last executing test programs: 19.337058158s ago: executing program 3 (id=16): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x200, 0x200, 0x20, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x18440, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x44, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) mount$tmpfs(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x38, 0x65]}}]}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000002c0)={0x28, 0x6, r7, 0x0, 0x40, 0xf4bd, 0x9}) r8 = syz_clone(0x0, &(0x7f0000000000)="f0e990d17117c859a8ba8fb88216e960a50412880c6c8b419e32a218055ed9a1b89653d18efe3e95b6e066ada7aaf6283564347c8fa60bca25e7af945bdd659861fc5a81e0d68729415ac80d32e729f18a93f1b2ace07a79628928d349e1f3957e06e6e0a11817b046", 0x69, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000540)="b2f1f25d0e0c0c3393df49bce6421908fa39ca073a2430fd828509afb5c3306d755aa26315902e886da02f263ac8afdf5f01fe919efb8bd33ff25142e6decdb4655cef312357992051852e40136b54c0e1e830a8cc3912df4f374281665c1c05b280b0e2bc031327e41ca11187651fbfc49c59cc5050940b441b9eee6259c85413af71b49bab2f6eb4cbb1f3b58897d373ab9fed6fe39f20ac089b00"/170) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000600)={0x14000001, 0x6, 0x9}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x30, 0x40, 0x109, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x19, 0x0, 0x1, [@generic=')']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000240)=r8) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x3, &(0x7f00000003c0), 0x0) clock_adjtime(0x1, &(0x7f0000000400)={0x2925, 0x0, 0x0, 0x400000000000003, 0xbe1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x579, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x20007ff, 0x76, 0xffffffffffffffff, 0x59, 0xb}) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4020}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) timerfd_settime(r10, 0x3, &(0x7f0000000500)={{0x77359400}, {0x77359400}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000c80)={&(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc04464b8, &(0x7f0000000100)={r13, 0x202, 0x200, 0x34325258, 0x0, [r1], [0x800, 0xffffffff, 0x0, 0xfffff003], [0x1, 0x5], [0xfffffffffffffffd, 0x6, 0x0, 0x5]}) close_range(r12, r3, 0x0) 19.169178768s ago: executing program 3 (id=18): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000e40)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000e80)={0x0, 0x8}, 0x8) sendto$inet6(r1, &(0x7f0000000ec0)='X', 0x34000, 0x0, &(0x7f0000000f00)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 19.056585626s ago: executing program 3 (id=19): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000400)=0x100ce, 0x4) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="27d68f068680c2d59eef604851952f04d7c5571eec6d859983be594f17f8f0d1f70f7bbf8f10a3f1c772d66f31e2298a7b47eadf499a0f0c2dd8dcd05e39834e81a026ae6c07f8dbaff7df90355db14dccc092484ce7091de895ac069da436789a0a47620f82b65752a46fb78b1deca76f3e2798ca1a6b85330bdb5aac5324deab481b1d5642dcfe3dcce0162bf3b43a57408c710231085862e07a27ed2bbb965f8b30eb46a0b2e43f93fa387c7ca95234bf451b68d3b97475f5a2e59d1173451a9154b3488a1bacd38c3065419f3f2b7bd756a775710f0f0fc3ffd1a75c3e", 0xdf}], 0x1) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) (async) close(0x3) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000180)=0x6, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.998149081s ago: executing program 3 (id=20): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x9002}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000300)={0xd}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x84, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, &(0x7f0000000640)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x9002}, 0x4) (async) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000300)={0xd}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x84, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, &(0x7f0000000640)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 18.097724822s ago: executing program 3 (id=31): sigaltstack(&(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0xfffffffffffffefa}, &(0x7f0000000180)={&(0x7f00000001c0)}) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./sys\x00', &(0x7f0000000940)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f00000009c0)='1 0 0', 0x5) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x39, 0x2}, &(0x7f0000000240)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x2) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0xffff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c00000001080108000000000000005e6700000005000300840000000900010073797a30000000000600024088ca00000900010073797a30000000000900010073797a310000000024000480080001400000000908000140000000090800014080000000080001400000000d"], 0x6c}, 0x1, 0x0, 0x0, 0x8000004}, 0x15) mmap(&(0x7f00004c2000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0x1800000) write$ppp(0xffffffffffffffff, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, r4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000be4000/0x1000)=nil, 0x4000000004, 0x0, 0x0, 0x20000000003fe, 0x0, 0x0, 0x2c, 0x5f}) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000380)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000004c0)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x2, 0x1bd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000580)) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000880)={0x3, 0x6, 0x9, 0x0, 0x9, 0x7, 0x0, &(0x7f0000000800)=[{0x10, 0xfe, 0x5}, {0x17, 0x101, 0x6}, {0x10, 0xfe, 0x8}, {0x4, 0x101, 0x401}, {0xc, 0x101, 0x7ff}, {0x12, 0xfe, 0x9}, {0x1a, 0x1ff, 0x10000}]}) syz_open_dev$ublk_chdev(&(0x7f00000005c0), r11, 0x2) ioctl$UBLK_U_CMD_DEL_DEV(r5, 0xc0207505, &(0x7f0000000600)={r11}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r12 = syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x100, 0x8000) ioctl$FE_DISEQC_SEND_MASTER_CMD(r12, 0x40076f3f, &(0x7f00000002c0)={"6cb5324eb574", 0x6}) 18.096655464s ago: executing program 2 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc0142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newneigh={0x24, 0x1c, 0x300, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, r3, 0x0, 0x61, 0xa}, [@NDA_SRC_VNI={0x8, 0xb, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 18.016598743s ago: executing program 3 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a6800128011000100aaa6f2f334a44962c98a5fd86272696467655f8b6c61763e628160005000058005001959dd774cc7000387529c1dff745b9e41272b4a8a296b02000000050005000000000006001f00d5000000050007000000000005000800000000000400180005001e000000000006001f000600000014005a7f732a95b77e"], 0x9c}, 0x1, 0x0, 0x0, 0x8845}, 0x4040) r1 = socket$inet6(0xa, 0x800, 0x4b5) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0xf0f080, 0x6}) ioctl$sock_ifreq(r1, 0x8935, &(0x7f0000000100)={'veth1_to_bond\x00', @ifru_settings={0x3, 0xd33e, @te1=&(0x7f0000000200)={0x1250cb5, 0x4011b45a, 0x0, 0x200}}}) 17.04647492s ago: executing program 2 (id=40): setns(0xc9, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000500)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xe, 0xffe0}, {0x5, 0x1}, {0xc, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004b010}, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, 0x35, 0x300, 0x70bd26, 0x25dfdbfd, {0x19}, [@typed={0x8, 0x140, 0x0, 0x0, @pid=r4}, @generic="a338fcc2c25a6eedf3ab0029b6cf9adf5e8c0f6bb523cd7413ec589591f1f246cf32cdef4da491c32d4fbde8d933957f587f9791af0c77fb400d2a1ab373dbf513ec174a02b175999c95821ced8bfa3f51", @typed={0x5, 0x10f, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x158, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0xc, 0x11e, 0x0, 0x0, @u64=0x7}, @nested={0x63, 0xf4, 0x0, 0x1, [@typed={0xc, 0xff, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0xfb, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x106}, @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@multicast2}, @generic="2a6eea1cad347d8f03e665b82135fa73237e4c684f718b623d3244debc4faa1bb6b24702ea34ebb87609a69cc37b007682a926ee18b96db8c6d5f2543437d4"]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x50}, 0x4000884) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x6}, 0x4) getsockopt$packet_int(r6, 0x107, 0x12, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'macvtap0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 16.877702992s ago: executing program 2 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001240)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001280)={'syzkaller1\x00', @link_local}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001400)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r3, r5}, 0x14) (async, rerun: 64) write$tun(r1, &(0x7f0000001480)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001"], 0xfdef) (async, rerun: 64) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) (rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e40), 0x0, 0x10, &(0x7f0000000e80), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r7, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000f40)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xd, &(0x7f0000001080)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001140)={r9}, 0xc) (async, rerun: 32) r10 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000040)) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async, rerun: 64) r11 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x94741) r12 = fcntl$dupfd(r11, 0x406, r11) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000f80)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000011c0)={0x2, 0x26, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) r13 = openat$cgroup_pressure(r6, &(0x7f0000001180)='memory.pressure\x00', 0x2, 0x0) close(r13) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') 16.566847267s ago: executing program 2 (id=49): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x4, 0xc4}, 0x0) socket(0x1d, 0x2, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x3ffe, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='autofs\x00', 0x201000c, &(0x7f0000000500)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0xc08) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "33e275106ce797ba", "afc000", "1f991d9c", "d570f648c0ec6f65"}, 0x28) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000180)='./file0/../file0\x00') recvmsg$unix(r1, &(0x7f0000002c00)={&(0x7f0000000580), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000600)=""/131, 0x83}, {&(0x7f0000002780)=""/163, 0xa3}, {&(0x7f0000002840)=""/202, 0xca}, {&(0x7f0000002940)=""/214, 0xd6}, {&(0x7f0000002a40)=""/3, 0x3}], 0x5, &(0x7f0000002b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}, 0x1) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00') setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000002c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000300)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}}, 0x18) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x0, 0x823}, [@IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x60124}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x20040000) 16.508141411s ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2210088, &(0x7f0000000240)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) (async, rerun: 64) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000580)='./bus\x00') (async) unlink(&(0x7f0000000000)='./file1\x00') 16.233676319s ago: executing program 2 (id=53): r0 = io_uring_setup(0x46f95, &(0x7f0000000500)={0x0, 0x200fe62, 0x2, 0x0, 0x20}) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143142, 0x103) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x100000f, 0x401d031, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f00000003c0)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e0028000280240005006e6fd78ac162b914c202ccb29c00b320a10700000600"/96, 0x60) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20040086, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @loopback, 0x200200}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x228a, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="17090010000000000000010000000500070000000000080009000200000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb0500220001000000"], 0x64}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7180}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf}]}, 0x68}}, 0x40000) sendto$inet6(r4, &(0x7f0000000240)="8d", 0x1, 0x40000, 0x0, 0xfffffef4) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00']) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000340)}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x5}}, 0x2e) close(r7) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0xffffffff}}, 0x2e) 16.160959558s ago: executing program 32 (id=53): r0 = io_uring_setup(0x46f95, &(0x7f0000000500)={0x0, 0x200fe62, 0x2, 0x0, 0x20}) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143142, 0x103) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x100000f, 0x401d031, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f00000003c0)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e0028000280240005006e6fd78ac162b914c202ccb29c00b320a10700000600"/96, 0x60) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20040086, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @loopback, 0x200200}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x228a, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="17090010000000000000010000000500070000000000080009000200000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb0500220001000000"], 0x64}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7180}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf}]}, 0x68}}, 0x40000) sendto$inet6(r4, &(0x7f0000000240)="8d", 0x1, 0x40000, 0x0, 0xfffffef4) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00']) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000340)}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x5}}, 0x2e) close(r7) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0xffffffff}}, 0x2e) 4.958196914s ago: executing program 0 (id=144): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x1f, 0x2, @thr={&(0x7f0000000100)="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", &(0x7f0000000200)="ead5683145a3172e346662c14b1c4062b58e5f67f18147875dc40d492eb15fff3eb563cadd86c05320e541d6f6ef57ae2e1b4775204c8b8575337142b16c505d0e996c2fd98bb9423dbf3218237bf929060fc50dc22af94c8b2f8122ab95c791389e8bfb43aeebfc7e5275d478230790be"}}, &(0x7f0000000080)=0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x9, 0x801) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) r2 = syz_open_dev$radio(&(0x7f00000002c0), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x300, 0x2}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.980894872s ago: executing program 33 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a6800128011000100aaa6f2f334a44962c98a5fd86272696467655f8b6c61763e628160005000058005001959dd774cc7000387529c1dff745b9e41272b4a8a296b02000000050005000000000006001f00d5000000050007000000000005000800000000000400180005001e000000000006001f000600000014005a7f732a95b77e"], 0x9c}, 0x1, 0x0, 0x0, 0x8845}, 0x4040) r1 = socket$inet6(0xa, 0x800, 0x4b5) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000001c0)={0xf0f080, 0x6}) ioctl$sock_ifreq(r1, 0x8935, &(0x7f0000000100)={'veth1_to_bond\x00', @ifru_settings={0x3, 0xd33e, @te1=&(0x7f0000000200)={0x1250cb5, 0x4011b45a, 0x0, 0x200}}}) 2.244334574s ago: executing program 1 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000008c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r1, r2, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) close(r3) 2.147997027s ago: executing program 1 (id=168): r0 = epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4181, 0x120) r1 = epoll_create1(0x80000) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) syz_emit_ethernet(0x103, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xcd, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf"}}}}}, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000002900010027bd7000fddbdf0ece000000"], 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r3 = fsopen(&(0x7f0000000380)='cgroup\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0xd12, 0x7, 0x7fff, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x4000000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='ccnA\xf6gr\xe7lo_', 0x0) r5 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x48842) write(r5, &(0x7f0000000180)="9b5a0ec4a71a4fe962a059e7a229587e4955677a76008e2fdc58b336f4f61f1d10678bccc8702591bc070250ce486037cbcd06e186bc9a34810b13c4f05f54ad5ab5e062f89627dd5e9339f1dd8b6036e9e2a1ffb011d738bfc9c000cc743c08cae19a1b9e303b35b03b93a3d26e11ba61a1cef002d03af55a86eebae21410da6ab49b94616f11ce79393995ef80d399e264edab19368bf2f712d7423c9f47ffd5d520f465eea2", 0xa7) 2.096916266s ago: executing program 1 (id=169): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x4000045) 2.096661293s ago: executing program 1 (id=170): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) listen(r3, 0x3) (async) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80800) (async) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x16) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="64010000100001000400000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2], 0x164}}, 0x0) 1.897547314s ago: executing program 0 (id=171): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x10000}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000bff000/0x400000)=nil, 0x0, 0x2, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x40000, &(0x7f0000000200)="020000000000000000000000000000000200", 0x0, 0x30) (async) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x1a4c}, @void, @x25={0x1, 0x9, 0x23, "b3cc083704113551a2f8081d5c9e737a9ec40a61ba8e18ec26a1addb1c"}}, 0x24) (async) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000001c0)=0x5, 0x12) 1.778753667s ago: executing program 0 (id=172): r0 = epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x48842) write(r2, &(0x7f0000000180)="9b5a0ec4a71a4fe962a059e7a229587e4955677a76008e2fdc58b336f4f61f1d10678bccc8702591bc070250ce486037cbcd06e186bc9a34810b13c4f05f54ad5ab5e062f89627dd5e9339f1dd8b6036e9e2a1ffb011d738bfc9c000cc743c08cae19a1b9e303b35b03b93a3d26e11ba61a1cef002d03af55a86eebae21410da6ab49b94616f11ce79393995ef80d399e264edab19368bf2f712d7423c9f47ffd5d520f465eea2", 0xa7) 1.708037762s ago: executing program 0 (id=173): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000440), 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') lsetxattr$security_evm(&(0x7f0000000900)='./file1\x00', &(0x7f0000000940), &(0x7f0000000980)=@v1={0x2, "5cce57e1f02a59237681ab2a2bf1736d7d24"}, 0x13, 0x1) fchdir(r1) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000007c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000800)={0x1, @meta={0x58583444, 0x6859f636, 0x2e08, 0x8002, 0x213979ef}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000800)={0x1, @meta={0x58583444, 0x6859f636, 0x2e08, 0x8002, 0x213979ef}}) syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f00000003c0)='statm\x00') (async) r4 = syz_open_procfs(r3, &(0x7f00000003c0)='statm\x00') pread64(r4, &(0x7f0000000400)=""/31, 0x1f, 0x40000000007) recvmsg$inet_nvme(r0, &(0x7f0000000780)={&(0x7f0000000000)=@vsock, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000640)=""/97, 0x61}], 0x6, &(0x7f0000000740)=""/39, 0x27}, 0x14041) 1.567556305s ago: executing program 0 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40042) rename(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELSET={0xffffff9f, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.038263276s ago: executing program 4 (id=176): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r2, &(0x7f0000000000)="96e7e9f0", 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x7f, 0x48842) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0xfff2}, {0xfff1}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x200448c5}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0) write(r3, &(0x7f0000000180)="9b5a0ec4a71a4fe962a059e7a229587e4955677a76008e2fdc58b336f4f61f1d10678bccc8702591bc070250ce486037cbcd06e186bc9a34810b13c4f05f54ad5ab5e062f89627dd5e9339f1dd8b6036e9e2a1ffb011d738bfc9c000cc743c08cae19a1b9e303b35b03b93a3d26e11ba61a1cef002d03af55a86eebae21410da6ab49b94616f11ce79393995ef80d399e264edab19368bf2f712d7423c9f47ffd5d520f465eea2", 0xa7) 988.106892ms ago: executing program 4 (id=177): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000280)=0x800000000004, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', r3, 0x173ed3188845fd02, 0x7800, 0x4, 0x9, {{0x17, 0x4, 0x0, 0x3f, 0x5c, 0x64, 0x6, 0xc, 0x4, 0x0, @private=0xa010102, @empty, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x2c, 0x48, 0x1, 0xb, [{@broadcast, 0x18}, {@remote, 0x1}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x851}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x5, [{@private=0xa010100, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xb}]}, @noop]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r4 = syz_create_resource$futex(&(0x7f0000000200)) futex(r4, 0xd, 0x0, &(0x7f00000002c0), 0x0, 0x2) (async) futex(r4, 0xd, 0x0, &(0x7f00000002c0), 0x0, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000040110300b7020000000000007b9af0ff00000000c509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 807.416471ms ago: executing program 4 (id=178): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001a80)='./sys\x00', &(0x7f0000001ac0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000001b40)='0fc5:1227:ei', 0xc) socket$nl_crypto(0x10, 0x3, 0x15) r2 = fsopen(&(0x7f0000000080)='cifs\x00', 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x100000000000000, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f00000018c0)=[{}, {}, {}]}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./pipefs\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0xffffffffffffff97, 0x10, &(0x7f0000001880), 0xffffffffffffffc2}, 0x48) mount(0x0, &(0x7f0000000480)='./pipefs\x00', &(0x7f00000004c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='ver\x00\x02\xf0z\x007w\x00', &(0x7f0000000100)='1.0\x00', 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x1}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f00000019c0)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001a00), 0x40081, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) clock_settime(0xfffffffb, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="3bf20000000000000000181100020000000ebe00", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7}, 0x94) 637.996823ms ago: executing program 1 (id=179): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@private=0xa010102, @empty, 0x1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000140)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) 637.524359ms ago: executing program 4 (id=180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000007c0)) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000800)=""/4091, &(0x7f0000001800)=0xffb) bind$inet6(r2, &(0x7f0000000600)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9e, &(0x7f0000000640)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x64, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x7ffffffe, 0x0, 0x4, "85ee3b75198a63422f5b949c7428a71ff95b7330c7924f2da86b04992f895a38", "18e042734dea2324dc0319b8a8d471b4", {"a88e96f96fba9a203053ac86f7a1840c", "fa23effb9eecf1f300"}}}}}}}}, 0x0) write$tcp_mem(r0, &(0x7f0000000200)={0x1, 0x20, 0x400, 0x20, 0x7fff}, 0x48) mount$bpf(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000), 0x1000, &(0x7f0000000100)=ANY=[@ANYRES8=r0]) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) r5 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r8, 0x4068aea3, &(0x7f00000004c0)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000540)={0x4, 0x0, [{0x40000083, 0x0, 0x6}, {0x770, 0x0, 0x1}, {0x400000b1, 0x0, 0x4}, {0x2a8, 0x0, 0xfffffffffffffff6}]}) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b8}}, 0x1) 637.297804ms ago: executing program 1 (id=181): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000040), 0x10) (async) sendto$l2tp(r0, &(0x7f0000000080)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x81880, &(0x7f00000001c0)='%#$,^@&]\'+\xbd$\x00') (async) recvfrom$l2tp(r0, 0x0, 0x0, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 577.324601ms ago: executing program 0 (id=182): r0 = userfaultfd(0x80801) syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x54, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x4, 0x2, 0x0, 0x0, {[@sack={0x5, 0xa, [0xe, 0x903]}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x4, "e7ac"}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "b02eabd4442467154ba314209149e082"}]}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff000000, 0xff, 0xffffffff], 'veth0_to_hsr\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x6, 0x5, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "ba68", 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8dbe, 0x10, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x14}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) io_submit(0x0, 0x2, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x300}]) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000280), 0x2e9, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, 0x0, &(0x7f0000000100)=0xffffffdd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 387.635634ms ago: executing program 4 (id=183): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="f20f3365f2a72e0fc7b200000000f30fc732c510c4e2fd307c0800f30f09f20f10a95d4e00006466f30fbcb30f000000b9800000c00f3235002000000f308ed0", 0x40}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) 225.525939ms ago: executing program 4 (id=184): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) r0 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000140)={0x24, &(0x7f0000000180)=[{0x3a, '\x00', @buffer={"60d86e6069afc462cd130c00ed394b1cca166af3a7cc61e8331a0264167d2e56", 0x20}, 0xffffff0d}]}) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x400, 0x4) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000340)={0x51f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "8123"}]}}}}}}}}, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000003c0)=0x200000000) write$vhost_msg(r5, &(0x7f0000000440)={0x1, {&(0x7f00000004c0)=""/72, 0xfffffffffffffe0f, 0x0, 0x2, 0x2}}, 0x48) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0xe2c, "abacd291119ca94c00000000090000030000f80007558139ede6f50e270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x8, "b546baa5cc590d3033de259c29ebab028deda501009bdeffafde2500"}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000600), 0x4) write(r6, &(0x7f0000000800)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f0000000a00)='1', 0x1) ioctl$DVB_DEMUX_DMX_DQBUF(r6, 0xc0186f40, &(0x7f0000000280)={0x0, 0x7, 0x5, 0x100, 0x5, 0x2}) write$FUSE_INIT(r1, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 5 (id=160): sigaltstack(&(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0xfffffffffffffefa}, &(0x7f0000000180)={&(0x7f00000001c0)}) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000700)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x0, 0x7fffffff, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f00000007c0), &(0x7f0000000800)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r0, &(0x7f0000000880), &(0x7f00000008c0)=""/94}, 0x20) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x1000000) write$ppp(0xffffffffffffffff, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xbd) mount(&(0x7f0000000240)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='jffs2\x00', 0x0, 0x0) r2 = timerfd_create(0x4, 0x100800) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) timerfd_settime(r2, 0x2, &(0x7f0000000380)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)={0x44000, 0x0, 0x5}, 0x18) socket(0x2b, 0x80801, 0x1) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000004df0babddbd1c0896d528635edf4d6a3f40d4000468e9d26485927edc7d50a9a382", @ANYBLOB="4c0000001400110500000000000000002b0000014e2200000000000000000000000000000000000000000000000000000000000003000000", @ANYBLOB="09c0a05f5b878b4d694c0ffca0480aabde1019f58a6dd0349eeb1504630db68a01b1114738d90c5ef7a0fbd119dc0fcc2a9dca13753e19b95608515efc", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x8001) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', r6, &(0x7f0000000300)='./mnt\x00', 0x176) kernel console output (not intermixed with test programs): [ 38.018495][ T42] audit: type=1400 audit(1792903482.428:134): avc: denied { noatsecure } for pid=5763 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.020259][ T42] audit: type=1400 audit(1792903482.428:135): avc: denied { write } for pid=5763 comm="sh" path="pipe:[1943]" dev="pipefs" ino=1943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.020476][ T42] audit: type=1400 audit(1792903482.428:136): avc: denied { rlimitinh } for pid=5763 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.020653][ T42] audit: type=1400 audit(1792903482.428:137): avc: denied { siginh } for pid=5763 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:20666' (ED25519) to the list of known hosts. [ 40.002217][ T42] audit: type=1400 audit(1792903484.408:138): avc: denied { name_bind } for pid=5770 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.044088][ T42] audit: type=1400 audit(1792903484.448:139): avc: denied { execute } for pid=5771 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.044838][ T42] audit: type=1400 audit(1792903484.448:140): avc: denied { execute_no_trans } for pid=5771 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.222894][ T42] audit: type=1400 audit(1792903486.628:141): avc: denied { mounton } for pid=5771 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.224248][ T42] audit: type=1400 audit(1792903486.628:142): avc: denied { mount } for pid=5771 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.226511][ T5771] cgroup: Unknown subsys name 'net' [ 42.360352][ T5771] cgroup: Unknown subsys name 'cpuset' [ 42.367645][ T5771] cgroup: Unknown subsys name 'rlimit' [ 42.589236][ T5777] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.354023][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.622282][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 47.622294][ T42] audit: type=1400 audit(1792903492.028:154): avc: denied { execmem } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.864670][ T42] audit: type=1400 audit(1792903492.268:155): avc: denied { create } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.865279][ T42] audit: type=1400 audit(1792903492.278:156): avc: denied { read write } for pid=5782 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.866037][ T42] audit: type=1400 audit(1792903492.278:157): avc: denied { open } for pid=5782 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.877889][ T42] audit: type=1400 audit(1792903492.288:158): avc: denied { ioctl } for pid=5782 comm="syz-executor" path="socket:[2618]" dev="sockfs" ino=2618 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.901560][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.902491][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.903644][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.903908][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.904271][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.904542][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.905507][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.907033][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.907817][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.908453][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.910657][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.911490][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.912790][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.917736][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.919500][ T42] audit: type=1400 audit(1792903492.328:159): avc: denied { read } for pid=5785 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.920035][ T42] audit: type=1400 audit(1792903492.328:160): avc: denied { open } for pid=5785 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.922263][ T42] audit: type=1400 audit(1792903492.328:161): avc: denied { mounton } for pid=5785 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.927757][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.927839][ T42] audit: type=1400 audit(1792903492.338:162): avc: denied { module_request } for pid=5785 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.929225][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.932358][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.940195][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.941482][ T42] audit: type=1400 audit(1792903492.348:163): avc: denied { mounton } for pid=5789 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.942166][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.942605][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.142090][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.142819][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.143345][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.143959][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.188670][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.297951][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.303423][ T5789] infiniband rxe0: set active [ 48.304567][ T1357] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.304739][ T5789] infiniband rxe0: added rxe_eth0 [ 48.318951][ T5789] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 48.318982][ T5789] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 48.319016][ T5789] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 48.322119][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.347820][ T5789] RDS/IB: rxe0: added [ 48.347929][ T5789] smc: adding ib device rxe0 with port count 1 [ 48.347962][ T5789] smc: ib device rxe0 port 1 has no pnetid [ 48.361915][ T58] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.439831][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.439971][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.440128][ T5785] bridge_slave_0: entered allmulticast mode [ 48.442246][ T5785] bridge_slave_0: entered promiscuous mode [ 48.446881][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.446961][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.447064][ T5785] bridge_slave_1: entered allmulticast mode [ 48.448455][ T5785] bridge_slave_1: entered promiscuous mode [ 48.503672][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.533658][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.547729][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.609344][ T5785] team0: Port device team_slave_0 added [ 48.609487][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.609564][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.609839][ T5782] bridge_slave_0: entered allmulticast mode [ 48.611054][ T5782] bridge_slave_0: entered promiscuous mode [ 48.619038][ T5785] team0: Port device team_slave_1 added [ 48.623311][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.623386][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.623477][ T5782] bridge_slave_1: entered allmulticast mode [ 48.624684][ T5782] bridge_slave_1: entered promiscuous mode [ 48.643119][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.667080][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.667097][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.667118][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.670332][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.670659][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.670667][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.670680][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.677763][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.715800][ T5782] team0: Port device team_slave_0 added [ 48.734876][ T5782] team0: Port device team_slave_1 added [ 48.758115][ T5785] hsr_slave_0: entered promiscuous mode [ 48.759004][ T5785] hsr_slave_1: entered promiscuous mode [ 48.791229][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.791245][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.791264][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.793391][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.793402][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.793422][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.833272][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.876874][ T5782] hsr_slave_0: entered promiscuous mode [ 48.877653][ T5782] hsr_slave_1: entered promiscuous mode [ 48.878157][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 48.878227][ T5782] Cannot create hsr debugfs directory [ 49.059541][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.059655][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.059930][ T5788] bridge_slave_0: entered allmulticast mode [ 49.061178][ T5788] bridge_slave_0: entered promiscuous mode [ 49.077793][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.077855][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.077936][ T5788] bridge_slave_1: entered allmulticast mode [ 49.079047][ T5788] bridge_slave_1: entered promiscuous mode [ 49.116764][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.118218][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.147692][ T5788] team0: Port device team_slave_0 added [ 49.156654][ T5788] team0: Port device team_slave_1 added [ 49.184401][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.189562][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.190010][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.191829][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.192227][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.192234][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.192247][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.194386][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.194393][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.194406][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.194889][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.199224][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.199640][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.204132][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.265871][ T5788] hsr_slave_0: entered promiscuous mode [ 49.266406][ T5788] hsr_slave_1: entered promiscuous mode [ 49.266721][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 49.266732][ T5788] Cannot create hsr debugfs directory [ 49.303903][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.306496][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.306915][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.309909][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.344456][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.346705][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.356293][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.356339][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.356393][ T5789] bridge_slave_0: entered allmulticast mode [ 49.357205][ T5789] bridge_slave_0: entered promiscuous mode [ 49.358301][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.363098][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.385478][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.385542][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.385626][ T5789] bridge_slave_1: entered allmulticast mode [ 49.386435][ T5789] bridge_slave_1: entered promiscuous mode [ 49.415182][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.428151][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.460818][ T5789] team0: Port device team_slave_0 added [ 49.469297][ T5789] team0: Port device team_slave_1 added [ 49.492804][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.492815][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.492828][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.494866][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.494874][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.494886][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.537699][ T5789] hsr_slave_0: entered promiscuous mode [ 49.538139][ T5789] hsr_slave_1: entered promiscuous mode [ 49.538617][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 49.538633][ T5789] Cannot create hsr debugfs directory [ 49.613316][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.618948][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.627046][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.628964][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.629422][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.631114][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.649510][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.652307][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.709377][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.740637][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.750463][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.776924][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.776988][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.778417][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.781002][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.781566][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.783171][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.794471][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.794516][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.794961][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.800660][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.801502][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.806103][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.844236][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.860701][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.860749][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.868259][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.868302][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.904061][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.931442][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.936179][ T67] Bluetooth: hci0: command tx timeout [ 49.936187][ T5791] Bluetooth: hci1: command tx timeout [ 49.944859][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.944927][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.952798][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.952842][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.958916][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.991485][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.002661][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.002705][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.011441][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.011488][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.018442][ T5791] Bluetooth: hci3: command tx timeout [ 50.025615][ T5791] Bluetooth: hci2: command tx timeout [ 50.182023][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.211353][ T5785] veth0_vlan: entered promiscuous mode [ 50.218873][ T5785] veth1_vlan: entered promiscuous mode [ 50.238216][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.247500][ T5785] veth0_macvtap: entered promiscuous mode [ 50.250303][ T5785] veth1_macvtap: entered promiscuous mode [ 50.262948][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.267125][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.273273][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.295987][ T5788] veth0_vlan: entered promiscuous mode [ 50.322317][ T5788] veth1_vlan: entered promiscuous mode [ 50.342212][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.342499][ T5782] veth0_vlan: entered promiscuous mode [ 50.354195][ T5782] veth1_vlan: entered promiscuous mode [ 50.355357][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.355534][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.355723][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.355955][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.368548][ T239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.368565][ T239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.393678][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.393691][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.403106][ T5788] veth0_macvtap: entered promiscuous mode [ 50.411914][ T5788] veth1_macvtap: entered promiscuous mode [ 50.424331][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.429982][ T5789] veth0_vlan: entered promiscuous mode [ 50.432773][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.439173][ T5789] veth1_vlan: entered promiscuous mode [ 50.440908][ T5782] veth0_macvtap: entered promiscuous mode [ 50.456636][ T5782] veth1_macvtap: entered promiscuous mode [ 50.472019][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.485368][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.485610][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.486169][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.488368][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.501790][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.503776][ T5789] veth0_macvtap: entered promiscuous mode [ 50.520827][ T239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.520839][ T239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.522927][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.532142][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.532290][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.532478][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.532617][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.538772][ T5789] veth1_macvtap: entered promiscuous mode [ 50.548442][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.548454][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.559486][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.571493][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.613601][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.613617][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.657785][ T5878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.660646][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.660657][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.678635][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.678650][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.707481][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.707494][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.725207][ T5878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.725391][ T5878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.725556][ T5878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.811953][ T5953] tmpfs: User quota inode hardlimit too large. [ 50.846633][ T5953] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5'. [ 50.846670][ T5953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.924525][ T5965] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6'. [ 50.954218][ T5968] EXT4-fs warning (device sda1): verify_group_input:166: Cannot read last block (266218) [ 51.043878][ T5970] fuse: Bad value for 'rootmode' [ 51.159942][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 51.186146][ T5879] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.283147][ T5986] tmpfs: User quota inode hardlimit too large. [ 51.313335][ T5986] netlink: 1 bytes leftover after parsing attributes in process `syz.3.16'. [ 51.313354][ T5986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.337281][ T5879] usb 7-1: Using ep0 maxpacket: 32 [ 51.341400][ T5879] usb 7-1: unable to get BOS descriptor or descriptor too short [ 51.341424][ T5879] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 51.344709][ T5879] usb 7-1: string descriptor 0 read error: -22 [ 51.344801][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.366495][ T5879] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 51.366515][ T5879] dw2102: su3000_power_ctrl: 1, initialized 0 [ 51.366684][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 51.372019][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 51.372713][ T5879] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 51.372738][ T5879] usb 7-1: media controller created [ 51.373022][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 51.373031][ T5879] dw2102: i2c transfer failed. [ 51.373045][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 51.373051][ T5879] dw2102: i2c transfer failed. [ 51.373056][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 51.373062][ T5879] dw2102: i2c transfer failed. [ 51.373069][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 51.373074][ T5879] dw2102: i2c transfer failed. [ 51.373079][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 51.373085][ T5879] dw2102: i2c transfer failed. [ 51.373090][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 51.373096][ T5879] dw2102: i2c transfer failed. [ 51.373099][ T5879] dvb-usb: MAC address: 02:02:02:02:02:02 [ 51.429134][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 51.442532][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 51.442543][ T5879] dw2102: command 0x0e transfer failed. [ 51.442547][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 51.442553][ T5879] dw2102: command 0x0e transfer failed. [ 51.751392][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 51.751413][ T5879] dw2102: command 0x0e transfer failed. [ 51.751419][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 51.751428][ T5879] dw2102: command 0x0e transfer failed. [ 51.751434][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 51.751443][ T5879] dw2102: command 0x51 transfer failed. [ 51.753078][ T5993] dvb-usb: bulk message failed: -22 (3/0) [ 51.753090][ T5993] dw2102: i2c transfer failed. [ 51.756044][ T5969] dvb-usb: bulk message failed: -22 (7/0) [ 51.756055][ T5969] dw2102: i2c transfer failed. [ 51.816299][ T6009] Zero length message leads to an empty skb [ 51.828039][ T5879] DVB: Unable to find symbol ds3000_attach() [ 51.828048][ T5879] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 51.901254][ T5879] rc_core: IR keymap rc-su3000 not found [ 51.901307][ T5879] Registered IR keymap rc-empty [ 51.910264][ T5879] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 51.911122][ T5879] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input5 [ 51.924657][ T5879] dvb-usb: schedule remote query interval to 150 msecs. [ 51.924670][ T5879] dw2102: su3000_power_ctrl: 0, initialized 1 [ 51.924677][ T5879] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 51.937926][ T5879] usb 7-1: USB disconnect, device number 2 [ 51.994951][ T5879] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 52.015145][ T5791] Bluetooth: hci1: command tx timeout [ 52.025211][ T5791] Bluetooth: hci0: command tx timeout [ 52.089661][ T6022] tmpfs: User quota inode hardlimit too large. [ 52.095137][ T5791] Bluetooth: hci3: command tx timeout [ 52.095158][ T5791] Bluetooth: hci2: command tx timeout [ 52.119721][ T6022] netlink: 1 bytes leftover after parsing attributes in process `syz.1.25'. [ 52.119740][ T6022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.341005][ T6040] nvme nvme0: failed to connect socket: -111 [ 52.512458][ T6049] erspan1: entered promiscuous mode [ 52.564843][ T6054] tipc: Started in network mode [ 52.564893][ T6054] tipc: Node identity 1a3d27e6b524, cluster identity 4711 [ 52.568445][ T6054] tipc: Enabled bearer , priority 0 [ 52.615075][ T6054] syzkaller0: entered promiscuous mode [ 52.615098][ T6054] syzkaller0: entered allmulticast mode [ 52.615718][ T6054] tipc: Resetting bearer [ 52.632782][ T6053] tipc: Resetting bearer [ 52.993347][ T42] kauditd_printk_skb: 102 callbacks suppressed [ 52.993367][ T42] audit: type=1400 audit(1792903497.398:266): avc: denied { unmount } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 53.063857][ T42] audit: type=1400 audit(1792903497.468:267): avc: denied { write } for pid=6056 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 53.153353][ T53] IPVS: starting estimator thread 0... [ 53.156261][ T42] audit: type=1400 audit(1792903497.568:268): avc: denied { read } for pid=6064 comm="syz.1.36" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 53.156543][ T42] audit: type=1400 audit(1792903497.568:269): avc: denied { open } for pid=6064 comm="syz.1.36" path="/dev/cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 53.202366][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 53.245862][ T6072] IPVS: using max 44 ests per chain, 105600 per kthread [ 53.438464][ T6080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6080 comm=syz.0.38 [ 53.505091][ T6053] tipc: Disabling bearer [ 53.512584][ T6074] bridge_slave_1: left allmulticast mode [ 53.512613][ T6074] bridge_slave_1: left promiscuous mode [ 53.513257][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.523014][ T6074] bridge_slave_0: left allmulticast mode [ 53.523037][ T6074] bridge_slave_0: left promiscuous mode [ 53.523205][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.642118][ T6082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6082 comm=syz.2.40 [ 53.647893][ T42] audit: type=1400 audit(1792903498.058:270): avc: denied { getopt } for pid=6081 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.670873][ T6088] netlink: 'syz.1.41': attribute type 32 has an invalid length. [ 53.670892][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 53.686291][ T6088] bond1: option coupled_control: invalid value (22) [ 53.689565][ T6088] bond1 (unregistering): Released all slaves [ 53.698666][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 53.698679][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 53.698685][ T6082] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 53.719783][ T42] audit: type=1400 audit(1792903498.128:271): avc: denied { write } for pid=6091 comm="syz.0.42" name="001" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.752844][ T6098] syz.2.43 uses obsolete (PF_INET,SOCK_PACKET) [ 53.795157][ T42] audit: type=1400 audit(1792903498.198:272): avc: denied { ioctl } for pid=6097 comm="syz.2.43" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10556 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.801624][ T42] audit: type=1400 audit(1792903498.208:273): avc: denied { create } for pid=6104 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.804904][ T42] audit: type=1400 audit(1792903498.208:274): avc: denied { write } for pid=6097 comm="syz.2.43" name="dev_mcast" dev="proc" ino=4026533203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.811643][ T42] audit: type=1400 audit(1792903498.218:275): avc: denied { write } for pid=6104 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.916594][ T6111] netlink: 'syz.0.46': attribute type 19 has an invalid length. [ 53.931346][ T6111] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 54.047791][ T6115] netlink: 'syz.1.48': attribute type 1 has an invalid length. [ 54.071325][ T6118] No control pipe specified [ 54.106030][ T67] Bluetooth: hci0: command tx timeout [ 54.106052][ T67] Bluetooth: hci1: command tx timeout [ 54.175189][ T5791] Bluetooth: hci3: command tx timeout [ 54.226308][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.352796][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.364895][ T6124] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 54.371392][ T6124] Bluetooth: (null): Too short H5 packet [ 54.375451][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 54.381212][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 54.381236][ T29] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 54.384410][ T29] usb 5-1: string descriptor 0 read error: -22 [ 54.384464][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.400919][ T29] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 54.400954][ T29] dw2102: su3000_power_ctrl: 1, initialized 0 [ 54.400967][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 54.421815][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 54.424207][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.425136][ T29] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 54.425175][ T29] usb 5-1: media controller created [ 54.425193][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 54.425204][ T29] dw2102: i2c transfer failed. [ 54.425214][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 54.425224][ T29] dw2102: i2c transfer failed. [ 54.425233][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 54.425243][ T29] dw2102: i2c transfer failed. [ 54.425251][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 54.425261][ T29] dw2102: i2c transfer failed. [ 54.425270][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 54.425279][ T29] dw2102: i2c transfer failed. [ 54.425288][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 54.425298][ T29] dw2102: i2c transfer failed. [ 54.425304][ T29] dvb-usb: MAC address: 02:02:02:02:02:02 [ 54.436530][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 54.466160][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 54.466178][ T29] dw2102: command 0x0e transfer failed. [ 54.466184][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 54.466195][ T29] dw2102: command 0x0e transfer failed. [ 54.519834][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.557219][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.558520][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.558971][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.559889][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.560353][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.591090][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.720708][ T13] bridge_slave_1: left allmulticast mode [ 54.720729][ T13] bridge_slave_1: left promiscuous mode [ 54.721210][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.726911][ T13] bridge_slave_0: left allmulticast mode [ 54.726925][ T13] bridge_slave_0: left promiscuous mode [ 54.727025][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.781466][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 54.781913][ T29] dw2102: command 0x0e transfer failed. [ 54.781923][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 54.781934][ T29] dw2102: command 0x0e transfer failed. [ 54.781940][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 54.781949][ T29] dw2102: command 0x51 transfer failed. [ 54.782647][ T6128] dw2102: i2c wr: len=167 is too big! [ 54.782647][ T6128] [ 54.782997][ T6113] dvb-usb: bulk message failed: -22 (7/0) [ 54.783011][ T6113] dw2102: i2c transfer failed. [ 54.817091][ T29] DVB: Unable to find symbol ds3000_attach() [ 54.817104][ T29] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 54.868586][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.871071][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.872159][ T13] bond0 (unregistering): Released all slaves [ 54.875966][ T29] rc_core: IR keymap rc-su3000 not found [ 54.875977][ T29] Registered IR keymap rc-empty [ 54.879893][ T29] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 54.890129][ T29] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input6 [ 54.898335][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 54.898352][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 54.898362][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 54.908831][ T29] usb 5-1: USB disconnect, device number 2 [ 54.962085][ T13] tipc: Left network mode [ 54.962230][ T6129] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.995431][ T6144] bonding: b is being created... [ 55.024280][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 55.104205][ T5495] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.353806][ T5495] 8021q: adding VLAN 0 to HW filter on device eth3 [ 55.370074][ T6166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6166 comm=syz.0.57 [ 55.424945][ T13] hsr_slave_0: left promiscuous mode [ 55.429289][ T13] hsr_slave_1: left promiscuous mode [ 55.430109][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.430134][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.437705][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.437724][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.451163][ T13] veth1_macvtap: left promiscuous mode [ 55.451192][ T13] veth0_macvtap: left promiscuous mode [ 55.451262][ T13] veth1_vlan: left promiscuous mode [ 55.451297][ T13] veth0_vlan: left promiscuous mode [ 55.470425][ T6179] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.67108864.54784), cmd(0) [ 55.493532][ T6179] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 55.533282][ T6182] process 'syz.1.62' launched '/dev/fd/4' with NULL argv: empty string added [ 55.550666][ T6182] device-mapper: multipath service-time: repeat_count > 1 is deprecated, using 1 instead [ 55.550845][ T6182] device-mapper: table: 248:0: multipath: not enough path parameters (-EINVAL) [ 55.550856][ T6182] device-mapper: ioctl: error adding target to table [ 55.551238][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 55.640756][ T13] team0 (unregistering): Port device team_slave_1 removed [ 55.659208][ T13] team0 (unregistering): Port device team_slave_0 removed [ 55.864970][ T6195] random: crng reseeded on system resumption [ 55.917630][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.917745][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.917832][ T6129] bridge_slave_0: entered allmulticast mode [ 55.919094][ T6129] bridge_slave_0: entered promiscuous mode [ 55.921382][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.921495][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.921578][ T6129] bridge_slave_1: entered allmulticast mode [ 55.922709][ T6129] bridge_slave_1: entered promiscuous mode [ 55.944209][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.947592][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.970752][ T6129] team0: Port device team_slave_0 added [ 55.972991][ T6129] team0: Port device team_slave_1 added [ 56.001120][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.001134][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.001154][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.002744][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.002755][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.002775][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.011543][ T5495] 8021q: adding VLAN 0 to HW filter on device eth4 [ 56.044195][ T6129] hsr_slave_0: entered promiscuous mode [ 56.044909][ T6129] hsr_slave_1: entered promiscuous mode [ 56.045787][ T6129] debugfs: 'hsr0' already exists in 'hsr' [ 56.045804][ T6129] Cannot create hsr debugfs directory [ 56.176011][ T67] Bluetooth: hci0: command tx timeout [ 56.215112][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.225751][ T6129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.232154][ T6129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.233234][ T6129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.242069][ T6129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.244579][ T6129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.251089][ T6129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.251822][ T6129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.255194][ T67] Bluetooth: hci3: command tx timeout [ 56.261493][ T6129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.268410][ T5495] 8021q: adding VLAN 0 to HW filter on device eth5 [ 56.283113][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.283212][ T6129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.283367][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.283428][ T6129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.288618][ T239] IPVS: starting estimator thread 0... [ 56.329553][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.340066][ T239] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.341018][ T239] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.362336][ T6129] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.375161][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 56.375553][ T6227] IPVS: using max 25 ests per chain, 60000 per kthread [ 56.377009][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 56.377044][ T29] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 56.378884][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.378969][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.384036][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.384118][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.384794][ T29] usb 6-1: string descriptor 0 read error: -22 [ 56.384924][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.399427][ T29] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 56.399462][ T29] dw2102: su3000_power_ctrl: 1, initialized 0 [ 56.404899][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 56.414124][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 56.414765][ T29] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 56.414801][ T29] usb 6-1: media controller created [ 56.414822][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 56.414832][ T29] dw2102: i2c transfer failed. [ 56.414842][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 56.414851][ T29] dw2102: i2c transfer failed. [ 56.414861][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 56.414870][ T29] dw2102: i2c transfer failed. [ 56.414878][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 56.414889][ T29] dw2102: i2c transfer failed. [ 56.414898][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 56.414907][ T29] dw2102: i2c transfer failed. [ 56.414916][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 56.414926][ T29] dw2102: i2c transfer failed. [ 56.414933][ T29] dvb-usb: MAC address: 02:02:02:02:02:02 [ 56.434038][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 56.453020][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 56.453036][ T29] dw2102: command 0x0e transfer failed. [ 56.453042][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 56.453052][ T29] dw2102: command 0x0e transfer failed. [ 56.575438][ T67] Bluetooth: hci2: command tx timeout [ 56.725871][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.765356][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 56.765369][ T29] dw2102: command 0x0e transfer failed. [ 56.765373][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 56.765379][ T29] dw2102: command 0x0e transfer failed. [ 56.765383][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 56.765389][ T29] dw2102: command 0x51 transfer failed. [ 56.765478][ T6203] dvb-usb: bulk message failed: -22 (7/0) [ 56.765487][ T6203] dw2102: i2c transfer failed. [ 56.784161][ T29] DVB: Unable to find symbol ds3000_attach() [ 56.784170][ T29] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 56.825218][ T29] rc_core: IR keymap rc-su3000 not found [ 56.825234][ T29] Registered IR keymap rc-empty [ 56.826409][ T29] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 56.828372][ T29] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input7 [ 56.832124][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 56.832138][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 56.832148][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 56.834005][ T29] usb 6-1: USB disconnect, device number 2 [ 56.879182][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 56.893097][ T6129] veth0_vlan: entered promiscuous mode [ 56.900093][ T6129] veth1_vlan: entered promiscuous mode [ 56.913715][ T6129] veth0_macvtap: entered promiscuous mode [ 56.916233][ T6129] veth1_macvtap: entered promiscuous mode [ 56.922487][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.927815][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.946886][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.946910][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.946927][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.946943][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.974154][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.974173][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.991425][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.991444][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.254088][ T6274] ip_tables: iptables: counters copy to user failed while replacing table [ 57.549409][ T6292] ./dev/sda1: Can't lookup blockdev [ 57.885734][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 57.905192][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.045204][ T5869] usb 5-1: device descriptor read/64, error -71 [ 58.046375][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.047534][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.047552][ T10] usb 9-1: config 0 has no interfaces? [ 58.048977][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.048989][ T10] usb 9-1: Product: syz [ 58.048996][ T10] usb 9-1: Manufacturer: syz [ 58.051069][ T10] usb 9-1: config 0 descriptor?? [ 58.254970][ T10] usb 9-1: USB disconnect, device number 2 [ 58.305136][ T5869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.445249][ T5869] usb 5-1: device descriptor read/64, error -71 [ 58.555343][ T5869] usb usb5-port1: attempt power cycle [ 58.564642][ T42] kauditd_printk_skb: 70 callbacks suppressed [ 58.564660][ T42] audit: type=1400 audit(1792903502.968:346): avc: denied { write } for pid=6309 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.665148][ T67] Bluetooth: hci2: command tx timeout [ 58.707235][ T1357] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 58.867045][ T1357] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.867873][ T1357] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.867885][ T1357] usb 9-1: config 0 has no interfaces? [ 58.869092][ T1357] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.869104][ T1357] usb 9-1: Product: syz [ 58.869111][ T1357] usb 9-1: Manufacturer: syz [ 58.871761][ T1357] usb 9-1: config 0 descriptor?? [ 58.905146][ T5869] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.936312][ T5869] usb 5-1: device descriptor read/8, error -71 [ 59.185214][ T5869] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.217420][ T5869] usb 5-1: device descriptor read/8, error -71 [ 59.326172][ T5869] usb usb5-port1: unable to enumerate USB device [ 59.494416][ T42] audit: type=1400 audit(1792903503.898:347): avc: denied { write } for pid=6315 comm="syz.1.85" path="socket:[12514]" dev="sockfs" ino=12514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.546400][ T67] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 59.546570][ T67] Bluetooth: hci1: Injecting HCI hardware error event [ 59.547539][ T5791] Bluetooth: hci1: hardware error 0x00 [ 59.577944][ T10] usb 9-1: USB disconnect, device number 3 [ 59.654605][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'. [ 59.655229][ T42] audit: type=1400 audit(1792903504.068:348): avc: denied { create } for pid=6320 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.655897][ T42] audit: type=1400 audit(1792903504.068:349): avc: denied { write } for pid=6320 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.704049][ T6324] tmpfs: Group quota block hardlimit too large. [ 59.874152][ T6341] bond0: option slaves: interface -bo does not exist! [ 59.950538][ T42] audit: type=1400 audit(1792903504.358:350): avc: denied { name_bind } for pid=6344 comm="syz.4.93" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 60.008742][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.94'. [ 60.012097][ T42] audit: type=1400 audit(1792903504.418:351): avc: denied { accept } for pid=6350 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.035921][ T42] audit: type=1400 audit(1792903504.448:352): avc: denied { read } for pid=6350 comm="syz.4.94" path="socket:[11235]" dev="sockfs" ino=11235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.077106][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 60.082024][ T6354] batadv_slave_1: entered promiscuous mode [ 60.082209][ T6354] batadv_slave_1: left promiscuous mode [ 60.151288][ T42] audit: type=1400 audit(1792903504.558:353): avc: denied { write } for pid=6353 comm="syz.4.95" name="comedi2" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.151771][ T42] audit: type=1400 audit(1792903504.558:354): avc: denied { open } for pid=6353 comm="syz.4.95" path="/dev/comedi2" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.152204][ T42] audit: type=1400 audit(1792903504.558:355): avc: denied { ioctl } for pid=6353 comm="syz.4.95" path="/dev/comedi2" dev="devtmpfs" ino=1311 ioctlcmd=0x40946400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.428672][ T6365] kvm: emulating exchange as write [ 60.532816][ T6324] ceph: No mds server is up or the cluster is laggy [ 60.541262][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.745128][ T67] Bluetooth: hci2: command tx timeout [ 60.764768][ T6388] ======================================================= [ 60.764768][ T6388] WARNING: The mand mount option has been deprecated and [ 60.764768][ T6388] and is ignored by this kernel. Remove the mand [ 60.764768][ T6388] option from the mount to silence this warning. [ 60.764768][ T6388] ======================================================= [ 60.771826][ T6388] overlay: filesystem on ./file0 not supported as upperdir [ 60.824285][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 61.472729][ T6398] ptrace attach of "/syz-executor exec"[5785] was attempted by ""[6398] [ 61.518105][ T6401] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 61.615900][ T5791] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 61.654659][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 61.678181][ T6412] bridge0: entered promiscuous mode [ 61.697673][ T6414] ufs: You didn't specify the type of your ufs filesystem [ 61.697673][ T6414] [ 61.697673][ T6414] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 61.697673][ T6414] [ 61.697673][ T6414] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 61.697703][ T6414] ufs: ufstype=old is supported read-only [ 61.698565][ T6414] ufs: ufs_fill_super(): bad magic number [ 61.746692][ T6411] bridge0: left promiscuous mode [ 61.825113][ T5869] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.920809][ T6425] netlink: 76 bytes leftover after parsing attributes in process `syz.0.112'. [ 61.975307][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 61.979221][ T5869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 61.979260][ T5869] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 61.982761][ T5869] usb 6-1: string descriptor 0 read error: -22 [ 61.982849][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.995867][ T5869] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 61.995900][ T5869] dw2102: su3000_power_ctrl: 1, initialized 0 [ 61.995913][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 61.998962][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 62.001040][ T5869] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 62.001066][ T5869] usb 6-1: media controller created [ 62.001091][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 62.001098][ T5869] dw2102: i2c transfer failed. [ 62.001104][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 62.001110][ T5869] dw2102: i2c transfer failed. [ 62.001115][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 62.001121][ T5869] dw2102: i2c transfer failed. [ 62.001126][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 62.001132][ T5869] dw2102: i2c transfer failed. [ 62.001137][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 62.001143][ T5869] dw2102: i2c transfer failed. [ 62.001148][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 62.001154][ T5869] dw2102: i2c transfer failed. [ 62.001158][ T5869] dvb-usb: MAC address: 02:02:02:02:02:02 [ 62.018960][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 62.032616][ T5869] dvb-usb: bulk message failed: -22 (3/0) [ 62.032632][ T5869] dw2102: command 0x0e transfer failed. [ 62.032637][ T5869] dvb-usb: bulk message failed: -22 (3/0) [ 62.032646][ T5869] dw2102: command 0x0e transfer failed. [ 62.289344][ T6438] geneve2: entered promiscuous mode [ 62.289365][ T6438] geneve2: entered allmulticast mode [ 62.335485][ T5869] dvb-usb: bulk message failed: -22 (3/0) [ 62.335504][ T5869] dw2102: command 0x0e transfer failed. [ 62.335511][ T5869] dvb-usb: bulk message failed: -22 (3/0) [ 62.335521][ T5869] dw2102: command 0x0e transfer failed. [ 62.335527][ T5869] dvb-usb: bulk message failed: -22 (1/0) [ 62.335536][ T5869] dw2102: command 0x51 transfer failed. [ 62.335759][ T6408] dvb-usb: bulk message failed: -22 (7/0) [ 62.335774][ T6408] dw2102: i2c transfer failed. [ 62.358517][ T5869] DVB: Unable to find symbol ds3000_attach() [ 62.358526][ T5869] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 62.405133][ T5869] rc_core: IR keymap rc-su3000 not found [ 62.405146][ T5869] Registered IR keymap rc-empty [ 62.405683][ T5869] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 62.406516][ T5869] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input8 [ 62.411727][ T5869] dvb-usb: schedule remote query interval to 150 msecs. [ 62.411740][ T5869] dw2102: su3000_power_ctrl: 0, initialized 1 [ 62.411746][ T5869] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 62.414214][ T5869] usb 6-1: USB disconnect, device number 3 [ 62.468170][ T5869] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 62.815287][ T5791] Bluetooth: hci2: command tx timeout [ 62.931510][ T6457] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 62.931688][ T6457] block device autoloading is deprecated and will be removed. [ 62.977002][ T6457] md: invalid raid superblock magic on ram1 [ 62.977019][ T6457] md: ram1 does not have a valid v0.0 superblock, not importing! [ 62.977078][ T6457] md: md_import_device returned -22 [ 63.012710][ T6460] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 63.012731][ T6460] CIFS mount error: No usable UNC path provided in device string! [ 63.012731][ T6460] [ 63.012942][ T6460] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 63.013175][ T6459] CIFS mount error: No usable UNC path provided in device string! [ 63.013175][ T6459] [ 63.013188][ T6459] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 63.350336][ T5559] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 63.497413][ T5559] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 63.498404][ T5559] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 63.498420][ T5559] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 63.498437][ T5559] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 63.498463][ T5559] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.504309][ T6467] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 63.509113][ T5559] cyberjack 9-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 63.522938][ T5559] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 63.631043][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 63.716466][ T5654] usb 9-1: USB disconnect, device number 4 [ 63.729522][ T5654] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 63.730028][ T5654] cyberjack 9-1:1.0: device disconnected [ 64.025177][ T5654] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 64.176734][ T5654] usb 9-1: Invalid ep0 maxpacket: 64 [ 64.305139][ T5654] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 64.475083][ T5654] usb 9-1: Invalid ep0 maxpacket: 64 [ 64.477003][ T5654] usb usb9-port1: attempt power cycle [ 64.504695][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 64.512794][ T6495] ifb0: entered allmulticast mode [ 64.515787][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 64.515904][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 64.590651][ T6497] nfs: Bad value for 'port' [ 64.627480][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 64.627493][ T42] audit: type=1400 audit(1792903509.038:402): avc: denied { create } for pid=6498 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.801692][ T42] audit: type=1400 audit(1792903509.208:403): avc: denied { create } for pid=6505 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.809080][ T42] audit: type=1400 audit(1792903509.218:404): avc: denied { listen } for pid=6505 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.825931][ T5654] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 64.846990][ T5654] usb 9-1: Invalid ep0 maxpacket: 64 [ 64.985361][ T5654] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 65.005683][ T5654] usb 9-1: Invalid ep0 maxpacket: 64 [ 65.005987][ T5654] usb usb9-port1: unable to enumerate USB device [ 65.027951][ T42] audit: type=1400 audit(1792903509.438:405): avc: denied { map } for pid=6519 comm="syz.1.143" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 65.028183][ T42] audit: type=1400 audit(1792903509.438:406): avc: denied { execute } for pid=6519 comm="syz.1.143" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 65.897813][ T6528] __nla_validate_parse: 30 callbacks suppressed [ 65.897832][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 65.917100][ T42] audit: type=1400 audit(1792903510.328:407): avc: denied { mount } for pid=6527 comm="syz.1.145" name="/" dev="9p" ino=77332497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.925388][ T5869] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 65.950371][ T42] audit: type=1400 audit(1792903510.358:408): avc: denied { read write } for pid=6527 comm="syz.1.145" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.950758][ T42] audit: type=1400 audit(1792903510.358:409): avc: denied { open } for pid=6527 comm="syz.1.145" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 66.075132][ T5869] usb 5-1: device descriptor read/64, error -71 [ 66.108859][ T42] audit: type=1400 audit(1792903510.518:410): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.242041][ T42] audit: type=1400 audit(1792903510.648:411): avc: denied { connect } for pid=6539 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.247776][ T6544] phram: illegal start address [ 66.302116][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.302550][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.302790][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.303035][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.303275][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.306088][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.306336][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.306576][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.306813][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.307055][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.307287][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.307517][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.307757][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.308475][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.308708][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.308973][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.309212][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.309452][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.309915][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.310150][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.310781][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.311013][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.311249][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.311478][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.311716][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.311946][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.312182][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.312431][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.312674][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.312990][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.313282][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.313515][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.313752][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.313982][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.314224][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.314473][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.314766][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.315442][ T5869] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 66.315619][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.316638][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.316927][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.317252][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.317497][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.317740][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.318021][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.318264][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.318506][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.318809][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.319065][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.319304][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.319550][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.319799][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.320065][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.320328][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.320591][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.320987][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.321250][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.321504][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.321762][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.322004][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.322286][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.322528][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.322770][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.323083][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.323333][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.323576][ T6550] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.445125][ T5869] usb 5-1: device descriptor read/64, error -71 [ 66.558192][ T5869] usb usb5-port1: attempt power cycle [ 66.895364][ T5869] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 66.917076][ T5869] usb 5-1: device descriptor read/8, error -71 [ 66.937392][ T6585] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.938003][ T6585] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.944524][ T6585] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.952470][ T6585] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.952556][ T6585] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.961751][ T6585] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.963934][ T6585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.964093][ T6585] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.972438][ T6585] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.073677][ T6591] ip_tables: iptables: counters copy to user failed while replacing table [ 67.155194][ T5869] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 67.176131][ T5869] usb 5-1: device descriptor read/8, error -71 [ 67.281858][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 67.285580][ T5869] usb usb5-port1: unable to enumerate USB device [ 67.319075][ T6602] FAULT_INJECTION: forcing a failure. [ 67.319075][ T6602] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.319094][ T6602] CPU: 2 UID: 0 PID: 6602 Comm: syz.4.156 Not tainted syzkaller #0 PREEMPT(full) [ 67.319107][ T6602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.319113][ T6602] Call Trace: [ 67.319132][ T6602] [ 67.319137][ T6602] dump_stack_lvl+0x100/0x190 [ 67.319261][ T6602] should_fail_ex.cold+0x5/0xa [ 67.319287][ T6602] _copy_to_user+0x32/0xd0 [ 67.319330][ T6602] simple_read_from_buffer+0xcb/0x170 [ 67.319368][ T6602] proc_fail_nth_read+0x1af/0x230 [ 67.319399][ T6602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.319419][ T6602] ? rw_verify_area+0xce/0x6d0 [ 67.319431][ T6602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.319447][ T6602] vfs_read+0x1e4/0xb40 [ 67.319460][ T6602] ? lock_acquire+0x1d1/0x380 [ 67.319506][ T6602] ? __fget_files+0x34/0x3d0 [ 67.319520][ T6602] ? __pfx_vfs_read+0x10/0x10 [ 67.319532][ T6602] ? find_held_lock+0x2b/0x80 [ 67.319548][ T6602] ? __fget_files+0x215/0x3d0 [ 67.319565][ T6602] ? __fget_files+0x21f/0x3d0 [ 67.319584][ T6602] ksys_read+0x12a/0x250 [ 67.319596][ T6602] ? __pfx_ksys_read+0x10/0x10 [ 67.319613][ T6602] do_syscall_64+0x123/0x790 [ 67.319689][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.319702][ T6602] RIP: 0033:0x7fa95095fd8e [ 67.319711][ T6602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.319721][ T6602] RSP: 002b:00007fa9517d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.319732][ T6602] RAX: ffffffffffffffda RBX: 00007fa9517d16c0 RCX: 00007fa95095fd8e [ 67.319738][ T6602] RDX: 000000000000000f RSI: 00007fa9517d10a0 RDI: 0000000000000006 [ 67.319744][ T6602] RBP: 00007fa9517d1090 R08: 0000000000000000 R09: 0000000000000000 [ 67.319750][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.319756][ T6602] R13: 00007fa950c26038 R14: 00007fa950c25fa0 R15: 00007fffa3ebadb8 [ 67.319771][ T6602] [ 67.352191][ T6604] xt_LOG: level 127 >= 8 [ 67.374098][ T5869] logitech-hidpp-device 0003:046D:C082.0002: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 67.431889][ T6605] fido_id[6605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.782879][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.784260][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.788000][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.789967][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.790464][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.939575][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.940193][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.055770][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.068061][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.204851][ T6639] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.204873][ T6639] block device autoloading is deprecated and will be removed. [ 68.232501][ T6639] md: md1 stopped. [ 68.291678][ T6646] capability: warning: `syz.4.166' uses deprecated v2 capabilities in a way that may be insecure [ 68.298611][ T5878] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.313861][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 68.316206][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.316242][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.316271][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.316299][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.398337][ T5878] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.421101][ T6625] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.475091][ T5878] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.485566][ T6664] netlink: 'syz.1.168': attribute type 4 has an invalid length. [ 68.551484][ T5878] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.605371][ T34] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 68.676658][ T5878] bridge_slave_1: left allmulticast mode [ 68.676674][ T5878] bridge_slave_1: left promiscuous mode [ 68.676774][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.678702][ T5878] bridge_slave_0: left allmulticast mode [ 68.678715][ T5878] bridge_slave_0: left promiscuous mode [ 68.678799][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.759388][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.762130][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.763090][ T5878] bond0 (unregistering): Released all slaves [ 68.766634][ T34] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 68.767505][ T34] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8 has invalid wMaxPacketSize 0 [ 68.767518][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 68.769574][ T34] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 68.769586][ T34] usb 9-1: Product: syz [ 68.769593][ T34] usb 9-1: Manufacturer: syz [ 68.769600][ T34] usb 9-1: SerialNumber: syz [ 68.771780][ T5878] bond1 (unregistering): Released all slaves [ 68.774871][ T34] usb 9-1: config 0 descriptor?? [ 68.780678][ T34] usb 9-1: selecting invalid altsetting 0 [ 68.839435][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.839572][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.839673][ T6625] bridge_slave_0: entered allmulticast mode [ 68.841037][ T6625] bridge_slave_0: entered promiscuous mode [ 68.843645][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.843772][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.843867][ T6625] bridge_slave_1: entered allmulticast mode [ 68.845488][ T6625] bridge_slave_1: entered promiscuous mode [ 68.924438][ T6625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.928572][ T6625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.940269][ T6625] team0: Port device team_slave_0 added [ 68.941531][ T6625] team0: Port device team_slave_1 added [ 68.952254][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.952263][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.952275][ T6625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.953122][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.953129][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.953141][ T6625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.987043][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.992020][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.997850][ T10] usb 9-1: USB disconnect, device number 9 [ 69.012199][ T6625] hsr_slave_0: entered promiscuous mode [ 69.012629][ T6625] hsr_slave_1: entered promiscuous mode [ 69.012965][ T6625] debugfs: 'hsr0' already exists in 'hsr' [ 69.012977][ T6625] Cannot create hsr debugfs directory [ 69.013843][ T5495] 8021q: adding VLAN 0 to HW filter on device eth6 [ 69.172041][ T6707] kvm [6706]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 69.184483][ T6625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.189361][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.189807][ T6625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.191530][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.201531][ T6625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.214546][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.224089][ T6625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.232667][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.271009][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.271580][ T6625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.271787][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.271876][ T6625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.304464][ T5495] 8021q: adding VLAN 0 to HW filter on device eth7 [ 69.387214][ T5878] hsr_slave_0: left promiscuous mode [ 69.389606][ T5878] hsr_slave_1: left promiscuous mode [ 69.390176][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.390193][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.394664][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.394680][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.438350][ T5878] veth1_macvtap: left promiscuous mode [ 69.438374][ T5878] veth0_macvtap: left promiscuous mode [ 69.438429][ T5878] veth1_vlan: left promiscuous mode [ 69.438475][ T5878] veth0_vlan: left promiscuous mode [ 69.630331][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 69.643202][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 69.691973][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 69.691991][ T42] audit: type=1400 audit(1792903514.098:450): avc: denied { ioctl } for pid=6733 comm="syz.4.177" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.753488][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.754132][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.764657][ T5495] 8021q: adding VLAN 0 to HW filter on device eth8 [ 69.788036][ T6625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.809380][ T6625] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.832272][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.832376][ T6566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.834160][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.834242][ T6566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.847156][ T42] audit: type=1400 audit(1792903514.258:451): avc: denied { create } for pid=6738 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 69.855148][ T5791] Bluetooth: hci3: command tx timeout [ 69.903848][ T42] audit: type=1400 audit(1792903514.308:452): avc: denied { mount } for pid=6738 comm="syz.4.178" name="/" dev="rpc_pipefs" ino=14937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 69.907536][ T6739] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 69.916693][ T42] audit: type=1400 audit(1792903514.328:453): avc: denied { write } for pid=6738 comm="syz.4.178" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.922547][ T42] audit: type=1400 audit(1792903514.328:454): avc: denied { open } for pid=6738 comm="syz.4.178" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.928450][ T42] audit: type=1400 audit(1792903514.338:455): avc: denied { write } for pid=6740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.978113][ T42] audit: type=1400 audit(1792903514.388:456): avc: denied { unmount } for pid=6129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 70.017886][ T42] audit: type=1400 audit(1792903514.428:457): avc: denied { bind } for pid=6749 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.018427][ T42] audit: type=1400 audit(1792903514.428:458): avc: denied { node_bind } for pid=6749 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 70.020007][ T42] audit: type=1400 audit(1792903514.428:459): avc: denied { write } for pid=6747 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.091103][ T5495] 8021q: adding VLAN 0 to HW filter on device eth9 [ 70.216798][ T6625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.405882][ T6625] veth0_vlan: entered promiscuous mode [ 70.410526][ T6781] Console: switching to colour dummy device 80x25 [ 70.411104][ T6625] veth1_vlan: entered promiscuous mode [ 70.428660][ T6625] veth0_macvtap: entered promiscuous mode [ 70.430923][ T6625] veth1_macvtap: entered promiscuous mode [ 70.437992][ T6625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.448053][ T6625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.498700][ T6568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.498719][ T6568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.519156][ T6570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.519174][ T6570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.527932][ T5849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.527958][ T5849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.527975][ T5849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.527992][ T5849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.607110][ T6783] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 70.638179][ T6783] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 70.638377][ T6783] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 70.638455][ T6783] pci 0000:00:01.0: BAR 4 [mem 0xfeaf6000-0xfeaf6fff] [ 70.638584][ T6783] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 70.639522][ T6783] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 70.663797][ T6783] pci 0000:00:01.0: Adding to iommu group 1 [ 70.672326][ T6783] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 70.672341][ T6783] pci 0000:00:01.0: vgaarb: bridge control possible [ 70.672348][ T6783] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 70.689263][ T6783] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 70.701473][ T6783] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 70.709050][ T6783] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 70.774204][ T6783] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 70.774330][ T6783] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 70.775496][ T6783] [drm] features: -virgl +edid -resource_blob -host_visible [ 70.77 ** replaying previous printk message ** [ 70.775506][ T6783] [drm] features: -context_init -blob_alignment [ 70.784494][ T6783] ------------[ cut here ]------------ [ 70.784506][ T6783] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 70.784516][ T6783] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xab/0x440, CPU#3: syz.4.184/6783 [ 70.798947][ T6783] Modules linked in: [ 70.800797][ T6783] CPU: 3 UID: 0 PID: 6783 Comm: syz.4.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.805518][ T6783] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 70.807398][ T6783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.812110][ T6783] RIP: 0010:__kmem_cache_create_args+0xae/0x440 [ 70.814856][ T6783] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 4a 1a 90 74 1f 48 8b 7b 58 48 89 ee e8 e0 fe 7c 09 85 c0 75 e0 48 8d 3d 25 0f 09 10 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 60 00 7d 09 48 85 c0 0f [ 70.823370][ T6783] RSP: 0018:ffffc90003566f18 EFLAGS: 00010246 [ 70.826169][ T6783] RAX: 0000000000000000 RBX: ffff888028f62640 RCX: fffff520006acdbe [ 70.829797][ T6783] RDX: 0000000000000000 RSI: ffffffff8cb2a0e0 RDI: ffffffff926d5f10 [ 70.832760][ T6783] RBP: ffffffff8cb2a0e0 R08: 0000000000000000 R09: fffffbfff24d198b [ 70.835675][ T6783] R10: ffffc90003566f18 R11: 0000000000000001 R12: 0000000000000000 [ 70.838747][ T6783] R13: ffffc90003566f88 R14: 00000000000000d8 R15: ffff88804c375cce [ 70.841394][ T6783] FS: 00007fa9517b06c0(0000) GS:ffff8880d47ba000(0000) knlGS:0000000000000000 [ 70.844895][ T6783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.847125][ T6783] CR2: 00007f1466e6c600 CR3: 0000000031001000 CR4: 0000000000352ef0 [ 70.850400][ T6783] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 70.853209][ T6783] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 70.856610][ T6783] Call Trace: [ 70.857783][ T6783] [ 70.858737][ T6783] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 70.860857][ T6783] ? __pfx__printk+0x10/0x10 [ 70.862824][ T6783] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 70.864719][ T6783] ? lockdep_init_map_type+0x5c/0x250 [ 70.866982][ T6783] virtio_gpu_init.cold+0x40d/0x127f [ 70.869086][ T6783] ? vga_remove_vgacon.cold+0x1d/0x99 [ 70.870787][ T6783] ? __pfx_virtio_gpu_init+0x10/0x10 [ 70.872627][ T6783] ? is_console_locked+0x9/0x20 [ 70.874687][ T6783] ? con_is_bound+0x141/0x190 [ 70.876596][ T6783] ? vga_remove_vgacon+0x21/0x30 [ 70.878780][ T6783] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 70.881843][ T6783] virtio_gpu_probe+0x21c/0x360 [ 70.883967][ T6783] virtio_dev_probe+0x72a/0xd30 [ 70.886179][ T6783] ? __pfx_virtio_dev_probe+0x10/0x10 [ 70.888513][ T6783] ? kernfs_put+0x3f/0x60 [ 70.890425][ T6783] ? sysfs_do_create_link_sd+0xbb/0x140 [ 70.892854][ T6783] ? sysfs_create_link+0x68/0xc0 [ 70.895276][ T6783] ? __pfx_virtio_dev_probe+0x10/0x10 [ 70.897639][ T6783] really_probe+0x241/0xa60 [ 70.899546][ T6783] __driver_probe_device+0x210/0x460 [ 70.901779][ T6783] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.903671][ T6783] driver_probe_device+0x4a/0x140 [ 70.905382][ T6783] __device_attach_driver+0x1df/0x320 [ 70.907403][ T6783] ? __pfx___device_attach_driver+0x10/0x10 [ 70.909259][ T6783] bus_for_each_drv+0x159/0x1e0 [ 70.910660][ T6783] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.912284][ T6783] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.914038][ T6783] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.916125][ T6783] __device_attach+0x1e4/0x4d0 [ 70.917676][ T6783] ? __pfx___device_attach+0x10/0x10 [ 70.919378][ T6783] ? do_raw_spin_unlock+0x145/0x1e0 [ 70.921435][ T6783] device_initial_probe+0xaf/0xd0 [ 70.923519][ T6783] bus_probe_device+0x64/0x160 [ 70.925471][ T6783] device_add+0x121d/0x1970 [ 70.926936][ T6783] ? __pfx_device_add+0x10/0x10 [ 70.928770][ T6783] ? __pfx___might_resched+0x10/0x10 [ 70.930676][ T6783] ? lockdep_init_map_type+0x5c/0x250 [ 70.932522][ T6783] ? vp_synchronize_vectors+0x121/0x1f0 [ 70.934806][ T6783] ? __pfx_vp_set_status+0x10/0x10 [ 70.936742][ T6783] register_virtio_device+0x661/0x7c0 [ 70.938818][ T6783] ? __pfx_register_virtio_device+0x10/0x10 [ 70.941325][ T6783] ? __pfx_pcibios_set_master+0x10/0x10 [ 70.943248][ T6783] ? __raw_spin_lock_init+0x3a/0x110 [ 70.945060][ T6783] ? __pfx_virtio_pci_probe+0x10/0x10 [ 70.947221][ T6783] virtio_pci_probe+0x255/0x410 [ 70.949258][ T6783] local_pci_probe+0xdd/0x1b0 [ 70.950942][ T6783] pci_call_probe+0x176/0x800 [ 70.952545][ T6783] ? pci_match_device+0x147/0x7d0 [ 70.954419][ T6783] ? __pfx_pci_call_probe+0x10/0x10 [ 70.956300][ T6783] ? __pfx_pci_match_device+0x10/0x10 [ 70.958254][ T6783] ? pci_find_host_bridge+0x3c/0x80 [ 70.960188][ T6783] pci_device_probe+0x25b/0x400 [ 70.962203][ T6783] ? __pfx_pci_device_probe+0x10/0x10 [ 70.964492][ T6783] ? sysfs_create_link+0x68/0xc0 [ 70.966724][ T6783] ? __pfx_pci_device_probe+0x10/0x10 [ 70.969054][ T6783] really_probe+0x241/0xa60 [ 70.971012][ T6783] __driver_probe_device+0x210/0x460 [ 70.973327][ T6783] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.976220][ T6783] driver_probe_device+0x4a/0x140 [ 70.978346][ T6783] __device_attach_driver+0x1df/0x320 [ 70.980798][ T6783] ? __pfx___device_attach_driver+0x10/0x10 [ 70.983476][ T6783] bus_for_each_drv+0x159/0x1e0 [ 70.985656][ T6783] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.987908][ T6783] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.994970][ T6783] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.997768][ T6783] __device_attach+0x1e4/0x4d0 [ 70.999914][ T6783] ? __pfx___device_attach+0x10/0x10 [ 71.002190][ T6783] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.004399][ T6783] device_initial_probe+0xaf/0xd0 [ 71.006682][ T6783] pci_bus_add_device+0xc5/0x100 [ 71.008809][ T6783] pci_bus_add_devices+0x9a/0x1f0 [ 71.010928][ T6783] pci_rescan_bus+0x2a/0x40 [ 71.012893][ T6783] rescan_store+0xfb/0x130 [ 71.014742][ T6783] ? __pfx_rescan_store+0x10/0x10 [ 71.016748][ T6783] ? sysfs_file_kobj+0xe4/0x290 [ 71.018869][ T6783] ? __pfx_rescan_store+0x10/0x10 [ 71.021009][ T6783] bus_attr_store+0x74/0xb0 [ 71.023034][ T6783] ? __pfx_bus_attr_store+0x10/0x10 [ 71.025428][ T6783] sysfs_kf_write+0xf2/0x150 [ 71.027564][ T6783] kernfs_fop_write_iter+0x3e0/0x5f0 [ 71.029898][ T6783] ? __pfx_sysfs_kf_write+0x10/0x10 [ 71.032134][ T6783] vfs_write+0x6af/0x1050 [ 71.034018][ T6783] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 71.036593][ T6783] ? __pfx_vfs_write+0x10/0x10 [ 71.038673][ T6783] ? find_held_lock+0x2b/0x80 [ 71.040745][ T6783] ksys_write+0x12a/0x250 [ 71.042706][ T6783] ? __pfx_ksys_write+0x10/0x10 [ 71.044807][ T6783] do_syscall_64+0x123/0x790 [ 71.046960][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.049442][ T6783] RIP: 0033:0x7fa95099f559 [ 71.051114][ T6783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.055133][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.060055][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.063711][ T6783] RSP: 002b:00007fa9517b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.067256][ T6783] RAX: ffffffffffffffda RBX: 00007fa950c26090 RCX: 00007fa95099f559 [ 71.070036][ T6783] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 000000000000000b [ 71.072536][ T6783] RBP: 00007fa950a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 71.075085][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.077990][ T6783] R13: 00007fa950c26128 R14: 00007fa950c26090 R15: 00007fffa3ebadb8 [ 71.081166][ T6783] [ 71.082432][ T6783] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.084827][ T6783] CPU: 3 UID: 0 PID: 6783 Comm: syz.4.184 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.087921][ T6783] Tainted: [L]=SOFTLOCKUP [ 71.089190][ T6783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.092481][ T6783] Call Trace: [ 71.093820][ T6783] [ 71.094811][ T6783] dump_stack_lvl+0x100/0x190 [ 71.096408][ T6783] vpanic+0x553/0x970 [ 71.097847][ T6783] ? __pfx_vpanic+0x10/0x10 [ 71.099714][ T6783] panic+0xd1/0xe0 [ 71.100998][ T6783] ? __pfx_panic+0x10/0x10 [ 71.102486][ T6783] check_panic_on_warn.cold+0x19/0x34 [ 71.104226][ T6783] ? __kmem_cache_create_args+0xab/0x440 [ 71.105984][ T6783] __warn.cold+0x191/0x318 [ 71.107476][ T6783] __report_bug+0x30f/0x440 [ 71.109310][ T6783] ? __kmem_cache_create_args+0xab/0x440 [ 71.111592][ T6783] ? __pfx___report_bug+0x10/0x10 [ 71.113387][ T6783] ? __mutex_lock+0x267/0x1c10 [ 71.114833][ T6783] ? __kmem_cache_create_args+0x44/0x440 [ 71.116735][ T6783] report_bug_entry+0xe2/0x290 [ 71.118353][ T6783] ? __kmem_cache_create_args+0xae/0x440 [ 71.120484][ T6783] handle_bug+0x1cd/0x2a0 [ 71.122248][ T6783] exc_invalid_op+0x17/0x50 [ 71.124051][ T6783] asm_exc_invalid_op+0x1a/0x20 [ 71.125960][ T6783] RIP: 0010:__kmem_cache_create_args+0xae/0x440 [ 71.128280][ T6783] Code: 48 8b 43 60 48 8d 58 a0 48 3d d0 4a 1a 90 74 1f 48 8b 7b 58 48 89 ee e8 e0 fe 7c 09 85 c0 75 e0 48 8d 3d 25 0f 09 10 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 60 00 7d 09 48 85 c0 0f [ 71.135565][ T6783] RSP: 0018:ffffc90003566f18 EFLAGS: 00010246 [ 71.138080][ T6783] RAX: 0000000000000000 RBX: ffff888028f62640 RCX: fffff520006acdbe [ 71.141028][ T6783] RDX: 0000000000000000 RSI: ffffffff8cb2a0e0 RDI: ffffffff926d5f10 [ 71.143874][ T6783] RBP: ffffffff8cb2a0e0 R08: 0000000000000000 R09: fffffbfff24d198b [ 71.146592][ T6783] R10: ffffc90003566f18 R11: 0000000000000001 R12: 0000000000000000 [ 71.149316][ T6783] R13: ffffc90003566f88 R14: 00000000000000d8 R15: ffff88804c375cce [ 71.152113][ T6783] ? __kmem_cache_create_args+0xa0/0x440 [ 71.154267][ T6783] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 71.155942][ T6783] ? __pfx__printk+0x10/0x10 [ 71.157787][ T6783] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 71.159895][ T6783] ? lockdep_init_map_type+0x5c/0x250 [ 71.161608][ T6783] virtio_gpu_init.cold+0x40d/0x127f [ 71.163761][ T6783] ? vga_remove_vgacon.cold+0x1d/0x99 [ 71.165615][ T6783] ? __pfx_virtio_gpu_init+0x10/0x10 [ 71.167610][ T6783] ? is_console_locked+0x9/0x20 [ 71.169571][ T6783] ? con_is_bound+0x141/0x190 [ 71.171094][ T6783] ? vga_remove_vgacon+0x21/0x30 [ 71.172795][ T6783] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 71.175502][ T6783] virtio_gpu_probe+0x21c/0x360 [ 71.176962][ T6783] virtio_dev_probe+0x72a/0xd30 [ 71.178652][ T6783] ? __pfx_virtio_dev_probe+0x10/0x10 [ 71.180344][ T6783] ? kernfs_put+0x3f/0x60 [ 71.181702][ T6783] ? sysfs_do_create_link_sd+0xbb/0x140 [ 71.183358][ T6783] ? sysfs_create_link+0x68/0xc0 [ 71.184861][ T6783] ? __pfx_virtio_dev_probe+0x10/0x10 [ 71.186534][ T6783] really_probe+0x241/0xa60 [ 71.188208][ T6783] __driver_probe_device+0x210/0x460 [ 71.190160][ T6783] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.192193][ T6783] driver_probe_device+0x4a/0x140 [ 71.193765][ T6783] __device_attach_driver+0x1df/0x320 [ 71.195416][ T6783] ? __pfx___device_attach_driver+0x10/0x10 [ 71.197272][ T6783] bus_for_each_drv+0x159/0x1e0 [ 71.198970][ T6783] ? __pfx_bus_for_each_drv+0x10/0x10 [ 71.200911][ T6783] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.202808][ T6783] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 71.205035][ T6783] __device_attach+0x1e4/0x4d0 [ 71.206717][ T6783] ? __pfx___device_attach+0x10/0x10 [ 71.208768][ T6783] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.210831][ T6783] device_initial_probe+0xaf/0xd0 [ 71.212560][ T6783] bus_probe_device+0x64/0x160 [ 71.214054][ T6783] device_add+0x121d/0x1970 [ 71.215462][ T6783] ? __pfx_device_add+0x10/0x10 [ 71.216869][ T6783] ? __pfx___might_resched+0x10/0x10 [ 71.218423][ T6783] ? lockdep_init_map_type+0x5c/0x250 [ 71.220108][ T6783] ? vp_synchronize_vectors+0x121/0x1f0 [ 71.221789][ T6783] ? __pfx_vp_set_status+0x10/0x10 [ 71.223233][ T6783] register_virtio_device+0x661/0x7c0 [ 71.224801][ T6783] ? __pfx_register_virtio_device+0x10/0x10 [ 71.226484][ T6783] ? __pfx_pcibios_set_master+0x10/0x10 [ 71.228078][ T6783] ? __raw_spin_lock_init+0x3a/0x110 [ 71.229612][ T6783] ? __pfx_virtio_pci_probe+0x10/0x10 [ 71.231109][ T6783] virtio_pci_probe+0x255/0x410 [ 71.232537][ T6783] local_pci_probe+0xdd/0x1b0 [ 71.234003][ T6783] pci_call_probe+0x176/0x800 [ 71.235511][ T6783] ? pci_match_device+0x147/0x7d0 [ 71.237066][ T6783] ? __pfx_pci_call_probe+0x10/0x10 [ 71.238617][ T6783] ? __pfx_pci_match_device+0x10/0x10 [ 71.240247][ T6783] ? pci_find_host_bridge+0x3c/0x80 [ 71.241863][ T6783] pci_device_probe+0x25b/0x400 [ 71.243335][ T6783] ? __pfx_pci_device_probe+0x10/0x10 [ 71.244978][ T6783] ? sysfs_create_link+0x68/0xc0 [ 71.246459][ T6783] ? __pfx_pci_device_probe+0x10/0x10 [ 71.248088][ T6783] really_probe+0x241/0xa60 [ 71.249483][ T6783] __driver_probe_device+0x210/0x460 [ 71.251117][ T6783] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.252931][ T6783] driver_probe_device+0x4a/0x140 [ 71.254493][ T6783] __device_attach_driver+0x1df/0x320 [ 71.256120][ T6783] ? __pfx___device_attach_driver+0x10/0x10 [ 71.257947][ T6783] bus_for_each_drv+0x159/0x1e0 [ 71.259476][ T6783] ? __pfx_bus_for_each_drv+0x10/0x10 [ 71.261155][ T6783] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.262820][ T6783] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 71.264659][ T6783] __device_attach+0x1e4/0x4d0 [ 71.266166][ T6783] ? __pfx___device_attach+0x10/0x10 [ 71.267850][ T6783] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.269639][ T6783] device_initial_probe+0xaf/0xd0 [ 71.271219][ T6783] pci_bus_add_device+0xc5/0x100 [ 71.272835][ T6783] pci_bus_add_devices+0x9a/0x1f0 [ 71.274416][ T6783] pci_rescan_bus+0x2a/0x40 [ 71.275834][ T6783] rescan_store+0xfb/0x130 [ 71.277221][ T6783] ? __pfx_rescan_store+0x10/0x10 [ 71.278713][ T6783] ? sysfs_file_kobj+0xe4/0x290 [ 71.280177][ T6783] ? __pfx_rescan_store+0x10/0x10 [ 71.281729][ T6783] bus_attr_store+0x74/0xb0 [ 71.283531][ T6783] ? __pfx_bus_attr_store+0x10/0x10 [ 71.285550][ T6783] sysfs_kf_write+0xf2/0x150 [ 71.287374][ T6783] kernfs_fop_write_iter+0x3e0/0x5f0 [ 71.289395][ T6783] ? __pfx_sysfs_kf_write+0x10/0x10 [ 71.291446][ T6783] vfs_write+0x6af/0x1050 [ 71.293148][ T6783] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 71.295457][ T6783] ? __pfx_vfs_write+0x10/0x10 [ 71.297257][ T6783] ? find_held_lock+0x2b/0x80 [ 71.299053][ T6783] ksys_write+0x12a/0x250 [ 71.300414][ T6783] ? __pfx_ksys_write+0x10/0x10 [ 71.301999][ T6783] do_syscall_64+0x123/0x790 [ 71.303471][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.305290][ T6783] RIP: 0033:0x7fa95099f559 [ 71.306756][ T6783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.312887][ T6783] RSP: 002b:00007fa9517b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.315493][ T6783] RAX: ffffffffffffffda RBX: 00007fa950c26090 RCX: 00007fa95099f559 [ 71.318055][ T6783] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 000000000000000b [ 71.321077][ T6783] RBP: 00007fa950a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 71.324160][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.327003][ T6783] R13: 00007fa950c26128 R14: 00007fa950c26090 R15: 00007fffa3ebadb8 [ 71.329763][ T6783] [ 71.331375][ T6783] Kernel Offset: disabled [ 71.333093][ T6783] Rebooting in 86400 seconds..