last executing test programs: 10.460382382s ago: executing program 3 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x1, 0x2}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000240)={0xe88df0c4fd85dcf, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x64e3f91792bee68) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000140), 0x4) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 10.459660092s ago: executing program 3 (id=408): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8100400008004526005c016600002f11"], 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000100)=0x9, 0x4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x7ff, 0x0, &(0x7f0000000040), 0x0) (async) futex(&(0x7f000000cffc), 0x3, 0x7ff, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x4, 0xa7b, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x67, 0x0, 0xd, 0x4, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x1c, 0x29, 0x0, 0x4, [0x3ff, 0x3, 0x9f7b, 0x0, 0x8, 0xfffffffd]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x4, 0xa7b, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x67, 0x0, 0xd, 0x4, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x1c, 0x29, 0x0, 0x4, [0x3ff, 0x3, 0x9f7b, 0x0, 0x8, 0xfffffffd]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001800)={'syztnl1\x00', &(0x7f0000001780)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x7800, 0x10, 0x7fff, 0x3}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001840)={'veth0_to_batadv\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001840)={'veth0_to_batadv\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001880)={@remote, @initdev, 0x0}, &(0x7f00000018c0)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x84083c2c63a52d60, &(0x7f0000001900)={@initdev, @local, 0x0}, &(0x7f0000001940)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001c80)={'erspan0\x00', &(0x7f0000001c00)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x14, 0x2, {{0x10, 0x4, 0x2, 0x2e, 0x40, 0x66, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@timestamp_addr={0x44, 0x2c, 0x78, 0x1, 0xe, [{@private=0xa010102, 0x80000000}, {@private=0xa010100, 0x3}, {@empty, 0x7}, {@broadcast, 0x6}, {@multicast2, 0x9}]}]}}}}}) socket(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xf1d4}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ec0)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="dfb9be4c45bc7e396be3f390bd837d54e80d10e4578df87b5e66c1446e6dc1d0a2a630d299aabe25c7c48cbe73ec38a70730462c7c40bae05fd93e2dd2029fb254d746a596010f128023cd402bd55b5768f95b869276337a7f3fbf79ef421d02929c140cb231c25d4a9beee8be987d9100", 0x71}, {&(0x7f00000001c0)="ff314b4041423888aa4903a772089a04def2368f98ae61261edd9dc0eeb676a95a9f0d931ca2b1b310b11d2b45bda4849d057786006a7030bcab341e016b3f512a233ab62267970fb778f2a069a21e2d887618d682af7a02", 0x58}, {&(0x7f0000000300)="80490739b0eb711e33077e00cbc02de483af22b42bd7dfc7fc0110d5f681d948a109024375f6a9bd5cab6bcd42532e1e3ac7ab056bc638f41616572e08ef338183c2eaf6a592cf336e54451d29abc7af4e3976e20283556fcad4e102a0c69efd872111bb151e41170bf3a1481753e8f589942a17fec292de39fa8f0b14cad92ca8b3bd4162ae609200b24bc29fcb072b728d7a05a9c79768383eb374a756027e18ff40902247eed8434b5cf6236f29c40f35e5874394130d04bc34ec101f2481707041ef9220f41724bdf6aebbdde490e578f1d6a46164970e4435", 0xdb}], 0x3, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="9a6e3d9d3cf3ddd36482d9a2455e057276506da4b33be298e01fb0d5eb7746ee0bb44e87db0626821beb6a55a2de3be678fedfc85c6bca8ff1cd55247fb6957b5b0cad40c105ae87c4694fddc3191369ef6d6ee6b739d573afdc4dde0c37003274202655cdbaa03fbf32b6c84f1434d76d8f12aa844a436fd8f5215e3cb5bf45317907fe481d286db68f50bbb582db9efa26915ea3beb0dbfff901f245dd23707f90be824b0c627109861f2d9afde3a6dc8022495b14809d5f5d36bf", 0xbc}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000004c0)="fa6eef7d70d472863573c012875153c1a511f434652c446042abc192a3755d2239ecd22f5d6289f91adcf7e7f122cfb3ce46d2f68c6fbfe49dd71c10a38fd9da083c6a204f51b460e81babcc67e6f63d814ad5f56d09c54ce73e6f5c8190538bd41d6f5056d0c5edcc549f2d743976f4d870130a8da25583df035a59024b42d9399252405d64271f4bfe60bab2e2e0793c908ef6d81c33cd18a097c9d2122f09aaea06", 0xa3}, {&(0x7f0000000580)="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", 0xfb}], 0x4, &(0x7f0000001980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010101}}}], 0xe8}}, {{&(0x7f0000001a80)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)="647fd6b97ccfc9eb201e385ee972401ca9e5029ca856588e73835f522f20bdddf0a05757f242d8dc440831e741a336f8f40307898268d4272203bb6cb6c957850f9e2078bd1ea67f8be84985291092aeafb2552676e541fe7170add1d85945c73069df0e3fa6c6a22df003ae94057c2e7514dfafcb83ce47d12322017860f11d9525a72eb1460e31d5f60763e6d9581c995ae746565e4bbc59bb1800f23a6ae5754b042628f735de12c47c5e5633669046b2fe3104bff11acb8a67e38ad4a625dc5824e4c0a837f977c77109e98b097ece0c744a2f5af28d77214c747e8a7e533fbf6e1cd3c6cd54c6a1a6eedd39e20904a04870eff53c", 0xf7}], 0x1, &(0x7f0000001cc0)=[@ip_retopts={{0x64, 0x0, 0x7, {[@ra={0x94, 0xffffff49}, @cipso={0x86, 0x8, 0x8d35ae0a33afe86a, [{0x2, 0x2}]}, @lsrr={0x83, 0x2b, 0xbe, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010100, @private=0xa010102, @multicast2, @loopback, @multicast1]}, @rr={0x7, 0xf, 0xd3, [@multicast1, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x0, [{@empty, 0x3ff}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@rr={0x7, 0x2b, 0xf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x19}, @remote, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2, @local]}, @cipso={0x86, 0x38, 0x3, [{0x0, 0xa, "c268011c899313fa"}, {0x6, 0x10, "27beef66d6f4eccbb4a8159ee89d"}, {0x5, 0x11, "2f297abc09b98a578d4e66070dc16b"}, {0x6, 0x7, "b3ec289268"}]}]}}}], 0x100}}, {{&(0x7f0000001dc0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001e00)="711df43d83d8839062d0001b8ca0c65b055a233f81712c751b94fee5c32b0ee5f8e2e1147cc9cd3fc8f20cf5", 0x2c}, {&(0x7f0000001e40)}], 0x2, &(0x7f0000001f00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @remote, @rand_addr=0x64010100}}}], 0xa0}}], 0x4, 0x20044800) 10.230415713s ago: executing program 3 (id=409): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x5a, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0x2e4}]}, {0x4, 0x6, "2b90420359fb4c1d26e9cd8959b71af7d72c4a456a4952c1330f6e722c9b10670482715fd35ce0034e884c8e99ef919d9415518b23d1770e03f045f16358f1a45fad8eb05bc2dcb78ad5291e7f87a0e7bb6d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x50, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x880) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) (async) close(r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x5a, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0x2e4}]}, {0x4, 0x6, "2b90420359fb4c1d26e9cd8959b71af7d72c4a456a4952c1330f6e722c9b10670482715fd35ce0034e884c8e99ef919d9415518b23d1770e03f045f16358f1a45fad8eb05bc2dcb78ad5291e7f87a0e7bb6d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x50, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x880) (async) 10.110867522s ago: executing program 3 (id=411): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}, 0x1c) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d02409819180179714ed0a6e1f0f755d8583da60f27c162dbba0706002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cece48c38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5ff01000000000000b69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b4073f300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b87234a30900000000000068133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf11211"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000000640)=""/217, 0xd9}], 0x2) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000000)="2c10", 0x2}, {&(0x7f0000000740)="63d80290e64397fd3c3809001bf3ac7cfb823918f918cde1b6351c33c57f34c55ff3e97fd6f0773e1d8d3a7f7a11328ea3486f471e50c59745a7b6f5a2065857fa26519c6f98115ac4fe405159fe6ecf0a3345190319d3a1bdaa305dbcf2cd5068e0a3d5e8794db3008c1b4624c372c4d0826da5833bf7f6e6b5bfbf982df38885424cdedfd89eb8af969cb56da40aeef7f93ea64dc5", 0x96}, {&(0x7f0000000800)="3346a3143c4d53665a65faea77d705162170b9f863312027131b1186b12c0a0fc0c4a4f372218b1e7d67e65a3f43259c78ff01008e8dff2669efdfe1e26a93d9bf2ca7dbbe2721a30a21f1a10c8ac95c751f404cd6aa2c2a173ef19bb884d4301a3476be5a55d2e8ccb74d794e96fcde4afee9a65c1f516f7d7e52e6994e45c80651cf49e0e51faf77a45f3250bf1627f855504018f99449cac958a0297c06eacb749c0fde72224aab0232da274d30e74d08d055a0beb04c261cb70f3c42", 0xbe}, {&(0x7f0000000e40)="8595c770631aaa69c1d299a3bd0d080d8741fd357e2d67b34351c97e59f2b9a7f72830d7defa663904cf7aebdaf368449eeeca5b105d88e1bd39186bea2a4169b1e85341edcecaec776dc66c644d6639f4490461984ddce404218f3c60182d5751f3935dd725491b05558dc13f2e0eefd191f0018d0c75ab7f379fe9414a7fbcf825579780c89765e40dbf6fad8fd71b759d95c4a67930287abb6121599c33876a95a29fce366212647729471404295b356711218eca59893f23df5606693d9947e8688b6ac2e1df6cbcb42c425b3d8a68d94b84", 0xd4}, {&(0x7f0000000f40)="f43f9ff1a1af12a2631eaaf2462fc31e6a54c17decfe712bd5a4d211c57c84ab41ae3e046be6659459b2fe0b183622884fb602fba6397fcd0cd5a18874ec5f9ce382bbeb6685744224404cc032fade2150331a4141bd767ff326713a63668242d68022204083209b1e3a41f422b30b83d97d2dd229c6af", 0x77}, {&(0x7f0000000fc0)="0be7c211f70210057b879a0e21f79696b13cd2b2012e80b9ed9bdcf061a4489d75b60621a7a8b7c0899184b725e4cdaf69bee48a124fc28a5f103da2f0e01b7165c9618677c1d50b32d3933a6bc21ebe8ad9e2170cd49623653238266fbea34063f8d4c0f64a7d24ea29565124c4eeff29da32acad48c16f9963237ba2e23d9a4877f68a902cd0bf4d9e1ebf1b1a6932449773a5eae998e5e0ab7b6b0c88c2a36b809d7259db5d5bef7901c12e8c5f4b632c66986550638f288c", 0xba}, {&(0x7f0000001080)="b09242585a2b6aa69f07a19d9b49ec02861edc1f816d939cd64042b40baa7dac6c98758065bac744a8eaa8d443be47a842f48f3650ac85b02d44095b4a6d706a6da3ef8fe1b3d3876e7e9305a55ef77babe4c5ee4b86ff319f918d6914bec984ae17827b4addbb61c4e39f1f44a7162e7ed894e6ba0019b471d1836cf4cfa9099b70cd4c940088e1ac873a746b78206a83bc79c4cf4112f40cfba2cbfb67e35a9204c5a7b73051633943d29e37e0a1a5b668c3eb7230f4f1d9b7b2a1935153c70f96d4c0", 0xc4}, {&(0x7f0000001180)="2258c7f90f83a46dfa5fda62f2e0f7be21f611dd7fbd4cad97369007c8083eecd6126453460105179e93f258460a4fd3d46c3fd485378e06ea89c2c75c84", 0x3e}], 0x8, 0x0, 0x0, 0x2c}, 0x44004) 10.10912963s ago: executing program 3 (id=412): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x22500) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000010, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1f, 0x0) ioctl$I2C_TENBIT(r2, 0x704, 0x1) ioctl$I2C_SLAVE(r2, 0x703, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000003c0)=ANY=[@ANYBLOB="bd52c8bd6682e65abb7d9d0c6a09a28eba0d9e69938d8aa378e9dbc85e44e9c6e738da7710633ea6e2f6b98c67ef8bc62d3f7cadb72e8fddb582db02c9a4f4228a6c6a60b6d1d8f8dcef1202c232f508040631558082993513d383e96e48", @ANYBLOB="7e6d0759d606e4e6d65f1a939a9d5ad35b7f38440f2739ccc96d4c077b54731144a39d06cfa6448ee1d06acd8d19c429cfeaefc3ef7f03d1c778160ac4b27b506cb7322132bdd98f197e12e474637b350ed5e7eb25a82f4682fc043c05be8662781c915e78615e652910ee7c9cce6a4fa4b503697a53934fdbff3b1c7d4b33b860878cb1838a066e0ca62bdd0bb36782d4ab2c65e0c7bbdb68acfaf5e32011ab15b78c3e01adfec9944e0d00f985badb546660b4e8a1ed7362d030f11dd4d1aa0aa4212901f1dec3595a332acd9941d315bf4f4ca7a92fa0cec9306928fe76e04f46f4ebb2a55bd88a9822a4e2", @ANYRESHEX=r0, @ANYRES16=r4, @ANYRES64, @ANYRES8, @ANYRES64, @ANYRES64=r3, @ANYRES8=0x0]) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x19, 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c5bbbe93f687909, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) mmap(&(0x7f0000177000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x91e16000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000262000/0x2000)=nil, 0x2000, 0x280000b, 0x28011, r7, 0x5d178000) r8 = dup(r6) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000240)="36f3260f07d0e966b9800000c00f326635002000000f30f0819779e900380f005ddf0f01df66b9800000c00f326635008000000f30b800008ee00f01c80f38097300", 0x42}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) ioctl$PIO_FONTX(r11, 0x4b6c, &(0x7f00000002c0)={0x117, 0x17, &(0x7f00000005c0)="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"}) 9.410080319s ago: executing program 3 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x5, 0x400}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2], 0xb4}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000180)={0x23027526, 0x6, 0x8, 0x0, 0x0, [{{r0}}, {{r0}, 0x80}, {{r0}, 0x4b7}, {{r0}, 0x10}, {{r2}, 0x7fc00}, {{r3}, 0x5}, {{r0}, 0x2}, {{r4}, 0x8}]}) 6.1126517s ago: executing program 2 (id=442): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000007000000660000000000000016000000ffffffff9500000000000400"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 6.111925863s ago: executing program 2 (id=443): r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0xea, 0x0, &(0x7f00000000c0)={0x23, 0x2, 0x0, 0x3}, 0x10) r1 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000000000000616263647a666768696a6b6c6d6e6f70"], 0x18, 0xffffffffffffffff) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000007, 0x11, r4, 0x0) fanotify_mark(r4, 0x80, 0x8, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x4, 0x5, 0x5, 0x7, 0x7, 0x3, 0x4, 0x3}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ppoll(&(0x7f0000000280)=[{r3, 0x80}], 0x1, &(0x7f0000000300), 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000050) keyctl$chown(0x4, r1, 0x0, 0x0) 6.018031125s ago: executing program 2 (id=444): ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x7fffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "ede0c71b1b9bd6"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001840)={r0, 0x6}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r4, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') openat(r4, &(0x7f0000000280)='./control\x00', 0x0, 0x0) unlinkat(r4, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b01, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x300, 0x0) preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000040)=0x8, 0x4) 2.901009611s ago: executing program 2 (id=456): syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0xb8d, 0x5) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x128, &(0x7f0000000280)={@remote, @dev, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0xb, 0x6, "ccda43", 0xea, 0x6, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, {[@dstopts={0x8}, @srh={0x0, 0x2, 0x4, 0x1, 0x18, 0x10, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x4e24, 0x4e20, r0, r2, 0x0, 0x0, 0xf, 0x20, 0x9, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0x0, 0x4}, @eol, @fastopen={0x22, 0x8, "6aaf83083cb9"}, @exp_smc={0xfe, 0x6}, @mptcp=@mp_fclose={0x1e, 0xc, 0x3dc, 0x0, 0x400}]}}, {"dd0f79f2d54769076fb6865763c596e4f16d16b550b4e5eb1838076e57c2c070dd3df39cb0c4fc9e7b820b8b661ace038f612bb8cfc2d99a7233f7b0520119469f1f3c0079640de7002ccec8292b7afce325f9a3d83971fde604783093ae35d2a6a57bf559a7ea5f85a06fba22d0236115b4ede9df4c4a193d9a1a4443e48ab2dcec67e02100353947b4aecc6b8f"}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'rose0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='xs_stream_read_request\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES32=r0, @ANYRES64=r2, @ANYRES8=r4, @ANYRESHEX=r5, @ANYRESOCT=r1], 0x38}}, 0x6c09a) 2.900656262s ago: executing program 2 (id=457): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85ff000000000000bc1010000000000904000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)="a17c0af7705d8d7e14df51dc9c188e7f20d8d1eafee191150b8bbc0af9b7fc0d3fc98c41e451bd5a9acb1ca20da9114c6246e75bfa1a6a81d19a2df31451c62b5937e2b473e83e8cf9c69f6a555e8949b53607f010e3184f0d03ecd9e33f2419464bcdf85431ad2f3a2368c501509c887d612b7089979111e35e27c9eb440f624a8696728d09c4a6a645e9f1a8c323c506bc3557d3a09019f9a62a1ab3e9f95e7608a50fe43d", 0xa6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x4004880) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x2, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_emit_ethernet(0x3e, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a20400", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x3300, 0x0, 0x8}}}}}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x2, 0x70bd27, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80c0}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10041, 0x80) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xd, 0x1c, 0x6, 0x7, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in6=@empty, @in=@multicast2, 0x56, 0x10, 0x14}]}, 0x38}}, 0x4000000) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x15, 0x6, 0x9, 0xe, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x1, 0x71, 0xc45a, 0x4, 0x3d71f37a}, @sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x6e6bb8, 0x0, {0x6, 0x33, 0x7, 0x5, 0x0, 0x7, 0x0, @in=@broadcast, @in6=@private1}}]}, 0x70}}, 0x4000000) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000180)=0x1) 2.850124856s ago: executing program 2 (id=458): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0xb9e8, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x40040) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYRES32], 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) 1.090952741s ago: executing program 1 (id=471): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x4, 0x375}) (async) r1 = socket$inet(0x2, 0x2000000080002, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async, rerun: 64) r5 = socket$inet(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async, rerun: 32) r7 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0x80044100, &(0x7f0000000280)={0x0, [[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x4}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x80}]}) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffffd}]}]}]}}]}, 0x9c}}, 0x0) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="9f54d0396871787d805916100ad4c7fe7a73e9f60d05b65c0b85c6a58e44a2d4fc04cf57a284d4a2953ba69d85796aba25e6db829f1da1deae172de0b9ccba738bbd4d7020db28439a5a27c904f90bd37cad3aed20d9408991f43b566d5c09d09dfe6451dabb13907675f073582478a8857213977f67df5b29aca94a1aad31f7f07c262610f96e", 0x87}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xd9, [@dev={0xac, 0x14, 0x14, 0x28}]}, @lsrr={0x83, 0x7, 0x43, [@dev={0xac, 0x14, 0x14, 0xb}]}, @timestamp={0x44, 0x20, 0x66, 0x0, 0x9, [0x8, 0xa, 0x8, 0x1bd87e60, 0x2, 0x2, 0x7]}, @noop]}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xeb, 0x3, 0x7, [{@remote, 0xaa2}, {@remote, 0x1}]}, @ssrr={0x89, 0xb, 0xa2, [@private=0xa010100, @local]}, @generic={0x7, 0x6, "a047f1f1"}]}}}], 0x100}, 0xc00a094) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) 928.699046ms ago: executing program 1 (id=473): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) syz_emit_ethernet(0xe1, &(0x7f0000000280)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0x2}, {0xff}, {0x3, 0x0, 0x1}, {0x401}], @llc={@llc={0xff, 0x1, '\bM', "697944c43df1a403bac8e4d0cb1947fc5953c406a508f9986cee6c1ecea1b7ed0013c2b185c8e0afc10bf15bba9459b0e28ec15c29a3095170882184e1432afcd6078221cfb51c793c762ac483ed38e2f8d11f013701eb50a09d789a35b19b5b0beffd8a59afbce24979f730dbb7d65143acf0d06553400b51f379f0ec491a38154950daead4ba98c452173155e9249c2e04c259b32f84dd1e26ddedbdd7530351a9f845e1bed5f0adf1355e48547413bb11ab0734ccd134c83853cc2af763"}}}}}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6}, 0x90) (async, rerun: 64) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x0, 0x5}, 0x20) (rerun: 64) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x8, r4, 0x600}, 0x10) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x110420, 0x4) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000880)=""/91) 561.517673ms ago: executing program 0 (id=482): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000506010100000000140000000000000005000100070000000900020073797a30000000000c00078008001240000a0000050005000a000000050004000000000012000300"], 0x58}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 561.093544ms ago: executing program 0 (id=483): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f00000000c0)) 509.744674ms ago: executing program 0 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000a00)=0x40000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"698901006678d631ec4cc6553600", 0x0, 0x0, {0x4, 0xc}, {0x7, 0xc00000}, 0x5, [0x6, 0x6, 0x9, 0x8000004, 0x8000000000, 0x10000400, 0x8, 0x2, 0x8, 0x6, 0xfffe, 0x8000084, 0x10, 0x8de, 0x7]}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 64) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x2) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='vxfs\x00', 0x0, 0x0) 509.00805ms ago: executing program 0 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0xd000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640fbe01cf0ff4c9e21d4501c744240000000000c74424021c320000c744240600000000360fba64255a2f0fc76e0466ba6100ecef66bafc0c66b8004066ef66b8296c", 0x5d}], 0x1, 0x20, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$dupfd(r3, 0x0, r3) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x651, 0xfffffffffffffff8, 0x1000000000000, 0x0, 0x0, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc6, 0xfffffffffffffffc, 0x1, 0x80008, 0x0, 0x0, 0x3, 0x200000, 0x0, 0x3, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 357.147787ms ago: executing program 0 (id=486): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r1, 0x0) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) accept4$tipc(r1, 0x0, 0x0, 0x0) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc)=0x3, 0x4) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) r7 = geteuid() (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) (async) r10 = getuid() setfsuid(r10) (async) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x842000, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other}], [{@flag='sync'}, {@fowner_lt={'fowner<', r9}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@hash}, {@euid_eq={'euid', 0x3d, r10}}, {@obj_user}, {@euid_eq={'euid', 0x3d, r11}}]}}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x44, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) (async) recvmmsg(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0xfffff001}], 0x1, 0x100, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in=@empty, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) fcntl$notify(r3, 0x402, 0x2) acct(&(0x7f0000000140)='./file0\x00') (async) acct(0x0) 356.763986ms ago: executing program 0 (id=487): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000009) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x28002, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa7e890b60b8b98bc, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x3f) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)) ioctl$SNDCTL_TMR_STOP(r5, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x5}) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000190000005f0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 70.53568ms ago: executing program 1 (id=488): r0 = gettid() kcmp(r0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_delrule={0x24, 0x21, 0x1, 0x70bd06, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x18}]}, 0x24}}, 0x20000000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) preadv2(r2, &(0x7f0000002240)=[{&(0x7f0000002040)=""/76, 0x4c}], 0x1, 0x8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x89, "c2fc69d8f7253457e7639258ce695f99651eef2ca7394d1b60235042f47644f6ea8b52de4d0ccb0dc3a41704b58a4da7cf8758121bef8fd27c074646b1d8f171e8e907c0557c23437ef65a0020f266ff3c09c5a7048d5c7c77b75779f35e3288055921df856064ae4822a223f54eada34e9a834b5c78cf8d62ee7e598ce2a088c360e23d11d5a8c6a3"}, &(0x7f0000000000)=0x91) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @dev}}, 0x5}, &(0x7f0000000140)=0x90) 70.310651ms ago: executing program 1 (id=489): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) timer_create(0x2, 0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) socketpair(0x22, 0x2, 0x4, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0xc00864c0, &(0x7f0000000200)={r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r9, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x26) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000380)="49675ea0c2f88400f5245d83bc548dfccefb835f644e4a837ebff1fc074ae3526a6c8e0e15039c68e3de94f0106a7a66e0830fe5d0c011cd1392355a960b155d467efaa0091a560f0b20ea8e96f3"}, 0x20) sendto$inet6(r8, &(0x7f0000000200)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x818892, &(0x7f0000000040)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="834ef95a2b4f7e542c00"]) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), r10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x30, r11, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r12 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r12, 0x10e, 0x2, &(0x7f0000000340)=0x2, 0x4) 455.84µs ago: executing program 1 (id=490): syz_open_dev$MSR(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) write$sysctl(0xffffffffffffffff, &(0x7f0000000380)='4\x00', 0x2) r0 = syz_open_dev$dri(&(0x7f0000000400), 0xf9, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r3, 0x11, 0x0, 0xffff71d6, &(0x7f0000000580), 0x40af, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x3c, r6, 0x21, 0x200000, 0x25dfdc01, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xc00}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x30000}]}, 0x3c}}, 0x4000040) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x7, r8, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r7], &(0x7f0000000280)=[0x1], &(0x7f0000000300)=[r8, r9, r10, r11, 0x0, r9, r12], &(0x7f0000000380)}) sendto$inet6(r3, &(0x7f00000003c0)="a4abc6fb4787988f3b248f19bf431ea392cc11abbd4f65e66831d234aa9086957473c4231b1eae81e6695348f047612b97e05ac95284c0609e484e036ec873", 0x3f, 0x4000, 0x0, 0x0) 0s ago: executing program 1 (id=491): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000080c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab005230c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc47040492ffaef4267d15182adc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53892cf2b3f41d58e08bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f808000000ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a5760d2cac9432f2ce030cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050296129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf977eaf37d043c407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f40000000062da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60fff5a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223f0400e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512ae8be2f86b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fc4f4097c2a5189b10c1776713f78193c6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e0400299e4f28faff6ac1905be2814cb02511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34e77bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c34a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fcf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e000000009dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcf3e7cf975027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7068cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c00018006000600800a0000100007"], 0x34}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x89, 0x2}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000fdffffffbe0000000000000091d400000000000087ccdeb91e39123b422d6de569a772dc6366c7bf49c2d587bc7753facc5a61c9f9ad43cbcf23b6ef964cf69db56488055f4b74a38bca1ec29a3a428017946d964aa43f055e750f7c636e39a7f5f8fac5efb16ea03a6fd64724"]) r7 = socket(0x400000000010, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000000080)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18,\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x9f\xda8\xc8\xc6\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf8\xb9S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88X\xfe\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]') ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x8}}) kernel console output (not intermixed with test programs): [ 38.268257][ T39] audit: type=1400 audit(1738540814.571:81): avc: denied { rlimitinh } for pid=5919 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.273739][ T39] audit: type=1400 audit(1738540814.571:82): avc: denied { siginh } for pid=5919 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.805751][ T39] audit: type=1400 audit(1738540815.121:83): avc: denied { read } for pid=5337 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.813857][ T39] audit: type=1400 audit(1738540815.121:84): avc: denied { append } for pid=5337 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.821966][ T39] audit: type=1400 audit(1738540815.121:85): avc: denied { open } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.828263][ T39] audit: type=1400 audit(1738540815.121:86): avc: denied { getattr } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:38775' (ED25519) to the list of known hosts. [ 39.356272][ T39] audit: type=1400 audit(1738540815.671:87): avc: denied { name_bind } for pid=5924 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.956561][ T5926] cgroup: Unknown subsys name 'net' [ 41.063457][ T5926] cgroup: Unknown subsys name 'cpuset' [ 41.067823][ T5926] cgroup: Unknown subsys name 'rlimit' [ 41.304405][ T5933] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.916451][ T5926] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.252627][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 44.252641][ T39] audit: type=1400 audit(1738540820.571:105): avc: denied { execmem } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.432139][ T39] audit: type=1400 audit(1738540820.751:106): avc: denied { create } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.446820][ T39] audit: type=1400 audit(1738540820.751:107): avc: denied { read write } for pid=5938 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.456304][ T39] audit: type=1400 audit(1738540820.751:108): avc: denied { open } for pid=5938 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.463172][ T39] audit: type=1400 audit(1738540820.751:109): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="socket:[5909]" dev="sockfs" ino=5909 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.473470][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.476452][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.479882][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.482741][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.484996][ T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.485803][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.487083][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.490840][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.491763][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.494097][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.498575][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.498937][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.500810][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.504043][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.505499][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.507475][ T39] audit: type=1400 audit(1738540820.821:110): avc: denied { read } for pid=5938 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.510133][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.511444][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.511698][ T5945] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.511801][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.515659][ T39] audit: type=1400 audit(1738540820.821:111): avc: denied { open } for pid=5938 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.529173][ T5294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.532606][ T39] audit: type=1400 audit(1738540820.821:112): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.532619][ T5294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.544382][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.549019][ T5943] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.552014][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.622854][ T39] audit: type=1400 audit(1738540820.941:113): avc: denied { module_request } for pid=5938 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.656174][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 44.703186][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 44.756801][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 44.765372][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.767276][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.769259][ T5938] bridge_slave_0: entered allmulticast mode [ 44.772220][ T5938] bridge_slave_0: entered promiscuous mode [ 44.775368][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.777208][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.779093][ T5938] bridge_slave_1: entered allmulticast mode [ 44.781159][ T5938] bridge_slave_1: entered promiscuous mode [ 44.839074][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.842451][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.844317][ T5942] bridge_slave_0: entered allmulticast mode [ 44.846307][ T5942] bridge_slave_0: entered promiscuous mode [ 44.850624][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.852692][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.854803][ T5942] bridge_slave_1: entered allmulticast mode [ 44.856917][ T5942] bridge_slave_1: entered promiscuous mode [ 44.860271][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.878403][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.912372][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.914474][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.916370][ T5946] bridge_slave_0: entered allmulticast mode [ 44.918400][ T5946] bridge_slave_0: entered promiscuous mode [ 44.922568][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.936525][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 44.940935][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.942838][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.944751][ T5946] bridge_slave_1: entered allmulticast mode [ 44.946745][ T5946] bridge_slave_1: entered promiscuous mode [ 44.950498][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.955369][ T5938] team0: Port device team_slave_0 added [ 44.996153][ T5938] team0: Port device team_slave_1 added [ 45.011783][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.049659][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.053732][ T5942] team0: Port device team_slave_0 added [ 45.058113][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.060548][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.067546][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.073474][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.075870][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.084126][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.098522][ T5942] team0: Port device team_slave_1 added [ 45.132719][ T5946] team0: Port device team_slave_0 added [ 45.145576][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.147646][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.155320][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.178051][ T5946] team0: Port device team_slave_1 added [ 45.190058][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.192639][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.200640][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.203707][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.205716][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.207592][ T5951] bridge_slave_0: entered allmulticast mode [ 45.209769][ T5951] bridge_slave_0: entered promiscuous mode [ 45.237131][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.239222][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.247251][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.250746][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.252814][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.254971][ T5951] bridge_slave_1: entered allmulticast mode [ 45.257197][ T5951] bridge_slave_1: entered promiscuous mode [ 45.268219][ T5938] hsr_slave_0: entered promiscuous mode [ 45.270339][ T5938] hsr_slave_1: entered promiscuous mode [ 45.275033][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.276887][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.285081][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.321831][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.333889][ T5942] hsr_slave_0: entered promiscuous mode [ 45.335821][ T5942] hsr_slave_1: entered promiscuous mode [ 45.337659][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.340255][ T5942] Cannot create hsr debugfs directory [ 45.374985][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.420236][ T5951] team0: Port device team_slave_0 added [ 45.423446][ T5951] team0: Port device team_slave_1 added [ 45.426706][ T5946] hsr_slave_0: entered promiscuous mode [ 45.428655][ T5946] hsr_slave_1: entered promiscuous mode [ 45.430549][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.432690][ T5946] Cannot create hsr debugfs directory [ 45.464301][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.466351][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.473667][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.497486][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.500324][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.507561][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.566310][ T5951] hsr_slave_0: entered promiscuous mode [ 45.568281][ T5951] hsr_slave_1: entered promiscuous mode [ 45.570194][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.572341][ T5951] Cannot create hsr debugfs directory [ 45.654508][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.665403][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.670362][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.682191][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.723826][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.727292][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.730846][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.734738][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.756205][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.760377][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.773965][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.776975][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.797177][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.801595][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.805057][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.808181][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.834956][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.848224][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.856745][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.873631][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.875824][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.884048][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.887144][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.889394][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.900028][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.902110][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.905729][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.913661][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.915717][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.928289][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.936919][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.945814][ T5942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.948801][ T5942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.953359][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.964866][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.967788][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.969374][ T39] audit: type=1400 audit(1738540822.281:114): avc: denied { sys_module } for pid=5938 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.983489][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.989374][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.991506][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.997380][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.999519][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.010985][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.013075][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.053458][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.060784][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.083620][ T5938] veth0_vlan: entered promiscuous mode [ 46.089344][ T5942] veth0_vlan: entered promiscuous mode [ 46.094299][ T5942] veth1_vlan: entered promiscuous mode [ 46.098735][ T5938] veth1_vlan: entered promiscuous mode [ 46.119014][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.125878][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.129142][ T5938] veth0_macvtap: entered promiscuous mode [ 46.133299][ T5942] veth0_macvtap: entered promiscuous mode [ 46.136770][ T5938] veth1_macvtap: entered promiscuous mode [ 46.141634][ T5942] veth1_macvtap: entered promiscuous mode [ 46.148869][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.156619][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.167413][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.170410][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.172952][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.175498][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.183442][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.186497][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.189994][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.198269][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.201498][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.204663][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.218503][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.223613][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.226121][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.228580][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.232290][ T5951] veth0_vlan: entered promiscuous mode [ 46.239786][ T5946] veth0_vlan: entered promiscuous mode [ 46.250924][ T5951] veth1_vlan: entered promiscuous mode [ 46.251282][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.255277][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.255879][ T5946] veth1_vlan: entered promiscuous mode [ 46.278567][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.281567][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.302316][ T5946] veth0_macvtap: entered promiscuous mode [ 46.306458][ T5951] veth0_macvtap: entered promiscuous mode [ 46.310286][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.313363][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.317679][ T5946] veth1_macvtap: entered promiscuous mode [ 46.322559][ T5951] veth1_macvtap: entered promiscuous mode [ 46.327213][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.337390][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.342142][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.345848][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.349302][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.353279][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.357458][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.359948][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.361991][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.365119][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.367943][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.371241][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.374078][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.377030][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.382928][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.385832][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.389136][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.392474][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.395501][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.398753][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.403481][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.406117][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.408658][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.411425][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.415904][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.419405][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.423223][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.426675][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.429583][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.432567][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.437237][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.441618][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.444199][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.446950][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.450748][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.454386][ T6004] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma? [ 46.475063][ T5980] hid-generic 0003:0000:030D.0002: collection stack underflow [ 46.477446][ T5980] hid-generic 0003:0000:030D.0002: item 0 0 0 12 parsing failed [ 46.480518][ T5980] hid-generic 0003:0000:030D.0002: probe with driver hid-generic failed with error -22 [ 46.526492][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.528210][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.532653][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.535999][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.545742][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.550782][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.556564][ T1241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.558746][ T1241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.561127][ T5943] Bluetooth: hci1: command tx timeout [ 46.563476][ T5943] Bluetooth: hci2: command tx timeout [ 46.564717][ T5950] Bluetooth: hci0: command tx timeout [ 46.633801][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 46.639948][ T5950] Bluetooth: hci3: command tx timeout [ 46.646367][ T6020] IPv6: NLM_F_REPLACE set, but no existing node found! [ 46.679171][ T6017] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 46.806432][ T6037] support for the xor transformation has been removed. [ 46.854218][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 46.901584][ T6047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.905987][ T6045] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.983336][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16'. [ 47.016015][ T6045] kvm: pic: non byte write [ 47.032768][ T6057] netlink: 'syz.1.17': attribute type 29 has an invalid length. [ 47.036139][ T6057] netlink: 'syz.1.17': attribute type 29 has an invalid length. [ 47.041006][ T6057] netlink: 500 bytes leftover after parsing attributes in process `syz.1.17'. [ 47.042843][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 47.175760][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 47.488506][ T6094] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.646560][ T5950] Bluetooth: hci1: adv larger than maximum supported [ 47.646598][ T5950] Bluetooth: hci1: Malformed LE Event: 0x0d [ 47.648351][ T6099] /dev/nullb0: Can't open blockdev [ 47.780638][ T70] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.830837][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 47.833720][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: kworker/u33:6 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 47.833734][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.833740][ T5950] Workqueue: hci3 hci_rx_work [ 47.833772][ T5950] Call Trace: [ 47.833776][ T5950] [ 47.833781][ T5950] dump_stack_lvl+0x16c/0x1f0 [ 47.833794][ T5950] sysfs_warn_dup+0x7f/0xa0 [ 47.833809][ T5950] sysfs_create_dir_ns+0x24d/0x2b0 [ 47.833822][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 47.833836][ T5950] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 47.833846][ T5950] ? kobject_add_internal+0x12d/0x990 [ 47.833857][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 47.833866][ T5950] kobject_add_internal+0x2c8/0x990 [ 47.833879][ T5950] kobject_add+0x16f/0x240 [ 47.833889][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 47.833899][ T5950] ? class_to_subsys+0x3e/0x160 [ 47.833916][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 47.833928][ T5950] ? kobject_put+0xab/0x5a0 [ 47.833941][ T5950] device_add+0x289/0x1a70 [ 47.833952][ T5950] ? __pfx_dev_set_name+0x10/0x10 [ 47.833966][ T5950] ? __pfx_device_add+0x10/0x10 [ 47.833978][ T5950] ? mgmt_send_event_skb+0x2f2/0x460 [ 47.833997][ T5950] hci_conn_add_sysfs+0x17e/0x230 [ 47.834011][ T5950] le_conn_complete_evt+0x107f/0x1da0 [ 47.834025][ T5950] ? __pfx_lock_release+0x10/0x10 [ 47.834037][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 47.834048][ T5950] ? __mutex_lock+0x1cc/0xb10 [ 47.834062][ T5950] hci_le_conn_complete_evt+0x23c/0x370 [ 47.834083][ T5950] hci_le_meta_evt+0x2e2/0x5d0 [ 47.834095][ T5950] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 47.834109][ T5950] hci_event_packet+0x666/0x1180 [ 47.834121][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 47.834134][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 47.834145][ T5950] ? mark_held_locks+0x9f/0xe0 [ 47.834159][ T5950] ? kcov_remote_start+0x3cf/0x6e0 [ 47.834173][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.834192][ T5950] hci_rx_work+0x2c5/0x16b0 [ 47.834204][ T5950] ? process_one_work+0x921/0x1ba0 [ 47.834218][ T5950] process_one_work+0x9c5/0x1ba0 [ 47.834234][ T5950] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 47.834247][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 47.834261][ T5950] ? assign_work+0x1a0/0x250 [ 47.834274][ T5950] worker_thread+0x6c8/0xf00 [ 47.834289][ T5950] ? __kthread_parkme+0x148/0x220 [ 47.834298][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 47.834310][ T5950] kthread+0x3af/0x750 [ 47.834321][ T5950] ? __pfx_kthread+0x10/0x10 [ 47.834331][ T5950] ? lock_acquire+0x2f/0xb0 [ 47.834344][ T5950] ? __pfx_kthread+0x10/0x10 [ 47.834355][ T5950] ret_from_fork+0x45/0x80 [ 47.834367][ T5950] ? __pfx_kthread+0x10/0x10 [ 47.834377][ T5950] ret_from_fork_asm+0x1a/0x30 [ 47.834394][ T5950] [ 47.834404][ T5950] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 47.922762][ T5950] Bluetooth: hci3: failed to register connection device [ 47.959622][ T70] usb 6-1: Using ep0 maxpacket: 16 [ 47.968608][ T70] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.972288][ T70] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 47.975026][ T70] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.983171][ T70] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.985905][ T70] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.988349][ T70] usb 6-1: Product: syz [ 47.989825][ T70] usb 6-1: Manufacturer: syz [ 47.991302][ T70] usb 6-1: SerialNumber: syz [ 48.003911][ T70] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 48.006223][ T70] cdc_ncm 6-1:1.0: bind() failure [ 48.022398][ T6108] overlayfs: cannot append lower layer [ 48.255133][ T6114] macvlan1: entered promiscuous mode [ 48.256715][ T6114] macvlan1: entered allmulticast mode [ 48.261730][ T6113] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 48.289359][ T35] usb 6-1: USB disconnect, device number 2 [ 48.410044][ T6001] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 48.639682][ T5950] Bluetooth: hci2: command tx timeout [ 48.641847][ T5950] Bluetooth: hci1: command tx timeout [ 48.644097][ T5950] Bluetooth: hci0: command 0x041b tx timeout [ 48.670164][ T6135] evm: overlay not supported [ 48.719718][ T5950] Bluetooth: hci3: command tx timeout [ 48.785327][ T6144] smc: net device bond0 applied user defined pnetid SYZ0 [ 48.790629][ T6144] process 'syz.3.45' launched '/dev/fd/7/./file1' with NULL argv: empty string added [ 48.812401][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.824502][ T6152] netlink: 76 bytes leftover after parsing attributes in process `syz.3.48'. [ 48.827145][ T6152] bridge_slave_1: left allmulticast mode [ 48.828840][ T6152] bridge_slave_1: left promiscuous mode [ 48.830754][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.835215][ T6152] bridge_slave_0: left allmulticast mode [ 48.836896][ T6152] bridge_slave_0: left promiscuous mode [ 48.838682][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.076313][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 49.141003][ T6178] hsr_slave_1 (unregistering): left promiscuous mode [ 49.154061][ T6181] netlink: 168 bytes leftover after parsing attributes in process `syz.2.55'. [ 49.195069][ T57] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.265511][ T39] kauditd_printk_skb: 149 callbacks suppressed [ 49.265521][ T39] audit: type=1400 audit(1738540825.581:264): avc: denied { create } for pid=6191 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 49.296646][ T39] audit: type=1400 audit(1738540825.611:265): avc: denied { setopt } for pid=6191 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 49.304483][ T39] audit: type=1400 audit(1738540825.611:266): avc: denied { write } for pid=6191 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 49.312358][ T39] audit: type=1400 audit(1738540825.611:267): avc: denied { ioctl } for pid=6191 comm="syz.2.58" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.343607][ T57] usb 6-1: config index 0 descriptor too short (expected 2706, got 146) [ 49.346161][ T57] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.350396][ T57] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 49.353846][ T57] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 49.356471][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.358799][ T57] usb 6-1: SerialNumber: syz [ 49.361729][ T57] usb 6-1: config 0 descriptor?? [ 49.427814][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.432167][ T6197] batadv_slave_1: entered promiscuous mode [ 49.464877][ T39] audit: type=1400 audit(1738540825.781:268): avc: denied { create } for pid=6198 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 49.471609][ T39] audit: type=1400 audit(1738540825.781:269): avc: denied { listen } for pid=6198 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 49.479002][ T39] audit: type=1400 audit(1738540825.791:270): avc: denied { ioctl } for pid=6198 comm="syz.2.60" path="socket:[11359]" dev="sockfs" ino=11359 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 49.486381][ T39] audit: type=1400 audit(1738540825.791:271): avc: denied { setopt } for pid=6198 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.512137][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.61'. [ 49.562741][ T6206] syz.2.62 uses obsolete (PF_INET,SOCK_PACKET) [ 49.566440][ T39] audit: type=1400 audit(1738540825.881:272): avc: denied { ioctl } for pid=6205 comm="syz.2.62" path="socket:[11364]" dev="sockfs" ino=11364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.568751][ T57] usb 6-1: USB disconnect, device number 3 [ 49.655347][ T39] audit: type=1400 audit(1738540825.971:273): avc: denied { read } for pid=6209 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.815592][ T6215] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 49.899081][ T6221] netlink: 'syz.2.68': attribute type 2 has an invalid length. [ 49.968982][ T6225] Bluetooth: MGMT ver 1.23 [ 49.994497][ T6225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=6225 comm=syz.2.70 [ 50.033404][ T6227] netlink: 'syz.2.71': attribute type 1 has an invalid length. [ 50.040672][ T6227] bond1: entered promiscuous mode [ 50.042177][ T6227] bond1: entered allmulticast mode [ 50.291298][ T6260] netlink: 'syz.3.82': attribute type 9 has an invalid length. [ 50.339624][ T5947] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.490629][ T5947] usb 7-1: config index 0 descriptor too short (expected 1682, got 146) [ 50.493086][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.503865][ T5947] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 50.507259][ T5947] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.510427][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.516399][ T5947] usb 7-1: SerialNumber: syz [ 50.518839][ T5947] usb 7-1: config 0 descriptor?? [ 50.720400][ T5943] Bluetooth: hci1: command tx timeout [ 50.720465][ T5294] Bluetooth: hci2: command tx timeout [ 50.721853][ T5950] Bluetooth: hci0: command 0x041b tx timeout [ 50.724675][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.729203][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.741544][ T5947] usb 7-1: USB disconnect, device number 2 [ 50.759689][ T1326] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.800806][ T5294] Bluetooth: hci3: command tx timeout [ 50.913491][ T1326] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 50.916201][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.918090][ T6339] loop6: detected capacity change from 0 to 524287999 [ 50.918583][ T1326] usb 5-1: Product: syz [ 50.921834][ T1326] usb 5-1: Manufacturer: syz [ 50.922547][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.923230][ T1326] usb 5-1: SerialNumber: syz [ 50.925905][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.930537][ T1326] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 50.930984][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.936018][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.939064][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.941837][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.945538][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.949327][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.952515][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.954364][ T1326] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 50.955616][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.955773][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.963081][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.965861][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.968421][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.010705][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.014202][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.017187][ T6339] ldm_validate_partition_table(): Disk read failed. [ 51.019525][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.022216][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.024623][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 51.027351][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 51.030180][ T6339] Dev loop6: unable to read RDB block 0 [ 51.032818][ T6339] loop6: unable to read partition table [ 51.034653][ T6339] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 51.038827][ T6340] ldm_validate_partition_table(): Disk read failed. [ 51.041529][ T6340] Dev loop6: unable to read RDB block 0 [ 51.044023][ T6340] loop6: unable to read partition table [ 51.045792][ T6340] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 51.205782][ T6357] netlink: 'syz.2.103': attribute type 6 has an invalid length. [ 51.208774][ T6357] netlink: 'syz.2.103': attribute type 5 has an invalid length. [ 51.261035][ T6361] xt_TCPMSS: Only works on TCP SYN packets [ 51.425389][ T6208] IPVS: starting estimator thread 0... [ 51.453781][ T6382] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 51.467177][ T6382] Zero length message leads to an empty skb [ 51.521396][ T6379] IPVS: using max 38 ests per chain, 91200 per kthread [ 51.653140][ T6414] __nla_validate_parse: 22 callbacks suppressed [ 51.653151][ T6414] netlink: 448 bytes leftover after parsing attributes in process `syz.1.118'. [ 51.657822][ T6414] unsupported nla_type 14345 [ 51.718345][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.729448][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.788106][ T6447] trusted_key: encrypted_key: insufficient parameters specified [ 51.848784][ T6457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.128'. [ 51.852270][ T6457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.128'. [ 51.907489][ T6466] mmap: syz.1.131 (6466) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.916306][ T6466] fuse: Unknown parameter 'vRS֎' [ 51.922655][ T6466] omfs: Invalid superblock (0) [ 52.000411][ T1326] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 52.003779][ T6479] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 52.003817][ T1326] ath9k_htc: Failed to initialize the device [ 52.042054][ T6482] overlay: filesystem on ./bus is read-only [ 52.044953][ T1326] usb 5-1: ath9k_htc: USB layer deinitialized [ 52.052198][ T35] usb 5-1: USB disconnect, device number 2 [ 52.180891][ T6494] netlink: 512 bytes leftover after parsing attributes in process `syz.3.138'. [ 52.215243][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 52.221149][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 52.229223][ T6496] openvswitch: netlink: Actions may not be safe on all matching packets [ 52.319627][ T5947] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 52.469721][ T5947] usb 6-1: Using ep0 maxpacket: 16 [ 52.472866][ T5947] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 52.476166][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 52.481795][ T5947] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 52.484372][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.486651][ T5947] usb 6-1: Product: syz [ 52.487817][ T5947] usb 6-1: Manufacturer: syz [ 52.489160][ T5947] usb 6-1: SerialNumber: syz [ 52.499272][ T5947] r8152-cfgselector 6-1: Unknown version 0x0000 [ 52.501883][ T5947] r8152-cfgselector 6-1: config 0 descriptor?? [ 52.504893][ T5947] usb-storage 6-1:0.0: USB Mass Storage device detected [ 52.729692][ T2302] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 52.788591][ T6513] netlink: 'syz.3.142': attribute type 10 has an invalid length. [ 52.800534][ T6513] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.803857][ T6513] bond0: (slave team0): Enslaving as an active interface with an up link [ 52.809905][ T5943] Bluetooth: hci1: command tx timeout [ 52.809930][ T5950] Bluetooth: hci0: command 0x041b tx timeout [ 52.889595][ T5950] Bluetooth: hci3: command tx timeout [ 52.988481][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 52.992886][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 53.035758][ T6536] trusted_key: encrypted_key: master key parameter is missing [ 53.062560][ T6538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6538 comm=syz.2.152 [ 53.241392][ T6561] overlayfs: failed to resolve './file0': -2 [ 53.285777][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 53.288468][ T6567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.160'. [ 53.316497][ T6567] use of bytesused == 0 is deprecated and will be removed in the future, [ 53.319114][ T6567] use the actual size instead. [ 53.393896][ T6580] 9pnet_virtio: no channels available for device syz [ 53.413195][ T6584] nbd: must specify at least one socket [ 53.530945][ T6596] XFS (nullb0): Invalid superblock magic number [ 53.585721][ T6609] bond0: entered promiscuous mode [ 53.587563][ T6609] bond_slave_0: entered promiscuous mode [ 53.589366][ T6609] bond_slave_1: entered promiscuous mode [ 53.593426][ T6609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 53.597552][ T6609] bond0: left promiscuous mode [ 53.599020][ T6609] bond_slave_0: left promiscuous mode [ 53.600790][ T6609] bond_slave_1: left promiscuous mode [ 53.648544][ T6615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6615 comm=syz.1.172 [ 53.713108][ T6633] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 53.720671][ T6634] capability: warning: `syz.2.179' uses deprecated v2 capabilities in a way that may be insecure [ 53.750468][ T6637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.868889][ T6637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.917284][ T6653] program syz.1.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.971402][ T6637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.041653][ T6637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.116278][ T6637] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.121898][ T6637] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.127489][ T6637] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.133395][ T6637] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.531956][ T6666] netlink: 'syz.0.190': attribute type 12 has an invalid length. [ 54.847813][ T39] kauditd_printk_skb: 119 callbacks suppressed [ 54.847824][ T39] audit: type=1400 audit(1738540831.161:393): avc: denied { write } for pid=6667 comm="syz.2.191" path="socket:[13684]" dev="sockfs" ino=13684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.879615][ T5294] Bluetooth: hci0: command 0x041b tx timeout [ 54.954455][ T6668] netlink: 'syz.2.191': attribute type 8 has an invalid length. [ 55.027716][ T6677] overlay: Unknown parameter 'smackfsroot' [ 55.048297][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.051385][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.054423][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.137963][ T6689] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 55.141568][ T6689] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 55.144535][ T6689] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 55.258410][ T6708] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 55.279431][ T39] audit: type=1400 audit(1738540831.591:394): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.315352][ T39] audit: type=1400 audit(1738540831.631:395): avc: denied { mount } for pid=6716 comm="syz.1.205" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 55.381963][ T39] audit: type=1400 audit(1738540831.701:396): avc: denied { create } for pid=6719 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.444011][ T39] audit: type=1400 audit(1738540831.761:397): avc: denied { getopt } for pid=6726 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.502620][ T6733] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 55.508629][ T39] audit: type=1400 audit(1738540831.821:398): avc: denied { ioctl } for pid=6732 comm="syz.2.212" path="socket:[11154]" dev="sockfs" ino=11154 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.528766][ T6737] netlink: 'syz.2.214': attribute type 30 has an invalid length. [ 55.561987][ T39] audit: type=1400 audit(1738540831.881:399): avc: denied { watch } for pid=6740 comm="syz.2.215" path="/93" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.569059][ T39] audit: type=1400 audit(1738540831.881:400): avc: denied { watch_sb } for pid=6740 comm="syz.2.215" path="/93" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.634509][ T39] audit: type=1400 audit(1738540831.951:401): avc: denied { ioctl } for pid=6744 comm="syz.2.217" path="/dev/sg1" dev="devtmpfs" ino=727 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.806801][ T39] audit: type=1400 audit(1738540832.121:402): avc: denied { getopt } for pid=6752 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.044928][ T6763] xfrm1: entered promiscuous mode [ 56.047007][ T6763] xfrm1: entered allmulticast mode [ 56.077408][ T6764] capability: warning: `syz.0.223' uses 32-bit capabilities (legacy support in use) [ 56.123985][ T6772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6772 comm=syz.3.226 [ 56.297463][ T6798] usb usb9: usbfs: process 6798 (syz.2.235) did not claim interface 0 before use [ 56.365182][ T6809] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 56.367617][ T6809] SELinux: failed to load policy [ 56.708501][ T6832] ======================================================= [ 56.708501][ T6832] WARNING: The mand mount option has been deprecated and [ 56.708501][ T6832] and is ignored by this kernel. Remove the mand [ 56.708501][ T6832] option from the mount to silence this warning. [ 56.708501][ T6832] ======================================================= [ 56.869574][ T6008] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 56.896717][ T6840] IPv6: Can't replace route, no match found [ 57.039718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.043137][ T6008] usb 6-1: Using ep0 maxpacket: 16 [ 57.046354][ T6008] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 57.049209][ T6008] usb 6-1: config 0 has no interface number 0 [ 57.051822][ T6008] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 57.056123][ T6008] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 57.061107][ T6008] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 57.064376][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 57.067455][ T6008] usb 6-1: Product: syz [ 57.068947][ T6008] usb 6-1: SerialNumber: syz [ 57.071765][ T6008] usb 6-1: config 0 descriptor?? [ 57.074630][ T6008] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 57.078674][ T6008] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input8 [ 57.203960][ T6843] __nla_validate_parse: 14 callbacks suppressed [ 57.203971][ T6843] netlink: 292 bytes leftover after parsing attributes in process `syz.3.250'. [ 57.233104][ T6843] IPVS: Scheduler module ip_vs_non not found [ 57.238225][ T6843] netlink: 830 bytes leftover after parsing attributes in process `syz.3.250'. [ 57.243570][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 57.297337][ T6845] syz.3.250: attempt to access beyond end of device [ 57.297337][ T6845] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 57.302447][ T6845] SQUASHFS error: Failed to read block 0x0: -5 [ 57.304792][ T6845] unable to read squashfs_super_block [ 57.415628][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 57.415707][ T1326] usb 6-1: USB disconnect, device number 5 [ 57.417903][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 57.430259][ T1326] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 58.026656][ T6858] overlayfs: workdir and upperdir must be separate subtrees [ 58.058528][ T6860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.256'. [ 58.082823][ T5294] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 58.085634][ T5294] Bluetooth: hci3: Injecting HCI hardware error event [ 58.088366][ T5294] Bluetooth: hci3: hardware error 0x00 [ 58.249661][ T2302] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.279654][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'. [ 58.409886][ T2302] usb 8-1: Using ep0 maxpacket: 32 [ 58.413166][ T2302] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 58.415890][ T2302] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 58.418869][ T2302] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 58.429524][ T2302] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.432226][ T2302] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 58.434906][ T2302] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.437443][ T6880] fuse: Unknown parameter '0x0000000000000005' [ 58.438577][ T2302] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 58.443755][ T2302] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.449631][ T2302] usb 8-1: config 0 descriptor?? [ 58.662497][ T2302] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 58.690735][ T6883] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.263' sets config #1 [ 58.862113][ C3] usblp0: nonzero read bulk status received: -71 [ 58.865293][ T2302] usb 8-1: USB disconnect, device number 2 [ 58.966961][ T6890] Failed to initialize the IGMP autojoin socket (err -2) [ 59.024094][ T6891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39424 sclass=netlink_route_socket pid=6891 comm=syz.1.265 [ 59.066312][ T6855] usblp0: removed [ 59.209207][ T6908] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 59.211916][ T6908] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 59.216796][ T6908] vhci_hcd vhci_hcd.0: Device attached [ 59.220131][ T6909] vhci_hcd: connection closed [ 59.221538][ T1241] vhci_hcd: stop threads [ 59.226132][ T1241] vhci_hcd: release socket [ 59.227535][ T1241] vhci_hcd: disconnect device [ 59.415124][ T6912] dccp_invalid_packet: invalid packet type [ 59.468831][ T6920] netlink: 72 bytes leftover after parsing attributes in process `syz.1.274'. [ 59.476210][ T6920] netlink: 576 bytes leftover after parsing attributes in process `syz.1.274'. [ 59.591445][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 59.595402][ T6931] veth1_vlan: left promiscuous mode [ 59.602315][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'. [ 59.708421][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.278'. [ 59.714893][ T2302] hid-generic 0005:046D:0008.0003: unknown main item tag 0x0 [ 59.720208][ T2302] hid-generic 0005:046D:0008.0003: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 59.725630][ T6942] can0: slcan on ptm0. [ 59.780078][ T6953] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.874735][ T6967] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 59.902938][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 59.902948][ T39] audit: type=1400 audit(1738540836.221:435): avc: denied { shutdown } for pid=6971 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 59.923879][ T39] audit: type=1400 audit(1738540836.241:436): avc: denied { create } for pid=5942 comm="syz-executor" name="#e" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.930177][ T39] audit: type=1400 audit(1738540836.241:437): avc: denied { link } for pid=5942 comm="syz-executor" name="#e" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.936603][ T39] audit: type=1400 audit(1738540836.241:438): avc: denied { rename } for pid=5942 comm="syz-executor" name="#f" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 59.960008][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 59.979660][ T39] audit: type=1400 audit(1738540836.291:439): avc: denied { ioctl } for pid=6979 comm="syz.2.290" path="socket:[14081]" dev="sockfs" ino=14081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.062888][ T39] audit: type=1400 audit(1738540836.371:440): avc: denied { bind } for pid=6986 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.089585][ T9] usb 6-1: device descriptor read/64, error -71 [ 60.130973][ T7008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7008 comm=syz.2.297 [ 60.160557][ T5294] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 60.256289][ T7023] netlink: 'syz.0.304': attribute type 6 has an invalid length. [ 60.258587][ T7023] netlink: 'syz.0.304': attribute type 5 has an invalid length. [ 60.260896][ T7023] netlink: 'syz.0.304': attribute type 4 has an invalid length. [ 60.267701][ T39] audit: type=1400 audit(1738540836.581:441): avc: denied { setopt } for pid=7019 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.306820][ T7023] syz.0.304: attempt to access beyond end of device [ 60.306820][ T7023] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 60.313956][ T7023] XFS (nbd0): SB validate failed with error -5. [ 60.339588][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 60.429010][ T39] audit: type=1400 audit(1738540836.741:442): avc: denied { write } for pid=7036 comm="syz.0.306" name="file0" dev="9p" ino=36049946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.435678][ T39] audit: type=1400 audit(1738540836.741:443): avc: denied { open } for pid=7036 comm="syz.0.306" path="/32/file0/file0" dev="9p" ino=36049946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.471125][ T9] usb 6-1: device descriptor read/64, error -71 [ 60.473550][ T1146] Bluetooth: (null): Invalid header checksum [ 60.475518][ T1146] Bluetooth: (null): Invalid header checksum [ 60.508532][ T39] audit: type=1326 audit(1738540836.821:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7043 comm="syz.3.308" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7c858cda9 code=0x0 [ 60.579890][ T9] usb usb6-port1: attempt power cycle [ 60.580796][ T1241] Bluetooth: (null): Invalid header checksum [ 60.691168][ T1146] Bluetooth: (null): Invalid header checksum [ 60.810461][ T1175] Bluetooth: (null): Invalid header checksum [ 60.919640][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 60.930434][ T1241] Bluetooth: (null): Invalid header checksum [ 60.940146][ T9] usb 6-1: device descriptor read/8, error -71 [ 61.040141][ T11] Bluetooth: (null): Invalid header checksum [ 61.160833][ T1241] Bluetooth: (null): Invalid header checksum [ 61.179548][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 61.199995][ T9] usb 6-1: device descriptor read/8, error -71 [ 61.255042][ T7059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7059 comm=syz.2.313 [ 61.309690][ T9] usb usb6-port1: unable to enumerate USB device [ 61.409957][ T7078] trusted_key: syz.3.319 sent an empty control message without MSG_MORE. [ 61.696750][ T7114] program syz.2.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.701493][ T7114] program syz.2.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.757496][ T7121] UHID_CREATE from different security context by process 386 (syz.2.331), this is not allowed. [ 61.885511][ T7142] overlayfs: conflicting options: userxattr,metacopy=on [ 62.370549][ T7175] XFS (nullb0): Invalid superblock magic number [ 62.401035][ T6208] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.510959][ T7190] 9pnet_virtio: no channels available for device syz [ 62.515012][ T7190] (unnamed net_device) (uninitialized): (slave sit0): Device is not bonding slave [ 62.517658][ T7190] (unnamed net_device) (uninitialized): option active_slave: invalid value (sit0) [ 62.520897][ T7191] (unnamed net_device) (uninitialized): (slave sit0): Device is not bonding slave [ 62.523455][ T7191] (unnamed net_device) (uninitialized): option active_slave: invalid value (sit0) [ 62.529885][ T6208] usb 8-1: device descriptor read/64, error -71 [ 62.647709][ T7197] vlan2: entered promiscuous mode [ 62.649454][ T7197] erspan0: entered promiscuous mode [ 62.681519][ T7202] wireguard: wg2: Could not create IPv4 socket [ 62.760201][ T6942] can0 (unregistered): slcan off ptm0. [ 62.769649][ T6208] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 62.777754][ T7210] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 62.783178][ T7210] __nla_validate_parse: 5 callbacks suppressed [ 62.783186][ T7210] netlink: 700 bytes leftover after parsing attributes in process `syz.1.355'. [ 62.809917][ T7213] Failed to initialize the IGMP autojoin socket (err -2) [ 62.862690][ T7214] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 62.864961][ T7214] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.867218][ T7214] vhci_hcd vhci_hcd.0: Device attached [ 62.899649][ T6208] usb 8-1: device descriptor read/64, error -71 [ 63.010938][ T6208] usb usb8-port1: attempt power cycle [ 63.039606][ T5947] vhci_hcd: vhci_device speed not set [ 63.100042][ T5947] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 63.109768][ T2302] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 63.260828][ T2302] usb 6-1: config 0 has no interfaces? [ 63.262825][ T2302] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 63.265950][ T2302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.271018][ T2302] usb 6-1: config 0 descriptor?? [ 63.349571][ T6208] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 63.369967][ T6208] usb 8-1: device descriptor read/8, error -71 [ 63.540043][ T5947] vhci_hcd: vhci_device speed not set [ 63.599598][ T5947] usb 39-1: device descriptor read/64, error -71 [ 63.599656][ T5950] Bluetooth: hci0: command 0x041b tx timeout [ 63.599684][ T5294] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 63.609828][ T6208] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 63.630824][ T6208] usb 8-1: device descriptor read/8, error -71 [ 63.739742][ T6208] usb usb8-port1: unable to enumerate USB device [ 63.779566][ T5947] vhci_hcd: vhci_device speed not set [ 63.849667][ T5947] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 63.950452][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.360'. [ 63.980216][ T7215] vhci_hcd: connection reset by peer [ 63.982364][ T12] vhci_hcd: stop threads [ 63.982937][ T6208] usb 6-1: USB disconnect, device number 10 [ 63.983589][ T12] vhci_hcd: release socket [ 63.986239][ T7231] netlink: 39 bytes leftover after parsing attributes in process `syz.0.361'. [ 63.990446][ T12] vhci_hcd: disconnect device [ 64.046129][ T7240] netlink: 'syz.1.364': attribute type 1 has an invalid length. [ 64.049024][ T7240] netlink: 56 bytes leftover after parsing attributes in process `syz.1.364'. [ 64.282485][ T7264] netlink: 'syz.1.373': attribute type 21 has an invalid length. [ 64.432218][ T7270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=7270 comm=syz.1.376 [ 64.795358][ T7283] Bluetooth: MGMT ver 1.23 [ 64.912828][ T7287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39697 sclass=netlink_route_socket pid=7287 comm=syz.1.382 [ 64.970428][ T7289] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 64.977607][ T7289] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.982196][ T7289] bond0: (slave team0): Enslaving as an active interface with an up link [ 64.985824][ T7289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.383'. [ 64.986357][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 64.986370][ T39] audit: type=1326 audit(1738540841.301:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.1.384" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bfc98cda9 code=0x0 [ 64.993595][ T7289] netlink: 'syz.0.383': attribute type 4 has an invalid length. [ 65.001483][ T7289] netlink: 152 bytes leftover after parsing attributes in process `syz.0.383'. [ 65.028893][ T7289] syz.0.383 (7289) used greatest stack depth: 20368 bytes left [ 65.044666][ T39] audit: type=1400 audit(1738540841.361:469): avc: denied { read } for pid=7292 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.047994][ T7293] 9pnet_fd: Insufficient options for proto=fd [ 65.166136][ T39] audit: type=1400 audit(1738540841.481:470): avc: denied { read } for pid=7295 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.171517][ T39] audit: type=1400 audit(1738540841.481:471): avc: denied { write } for pid=7295 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 65.177030][ T39] audit: type=1400 audit(1738540841.481:472): avc: denied { read } for pid=7295 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 65.247049][ T7299] program syz.3.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.519666][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 65.669728][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 65.675489][ T9] usb 8-1: config 1 interface 0 altsetting 252 bulk endpoint 0x3 has invalid maxpacket 1023 [ 65.679311][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 65.684008][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.687316][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.690376][ T9] usb 8-1: Product: У [ 65.691990][ T9] usb 8-1: Manufacturer: Ⰱ [ 65.693802][ T9] usb 8-1: SerialNumber: ᰫ [ 65.698669][ T7304] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 65.732085][ T39] audit: type=1400 audit(1738540842.051:473): avc: denied { bind } for pid=7305 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.739806][ T7306] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 65.823580][ T7310] fuse: Bad value for 'fd' [ 65.905316][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.908692][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.915283][ T9] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 65.925143][ T9] usb 8-1: USB disconnect, device number 7 [ 66.027168][ T7335] Invalid source name [ 66.028714][ T7335] UBIFS error (pid: 7335): cannot open "ubifs", error -22 [ 66.093780][ T7347] netlink: 'syz.2.403': attribute type 27 has an invalid length. [ 66.095442][ T7345] random: crng reseeded on system resumption [ 66.096007][ T39] audit: type=1400 audit(1738540842.411:475): avc: denied { append } for pid=7343 comm="syz.1.404" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 66.107205][ T39] audit: type=1400 audit(1738540842.411:474): avc: denied { append } for pid=7343 comm="syz.1.404" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 66.116104][ T39] audit: type=1400 audit(1738540842.411:477): avc: denied { open } for pid=7343 comm="syz.1.404" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 66.125086][ T39] audit: type=1400 audit(1738540842.411:476): avc: denied { open } for pid=7343 comm="syz.1.404" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 66.142692][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.183392][ T7347] batadv_slave_1: left promiscuous mode [ 66.220484][ T7347] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.223031][ T7347] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.225482][ T7347] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.227922][ T7347] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.269856][ T7347] bond1: left promiscuous mode [ 66.271736][ T7347] bond1: left allmulticast mode [ 66.294754][ T7348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.298100][ T7348] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.303402][ T7348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.549769][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.407'. [ 66.609942][ T1326] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.776674][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 66.779127][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 66.779766][ T1326] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.829702][ T6008] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.942237][ T6008] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.009726][ T7226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.059765][ T1326] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.119844][ T7383] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.229774][ T69] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.319748][ T7226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.329842][ T6008] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 67.389719][ T1326] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.459587][ T6008] usb 6-1: device descriptor read/64, error -71 [ 67.605401][ T1241] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.692711][ T1241] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.699770][ T6008] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 67.797546][ T5294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.800750][ T5294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.804170][ T5294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.807993][ T5294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.816121][ T5294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.817639][ T1241] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.818788][ T5294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.831580][ T7385] Failed to initialize the IGMP autojoin socket (err -2) [ 67.832189][ T6008] usb 6-1: device descriptor read/64, error -71 [ 67.872006][ T1241] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.939860][ T6008] usb usb6-port1: attempt power cycle [ 67.981755][ T7385] chnl_net:caif_netlink_parms(): no params data found [ 68.099057][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.102384][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.104693][ T7385] bridge_slave_0: entered allmulticast mode [ 68.112792][ T7385] bridge_slave_0: entered promiscuous mode [ 68.122108][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.124191][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.126198][ T7385] bridge_slave_1: entered allmulticast mode [ 68.140507][ T7385] bridge_slave_1: entered promiscuous mode [ 68.213623][ T7385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.282677][ T6008] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 68.299943][ T6008] usb 6-1: device descriptor read/8, error -71 [ 68.402543][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.406710][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.410794][ T1241] bond0 (unregistering): (slave team0): Releasing backup interface [ 68.414840][ T1241] bond0 (unregistering): Released all slaves [ 68.428044][ T7385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.461871][ T7411] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 68.488153][ T7385] team0: Port device team_slave_0 added [ 68.511012][ T7411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.521068][ T7385] team0: Port device team_slave_1 added [ 68.539616][ T6008] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 68.551903][ T7413] bond1: (slave gretap1): making interface the new active one [ 68.555408][ T7413] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 68.562114][ T6008] usb 6-1: device descriptor read/8, error -71 [ 68.605202][ T7385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.607154][ T7385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.615362][ T7385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.642040][ T7417] block nbd0: Unsupported socket: shutdown callout must be supported. [ 68.642240][ T7385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.647428][ T7385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.654892][ T7385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.672293][ T6008] usb usb6-port1: unable to enumerate USB device [ 68.744991][ T7385] hsr_slave_0: entered promiscuous mode [ 68.748016][ T7385] hsr_slave_1: entered promiscuous mode [ 68.751074][ T7385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.758287][ T7385] Cannot create hsr debugfs directory [ 68.806035][ T1241] hsr_slave_0: left promiscuous mode [ 68.807911][ T1241] hsr_slave_1: left promiscuous mode [ 68.809691][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.811743][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.815230][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.817325][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.833732][ T1241] veth1_macvtap: left promiscuous mode [ 68.835651][ T1241] veth0_macvtap: left promiscuous mode [ 68.837255][ T1241] veth1_vlan: left promiscuous mode [ 68.838798][ T1241] veth0_vlan: left promiscuous mode [ 68.966802][ T7432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.979292][ T5947] vhci_hcd: vhci_device speed not set [ 69.448117][ T1241] team0 (unregistering): Port device team_slave_1 removed [ 69.518930][ T1241] team0 (unregistering): Port device team_slave_0 removed [ 69.889884][ T5294] Bluetooth: hci1: command tx timeout [ 70.275105][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 70.275114][ T39] audit: type=1400 audit(1738541359.542:488): avc: denied { ioctl } for pid=7446 comm="syz.0.430" path="pid:[4026532874]" dev="nsfs" ino=4026532874 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.284686][ T7447] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.347851][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 70.505453][ T39] audit: type=1400 audit(1738541359.765:489): avc: denied { shutdown } for pid=7454 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.514407][ T7455] tmpfs: Bad value for 'mpol' [ 70.535194][ T7455] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 70.549780][ T39] audit: type=1400 audit(1738541359.813:490): avc: denied { add_name } for pid=7454 comm="syz.1.433" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.556287][ T39] audit: type=1400 audit(1738541359.813:491): avc: denied { create } for pid=7454 comm="syz.1.433" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.563710][ T39] audit: type=1400 audit(1738541359.813:492): avc: denied { associate } for pid=7454 comm="syz.1.433" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.570657][ T39] audit: type=1400 audit(1738541359.833:493): avc: denied { append } for pid=7454 comm="syz.1.433" name="file0" dev="9p" ino=36049946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.577499][ T39] audit: type=1400 audit(1738541359.833:494): avc: denied { lock } for pid=7454 comm="syz.1.433" path="/119/file0/file0" dev="9p" ino=36049946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.694553][ T7385] netdevsim netdevsim3 netdevsim0: renamed from eth2 [ 70.699782][ T7385] netdevsim netdevsim3 netdevsim1: renamed from eth3 [ 70.720294][ T7385] netdevsim netdevsim3 netdevsim2: renamed from eth4 [ 70.759928][ T7385] netdevsim netdevsim3 netdevsim3: renamed from eth5 [ 70.802712][ T7481] Can't find a SQUASHFS superblock on nullb0 [ 70.806662][ T7483] Can't find a SQUASHFS superblock on nullb0 [ 70.807160][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 70.910978][ T7385] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.924884][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.926881][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.936246][ T39] audit: type=1400 audit(1738541360.183:495): avc: denied { write } for pid=7497 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.944106][ T39] audit: type=1400 audit(1738541360.192:496): avc: denied { append } for pid=7497 comm="syz.2.443" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.947525][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.952545][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.953202][ T39] audit: type=1400 audit(1738541360.192:497): avc: denied { map } for pid=7497 comm="syz.2.443" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.000542][ T7508] random: crng reseeded on system resumption [ 71.024289][ T7385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.095264][ T7385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.147904][ T7385] veth0_vlan: entered promiscuous mode [ 71.152064][ T7385] veth1_vlan: entered promiscuous mode [ 71.193930][ T7385] veth0_macvtap: entered promiscuous mode [ 71.198170][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.200053][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.207764][ T7385] veth1_macvtap: entered promiscuous mode [ 71.228375][ T7385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.231718][ T7385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.234501][ T7385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.237753][ T7385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.244791][ T7385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.248168][ T7385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.251026][ T7385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.253769][ T7385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.256742][ T7385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.266527][ T7385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.271447][ T7385] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 71.278141][ T7385] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 71.284254][ T7385] wireguard: wg0: Could not create IPv4 socket [ 71.288229][ T7385] wireguard: wg1: Could not create IPv4 socket [ 71.291409][ T7385] wireguard: wg2: Could not create IPv4 socket [ 71.968907][ T7595] netlink: 48 bytes leftover after parsing attributes in process `syz.0.451'. [ 72.016681][ T5950] Bluetooth: hci1: command tx timeout [ 72.437289][ T7624] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 72.440109][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 74.124182][ T7736] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 74.129849][ T7736] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 74.157911][ T7741] random: crng reseeded on system resumption [ 74.526677][ T7778] fuse: Unknown parameter '' [ 74.655850][ T7778] No control pipe specified [ 75.628131][ T7838] kvm: vcpu 0: requested 448 ns lapic timer period limited to 200000 ns [ 75.676623][ T7838] kvm: pic: non byte write [ 75.909859][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 75.914087][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 75.914096][ T39] audit: type=1400 audit(1738541365.043:511): avc: denied { getattr } for pid=7850 comm="syz.0.470" name="/" dev="9p" ino=36049929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.915699][ T7851] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.936935][ T39] audit: type=1400 audit(1738541365.062:512): avc: denied { rename } for pid=7850 comm="syz.0.470" name="file0" dev="overlay" ino=36049946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.944459][ T39] audit: type=1400 audit(1738541365.062:513): avc: denied { unlink } for pid=7850 comm="syz.0.470" name="file1" dev="overlay" ino=36049963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.951446][ T39] audit: type=1400 audit(1738541365.062:514): avc: denied { write open } for pid=7850 comm="syz.0.470" path=2F202864656C6574656429 dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.958513][ T39] audit: type=1400 audit(1738541365.062:515): avc: denied { setattr } for pid=7850 comm="syz.0.470" name="#470" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.964901][ T39] audit: type=1400 audit(1738541365.062:516): avc: denied { read } for pid=7850 comm="syz.0.470" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.970838][ T39] audit: type=1400 audit(1738541365.062:517): avc: denied { link } for pid=7850 comm="syz.0.470" name="#470" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.063421][ T39] audit: type=1400 audit(1738541365.190:518): avc: denied { connect } for pid=7857 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.072216][ T39] audit: type=1400 audit(1738541365.190:519): avc: denied { shutdown } for pid=7857 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.210620][ T7877] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 76.214387][ T7878] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 76.411687][ T39] audit: type=1400 audit(1738541365.533:520): avc: denied { getopt } for pid=7916 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.689805][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 76.691644][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 76.974179][ T7977] bpf: Bad value for 'uid' [ 77.110205][ T7982] [ 77.111098][ T7982] ====================================================== [ 77.113090][ T7982] WARNING: possible circular locking dependency detected [ 77.115037][ T7982] 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 Not tainted [ 77.118393][ T7982] ------------------------------------------------------ [ 77.120826][ T7982] syz.1.491/7982 is trying to acquire lock: [ 77.122664][ T7982] ffff8880325c6888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 77.125457][ T7982] [ 77.125457][ T7982] but task is already holding lock: [ 77.127605][ T7982] ffff88802a754c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 77.129910][ T7982] [ 77.129910][ T7982] which lock already depends on the new lock. [ 77.129910][ T7982] [ 77.132931][ T7982] [ 77.132931][ T7982] the existing dependency chain (in reverse order) is: [ 77.135585][ T7982] [ 77.135585][ T7982] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 77.137693][ T7982] __mutex_lock+0x19b/0xb10 [ 77.139044][ T7982] pipe_lock+0x64/0x80 [ 77.140327][ T7982] iter_file_splice_write+0x1eb/0x10b0 [ 77.142075][ T7982] do_splice+0x146a/0x1f70 [ 77.143502][ T7982] __do_splice+0x27a/0x360 [ 77.145025][ T7982] __x64_sys_splice+0x187/0x250 [ 77.146557][ T7982] do_syscall_64+0xcd/0x250 [ 77.147943][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.149708][ T7982] [ 77.149708][ T7982] -> #2 (sb_writers#6){.+.+}-{0:0}: [ 77.151751][ T7982] mnt_want_write+0x6f/0x450 [ 77.153716][ T7982] ovl_create_object+0x12e/0x300 [ 77.155873][ T7982] lookup_open.isra.0+0x11d2/0x1580 [ 77.158125][ T7982] path_openat+0x904/0x2d80 [ 77.160085][ T7982] do_filp_open+0x20c/0x470 [ 77.161848][ T7983] openvswitch: netlink: IPv4 frag type 224 is out of range max 2 [ 77.162029][ T7982] do_sys_openat2+0x17a/0x1e0 [ 77.165969][ T7982] __x64_sys_openat+0x175/0x210 [ 77.167511][ T7982] do_syscall_64+0xcd/0x250 [ 77.168968][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.170788][ T7982] [ 77.170788][ T7982] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 77.173282][ T7982] down_read+0x9a/0x330 [ 77.174648][ T7982] walk_component+0x342/0x5b0 [ 77.176601][ T7982] path_lookupat+0x17f/0x770 [ 77.178116][ T7982] filename_lookup+0x221/0x5f0 [ 77.179653][ T7982] kern_path+0x35/0x50 [ 77.180976][ T7982] lookup_bdev+0xd9/0x280 [ 77.182410][ T7982] resume_store+0x1d8/0x460 [ 77.183863][ T7982] kobj_attr_store+0x55/0x80 [ 77.185374][ T7982] sysfs_kf_write+0x117/0x170 [ 77.186880][ T7982] kernfs_fop_write_iter+0x33d/0x500 [ 77.188638][ T7982] vfs_write+0x5ae/0x1150 [ 77.190064][ T7982] ksys_write+0x12b/0x250 [ 77.191797][ T7982] do_syscall_64+0xcd/0x250 [ 77.193332][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.195197][ T7982] [ 77.195197][ T7982] -> #0 (&of->mutex){+.+.}-{4:4}: [ 77.197245][ T7982] __lock_acquire+0x249e/0x3c40 [ 77.198802][ T7982] lock_acquire.part.0+0x11b/0x380 [ 77.200439][ T7982] __mutex_lock+0x19b/0xb10 [ 77.201904][ T7982] kernfs_fop_write_iter+0x27b/0x500 [ 77.203629][ T7982] iter_file_splice_write+0x90f/0x10b0 [ 77.205327][ T7982] do_splice+0x146a/0x1f70 [ 77.206763][ T7982] __do_splice+0x327/0x360 [ 77.208214][ T7982] __x64_sys_splice+0x187/0x250 [ 77.209768][ T7982] do_syscall_64+0xcd/0x250 [ 77.211266][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.213367][ T7982] [ 77.213367][ T7982] other info that might help us debug this: [ 77.213367][ T7982] [ 77.216234][ T7982] Chain exists of: [ 77.216234][ T7982] &of->mutex --> sb_writers#6 --> &pipe->mutex [ 77.216234][ T7982] [ 77.219799][ T7982] Possible unsafe locking scenario: [ 77.219799][ T7982] [ 77.221869][ T7982] CPU0 CPU1 [ 77.223449][ T7982] ---- ---- [ 77.224958][ T7982] lock(&pipe->mutex); [ 77.226164][ T7982] lock(sb_writers#6); [ 77.228051][ T7982] lock(&pipe->mutex); [ 77.229965][ T7982] lock(&of->mutex); [ 77.231121][ T7982] [ 77.231121][ T7982] *** DEADLOCK *** [ 77.231121][ T7982] [ 77.233475][ T7982] 2 locks held by syz.1.491/7982: [ 77.234994][ T7982] #0: ffff888029c7c420 (sb_writers#9){.+.+}-{0:0}, at: __do_splice+0x327/0x360 [ 77.238467][ T7982] #1: ffff88802a754c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 77.241902][ T7982] [ 77.241902][ T7982] stack backtrace: [ 77.244228][ T7982] CPU: 1 UID: 0 PID: 7982 Comm: syz.1.491 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 77.244249][ T7982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.244261][ T7982] Call Trace: [ 77.244267][ T7982] [ 77.244274][ T7982] dump_stack_lvl+0x116/0x1f0 [ 77.244297][ T7982] print_circular_bug+0x490/0x760 [ 77.244324][ T7982] check_noncircular+0x31a/0x400 [ 77.244348][ T7982] ? __pfx_check_noncircular+0x10/0x10 [ 77.244372][ T7982] ? lock_acquire.part.0+0x11b/0x380 [ 77.244399][ T7982] ? lockdep_lock+0xc6/0x200 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 77.244417][ T7982] ? __pfx_lockdep_lock+0x10/0x10 [ 77.244438][ T7982] __lock_acquire+0x249e/0x3c40 [ 77.244472][ T7982] ? __pfx___lock_acquire+0x10/0x10 [ 77.244498][ T7982] ? hlock_class+0x4e/0x130 [ 77.244518][ T7982] lock_acquire.part.0+0x11b/0x380 [ 77.244542][ T7982] ? kernfs_fop_write_iter+0x27b/0x500 [ 77.244566][ T7982] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 77.244590][ T7982] ? rcu_is_watching+0x12/0xc0 [ 77.244607][ T7982] ? trace_lock_acquire+0x14e/0x1f0 [ 77.244626][ T7982] ? kernfs_fop_write_iter+0x27b/0x500 [ 77.244646][ T7982] ? lock_acquire+0x2f/0xb0 [ 77.244671][ T7982] ? kernfs_fop_write_iter+0x27b/0x500 [ 77.244693][ T7982] __mutex_lock+0x19b/0xb10 [ 77.244709][ T7982] ? kernfs_fop_write_iter+0x27b/0x500 [ 77.244729][ T7982] ? __asan_memcpy+0x3c/0x60 [ 77.244754][ T7982] ? kernfs_fop_write_iter+0x27b/0x500 [ 77.244774][ T7982] ? __pfx___mutex_lock+0x10/0x10 [ 77.244818][ T7982] ? __pfx__copy_from_iter+0x10/0x10 [ 77.244851][ T7982] ? __virt_addr_valid+0x5e/0x590 [ 77.244870][ T7982] ? __phys_addr_symbol+0x30/0x80 [ 77.244890][ T7982] ? kernfs_fop_write_iter+0x27b/0x500 [ 77.244911][ T7982] kernfs_fop_write_iter+0x27b/0x500 [ 77.244935][ T7982] iter_file_splice_write+0x90f/0x10b0 [ 77.244965][ T7982] ? __pfx_iter_file_splice_write+0x10/0x10 [ 77.244995][ T7982] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 77.245021][ T7982] ? __do_splice+0x327/0x360 [ 77.245046][ T7982] ? __pfx_iter_file_splice_write+0x10/0x10 [ 77.245073][ T7982] do_splice+0x146a/0x1f70 [ 77.245102][ T7982] ? __pfx_do_splice+0x10/0x10 [ 77.245126][ T7982] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 77.245149][ T7982] ? __pfx_lock_release+0x10/0x10 [ 77.245171][ T7982] ? trace_lock_acquire+0x14e/0x1f0 [ 77.245191][ T7982] __do_splice+0x327/0x360 [ 77.245214][ T7982] ? __pfx___do_splice+0x10/0x10 [ 77.245234][ T7982] ? __fget_files+0x206/0x3a0 [ 77.245250][ T7982] __x64_sys_splice+0x187/0x250 [ 77.245272][ T7982] do_syscall_64+0xcd/0x250 [ 77.245287][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.245310][ T7982] RIP: 0033:0x7f8bfc98cda9 [ 77.245325][ T7982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.245342][ T7982] RSP: 002b:00007f8bfd7a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 77.245360][ T7982] RAX: ffffffffffffffda RBX: 00007f8bfcba6080 RCX: 00007f8bfc98cda9 [ 77.245371][ T7982] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 77.245380][ T7982] RBP: 00007f8bfca0e2a0 R08: 000000000000bfd1 R09: 0000000000000000 [ 77.245391][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.245400][ T7982] R13: 0000000000000001 R14: 00007f8bfcba6080 R15: 00007fff7d812188 [ 77.245416][ T7982] [ 77.256775][ T7739] PM: hibernation: Basic memory bitmaps freed [ 77.407180][ T6944] ================================================================== [ 77.410045][ T6944] BUG: KASAN: slab-use-after-free in __mutex_lock+0x9eb/0xb10 [ 77.412689][ T6944] Read of size 8 at addr ffff888029114060 by task khidpd_046d0008/6944 [ 77.415565][ T6944] [ 77.416450][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: khidpd_046d0008 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 77.416467][ T6944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.416476][ T6944] Call Trace: [ 77.416481][ T6944] [ 77.416486][ T6944] dump_stack_lvl+0x116/0x1f0 [ 77.416503][ T6944] print_report+0xc3/0x620 [ 77.416519][ T6944] ? __virt_addr_valid+0x5e/0x590 [ 77.416533][ T6944] ? __phys_addr+0xc6/0x150 [ 77.416547][ T6944] kasan_report+0xd9/0x110 [ 77.416561][ T6944] ? __mutex_lock+0x9eb/0xb10 [ 77.416576][ T6944] ? __mutex_lock+0x9eb/0xb10 [ 77.416591][ T6944] __mutex_lock+0x9eb/0xb10 [ 77.416606][ T6944] ? l2cap_unregister_user+0x71/0x240 [ 77.416627][ T6944] ? __pfx___mutex_lock+0x10/0x10 [ 77.416640][ T6944] ? rcu_is_watching+0x12/0xc0 [ 77.416658][ T6944] ? __try_to_del_timer_sync+0x116/0x170 [ 77.416681][ T6944] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 77.416701][ T6944] ? l2cap_unregister_user+0x71/0x240 [ 77.416720][ T6944] l2cap_unregister_user+0x71/0x240 [ 77.416741][ T6944] hidp_session_thread+0x462/0x650 [ 77.416756][ T6944] ? __kthread_parkme+0xb7/0x220 [ 77.416771][ T6944] ? __pfx_hidp_session_thread+0x10/0x10 [ 77.416786][ T6944] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 77.416825][ T6944] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 77.416848][ T6944] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.416869][ T6944] ? __kthread_parkme+0x148/0x220 [ 77.416883][ T6944] ? __pfx_hidp_session_thread+0x10/0x10 [ 77.416898][ T6944] kthread+0x3af/0x750 [ 77.416914][ T6944] ? __pfx_kthread+0x10/0x10 [ 77.416932][ T6944] ? __pfx_kthread+0x10/0x10 [ 77.416948][ T6944] ret_from_fork+0x45/0x80 [ 77.416966][ T6944] ? __pfx_kthread+0x10/0x10 [ 77.416982][ T6944] ret_from_fork_asm+0x1a/0x30 [ 77.417001][ T6944] [ 77.417006][ T6944] [ 77.468559][ T6944] Allocated by task 5946: [ 77.469787][ T6944] kasan_save_stack+0x33/0x60 [ 77.471122][ T6944] kasan_save_track+0x14/0x30 [ 77.472455][ T6944] __kasan_kmalloc+0xaa/0xb0 [ 77.473804][ T6944] __kmalloc_noprof+0x21c/0x510 [ 77.475143][ T6944] hci_alloc_dev_priv+0x1d/0x2820 [ 77.476547][ T6944] __vhci_create_device+0xef/0x7e0 [ 77.477961][ T6944] vhci_write+0x2c3/0x470 [ 77.479183][ T6944] vfs_write+0x5ae/0x1150 [ 77.480442][ T6944] ksys_write+0x12b/0x250 [ 77.481671][ T6944] do_syscall_64+0xcd/0x250 [ 77.482936][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.484566][ T6944] [ 77.485269][ T6944] Freed by task 7982: [ 77.486379][ T6944] kasan_save_stack+0x33/0x60 [ 77.487668][ T6944] kasan_save_track+0x14/0x30 [ 77.488973][ T6944] kasan_save_free_info+0x3b/0x60 [ 77.490362][ T6944] __kasan_slab_free+0x51/0x70 [ 77.491682][ T6944] kfree+0x2c4/0x4d0 [ 77.492828][ T6944] hci_release_dev+0x4d9/0x600 [ 77.494194][ T6944] bt_host_release+0x6a/0xb0 [ 77.495502][ T6944] device_release+0xa1/0x240 [ 77.496805][ T6944] kobject_put+0x1e4/0x5a0 [ 77.498070][ T6944] put_device+0x1f/0x30 [ 77.499229][ T6944] vhci_release+0x81/0xf0 [ 77.500437][ T6944] __fput+0x3ff/0xb70 [ 77.501562][ T6944] task_work_run+0x14e/0x250 [ 77.502837][ T6944] do_exit+0xad8/0x2d70 [ 77.504014][ T6944] do_group_exit+0xd3/0x2a0 [ 77.505290][ T6944] get_signal+0x24ed/0x26c0 [ 77.506565][ T6944] arch_do_signal_or_restart+0x90/0x7e0 [ 77.508077][ T6944] syscall_exit_to_user_mode+0x150/0x2a0 [ 77.509655][ T6944] do_syscall_64+0xda/0x250 [ 77.510920][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.512572][ T6944] [ 77.513273][ T6944] Last potentially related work creation: [ 77.514889][ T6944] kasan_save_stack+0x33/0x60 [ 77.516228][ T6944] kasan_record_aux_stack+0xb8/0xd0 [ 77.517724][ T6944] insert_work+0x36/0x230 [ 77.518971][ T6944] __queue_work+0x97e/0x1080 [ 77.520307][ T6944] queue_work_on+0x11a/0x140 [ 77.521652][ T6944] hci_recv_frame+0x23f/0x7e0 [ 77.523021][ T6944] vhci_write+0x385/0x470 [ 77.524253][ T6944] vfs_write+0x5ae/0x1150 [ 77.525522][ T6944] ksys_write+0x12b/0x250 [ 77.526779][ T6944] do_syscall_64+0xcd/0x250 [ 77.528072][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.529752][ T6944] [ 77.530444][ T6944] Second to last potentially related work creation: [ 77.532248][ T6944] kasan_save_stack+0x33/0x60 [ 77.533620][ T6944] kasan_record_aux_stack+0xb8/0xd0 [ 77.535065][ T6944] insert_work+0x36/0x230 [ 77.536311][ T6944] __queue_work+0x97e/0x1080 [ 77.537613][ T6944] queue_work_on+0x11a/0x140 [ 77.538906][ T6944] hci_recv_frame+0x23f/0x7e0 [ 77.540281][ T6944] vhci_write+0x385/0x470 [ 77.541544][ T6944] vfs_write+0x5ae/0x1150 [ 77.542803][ T6944] ksys_write+0x12b/0x250 [ 77.544086][ T6944] do_syscall_64+0xcd/0x250 [ 77.545439][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.547136][ T6944] [ 77.547838][ T6944] The buggy address belongs to the object at ffff888029114000 [ 77.547838][ T6944] which belongs to the cache kmalloc-8k of size 8192 [ 77.551674][ T6944] The buggy address is located 96 bytes inside of [ 77.551674][ T6944] freed 8192-byte region [ffff888029114000, ffff888029116000) [ 77.555447][ T6944] [ 77.556135][ T6944] The buggy address belongs to the physical page: [ 77.557919][ T6944] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29110 [ 77.560355][ T6944] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 77.562720][ T6944] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 77.564860][ T6944] page_type: f5(slab) [ 77.566014][ T6944] raw: 00fff00000000040 ffff88801b043180 dead000000000122 0000000000000000 [ 77.568411][ T6944] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 77.570817][ T6944] head: 00fff00000000040 ffff88801b043180 dead000000000122 0000000000000000 [ 77.573202][ T6944] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 77.575807][ T6944] head: 00fff00000000003 ffffea0000a44401 ffffffffffffffff 0000000000000000 [ 77.578196][ T6944] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 77.580609][ T6944] page dumped because: kasan: bad access detected [ 77.582420][ T6944] page_owner tracks the page as allocated [ 77.584071][ T6944] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5926, tgid 5926 (syz-executor), ts 41916299714, free_ts 41283142124 [ 77.589978][ T6944] post_alloc_hook+0x181/0x1b0 [ 77.591351][ T6944] get_page_from_freelist+0xfce/0x2f80 [ 77.592911][ T6944] __alloc_frozen_pages_noprof+0x221/0x2470 [ 77.594614][ T6944] alloc_pages_mpol+0x1fc/0x540 [ 77.595997][ T6944] new_slab+0x23d/0x330 [ 77.597196][ T6944] ___slab_alloc+0xc5d/0x1720 [ 77.598530][ T6944] __slab_alloc.constprop.0+0x56/0xb0 [ 77.600036][ T6944] __kmalloc_node_noprof+0x2f0/0x510 [ 77.601518][ T6944] __kvmalloc_node_noprof+0x6f/0x1a0 [ 77.602990][ T6944] __do_sys_swapon+0x1ff1/0x3dd0 [ 77.604391][ T6944] do_syscall_64+0xcd/0x250 [ 77.605657][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.607312][ T6944] page last free pid 5933 tgid 5933 stack trace: [ 77.609057][ T6944] free_frozen_pages+0x6db/0xfb0 [ 77.610449][ T6944] __put_partials+0x14c/0x170 [ 77.611783][ T6944] qlist_free_all+0x4e/0x120 [ 77.613064][ T6944] kasan_quarantine_reduce+0x195/0x1e0 [ 77.614578][ T6944] __kasan_slab_alloc+0x69/0x90 [ 77.615947][ T6944] __kmalloc_noprof+0x1cd/0x510 [ 77.617319][ T6944] tomoyo_supervisor+0x461/0x12f0 [ 77.618692][ T6944] tomoyo_env_perm+0x193/0x210 [ 77.620035][ T6944] tomoyo_find_next_domain+0xed4/0x20c0 [ 77.621610][ T6944] tomoyo_bprm_check_security+0x12e/0x1d0 [ 77.623181][ T6944] security_bprm_check+0x1b9/0x1e0 [ 77.624614][ T6944] bprm_execve+0x832/0x16d0 [ 77.625858][ T6944] do_execveat_common.isra.0+0x4a2/0x610 [ 77.627380][ T6944] __x64_sys_execve+0x8c/0xb0 [ 77.628665][ T6944] do_syscall_64+0xcd/0x250 [ 77.629948][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.631581][ T6944] [ 77.632269][ T6944] Memory state around the buggy address: [ 77.633832][ T6944] ffff888029113f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.635992][ T6944] ffff888029113f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.638155][ T6944] >ffff888029114000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.640147][ T6944] ^ [ 77.642132][ T6944] ffff888029114080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.644326][ T6944] ffff888029114100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.646521][ T6944] ================================================================== [ 77.649193][ T6944] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.651189][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: khidpd_046d0008 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 77.654134][ T6944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.657085][ T6944] Call Trace: [ 77.658030][ T6944] [ 77.658868][ T6944] dump_stack_lvl+0x3d/0x1f0 [ 77.660170][ T6944] panic+0x71d/0x800 [ 77.661283][ T6944] ? __pfx_panic+0x10/0x10 [ 77.662563][ T6944] ? trace_irq_enable.constprop.0+0xea/0x140 [ 77.664239][ T6944] ? check_panic_on_warn+0x1f/0xb0 [ 77.665640][ T6944] check_panic_on_warn+0xab/0xb0 [ 77.667015][ T6944] end_report+0x117/0x180 [ 77.668197][ T6944] kasan_report+0xe9/0x110 [ 77.669435][ T6944] ? __mutex_lock+0x9eb/0xb10 [ 77.670765][ T6944] ? __mutex_lock+0x9eb/0xb10 [ 77.672074][ T6944] __mutex_lock+0x9eb/0xb10 [ 77.673353][ T6944] ? l2cap_unregister_user+0x71/0x240 [ 77.674838][ T6944] ? __pfx___mutex_lock+0x10/0x10 [ 77.676221][ T6944] ? rcu_is_watching+0x12/0xc0 [ 77.677557][ T6944] ? __try_to_del_timer_sync+0x116/0x170 [ 77.679097][ T6944] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 77.680824][ T6944] ? l2cap_unregister_user+0x71/0x240 [ 77.682303][ T6944] l2cap_unregister_user+0x71/0x240 [ 77.683794][ T6944] hidp_session_thread+0x462/0x650 [ 77.685395][ T6944] ? __kthread_parkme+0xb7/0x220 [ 77.686774][ T6944] ? __pfx_hidp_session_thread+0x10/0x10 [ 77.688311][ T6944] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 77.690030][ T6944] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 77.691776][ T6944] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.693230][ T6944] ? __kthread_parkme+0x148/0x220 [ 77.694659][ T6944] ? __pfx_hidp_session_thread+0x10/0x10 [ 77.696236][ T6944] kthread+0x3af/0x750 [ 77.697392][ T6944] ? __pfx_kthread+0x10/0x10 [ 77.698709][ T6944] ? __pfx_kthread+0x10/0x10 [ 77.700006][ T6944] ret_from_fork+0x45/0x80 [ 77.701246][ T6944] ? __pfx_kthread+0x10/0x10 [ 77.702572][ T6944] ret_from_fork_asm+0x1a/0x30 [ 77.703941][ T6944] [ 77.705281][ T6944] Kernel Offset: disabled [ 77.706475][ T6944] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:00:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000061fdc RBX=0000000000000000 RCX=ffffffff8b55e469 RDX=ffffed100d4c6f7e RSI=ffffffff8bd33ce0 RDI=ffffffff81906cd9 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6f7d R10=ffff88806a637beb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90621510 R15=0000000000000000 RIP=ffffffff8b55f84f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002000f000 CR3=000000004a306000 CR4=00352ef0 DR0=0000000000000005 DR1=00000000000000ff DR2=ffffffffffffdffb DR3=3e00000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7d812520 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000a8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853fcd95 RDI=ffffffff9ab767c0 RBP=ffffffff9ab76780 RSP=ffffc90003d1f0b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e33312e36 R12=0000000000000000 R13=0000000000000062 R14=ffffffff9ab76780 R15=0000000000000000 RIP=ffffffff853fcdbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8bfd7a46c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8bfd7a3f98 CR3=00000000503ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfcb7c488 00007f8bfcb7c480 00007f8bfcb7c478 00007f8bfcb7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfd6dd100 00007f8bfcb7c440 00007f8bfcb7c458 00007f8bfcb7c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfcb7c498 00007f8bfcb7c490 00007f8bfcb7c488 00007f8bfcb7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000a8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000534c4 RBX=0000000000000002 RCX=ffffffff8b55e469 RDX=ffffed100d506f7e RSI=ffffffff8bd33ce0 RDI=ffffffff81906cd9 RBP=ffffed1003b5c000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506f7d R10=ffff88806a837beb R11=0000000000000000 R12=0000000000000002 R13=ffff88801dae0000 R14=ffffffff90621510 R15=0000000000000000 RIP=ffffffff8b55f84f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555737b0808 CR3=000000002e0a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000c0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd239233b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaec40f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaec40f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaec40f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaec40f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaec40f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaec40f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000062eac RBX=0000000000000003 RCX=ffffffff8b55e469 RDX=ffffed100d526f7e RSI=ffffffff8bd33ce0 RDI=ffffffff81906cd9 RBP=ffffed1003b5c488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526f7d R10=ffff88806a937beb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dae2440 R14=ffffffff90621510 R15=0000000000000000 RIP=ffffffff8b55f84f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8bfd7a4d58 CR3=00000000503ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfca0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfcb7c488 00007f8bfcb7c480 00007f8bfcb7c478 00007f8bfcb7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfd6dd100 00007f8bfcb7c440 00007f8bfcb7c458 00007f8bfcb7c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8bfcb7c498 00007f8bfcb7c490 00007f8bfcb7c488 00007f8bfcb7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000a8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000