last executing test programs: 2.449014714s ago: executing program 0 (id=1): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@local, 0x4e21, 0x28, 0xfffc, 0x0, 0xa, 0x80, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0x40000000, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@broadcast, 0x1, 0x4, 0x3, 0x9, 0xe000000}}, 0xe8) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x111}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) dup(r2) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x408}}, 0x20}}, 0x40) 2.398392863s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc/net/rpc/auth.unix.gid/channel\x00', &(0x7f00000000c0)='proc\x00', 0xc4402, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) process_vm_readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/48, 0x30}, {&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000340)}], 0x4, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/189, 0xbd}], 0x1, 0x0) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) capset(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000140)={0x52f, 0x105ad1e, 0x7, 0x9917, 0x800, 0x8}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600090001c57bec6460456720fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb591643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e0036e19228aadc0db70100c1deec1f42447a5ae735938634a43a000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xd8}], 0x1}, 0xc0) write(r4, &(0x7f0000000500)=' 294960\n', 0x8) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) 2.378400722s ago: executing program 3 (id=4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x49423c64d4b48e3e) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) 2.309251171s ago: executing program 0 (id=6): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r0, &(0x7f0000000000)='3', 0x4e) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabb0000000009000000455200240066000000219078ac1e0001ac1e01014e234e2004519078680e92d10045f87fdf80d666a96efa"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x34, 0x1000, 0xa}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x40) 2.308947753s ago: executing program 0 (id=7): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x8001) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r1, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)={0xe, 0x7, 0x2, {{0x1, ':'}, 0x40}}, 0xe) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9d", 0xb}], 0x1}}], 0x1, 0x20008000) shutdown(r0, 0x1) 2.240425789s ago: executing program 2 (id=9): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda1000000000000270001fff8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.239467929s ago: executing program 0 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0xbb2, 0x0, 0x3}, {0x3f8, 0x0, 0x7}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x80, 0x40000105, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x8, {0x20, 0x8000, 0x7278aad9, 0x0, 0x1ff}}) 2.235536683s ago: executing program 2 (id=11): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000608)='\t\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8008080, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="42b7ba7e831bb28b1be165a90fdf312d9f1143102ec2db2c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0xfe}}, {{0x0, 0x6000, &(0x7f0000000a40)=[{&(0x7f0000000840)='['}], 0x1}}], 0x3, 0x404c444) 2.159806212s ago: executing program 3 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fddbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="1c00238006000400d9000000080014"], 0x38}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2702, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r7, &(0x7f0000000800)='file ?evio.* +', 0xe) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=@delchain={0x24, 0x65, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xa, 0xf}, {0x8, 0xfff4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x20080000) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000280)={0x2}) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f00000002c0)={[{0x2, 0x95c, 0x61, 0x7, 0xfe, 0xe, 0x1, 0x47, 0x8b, 0x1, 0x3, 0x18, 0x7}, {0x9, 0x5, 0x8, 0xff, 0x0, 0x4, 0x5, 0x1, 0x72, 0xc0, 0x5, 0x3, 0x401}, {0x5, 0x5, 0x40, 0x2, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x12, 0x2c, 0xc}], 0x6}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.159682716s ago: executing program 2 (id=13): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000300)='./cgroup\x00', 0x0, 0x10}, 0x18) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x501440, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000040)={0x7, 0x4}) 2.090176906s ago: executing program 2 (id=15): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x16}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) syz_usb_control_io$hid(r0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x1000000, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x20, 0x1f}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240), &(0x7f0000000040), 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000100)={0x401, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x4], &(0x7f0000000a40)=[0x0], &(0x7f0000000200), 0x0, 0xffffffffffffffff}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="40024e0000004e101fccdeca99c1f176e81af7597bb0cd64d725afc053f3cf5be4cb368d108f2dace2ed5dd0fe97fba66ee1cfb359433b5dfbf82061cfa47284076f1e20b59f6d3293dfdb443dac75b3cfeee61e"], &(0x7f00000006c0)=ANY=[@ANYBLOB="c6380e2994dde4a188495000cfe042651b4ada9140dda5440418e25a77bcea67fe96087e971c43b858c90934840e06802f940fb621948e57572511a9c53519ffb7b46bc4e771f1077d765d03c24e773ae295168aeaeb6b28b84b1de795044e40101b3313067e011a659a481122f11f247d78158e4e48a0932eaf5e11cd44f74659c4862c39957fd02bbbd68ac834"]}, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x40, 0x1b, 0x27, "4e14ae5b25d31b979c108ad017bc0fd24e0c06f42d76b32d7f064f4fdfef03c8f43e2ff8cbd9f8"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xfa}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2b}, &(0x7f0000000500)={0x20, 0x81, 0x1, "8b"}, &(0x7f0000000540)={0x20, 0x82, 0x1, "fb"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "a1f8"}, &(0x7f00000005c0)={0x20, 0x84, 0x1, "0e"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "fa3368"}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffff01) write$char_usb(r8, &(0x7f0000000040)="20344224e21d8ebea6ef2d45756cc311f33520b8cc68b291ef72be1b5f721af7fb3c30834a", 0x25) 2.089267673s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=' 294960\n', 0x8) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) (async) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xd, 0x4, 0x6, 0x9, 'syz1\x00', 0x2}, 0x5, 0x100, 0x3, r3, 0x9, 0x0, 'syz1\x00', &(0x7f0000000100)=['\x00', '\\)\x00', '\x00', '*-\x00', 'proc\x00', '(\x00', '/dev/kvm\x00', '/dev/kvm\x00', 'proc\x00'], 0x26}) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) 1.959526366s ago: executing program 3 (id=20): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000ffff8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.957771045s ago: executing program 3 (id=21): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x1, 0x9}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="cb3500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000000002000000000000000200"/28], 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_0\x00', 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0xa, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405668, &(0x7f0000000100)={0x1, 0x40000081, 0xe921209, 0x84000}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, r1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x4000407f, r5}, 0x38) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_targets\x00') write(r7, &(0x7f0000000740)="19", 0x1) close(r6) bind$bt_hci(r7, &(0x7f00000006c0)={0x1f, 0x1, 0x2}, 0x6) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r6, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb29d453e94df581d7575dd5b7ff0f58e200", '\x00\t\x00', "1f00000000000080"}, 0x38) close(0x3) write$dsp(r8, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0xb, 0x60, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8000, 0x7, 0x80000000}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x18, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x4, 0x0, 0x9, 0xa, 0x0, 0x50, 0x8}, @cb_func={0x18, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x1a, &(0x7f0000000340)=""/26, 0x41000, 0x2, '\x00', r10, 0x0, r0, 0x8, &(0x7f0000000440)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x10, 0x10000, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r1, r1, r11], &(0x7f00000005c0)=[{0x2, 0x1, 0x6}, {0x1, 0x3, 0x7, 0x5}, {0x0, 0x1, 0xd, 0x7}], 0x10, 0x4}, 0x94) 1.699452057s ago: executing program 0 (id=24): setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) splice(r0, &(0x7f00000000c0)=0x93b, r1, &(0x7f0000000140)=0x3023, 0x4, 0x2) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000) sendmsg$tipc(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000200)="e0d07d9e903778eac211635cba00ff77c0d45b599c593998dc10b9e8e4a3d2fe0692354b1f31060cbe74ed493667e6b6df68db44bd", 0x35}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="746e972b97075025046ca2859f05618466c2c1f1d9e6e44ff474cd97c7b5fc32ed155eebddc2d92ab94afda5aaa215e07c76cfc1e194a9f102747af1a7002426c839788473d00a0ed3", 0x49}], 0x3, &(0x7f0000001300)="9b4f94a5946b6f6351d57821b50e79944c0abb1b3d40ce5ac6436ef11cde16202295c004570c75d078bb751feb19fdfe8f0a5075bec5796f684ea7501d778d8098c730163f3430c8de8435a3fb3ba12501d671162bb633ab2a012eef8e3f8726706acfa07e47a0ea", 0x68, 0x8001}, 0x4001) r3 = openat2(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x400, 0x8a, 0x10}, 0x18) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001440)={0x0}, &(0x7f0000001480)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000014c0)={r4, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0xd, 0x7}, 0x90) bind$inet6(r3, &(0x7f0000001580)={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9622}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000015c0)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendto(r5, &(0x7f0000001600)="837831a7ae12fa6df67ad0a4922c57cd5ede028e28", 0x15, 0x8041, &(0x7f0000001640)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000016c0), 0x20000, 0x0) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000001700)) write$P9_RVERSION(r6, &(0x7f0000001740)={0x13, 0x65, 0xffff, 0x9, 0x6, '9P2000'}, 0x13) io_setup(0x8, &(0x7f0000001780)=0x0) io_submit(r7, 0x4, &(0x7f0000001ac0)=[&(0x7f0000001880)={0x0, 0x0, 0x0, 0x3, 0x4, r2, &(0x7f00000017c0)="edc5763c32b96dbafe48ad7e8ae7b0fc72b158147c46e0ec1da91f3f2303b5df2cd82717ecfa81bde595757ef7418110b699fddb1694c972dbf13fd8ddb43bc6e13a98d0fc39ebf849653c76c62ac6e2227af4e031ac5f44f06e76fa64a1cf4e62521bfcc7c84eb62879584a65bfd5eb7c67c9bbacc529fc17ab8b480d22339f58c306", 0x83, 0x47, 0x0, 0x3, r6}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0xf, 0x400, r0, &(0x7f00000018c0)="e8446f1bdd5ce5342901ca7b8c772f", 0xf, 0x1, 0x0, 0x2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x6, 0xb, r5, &(0x7f0000001940)="376987b65c42fe25742612fc71aa5002d464dc88ae8f078e9c9750aa9692c1451d8003ebafa4f9216733e75d483ed0d3eff4b6507aba5143f77041845d8c55f3aad3413d1fbf17ab7a43bcde9c738585ec07220a9074a572b3e18cff263bfd66d8c24ce797f3464e65932202261b0cb6bd19e0806d79f4f6378fe346daa860e84356e269a4", 0x85, 0x5, 0x0, 0x1, r3}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000001a40)="7ecc22b1486a9ec67571c9dbe1cdebcd1fced52ae28b73a13c6af38b7002aa00b8f0041f54735ffa062a88aa2a", 0x2d, 0x100, 0x0, 0x2, r0}]) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000001b00)=0x1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e00)={r3, 0xe0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001b80)=[0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000001c00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001c40), &(0x7f0000001c80), 0x8, 0x14, 0x8, 0x8, &(0x7f0000001cc0)}}, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000001e40)={0x2c, 0x4, r8, 0x36, r9}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001e80)={r4, @in={{0x2, 0x4e21, @empty}}, 0x1ff, 0xee1c, 0x5, 0x200, 0x11, 0xffffff3e, 0x33}, 0x9c) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001f80)=0x0) syz_clone3(&(0x7f00000031c0)={0x2000000, &(0x7f0000001fc0), &(0x7f0000002000), &(0x7f0000002040)=0x0, {0x41}, &(0x7f0000002080)=""/4096, 0x1000, &(0x7f0000003080)=""/223, &(0x7f0000003180)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4, {r3}}, 0x58) sendmsg$nl_generic(r3, &(0x7f0000003500)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000034c0)={&(0x7f0000003240)={0x254, 0x2c, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@typed={0x8, 0x5b, 0x0, 0x0, @pid=r10}, @nested={0x111, 0x5d, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @fd=r3}, @nested={0x4, 0xa8}, @generic="385b8f6db994050c6de887fa537b3fc09a876582696a6c1eb2a1cd00c1f93f1628230a99f32084870de8250de9e4cf50df641274e18c7528fb98f6dea6", @generic="ef31955f1ba7898b54bd8f0d830985e17e9dd98d44ed92572d3754ce5978cffb702dc52ef387e4ebc5d30c001bf5f201376098af22fefe9ffb2ad7d672d451863aa3a0077523ef2d3b67a5c203f11872c622b2b9698bbc87a6ea3c0bbb9b3fa5690324705288b2a06bdc526be3838e1751e8c667548708782944e1e619df679396dcff4c55a8b2cde9ca99fd714f60e9b4ea6d6fdc96bd9313a1ac75372f0bcdcd840c2fccef2ee7d21a179d", @typed={0x8, 0x9f, 0x0, 0x0, @pid=r11}, @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x126}, @nested={0x4, 0x3a}]}, @generic="e636d7e407ebdc25d45bee73a10cc15c428f996b50742e30eec711aba1ed77b5bdb42d0861734e8ece25712667352b7a1cf852d4aa032fef89c50c5e8d31364bb90c6f68d10df7080d82456d7e6803990533d894de54323cc1c4f410e80d5a3e2ae1928fe770c23565c4e9339a01852eb5daf483951bda3941bf572273be145c8efba9f4f20098642eb0665a7ef4a800a3036f2a37f47b8158a4b2f0ea6488c4dbc6845fd9e6dd5adc688c", @generic="7a1454c82081354daf07707ae0ae6c0a8e1294c66a201afbf2765340d0f4d1", @nested={0x4, 0x167}, @generic="ea87f54bd5daa4a2a89d0d6fd7bd3b56fe282f16ca2095", @generic="d860b6199efac304639dc72b87519e47022463118f8f616b7cf1f144dc157e139e98", @typed={0x8, 0x12e, 0x0, 0x0, @fd=r9}, @typed={0x8, 0xb2, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x157, 0x0, 0x0, @u64=0x7}]}, 0x254}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000) ioctl$CDROM_CLEAR_OPTIONS(r6, 0x5321, 0x8) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000003580), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x24, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4800}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000040) sendmsg$tipc(r3, &(0x7f0000003b00)={&(0x7f0000003680)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x4}}, 0x10, &(0x7f0000003a40)=[{&(0x7f00000036c0)="a8608c7a52b12362b68b45681eb71e9876885eab49831db4bd6ff46bccb10c2c816385174fb0b20c90e73b1cd00f27031f8c78327b688e8234038c2c414e4a8182d0017cf85238b7684d75ebcd1948688d9b212bc652cad8ce9a164650b526b5c0711f1f4b", 0x65}, {&(0x7f0000003740)="b5566f4ec179b5e350aab19c71e6c7bee95cdcf0dc3613bcf22d65b5dde0c8f04a10d8b3d0cb63a1b0869a7a2406c9c7c6a4d1df36acd49ef460d5fd9ce2e6227df717232b511a196fc81c325a172bbc2823ef", 0x53}, {&(0x7f00000037c0)="f161146029605eafd133ba427dfa575d0a8ac03b91aa42839d45605046492ae9adce3531475996520cc5d81834268363bb8731f2e8d691acab624672f4082476da239ba78f8ec8240291f0d94fdc13372fd0a679555e0ba9e12e214d123fc5fc94f9298e72e5a09559f8585f1891793b88ca67d862ae47657bd2a27ca25d", 0x7e}, {&(0x7f0000003840)="41a2194f7d95182fba0985a1d32f65b15b1111326df9ea447c937dcc898966e59ed248a53d575d68e4ab6bb88b1da662f47d15c7b75490b8486539ddf08031387178a50f5fe792d715e8e2c9a78de19d63de675cc241af123e812ef215d664fd0f4e3a402be8ba45cb72bc8058d6fda5331272be71a232e30f896b454149417d52a3a404d77efc0836c46efcf51e73aa12693b0dd3dd96ed72a39c055254eb8c4bb8bdf795db041568826131c0e107191a9349c0cf018eee724e13d4c30a370e9a70ca4c7ad3", 0xc6}, {&(0x7f0000003940)="ceac9798c045cae42a87472a046ee39b1af83014826f480406d2c62ffaad05c14b3483806c3b8d135098c03d2e8ba7edcda5fc9ef22404ee106e49934554e3cd4575546a2fa9518d21c3d7e46d92429ee9cb9de68cabcb5abc9d8c841f1d4dfa08d9e5ea41a8ff5c2630f3efc0751125549fd7843d2ad3e457022d1668069d4930a156adffa83557fdf0d78ac776150b18740f0af5d7632033e0e454157a667b8cf619c02e1ecd8bab7066067eb29314668902d10dfdb366a431920a85fd859866f8b907baff25cefc544176be46baf192a05ed92c322f9c40cf", 0xda}], 0x5, &(0x7f0000003ac0), 0x0, 0x4000811}, 0x20000000) 1.650351626s ago: executing program 1 (id=25): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xd00) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000007000000000000000018200000", @ANYRES32=r2, @ANYBLOB="00000000000000006300a0000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x21}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100002000000000020000300000000006ad6a7f0a21714937458316cf68471161cc9fbdf57ff4002e02e931412c36a1cfcb69d42b3a2b155525e740ba72a3040b663a7080744350b12b131025decec5d1140541714c28448b71bb92dfbd74ff9d11fe2db4eabce870cd23272865231347aa08682ec84cba77fcd29468212a1de30bd645e672bd434dbe31ee925622b1078594babd5f032876e3cb7f2e858ce1af31cd73825"], 0x24, 0x2) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) 1.570373706s ago: executing program 1 (id=26): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xe, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xe, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, &(0x7f00000000c0)) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x42000004, 0x0, 0x5c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x800) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x800) 1.459828087s ago: executing program 1 (id=27): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x8, 0xbe}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x413}}}, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x26040090) dup2(r1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) syz_emit_ethernet(0x32, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x4e20, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, 0x0, 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x8, 0xbe}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x413}}}, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x26040090) (async) dup2(r1, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write(r4, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) (async) syz_emit_ethernet(0x32, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x4e20, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) 876.444518ms ago: executing program 1 (id=28): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1fe) mount(0x0, &(0x7f0000000200)='my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000200)='my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_debugfs/asoc/components\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_debugfs/asoc/components\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x400) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f0000000000)=""/78) semtimedop(r1, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) r2 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x0, 0x0, 0x40007, {{0x5, 0x4, 0x0, 0xb, 0x14, 0x64, 0x0, 0x28, 0x4, 0x0, @broadcast, @multicast2}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="0b031260fe814e3ab5ce8f94061cffff", 0x10, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x4af81, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf2507000000080001006000000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500060000000800"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x8000) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'pimreg0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'pimreg0\x00', @link_local}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'erspan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'erspan0\x00', 0x0}) semop(r1, &(0x7f0000000180)=[{0x3, 0x8000, 0x1000}], 0x1) 272.117µs ago: executing program 1 (id=29): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda1000000000000270080fff8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=30): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="f00000001a000100fdffffff00000000ac14143e000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010000000000000000000000000000000000330000006401010000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000060000000200000000000000000000000a0002006000000000000000"], 0xf0}}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/312], 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x40082) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) kernel console output (not intermixed with test programs): [ 28.986557][ T43] audit: type=1400 audit(1790040472.322:115): avc: denied { siginh } for pid=5633 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:40073' (ED25519) to the list of known hosts. [ 30.051316][ T43] audit: type=1400 audit(1790040473.382:116): avc: denied { name_bind } for pid=5640 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.085863][ T43] audit: type=1400 audit(1790040473.422:117): avc: denied { execute } for pid=5641 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.086226][ T43] audit: type=1400 audit(1790040473.422:118): avc: denied { execute_no_trans } for pid=5641 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.984819][ T43] audit: type=1400 audit(1790040474.312:119): avc: denied { write } for pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.037180][ T43] audit: type=1400 audit(1790040474.372:120): avc: denied { write } for pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.122273][ T43] audit: type=1400 audit(1790040474.452:121): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.190159][ T43] audit: type=1400 audit(1790040474.522:122): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.424043][ T43] audit: type=1400 audit(1790040474.752:123): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.477569][ T43] audit: type=1400 audit(1790040474.812:124): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.665114][ T43] audit: type=1400 audit(1790040474.992:125): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.808454][ T5641] cgroup: Unknown subsys name 'net' [ 32.937807][ T5641] cgroup: Unknown subsys name 'cpuset' [ 32.940085][ T5641] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.167759][ T5700] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.002653][ T5641] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.512325][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 37.512344][ T43] audit: type=1400 audit(1790040480.842:161): avc: denied { execmem } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.738627][ T43] audit: type=1400 audit(1790040481.072:162): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.738674][ T43] audit: type=1400 audit(1790040481.072:163): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.740883][ T43] audit: type=1400 audit(1790040481.072:164): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.744837][ T43] audit: type=1400 audit(1790040481.072:165): avc: denied { ioctl } for pid=5724 comm="syz-executor" path="socket:[1844]" dev="sockfs" ino=1844 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.774040][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.776118][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.777491][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.777767][ T5736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.778134][ T5736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.778374][ T5736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.786285][ T43] audit: type=1400 audit(1790040481.122:166): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.786712][ T43] audit: type=1400 audit(1790040481.122:167): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.788949][ T43] audit: type=1400 audit(1790040481.122:168): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.790202][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.792012][ T43] audit: type=1400 audit(1790040481.122:169): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.793018][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.793056][ T5729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.795768][ T5729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.795947][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.797772][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.797984][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.798419][ T5729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.798780][ T5729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.798957][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.801478][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.801737][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.801830][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.802597][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.839196][ T43] audit: type=1400 audit(1790040481.172:170): avc: denied { sys_module } for pid=5728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.369777][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.370304][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.370463][ T5731] bridge_slave_0: entered allmulticast mode [ 38.371239][ T5731] bridge_slave_0: entered promiscuous mode [ 38.374255][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.374296][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.374352][ T5731] bridge_slave_1: entered allmulticast mode [ 38.375240][ T5731] bridge_slave_1: entered promiscuous mode [ 38.422182][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.441317][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.459342][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.459412][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.459470][ T5724] bridge_slave_0: entered allmulticast mode [ 38.460181][ T5724] bridge_slave_0: entered promiscuous mode [ 38.461391][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.462354][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.462509][ T5724] bridge_slave_1: entered allmulticast mode [ 38.463279][ T5724] bridge_slave_1: entered promiscuous mode [ 38.485361][ T5731] team0: Port device team_slave_0 added [ 38.506631][ T5731] team0: Port device team_slave_1 added [ 38.508161][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.523941][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.557854][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.557866][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.557878][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.580346][ T5724] team0: Port device team_slave_0 added [ 38.580428][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.580503][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.580575][ T5728] bridge_slave_0: entered allmulticast mode [ 38.581470][ T5728] bridge_slave_0: entered promiscuous mode [ 38.583168][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.583176][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.583189][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.584122][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.584161][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.584220][ T5728] bridge_slave_1: entered allmulticast mode [ 38.586174][ T5728] bridge_slave_1: entered promiscuous mode [ 38.594800][ T5724] team0: Port device team_slave_1 added [ 38.640649][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.661021][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.667621][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.667631][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.667644][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.671559][ T5731] hsr_slave_0: entered promiscuous mode [ 38.672235][ T5731] hsr_slave_1: entered promiscuous mode [ 38.678846][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.678894][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.679040][ T5725] bridge_slave_0: entered allmulticast mode [ 38.679759][ T5725] bridge_slave_0: entered promiscuous mode [ 38.687428][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.687437][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.687450][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.689259][ T5728] team0: Port device team_slave_0 added [ 38.695855][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.695898][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.696063][ T5725] bridge_slave_1: entered allmulticast mode [ 38.696784][ T5725] bridge_slave_1: entered promiscuous mode [ 38.703639][ T5728] team0: Port device team_slave_1 added [ 38.732886][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.732897][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.732909][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.749225][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.749235][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.749247][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.761914][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.764772][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.777214][ T5724] hsr_slave_0: entered promiscuous mode [ 38.777686][ T5724] hsr_slave_1: entered promiscuous mode [ 38.777983][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 38.778033][ T5724] Cannot create hsr debugfs directory [ 38.808179][ T5725] team0: Port device team_slave_0 added [ 38.820571][ T5725] team0: Port device team_slave_1 added [ 38.835289][ T5728] hsr_slave_0: entered promiscuous mode [ 38.835722][ T5728] hsr_slave_1: entered promiscuous mode [ 38.836056][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 38.836067][ T5728] Cannot create hsr debugfs directory [ 38.851188][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.851199][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.851211][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.852132][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.852139][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.852151][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.945862][ T5725] hsr_slave_0: entered promiscuous mode [ 38.946309][ T5725] hsr_slave_1: entered promiscuous mode [ 38.946820][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 38.946831][ T5725] Cannot create hsr debugfs directory [ 39.058643][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.063940][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.076246][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.079005][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.079629][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.082644][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.090851][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.094435][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.150639][ T5724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.153735][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.154530][ T5724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.157415][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.158351][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.158403][ T5731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.158690][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.158741][ T5731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.162137][ T5724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.168083][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.168520][ T5724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.172777][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.200600][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.201410][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.258026][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.261520][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.262435][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.265288][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.277613][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.282965][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.283721][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.287932][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.375028][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.407214][ T5725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.409319][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.409788][ T5725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.412026][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.417925][ T5725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.422749][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.423219][ T5725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.425748][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.427683][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.440152][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.440203][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.452538][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.454231][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.454276][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.490617][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.501250][ T5731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.509510][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.512285][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.512331][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.524304][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.524384][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.539698][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.549418][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.549464][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.560721][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.560766][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.591664][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.624670][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.640601][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.640692][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.648908][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.648954][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.682186][ T5725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.802775][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.829190][ T5735] Bluetooth: hci3: command tx timeout [ 39.829366][ T5735] Bluetooth: hci0: command tx timeout [ 39.829432][ T5735] Bluetooth: hci1: command tx timeout [ 39.829489][ T5735] Bluetooth: hci2: command tx timeout [ 39.833061][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.840860][ T5731] veth0_vlan: entered promiscuous mode [ 39.852544][ T5731] veth1_vlan: entered promiscuous mode [ 39.882647][ T5724] veth0_vlan: entered promiscuous mode [ 39.888277][ T5724] veth1_vlan: entered promiscuous mode [ 39.890975][ T5731] veth0_macvtap: entered promiscuous mode [ 39.894339][ T5731] veth1_macvtap: entered promiscuous mode [ 39.899175][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.909069][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.916594][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.921784][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.957535][ T5724] veth0_macvtap: entered promiscuous mode [ 39.961618][ T5724] veth1_macvtap: entered promiscuous mode [ 39.971960][ T5728] veth0_vlan: entered promiscuous mode [ 39.975151][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.985016][ T5728] veth1_vlan: entered promiscuous mode [ 40.002145][ T5725] veth0_vlan: entered promiscuous mode [ 40.006341][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.020020][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.021921][ T5725] veth1_vlan: entered promiscuous mode [ 40.025434][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.025460][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.025489][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.025736][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.025747][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.043619][ T5728] veth0_macvtap: entered promiscuous mode [ 40.061443][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.061457][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.066433][ T5728] veth1_macvtap: entered promiscuous mode [ 40.079314][ T5725] veth0_macvtap: entered promiscuous mode [ 40.082640][ T5725] veth1_macvtap: entered promiscuous mode [ 40.102928][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.108495][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.117398][ T5731] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.120549][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.128464][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.137318][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.137331][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.157068][ T5806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.157268][ T5806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.176021][ T5806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.176421][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.176432][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.225593][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.225612][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.248102][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.248114][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.265675][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.270773][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.270786][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.297123][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.297136][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.306099][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.306362][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.306559][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.306827][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.306970][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.307187][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.307214][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.307246][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.432032][ T5888] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 40.432496][ T5888] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 40.432577][ T5888] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.474247][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 40.549274][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 40.593890][ T5910] UHID_CREATE from different security context by process 12 (syz.1.14), this is not allowed. [ 40.594500][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 40.876478][ T1477] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 41.025355][ T1477] usb 7-1: Using ep0 maxpacket: 32 [ 41.025872][ T1477] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 41.029644][ T1477] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 41.029667][ T1477] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 41.029679][ T1477] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 41.029692][ T1477] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 41.031394][ T1477] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.031406][ T1477] usb 7-1: Product: syz [ 41.031413][ T1477] usb 7-1: Manufacturer: syz [ 41.031421][ T1477] usb 7-1: SerialNumber: syz [ 41.050098][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 41.063966][ T1477] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input5 [ 41.267790][ T1477] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 41.267802][ T1477] (id 0x00) [ 41.286519][ T5956] geneve1: entered allmulticast mode [ 41.315105][ T1477] rc_core: IR keymap rc-imon-pad not found [ 41.315118][ T1477] Registered IR keymap rc-empty [ 41.315155][ T1477] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 41.315164][ T1477] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 41.459002][ T5914] af_packet: tpacket_rcv: packet too big, clamped from 65512 to 4294967272. macoff=96 [ 41.479597][ T1477] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 41.490460][ T1477] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input6 [ 41.494953][ T1477] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:2> initialized [ 41.905067][ T64] Bluetooth: hci2: command tx timeout [ 41.905090][ T64] Bluetooth: hci1: command tx timeout [ 41.905107][ T64] Bluetooth: hci0: command tx timeout [ 41.926465][ T5964] Zero length message leads to an empty skb [ 42.677382][ T43] kauditd_printk_skb: 78 callbacks suppressed [ 42.677394][ T43] audit: type=1400 audit(1790040486.012:249): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 42.843611][ T43] audit: type=1400 audit(1790040486.172:250): avc: denied { create } for pid=5982 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.846184][ T43] audit: type=1400 audit(1790040486.182:251): avc: denied { mount } for pid=5982 comm="syz.1.30" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.859713][ T5983] Console: switching to colour dummy device 80x25 [ 42.899473][ T43] audit: type=1400 audit(1790040486.232:252): avc: denied { create } for pid=5982 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.899846][ T43] audit: type=1400 audit(1790040486.232:253): avc: denied { create } for pid=5982 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.902829][ T43] audit: type=1400 audit(1790040486.232:254): avc: denied { write } for pid=5982 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.902854][ T43] audit: type=1400 audit(1790040486.232:255): avc: denied { nlmsg_write } for pid=5982 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.903562][ T43] audit: type=1400 audit(1790040486.232:256): avc: denied { mount } for pid=5982 comm="syz.1.30" name="/" dev="configfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 42.903863][ T43] audit: type=1400 audit(1790040486.232:257): avc: denied { search } for pid=5982 comm="syz.1.30" name="/" dev="configfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.904076][ T43] audit: type=1400 audit(1790040486.232:258): avc: denied { search } for pid=5982 comm="syz.1.30" name="usb_gadget" dev="configfs" ino=5434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.960156][ T5984] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 42.974682][ T5984] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 42.974871][ T5984] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 42.974946][ T5984] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 42.979427][ T5984] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 42.980065][ T5984] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 42.991718][ T5984] pci 0000:00:01.0: Adding to iommu group 1 [ 42.994480][ T5984] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 42.994492][ T5984] pci 0000:00:01.0: vgaarb: bridge control possible [ 42.994501][ T5984] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 43.011815][ T5984] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 43.014192][ T5984] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 43.018433][ T5984] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 43.066391][ T5984] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 43.066465][ T5984] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 43.068089][ T5984] [drm] features: -virgl +edid -resource_blob -host_visible [ 43.068098][ T5984] [drm] features: -context_init -blob_alignment [ 43.073956][ T5984] ------------[ cut here ]------------ [ 43.073964][ T5984] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 43.073970][ T5984] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#0: syz.1.30/5984 [ 43.090510][ T5984] Modules linked in: [ 43.091923][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.1.30 Not tainted syzkaller #0 PREEMPT(full) [ 43.094749][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.097964][ T5984] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 43.099914][ T5984] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 f2 3a 70 09 85 c0 75 e0 48 8d 3d 97 f0 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 72 3c 70 09 48 85 c0 0f [ 43.107135][ T5984] RSP: 0018:ffffc9000270ef18 EFLAGS: 00010246 [ 43.109065][ T5984] RAX: 0000000000000000 RBX: ffff888100af9900 RCX: fffff520004e1dbe [ 43.111547][ T5984] RDX: 0000000000000000 RSI: ffffffff8c91a0e0 RDI: ffffffff9149ccb0 [ 43.114281][ T5984] RBP: ffffffff8c91a0e0 R08: 0000000000000000 R09: fffffbfff228a88b [ 43.117084][ T5984] R10: ffffc9000270ef18 R11: 0000000000000001 R12: 0000000000000000 [ 43.119626][ T5984] R13: ffffc9000270ef88 R14: 00000000000000d8 R15: ffff888062894fce [ 43.122164][ T5984] FS: 00007f008244c6c0(0000) GS:ffff8880d5b53000(0000) knlGS:0000000000000000 [ 43.125173][ T5984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.127835][ T5984] CR2: 00007f4b36a6c600 CR3: 000000005917c000 CR4: 0000000000352ef0 [ 43.130397][ T5984] Call Trace: [ 43.131501][ T5984] [ 43.132451][ T5984] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 43.134129][ T5984] ? __pfx__printk+0x10/0x10 [ 43.135635][ T5984] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 43.137468][ T5984] ? lockdep_init_map_type+0x5c/0x250 [ 43.139154][ T5984] virtio_gpu_init.cold+0x40d/0x1293 [ 43.140835][ T5984] ? vga_remove_vgacon.cold+0x1d/0x99 [ 43.142513][ T5984] ? __pfx_virtio_gpu_init+0x10/0x10 [ 43.144245][ T5984] ? is_console_locked+0x9/0x20 [ 43.146449][ T5984] ? con_is_bound+0x141/0x190 [ 43.147980][ T5984] ? vga_remove_vgacon+0x21/0x30 [ 43.149546][ T5984] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 43.151736][ T5984] virtio_gpu_probe+0x21c/0x360 [ 43.153289][ T5984] virtio_dev_probe+0x6a2/0xbe0 [ 43.154843][ T5984] ? __pfx_virtio_dev_probe+0x10/0x10 [ 43.156630][ T5984] ? kernfs_create_link+0x1bd/0x240 [ 43.158327][ T5984] ? kernfs_put+0x3f/0x60 [ 43.159697][ T5984] ? sysfs_do_create_link_sd+0xbb/0x140 [ 43.161427][ T5984] ? sysfs_create_link+0x68/0xc0 [ 43.162994][ T5984] ? __pfx_virtio_dev_probe+0x10/0x10 [ 43.164707][ T5984] really_probe+0x241/0xa60 [ 43.166294][ T5984] __driver_probe_device+0x210/0x460 [ 43.167947][ T5984] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 43.169800][ T5984] driver_probe_device+0x4a/0x140 [ 43.171445][ T5984] __device_attach_driver+0x1df/0x320 [ 43.173014][ T5984] ? __pfx___device_attach_driver+0x10/0x10 [ 43.174892][ T5984] bus_for_each_drv+0x159/0x1e0 [ 43.176576][ T5984] ? __pfx_bus_for_each_drv+0x10/0x10 [ 43.178258][ T5984] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.179887][ T5984] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 43.181859][ T5984] __device_attach+0x1e4/0x4d0 [ 43.183380][ T5984] ? __pfx___device_attach+0x10/0x10 [ 43.185488][ T5984] ? do_raw_spin_unlock+0x145/0x1e0 [ 43.187115][ T5984] device_initial_probe+0xaf/0xd0 [ 43.188701][ T5984] bus_probe_device+0x64/0x160 [ 43.190245][ T5984] device_add+0x121d/0x1970 [ 43.191690][ T5984] ? __pfx_device_add+0x10/0x10 [ 43.193237][ T5984] ? __pfx___might_resched+0x10/0x10 [ 43.194920][ T5984] ? __init_waitqueue_head+0xca/0x150 [ 43.196673][ T5984] ? ioread8+0x8f/0xd0 [ 43.198034][ T5984] register_virtio_device+0x4f0/0x5d0 [ 43.199710][ T5984] ? __pfx_register_virtio_device+0x10/0x10 [ 43.201593][ T5984] ? __pfx_pcibios_set_master+0x10/0x10 [ 43.203332][ T5984] ? __raw_spin_lock_init+0x3a/0x110 [ 43.205088][ T5984] ? __pfx_virtio_pci_probe+0x10/0x10 [ 43.206761][ T5984] virtio_pci_probe+0x255/0x410 [ 43.208291][ T5984] local_pci_probe+0xdd/0x1b0 [ 43.209771][ T5984] pci_call_probe+0x176/0x800 [ 43.211550][ T5984] ? pci_match_device+0x147/0x7d0 [ 43.213663][ T5984] ? __pfx_pci_call_probe+0x10/0x10 [ 43.216382][ T5984] ? __pfx_pci_match_device+0x10/0x10 [ 43.218630][ T5984] ? pci_find_host_bridge+0x3c/0x80 [ 43.220933][ T5984] ? up_write+0x2dc/0x5b0 [ 43.222823][ T5984] pci_device_probe+0x25b/0x400 [ 43.225410][ T5984] ? __pfx_pci_device_probe+0x10/0x10 [ 43.227669][ T5984] ? kernfs_create_link+0x1bd/0x240 [ 43.229868][ T5984] ? sysfs_create_link+0x68/0xc0 [ 43.231962][ T5984] ? __pfx_pci_device_probe+0x10/0x10 [ 43.234260][ T5984] really_probe+0x241/0xa60 [ 43.236305][ T5984] __driver_probe_device+0x210/0x460 [ 43.238547][ T5984] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 43.241053][ T5984] driver_probe_device+0x4a/0x140 [ 43.242685][ T5984] __device_attach_driver+0x1df/0x320 [ 43.244410][ T5984] ? __pfx___device_attach_driver+0x10/0x10 [ 43.246378][ T5984] bus_for_each_drv+0x159/0x1e0 [ 43.247919][ T5984] ? __pfx_bus_for_each_drv+0x10/0x10 [ 43.249622][ T5984] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.251336][ T5984] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 43.253219][ T5984] __device_attach+0x1e4/0x4d0 [ 43.254750][ T5984] ? __pfx___device_attach+0x10/0x10 [ 43.256465][ T5984] ? do_raw_spin_unlock+0x145/0x1e0 [ 43.258106][ T5984] device_initial_probe+0xaf/0xd0 [ 43.259687][ T5984] pci_bus_add_device+0xc5/0x100 [ 43.261288][ T5984] pci_bus_add_devices+0x9a/0x1f0 [ 43.262870][ T5984] pci_rescan_bus+0x2a/0x40 [ 43.264356][ T5984] rescan_store+0xfb/0x130 [ 43.266112][ T5984] ? __pfx_rescan_store+0x10/0x10 [ 43.268141][ T5984] ? sysfs_file_kobj+0xe4/0x290 [ 43.270188][ T5984] ? __pfx_rescan_store+0x10/0x10 [ 43.272367][ T5984] bus_attr_store+0x74/0xb0 [ 43.274323][ T5984] ? __pfx_bus_attr_store+0x10/0x10 [ 43.276651][ T5984] sysfs_kf_write+0xf2/0x150 [ 43.278786][ T5984] kernfs_fop_write_iter+0x3e0/0x5f0 [ 43.281071][ T5984] ? __pfx_sysfs_kf_write+0x10/0x10 [ 43.283300][ T5984] vfs_write+0x6af/0x1050 [ 43.285271][ T5984] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 43.287728][ T5984] ? __pfx_vfs_write+0x10/0x10 [ 43.289728][ T5984] ? find_held_lock+0x2b/0x80 [ 43.291753][ T5984] ksys_write+0x12a/0x250 [ 43.293705][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 43.295856][ T5984] do_syscall_64+0x123/0x790 [ 43.297869][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.300375][ T5984] RIP: 0033:0x7f008159e159 [ 43.302294][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.308783][ T5984] RSP: 002b:00007f008244c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.311376][ T5984] RAX: ffffffffffffffda RBX: 00007f0081826090 RCX: 00007f008159e159 [ 43.313872][ T5984] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000a [ 43.316616][ T5984] RBP: 00007f008163506b R08: 0000000000000000 R09: 0000000000000000 [ 43.319307][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.322419][ T5984] R13: 00007f0081826128 R14: 00007f0081826090 R15: 00007ffe34bc7648 [ 43.325933][ T5984] [ 43.326920][ T5984] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 43.329168][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.1.30 Not tainted syzkaller #0 PREEMPT(full) [ 43.332025][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.335138][ T5984] Call Trace: [ 43.336201][ T5984] [ 43.337134][ T5984] dump_stack_lvl+0x100/0x190 [ 43.338620][ T5984] vpanic+0x553/0x970 [ 43.339901][ T5984] ? __pfx_vpanic+0x10/0x10 [ 43.341371][ T5984] panic+0xd1/0xe0 [ 43.342559][ T5984] ? __pfx_panic+0x10/0x10 [ 43.344029][ T5984] check_panic_on_warn.cold+0x19/0x34 [ 43.345699][ T5984] ? __kmem_cache_create_args+0xa9/0x430 [ 43.347459][ T5984] __warn.cold+0x191/0x318 [ 43.348866][ T5984] __report_bug+0x30f/0x440 [ 43.350426][ T5984] ? __kmem_cache_create_args+0xa9/0x430 [ 43.352253][ T5984] ? __pfx___report_bug+0x10/0x10 [ 43.353871][ T5984] ? __mutex_lock+0x26c/0x1bd0 [ 43.355378][ T5984] ? __kmem_cache_create_args+0x44/0x430 [ 43.357148][ T5984] report_bug_entry+0xe2/0x290 [ 43.358679][ T5984] ? __kmem_cache_create_args+0xac/0x430 [ 43.360460][ T5984] handle_bug+0x1cd/0x2a0 [ 43.361758][ T5984] exc_invalid_op+0x17/0x50 [ 43.363183][ T5984] asm_exc_invalid_op+0x1a/0x20 [ 43.364750][ T5984] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 43.366690][ T5984] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 f2 3a 70 09 85 c0 75 e0 48 8d 3d 97 f0 ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 72 3c 70 09 48 85 c0 0f [ 43.373087][ T5984] RSP: 0018:ffffc9000270ef18 EFLAGS: 00010246 [ 43.375004][ T5984] RAX: 0000000000000000 RBX: ffff888100af9900 RCX: fffff520004e1dbe [ 43.377471][ T5984] RDX: 0000000000000000 RSI: ffffffff8c91a0e0 RDI: ffffffff9149ccb0 [ 43.379934][ T5984] RBP: ffffffff8c91a0e0 R08: 0000000000000000 R09: fffffbfff228a88b [ 43.382424][ T5984] R10: ffffc9000270ef18 R11: 0000000000000001 R12: 0000000000000000 [ 43.384947][ T5984] R13: ffffc9000270ef88 R14: 00000000000000d8 R15: ffff888062894fce [ 43.387410][ T5984] ? __kmem_cache_create_args+0x9e/0x430 [ 43.389178][ T5984] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 43.390873][ T5984] ? __pfx__printk+0x10/0x10 [ 43.392353][ T5984] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 43.394230][ T5984] ? lockdep_init_map_type+0x5c/0x250 [ 43.395922][ T5984] virtio_gpu_init.cold+0x40d/0x1293 [ 43.397610][ T5984] ? vga_remove_vgacon.cold+0x1d/0x99 [ 43.399285][ T5984] ? __pfx_virtio_gpu_init+0x10/0x10 [ 43.401039][ T5984] ? is_console_locked+0x9/0x20 [ 43.402606][ T5984] ? con_is_bound+0x141/0x190 [ 43.404159][ T5984] ? vga_remove_vgacon+0x21/0x30 [ 43.405705][ T5984] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 43.407858][ T5984] virtio_gpu_probe+0x21c/0x360 [ 43.409400][ T5984] virtio_dev_probe+0x6a2/0xbe0 [ 43.411150][ T5984] ? __pfx_virtio_dev_probe+0x10/0x10 [ 43.412875][ T5984] ? kernfs_create_link+0x1bd/0x240 [ 43.414494][ T5984] ? kernfs_put+0x3f/0x60 [ 43.415855][ T5984] ? sysfs_do_create_link_sd+0xbb/0x140 [ 43.417600][ T5984] ? sysfs_create_link+0x68/0xc0 [ 43.419152][ T5984] ? __pfx_virtio_dev_probe+0x10/0x10 [ 43.420880][ T5984] really_probe+0x241/0xa60 [ 43.422312][ T5984] __driver_probe_device+0x210/0x460 [ 43.424004][ T5984] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 43.425866][ T5984] driver_probe_device+0x4a/0x140 [ 43.427419][ T5984] __device_attach_driver+0x1df/0x320 [ 43.429057][ T5984] ? __pfx___device_attach_driver+0x10/0x10 [ 43.430884][ T5984] bus_for_each_drv+0x159/0x1e0 [ 43.432422][ T5984] ? __pfx_bus_for_each_drv+0x10/0x10 [ 43.434111][ T5984] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.435727][ T5984] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 43.437544][ T5984] __device_attach+0x1e4/0x4d0 [ 43.439038][ T5984] ? __pfx___device_attach+0x10/0x10 [ 43.440705][ T5984] ? do_raw_spin_unlock+0x145/0x1e0 [ 43.442331][ T5984] device_initial_probe+0xaf/0xd0 [ 43.443909][ T5984] bus_probe_device+0x64/0x160 [ 43.445420][ T5984] device_add+0x121d/0x1970 [ 43.446851][ T5984] ? __pfx_device_add+0x10/0x10 [ 43.448381][ T5984] ? __pfx___might_resched+0x10/0x10 [ 43.450026][ T5984] ? __init_waitqueue_head+0xca/0x150 [ 43.451736][ T5984] ? ioread8+0x8f/0xd0 [ 43.453057][ T5984] register_virtio_device+0x4f0/0x5d0 [ 43.454752][ T5984] ? __pfx_register_virtio_device+0x10/0x10 [ 43.456594][ T5984] ? __pfx_pcibios_set_master+0x10/0x10 [ 43.458307][ T5984] ? __raw_spin_lock_init+0x3a/0x110 [ 43.459947][ T5984] ? __pfx_virtio_pci_probe+0x10/0x10 [ 43.461624][ T5984] virtio_pci_probe+0x255/0x410 [ 43.463137][ T5984] local_pci_probe+0xdd/0x1b0 [ 43.464666][ T5984] pci_call_probe+0x176/0x800 [ 43.466133][ T5984] ? pci_match_device+0x147/0x7d0 [ 43.467693][ T5984] ? __pfx_pci_call_probe+0x10/0x10 [ 43.469319][ T5984] ? __pfx_pci_match_device+0x10/0x10 [ 43.471011][ T5984] ? pci_find_host_bridge+0x3c/0x80 [ 43.472676][ T5984] ? up_write+0x2dc/0x5b0 [ 43.474050][ T5984] pci_device_probe+0x25b/0x400 [ 43.475577][ T5984] ? __pfx_pci_device_probe+0x10/0x10 [ 43.477249][ T5984] ? kernfs_create_link+0x1bd/0x240 [ 43.478905][ T5984] ? sysfs_create_link+0x68/0xc0 [ 43.480463][ T5984] ? __pfx_pci_device_probe+0x10/0x10 [ 43.482128][ T5984] really_probe+0x241/0xa60 [ 43.483579][ T5984] __driver_probe_device+0x210/0x460 [ 43.485165][ T5984] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 43.486920][ T5984] driver_probe_device+0x4a/0x140 [ 43.488500][ T5984] __device_attach_driver+0x1df/0x320 [ 43.490175][ T5984] ? __pfx___device_attach_driver+0x10/0x10 [ 43.492055][ T5984] bus_for_each_drv+0x159/0x1e0 [ 43.493578][ T5984] ? __pfx_bus_for_each_drv+0x10/0x10 [ 43.495184][ T5984] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.496764][ T5984] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 43.498584][ T5984] __device_attach+0x1e4/0x4d0 [ 43.500064][ T5984] ? __pfx___device_attach+0x10/0x10 [ 43.501635][ T5984] ? do_raw_spin_unlock+0x145/0x1e0 [ 43.503212][ T5984] device_initial_probe+0xaf/0xd0 [ 43.504789][ T5984] pci_bus_add_device+0xc5/0x100 [ 43.506273][ T5984] pci_bus_add_devices+0x9a/0x1f0 [ 43.507796][ T5984] pci_rescan_bus+0x2a/0x40 [ 43.509152][ T5984] rescan_store+0xfb/0x130 [ 43.510483][ T5984] ? __pfx_rescan_store+0x10/0x10 [ 43.511989][ T5984] ? sysfs_file_kobj+0xe4/0x290 [ 43.513423][ T5984] ? __pfx_rescan_store+0x10/0x10 [ 43.514893][ T5984] bus_attr_store+0x74/0xb0 [ 43.516263][ T5984] ? __pfx_bus_attr_store+0x10/0x10 [ 43.517896][ T5984] sysfs_kf_write+0xf2/0x150 [ 43.519342][ T5984] kernfs_fop_write_iter+0x3e0/0x5f0 [ 43.521038][ T5984] ? __pfx_sysfs_kf_write+0x10/0x10 [ 43.522676][ T5984] vfs_write+0x6af/0x1050 [ 43.524066][ T5984] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 43.525876][ T5984] ? __pfx_vfs_write+0x10/0x10 [ 43.527365][ T5984] ? find_held_lock+0x2b/0x80 [ 43.528852][ T5984] ksys_write+0x12a/0x250 [ 43.530203][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 43.531763][ T5984] do_syscall_64+0x123/0x790 [ 43.533222][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.535038][ T5984] RIP: 0033:0x7f008159e159 [ 43.536396][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.542059][ T5984] RSP: 002b:00007f008244c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.544575][ T5984] RAX: ffffffffffffffda RBX: 00007f0081826090 RCX: 00007f008159e159 [ 43.546930][ T5984] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000a [ 43.549294][ T5984] RBP: 00007f008163506b R08: 0000000000000000 R09: 0000000000000000 [ 43.551637][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.554044][ T5984] R13: 00007f0081826128 R14: 00007f0081826090 R15: 00007ffe34bc7648 [ 43.556524][ T5984] [ 43.558057][ T5984] Kernel Offset: disabled [ 43.559401][ T5984] Rebooting in 86400 seconds..