx timeout [ 49.283990][ T5730] Bluetooth: hci1: command tx timeout [ 49.291684][ T5730] Bluetooth: hci2: command tx timeout [ 49.359065][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.402876][ T5721] veth0_vlan: entered promiscuous mode [ 49.414223][ T5721] veth1_vlan: entered promiscuous mode [ 49.423212][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.435140][ T5721] veth0_macvtap: entered promiscuous mode [ 49.449758][ T5721] veth1_macvtap: entered promiscuous mode [ 49.467848][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.479108][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.482852][ T5724] veth0_vlan: entered promiscuous mode [ 49.496199][ T5724] veth1_vlan: entered promiscuous mode [ 49.504109][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.525869][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.541647][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.580012][ T5724] veth0_macvtap: entered promiscuous mode [ 49.589489][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.593576][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.612946][ T5724] veth1_macvtap: entered promiscuous mode [ 49.617633][ T5731] veth0_vlan: entered promiscuous mode [ 49.630298][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.633059][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.642197][ T5731] veth1_vlan: entered promiscuous mode [ 49.651984][ T5720] veth0_vlan: entered promiscuous mode [ 49.654677][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.668864][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.675196][ T5720] veth1_vlan: entered promiscuous mode [ 49.676060][ T5721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.687582][ T5731] veth0_macvtap: entered promiscuous mode [ 49.703631][ T5731] veth1_macvtap: entered promiscuous mode [ 49.712100][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.735805][ T5720] veth0_macvtap: entered promiscuous mode [ 49.742114][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.748518][ T5720] veth1_macvtap: entered promiscuous mode [ 49.757186][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.785745][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.788923][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.801324][ T5799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.810828][ T5870] syzkaller0: entered promiscuous mode [ 49.813236][ T5870] syzkaller0: entered allmulticast mode [ 49.816304][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.832213][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.832826][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.834334][ T5870] TC_ACT_REPEAT abuse ? [ 49.835520][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.895793][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.898920][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.956073][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.961722][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.971649][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.975265][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.979346][ T5874] syzkaller0: entered promiscuous mode [ 49.981015][ T5874] syzkaller0: entered allmulticast mode [ 50.020662][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.023529][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.051653][ T5799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.054463][ T5799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.059110][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.064061][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.071831][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.076466][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.091847][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.096053][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.099537][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.105130][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.121563][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.124850][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.128862][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.162452][ T5880] ------------[ cut here ]------------ [ 50.164453][ T5880] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x8d/0x720 [ 50.168892][ T5880] WARNING: kernel/sched/core.c:9157 at __might_sleep+0x94/0xc0, CPU#3: syz.0.6/5880 [ 50.172479][ T5880] Modules linked in: [ 50.173863][ T5880] CPU: 3 UID: 0 PID: 5880 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 50.176805][ T5880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.179859][ T5880] RIP: 0010:__might_sleep+0x97/0xc0 [ 50.182183][ T5880] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 3c 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 bd bf a7 00 eb 9f 89 74 24 04 e8 e2 bf a7 [ 50.188312][ T5880] RSP: 0018:ffffc90004ff7b88 EFLAGS: 00010282 [ 50.190197][ T5880] RAX: dffffc0000000000 RBX: ffffffff8befd0a0 RCX: ffffffff81e29fad [ 50.192845][ T5880] RDX: ffffffff81e29fad RSI: 0000000000000002 RDI: ffffffff914651d0 [ 50.195662][ T5880] RBP: 000000000000026f R08: ffffffff81fcdfa2 R09: 0000000000000000 [ 50.198428][ T5880] R10: ffffc90004ff7d40 R11: 0000000000000000 R12: ffff88802c020000 [ 50.200879][ T5880] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8ea0b6a0 [ 50.203544][ T5880] FS: 00007f52472916c0(0000) GS:ffff8880d5ea2000(0000) knlGS:0000000000000000 [ 50.206547][ T5880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.208939][ T5880] CR2: 000000110c330e07 CR3: 000000005b532000 CR4: 0000000000352ef0 [ 50.212091][ T5880] Call Trace: [ 50.213483][ T5880] [ 50.214491][ T5880] __mutex_lock+0x10e/0x1bc0 [ 50.216411][ T5880] ? futex_hash_allocate+0xd22/0x1120 [ 50.218360][ T5880] ? find_held_lock+0x2b/0x80 [ 50.220065][ T5880] ? futex_hash_allocate+0x6fc/0x1120 [ 50.222357][ T5880] ? __pfx___mutex_lock+0x10/0x10 [ 50.224181][ T5880] ? do_raw_spin_lock+0x128/0x260 [ 50.226069][ T5880] ? find_held_lock+0x2b/0x80 [ 50.227756][ T5880] ? prepare_to_wait_event+0x8d/0x720 [ 50.229493][ T5880] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.231235][ T5880] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 50.233137][ T5880] ? prepare_to_wait_event+0xbe/0x720 [ 50.235049][ T5880] ? futex_hash_allocate+0xd22/0x1120 [ 50.237063][ T5880] futex_hash_allocate+0xd22/0x1120 [ 50.238830][ T5880] ? __pfx_futex_hash_allocate+0x10/0x10 [ 50.240515][ T5880] ? __pfx_var_wake_function+0x10/0x10 [ 50.242604][ T5880] ? static_key_count+0x5a/0x70 [ 50.244371][ T5880] futex_hash_prctl+0x1b8/0x390 [ 50.245857][ T5880] __do_sys_prctl+0x16dd/0x2270 [ 50.247348][ T5880] ? __pfx___do_sys_prctl+0x10/0x10 [ 50.249124][ T5880] do_syscall_64+0x123/0x790 [ 50.250849][ T5880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.253127][ T5880] RIP: 0033:0x7f524639e0d9 [ 50.254788][ T5880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.261588][ T5880] RSP: 002b:00007f5247291028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 50.264524][ T5880] RAX: ffffffffffffffda RBX: 00007f5246625fa0 RCX: 00007f524639e0d9 [ 50.267368][ T5880] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 000000000000004e [ 50.270028][ T5880] RBP: 00007f5246435024 R08: 0000000000000000 R09: 0000000000000000 [ 50.272832][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.275245][ T5880] R13: 00007f5246626038 R14: 00007f5246625fa0 R15: 00007ffd9860e238 [ 50.277976][ T5880] [ 50.278979][ T5880] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.281440][ T5880] CPU: 3 UID: 0 PID: 5880 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 50.284626][ T5880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.287819][ T5880] Call Trace: [ 50.288938][ T5880] [ 50.289991][ T5880] dump_stack_lvl+0x100/0x190 [ 50.291588][ T5880] vpanic+0x553/0x970 [ 50.293015][ T5880] ? __pfx_vpanic+0x10/0x10 [ 50.294465][ T5880] panic+0xd1/0xe0 [ 50.295631][ T5880] ? __pfx_panic+0x10/0x10 [ 50.297117][ T5880] check_panic_on_warn.cold+0x19/0x34 [ 50.299029][ T5880] ? __might_sleep+0x94/0xc0 [ 50.300638][ T5880] __warn.cold+0x191/0x318 [ 50.302098][ T5880] __report_bug+0x30f/0x440 [ 50.303471][ T5880] ? __might_sleep+0x94/0xc0 [ 50.304940][ T5880] ? __pfx___report_bug+0x10/0x10 [ 50.306605][ T5880] ? lock_acquire+0x1b9/0x370 [ 50.308336][ T5880] ? prepare_to_wait_event+0x8d/0x720 [ 50.310249][ T5880] ? prepare_to_wait_event+0x8d/0x720 [ 50.311968][ T5880] ? futex_hash_allocate+0xd22/0x1120 [ 50.313929][ T5880] ? mark_held_locks+0x40/0x70 [ 50.315362][ T5880] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.317148][ T5880] report_bug_entry+0xe2/0x290 [ 50.318580][ T5880] ? __might_sleep+0x97/0xc0 [ 50.319955][ T5880] handle_bug+0x1cd/0x2a0 [ 50.321587][ T5880] exc_invalid_op+0x17/0x50 [ 50.323247][ T5880] asm_exc_invalid_op+0x1a/0x20 [ 50.325003][ T5880] RIP: 0010:__might_sleep+0x97/0xc0 [ 50.326897][ T5880] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 3c 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 bd bf a7 00 eb 9f 89 74 24 04 e8 e2 bf a7 [ 50.333372][ T5880] RSP: 0018:ffffc90004ff7b88 EFLAGS: 00010282 [ 50.335551][ T5880] RAX: dffffc0000000000 RBX: ffffffff8befd0a0 RCX: ffffffff81e29fad [ 50.338335][ T5880] RDX: ffffffff81e29fad RSI: 0000000000000002 RDI: ffffffff914651d0 [ 50.340791][ T5880] RBP: 000000000000026f R08: ffffffff81fcdfa2 R09: 0000000000000000 [ 50.343295][ T5880] R10: ffffc90004ff7d40 R11: 0000000000000000 R12: ffff88802c020000 [ 50.345760][ T5880] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8ea0b6a0 [ 50.348602][ T5880] ? futex_hash_allocate+0xd22/0x1120 [ 50.350589][ T5880] ? prepare_to_wait_event+0x8d/0x720 [ 50.352581][ T5880] ? prepare_to_wait_event+0x8d/0x720 [ 50.354396][ T5880] ? __lock_acquire+0x4c5/0x1ec0 [ 50.356196][ T5880] __mutex_lock+0x10e/0x1bc0 [ 50.357894][ T5880] ? futex_hash_allocate+0xd22/0x1120 [ 50.359882][ T5880] ? find_held_lock+0x2b/0x80 [ 50.361650][ T5880] ? futex_hash_allocate+0x6fc/0x1120 [ 50.363738][ T5880] ? __pfx___mutex_lock+0x10/0x10 [ 50.365753][ T5880] ? do_raw_spin_lock+0x128/0x260 [ 50.367696][ T5880] ? find_held_lock+0x2b/0x80 [ 50.369383][ T5880] ? prepare_to_wait_event+0x8d/0x720 [ 50.371008][ T5880] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.372590][ T5880] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 50.374508][ T5880] ? prepare_to_wait_event+0xbe/0x720 [ 50.376521][ T5880] ? futex_hash_allocate+0xd22/0x1120 [ 50.378321][ T5880] futex_hash_allocate+0xd22/0x1120 [ 50.380146][ T5880] ? __pfx_futex_hash_allocate+0x10/0x10 [ 50.382182][ T5880] ? __pfx_var_wake_function+0x10/0x10 [ 50.384145][ T5880] ? static_key_count+0x5a/0x70 [ 50.385922][ T5880] futex_hash_prctl+0x1b8/0x390 [ 50.387692][ T5880] __do_sys_prctl+0x16dd/0x2270 [ 50.389394][ T5880] ? __pfx___do_sys_prctl+0x10/0x10 [ 50.390982][ T5880] do_syscall_64+0x123/0x790 [ 50.392418][ T5880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.394220][ T5880] RIP: 0033:0x7f524639e0d9 [ 50.395579][ T5880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.401176][ T5880] RSP: 002b:00007f5247291028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 50.403647][ T5880] RAX: ffffffffffffffda RBX: 00007f5246625fa0 RCX: 00007f524639e0d9 [ 50.406060][ T5880] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 000000000000004e [ 50.408435][ T5880] RBP: 00007f5246435024 R08: 0000000000000000 R09: 0000000000000000 [ 50.410785][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.413104][ T5880] R13: 00007f5246626038 R14: 00007f5246625fa0 R15: 00007ffd9860e238 [ 50.415455][ T5880] [ 50.416908][ T5880] Kernel Offset: disabled [ 50.418202][ T5880] Rebooting in 86400 seconds..