last executing test programs: 7.09207032s ago: executing program 0 (id=52): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 6.106264859s ago: executing program 0 (id=61): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0440080000000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0x0, 0x0, 0x2, '\b\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000400)=0x1) 4.59563317s ago: executing program 0 (id=70): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b29010001000000010902200001010080320904000002ffffff000705010200020007058202000200"], 0x0) nanosleep(&(0x7f0000000640)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/rtsx_usb_ms\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/rtsx_usb_ms.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/rtsx_usb_ms.0.auto\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/rtsx_usb_ms.1.auto\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/rtsx_usb_sdmmc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/rtsx_usb_sdmmc.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/rtsx_usb_sdmmc.0.auto\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/rtsx_usb_sdmmc.1.auto\x00', 0x0, 0x0) 3.657022705s ago: executing program 2 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x80) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000000)=0x80000000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) socket$inet(0xa, 0x1, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, 0x0) 2.983974851s ago: executing program 3 (id=83): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x80a0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 2.757139249s ago: executing program 2 (id=84): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032abd700000000000010000000800010012"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) 2.756943077s ago: executing program 2 (id=85): socket$inet6(0xa, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./sys\x00', 0x102) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x1) 2.281760175s ago: executing program 0 (id=88): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mount(&(0x7f0000000240)=@sg0, 0x0, &(0x7f0000000300)='aio\x00', 0xc, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 2.281575141s ago: executing program 3 (id=89): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd2(0x43, 0x1) close(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.407000595s ago: executing program 0 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) 1.406835918s ago: executing program 3 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0xc840) 1.406744563s ago: executing program 3 (id=94): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000000140)=""/187, 0xbb}], 0x2, 0x3, 0x0) 1.37689469s ago: executing program 3 (id=95): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) 1.270141324s ago: executing program 3 (id=96): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x44, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ef, 0x4, 0x7f, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = fsopen(0x0, 0x0) close(r1) open(0x0, 0x141b42, 0x8) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x40014) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1.269971067s ago: executing program 1 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 984.558901ms ago: executing program 2 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0\n\x00', 0x2) 917.021947ms ago: executing program 2 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x20) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000400)={0x2, 0x0, [{0x40000103, 0x0, 0x7}, {0x2d6, 0x0, 0x7}]}) 916.751564ms ago: executing program 1 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x9c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x7e, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @val={0x0, 0x19, @random="d6da96dc44bb0f8c8d73752c9e726068d0c6a299ce5691f9f6"}, @val, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x30, 0x44}}, @val={0x2d, 0x1a, {0x1, 0x2, 0x1, 0x0, {0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x4, 0x81}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0xb9, 0x19, 0x3}}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 915.081735ms ago: executing program 1 (id=101): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) 806.637028ms ago: executing program 1 (id=102): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 506.853578ms ago: executing program 0 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) truncate(&(0x7f0000000000)='./file3\x00', 0x80000000) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0, 0x0], 0x2, r6, r7, 0x3, 0x0, 0xfff7ffff, 0x6, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0x0, "fe1d00003413000000000020b42717e47f00"}}) 227.033519ms ago: executing program 2 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000340)=0x8000, 0x4) 166.071µs ago: executing program 1 (id=105): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:28158' (ED25519) to the list of known hosts. [ 42.913868][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 42.913881][ T42] audit: type=1400 audit(1789685357.601:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.915472][ T42] audit: type=1400 audit(1789685357.601:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.917853][ T5718] cgroup: Unknown subsys name 'net' [ 42.919026][ T42] audit: type=1400 audit(1789685357.601:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.062514][ T5718] cgroup: Unknown subsys name 'cpuset' [ 43.064480][ T5718] cgroup: Unknown subsys name 'rlimit' [ 43.193405][ T42] audit: type=1400 audit(1789685357.881:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.193993][ T42] audit: type=1400 audit(1789685357.881:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.194276][ T42] audit: type=1400 audit(1789685357.881:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.194616][ T42] audit: type=1400 audit(1789685357.881:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.206889][ T42] audit: type=1400 audit(1789685357.891:148): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.210607][ T42] audit: type=1400 audit(1789685357.891:149): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 43.234892][ T42] audit: type=1400 audit(1789685357.921:150): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 43.265643][ T5725] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.034418][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.723346][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.724818][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.727724][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.728187][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.728303][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.729148][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.739610][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.744559][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.745177][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.746605][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.747096][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.748765][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.749253][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.749941][ T5739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.750913][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.751675][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.755295][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.757619][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.766568][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.767196][ T5738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.319125][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.319255][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.319360][ T5740] bridge_slave_0: entered allmulticast mode [ 48.320893][ T5740] bridge_slave_0: entered promiscuous mode [ 48.338427][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.338531][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.338622][ T5740] bridge_slave_1: entered allmulticast mode [ 48.340385][ T5740] bridge_slave_1: entered promiscuous mode [ 48.403731][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.425961][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.484196][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.484278][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.484342][ T5734] bridge_slave_0: entered allmulticast mode [ 48.485096][ T5734] bridge_slave_0: entered promiscuous mode [ 48.511506][ T5740] team0: Port device team_slave_0 added [ 48.520432][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.520517][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.520621][ T5734] bridge_slave_1: entered allmulticast mode [ 48.521979][ T5734] bridge_slave_1: entered promiscuous mode [ 48.551951][ T5740] team0: Port device team_slave_1 added [ 48.558093][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.558138][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.558219][ T5736] bridge_slave_0: entered allmulticast mode [ 48.558967][ T5736] bridge_slave_0: entered promiscuous mode [ 48.605319][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.605402][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.605512][ T5736] bridge_slave_1: entered allmulticast mode [ 48.607795][ T5736] bridge_slave_1: entered promiscuous mode [ 48.612213][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.612898][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.612910][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.612931][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.639438][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.646975][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.646990][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.647011][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.680299][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.682042][ T5734] team0: Port device team_slave_0 added [ 48.685082][ T5734] team0: Port device team_slave_1 added [ 48.685210][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.685286][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.685439][ T5732] bridge_slave_0: entered allmulticast mode [ 48.686579][ T5732] bridge_slave_0: entered promiscuous mode [ 48.689530][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.709466][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.709953][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.710057][ T5732] bridge_slave_1: entered allmulticast mode [ 48.711422][ T5732] bridge_slave_1: entered promiscuous mode [ 48.778360][ T5736] team0: Port device team_slave_0 added [ 48.783110][ T5740] hsr_slave_0: entered promiscuous mode [ 48.783991][ T5740] hsr_slave_1: entered promiscuous mode [ 48.785426][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.785438][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.785459][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.790150][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.792765][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.794004][ T5736] team0: Port device team_slave_1 added [ 48.806059][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.806070][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.806083][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.822798][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.822809][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.822822][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.834790][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.834805][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.834824][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.836137][ T5732] team0: Port device team_slave_0 added [ 48.859117][ T5732] team0: Port device team_slave_1 added [ 48.891843][ T5734] hsr_slave_0: entered promiscuous mode [ 48.892572][ T5734] hsr_slave_1: entered promiscuous mode [ 48.893086][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 48.893185][ T5734] Cannot create hsr debugfs directory [ 48.922925][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.922937][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.922949][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.930716][ T5736] hsr_slave_0: entered promiscuous mode [ 48.931247][ T5736] hsr_slave_1: entered promiscuous mode [ 48.931555][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 48.931572][ T5736] Cannot create hsr debugfs directory [ 48.932335][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.932346][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.932359][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.056177][ T5732] hsr_slave_0: entered promiscuous mode [ 49.056689][ T5732] hsr_slave_1: entered promiscuous mode [ 49.057008][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 49.057025][ T5732] Cannot create hsr debugfs directory [ 49.246332][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.252441][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.252935][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.256826][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.265098][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.269458][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.275137][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.277296][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.321749][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.324152][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.324883][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.327643][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.332870][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.337202][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.340902][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.344453][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.398165][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.400702][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.403006][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.409166][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.417364][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.419356][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.436256][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.440649][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.484063][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.489294][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.491862][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.495423][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.501044][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.508468][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.511715][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.512276][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.514849][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.518092][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.533379][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.533481][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.547373][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.547423][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.620645][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.638941][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.645748][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.650296][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.665084][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.665451][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.668679][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.668725][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.672114][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.678238][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.680890][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.680934][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.687399][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.687446][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.696543][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.696589][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.698730][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.698772][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.761870][ T5739] Bluetooth: hci0: command tx timeout [ 49.840305][ T5739] Bluetooth: hci3: command tx timeout [ 49.840349][ T5735] Bluetooth: hci2: command tx timeout [ 49.840705][ T66] Bluetooth: hci1: command tx timeout [ 49.915022][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.954486][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.955756][ T5740] veth0_vlan: entered promiscuous mode [ 49.964088][ T5740] veth1_vlan: entered promiscuous mode [ 49.989182][ T5736] veth0_vlan: entered promiscuous mode [ 49.996312][ T5740] veth0_macvtap: entered promiscuous mode [ 50.002663][ T5736] veth1_vlan: entered promiscuous mode [ 50.004920][ T5740] veth1_macvtap: entered promiscuous mode [ 50.018239][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.020680][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.027445][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.029642][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.041219][ T5736] veth0_macvtap: entered promiscuous mode [ 50.044819][ T5736] veth1_macvtap: entered promiscuous mode [ 50.055208][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.075322][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.109673][ T5732] veth0_vlan: entered promiscuous mode [ 50.117298][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.117311][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.133483][ T5734] veth0_vlan: entered promiscuous mode [ 50.140071][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.140310][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.140329][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.140346][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.140364][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.140382][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.140399][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.140417][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.144076][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.144094][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.145173][ T5734] veth1_vlan: entered promiscuous mode [ 50.152093][ T5732] veth1_vlan: entered promiscuous mode [ 50.159164][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 50.159175][ T42] audit: type=1400 audit(1789685364.841:168): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.166561][ T42] audit: type=1400 audit(1789685364.851:169): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/syzkaller.11jFzJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.172684][ T42] audit: type=1400 audit(1789685364.861:170): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.178944][ T42] audit: type=1400 audit(1789685364.861:171): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/syzkaller.11jFzJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.180925][ T42] audit: type=1400 audit(1789685364.871:172): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/syzkaller.11jFzJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 50.184533][ T42] audit: type=1400 audit(1789685364.871:173): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.190226][ T42] audit: type=1400 audit(1789685364.871:174): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.193702][ T5734] veth0_macvtap: entered promiscuous mode [ 50.193916][ T42] audit: type=1400 audit(1789685364.881:175): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="gadgetfs" ino=10520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 50.199307][ T42] audit: type=1400 audit(1789685364.881:176): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.200039][ T42] audit: type=1400 audit(1789685364.881:177): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 50.202723][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.202733][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.212187][ T5734] veth1_macvtap: entered promiscuous mode [ 50.235986][ T5732] veth0_macvtap: entered promiscuous mode [ 50.240966][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.240979][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.246118][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.249142][ T5732] veth1_macvtap: entered promiscuous mode [ 50.249207][ T5740] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.256185][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.268894][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.268934][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.268964][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.268994][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.271865][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.279366][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.310759][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.310801][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.310834][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.378022][ T721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.378033][ T721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.403425][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.403437][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.418074][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.418086][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.431052][ T721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.431064][ T721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.450586][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.571471][ T5887] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 50.575946][ T5887] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 50.661195][ T1479] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.819927][ T1479] usb 6-1: Using ep0 maxpacket: 8 [ 50.820538][ T1479] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 50.824151][ T1479] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 50.824171][ T1479] usb 6-1: config 0 has no interface number 0 [ 50.824199][ T1479] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 50.824228][ T1479] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.826664][ T1479] usb 6-1: config 0 descriptor?? [ 50.855774][ T1479] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 50.904542][ T5904] nvmet: adding nsid 1 to subsystem testsubsys [ 50.939468][ T1170] nvmet: connect request for invalid subsystem testsubsys! [ 50.941416][ T5904] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 51.606399][ T1043] usb 6-1: USB disconnect, device number 2 [ 51.850095][ T66] Bluetooth: hci0: command tx timeout [ 51.920142][ T66] Bluetooth: hci1: command tx timeout [ 51.920179][ T5739] Bluetooth: hci2: command tx timeout [ 51.920239][ T66] Bluetooth: hci3: command tx timeout [ 51.992450][ T5940] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 52.166932][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 52.184532][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 52.684121][ T66] Bluetooth: hci3: failed to read key size for handle 200 [ 53.559190][ T25] wiimote 0005:057E:0306.0002: item fetching failed at offset 2/3 [ 53.559583][ T25] wiimote 0005:057E:0306.0002: HID parse failed [ 53.564261][ T25] wiimote 0005:057E:0306.0002: probe with driver wiimote failed with error -22 [ 53.813697][ T5973] NFSD: Failed to start, no listeners configured. [ 53.920387][ T66] Bluetooth: hci0: command tx timeout [ 54.000039][ T66] Bluetooth: hci1: command tx timeout [ 54.000064][ T66] Bluetooth: hci2: command tx timeout [ 54.292338][ T5987] binder: 5986:5987 ioctl 400c620e 0 returned -14 [ 54.594216][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.45'. [ 54.638325][ T6001] UDC core: g1: couldn't find an available UDC or it's busy [ 54.680176][ T5822] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 54.730821][ T5739] Bluetooth: hci3: command tx timeout [ 54.842783][ T5822] usb 5-1: not running at top speed; connect to a high speed hub [ 54.842812][ T5822] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 54.843687][ T5822] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 54.846089][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.846106][ T5822] usb 5-1: Product: syz [ 54.846117][ T5822] usb 5-1: Manufacturer: syz [ 54.846127][ T5822] usb 5-1: SerialNumber: syz [ 54.852731][ T5822] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 54.853320][ T5822] keyspan 5-1:1.0: unsupported endpoint type 0 [ 54.862179][ T5822] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 54.866729][ T5822] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 54.869986][ T5822] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 54.873496][ T5822] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 54.914756][ T6007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.288904][ T1043] usb 5-1: USB disconnect, device number 2 [ 55.427541][ T1043] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 55.465521][ T42] kauditd_printk_skb: 129 callbacks suppressed [ 55.466132][ T42] audit: type=1400 audit(1789685370.151:307): avc: denied { read } for pid=6012 comm="syz.3.49" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.466922][ T42] audit: type=1400 audit(1789685370.151:308): avc: denied { open } for pid=6012 comm="syz.3.49" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.468984][ T42] audit: type=1400 audit(1789685370.151:309): avc: denied { ioctl } for pid=6012 comm="syz.3.49" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 55.572417][ T42] audit: type=1400 audit(1789685370.211:310): avc: denied { create } for pid=6014 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.580728][ T1043] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 55.654480][ T1043] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 55.661827][ T42] audit: type=1400 audit(1789685370.341:311): avc: denied { perfmon } for pid=6014 comm="syz.3.50" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.663258][ T42] audit: type=1400 audit(1789685370.351:312): avc: denied { prog_run } for pid=6014 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.663310][ T42] audit: type=1400 audit(1789685370.351:313): avc: denied { setopt } for pid=6014 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.732262][ T1043] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 55.754656][ T1043] keyspan 5-1:1.0: device disconnected [ 55.999951][ T5739] Bluetooth: hci0: command tx timeout [ 56.089830][ T5739] Bluetooth: hci2: command tx timeout [ 56.089863][ T5739] Bluetooth: hci1: command tx timeout [ 56.172720][ T42] audit: type=1400 audit(1789685370.861:314): avc: denied { create } for pid=6021 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.172748][ T42] audit: type=1400 audit(1789685370.861:315): avc: denied { write } for pid=6021 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.325179][ T42] audit: type=1400 audit(1789685371.011:316): avc: denied { setopt } for pid=6029 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.309892][ T1043] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.460389][ T1043] usb 5-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice= 0.00 [ 57.461230][ T1043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.466988][ T1043] usb 5-1: config 0 descriptor?? [ 57.472277][ T1043] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 57.737672][ T6064] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 57.879656][ T1043] gspca_stv06xx: I2C: Read error writing address: -71 [ 57.906419][ T1043] usb 5-1: USB disconnect, device number 3 [ 58.562201][ T6079] null_blk: disk nullb1 created [ 58.699853][ T1479] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.861174][ T1479] usb 5-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 58.862011][ T1479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.589811][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.749775][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 59.751366][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 59.751389][ T25] usb 6-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=c4.49 [ 59.752244][ T25] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 59.752263][ T25] usb 6-1: config 0 has no interface number 0 [ 59.752285][ T25] usb 6-1: config 0 interface 223 has no altsetting 0 [ 59.755645][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.755657][ T25] usb 6-1: Product: syz [ 59.755665][ T25] usb 6-1: Manufacturer: syz [ 59.755672][ T25] usb 6-1: SerialNumber: syz [ 59.757284][ T25] usb 6-1: config 0 descriptor?? [ 59.902355][ T1479] rtsx_usb 5-1:1.0: probe with driver rtsx_usb failed with error -110 [ 59.972804][ T25] usb 6-1: selecting invalid altsetting 3 [ 59.972818][ T25] comedi comedi5: could not set alternate setting 3 in high speed [ 59.972826][ T25] usbduxsigma 6-1:0.223: driver 'usbduxsigma' failed to auto-configure device. [ 59.975315][ T25] usbduxsigma 6-1:0.223: probe with driver usbduxsigma failed with error -22 [ 59.978072][ T25] usb 6-1: USB disconnect, device number 3 [ 60.081475][ T1479] usb 5-1: USB disconnect, device number 4 [ 60.260473][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'. [ 60.371263][ T6123] Console: switching to colour dummy device 80x25 [ 60.761280][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 60.761298][ T42] audit: type=1400 audit(1789685375.441:340): avc: denied { connect } for pid=6132 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.761339][ T42] audit: type=1400 audit(1789685375.441:341): avc: denied { write } for pid=6132 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.108616][ T6124] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 61.121441][ T6124] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 61.121584][ T6124] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 61.121640][ T6124] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 61.121739][ T6124] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 61.125226][ T6124] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 61.159373][ T6124] pci 0000:00:01.0: Adding to iommu group 1 [ 61.167686][ T6124] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 61.167700][ T6124] pci 0000:00:01.0: vgaarb: bridge control possible [ 61.167707][ T6124] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 61.188033][ T6124] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 61.194807][ T6124] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 61.199173][ T6124] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 61.260252][ T6124] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 61.260334][ T6124] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 61.262188][ T6124] [drm] features: -virgl +edid -resource_blob -host_visible [ 61.262197][ T6124] [drm] features: -context_init -blob_alignment [ 61.283099][ T6124] [drm] number of scanouts: 1 [ 61.283136][ T6124] [drm] number of cap sets: 0 [ 61.349030][ T6124] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 61.421895][ T6124] Console: switching to colour frame buffer device 160x50 [ 61.464581][ T6124] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 61.633419][ T42] audit: type=1400 audit(1789685376.321:342): avc: denied { write } for pid=6147 comm="syz.3.94" name="mcfilter" dev="proc" ino=4026533173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.676185][ T42] audit: type=1400 audit(1789685376.361:343): avc: denied { map } for pid=6150 comm="syz.3.95" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 61.680948][ T42] audit: type=1400 audit(1789685376.371:344): avc: denied { write } for pid=6143 comm="syz.1.91" name="functions" dev="configfs" ino=10948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.682875][ T42] audit: type=1400 audit(1789685376.371:345): avc: denied { write } for pid=6143 comm="syz.1.91" name="c.1" dev="configfs" ino=8178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.686997][ T42] audit: type=1400 audit(1789685376.371:346): avc: denied { write } for pid=6143 comm="syz.1.91" name="c.1" dev="configfs" ino=8178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.989844][ T1479] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 62.106906][ T6161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.138715][ T42] audit: type=1400 audit(1789685376.821:347): avc: denied { create } for pid=6164 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.141320][ T42] audit: type=1400 audit(1789685376.831:348): avc: denied { ioctl } for pid=6164 comm="syz.1.101" path="socket:[9069]" dev="sockfs" ino=9069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.141770][ T42] audit: type=1400 audit(1789685376.831:349): avc: denied { bind } for pid=6164 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.151656][ T1479] usb 8-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 62.153140][ T1479] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1007, setting to 64 [ 62.153160][ T1479] usb 8-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.153173][ T1479] usb 8-1: config 0 interface 0 has no altsetting 0 [ 62.153188][ T1479] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.159799][ T1479] usb 8-1: config 0 descriptor?? [ 62.160165][ T6166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.161235][ T6161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.161466][ T6156] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.598897][ T1479] input: HID 046d:c287 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:046D:C287.0003/input/input5 [ 62.691060][ T1479] logitech 0003:046D:C287.0003: input,hidraw1: USB HID v0.00 Joystick [HID 046d:c287] on usb-dummy_hcd.3-1/input0 [ 62.691102][ T1479] logitech 0003:046D:C287.0003: missing HID_OUTPUT_REPORT 0 [ 62.801863][ T1479] usb 8-1: USB disconnect, device number 2 [ 63.089870][ T6181] Console: switching to colour dummy device 80x25 [ 63.261626][ T6181] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 63.268691][ T6181] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 63.268835][ T6181] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 63.268891][ T6181] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 63.268985][ T6181] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 63.270536][ T6181] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 63.286215][ T6181] pci 0000:00:01.0: Adding to iommu group 1 [ 63.288781][ T6181] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 63.288805][ T6181] pci 0000:00:01.0: vgaarb: bridge control possible [ 63.288814][ T6181] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 63.295393][ T6181] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 63.295535][ T6181] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 63.301495][ T6181] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 63.336478][ T6181] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 63.336529][ T6181] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 63.338493][ T6181] [drm] features: -virgl +edid -resou ** replaying previous printk message ** [ 63.338493][ T6181] [drm] features: -virgl +edid -resource_blob -host_visible [ 63.338501][ T6181] [drm] features: -context_init -blob_alignment [ 63.347346][ T6181] ------------[ cut here ]------------ [ 63.347358][ T6181] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 63.347366][ T6181] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#3: syz.1.106/6181 [ 63.361759][ T6181] Modules linked in: [ 63.363150][ T6181] CPU: 3 UID: 0 PID: 6181 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 63.366077][ T6181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.369618][ T6181] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 63.372157][ T6181] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 32 ae 6f 09 85 c0 75 e0 48 8d 3d a7 dc ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 b2 af 6f 09 48 85 c0 0f [ 63.379022][ T6181] RSP: 0018:ffffc90005786f18 EFLAGS: 00010246 [ 63.381000][ T6181] RAX: 0000000000000000 RBX: ffff888100096780 RCX: fffff52000af0dbe [ 63.383682][ T6181] RDX: 0000000000000000 RSI: ffffffff8c9199a0 RDI: ffffffff9149b580 [ 63.386176][ T6181] RBP: ffffffff8c9199a0 R08: 0000000000000000 R09: fffffbfff228a5ab [ 63.388550][ T6181] R10: ffffc90005786f18 R11: 0000000000000000 R12: 0000000000000000 [ 63.391115][ T6181] R13: ffffc90005786f88 R14: 00000000000000d8 R15: ffff888028194fce [ 63.393573][ T6181] FS: 00007f04ef4fd6c0(0000) GS:ffff8880d5e59000(0000) knlGS:0000000000000000 [ 63.396357][ T6181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.398368][ T6181] CR2: 000000110c3b9459 CR3: 000000003cfac000 CR4: 0000000000352ef0 [ 63.400831][ T6181] Call Trace: [ 63.401910][ T6181] [ 63.402864][ T6181] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 63.404645][ T6181] ? __pfx__printk+0x10/0x10 [ 63.406345][ T6181] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 63.408445][ T6181] ? lockdep_init_map_type+0x5c/0x250 [ 63.410263][ T6181] virtio_gpu_init.cold+0x40d/0x1293 [ 63.412094][ T6181] ? vga_remove_vgacon.cold+0x1d/0x99 [ 63.414043][ T6181] ? __pfx_virtio_gpu_init+0x10/0x10 [ 63.415935][ T6181] ? is_console_locked+0x9/0x20 [ 63.417704][ T6181] ? con_is_bound+0x141/0x190 [ 63.419249][ T6181] ? vga_remove_vgacon+0x21/0x30 [ 63.420918][ T6181] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 63.423138][ T6181] virtio_gpu_probe+0x21c/0x360 [ 63.424663][ T6181] virtio_dev_probe+0x6a2/0xbe0 [ 63.426150][ T6181] ? __pfx_virtio_dev_probe+0x10/0x10 [ 63.427763][ T6181] ? kernfs_create_link+0x1bd/0x240 [ 63.429378][ T6181] ? kernfs_put+0x3f/0x60 [ 63.430765][ T6181] ? sysfs_do_create_link_sd+0xbb/0x140 [ 63.432463][ T6181] ? sysfs_create_link+0x68/0xc0 [ 63.434071][ T6181] ? __pfx_virtio_dev_probe+0x10/0x10 [ 63.435715][ T6181] really_probe+0x241/0xa60 [ 63.437150][ T6181] __driver_probe_device+0x210/0x460 [ 63.438751][ T6181] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.440638][ T6181] driver_probe_device+0x4a/0x140 [ 63.442138][ T6181] __device_attach_driver+0x1df/0x320 [ 63.443727][ T6181] ? __pfx___device_attach_driver+0x10/0x10 [ 63.445508][ T6181] bus_for_each_drv+0x159/0x1e0 [ 63.447007][ T6181] ? __pfx_bus_for_each_drv+0x10/0x10 [ 63.448651][ T6181] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.450372][ T6181] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.452244][ T6181] __device_attach+0x1e4/0x4d0 [ 63.453771][ T6181] ? __pfx___device_attach+0x10/0x10 [ 63.455457][ T6181] ? do_raw_spin_unlock+0x145/0x1e0 [ 63.457136][ T6181] device_initial_probe+0xaf/0xd0 [ 63.458781][ T6181] bus_probe_device+0x64/0x160 [ 63.460390][ T6181] device_add+0x121d/0x1970 [ 63.461827][ T6181] ? __pfx_device_add+0x10/0x10 [ 63.463308][ T6181] ? __pfx___might_resched+0x10/0x10 [ 63.464947][ T6181] ? __init_waitqueue_head+0xca/0x150 [ 63.466563][ T6181] ? ioread8+0x8f/0xd0 [ 63.468024][ T6181] register_virtio_device+0x4f0/0x5d0 [ 63.470294][ T6181] ? __pfx_register_virtio_device+0x10/0x10 [ 63.472652][ T6181] ? __pfx_pcibios_set_master+0x10/0x10 [ 63.474843][ T6181] ? __raw_spin_lock_init+0x3a/0x110 [ 63.476938][ T6181] ? __pfx_virtio_pci_probe+0x10/0x10 [ 63.479032][ T6181] virtio_pci_probe+0x255/0x410 [ 63.481019][ T6181] local_pci_probe+0xdd/0x1b0 [ 63.482936][ T6181] pci_call_probe+0x176/0x800 [ 63.484773][ T6181] ? pci_match_device+0x147/0x7d0 [ 63.486764][ T6181] ? __pfx_pci_call_probe+0x10/0x10 [ 63.488850][ T6181] ? __pfx_pci_match_device+0x10/0x10 [ 63.490898][ T6181] ? pci_find_host_bridge+0x3c/0x80 [ 63.492562][ T6181] ? up_write+0x2dc/0x5b0 [ 63.493946][ T6181] pci_device_probe+0x25b/0x400 [ 63.495470][ T6181] ? __pfx_pci_device_probe+0x10/0x10 [ 63.497088][ T6181] ? kernfs_create_link+0x1bd/0x240 [ 63.498820][ T6181] ? sysfs_create_link+0x68/0xc0 [ 63.500848][ T6181] ? __pfx_pci_device_probe+0x10/0x10 [ 63.502850][ T6181] really_probe+0x241/0xa60 [ 63.504465][ T6181] __driver_probe_device+0x210/0x460 [ 63.506320][ T6181] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.508444][ T6181] driver_probe_device+0x4a/0x140 [ 63.510498][ T6181] __device_attach_driver+0x1df/0x320 [ 63.512414][ T6181] ? __pfx___device_attach_driver+0x10/0x10 [ 63.514617][ T6181] bus_for_each_drv+0x159/0x1e0 [ 63.516479][ T6181] ? __pfx_bus_for_each_drv+0x10/0x10 [ 63.518568][ T6181] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.520653][ T6181] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.522923][ T6181] __device_attach+0x1e4/0x4d0 [ 63.524522][ T6181] ? __pfx___device_attach+0x10/0x10 [ 63.526302][ T6181] ? do_raw_spin_unlock+0x145/0x1e0 [ 63.528193][ T6181] device_initial_probe+0xaf/0xd0 [ 63.530185][ T6181] pci_bus_add_device+0xc5/0x100 [ 63.531794][ T6181] pci_bus_add_devices+0x9a/0x1f0 [ 63.533655][ T6181] pci_rescan_bus+0x2a/0x40 [ 63.535404][ T6181] rescan_store+0xfb/0x130 [ 63.536904][ T6181] ? __pfx_rescan_store+0x10/0x10 [ 63.538502][ T6181] ? sysfs_file_kobj+0xe4/0x290 [ 63.540124][ T6181] ? __pfx_rescan_store+0x10/0x10 [ 63.541743][ T6181] bus_attr_store+0x74/0xb0 [ 63.543340][ T6181] ? __pfx_bus_attr_store+0x10/0x10 [ 63.544984][ T6181] sysfs_kf_write+0xf2/0x150 [ 63.546453][ T6181] kernfs_fop_write_iter+0x3e0/0x5f0 [ 63.548111][ T6181] ? __pfx_sysfs_kf_write+0x10/0x10 [ 63.549856][ T6181] vfs_write+0x6af/0x1050 [ 63.551255][ T6181] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 63.553301][ T6181] ? __pfx_vfs_write+0x10/0x10 [ 63.555178][ T6181] ? find_held_lock+0x2b/0x80 [ 63.557081][ T6181] ksys_write+0x12a/0x250 [ 63.558801][ T6181] ? __pfx_ksys_write+0x10/0x10 [ 63.560799][ T6181] do_syscall_64+0x123/0x790 [ 63.562584][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.564810][ T6181] RIP: 0033:0x7f04ee59e159 [ 63.566534][ T6181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.573783][ T6181] RSP: 002b:00007f04ef4fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.577140][ T6181] RAX: ffffffffffffffda RBX: 00007f04ee825fa0 RCX: 00007f04ee59e159 [ 63.580318][ T6181] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 63.583439][ T6181] RBP: 00007f04ee63506b R08: 0000000000000000 R09: 0000000000000000 [ 63.586409][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.589215][ T6181] R13: 00007f04ee826038 R14: 00007f04ee825fa0 R15: 00007fffcc7febb8 [ 63.592186][ T6181] [ 63.593347][ T6181] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.596024][ T6181] CPU: 3 UID: 0 PID: 6181 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 63.599328][ T6181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.603009][ T6181] Call Trace: [ 63.604292][ T6181] [ 63.605461][ T6181] dump_stack_lvl+0x100/0x190 [ 63.607211][ T6181] vpanic+0x553/0x970 [ 63.608658][ T6181] ? __pfx_vpanic+0x10/0x10 [ 63.610170][ T6181] panic+0xd1/0xe0 [ 63.611436][ T6181] ? __pfx_panic+0x10/0x10 [ 63.612846][ T6181] check_panic_on_warn.cold+0x19/0x34 [ 63.614539][ T6181] ? __kmem_cache_create_args+0xa9/0x430 [ 63.616581][ T6181] __warn.cold+0x191/0x318 [ 63.618057][ T6181] __report_bug+0x30f/0x440 [ 63.619511][ T6181] ? __kmem_cache_create_args+0xa9/0x430 [ 63.621308][ T6181] ? __pfx___report_bug+0x10/0x10 [ 63.622903][ T6181] ? __mutex_lock+0x26c/0x1bd0 [ 63.624690][ T6181] ? __kmem_cache_create_args+0x44/0x430 [ 63.626787][ T6181] report_bug_entry+0xe2/0x290 [ 63.628642][ T6181] ? __kmem_cache_create_args+0xac/0x430 [ 63.630797][ T6181] handle_bug+0x1cd/0x2a0 [ 63.632488][ T6181] exc_invalid_op+0x17/0x50 [ 63.634256][ T6181] asm_exc_invalid_op+0x1a/0x20 [ 63.636189][ T6181] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 63.638816][ T6181] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 32 ae 6f 09 85 c0 75 e0 48 8d 3d a7 dc ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 b2 af 6f 09 48 85 c0 0f [ 63.646853][ T6181] RSP: 0018:ffffc90005786f18 EFLAGS: 00010246 [ 63.648803][ T6181] RAX: 0000000000000000 RBX: ffff888100096780 RCX: fffff52000af0dbe [ 63.651297][ T6181] RDX: 0000000000000000 RSI: ffffffff8c9199a0 RDI: ffffffff9149b580 [ 63.653772][ T6181] RBP: ffffffff8c9199a0 R08: 0000000000000000 R09: fffffbfff228a5ab [ 63.656224][ T6181] R10: ffffc90005786f18 R11: 0000000000000000 R12: 0000000000000000 [ 63.658694][ T6181] R13: ffffc90005786f88 R14: 00000000000000d8 R15: ffff888028194fce [ 63.661204][ T6181] ? __kmem_cache_create_args+0x9e/0x430 [ 63.663258][ T6181] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 63.665203][ T6181] ? __pfx__printk+0x10/0x10 [ 63.666917][ T6181] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 63.668915][ T6181] ? lockdep_init_map_type+0x5c/0x250 [ 63.670854][ T6181] virtio_gpu_init.cold+0x40d/0x1293 [ 63.672535][ T6181] ? vga_remove_vgacon.cold+0x1d/0x99 [ 63.674451][ T6181] ? __pfx_virtio_gpu_init+0x10/0x10 [ 63.676518][ T6181] ? is_console_locked+0x9/0x20 [ 63.678437][ T6181] ? con_is_bound+0x141/0x190 [ 63.680328][ T6181] ? vga_remove_vgacon+0x21/0x30 [ 63.682132][ T6181] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 63.684649][ T6181] virtio_gpu_probe+0x21c/0x360 [ 63.686305][ T6181] virtio_dev_probe+0x6a2/0xbe0 [ 63.687830][ T6181] ? __pfx_virtio_dev_probe+0x10/0x10 [ 63.689806][ T6181] ? kernfs_create_link+0x1bd/0x240 [ 63.691827][ T6181] ? kernfs_put+0x3f/0x60 [ 63.693253][ T6181] ? sysfs_do_create_link_sd+0xbb/0x140 [ 63.695136][ T6181] ? sysfs_create_link+0x68/0xc0 [ 63.696837][ T6181] ? __pfx_virtio_dev_probe+0x10/0x10 [ 63.698820][ T6181] really_probe+0x241/0xa60 [ 63.700401][ T6181] __driver_probe_device+0x210/0x460 [ 63.702457][ T6181] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.704653][ T6181] driver_probe_device+0x4a/0x140 [ 63.706544][ T6181] __device_attach_driver+0x1df/0x320 [ 63.708325][ T6181] ? __pfx___device_attach_driver+0x10/0x10 [ 63.710447][ T6181] bus_for_each_drv+0x159/0x1e0 [ 63.712239][ T6181] ? __pfx_bus_for_each_drv+0x10/0x10 [ 63.714227][ T6181] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.715880][ T6181] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.717722][ T6181] __device_attach+0x1e4/0x4d0 [ 63.719230][ T6181] ? __pfx___device_attach+0x10/0x10 [ 63.720942][ T6181] ? do_raw_spin_unlock+0x145/0x1e0 [ 63.722617][ T6181] device_initial_probe+0xaf/0xd0 [ 63.724198][ T6181] bus_probe_device+0x64/0x160 [ 63.725791][ T6181] device_add+0x121d/0x1970 [ 63.727231][ T6181] ? __pfx_device_add+0x10/0x10 [ 63.728791][ T6181] ? __pfx___might_resched+0x10/0x10 [ 63.730512][ T6181] ? __init_waitqueue_head+0xca/0x150 [ 63.732222][ T6181] ? ioread8+0x8f/0xd0 [ 63.733526][ T6181] register_virtio_device+0x4f0/0x5d0 [ 63.735278][ T6181] ? __pfx_register_virtio_device+0x10/0x10 [ 63.737524][ T6181] ? __pfx_pcibios_set_master+0x10/0x10 [ 63.739333][ T6181] ? __raw_spin_lock_init+0x3a/0x110 [ 63.741062][ T6181] ? __pfx_virtio_pci_probe+0x10/0x10 [ 63.742900][ T6181] virtio_pci_probe+0x255/0x410 [ 63.744467][ T6181] local_pci_probe+0xdd/0x1b0 [ 63.746026][ T6181] pci_call_probe+0x176/0x800 [ 63.747516][ T6181] ? pci_match_device+0x147/0x7d0 [ 63.749141][ T6181] ? __pfx_pci_call_probe+0x10/0x10 [ 63.750788][ T6181] ? __pfx_pci_match_device+0x10/0x10 [ 63.752519][ T6181] ? pci_find_host_bridge+0x3c/0x80 [ 63.754179][ T6181] ? up_write+0x2dc/0x5b0 [ 63.755496][ T6181] pci_device_probe+0x25b/0x400 [ 63.757257][ T6181] ? __pfx_pci_device_probe+0x10/0x10 [ 63.759140][ T6181] ? kernfs_create_link+0x1bd/0x240 [ 63.760734][ T6181] ? sysfs_create_link+0x68/0xc0 [ 63.762239][ T6181] ? __pfx_pci_device_probe+0x10/0x10 [ 63.764211][ T6181] really_probe+0x241/0xa60 [ 63.765819][ T6181] __driver_probe_device+0x210/0x460 [ 63.767861][ T6181] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 63.770187][ T6181] driver_probe_device+0x4a/0x140 [ 63.772208][ T6181] __device_attach_driver+0x1df/0x320 [ 63.774436][ T6181] ? __pfx___device_attach_driver+0x10/0x10 [ 63.776294][ T6181] bus_for_each_drv+0x159/0x1e0 [ 63.777836][ T6181] ? __pfx_bus_for_each_drv+0x10/0x10 [ 63.779494][ T6181] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.781138][ T6181] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 63.782989][ T6181] __device_attach+0x1e4/0x4d0 [ 63.784508][ T6181] ? __pfx___device_attach+0x10/0x10 [ 63.786181][ T6181] ? do_raw_spin_unlock+0x145/0x1e0 [ 63.788016][ T6181] device_initial_probe+0xaf/0xd0 [ 63.789903][ T6181] pci_bus_add_device+0xc5/0x100 [ 63.791878][ T6181] pci_bus_add_devices+0x9a/0x1f0 [ 63.793923][ T6181] pci_rescan_bus+0x2a/0x40 [ 63.795842][ T6181] rescan_store+0xfb/0x130 [ 63.797715][ T6181] ? __pfx_rescan_store+0x10/0x10 [ 63.799802][ T6181] ? sysfs_file_kobj+0xe4/0x290 [ 63.801810][ T6181] ? __pfx_rescan_store+0x10/0x10 [ 63.803872][ T6181] bus_attr_store+0x74/0xb0 [ 63.805973][ T6181] ? __pfx_bus_attr_store+0x10/0x10 [ 63.808099][ T6181] sysfs_kf_write+0xf2/0x150 [ 63.810055][ T6181] kernfs_fop_write_iter+0x3e0/0x5f0 [ 63.812243][ T6181] ? __pfx_sysfs_kf_write+0x10/0x10 [ 63.814388][ T6181] vfs_write+0x6af/0x1050 [ 63.816147][ T6181] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 63.818434][ T6181] ? __pfx_vfs_write+0x10/0x10 [ 63.820359][ T6181] ? find_held_lock+0x2b/0x80 [ 63.822325][ T6181] ksys_write+0x12a/0x250 [ 63.824064][ T6181] ? __pfx_ksys_write+0x10/0x10 [ 63.826040][ T6181] do_syscall_64+0x123/0x790 [ 63.827910][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.830282][ T6181] RIP: 0033:0x7f04ee59e159 [ 63.832076][ T6181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.839570][ T6181] RSP: 002b:00007f04ef4fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.842980][ T6181] RAX: ffffffffffffffda RBX: 00007f04ee825fa0 RCX: 00007f04ee59e159 [ 63.846208][ T6181] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 63.849423][ T6181] RBP: 00007f04ee63506b R08: 0000000000000000 R09: 0000000000000000 [ 63.852544][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.855641][ T6181] R13: 00007f04ee826038 R14: 00007f04ee825fa0 R15: 00007fffcc7febb8 [ 63.858777][ T6181] [ 63.860662][ T6181] Kernel Offset: disabled [ 63.862433][ T6181] Rebooting in 86400 seconds..