last executing test programs: 4.711923676s ago: executing program 2 (id=84): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r5) accept4(r0, 0x0, 0x0, 0x80000) 4.594613463s ago: executing program 2 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20000020) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0}, 0x28) 3.773641128s ago: executing program 1 (id=94): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4050) 3.609984015s ago: executing program 1 (id=97): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.516412792s ago: executing program 1 (id=99): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x102) getdents64(r0, &(0x7f0000001f80)=""/4108, 0x100c) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x761081, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r1, &(0x7f00000008c0)={@val={0x0, 0x86dd}, @void, @mpls={[{0xfff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xfffff, 0x0, 0x1}], @ipv6=@generic={0x1, 0x6, "11b712", 0xe1, 0x11, 0xff, @loopback, @mcast2, {[], "8118798fdbaed8263b673632c792472e7a921247ebe0c2e091b3d02e2d448a3a0fb5be7f50f93e6a9261dfe920c4017ba05f1edf48fd818b869994bdf14523e7719ac7fb49763f4e2b826bd2788f7e8c135ffcc70a179a487bf792dbe7ea975eacaa88bcb622ffc753aefe55dccb586671f2fb8bb55ee5fdfbd40bacb26e5dcaccc61848c2da2a27dd6e778ec9f3a6733bcf38fb3da60c8047a65b4a6c50716efaceb17d5d85a77f150b37ccf00aa73916ca2aeaf9b82dbe384246ffcc3ed77eb7d13aa9d22ddd623b52e607af330e47f376aae23a522d77ddb0112fb9cea70101"}}}}, 0x11d) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r6}, &(0x7f0000000080)=ANY=[], 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000440)="f2", 0x1}], 0x1}}], 0x1, 0x4044002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) 2.857398583s ago: executing program 0 (id=100): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x16d) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) mkdirat(r0, &(0x7f0000000040)='./config/usb_gadget/g1/file0\x00', 0x110) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB]) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2", 0x4ae, 0xffffffffffffffff) ioperm(0xffffffffffffffff, 0x7, 0x7) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x14, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42805}, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0x3}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="000000030000000100"], 0x60) 2.54032964s ago: executing program 1 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.33506804s ago: executing program 2 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x600000000000000) 1.606978992s ago: executing program 3 (id=108): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=ANY=[], 0x30f8}}], 0x1, 0x4004044) 1.606824084s ago: executing program 3 (id=109): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x31, 0x4, 0xffffffffffffffff, 0x6, 0x8e335, 0x9}) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.563494778s ago: executing program 3 (id=110): pread64(0xffffffffffffffff, 0x0, 0x0, 0x40) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0xf, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0xfffffffffffffffd, 0x6, 0x8000000000000001, 0x7], 0x4, 0x43100}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) socket$inet6(0xa, 0x2, 0x0) 1.490997181s ago: executing program 2 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x0, 0x0) 1.442421989s ago: executing program 0 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.371917562s ago: executing program 3 (id=113): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r1) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/240, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.233871228s ago: executing program 2 (id=114): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0x2170, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4004}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)) io_uring_enter(r1, 0x66a8, 0x4000, 0xf, 0x0, 0x18) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x3a71, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.197384549s ago: executing program 3 (id=115): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000580)="10") fsopen(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00001f4000/0x2000)=nil, &(0x7f0000178000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.104553661s ago: executing program 3 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) 754.873711ms ago: executing program 1 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@ocfs2={0xc, 0x1, {0xc, 0x3, 0x2}}, 0x40800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xa, 0x0, 0x28}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[]) 695.050029ms ago: executing program 1 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2b3ed845359cfbd6, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x90000005}) epoll_pwait(r3, &(0x7f0000000580)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) close(r1) syz_usb_connect$uac2(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) 297.222531ms ago: executing program 0 (id=119): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x3, 0xffc, 0x8000004, 0x4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x100000000, 0xa, 0x7f, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x40100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 190.870155ms ago: executing program 2 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8000, r3, 0x0, 0x0, 0x80000004}]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 146.939399ms ago: executing program 0 (id=121): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c", 0x1d, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 39.748372ms ago: executing program 0 (id=122): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}], 0x1, 0x40000002, 0x0) 0s ago: executing program 0 (id=123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x70, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): [ 32.705008][ T43] audit: type=1400 audit(1789859675.205:115): avc: denied { siginh } for pid=5633 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:2154' (ED25519) to the list of known hosts. [ 34.376359][ T43] audit: type=1400 audit(1789859676.875:116): avc: denied { name_bind } for pid=5640 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.408974][ T43] audit: type=1400 audit(1789859676.915:117): avc: denied { execute } for pid=5641 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 34.409451][ T43] audit: type=1400 audit(1789859676.915:118): avc: denied { execute_no_trans } for pid=5641 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 34.687445][ T43] audit: type=1400 audit(1789859677.195:119): avc: denied { write } for pid=5643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.731679][ T43] audit: type=1400 audit(1789859677.235:120): avc: denied { write } for pid=5646 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.695707][ T43] audit: type=1400 audit(1789859678.195:121): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.735476][ T43] audit: type=1400 audit(1789859678.235:122): avc: denied { write } for pid=5654 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.951348][ T43] audit: type=1400 audit(1789859678.455:123): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.991800][ T43] audit: type=1400 audit(1789859678.495:124): avc: denied { write } for pid=5660 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.081904][ T43] audit: type=1400 audit(1789859678.585:125): avc: denied { write } for pid=5663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.678815][ T5641] cgroup: Unknown subsys name 'net' [ 36.841256][ T5641] cgroup: Unknown subsys name 'cpuset' [ 36.845284][ T5641] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.030375][ T5699] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 37.721832][ T5641] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.100307][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 41.100319][ T43] audit: type=1400 audit(1789859683.605:162): avc: denied { execmem } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 41.244264][ T43] audit: type=1400 audit(1789859683.745:163): avc: denied { create } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.244624][ T43] audit: type=1400 audit(1789859683.745:164): avc: denied { read write } for pid=5727 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 41.244909][ T43] audit: type=1400 audit(1789859683.745:165): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 41.252650][ T43] audit: type=1400 audit(1789859683.755:166): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[6017]" dev="sockfs" ino=6017 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.274902][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 41.275256][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.277718][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 41.278049][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.278287][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.278617][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.279287][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.279931][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 41.280764][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.281202][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 41.282309][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.282584][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 41.282919][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.283506][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.285615][ T5733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.285774][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.285872][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.288071][ T43] audit: type=1400 audit(1789859683.795:167): avc: denied { read } for pid=5729 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.291317][ T43] audit: type=1400 audit(1789859683.795:168): avc: denied { open } for pid=5729 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.291365][ T43] audit: type=1400 audit(1789859683.795:169): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 41.296491][ T43] audit: type=1400 audit(1789859683.795:170): avc: denied { module_request } for pid=5729 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 41.297967][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.303356][ T5733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.306052][ T5733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.323805][ T43] audit: type=1400 audit(1789859683.825:171): avc: denied { sys_module } for pid=5729 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 41.889906][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.889961][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.890111][ T5729] bridge_slave_0: entered allmulticast mode [ 41.891548][ T5729] bridge_slave_0: entered promiscuous mode [ 41.909498][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.909540][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.909593][ T5729] bridge_slave_1: entered allmulticast mode [ 41.910308][ T5729] bridge_slave_1: entered promiscuous mode [ 41.970334][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.970402][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.970461][ T5727] bridge_slave_0: entered allmulticast mode [ 41.971456][ T5727] bridge_slave_0: entered promiscuous mode [ 41.973625][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.973665][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.973945][ T5727] bridge_slave_1: entered allmulticast mode [ 41.975088][ T5727] bridge_slave_1: entered promiscuous mode [ 41.978692][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.019551][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.027002][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.027134][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.027240][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.027330][ T5737] bridge_slave_0: entered allmulticast mode [ 42.028886][ T5737] bridge_slave_0: entered promiscuous mode [ 42.030225][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.030264][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.030317][ T5728] bridge_slave_0: entered allmulticast mode [ 42.031079][ T5728] bridge_slave_0: entered promiscuous mode [ 42.031848][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.031888][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.031943][ T5737] bridge_slave_1: entered allmulticast mode [ 42.032628][ T5737] bridge_slave_1: entered promiscuous mode [ 42.040709][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.046123][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.046168][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.046224][ T5728] bridge_slave_1: entered allmulticast mode [ 42.047156][ T5728] bridge_slave_1: entered promiscuous mode [ 42.048943][ T5729] team0: Port device team_slave_0 added [ 42.061557][ T5729] team0: Port device team_slave_1 added [ 42.087242][ T5727] team0: Port device team_slave_0 added [ 42.102479][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.104963][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.106286][ T5727] team0: Port device team_slave_1 added [ 42.108087][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.108583][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.108591][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.108603][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.110059][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.110067][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.110079][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.115720][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.141633][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.141649][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.141667][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.156548][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.156561][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.156574][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.159135][ T5737] team0: Port device team_slave_0 added [ 42.176613][ T5737] team0: Port device team_slave_1 added [ 42.184039][ T5728] team0: Port device team_slave_0 added [ 42.187802][ T5729] hsr_slave_0: entered promiscuous mode [ 42.188301][ T5729] hsr_slave_1: entered promiscuous mode [ 42.208728][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.208738][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.208751][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.211649][ T5728] team0: Port device team_slave_1 added [ 42.217608][ T5727] hsr_slave_0: entered promiscuous mode [ 42.218452][ T5727] hsr_slave_1: entered promiscuous mode [ 42.219041][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 42.219118][ T5727] Cannot create hsr debugfs directory [ 42.219572][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.219581][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.219593][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.262024][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.262034][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.262047][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.282536][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.282551][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.282571][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.357137][ T5737] hsr_slave_0: entered promiscuous mode [ 42.357753][ T5737] hsr_slave_1: entered promiscuous mode [ 42.358858][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 42.358873][ T5737] Cannot create hsr debugfs directory [ 42.421140][ T5728] hsr_slave_0: entered promiscuous mode [ 42.421603][ T5728] hsr_slave_1: entered promiscuous mode [ 42.421926][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 42.421944][ T5728] Cannot create hsr debugfs directory [ 42.570772][ T5729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.576259][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.590297][ T5729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.592695][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.600093][ T5729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.604510][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.619434][ T5729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.623961][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.664992][ T5727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.669690][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.672887][ T5727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.675712][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.676169][ T5727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.681948][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.682360][ T5727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.684755][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.692892][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.692984][ T5729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.693192][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.693243][ T5729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.715841][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.715887][ T5727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.715989][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.716030][ T5727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.729729][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.731896][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.732594][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.735107][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.735953][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.738875][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.739636][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.744359][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.762116][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.763068][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.764455][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.765487][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.841835][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.845224][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.846328][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.849089][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.854808][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.859000][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.859634][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.861065][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.902832][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.920668][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.941533][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.954792][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.960283][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.960332][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.972795][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.972947][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.976712][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.977086][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.003042][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.003128][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.008612][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.013936][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.036520][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.045040][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.052482][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.052540][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.065106][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.065151][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.067138][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.067221][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.080579][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.080645][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.307975][ T66] Bluetooth: hci2: command tx timeout [ 43.317749][ T5733] Bluetooth: hci1: command tx timeout [ 43.317870][ T66] Bluetooth: hci3: command tx timeout [ 43.330950][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.361767][ T5729] veth0_vlan: entered promiscuous mode [ 43.365732][ T5729] veth1_vlan: entered promiscuous mode [ 43.370281][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.375809][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.386714][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.397085][ T66] Bluetooth: hci0: command tx timeout [ 43.413631][ T5729] veth0_macvtap: entered promiscuous mode [ 43.424888][ T5729] veth1_macvtap: entered promiscuous mode [ 43.441164][ T5727] veth0_vlan: entered promiscuous mode [ 43.455822][ T5737] veth0_vlan: entered promiscuous mode [ 43.460827][ T5727] veth1_vlan: entered promiscuous mode [ 43.472440][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.472631][ T5728] veth0_vlan: entered promiscuous mode [ 43.479893][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.483529][ T5737] veth1_vlan: entered promiscuous mode [ 43.506174][ T5728] veth1_vlan: entered promiscuous mode [ 43.529715][ T5737] veth0_macvtap: entered promiscuous mode [ 43.554199][ T5737] veth1_macvtap: entered promiscuous mode [ 43.559967][ T5727] veth0_macvtap: entered promiscuous mode [ 43.571967][ T5727] veth1_macvtap: entered promiscuous mode [ 43.587152][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.587167][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.591855][ T5728] veth0_macvtap: entered promiscuous mode [ 43.593253][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.595452][ T5728] veth1_macvtap: entered promiscuous mode [ 43.606197][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.607642][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.627415][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.628599][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.628613][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.628845][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.643612][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.659831][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.704533][ T5729] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 43.727306][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.728179][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.758927][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.758947][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.767104][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767140][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767167][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767193][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767220][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767247][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767274][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767301][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767328][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767355][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.767382][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.783834][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.783847][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.810743][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.810761][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.823097][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.823114][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.838531][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.838547][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.855356][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.855369][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.858523][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.858559][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.034110][ T5898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9'. [ 44.034124][ T5898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9'. [ 44.133725][ T5909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 44.247562][ T5921] xt_IDLETIMER: timeout value is zero [ 44.876532][ T5923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'. [ 44.876558][ T5923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'. [ 44.885962][ T5925] FAULT_INJECTION: forcing a failure. [ 44.885962][ T5925] name failslab, interval 1, probability 0, space 0, times 1 [ 44.886013][ T5925] CPU: 0 UID: 0 PID: 5925 Comm: syz.1.22 Not tainted syzkaller #0 PREEMPT(full) [ 44.886035][ T5925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.886047][ T5925] Call Trace: [ 44.886054][ T5925] [ 44.886062][ T5925] dump_stack_lvl+0x100/0x190 [ 44.886094][ T5925] should_fail_ex.cold+0x5/0xa [ 44.886123][ T5925] should_failslab+0xc2/0x120 [ 44.886150][ T5925] kmem_cache_alloc_noprof+0x92/0x6a0 [ 44.886172][ T5925] ? alloc_vfsmnt+0x23/0x710 [ 44.886194][ T5925] alloc_vfsmnt+0x23/0x710 [ 44.886214][ T5925] __do_sys_fsmount+0x5a0/0xed0 [ 44.886244][ T5925] ? __pfx___do_sys_fsmount+0x10/0x10 [ 44.886282][ T5925] do_syscall_64+0x123/0x790 [ 44.886314][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.886333][ T5925] RIP: 0033:0x7fcc0919e159 [ 44.886349][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.886367][ T5925] RSP: 002b:00007fcc0a055028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 44.886387][ T5925] RAX: ffffffffffffffda RBX: 00007fcc09425fa0 RCX: 00007fcc0919e159 [ 44.886400][ T5925] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 44.886410][ T5925] RBP: 00007fcc0923506b R08: 0000000000000000 R09: 0000000000000000 [ 44.886422][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.886433][ T5925] R13: 00007fcc09426038 R14: 00007fcc09425fa0 R15: 00007ffee3b0bad8 [ 44.886459][ T5925] [ 44.983829][ T5929] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 45.018507][ T1306] nvmet_tcp: failed cmd ffff88802ebb0008 id 0 opcode 0, data_len: 0, status: 8004 [ 45.022539][ T5934] Bluetooth: MGMT ver 1.23 [ 45.032993][ T5932] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.25:5932 [ 45.034184][ T5932] Zero length message leads to an empty skb [ 45.045614][ T5932] vlan2: entered promiscuous mode [ 45.045626][ T5932] hsr0: entered promiscuous mode [ 45.045748][ T5932] vlan2: entered allmulticast mode [ 45.045756][ T5932] hsr0: entered allmulticast mode [ 45.045763][ T5932] hsr_slave_0: entered allmulticast mode [ 45.045772][ T5932] hsr_slave_1: entered allmulticast mode [ 45.071000][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 45.080840][ T5932] hsr_slave_0: left promiscuous mode [ 45.081486][ T5932] hsr_slave_1: left promiscuous mode [ 45.092488][ T5937] FAULT_INJECTION: forcing a failure. [ 45.092488][ T5937] name failslab, interval 1, probability 0, space 0, times 0 [ 45.092516][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.2.27 Not tainted syzkaller #0 PREEMPT(full) [ 45.092536][ T5937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.092546][ T5937] Call Trace: [ 45.092552][ T5937] [ 45.092560][ T5937] dump_stack_lvl+0x100/0x190 [ 45.092590][ T5937] should_fail_ex.cold+0x5/0xa [ 45.092614][ T5937] ? __netlink_lookup+0x652/0x900 [ 45.092636][ T5937] should_failslab+0xc2/0x120 [ 45.092661][ T5937] kmem_cache_alloc_noprof+0x92/0x6a0 [ 45.092683][ T5937] ? skb_clone+0x190/0x400 [ 45.092708][ T5937] skb_clone+0x190/0x400 [ 45.092730][ T5937] netlink_deliver_tap+0xaed/0xcc0 [ 45.092756][ T5937] netlink_unicast+0x62b/0x850 [ 45.092781][ T5937] ? __pfx_netlink_unicast+0x10/0x10 [ 45.092833][ T5937] netlink_sendmsg+0x8b0/0xda0 [ 45.092863][ T5937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.092889][ T5937] ? selinux_socket_sendmsg+0x198/0x2f0 [ 45.092923][ T5937] ____sys_sendmsg+0xa4d/0xbe0 [ 45.092952][ T5937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.092978][ T5937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 45.093012][ T5937] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 45.093043][ T5937] ___sys_sendmsg+0x190/0x1e0 [ 45.093063][ T5937] ? __pfx____sys_sendmsg+0x10/0x10 [ 45.093094][ T5937] ? find_held_lock+0x2b/0x80 [ 45.093138][ T5937] __sys_sendmsg+0x160/0x210 [ 45.093164][ T5937] ? __pfx___sys_sendmsg+0x10/0x10 [ 45.093221][ T5937] do_syscall_64+0x123/0x790 [ 45.093254][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.093276][ T5937] RIP: 0033:0x7fd55d99e159 [ 45.093293][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.093312][ T5937] RSP: 002b:00007fd55e801028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.093333][ T5937] RAX: ffffffffffffffda RBX: 00007fd55dc25fa0 RCX: 00007fd55d99e159 [ 45.093346][ T5937] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 45.093357][ T5937] RBP: 00007fd55da3506b R08: 0000000000000000 R09: 0000000000000000 [ 45.093369][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.093379][ T5937] R13: 00007fd55dc26038 R14: 00007fd55dc25fa0 R15: 00007fff691b4be8 [ 45.093404][ T5937] [ 45.126511][ T58] IPVS: starting estimator thread 0... [ 45.193921][ T5944] loop0: detected capacity change from 0 to 4096 [ 45.216858][ T5942] IPVS: using max 43 ests per chain, 103200 per kthread [ 45.290720][ T5949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.290731][ T5949] IPv6: NLM_F_CREATE should be set when creating new route [ 45.318182][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.318898][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.372542][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.377478][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.380379][ T38] IPVS: starting estimator thread 0... [ 45.386952][ T66] Bluetooth: hci2: command tx timeout [ 45.396889][ T66] Bluetooth: hci1: command tx timeout [ 45.467321][ T66] Bluetooth: hci0: command tx timeout [ 45.476942][ T5952] IPVS: using max 43 ests per chain, 103200 per kthread [ 45.487030][ T5825] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.487055][ T5825] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.487072][ T5825] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.487089][ T5825] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.555282][ T5957] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 45.697464][ T5961] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.840443][ T5961] md: md0 stopped. [ 45.938025][ T5975] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 46.062884][ T5972] kvm [5971]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 46.071566][ T5972] kvm [5971]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 46.078151][ T5972] kvm [5971]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4000000000 [ 46.078356][ T5972] kvm [5971]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x4000000001 [ 46.080349][ T5972] kvm [5971]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4000000000 [ 46.080539][ T5972] kvm [5971]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x4000000001 [ 46.237728][ T43] kauditd_printk_skb: 153 callbacks suppressed [ 46.237741][ T43] audit: type=1400 audit(1789859688.745:325): avc: denied { bind } for pid=5986 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.239044][ T43] audit: type=1400 audit(1789859688.745:326): avc: denied { create } for pid=5986 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.239888][ T5985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.240241][ T43] audit: type=1400 audit(1789859688.745:327): avc: denied { setopt } for pid=5986 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.241193][ T5985] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.241818][ T43] audit: type=1400 audit(1789859688.745:328): avc: denied { bind } for pid=5986 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.242059][ T43] audit: type=1400 audit(1789859688.745:329): avc: denied { name_bind } for pid=5986 comm="syz.2.43" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 46.242200][ T43] audit: type=1400 audit(1789859688.745:330): avc: denied { node_bind } for pid=5986 comm="syz.2.43" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 46.243420][ T43] audit: type=1400 audit(1789859688.745:331): avc: denied { write } for pid=5986 comm="syz.2.43" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.243550][ T43] audit: type=1400 audit(1789859688.745:332): avc: denied { connect } for pid=5986 comm="syz.2.43" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.243658][ T43] audit: type=1400 audit(1789859688.745:333): avc: denied { name_connect } for pid=5986 comm="syz.2.43" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 46.245620][ T5985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.322970][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.324237][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.330429][ T5985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.330443][ T5985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.346630][ T5985] veth1_vlan: left promiscuous mode [ 46.352629][ T5985] veth0_vlan: left promiscuous mode [ 46.353464][ T5985] veth0_vlan: entered promiscuous mode [ 46.354775][ T5985] veth1_vlan: entered promiscuous mode [ 46.365993][ T5985] veth1_macvtap: left promiscuous mode [ 46.366720][ T5985] veth0_macvtap: left promiscuous mode [ 46.368038][ T5985] veth0_macvtap: entered promiscuous mode [ 46.369143][ T5985] veth1_macvtap: entered promiscuous mode [ 46.372176][ T5985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.375465][ T5985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.376625][ T5985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.379261][ T5985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.391919][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.391964][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.392954][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.392995][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.437853][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.437883][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.437900][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.437917][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.574059][ T5995] input: syz0 as /devices/virtual/input/input6 [ 46.574230][ T5995] input: failed to attach handler leds to device input6, error: -6 [ 46.755808][ T43] audit: type=1400 audit(1789859689.255:334): avc: denied { bind } for pid=5999 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 47.156874][ T66] Bluetooth: hci3: command tx timeout [ 47.384269][ T6027] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 47.476863][ T66] Bluetooth: hci1: command tx timeout [ 47.476884][ T66] Bluetooth: hci2: command tx timeout [ 47.478296][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'. [ 47.481433][ T6031] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6031 comm=syz.1.55 [ 47.547439][ T5733] Bluetooth: hci0: command tx timeout [ 47.602580][ T6034] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 47.665627][ T6037] netlink: 72 bytes leftover after parsing attributes in process `syz.1.58'. [ 47.668463][ T154] IPVS: starting estimator thread 0... [ 47.757308][ T6038] IPVS: using max 43 ests per chain, 103200 per kthread [ 47.776421][ T6047] lo: entered allmulticast mode [ 47.782603][ T6047] lo: left allmulticast mode [ 47.793318][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 47.816089][ T6042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 47.863748][ T6051] netlink: 'syz.2.63': attribute type 12 has an invalid length. [ 47.942982][ T6058] syzkaller0: entered promiscuous mode [ 47.942996][ T6058] syzkaller0: entered allmulticast mode [ 48.052790][ T6067] syzkaller0: entered promiscuous mode [ 48.052812][ T6067] syzkaller0: entered allmulticast mode [ 48.168133][ T6076] process 'syz.0.70' launched './file0' with NULL argv: empty string added [ 49.227607][ T5733] Bluetooth: hci3: command tx timeout [ 49.547851][ T5733] Bluetooth: hci1: command tx timeout [ 49.547874][ T5733] Bluetooth: hci2: command tx timeout [ 49.586898][ T6097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.81'. [ 49.627831][ T66] Bluetooth: hci0: command tx timeout [ 50.422534][ T6122] batman_adv: batadv0: Adding interface: syzkaller0 [ 50.422545][ T6122] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.422561][ T6122] batman_adv: batadv0: Interface activated: syzkaller0 [ 50.451803][ T6121] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 50.480968][ T6121] batman_adv: batadv0: Removing interface: syzkaller0 [ 51.590315][ T6149] 9pnet_fd: Insufficient options for proto=fd [ 51.751530][ T6149] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 51.751548][ T6149] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.755410][ T6149] vhci_hcd vhci_hcd.0: Device attached [ 51.957073][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 52.006851][ T5806] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 52.027842][ T10] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 52.129853][ T43] kauditd_printk_skb: 51 callbacks suppressed [ 52.129869][ T43] audit: type=1400 audit(1789859694.635:386): avc: denied { mount } for pid=6162 comm="syz.1.101" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.156701][ T43] audit: type=1326 audit(1789859694.655:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6160 comm="syz.2.103" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd55d99e159 code=0x0 [ 52.186253][ T5806] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 52.193525][ T5806] usb 5-1: config 0 has no interfaces? [ 52.193544][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.207642][ T5806] usb 5-1: config 0 descriptor?? [ 52.251835][ T43] audit: type=1400 audit(1789859694.755:388): avc: denied { name_bind } for pid=6165 comm="syz.3.104" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 52.369681][ T5830] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.412010][ T6152] usb 37-1: recv xbuf, 0 [ 52.418333][ T5806] usb 5-1: USB disconnect, device number 2 [ 52.419983][ T5780] vhci_hcd vhci_hcd.0: stop threads [ 52.420385][ T5780] vhci_hcd vhci_hcd.0: release socket [ 52.420938][ T5780] vhci_hcd vhci_hcd.0: disconnect device [ 52.494969][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 52.526705][ T5830] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 52.544211][ T5830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 52.544228][ T5830] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 52.544246][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.559851][ T5830] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 52.571592][ T5830] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 52.790202][ T43] audit: type=1400 audit(1789859695.295:389): avc: denied { create } for pid=6174 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 52.792623][ T43] audit: type=1400 audit(1789859695.295:390): avc: denied { write } for pid=6174 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 52.828621][ T43] audit: type=1400 audit(1789859695.335:391): avc: denied { execute } for pid=6177 comm="syz.3.109" name="file1" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.829079][ T43] audit: type=1400 audit(1789859695.335:392): avc: denied { execute_no_trans } for pid=6177 comm="syz.3.109" path="/32/file1" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.931224][ T6163] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 52.936701][ T6163] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 52.939016][ T6163] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 53.117788][ T6186] syzkaller0: entered promiscuous mode [ 53.117805][ T6186] syzkaller0: entered allmulticast mode [ 53.128779][ T6163] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 53.133070][ T5814] usb 6-1: USB disconnect, device number 2 [ 53.147454][ T5814] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 53.147792][ T5814] spcp8x5 6-1:1.0: device disconnected [ 53.201673][ T43] audit: type=1400 audit(1789859695.705:393): avc: denied { sqpoll } for pid=6192 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.201702][ T43] audit: type=1400 audit(1789859695.705:394): avc: denied { create } for pid=6192 comm="syz.2.114" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.201722][ T43] audit: type=1400 audit(1789859695.705:395): avc: denied { map } for pid=6192 comm="syz.2.114" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.255634][ T6196] io-wq is not configured for unbound workers [ 54.192902][ T6198] Console: switching to colour dummy device 80x25 [ 54.294502][ T6216] kvm: pic: level sensitive irq not supported [ 54.298570][ T6216] kvm: pic: level sensitive irq not supported [ 54.299485][ T6216] kvm: pic: level sensitive irq not supported [ 54.303264][ T6216] kvm: pic: single mode not supported [ 54.303271][ T6216] kvm: pic: level sensitive irq not supported [ 54.304058][ T6216] kvm: pic: single mode not supported [ 54.305670][ T6216] kvm: pic: level sensitive irq not supported [ 54.306417][ T6216] kvm: pic: single mode not supported [ 54.311336][ T6199] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 54.322084][ T6199] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 54.322247][ T6199] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 54.322303][ T6199] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 54.322620][ T6199] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 54.324324][ T6199] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 54.333742][ T6199] pci 0000:00:01.0: Adding to iommu group 1 [ 54.336361][ T6199] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 54.336376][ T6199] pci 0000:00:01.0: vgaarb: bridge control possible [ 54.336388][ T6199] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 54.341251][ T6199] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 54.343220][ T6199] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 54.348488][ T6199] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 54.381523][ T6216] kvm: pic: level sensitive irq not supported [ 54.403786][ T6199] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 54.403868][ T6199] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 54.404736][ T6199] [drm] ** replaying previous printk message ** [ 54.404736][ T6199] [drm] features: -virgl +edid -resource_blob -host_visible [ 54.404744][ T6199] [drm] features: -context_init -blob_alignment [ 54.413821][ T6199] ------------[ cut here ]------------ [ 54.413832][ T6199] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 54.413840][ T6199] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#3: syz.3.116/6199 [ 54.429948][ T6199] Modules linked in: [ 54.431648][ T6199] CPU: 3 UID: 0 PID: 6199 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT(full) [ 54.435375][ T6199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.439513][ T6199] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 54.442049][ T6199] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 32 1e 70 09 85 c0 75 e0 48 8d 3d a7 f1 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 b2 1f 70 09 48 85 c0 0f [ 54.449710][ T6199] RSP: 0018:ffffc9002833ef18 EFLAGS: 00010246 [ 54.452164][ T6199] RAX: 0000000000000000 RBX: ffff8880254fb900 RCX: fffff52005067dbe [ 54.455328][ T6199] RDX: 0000000000000000 RSI: ffffffff8c91a0e0 RDI: ffffffff9149ca80 [ 54.458554][ T6199] RBP: ffffffff8c91a0e0 R08: 0000000000000000 R09: fffffbfff228a84b [ 54.461723][ T6199] R10: ffffc9002833ef18 R11: 0000000000000001 R12: 0000000000000000 [ 54.465428][ T6199] R13: ffffc9002833ef88 R14: 00000000000000d8 R15: ffff8880656f4fce [ 54.468695][ T6199] FS: 00007ff8601f66c0(0000) GS:ffff8880d5e56000(0000) knlGS:0000000000000000 [ 54.472292][ T6199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.474920][ T6199] CR2: 00007fffc79870c8 CR3: 000000005a709000 CR4: 0000000000352ef0 [ 54.478137][ T6199] Call Trace: [ 54.479549][ T6199] [ 54.480757][ T6199] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 54.483960][ T6199] ? __pfx__printk+0x10/0x10 [ 54.485878][ T6199] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 54.488378][ T6199] ? lockdep_init_map_type+0x5c/0x250 [ 54.490546][ T6199] virtio_gpu_init.cold+0x40d/0x1293 [ 54.492720][ T6199] ? vga_remove_vgacon.cold+0x1d/0x99 [ 54.494894][ T6199] ? __pfx_virtio_gpu_init+0x10/0x10 [ 54.497118][ T6199] ? is_console_locked+0x9/0x20 [ 54.499122][ T6199] ? con_is_bound+0x141/0x190 [ 54.501015][ T6199] ? vga_remove_vgacon+0x21/0x30 [ 54.503023][ T6199] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 54.505773][ T6199] virtio_gpu_probe+0x21c/0x360 [ 54.508692][ T6199] virtio_dev_probe+0x6a2/0xbe0 [ 54.510682][ T6199] ? __pfx_virtio_dev_probe+0x10/0x10 [ 54.512849][ T6199] ? kernfs_create_link+0x1bd/0x240 [ 54.514941][ T6199] ? kernfs_put+0x3f/0x60 [ 54.516693][ T6199] ? sysfs_do_create_link_sd+0xbb/0x140 [ 54.519080][ T6199] ? sysfs_create_link+0x68/0xc0 [ 54.521068][ T6199] ? __pfx_virtio_dev_probe+0x10/0x10 [ 54.523300][ T6199] really_probe+0x241/0xa60 [ 54.525154][ T6199] __driver_probe_device+0x210/0x460 [ 54.527389][ T6199] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.529778][ T6199] driver_probe_device+0x4a/0x140 [ 54.531857][ T6199] __device_attach_driver+0x1df/0x320 [ 54.534022][ T6199] ? __pfx___device_attach_driver+0x10/0x10 [ 54.536407][ T6199] bus_for_each_drv+0x159/0x1e0 [ 54.538489][ T6199] ? __pfx_bus_for_each_drv+0x10/0x10 [ 54.540665][ T6199] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.542822][ T6199] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.545177][ T6199] __device_attach+0x1e4/0x4d0 [ 54.547229][ T6199] ? __pfx___device_attach+0x10/0x10 [ 54.549352][ T6199] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.551490][ T6199] device_initial_probe+0xaf/0xd0 [ 54.553510][ T6199] bus_probe_device+0x64/0x160 [ 54.555471][ T6199] device_add+0x121d/0x1970 [ 54.557424][ T6199] ? __pfx_device_add+0x10/0x10 [ 54.559449][ T6199] ? __pfx___might_resched+0x10/0x10 [ 54.561590][ T6199] ? __init_waitqueue_head+0xca/0x150 [ 54.563726][ T6199] ? ioread8+0x8f/0xd0 [ 54.565386][ T6199] register_virtio_device+0x4f0/0x5d0 [ 54.567627][ T6199] ? __pfx_register_virtio_device+0x10/0x10 [ 54.569987][ T6199] ? __pfx_pcibios_set_master+0x10/0x10 [ 54.572241][ T6199] ? __raw_spin_lock_init+0x3a/0x110 [ 54.574357][ T6199] ? __pfx_virtio_pci_probe+0x10/0x10 [ 54.576502][ T6199] virtio_pci_probe+0x255/0x410 [ 54.578582][ T6199] local_pci_probe+0xdd/0x1b0 [ 54.580484][ T6199] pci_call_probe+0x176/0x800 [ 54.582417][ T6199] ? pci_match_device+0x147/0x7d0 [ 54.585037][ T6199] ? __pfx_pci_call_probe+0x10/0x10 [ 54.587587][ T6199] ? __pfx_pci_match_device+0x10/0x10 [ 54.589724][ T6199] ? pci_find_host_bridge+0x3c/0x80 [ 54.591832][ T6199] ? up_write+0x2dc/0x5b0 [ 54.593598][ T6199] pci_device_probe+0x25b/0x400 [ 54.595559][ T6199] ? __pfx_pci_device_probe+0x10/0x10 [ 54.597785][ T6199] ? kernfs_create_link+0x1bd/0x240 [ 54.599891][ T6199] ? sysfs_create_link+0x68/0xc0 [ 54.601896][ T6199] ? __pfx_pci_device_probe+0x10/0x10 [ 54.604068][ T6199] really_probe+0x241/0xa60 [ 54.605926][ T6199] __driver_probe_device+0x210/0x460 [ 54.608121][ T6199] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.610496][ T6199] driver_probe_device+0x4a/0x140 [ 54.612522][ T6199] __device_attach_driver+0x1df/0x320 [ 54.614660][ T6199] ? __pfx___device_attach_driver+0x10/0x10 [ 54.617161][ T6199] bus_for_each_drv+0x159/0x1e0 [ 54.619142][ T6199] ? __pfx_bus_for_each_drv+0x10/0x10 [ 54.621297][ T6199] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.623436][ T6199] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.625808][ T6199] __device_attach+0x1e4/0x4d0 [ 54.627844][ T6199] ? __pfx___device_attach+0x10/0x10 [ 54.629953][ T6199] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.632060][ T6199] device_initial_probe+0xaf/0xd0 [ 54.634083][ T6199] pci_bus_add_device+0xc5/0x100 [ 54.636103][ T6199] pci_bus_add_devices+0x9a/0x1f0 [ 54.638338][ T6199] pci_rescan_bus+0x2a/0x40 [ 54.640307][ T6199] rescan_store+0xfb/0x130 [ 54.642167][ T6199] ? __pfx_rescan_store+0x10/0x10 [ 54.644213][ T6199] ? sysfs_file_kobj+0xe4/0x290 [ 54.646201][ T6199] ? __pfx_rescan_store+0x10/0x10 [ 54.648354][ T6199] bus_attr_store+0x74/0xb0 [ 54.650219][ T6199] ? __pfx_bus_attr_store+0x10/0x10 [ 54.652336][ T6199] sysfs_kf_write+0xf2/0x150 [ 54.654247][ T6199] kernfs_fop_write_iter+0x3e0/0x5f0 [ 54.656417][ T6199] ? __pfx_sysfs_kf_write+0x10/0x10 [ 54.658675][ T6199] vfs_write+0x6af/0x1050 [ 54.660492][ T6199] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 54.662856][ T6199] ? __pfx_vfs_write+0x10/0x10 [ 54.664804][ T6199] ? find_held_lock+0x2b/0x80 [ 54.667096][ T6199] ksys_write+0x12a/0x250 [ 54.668911][ T6199] ? __pfx_ksys_write+0x10/0x10 [ 54.670910][ T6199] do_syscall_64+0x123/0x790 [ 54.672789][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.675170][ T6199] RIP: 0033:0x7ff861f9e159 [ 54.677072][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.684593][ T6199] RSP: 002b:00007ff8601f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.688554][ T6199] RAX: ffffffffffffffda RBX: 00007ff862226090 RCX: 00007ff861f9e159 [ 54.691735][ T6199] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 54.694867][ T6199] RBP: 00007ff86203506b R08: 0000000000000000 R09: 0000000000000000 [ 54.698577][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.701713][ T6199] R13: 00007ff862226128 R14: 00007ff862226090 R15: 00007ffdca7fd348 [ 54.704909][ T6199] [ 54.706176][ T6199] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 54.709103][ T6199] CPU: 3 UID: 0 PID: 6199 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT(full) [ 54.712765][ T6199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.716771][ T6199] Call Trace: [ 54.718155][ T6199] [ 54.719394][ T6199] dump_stack_lvl+0x100/0x190 [ 54.721324][ T6199] vpanic+0x553/0x970 [ 54.722969][ T6199] ? __pfx_vpanic+0x10/0x10 [ 54.724802][ T6199] panic+0xd1/0xe0 [ 54.726326][ T6199] ? __pfx_panic+0x10/0x10 [ 54.728180][ T6199] check_panic_on_warn.cold+0x19/0x34 [ 54.730334][ T6199] ? __kmem_cache_create_args+0xa9/0x430 [ 54.732645][ T6199] __warn.cold+0x191/0x318 [ 54.734490][ T6199] __report_bug+0x30f/0x440 [ 54.736344][ T6199] ? __kmem_cache_create_args+0xa9/0x430 [ 54.738665][ T6199] ? __pfx___report_bug+0x10/0x10 [ 54.740718][ T6199] ? __mutex_lock+0x26c/0x1bd0 [ 54.742691][ T6199] ? __kmem_cache_create_args+0x44/0x430 [ 54.744980][ T6199] report_bug_entry+0xe2/0x290 [ 54.746936][ T6199] ? __kmem_cache_create_args+0xac/0x430 [ 54.749172][ T6199] handle_bug+0x1cd/0x2a0 [ 54.750850][ T6199] exc_invalid_op+0x17/0x50 [ 54.752793][ T6199] asm_exc_invalid_op+0x1a/0x20 [ 54.754782][ T6199] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 54.757294][ T6199] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 32 1e 70 09 85 c0 75 e0 48 8d 3d a7 f1 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 b2 1f 70 09 48 85 c0 0f [ 54.764808][ T6199] RSP: 0018:ffffc9002833ef18 EFLAGS: 00010246 [ 54.767268][ T6199] RAX: 0000000000000000 RBX: ffff8880254fb900 RCX: fffff52005067dbe [ 54.770396][ T6199] RDX: 0000000000000000 RSI: ffffffff8c91a0e0 RDI: ffffffff9149ca80 [ 54.773600][ T6199] RBP: ffffffff8c91a0e0 R08: 0000000000000000 R09: fffffbfff228a84b [ 54.776782][ T6199] R10: ffffc9002833ef18 R11: 0000000000000001 R12: 0000000000000000 [ 54.779988][ T6199] R13: ffffc9002833ef88 R14: 00000000000000d8 R15: ffff8880656f4fce [ 54.783241][ T6199] ? __kmem_cache_create_args+0x9e/0x430 [ 54.785507][ T6199] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 54.787633][ T6199] ? __pfx__printk+0x10/0x10 [ 54.789485][ T6199] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 54.791932][ T6199] ? lockdep_init_map_type+0x5c/0x250 [ 54.794082][ T6199] virtio_gpu_init.cold+0x40d/0x1293 [ 54.796178][ T6199] ? vga_remove_vgacon.cold+0x1d/0x99 [ 54.798357][ T6199] ? __pfx_virtio_gpu_init+0x10/0x10 [ 54.800476][ T6199] ? is_console_locked+0x9/0x20 [ 54.802445][ T6199] ? con_is_bound+0x141/0x190 [ 54.804346][ T6199] ? vga_remove_vgacon+0x21/0x30 [ 54.806349][ T6199] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 54.809189][ T6199] virtio_gpu_probe+0x21c/0x360 [ 54.811192][ T6199] virtio_dev_probe+0x6a2/0xbe0 [ 54.813186][ T6199] ? __pfx_virtio_dev_probe+0x10/0x10 [ 54.815348][ T6199] ? kernfs_create_link+0x1bd/0x240 [ 54.817445][ T6199] ? kernfs_put+0x3f/0x60 [ 54.819205][ T6199] ? sysfs_do_create_link_sd+0xbb/0x140 [ 54.821390][ T6199] ? sysfs_create_link+0x68/0xc0 [ 54.823405][ T6199] ? __pfx_virtio_dev_probe+0x10/0x10 [ 54.825597][ T6199] really_probe+0x241/0xa60 [ 54.827441][ T6199] __driver_probe_device+0x210/0x460 [ 54.829507][ T6199] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.831917][ T6199] driver_probe_device+0x4a/0x140 [ 54.833978][ T6199] __device_attach_driver+0x1df/0x320 [ 54.836171][ T6199] ? __pfx___device_attach_driver+0x10/0x10 [ 54.838566][ T6199] bus_for_each_drv+0x159/0x1e0 [ 54.840575][ T6199] ? __pfx_bus_for_each_drv+0x10/0x10 [ 54.842791][ T6199] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.844895][ T6199] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.847257][ T6199] __device_attach+0x1e4/0x4d0 [ 54.849200][ T6199] ? __pfx___device_attach+0x10/0x10 [ 54.851342][ T6199] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.853482][ T6199] device_initial_probe+0xaf/0xd0 [ 54.855575][ T6199] bus_probe_device+0x64/0x160 [ 54.857612][ T6199] device_add+0x121d/0x1970 [ 54.859512][ T6199] ? __pfx_device_add+0x10/0x10 [ 54.861521][ T6199] ? __pfx___might_resched+0x10/0x10 [ 54.863661][ T6199] ? __init_waitqueue_head+0xca/0x150 [ 54.865832][ T6199] ? ioread8+0x8f/0xd0 [ 54.867541][ T6199] register_virtio_device+0x4f0/0x5d0 [ 54.869741][ T6199] ? __pfx_register_virtio_device+0x10/0x10 [ 54.872165][ T6199] ? __pfx_pcibios_set_master+0x10/0x10 [ 54.874418][ T6199] ? __raw_spin_lock_init+0x3a/0x110 [ 54.876569][ T6199] ? __pfx_virtio_pci_probe+0x10/0x10 [ 54.878771][ T6199] virtio_pci_probe+0x255/0x410 [ 54.880776][ T6199] local_pci_probe+0xdd/0x1b0 [ 54.882753][ T6199] pci_call_probe+0x176/0x800 [ 54.884684][ T6199] ? pci_match_device+0x147/0x7d0 [ 54.886750][ T6199] ? __pfx_pci_call_probe+0x10/0x10 [ 54.888873][ T6199] ? __pfx_pci_match_device+0x10/0x10 [ 54.891071][ T6199] ? pci_find_host_bridge+0x3c/0x80 [ 54.893210][ T6199] ? up_write+0x2dc/0x5b0 [ 54.895008][ T6199] pci_device_probe+0x25b/0x400 [ 54.896994][ T6199] ? __pfx_pci_device_probe+0x10/0x10 [ 54.899226][ T6199] ? kernfs_create_link+0x1bd/0x240 [ 54.901396][ T6199] ? sysfs_create_link+0x68/0xc0 [ 54.903459][ T6199] ? __pfx_pci_device_probe+0x10/0x10 [ 54.905630][ T6199] really_probe+0x241/0xa60 [ 54.907511][ T6199] __driver_probe_device+0x210/0x460 [ 54.909608][ T6199] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.911968][ T6199] driver_probe_device+0x4a/0x140 [ 54.913980][ T6199] __device_attach_driver+0x1df/0x320 [ 54.916143][ T6199] ? __pfx___device_attach_driver+0x10/0x10 [ 54.918501][ T6199] bus_for_each_drv+0x159/0x1e0 [ 54.920455][ T6199] ? __pfx_bus_for_each_drv+0x10/0x10 [ 54.922619][ T6199] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.924759][ T6199] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.927097][ T6199] __device_attach+0x1e4/0x4d0 [ 54.929044][ T6199] ? __pfx___device_attach+0x10/0x10 [ 54.931180][ T6199] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.933292][ T6199] device_initial_probe+0xaf/0xd0 [ 54.935354][ T6199] pci_bus_add_device+0xc5/0x100 [ 54.937383][ T6199] pci_bus_add_devices+0x9a/0x1f0 [ 54.939425][ T6199] pci_rescan_bus+0x2a/0x40 [ 54.941257][ T6199] rescan_store+0xfb/0x130 [ 54.943090][ T6199] ? __pfx_rescan_store+0x10/0x10 [ 54.945130][ T6199] ? sysfs_file_kobj+0xe4/0x290 [ 54.947155][ T6199] ? __pfx_rescan_store+0x10/0x10 [ 54.949220][ T6199] bus_attr_store+0x74/0xb0 [ 54.951026][ T6199] ? __pfx_bus_attr_store+0x10/0x10 [ 54.953097][ T6199] sysfs_kf_write+0xf2/0x150 [ 54.954963][ T6199] kernfs_fop_write_iter+0x3e0/0x5f0 [ 54.957025][ T6199] ? __pfx_sysfs_kf_write+0x10/0x10 [ 54.959113][ T6199] vfs_write+0x6af/0x1050 [ 54.960859][ T6199] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 54.963199][ T6199] ? __pfx_vfs_write+0x10/0x10 [ 54.965137][ T6199] ? find_held_lock+0x2b/0x80 [ 54.967077][ T6199] ksys_write+0x12a/0x250 [ 54.968825][ T6199] ? __pfx_ksys_write+0x10/0x10 [ 54.970830][ T6199] do_syscall_64+0x123/0x790 [ 54.972756][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.975123][ T6199] RIP: 0033:0x7ff861f9e159 [ 54.976958][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.984644][ T6199] RSP: 002b:00007ff8601f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.987965][ T6199] RAX: ffffffffffffffda RBX: 00007ff862226090 RCX: 00007ff861f9e159 [ 54.991084][ T6199] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 54.994237][ T6199] RBP: 00007ff86203506b R08: 0000000000000000 R09: 0000000000000000 [ 54.997402][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.000505][ T6199] R13: 00007ff862226128 R14: 00007ff862226090 R15: 00007ffdca7fd348 [ 55.003636][ T6199] [ 55.005555][ T6199] Kernel Offset: disabled [ 55.007309][ T6199] Rebooting in 86400 seconds..