last executing test programs: 8.163924993s ago: executing program 3 (id=363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x408d4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x408d4}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x800, 0x0) (async) 8.163370832s ago: executing program 3 (id=364): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x10) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000400)="2ec8425d4ce2ef00", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x2000000000000116}}, 0x40) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff02) (async) r5 = syz_clone(0x110000, &(0x7f0000000280)="7a86617df3b76446bb30e5a2b3adadc42cb91754deb0b307dd958cd44f612b1f04c48399ac570d7c6723371b6b9842e9de86491565cf2f127fcb45c76baa9897ac713d3bb28a1e4c2a0d06e427a5feeca9046593987c45d6d0", 0x59, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="c15ef7d70ce17a4bbdc47d562265de6378c591ee33ec31bf44505187bd67a28f9c43547b0da1fa00ebd01dcd5ee3e7074df259b3ff9c0a4cd08084500780175b58874a8f799af5f0fd6c0fb46c6ef657ec993b03e5c8cc522d9418b27fef5fd400d4f516e4d1b85d795c9cf65c4b55d2dd7b9cff1afa465f8459d0376afc84a5f34dd18196c950aca365daf77f62eb02e0b12f3ad4ebaf8304a6ab6b19ec068f3c26254a19d8ffcca6cab74c10e738daeddc") syz_pidfd_open(r5, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 8.083767051s ago: executing program 3 (id=365): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x1d, 0x0, &(0x7f00000001c0)) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0xfff}}, './file2\x00'}) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000080)={0xff31, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 8.083442448s ago: executing program 3 (id=366): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x200440) futex(&(0x7f0000000140)=0x1, 0x9, 0x0, &(0x7f0000000340), 0x0, 0x2) (async) futex(&(0x7f0000000140)=0x1, 0x9, 0x0, &(0x7f0000000340), 0x0, 0x2) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') fstat(r2, &(0x7f0000004800)) syz_clone(0x200c00, &(0x7f0000000080)="3e6a4c7d440dbee80a5d581f51bad4ad67cd26c27e6aec63155c1b346d233d185cd9cb9c99", 0x25, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000300)="043876fa06221d8a67ba1f59430b9b523ae733c26940da5e57e9d6c5dc184f42325556befa4a1aac1f604056476a160ca2b4f55bc8f04e21dbeb07ff693cf36ebd0abbbfe681d31074c99977db6f00dce8b40152eb35ee0631ecb701a3091fb45257412682a963557078821615433257956ddc4e66e5d463e017ba1ed60b76d01698ab79cf3af45995d204b8095ce1bdcbe3ea6acfa5ea8fe3b8b0564e7eb4e8e283878a147b1328e7df4e136697dce17c3d8c0f2b0157d2ae2e192131e5") syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.813737846s ago: executing program 3 (id=367): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xc, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095", @ANYRES32=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x116c6d36fb769b29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 7.462600733s ago: executing program 1 (id=369): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) mount$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) r2 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff07, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x100, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0x3c}}, 0x0) 7.373242541s ago: executing program 1 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f0000000100)=""/194, 0xc2}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000003c0)=""/164, 0xa4}], 0x5, 0xffffb9f8, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="0f0176000f01c266410f01d8c7442400d8000000c744240203000000ff1c2466b834010f00d866b853000f00d866450fc731c481f8116b108fa92091f8f3ad", 0x3f}], 0x1, 0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.193521013s ago: executing program 1 (id=371): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x23f6732f, 0x402) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000140)={0x4, 0x9, 0x22, 0x10001}, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r6, 0x11a, 0x1, 0x0, &(0x7f0000000340)) (async) getsockopt$bt_hci(r6, 0x11a, 0x1, 0x0, &(0x7f0000000340)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x8001, 0x8001, @empty, 0x1}, 0x1c) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r11, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) (async) setsockopt$inet_int(r11, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r11, 0x2) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0xcc, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x5, 0x7, 0x8, 0xde4, 0x4, 0x6, 0x197d, 0x8, [{0x80, 0x3, 0x80000000, 0xf832}, {0x9, 0xa7df, 0x125c, 0xba}, {0x9, 0x1, 0x0, 0x10}, {0x5, 0x4, 0x6, 0x7}, {0x6, 0x5, 0x1, 0x93db}, {0xfffffffd, 0x4, 0x0, 0x9}, {0x8, 0xd1, 0x80000000}, {0x9, 0x5, 0x5, 0xffff}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40080}, 0x800) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0xcc, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x5, 0x7, 0x8, 0xde4, 0x4, 0x6, 0x197d, 0x8, [{0x80, 0x3, 0x80000000, 0xf832}, {0x9, 0xa7df, 0x125c, 0xba}, {0x9, 0x1, 0x0, 0x10}, {0x5, 0x4, 0x6, 0x7}, {0x6, 0x5, 0x1, 0x93db}, {0xfffffffd, 0x4, 0x0, 0x9}, {0x8, 0xd1, 0x80000000}, {0x9, 0x5, 0x5, 0xffff}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40080}, 0x800) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, r1, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 7.071785163s ago: executing program 1 (id=372): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x188, 0x8, 0xa, 0x600, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x30, 0x7, 0x1, 0x0, "9eb9d377a383d62e1242718e8c2686b999e7352da6a60b923833f4cb03d0a75125ff8d1b32d5c8b852a929b3"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_USERDATA={0xd6, 0x7, 0x1, 0x0, "d8ac277733e0d7469714116f03da2376735dc20b33ff75d9105461f10ecec879739e0d340feebb5b4fb2f381c6934509ef89bf80ab5efa2bbba88c48b4e465fd91265bfe6137219668257e962827031cbf79fdcedd1f38ee43dca8de885d93300724f22218e6a7013edd9cdca7b51c9eaa001697d981101a9b2971195a51c3a4e82d3dd91be59cbc315e06f742085c478d29259e9c8ec5a0cc762087a78b25986e7a3d81e6194a9473db6c5df591ba0574037e19ad31da4260f957f42bd39ee1ba31cfcb96663cc18dba688397effc2e607f"}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x24e4, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x32, 0x7, 0x1, 0x0, "bde1acf87f14b7d31aa2c4418a8066cf4c7a8caa748c8f624fe7bd8dca0c1f1c57a0f2c65f6f0554c05938ad842c"}, @NFTA_RULE_EXPRESSIONS={0x2490, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x247c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2470, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x246c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "6e44c19db4e682e58de3409b4a4d388ca714172910d8f10e1354ba58df6a83f008189a7d7312b7e81a5c7bf56c4b5e5c53bc66feb54500fbe68962c2b0894971b902586bc21750ee28a6c8703ca6763850d39d4b5155622dd07e0cda19366a7cde9734e9d989afac7c5dfbaee3d6e8a4c30d4f9566c35106aac77a365c3e00e84ba4aa9e165f520f63fc8ea5e65a0906ec5037cd802cc0ac713d"}, @NFTA_DATA_VALUE={0x69, 0x1, "b818008b93ef5dc845ddc024a381947862bc4b8b0cae3979fd6ecc542b89e023762cf1f4ec9b2fdb7f9a934bfc35c60b366d355fcafe793e7e8220b306962fbf0424de1e8e1f31c36839bc321188c0cf11bdd88d92922da1655bc806eb354eaba6c5c76dec"}, @NFTA_DATA_VALUE={0xac, 0x1, "e97022a5a6c529ec4de669cbe7e31e0a9c9aab845922103a96c038fff52bd2cdb827bd89bbde4bf4435bfc704b1821816e178532055e919a03db5dfb1c9a9089785a8a0a598c552cca841d69149211d40649578c12f58131a442935ebf745ea73178b5c42f1daa0e54718015d544ead73830c9ef323836e8bbf35c540b0b1fcbf8500a6fda2bab9e01934232f1f11e2e5e717dc045c87a0a9f50181cbddad2bc34f0db4aa1a790ab"}, @NFTA_DATA_VALUE={0xf7, 0x1, "ec3f2d6cdc08705b47e89c7a59b4b7589a75b98dbbecae273fc8d8852cd3a5c086c71adc5e9f4114f0acf091ea4a3043dee344b8c5a93c2c5785d9af5294683266ddb0aa5714b3624b215d1357047be9e455bb27da4556c452a9fa2ace9ec2133ef37c0413e7e6304690bc9a60f6755b6fad6deb816911232f2f56ed602ac6549ad8227981f537400aec79a335e8587512d9a7ce07d0a819d7fdc639287d483bc48100bf0624789e4df3e1b10703f6f7d3ac1e5481e434270cab417c34a171132fb6879bfca6cc48b728826729682f32c0df43848e2642ee9f359e00f3573b956ee27b81997b29dd83166019e4305b98ba8e6b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x95, 0x1, "ee9a23045480cb7eaadd4f5fcb5f5f7ed3d0d1f78da33753d2dddf38d83b37a14f2bad75e5648c924bbd2c1c5196bc6d01d82b9cea2a61542ce318c90d1bda46f28a81323fd07670add62d0b4cd001e9b538814508febb82b54796955aa91e5da68aefb2cb1e1d5465a55aba139e74f87c22b4041b406d36024dbd751e23930011cce9aa395007f418987e0cd0d64eb33d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xda, 0x1, "6f965018ada282a9c1e89b0ef55374560df0ea0362b68252f55bf332456cf6acfe8545044c987ff0bdb1152b59b7f9f5d5e7f95a28e3654c90d9584b0b44094bbb863859a32efebe804d3346806fff6ad5b3cf29b757d23f105d6c05c5f539780dfca2face047b67740186e24425a4dfd42deed2424d7224e52e6e8f6ff1e50d3c9bc733d06d51e5e6243fb1ef13ef9843799ce6ffd40b4fe1b95c0b656c3d5c9720b0e7fd37161ca66fcb0edd99d0d36100196d3b78abd0701c53ffb0ae382cb4df6d2c8140f9f1df37a64477feb5b4ea9a14c4cdfa"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}}}]}]}, @NFT_MSG_DELFLOWTABLE={0xf8, 0x18, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x278c}, 0x1, 0x0, 0x0, 0x80}, 0x4880) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000180)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x189801, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x189801, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="b395af315714546038bae1cdc7da482405f430a9b7f1e3fd395c0d3b327d751982986756cf08c4a5ebda23e84f7f39eff4d5a53e1f2d0483eaffb4fc5385dda2069ad57f70050a18", 0x48}], 0x1) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) (async) write(r2, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) 7.012054723s ago: executing program 1 (id=374): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x19, {{0x2, 0x0, @multicast2}}}, 0x88) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0xfffffffffffffff5, 0x2, {0x1, 0x4, 0x4, 0x9, 0xa, 0x60, {0x4, 0x3ff, 0x9, 0x2, 0xfffffffffffffffe, 0x0, 0xd89, 0x4, 0x353, 0xc000, 0xfffff000, r3, r4, 0x9b7cb67, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x30}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r7, &(0x7f0000000080)=@xfs_parent={0x1c, 0x82, {0x40, 0xb, 0x3, 0x7}}, 0x8082) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) 6.5634242s ago: executing program 0 (id=380): renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000780)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x102, 0x2}, 0x0, 0x0, 0x200, 0x7, 0xfffffffffffff734, 0x40, 0x5, 0x4, 0x0, 0x344c}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe}) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000640)={0x0, 0x2, 0x1ff, 0x1}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a40)={0x0, 0x200, 0xc}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000002140)={0x0, 0x700000000000000, 0x1, [0xff, 0x2], [0x0, 0x0, 0xfffffffffffffbff, 0x2, 0x409, 0x3, 0x6, 0x5, 0x0, 0x8000000000000000, 0x2, 0x8, 0x7, 0x8000000000000000, 0xa, 0x40, 0x8, 0x200, 0xda1, 0x7, 0x9, 0x891d, 0x263d, 0x6, 0xffff000000000000, 0xffffffffffffdcda, 0x3, 0xd72f, 0x3, 0x3, 0x8, 0xcf6, 0x5, 0x7d58, 0x5, 0x0, 0x1, 0x7, 0x0, 0x1afa, 0x9, 0x4, 0x7, 0x8, 0xf78, 0x1e23, 0x7fffffffffffffff, 0x3cd, 0x1, 0x258, 0xdf2, 0x4, 0x327, 0x3, 0x8001, 0x7fff, 0x45, 0x12000000, 0x6857, 0x7, 0xffffffff, 0x8897, 0x5, 0xc, 0x731, 0x1, 0x9, 0xfffffffffffffff9, 0x6, 0xffffffff00000000, 0x1698, 0x1000, 0x1, 0x0, 0x800, 0x6, 0x75, 0xffffffffffffffff, 0x8, 0x33a0, 0x8000, 0x5, 0x6, 0xfbb, 0x100000000, 0xb3b, 0x6, 0x7, 0x9, 0xffffffff, 0x5, 0xa3fb, 0x43ee, 0x80000001, 0x3, 0x8, 0x9, 0x91, 0x7, 0x2, 0xbd23, 0x1ff, 0xffffffffffffffff, 0x2, 0x556f, 0x5, 0x1, 0x7, 0x8, 0x4, 0xffff, 0x865, 0xffffffffffffffff, 0x6, 0xffffffffffffffac, 0x5, 0x9, 0xdef, 0x5e4, 0x9, 0x8b9]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800600180000003f0005001600020000c304001200050017"], 0x54}}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000002580)={0x6, 0x5, {0x5, @usage=0x8, r2, 0x7, 0x8, 0x5, 0x7, 0x6, 0x80, @struct={0x9, 0xfffff800}, 0x800, 0x2, [0x2, 0x6, 0x6, 0x398, 0x65, 0xf5ebf12]}, {0x3fc0000000, @usage=0x7, r3, 0x3, 0x2, 0x1, 0x0, 0x9, 0x46c, @usage=0x1, 0x8, 0x5, [0x1, 0x5, 0xde27, 0x0, 0x9, 0xaf35]}, {0x6, @struct={0x3, 0x4}, r4, 0x7, 0x7f, 0x6, 0x5, 0xfffffffffffffeff, 0x54, @usage=0x3, 0x7, 0xfffffffe, [0xffffffff, 0x4, 0x8000000000000000, 0x0, 0x90000000, 0x10000]}, {0x2, 0x10000, 0x7fffffff}}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000010000004f080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="1c6dba4874210fb8b17f0aed60ff2ccf0894c5843ac56f463e02ab596adb215b4b60554fe9a941c4951bccf298be5927f7539c7b5c3056f807306d3e42ec11224add7f0129606a5f304b25c7ec8aac7d6a5d52e2c804b5942218c0fef1879a22cbceb5f4f4ebded838d68ade95d9c015392ecb3b5daae84ae419d288ac4a4e0d4074fafaad2c7486151620725020829955e9ebae8118c96fbf3a7a0433d002fa928a9b7629e4d4f519c0376ea2b51cc59410b9d248526dc84db22e5efe492738e0", @ANYRES64=0x0], 0x10) fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) sendto$inet6(r8, &(0x7f0000000040)="0b118f2b4190be586d04d99304c7975dfca451f6a36e5e11c583738f22bfc241adfd70c9456ea4fe6a5e0716c24ab3", 0xfffffffffffffea5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 6.153222321s ago: executing program 1 (id=381): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1b, 0xa, 0x0, "001e2974ea7e3406e2d701be4a6886ce4fb12589bf80d73ae100867a392f08d8", 0x47504a4d}) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x18e6, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x2, 0x3dd}, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002ac0)={'ip_vti0\x00', &(0x7f0000002a40)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffff7c3, {{0x5, 0x4, 0x0, 0x33, 0x14, 0x64, 0x0, 0x80, 0x4, 0x0, @broadcast, @multicast2}}}}) 5.723062434s ago: executing program 0 (id=387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x8a}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x10}}) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x5b01, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (rerun: 32) sendmmsg(r4, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.089230181s ago: executing program 3 (id=367): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xc, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095", @ANYRES32=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x116c6d36fb769b29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2.722664114s ago: executing program 0 (id=391): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x410440, 0x11, 0x35}, 0x18) 2.642501354s ago: executing program 0 (id=392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32], 0x1c}}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) sendfile(r3, r4, 0x0, 0x200) fcntl$getflags(r2, 0x401) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xde, 0x400}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r6, 0x3, 0x8}, &(0x7f0000000300)=0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x1c8, 0x298, 0x398, 0xd0, 0x398, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, &(0x7f0000000340), {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff, 0xffffff00], 'ip6tnl0\x00', 'macvlan1\x00', {}, {0xff}, 0x2e, 0x80, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xf8}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x3, 0x3}, {0x4, 0x4, 0x7}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x35, 0x5, 0x43, 0x92, 0x5, 0x1, 0x2000}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@ipv6={@empty, @private2, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xff, 0xff000000, 0xff, 0xff000000], 'rose0\x00', 'bond_slave_1\x00', {}, {}, 0x2e, 0x9, 0x0, 0x1e}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0x1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x4, 0x0, 0x7, 0x47, 0x0, 0x5}, {0x8000000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0xfc, 0xff, 0x23, 0x0, 0x0, 0xfc}, {0x4, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x1e, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x0, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x9}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xb, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x24, 0x0, 0xfe}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x48}, {0x80a0000}, {0xeeef0000, 0x100}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0x9, 0xf801, 0x0, [0x0, 0x3, 0x1, 0x200000000000000]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r10 = socket(0x1e, 0x1, 0x0) connect$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r12, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 1.90342213s ago: executing program 2 (id=399): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="010000df2512000000080003000000000000", @ANYRES32=r1, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x4008814}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r2, 0x180000000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) socket(0x10, 0x3, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f785"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x5317, &(0x7f0000000200)={0x0, 0x5ed9, 0x40, 0x8003, 0x25d}, &(0x7f0000000100), &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) 1.572298094s ago: executing program 0 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="200800000000000000000000000000000200990a103c624c73cef37e9c800000092791216b9900010073797a30000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x18bb03, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x40400) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000240)) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) (async) r4 = socket$isdn(0x22, 0x2, 0x25) bind$isdn(r4, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) (async) sendfile(r1, r1, 0x0, 0x200000) 1.571389314s ago: executing program 0 (id=401): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x73, 0x7, 0x3, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0x400000cb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x2000312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x6, 0xc, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x2, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x10004, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x4, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x4, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x8, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0x3, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x1], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x533e, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x11, 0x6c1b, 0x0, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) read$FUSE(r5, 0x0, 0x0) syz_usb_disconnect(r0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x30, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_MARK={0x8, 0x10, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x8}}]}, 0xfffffffffffffe15}, 0x1, 0x0, 0x0, 0x4901}, 0x80) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xf4, r9, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8e}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x987}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2a7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x6, 0x3, "ad76"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x81}, 0x200040c4) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_FPU(r12, 0x41a0ae8d, &(0x7f00000022c0)={'\x00', 0x5, 0xb06, 0xf, 0x0, 0x401, 0x1, 0x3000, '\x00', 0x4}) syz_usb_connect$cdc_ncm(0x1, 0x8e, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x1, 0x6, 0xd8, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x961}, {0xd, 0x24, 0xf, 0x1, 0x10007, 0xb23f, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0xb6e6}, @acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x1, 0x94}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xa, 0xfc, 0x82}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xbd, 0x8, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x22, 0x3, 0x3}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 1.263657232s ago: executing program 2 (id=402): r0 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r0, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x18, 0xff81, 0x2000, 0x0, 0x0}) (async) sched_setscheduler(0x0, 0x6, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040), 0xe) (async) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001fc0), r5) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf2500"/26], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r8, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20) 1.183494954s ago: executing program 2 (id=403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xd}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfffffff9}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x7fff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x78f6}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x3}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xffffffff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xd85e}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}]}}]}, 0x80}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xd}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfffffff9}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x7fff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x78f6}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x3}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xffffffff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xd85e}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}]}}]}, 0x80}}, 0x0) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r5) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) socket(0x10, 0x2, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x74, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048804}, 0x80) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x74, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048804}, 0x80) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c800002", @ANYRES16=r9, @ANYBLOB="04002cbd7000fcdbdf25010000000800020002000000080002000200000008000100030000000800020002000000080001000300000008000200020000000800020002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x95) 247.845032ms ago: executing program 2 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000002c0)={'dt2817\x00', [0xfffffff7, 0x5, 0x10000, 0x4, 0x5, 0xe, 0x8, 0x7, 0xa, 0x100, 0x2, 0x2, 0x1, 0x6, 0x6, 0x100, 0x0, 0x1a449, 0x3, 0x3, 0x81, 0xcaa7, 0xfffffffd, 0x20001e5b, 0x8, 0x3, 0x4, 0x40008, 0x6, 0x0, 0xfffffff8]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008f"]) r6 = io_uring_setup(0x6023, &(0x7f0000000280)={0x0, 0x2800008, 0x40, 0x1, 0x14a}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) bind$unix(r8, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x802, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) getpeername(r10, 0x0, &(0x7f0000000040)) r12 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$CDROMSUBCHNL(r8, 0x530b, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x5, 0x8, 0x7, @lba=0x9, @lba=0x6}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x24, r13, 0x505, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x8004840) 866.07µs ago: executing program 2 (id=405): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r0, r1, &(0x7f0000000100)=0x6, 0x100000000010001) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0xc}, {0x6, 0x0, 0x0, 0x7fff7ff7}]}) 0s ago: executing program 2 (id=406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x4000001) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150009001000000009000000000063244e910000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x2, {0x0, 0xf0, 0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r8) sendmsg$xdp(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000080)="e475", 0x2}], 0x2, 0x0, 0x0, 0x4c881}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x1300, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {0x6}, {0x0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xb7ba}, @TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_u32={{0x8}, {0x4f8, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffff215}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xffe0}}, @TCA_U32_MARK={0x10, 0xa, {0xd66b, 0x3}}, @TCA_U32_ACT={0x4}, @TCA_U32_HASH={0x8, 0x2, 0x598}, @TCA_U32_SEL={0x4a4, 0x5, {0x8, 0x5, 0x2, 0x7, 0xfffa, 0xff, 0x4, 0x6, [{0x8000, 0x9, 0x4, 0x6}, {0x5, 0x1, 0xa7}, {0x8, 0x0, 0xffffffff, 0x80000000}, {0x1, 0x2, 0x0, 0xdb}, {0x84c7, 0x9, 0x6, 0x2}, {0x7, 0x10000, 0x4, 0x3}, {0x1cf5, 0x7, 0x3, 0x1284}, {0xffff, 0x1, 0x1, 0x9}, {0xfffffc00, 0x7ff, 0x7fffffff, 0x3}, {0x8, 0x8, 0x5, 0xf1d}, {0x5, 0x6, 0xcf9, 0x9}, {0x4, 0x6, 0xffff7036, 0xc5}, {0x0, 0x6, 0x200, 0x2}, {0x200, 0xd, 0x9, 0x1c00000}, {0x7f, 0x549, 0x9, 0xfffffffb}, {0x6, 0x7, 0x2, 0x6}, {0x7, 0x9, 0x8}, {0x1, 0x6, 0x5, 0x8}, {0xffffffe0, 0x7, 0xa, 0x2}, {0x191, 0x0, 0x2, 0x9}, {0xa000, 0x100, 0x5, 0x2}, {0x5, 0x6f5c, 0xef}, {0x0, 0xa31, 0x5, 0x9}, {0x4, 0x9, 0x0, 0xe}, {0x4, 0x4, 0x8, 0x1}, {0xa5a, 0x4, 0x8, 0x9d4}, {0x6, 0x10001, 0x1, 0x29}, {0x5, 0xff, 0xf2b, 0x6}, {0x0, 0x2, 0xfffffff1, 0x9}, {0xfb, 0x5, 0x8001, 0x7}, {0x5, 0x9, 0x7, 0x3}, {0x4, 0x81, 0xfff, 0x4450}, {0x9, 0xf88, 0x8, 0x80000001}, {0x1, 0x7, 0x8, 0x8001}, {0x800, 0x1, 0x13, 0x2000000}, {0x5, 0x4, 0x10001, 0x9}, {0x3ff, 0x4, 0x200, 0x8}, {0x6, 0x800, 0x3, 0x100}, {0x1a0000, 0xd, 0xe485f8c5, 0x1}, {0x6, 0x2, 0x400, 0x400}, {0x1000, 0x9, 0x8, 0x4}, {0xffff, 0x0, 0x80, 0x8000}, {0x8, 0x7fffffff, 0xfffffff9, 0xf6}, {0x5, 0x3fc, 0x3, 0xd}, {0x7, 0x7, 0x7, 0x4}, {0xc7, 0xa, 0x7fff, 0x7}, {0x0, 0x2, 0x6, 0x2}, {0x35, 0x80000000, 0x6, 0xbb7}, {0x6, 0x280, 0x2, 0x6}, {0x80000001, 0x104ae068, 0x8, 0x6}, {0x0, 0x4, 0x97, 0xa53}, {0x81, 0x6, 0x0, 0x2}, {0x5, 0x0, 0xd15, 0x6}, {0x1ff, 0x0, 0x2533, 0x306}, {0x4, 0x0, 0x7, 0x5}, {0x9, 0xff, 0x3ff, 0x3}, {0x5b, 0x8, 0x4, 0xfffffffe}, {0x9, 0x6, 0x40, 0x400}, {0x5, 0x1f, 0x6, 0x6}, {0x7, 0x6, 0x0, 0x7}, {0x5268334, 0x3, 0x0, 0x6}, {0x21fc, 0x6, 0x0, 0x7fffffff}, {0x5, 0x1, 0x5}, {0x80000000, 0xff, 0x6, 0x6}, {0x13d7, 0x9, 0xb, 0x3e24}, {0x5, 0x7, 0x0, 0x6}, {0xb9, 0x3, 0x1ff, 0x100}, {0x81, 0xe, 0x5, 0xf33}, {0x8, 0x5, 0x9, 0x521}, {0x5, 0x1, 0x4a0, 0x4}, {0xb, 0x539, 0x800, 0x6}, {0x3ff, 0x5, 0x5, 0x6}, {0x3, 0x2, 0x4, 0xe}]}}, @TCA_U32_INDEV={0x14, 0x8, 'wg0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x3, 0x10}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_basic={{0xa}, {0xdb0, 0x2, [@TCA_BASIC_POLICE={0x498, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x43b, 0x10000000, 0x4, 0x5, 0x9f9f, {0x81, 0x0, 0x2, 0x0, 0x1, 0xd4e}, {0x0, 0x2, 0x5, 0x200, 0x0, 0xfffffffb}, 0x4, 0x6, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x0, 0x9, 0xffff, {0x5, 0x1, 0x3, 0x6, 0xfff8, 0x3}, {0xc, 0x1, 0x10, 0x293, 0x7, 0x1}, 0xff, 0x0, 0x10}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x2, 0x7, 0x0, 0x6, 0x1, 0x3, 0x0, 0x101, 0xb65d, 0x8, 0x1, 0x7, 0xd, 0x2, 0x200, 0x9, 0x8000, 0x9, 0x1, 0xffff, 0x9, 0x7fff, 0x7ce, 0x6, 0x3f11, 0x3, 0x0, 0x7, 0x7, 0x9, 0x0, 0x8000, 0x10001, 0x3, 0x1ff, 0x9, 0x1, 0x6, 0x3, 0x9, 0x1, 0x5, 0x6, 0x7, 0x8, 0x100, 0x5, 0x3, 0x7, 0x1, 0x0, 0x5, 0x6, 0x0, 0x2, 0xbb, 0x9, 0x9, 0x1, 0xfffffffc, 0x6, 0x7ff, 0x2ca, 0x8000, 0xaf6, 0x6b8edaff, 0x8, 0x0, 0x8, 0xf, 0x0, 0x3, 0x1, 0x3, 0x9, 0x4, 0x8000, 0x7, 0xfffffffa, 0x7, 0x9, 0x95b1, 0x5, 0x5, 0x230, 0xf, 0xf210, 0x6, 0x1, 0x1147, 0x4, 0xfffffffd, 0xd1, 0x3, 0x6, 0x0, 0x9, 0xdd1, 0x8, 0x7, 0xc000, 0xa52, 0x5d5, 0x5, 0x4, 0x79, 0x8, 0x2, 0x0, 0x80000000, 0x3, 0x3, 0x6, 0x6, 0x100, 0x7fffffff, 0x2de2, 0x73cb, 0x3, 0x1, 0x5, 0x2b, 0x8, 0x6, 0x4, 0x1, 0x5, 0x7ff, 0x9, 0x9, 0x7e9, 0xfffffff7, 0x19, 0x1dbc, 0x6, 0x80, 0x8001, 0x3ff, 0x7, 0x80000001, 0x6, 0x2, 0x8, 0xfffff801, 0x6, 0x4, 0x151c, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x2, 0x7, 0x4, 0x740f, 0x6, 0x2, 0xff, 0x10, 0xae8, 0x75, 0x8, 0x6, 0x101, 0x0, 0x9, 0x9, 0x160, 0xfffffb9c, 0x3, 0x9, 0x6c, 0x10000, 0x53, 0x8, 0x3, 0x1000, 0x8, 0x8000, 0x3, 0xa, 0x2, 0x2, 0x1, 0x4, 0x8, 0x2, 0x5, 0x5, 0xffff, 0x0, 0x3, 0x5, 0xffff, 0x7, 0x9, 0x8, 0x7f, 0x2, 0x2, 0x400, 0x7fffffff, 0x28, 0x1, 0x2a7c5ec6, 0x62, 0xfe000000, 0xe, 0x3338, 0xfffffffa, 0xcf8, 0x7b2b, 0xfffffff8, 0x8, 0x100, 0xfffffff0, 0x0, 0x3, 0x6, 0x2, 0x1, 0xdaa, 0x804, 0xff, 0x1, 0x9, 0x2, 0xb, 0x3, 0x7b, 0x6, 0x7, 0x2, 0xfff, 0x5, 0x2, 0x4, 0x8, 0x3, 0x1, 0xffff, 0x7, 0x9, 0x6, 0x3, 0x3, 0x5, 0x7, 0x0, 0xfffffffa, 0xae89]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xd0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0xac, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0xfff}, {0x7228, 0x1ff, 0x4, 0xe7}}}, @TCF_EM_IPT={0x8c, 0x3, 0x0, 0x0, {{0xd993, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0x77, 0x5, "a53dcb20cee947294fd0e34abfad6c9642f6bc119402bd9f817b06c1d0959ff29ef67205779836e61dec217a211da0436b282d1b5ffbfafd104bc06d8482b3e7d05864e89e07a6b07881daf1037b91b241504b7718708cece0a073467463325b54640efef1579cd4c002bf20cb264b4afb854e"}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}]}, @TCA_BASIC_POLICE={0x838, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0xfffffff8, 0x2, 0x0, 0x1, 0x8000, 0xffffff7f, 0x8be, 0x88, 0x6, 0x1, 0xffff0000, 0x3f8000, 0x2, 0x2, 0x7, 0x2, 0xfffffff9, 0x1, 0x4f9b, 0x3, 0x10, 0x8, 0xd0, 0x5, 0xb, 0x8, 0x4, 0x1, 0x18000000, 0x2, 0x6, 0x1, 0xfffffffa, 0x0, 0x80, 0x2, 0x0, 0x8, 0x3, 0x67b4, 0x3ff, 0x5, 0x0, 0x2, 0x8, 0x100, 0xffffff20, 0x5, 0x0, 0x7f, 0x8001, 0x5, 0xf8dd, 0x3, 0x4, 0x1, 0x322, 0x8, 0x3, 0x1, 0x2, 0x5, 0x80000000, 0x8, 0x0, 0x3ff, 0x9, 0x89f, 0x6c4, 0x4, 0x3, 0x9, 0x7fffffff, 0x3a, 0x7f, 0x3, 0xf5, 0xffffff00, 0x4, 0x2, 0x3, 0x5, 0x7, 0x10001, 0x1161e143, 0x5, 0x8, 0x4ad, 0x10001, 0x8, 0x4, 0x7, 0xfff, 0x1000, 0x9, 0x99b1, 0x445, 0x3, 0x40, 0x6772, 0x7, 0xea9e, 0x1c000000, 0xa, 0x3, 0x5, 0x2, 0x1, 0x1ff, 0x7f, 0x45, 0x5, 0x6, 0xffff, 0x808, 0x5, 0x99, 0x9, 0xffffffff, 0x62, 0x800, 0x1, 0x10, 0x0, 0x5, 0x2, 0x1, 0x5, 0x1, 0x4, 0x0, 0xfffffffb, 0xc, 0xd324, 0x6, 0x5, 0x0, 0x80000000, 0x1000000, 0xffff, 0x3000000, 0x80, 0x7, 0x7ff, 0x7, 0xfffffff9, 0x9, 0x800, 0x9, 0x9, 0x0, 0x67, 0x4, 0x3, 0xc0, 0x6, 0x9, 0x0, 0x3800000, 0x1, 0x2, 0x4, 0x80000001, 0x93f, 0x5, 0xfffffff7, 0x4, 0x9, 0x9, 0x9, 0x9, 0x0, 0x0, 0x92f5, 0xeea, 0x1000, 0x1, 0x7fff, 0x9, 0xa1, 0x8, 0x6, 0x6, 0xfffffffc, 0x6, 0x1, 0x1fcdf5ef, 0x8, 0xffffffff, 0xffffffff, 0x1, 0xc77, 0xc8ce, 0x6, 0x0, 0xc, 0xd, 0x8, 0x5, 0xa264, 0x10, 0x99d, 0xe1f1, 0xff, 0x7fff, 0xfffffffe, 0x6, 0x800, 0x7, 0xfffffff6, 0x3, 0x10c, 0x5, 0x8000, 0x6, 0x5, 0x4, 0x7, 0x2f83, 0x4, 0xc, 0x4, 0x0, 0x1, 0xfd2c, 0xb, 0x704, 0x1e3, 0x4, 0x8, 0x10000, 0x2ed8000, 0xda31, 0x40000000, 0x7a8e, 0xb5c, 0x10000, 0x1dd, 0xef, 0x2, 0x1, 0x6, 0x2, 0x4, 0x3ff, 0x7fffffff, 0x5, 0x3, 0x100, 0x41, 0x1, 0x5, 0x877, 0x4, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4f}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xfff, 0x9, 0x2, 0x4, 0x3, 0x100, 0xff, 0xa, 0x4, 0x10000, 0x1, 0x8, 0x3ff, 0x20f1, 0x9, 0x8000, 0x9, 0xffff, 0x5, 0x7a97, 0x8da6, 0xff, 0x7, 0x3ff, 0x9, 0x100, 0x9, 0x742, 0x1, 0x9e2, 0x8, 0xdc0, 0x101, 0x7, 0x6, 0x6, 0x3, 0x7fffffff, 0xfff, 0x3, 0x62, 0x2, 0x100, 0x3, 0x1000, 0x3, 0x9, 0x9, 0x7ff, 0x3, 0xffffffff, 0x0, 0x4, 0x1, 0x44, 0x7, 0xd9a, 0x3, 0x67, 0x8, 0xfffffff9, 0x1, 0x0, 0x101, 0x401, 0x6, 0x8, 0x8, 0x9e0, 0xf, 0x3, 0x0, 0x2, 0x1, 0x5, 0xec, 0x4, 0x6, 0x401, 0x0, 0x200, 0x5, 0x4, 0x7, 0x0, 0x416, 0x2, 0x8, 0xd7, 0x4, 0x6, 0xffffff40, 0x4, 0x8001, 0xffffffff, 0x1, 0x3, 0x6, 0x2, 0x0, 0x8, 0x1, 0x7f, 0xffff, 0x2, 0xffff58fb, 0xec0, 0xb, 0x56e3, 0x200, 0x0, 0x33, 0xfffffff7, 0x5, 0x2, 0x4, 0x6, 0x9, 0x7, 0x7, 0x1ff, 0x5, 0x72f, 0x8, 0x80, 0x3ff, 0x9, 0x3, 0x8, 0x2, 0x0, 0xf1, 0x7ff, 0x5, 0x1, 0x7, 0x6, 0xf, 0xffff, 0x9, 0x80, 0x8001, 0xfffffffe, 0x401, 0x5, 0xfa, 0x7, 0x2, 0x8, 0x1, 0x4, 0x1, 0x4, 0xa, 0x8000, 0x101, 0xcf1f, 0x10000, 0x10001, 0x10001, 0x80000, 0x9, 0x4, 0x1, 0xff, 0x8, 0x0, 0x96, 0x4, 0x4, 0x0, 0x80, 0xff, 0x2, 0x5, 0x3, 0x4, 0x7fff80, 0x7, 0x9, 0x40, 0x3, 0xd7, 0x7, 0x2, 0x2, 0x401, 0x3, 0x5, 0x27be9afe, 0x8, 0xf1, 0x800, 0x0, 0x1, 0xe9e1, 0x3, 0x33780, 0x34, 0x32, 0x4, 0x9, 0x69, 0x7, 0x9, 0x8db7, 0x8, 0xd, 0x5, 0x8, 0x6, 0x8, 0x4, 0xb, 0x10001, 0x0, 0x8, 0xe58a, 0x7fff, 0x1cf, 0x8, 0x4, 0x200, 0x6, 0x2, 0x7, 0x2e0, 0x1, 0xfff, 0x7fffffff, 0x9, 0x4, 0x3, 0x69f, 0x5, 0x0, 0xa, 0x4, 0xf06, 0xd, 0x6, 0x200, 0x6b400f0d, 0x4, 0xc, 0x5, 0x55bf, 0x9, 0x9, 0x4, 0xde, 0x8, 0x7cf, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}]}}]}, 0x1300}, 0x1, 0xf0ffffffffffff}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r10, &(0x7f0000010140)={0x2020}, 0x2036) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) kernel console output (not intermixed with test programs): __pfx_shmem_get_folio_gfp+0x10/0x10 [ 60.540147][ T6113] ? __pte_offset_map_lock+0x174/0x310 [ 60.540166][ T6113] shmem_write_begin+0x160/0x300 [ 60.540180][ T6113] ? find_held_lock+0x2b/0x80 [ 60.540192][ T6113] ? __pfx_shmem_write_begin+0x10/0x10 [ 60.540206][ T6113] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 60.540217][ T6113] ? __pfx_timestamp_truncate+0x10/0x10 [ 60.540236][ T6113] generic_perform_write+0x3d0/0x930 [ 60.540253][ T6113] ? __pfx_generic_perform_write+0x10/0x10 [ 60.540267][ T6113] ? inode_needs_update_time.part.0+0x191/0x270 [ 60.540288][ T6113] shmem_file_write_iter+0x10e/0x140 [ 60.540304][ T6113] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 60.540319][ T6113] __kernel_write_iter+0x31a/0xa90 [ 60.540334][ T6113] ? __pfx___kernel_write_iter+0x10/0x10 [ 60.540350][ T6113] ? __up_read+0x1f8/0x750 [ 60.540363][ T6113] ? dump_user_range+0x745/0xb60 [ 60.540379][ T6113] dump_user_range+0x41f/0xb60 [ 60.540394][ T6113] ? __pfx_dump_user_range+0x10/0x10 [ 60.540408][ T6113] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 60.540428][ T6113] ? __pfx_writenote+0x10/0x10 [ 60.540445][ T6113] elf_core_dump+0x288a/0x3a90 [ 60.540466][ T6113] ? __pfx_elf_core_dump+0x10/0x10 [ 60.540479][ T6113] ? kasan_save_stack+0x42/0x60 [ 60.540492][ T6113] ? kasan_save_stack+0x33/0x60 [ 60.540504][ T6113] ? kasan_save_track+0x14/0x30 [ 60.540516][ T6113] ? __kasan_kmalloc+0xaa/0xb0 [ 60.540529][ T6113] ? do_coredump+0x1c9a/0x4f10 [ 60.540540][ T6113] ? get_signal+0x22e3/0x26d0 [ 60.540552][ T6113] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 60.540568][ T6113] ? 0xffffffffff600000 [ 60.540599][ T6113] ? do_coredump+0x399c/0x4f10 [ 60.540610][ T6113] do_coredump+0x399c/0x4f10 [ 60.540627][ T6113] ? __pfx_do_coredump+0x10/0x10 [ 60.540639][ T6113] ? find_held_lock+0x2b/0x80 [ 60.540653][ T6113] ? is_bpf_text_address+0x8a/0x1a0 [ 60.540668][ T6113] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 60.540683][ T6113] ? is_bpf_text_address+0x94/0x1a0 [ 60.540695][ T6113] ? kernel_text_address+0x8d/0x100 [ 60.540707][ T6113] ? __kernel_text_address+0xd/0x40 [ 60.540719][ T6113] ? unwind_get_return_address+0x59/0xa0 [ 60.540738][ T6113] ? stack_depot_save_flags+0x28/0xa40 [ 60.540757][ T6113] ? __lock_acquire+0xb8a/0x1c90 [ 60.540768][ T6113] ? kasan_save_stack+0x42/0x60 [ 60.540780][ T6113] ? kasan_save_stack+0x33/0x60 [ 60.540792][ T6113] ? kasan_save_track+0x14/0x30 [ 60.540805][ T6113] ? kasan_save_free_info+0x3b/0x60 [ 60.540815][ T6113] ? __kasan_slab_free+0x51/0x70 [ 60.540828][ T6113] ? kmem_cache_free+0x2d1/0x4d0 [ 60.540840][ T6113] ? __sigqueue_free+0xba/0x2a0 [ 60.540854][ T6113] ? get_signal+0xcba/0x26d0 [ 60.540866][ T6113] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 60.540897][ T6113] ? proc_coredump_connector+0x2d1/0x4f0 [ 60.540910][ T6113] ? __pfx_proc_coredump_connector+0x10/0x10 [ 60.540925][ T6113] ? rcu_is_watching+0x12/0xc0 [ 60.540941][ T6113] get_signal+0x22e3/0x26d0 [ 60.540957][ T6113] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 60.540972][ T6113] ? __pfx_get_signal+0x10/0x10 [ 60.540990][ T6113] arch_do_signal_or_restart+0x8f/0x7d0 [ 60.541003][ T6113] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 60.541019][ T6113] ? exc_general_protection+0x1ba/0x230 [ 60.541034][ T6113] irqentry_exit_to_user_mode+0x12a/0x270 [ 60.541049][ T6113] asm_exc_general_protection+0x26/0x30 [ 60.541061][ T6113] RIP: 0033:0x7fe5b898e931 [ 60.541070][ T6113] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 60.541080][ T6113] RSP: 002b:0000200000000240 EFLAGS: 00010217 [ 60.541089][ T6113] RAX: 0000000000000000 RBX: 00007fe5b8bb6080 RCX: 00007fe5b898e929 [ 60.541095][ T6113] RDX: 0000200000000140 RSI: 0000200000000240 RDI: 0000000080080000 [ 60.541101][ T6113] RBP: 00007fe5b8a10b39 R08: 0000200000000340 R09: 0000200000000340 [ 60.541108][ T6113] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 60.541114][ T6113] R13: 0000000000000000 R14: 00007fe5b8bb6080 R15: 00007ffc6fe5df28 [ 60.541127][ T6113] [ 60.541131][ T6113] memory: usage 307200kB, limit 307200kB, failcnt 21735 [ 60.710612][ T6113] memory+swap: usage 432112kB, limit 9007199254740988kB, failcnt 0 [ 60.710625][ T6113] kmem: usage 5456kB, limit 9007199254740988kB, failcnt 0 [ 60.710631][ T6113] Memory cgroup stats for /syz0: [ 60.710734][ T6113] cache 308662272 [ 60.710740][ T6113] rss 286720 [ 60.710744][ T6113] rss_huge 0 [ 60.710755][ T6113] shmem 308547584 [ 60.710759][ T6113] mapped_file 0 [ 60.710763][ T6113] dirty 0 [ 60.710767][ T6113] writeback 0 [ 60.710771][ T6113] workingset_refault_anon 124 [ 60.710776][ T6113] workingset_refault_file 8663 [ 60.710780][ T6113] swap 127909888 [ 60.710784][ T6113] swapcached 86016 [ 60.710789][ T6113] pgpgin 153704 [ 60.710793][ T6113] pgpgout 78268 [ 60.710797][ T6113] pgfault 9761 [ 60.710801][ T6113] pgmajfault 242 [ 60.710805][ T6113] inactive_anon 251727872 [ 60.710809][ T6113] active_anon 55631872 [ 60.710814][ T6113] inactive_file 114688 [ 60.710818][ T6113] active_file 0 [ 60.710822][ T6113] unevictable 0 [ 60.710826][ T6113] hierarchical_memory_limit 314572800 [ 60.710831][ T6113] hierarchical_memsw_limit 9223372036854771712 [ 60.710836][ T6113] total_cache 308662272 [ 60.710840][ T6113] total_rss 286720 [ 60.710845][ T6113] total_rss_huge 0 [ 60.710849][ T6113] total_shmem 308547584 [ 60.710853][ T6113] total_mapped_file 0 [ 60.710857][ T6113] total_dirty 0 [ 60.710861][ T6113] total_writeback 0 [ 60.710866][ T6113] total_workingset_refault_anon 124 [ 60.710870][ T6113] total_workingset_refault_file 8663 [ 60.710875][ T6113] total_swap 127909888 [ 60.710879][ T6113] total_swapcached 86016 [ 60.710884][ T6113] total_pgpgin 153704 [ 60.710888][ T6113] total_pgpgout 78268 [ 60.710892][ T6113] total_pgfault 9761 [ 60.710897][ T6113] total_pgmajfault 242 [ 60.710901][ T6113] total_inactive_anon 251727872 [ 60.710905][ T6113] total_active_anon 55631872 [ 60.710910][ T6113] total_inactive_file 114688 [ 60.710914][ T6113] total_active_file 0 [ 60.710919][ T6113] total_unevictable 0 [ 60.710923][ T6113] anon_cost 0 [ 60.710927][ T6113] file_cost 0 [ 60.710931][ T6113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.22,pid=6113,uid=0 [ 60.711035][ T6113] Memory cgroup out of memory: Killed process 6113 (syz.0.22) total-vm:98244kB, anon-rss:980kB, file-rss:25740kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 60.777675][ T6222] netlink: 72 bytes leftover after parsing attributes in process `syz.1.54'. [ 60.959126][ T6095] syz.0.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 60.962234][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.0.22 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 60.962248][ T6095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.962255][ T6095] Call Trace: [ 60.962259][ T6095] [ 60.962263][ T6095] dump_stack_lvl+0x16c/0x1f0 [ 60.962283][ T6095] dump_header+0x101/0x930 [ 60.962300][ T6095] oom_kill_process+0x270/0xa60 [ 60.962316][ T6095] out_of_memory+0x350/0x1700 [ 60.962333][ T6095] ? __pfx_out_of_memory+0x10/0x10 [ 60.962351][ T6095] mem_cgroup_out_of_memory+0x118/0x130 [ 60.962363][ T6095] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 60.962378][ T6095] ? do_raw_spin_unlock+0x172/0x230 [ 60.962393][ T6095] try_charge_memcg+0x72b/0xd50 [ 60.962411][ T6095] ? __pfx_try_charge_memcg+0x10/0x10 [ 60.962426][ T6095] ? find_held_lock+0x1/0x80 [ 60.962440][ T6095] ? rcu_read_unlock+0x17/0x60 [ 60.962459][ T6095] charge_memcg+0x8a/0x230 [ 60.962487][ T6095] __mem_cgroup_charge+0x2b/0x1e0 [ 60.962505][ T6095] shmem_alloc_and_add_folio+0x514/0xc20 [ 60.962522][ T6095] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 60.962537][ T6095] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 60.962553][ T6095] shmem_get_folio_gfp+0x67f/0x1600 [ 60.962569][ T6095] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 60.962583][ T6095] ? __pte_offset_map_lock+0x174/0x310 [ 60.962602][ T6095] shmem_write_begin+0x160/0x300 [ 60.962616][ T6095] ? find_held_lock+0x2b/0x80 [ 60.962628][ T6095] ? __pfx_shmem_write_begin+0x10/0x10 [ 60.962643][ T6095] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 60.962653][ T6095] ? __pfx_timestamp_truncate+0x10/0x10 [ 60.962669][ T6095] ? ns_to_timespec64+0x59/0xc0 [ 60.962686][ T6095] generic_perform_write+0x3d0/0x930 [ 60.962704][ T6095] ? __pfx_generic_perform_write+0x10/0x10 [ 60.962717][ T6095] ? inode_needs_update_time.part.0+0x191/0x270 [ 60.962738][ T6095] shmem_file_write_iter+0x10e/0x140 [ 60.962758][ T6095] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 60.962773][ T6095] __kernel_write_iter+0x31a/0xa90 [ 60.962788][ T6095] ? __pfx___kernel_write_iter+0x10/0x10 [ 60.962801][ T6095] ? __up_read+0x1f8/0x750 [ 60.962814][ T6095] ? dump_user_range+0x745/0xb60 [ 60.962827][ T6095] ? dump_user_range+0x551/0xb60 [ 60.962841][ T6095] dump_user_range+0x41f/0xb60 [ 60.962857][ T6095] ? __pfx_dump_user_range+0x10/0x10 [ 60.962870][ T6095] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 60.962891][ T6095] ? __pfx_writenote+0x10/0x10 [ 60.962908][ T6095] elf_core_dump+0x288a/0x3a90 [ 60.962929][ T6095] ? __pfx_elf_core_dump+0x10/0x10 [ 60.962942][ T6095] ? kasan_save_stack+0x42/0x60 [ 60.962955][ T6095] ? kasan_save_stack+0x33/0x60 [ 60.962968][ T6095] ? kasan_save_track+0x14/0x30 [ 60.962980][ T6095] ? __kasan_kmalloc+0xaa/0xb0 [ 60.962992][ T6095] ? do_coredump+0x1c9a/0x4f10 [ 60.963003][ T6095] ? get_signal+0x22e3/0x26d0 [ 60.963016][ T6095] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 60.963032][ T6095] ? 0xffffffffff600000 [ 60.963064][ T6095] ? do_coredump+0x399c/0x4f10 [ 60.963075][ T6095] do_coredump+0x399c/0x4f10 [ 60.963092][ T6095] ? __pfx_do_coredump+0x10/0x10 [ 60.963105][ T6095] ? find_held_lock+0x2b/0x80 [ 60.963119][ T6095] ? is_bpf_text_address+0x8a/0x1a0 [ 60.963133][ T6095] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 60.963148][ T6095] ? is_bpf_text_address+0x94/0x1a0 [ 60.963161][ T6095] ? kernel_text_address+0x8d/0x100 [ 60.963173][ T6095] ? __kernel_text_address+0xd/0x40 [ 60.963184][ T6095] ? unwind_get_return_address+0x59/0xa0 [ 60.963204][ T6095] ? stack_depot_save_flags+0x28/0xa40 [ 60.963219][ T6095] ? __lock_acquire+0xb8a/0x1c90 [ 60.963243][ T6095] ? kasan_save_stack+0x42/0x60 [ 60.963255][ T6095] ? kasan_save_stack+0x33/0x60 [ 60.963267][ T6095] ? kasan_save_track+0x14/0x30 [ 60.963280][ T6095] ? kasan_save_free_info+0x3b/0x60 [ 60.963290][ T6095] ? __kasan_slab_free+0x51/0x70 [ 60.963303][ T6095] ? kmem_cache_free+0x2d1/0x4d0 [ 60.963315][ T6095] ? __sigqueue_free+0xba/0x2a0 [ 60.963330][ T6095] ? get_signal+0xcba/0x26d0 [ 60.963342][ T6095] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 60.963373][ T6095] ? proc_coredump_connector+0x2d1/0x4f0 [ 60.963386][ T6095] ? __pfx_proc_coredump_connector+0x10/0x10 [ 60.963401][ T6095] ? rcu_is_watching+0x12/0xc0 [ 60.963417][ T6095] get_signal+0x22e3/0x26d0 [ 60.963433][ T6095] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 60.963449][ T6095] ? __pfx_get_signal+0x10/0x10 [ 60.963466][ T6095] arch_do_signal_or_restart+0x8f/0x7d0 [ 60.963479][ T6095] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 60.963496][ T6095] ? exc_general_protection+0x1ba/0x230 [ 60.963510][ T6095] irqentry_exit_to_user_mode+0x12a/0x270 [ 60.963526][ T6095] asm_exc_general_protection+0x26/0x30 [ 60.963537][ T6095] RIP: 0033:0x7fe5b898e931 [ 60.963546][ T6095] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 60.963556][ T6095] RSP: 002b:0000200000000240 EFLAGS: 00010217 [ 60.963584][ T6095] RAX: 0000000000000000 RBX: 00007fe5b8bb6080 RCX: 00007fe5b898e929 [ 60.963594][ T6095] RDX: 0000200000000140 RSI: 0000200000000240 RDI: 0000000080080000 [ 60.963604][ T6095] RBP: 00007fe5b8a10b39 R08: 0000200000000340 R09: 0000200000000340 [ 60.963612][ T6095] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 60.963621][ T6095] R13: 0000000000000000 R14: 00007fe5b8bb6080 R15: 00007ffc6fe5df28 [ 60.963640][ T6095] [ 60.982498][ T6232] SELinux: ebitmap: truncated map [ 60.989050][ T6095] memory: usage 307200kB, limit 307200kB, failcnt 22468 [ 60.999465][ T6232] SELinux: failed to load policy [ 61.001580][ T6232] Bluetooth: MGMT ver 1.23 [ 61.004507][ T6095] memory+swap: usage 432104kB, limit 9007199254740988kB, failcnt 0 [ 61.007344][ T6232] Bluetooth: hci0: service_discovery: too big uuid_count value 17747 [ 61.009081][ T6095] kmem: usage 5264kB, limit 9007199254740988kB, failcnt 0 [ 61.024999][ T6095] Memory cgroup stats for /syz0: [ 61.147805][ T6095] cache 308842496 [ 61.150159][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 61.151177][ T6095] rss 303104 [ 61.155657][ T6095] rss_huge 0 [ 61.156688][ T6095] shmem 308842496 [ 61.157869][ T6095] mapped_file 0 [ 61.158969][ T6095] dirty 0 [ 61.159930][ T6095] writeback 0 [ 61.160946][ T6095] workingset_refault_anon 131 [ 61.162471][ T6095] workingset_refault_file 8835 [ 61.164804][ T6095] swap 127901696 [ 61.167716][ T6095] swapcached 94208 [ 61.168883][ T6095] pgpgin 158510 [ 61.169972][ T6095] pgpgout 83026 [ 61.171063][ T6095] pgfault 9942 [ 61.172156][ T6095] pgmajfault 262 [ 61.174793][ T6095] inactive_anon 91480064 [ 61.176287][ T6095] active_anon 217702400 [ 61.177562][ T6095] inactive_file 0 [ 61.178702][ T6095] active_file 0 [ 61.179930][ T6095] unevictable 0 [ 61.181529][ T6095] hierarchical_memory_limit 314572800 [ 61.183802][ T6095] hierarchical_memsw_limit 9223372036854771712 [ 61.186033][ T6095] total_cache 308842496 [ 61.187519][ T6095] total_rss 303104 [ 61.188889][ T6095] total_rss_huge 0 [ 61.190249][ T6095] total_shmem 308842496 [ 61.191760][ T6095] total_mapped_file 0 [ 61.204313][ T6095] total_dirty 0 [ 61.205680][ T6095] total_writeback 0 [ 61.207174][ T6095] total_workingset_refault_anon 131 [ 61.209078][ T6095] total_workingset_refault_file 8835 [ 61.210584][ T6095] total_swap 127901696 [ 61.211775][ T6095] total_swapcached 94208 [ 61.213836][ T6095] total_pgpgin 158510 [ 61.215082][ T6095] total_pgpgout 83026 [ 61.216241][ T6095] total_pgfault 9942 [ 61.217668][ T6095] total_pgmajfault 262 [ 61.218845][ T6095] total_inactive_anon 91480064 [ 61.220221][ T6095] total_active_anon 217702400 [ 61.221959][ T6095] total_inactive_file 0 [ 61.223859][ T6095] total_active_file 0 [ 61.225208][ T6095] total_unevictable 0 [ 61.226524][ T6095] anon_cost 0 [ 61.228012][ T6095] file_cost 0 [ 61.228993][ T6095] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.22,pid=6131,uid=0 [ 61.233826][ T6095] Memory cgroup out of memory: Killed process 6131 (syz.0.22) total-vm:98244kB, anon-rss:980kB, file-rss:26620kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 61.264794][ T6095] syz.0.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.267453][ T6095] CPU: 2 UID: 0 PID: 6095 Comm: syz.0.22 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 61.267467][ T6095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.267474][ T6095] Call Trace: [ 61.267478][ T6095] [ 61.267482][ T6095] dump_stack_lvl+0x16c/0x1f0 [ 61.267501][ T6095] dump_header+0x101/0x930 [ 61.267518][ T6095] oom_kill_process+0x270/0xa60 [ 61.267534][ T6095] out_of_memory+0x350/0x1700 [ 61.267551][ T6095] ? __pfx_out_of_memory+0x10/0x10 [ 61.267586][ T6095] mem_cgroup_out_of_memory+0x118/0x130 [ 61.267600][ T6095] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 61.267615][ T6095] ? do_raw_spin_unlock+0x172/0x230 [ 61.267630][ T6095] try_charge_memcg+0x72b/0xd50 [ 61.267648][ T6095] ? __pfx_try_charge_memcg+0x10/0x10 [ 61.267664][ T6095] ? find_held_lock+0x1/0x80 [ 61.267678][ T6095] ? rcu_read_unlock+0x17/0x60 [ 61.267697][ T6095] charge_memcg+0x8a/0x230 [ 61.267713][ T6095] __mem_cgroup_charge+0x2b/0x1e0 [ 61.267730][ T6095] shmem_alloc_and_add_folio+0x514/0xc20 [ 61.267747][ T6095] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 61.267765][ T6095] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 61.267782][ T6095] shmem_get_folio_gfp+0x67f/0x1600 [ 61.267798][ T6095] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 61.267812][ T6095] ? __pte_offset_map_lock+0x174/0x310 [ 61.267831][ T6095] shmem_write_begin+0x160/0x300 [ 61.267845][ T6095] ? find_held_lock+0x2b/0x80 [ 61.267858][ T6095] ? __pfx_shmem_write_begin+0x10/0x10 [ 61.267872][ T6095] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 61.267883][ T6095] ? __pfx_timestamp_truncate+0x10/0x10 [ 61.267901][ T6095] generic_perform_write+0x3d0/0x930 [ 61.267919][ T6095] ? __pfx_generic_perform_write+0x10/0x10 [ 61.267933][ T6095] ? inode_needs_update_time.part.0+0x191/0x270 [ 61.267953][ T6095] shmem_file_write_iter+0x10e/0x140 [ 61.267969][ T6095] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 61.267984][ T6095] __kernel_write_iter+0x31a/0xa90 [ 61.268000][ T6095] ? __pfx___kernel_write_iter+0x10/0x10 [ 61.268014][ T6095] ? __up_read+0x1f8/0x750 [ 61.268026][ T6095] ? dump_user_range+0x745/0xb60 [ 61.268039][ T6095] ? dump_user_range+0x551/0xb60 [ 61.268053][ T6095] dump_user_range+0x41f/0xb60 [ 61.268069][ T6095] ? __pfx_dump_user_range+0x10/0x10 [ 61.268082][ T6095] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 61.268102][ T6095] ? __pfx_writenote+0x10/0x10 [ 61.268119][ T6095] elf_core_dump+0x288a/0x3a90 [ 61.268140][ T6095] ? __pfx_elf_core_dump+0x10/0x10 [ 61.268153][ T6095] ? kasan_save_stack+0x42/0x60 [ 61.268165][ T6095] ? kasan_save_stack+0x33/0x60 [ 61.268178][ T6095] ? kasan_save_track+0x14/0x30 [ 61.268190][ T6095] ? __kasan_kmalloc+0xaa/0xb0 [ 61.268202][ T6095] ? do_coredump+0x1c9a/0x4f10 [ 61.268213][ T6095] ? get_signal+0x22e3/0x26d0 [ 61.268226][ T6095] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 61.268242][ T6095] ? 0xffffffffff600000 [ 61.268273][ T6095] ? do_coredump+0x399c/0x4f10 [ 61.268284][ T6095] do_coredump+0x399c/0x4f10 [ 61.268301][ T6095] ? __pfx_do_coredump+0x10/0x10 [ 61.268313][ T6095] ? find_held_lock+0x2b/0x80 [ 61.268327][ T6095] ? is_bpf_text_address+0x8a/0x1a0 [ 61.268342][ T6095] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 61.268358][ T6095] ? is_bpf_text_address+0x94/0x1a0 [ 61.268370][ T6095] ? kernel_text_address+0x8d/0x100 [ 61.268382][ T6095] ? __kernel_text_address+0xd/0x40 [ 61.268393][ T6095] ? unwind_get_return_address+0x59/0xa0 [ 61.268412][ T6095] ? stack_depot_save_flags+0x28/0xa40 [ 61.268428][ T6095] ? __lock_acquire+0xb8a/0x1c90 [ 61.268439][ T6095] ? kasan_save_stack+0x42/0x60 [ 61.268451][ T6095] ? kasan_save_stack+0x33/0x60 [ 61.268463][ T6095] ? kasan_save_track+0x14/0x30 [ 61.268476][ T6095] ? kasan_save_free_info+0x3b/0x60 [ 61.268486][ T6095] ? __kasan_slab_free+0x51/0x70 [ 61.268499][ T6095] ? kmem_cache_free+0x2d1/0x4d0 [ 61.268511][ T6095] ? __sigqueue_free+0xba/0x2a0 [ 61.268526][ T6095] ? get_signal+0xcba/0x26d0 [ 61.268538][ T6095] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 61.268571][ T6095] ? proc_coredump_connector+0x2d1/0x4f0 [ 61.268584][ T6095] ? __pfx_proc_coredump_connector+0x10/0x10 [ 61.268598][ T6095] ? rcu_is_watching+0x12/0xc0 [ 61.268614][ T6095] get_signal+0x22e3/0x26d0 [ 61.268631][ T6095] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 61.268645][ T6095] ? __pfx_get_signal+0x10/0x10 [ 61.268663][ T6095] arch_do_signal_or_restart+0x8f/0x7d0 [ 61.268676][ T6095] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 61.268692][ T6095] ? exc_general_protection+0x1ba/0x230 [ 61.268707][ T6095] irqentry_exit_to_user_mode+0x12a/0x270 [ 61.268722][ T6095] asm_exc_general_protection+0x26/0x30 [ 61.268733][ T6095] RIP: 0033:0x7fe5b898e931 [ 61.268742][ T6095] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 61.268752][ T6095] RSP: 002b:0000200000000240 EFLAGS: 00010217 [ 61.268761][ T6095] RAX: 0000000000000000 RBX: 00007fe5b8bb6080 RCX: 00007fe5b898e929 [ 61.268770][ T6095] RDX: 0000200000000140 RSI: 0000200000000240 RDI: 0000000080080000 [ 61.268776][ T6095] RBP: 00007fe5b8a10b39 R08: 0000200000000340 R09: 0000200000000340 [ 61.268782][ T6095] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 61.268789][ T6095] R13: 0000000000000000 R14: 00007fe5b8bb6080 R15: 00007ffc6fe5df28 [ 61.268802][ T6095] [ 61.268806][ T6095] memory: usage 307120kB, limit 307200kB, failcnt 22604 [ 61.368332][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 61.368343][ T40] audit: type=1400 audit(1751901875.412:239): avc: denied { name_bind } for pid=6185 comm="syz.2.43" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.368915][ T6095] memory+swap: usage 429904kB, limit 9007199254740988kB, failcnt 0 [ 61.370160][ T40] audit: type=1400 audit(1751901875.412:240): avc: denied { node_bind } for pid=6185 comm="syz.2.43" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 61.370553][ T6243] IPVS: length: 113 != 8 [ 61.371640][ T6095] kmem: usage 5220kB, limit 9007199254740988kB, failcnt 0 [ 61.371649][ T6095] Memory cgroup stats for /syz0: [ 61.371728][ T6095] cache 307396608 [ 61.376091][ T40] audit: type=1400 audit(1751901875.422:241): avc: denied { create } for pid=6240 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.378239][ T6095] rss 307200 [ 61.379232][ T40] audit: type=1400 audit(1751901875.422:242): avc: denied { create } for pid=6240 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.379257][ T40] audit: type=1400 audit(1751901875.422:243): avc: denied { connect } for pid=6240 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.379277][ T40] audit: type=1400 audit(1751901875.432:244): avc: denied { write } for pid=6240 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.463524][ T6095] rss_huge 0 [ 61.464483][ T6095] shmem 307396608 [ 61.465602][ T6095] mapped_file 0 [ 61.466606][ T6095] dirty 0 [ 61.467464][ T6095] writeback 0 [ 61.468430][ T6095] workingset_refault_anon 131 [ 61.469798][ T6095] workingset_refault_file 8855 [ 61.471177][ T6095] swap 127164416 [ 61.472214][ T6095] swapcached 65536 [ 61.473435][ T6095] pgpgin 158708 [ 61.474459][ T6095] pgpgout 83583 [ 61.475530][ T6095] pgfault 9950 [ 61.476548][ T6095] pgmajfault 264 [ 61.477579][ T6095] inactive_anon 268898304 [ 61.478809][ T6095] active_anon 38547456 [ 61.479994][ T6095] inactive_file 0 [ 61.481053][ T6095] active_file 0 [ 61.482067][ T6095] unevictable 0 [ 61.484323][ T6095] hierarchical_memory_limit 314572800 [ 61.485872][ T6095] hierarchical_memsw_limit 9223372036854771712 [ 61.490352][ T6095] total_cache 307396608 [ 61.491285][ T1153] Bluetooth: Error in BCSP hdr checksum [ 61.491570][ T6095] total_rss 307200 [ 61.491577][ T6095] total_rss_huge 0 [ 61.491582][ T6095] total_shmem 307396608 [ 61.491586][ T6095] total_mapped_file 0 [ 61.491591][ T6095] total_dirty 0 [ 61.491595][ T6095] total_writeback 0 [ 61.500265][ T6095] total_workingset_refault_anon 131 [ 61.501751][ T6095] total_workingset_refault_file 8855 [ 61.503378][ T6095] total_swap 127164416 [ 61.504593][ T6095] total_swapcached 65536 [ 61.505856][ T6095] total_pgpgin 158708 [ 61.507008][ T6095] total_pgpgout 83583 [ 61.508165][ T6095] total_pgfault 9950 [ 61.509296][ T6095] total_pgmajfault 264 [ 61.510470][ T6095] total_inactive_anon 268898304 [ 61.511987][ T6095] total_active_anon 38547456 [ 61.513386][ T6095] total_inactive_file 0 [ 61.514574][ T6095] total_active_file 0 [ 61.515758][ T6095] total_unevictable 0 [ 61.516879][ T6095] anon_cost 0 [ 61.517823][ T6095] file_cost 0 [ 61.518787][ T6095] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.22,pid=6122,uid=0 [ 61.522833][ T6095] Memory cgroup out of memory: Killed process 6122 (syz.0.22) total-vm:98244kB, anon-rss:980kB, file-rss:26320kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 61.558651][ T40] audit: type=1400 audit(1751901875.612:245): avc: denied { setopt } for pid=6271 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.583133][ T40] audit: type=1400 audit(1751901875.612:246): avc: denied { connect } for pid=6271 comm="syz.3.62" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.608056][ T9] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 61.647754][ T40] audit: type=1400 audit(1751901875.702:247): avc: denied { connect } for pid=6277 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.667334][ T40] audit: type=1400 audit(1751901875.702:248): avc: denied { shutdown } for pid=6277 comm="syz.3.64" laddr=172.20.20.35 lport=3 faddr=172.20.20.35 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.728120][ T6284] Bluetooth: MGMT ver 1.23 [ 61.736502][ T6284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 61.743682][ T90] Bluetooth: Error in BCSP hdr checksum [ 61.791354][ T6288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.67'. [ 61.792466][ T6110] syz.0.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.804351][ T6110] CPU: 3 UID: 0 PID: 6110 Comm: syz.0.22 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 61.804369][ T6110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.804376][ T6110] Call Trace: [ 61.804379][ T6110] [ 61.804383][ T6110] dump_stack_lvl+0x16c/0x1f0 [ 61.804404][ T6110] dump_header+0x101/0x930 [ 61.804423][ T6110] oom_kill_process+0x270/0xa60 [ 61.804440][ T6110] out_of_memory+0x350/0x1700 [ 61.804459][ T6110] ? __pfx_out_of_memory+0x10/0x10 [ 61.804479][ T6110] mem_cgroup_out_of_memory+0x118/0x130 [ 61.804491][ T6110] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 61.804507][ T6110] ? do_raw_spin_unlock+0x172/0x230 [ 61.804525][ T6110] try_charge_memcg+0x72b/0xd50 [ 61.804544][ T6110] ? __pfx_try_charge_memcg+0x10/0x10 [ 61.804560][ T6110] ? find_held_lock+0x1/0x80 [ 61.804575][ T6110] ? rcu_read_unlock+0x17/0x60 [ 61.804596][ T6110] charge_memcg+0x8a/0x230 [ 61.804631][ T6110] __mem_cgroup_charge+0x2b/0x1e0 [ 61.804649][ T6110] shmem_alloc_and_add_folio+0x514/0xc20 [ 61.804668][ T6110] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 61.804683][ T6110] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 61.804701][ T6110] shmem_get_folio_gfp+0x67f/0x1600 [ 61.804718][ T6110] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 61.804734][ T6110] ? __pte_offset_map_lock+0x174/0x310 [ 61.804758][ T6110] shmem_write_begin+0x160/0x300 [ 61.804773][ T6110] ? find_held_lock+0x2b/0x80 [ 61.804787][ T6110] ? __pfx_shmem_write_begin+0x10/0x10 [ 61.804802][ T6110] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 61.804829][ T6110] ? __pfx_timestamp_truncate+0x10/0x10 [ 61.804849][ T6110] generic_perform_write+0x3d0/0x930 [ 61.804869][ T6110] ? __pfx_generic_perform_write+0x10/0x10 [ 61.804884][ T6110] ? inode_needs_update_time.part.0+0x191/0x270 [ 61.804906][ T6110] shmem_file_write_iter+0x10e/0x140 [ 61.804924][ T6110] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 61.804940][ T6110] __kernel_write_iter+0x31a/0xa90 [ 61.804956][ T6110] ? __pfx___kernel_write_iter+0x10/0x10 [ 61.804970][ T6110] ? __up_read+0x1f8/0x750 [ 61.804984][ T6110] ? dump_user_range+0x745/0xb60 [ 61.805001][ T6110] dump_user_range+0x41f/0xb60 [ 61.805018][ T6110] ? __pfx_dump_user_range+0x10/0x10 [ 61.805033][ T6110] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 61.805055][ T6110] ? __pfx_writenote+0x10/0x10 [ 61.805074][ T6110] elf_core_dump+0x288a/0x3a90 [ 61.805098][ T6110] ? __pfx_elf_core_dump+0x10/0x10 [ 61.805112][ T6110] ? kasan_save_stack+0x42/0x60 [ 61.805126][ T6110] ? kasan_save_stack+0x33/0x60 [ 61.805139][ T6110] ? kasan_save_track+0x14/0x30 [ 61.805152][ T6110] ? __kasan_kmalloc+0xaa/0xb0 [ 61.805165][ T6110] ? do_coredump+0x1c9a/0x4f10 [ 61.805176][ T6110] ? get_signal+0x22e3/0x26d0 [ 61.805188][ T6110] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 61.805204][ T6110] ? 0xffffffffff600000 [ 61.805238][ T6110] ? do_coredump+0x399c/0x4f10 [ 61.805250][ T6110] do_coredump+0x399c/0x4f10 [ 61.805268][ T6110] ? __pfx_do_coredump+0x10/0x10 [ 61.805280][ T6110] ? find_held_lock+0x2b/0x80 [ 61.805294][ T6110] ? is_bpf_text_address+0x8a/0x1a0 [ 61.805309][ T6110] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 61.805325][ T6110] ? is_bpf_text_address+0x94/0x1a0 [ 61.805337][ T6110] ? kernel_text_address+0x8d/0x100 [ 61.805361][ T6110] ? __kernel_text_address+0xd/0x40 [ 61.805373][ T6110] ? unwind_get_return_address+0x59/0xa0 [ 61.805393][ T6110] ? stack_depot_save_flags+0x28/0xa40 [ 61.805409][ T6110] ? __lock_acquire+0xb8a/0x1c90 [ 61.805420][ T6110] ? kasan_save_stack+0x42/0x60 [ 61.805433][ T6110] ? kasan_save_stack+0x33/0x60 [ 61.805445][ T6110] ? kasan_save_track+0x14/0x30 [ 61.805457][ T6110] ? kasan_save_free_info+0x3b/0x60 [ 61.805467][ T6110] ? __kasan_slab_free+0x51/0x70 [ 61.805480][ T6110] ? kmem_cache_free+0x2d1/0x4d0 [ 61.805493][ T6110] ? __sigqueue_free+0xba/0x2a0 [ 61.805508][ T6110] ? get_signal+0xcba/0x26d0 [ 61.805520][ T6110] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 61.805553][ T6110] ? proc_coredump_connector+0x2d1/0x4f0 [ 61.805566][ T6110] ? __pfx_proc_coredump_connector+0x10/0x10 [ 61.805581][ T6110] ? rcu_is_watching+0x12/0xc0 [ 61.805598][ T6110] get_signal+0x22e3/0x26d0 [ 61.805615][ T6110] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 61.805630][ T6110] ? __pfx_get_signal+0x10/0x10 [ 61.805648][ T6110] arch_do_signal_or_restart+0x8f/0x7d0 [ 61.805661][ T6110] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 61.805678][ T6110] ? exc_general_protection+0x1ba/0x230 [ 61.805693][ T6110] irqentry_exit_to_user_mode+0x12a/0x270 [ 61.805709][ T6110] asm_exc_general_protection+0x26/0x30 [ 61.805720][ T6110] RIP: 0033:0x7fe5b898e931 [ 61.805729][ T6110] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 61.805739][ T6110] RSP: 002b:0000200000000240 EFLAGS: 00010217 [ 61.805753][ T6110] RAX: 0000000000000000 RBX: 00007fe5b8bb6080 RCX: 00007fe5b898e929 [ 61.805760][ T6110] RDX: 0000200000000140 RSI: 0000200000000240 RDI: 0000000080080000 [ 61.805766][ T6110] RBP: 00007fe5b8a10b39 R08: 0000200000000340 R09: 0000200000000340 [ 61.805772][ T6110] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 61.805778][ T6110] R13: 0000000000000000 R14: 00007fe5b8bb6080 R15: 00007ffc6fe5df28 [ 61.805793][ T6110] [ 61.805887][ T6110] memory: usage 305980kB, limit 307200kB, failcnt 23723 [ 61.880733][ T6290] syzkaller1: entered promiscuous mode [ 61.881959][ T6110] memory+swap: usage 431044kB, limit 9007199254740988kB, failcnt 0 [ 61.885558][ T6290] syzkaller1: entered allmulticast mode [ 61.886868][ T6110] kmem: usage 5168kB, limit 9007199254740988kB, failcnt 0 [ 61.984365][ T6110] Memory cgroup stats for /syz0: [ 61.984443][ T6110] cache 308948992 [ 61.988699][ T6110] rss 339968 [ 61.990037][ T6110] rss_huge 0 [ 61.991628][ T6110] shmem 308948992 [ 61.993186][ T6110] mapped_file 0 [ 61.994516][ T6110] dirty 0 [ 61.995621][ T6110] writeback 0 [ 61.996699][ T6110] workingset_refault_anon 134 [ 61.998175][ T6110] workingset_refault_file 9695 [ 61.999830][ T6110] swap 127926272 [ 62.000984][ T6110] swapcached 69632 [ 62.002160][ T6110] pgpgin 172491 [ 62.003379][ T6110] pgpgout 96979 [ 62.004506][ T6110] pgfault 10256 [ 62.005632][ T6110] pgmajfault 282 [ 62.005894][ T1148] Bluetooth: Error in BCSP hdr checksum [ 62.006759][ T6110] inactive_anon 37130240 [ 62.009911][ T6110] active_anon 271380480 [ 62.011259][ T6110] inactive_file 0 [ 62.012475][ T6110] active_file 0 [ 62.013914][ T6110] unevictable 0 [ 62.015261][ T6110] hierarchical_memory_limit 314572800 [ 62.016947][ T6110] hierarchical_memsw_limit 9223372036854771712 [ 62.018854][ T6110] total_cache 308948992 [ 62.020174][ T6110] total_rss 339968 [ 62.021351][ T6110] total_rss_huge 0 [ 62.022587][ T6110] total_shmem 308948992 [ 62.024125][ T6110] total_mapped_file 0 [ 62.025635][ T6110] total_dirty 0 [ 62.027028][ T6110] total_writeback 0 [ 62.028443][ T6110] total_workingset_refault_anon 134 [ 62.030247][ T6110] total_workingset_refault_file 9695 [ 62.032152][ T6110] total_swap 127926272 [ 62.033768][ T6110] total_swapcached 69632 [ 62.035374][ T6110] total_pgpgin 172491 [ 62.036891][ T6110] total_pgpgout 96979 [ 62.038261][ T6110] total_pgfault 10256 [ 62.039624][ T6110] total_pgmajfault 282 [ 62.040957][ T6110] total_inactive_anon 37130240 [ 62.042505][ T6110] total_active_anon 271380480 [ 62.044986][ T6110] total_inactive_file 0 [ 62.046344][ T6110] total_active_file 0 [ 62.047711][ T6110] total_unevictable 0 [ 62.049146][ T6110] anon_cost 0 [ 62.050328][ T6110] file_cost 0 [ 62.051411][ T6110] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.47,pid=6201,uid=0 [ 62.056786][ T6110] Memory cgroup out of memory: OOM victim 6201 (syz.0.47) is already exiting. Skip killing the task [ 62.061088][ T6099] syz.0.22 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 62.065291][ T6099] CPU: 3 UID: 0 PID: 6099 Comm: syz.0.22 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 62.065318][ T6099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.065325][ T6099] Call Trace: [ 62.065329][ T6099] [ 62.065333][ T6099] dump_stack_lvl+0x16c/0x1f0 [ 62.065352][ T6099] dump_header+0x101/0x930 [ 62.065369][ T6099] oom_kill_process+0x270/0xa60 [ 62.065385][ T6099] out_of_memory+0x350/0x1700 [ 62.065402][ T6099] ? __pfx_out_of_memory+0x10/0x10 [ 62.065420][ T6099] mem_cgroup_out_of_memory+0x118/0x130 [ 62.065432][ T6099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 62.065447][ T6099] ? do_raw_spin_unlock+0x172/0x230 [ 62.065462][ T6099] try_charge_memcg+0x72b/0xd50 [ 62.065480][ T6099] ? __pfx_try_charge_memcg+0x10/0x10 [ 62.065495][ T6099] ? __pfx_find_held_lock+0x10/0x10 [ 62.065509][ T6099] ? rcu_read_unlock+0x17/0x60 [ 62.065529][ T6099] charge_memcg+0x8a/0x230 [ 62.065544][ T6099] __mem_cgroup_charge+0x2b/0x1e0 [ 62.065562][ T6099] shmem_alloc_and_add_folio+0x514/0xc20 [ 62.065579][ T6099] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 62.065594][ T6099] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 62.065610][ T6099] shmem_get_folio_gfp+0x67f/0x1600 [ 62.065626][ T6099] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 62.065640][ T6099] ? timestamp_truncate+0x21e/0x2d0 [ 62.065658][ T6099] shmem_write_begin+0x160/0x300 [ 62.065673][ T6099] ? __pfx_shmem_write_begin+0x10/0x10 [ 62.065687][ T6099] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 62.065701][ T6099] generic_perform_write+0x3d0/0x930 [ 62.065719][ T6099] ? __pfx_generic_perform_write+0x10/0x10 [ 62.065734][ T6099] ? generic_update_time+0xcf/0xf0 [ 62.065750][ T6099] ? mnt_put_write_access_file+0x45/0xf0 [ 62.065766][ T6099] shmem_file_write_iter+0x10e/0x140 [ 62.065782][ T6099] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 62.065802][ T6099] __kernel_write_iter+0x31a/0xa90 [ 62.065817][ T6099] ? __pfx___kernel_write_iter+0x10/0x10 [ 62.065830][ T6099] ? __up_read+0x1f8/0x750 [ 62.065843][ T6099] ? dump_user_range+0x745/0xb60 [ 62.065859][ T6099] dump_user_range+0x41f/0xb60 [ 62.065875][ T6099] ? __pfx_dump_user_range+0x10/0x10 [ 62.065888][ T6099] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 62.065908][ T6099] ? __pfx_writenote+0x10/0x10 [ 62.065925][ T6099] elf_core_dump+0x288a/0x3a90 [ 62.065947][ T6099] ? __pfx_elf_core_dump+0x10/0x10 [ 62.065960][ T6099] ? kasan_save_stack+0x42/0x60 [ 62.065973][ T6099] ? kasan_save_stack+0x33/0x60 [ 62.065985][ T6099] ? kasan_save_track+0x14/0x30 [ 62.065997][ T6099] ? __kasan_kmalloc+0xaa/0xb0 [ 62.066010][ T6099] ? do_coredump+0x1c9a/0x4f10 [ 62.066021][ T6099] ? get_signal+0x22e3/0x26d0 [ 62.066035][ T6099] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 62.066053][ T6099] ? 0xffffffffff600000 [ 62.066084][ T6099] ? do_coredump+0x399c/0x4f10 [ 62.066095][ T6099] do_coredump+0x399c/0x4f10 [ 62.066113][ T6099] ? __pfx_do_coredump+0x10/0x10 [ 62.066125][ T6099] ? find_held_lock+0x2b/0x80 [ 62.066138][ T6099] ? is_bpf_text_address+0x8a/0x1a0 [ 62.066153][ T6099] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 62.066169][ T6099] ? is_bpf_text_address+0x94/0x1a0 [ 62.066181][ T6099] ? kernel_text_address+0x8d/0x100 [ 62.066193][ T6099] ? __kernel_text_address+0xd/0x40 [ 62.066204][ T6099] ? unwind_get_return_address+0x59/0xa0 [ 62.066223][ T6099] ? stack_depot_save_flags+0x28/0xa40 [ 62.066239][ T6099] ? __lock_acquire+0xb8a/0x1c90 [ 62.066250][ T6099] ? kasan_save_stack+0x42/0x60 [ 62.066262][ T6099] ? kasan_save_stack+0x33/0x60 [ 62.066275][ T6099] ? kasan_save_track+0x14/0x30 [ 62.066287][ T6099] ? kasan_save_free_info+0x3b/0x60 [ 62.066297][ T6099] ? __kasan_slab_free+0x51/0x70 [ 62.066310][ T6099] ? kmem_cache_free+0x2d1/0x4d0 [ 62.066322][ T6099] ? __sigqueue_free+0xba/0x2a0 [ 62.066336][ T6099] ? get_signal+0xcba/0x26d0 [ 62.066348][ T6099] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 62.066380][ T6099] ? proc_coredump_connector+0x2d1/0x4f0 [ 62.066392][ T6099] ? __pfx_proc_coredump_connector+0x10/0x10 [ 62.066407][ T6099] ? rcu_is_watching+0x12/0xc0 [ 62.066423][ T6099] get_signal+0x22e3/0x26d0 [ 62.066439][ T6099] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 62.066454][ T6099] ? __pfx_get_signal+0x10/0x10 [ 62.066471][ T6099] arch_do_signal_or_restart+0x8f/0x7d0 [ 62.066484][ T6099] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 62.066500][ T6099] ? exc_general_protection+0x1ba/0x230 [ 62.066515][ T6099] irqentry_exit_to_user_mode+0x12a/0x270 [ 62.066531][ T6099] asm_exc_general_protection+0x26/0x30 [ 62.066541][ T6099] RIP: 0033:0x7fe5b898e931 [ 62.066550][ T6099] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 62.066560][ T6099] RSP: 002b:0000200000000240 EFLAGS: 00010217 [ 62.066569][ T6099] RAX: 0000000000000000 RBX: 00007fe5b8bb6080 RCX: 00007fe5b898e929 [ 62.066575][ T6099] RDX: 0000200000000140 RSI: 0000200000000240 RDI: 0000000080080000 [ 62.066581][ T6099] RBP: 00007fe5b8a10b39 R08: 0000200000000340 R09: 0000200000000340 [ 62.066587][ T6099] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000000 [ 62.066593][ T6099] R13: 0000000000000000 R14: 00007fe5b8bb6080 R15: 00007ffc6fe5df28 [ 62.066607][ T6099] [ 62.066622][ T6099] memory: usage 307200kB, limit 307200kB, failcnt 24246 [ 62.237121][ T6099] memory+swap: usage 432008kB, limit 9007199254740988kB, failcnt 0 [ 62.240228][ T6099] kmem: usage 4684kB, limit 9007199254740988kB, failcnt 0 [ 62.242531][ T6099] Memory cgroup stats for /syz0: [ 62.242653][ T6099] cache 309407744 [ 62.245889][ T6099] rss 163840 [ 62.246984][ T6099] rss_huge 0 [ 62.248040][ T6099] shmem 309407744 [ 62.249263][ T6099] mapped_file 0 [ 62.250525][ T6099] dirty 0 [ 62.251507][ T6099] writeback 0 [ 62.252608][ T6099] workingset_refault_anon 134 [ 62.254610][ T6099] workingset_refault_file 9695 [ 62.256206][ T6099] swap 127930368 [ 62.257336][ T6099] swapcached 65536 [ 62.258516][ T6099] pgpgin 172603 [ 62.259704][ T6099] pgpgout 97022 [ 62.261018][ T6099] pgfault 10259 [ 62.262134][ T6099] pgmajfault 282 [ 62.263508][ T6099] inactive_anon 128946176 [ 62.265257][ T6099] active_anon 180633600 [ 62.266548][ T6099] inactive_file 0 [ 62.267674][ T6099] active_file 0 [ 62.268794][ T6099] unevictable 0 [ 62.270078][ T6099] hierarchical_memory_limit 314572800 [ 62.273220][ T6099] hierarchical_memsw_limit 9223372036854771712 [ 62.275205][ T6099] total_cache 309407744 [ 62.276526][ T6099] total_rss 163840 [ 62.277722][ T6099] total_rss_huge 0 [ 62.278919][ T6099] total_shmem 309407744 [ 62.280236][ T6099] total_mapped_file 0 [ 62.281504][ T6099] total_dirty 0 [ 62.282739][ T6099] total_writeback 0 [ 62.285174][ T6099] total_workingset_refault_anon 134 [ 62.286806][ T6099] total_workingset_refault_file 9695 [ 62.288464][ T6099] total_swap 127930368 [ 62.289737][ T6099] total_swapcached 65536 [ 62.291168][ T6099] total_pgpgin 172603 [ 62.292433][ T6099] total_pgpgout 97022 [ 62.293776][ T6099] total_pgfault 10259 [ 62.295094][ T6099] total_pgmajfault 282 [ 62.296885][ T6099] total_inactive_anon 128946176 [ 62.298672][ T6099] total_active_anon 180633600 [ 62.300173][ T6099] total_inactive_file 0 [ 62.301585][ T6099] total_active_file 0 [ 62.302893][ T6099] total_unevictable 0 [ 62.304889][ T6099] anon_cost 0 [ 62.305996][ T6099] file_cost 0 [ 62.307062][ T6099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.22,pid=6120,uid=0 [ 62.312662][ T6099] Memory cgroup out of memory: Killed process 6120 (syz.0.22) total-vm:98244kB, anon-rss:920kB, file-rss:28164kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 62.393264][ T6300] overlay: ./file0 is not a directory [ 62.433421][ T6303] Bluetooth: hci0: load_link_keys: too big key_count value 28530 [ 62.436765][ T6303] process 'syz.2.74' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 62.555053][ T5961] usb 7-1: USB disconnect, device number 2 [ 62.659648][ T6321] syz.3.79 uses obsolete (PF_INET,SOCK_PACKET) [ 62.664649][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 62.685811][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 62.700257][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 62.703270][ T6319] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 62.705789][ T6319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 62.729435][ T6321] Zero length message leads to an empty skb [ 62.817784][ T6337] overlay: Unknown parameter 'uid' [ 62.938177][ T6348] netlink: 'syz.3.85': attribute type 5 has an invalid length. [ 63.016345][ T6354] veth1_vlan: default FDB implementation only supports local addresses [ 63.253316][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 63.255468][ T5964] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.300677][ T6368] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.481671][ T6377] overlayfs: failed to get inode (-116) [ 63.494990][ T6377] overlayfs: failed to get inode (-116) [ 63.502285][ T6377] sp0: Synchronizing with TNC [ 63.505257][ T6377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.93'. [ 63.635791][ T6380] geneve2: entered promiscuous mode [ 63.641945][ T6380] geneve2: entered allmulticast mode [ 63.777180][ T5964] Bluetooth: hci1: Unable to find connection for big 0x6b [ 63.883099][ T6100] syz.0.22 (6100) used greatest stack depth: 17800 bytes left [ 64.009312][ T1027] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.062119][ T6405] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.065228][ T6405] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.068134][ T6405] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.070839][ T6405] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.136157][ T6410] o2cb: This node has not been configured. [ 64.138159][ T6410] o2cb: Cluster check failed. Fix errors before retrying. [ 64.140394][ T6410] (syz.1.105,6410,3):user_dlm_register:674 ERROR: status = -22 [ 64.142736][ T6410] (syz.1.105,6410,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 64.163162][ T1027] usb 7-1: Using ep0 maxpacket: 32 [ 64.166770][ T1027] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 64.175980][ T1027] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.179112][ T1027] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.181982][ T1027] usb 7-1: Product: syz [ 64.184188][ T1027] usb 7-1: Manufacturer: syz [ 64.185689][ T1027] usb 7-1: SerialNumber: syz [ 64.190483][ T1027] usb 7-1: config 0 descriptor?? [ 64.193589][ T6389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 64.197539][ T1027] hub 7-1:0.0: bad descriptor, ignoring hub [ 64.202125][ T1027] hub 7-1:0.0: probe with driver hub failed with error -5 [ 64.297803][ T6425] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.359334][ T6431] netlink: 'syz.0.111': attribute type 10 has an invalid length. [ 64.365522][ T6431] hsr_slave_0: entered allmulticast mode [ 64.367801][ T6431] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 64.370895][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 64.381328][ T6434] unsupported nlmsg_type 40 [ 64.383978][ T6435] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.464972][ T6444] trusted_key: syz.1.114 sent an empty control message without MSG_MORE. [ 64.498691][ T6449] libceph: resolve '40' (ret=-3): failed [ 64.519853][ T6442] capability: warning: `syz.0.115' uses deprecated v2 capabilities in a way that may be insecure [ 64.722390][ T6454] Cannot find add_set index 0 as target [ 64.793221][ T6389] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 64.965931][ T6443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 65.081027][ T6467] __nla_validate_parse: 6 callbacks suppressed [ 65.081039][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 65.086784][ T6467] bridge_slave_1: left allmulticast mode [ 65.088539][ T6467] bridge_slave_1: left promiscuous mode [ 65.091088][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.098031][ T6467] bridge_slave_0: left allmulticast mode [ 65.100407][ T6467] bridge_slave_0: left promiscuous mode [ 65.102936][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.220899][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 65.264036][ T839] hid-generic 0005:0B57:0007.0003: collection stack underflow [ 65.266719][ T839] hid-generic 0005:0B57:0007.0003: item 0 0 0 12 parsing failed [ 65.269956][ T839] hid-generic 0005:0B57:0007.0003: probe with driver hid-generic failed with error -22 [ 65.349795][ T6477] hub 9-0:1.0: USB hub found [ 65.352202][ T6477] hub 9-0:1.0: 1 port detected [ 65.715409][ T6496] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 65.718234][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 65.745428][ T9] raw-gadget.0 gadget.2: failed to queue suspend event [ 65.813830][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 65.823037][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.827050][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.834551][ T9] raw-gadget.0 gadget.2: failed to queue suspend event [ 65.870933][ T6516] 9pnet_fd: p9_fd_create_tcp (6516): problem connecting socket to 127.0.0.1 [ 65.903357][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 65.924943][ T29] raw-gadget.0 gadget.2: failed to queue suspend event [ 65.993200][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 66.008135][ T6524] mac80211_hwsim hwsim3 `ëÿÿ: renamed from wlan1 (while UP) [ 66.021282][ T29] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.063181][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.068687][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 66.080691][ T6529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.094597][ T6529] bond1: (slave batadv1): Opening slave failed [ 66.103873][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 66.133824][ T29] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.157406][ T6537] Cannot find add_set index 0 as target [ 66.204457][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 66.224143][ T9] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.251058][ T6540] netlink: 112 bytes leftover after parsing attributes in process `syz.3.145'. [ 66.254250][ T6540] netlink: 112 bytes leftover after parsing attributes in process `syz.3.145'. [ 66.294550][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 66.297772][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 66.314478][ T9] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.375902][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 66.375917][ T40] audit: type=1400 audit(1751901880.422:318): avc: denied { bind } for pid=6555 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.387953][ T40] audit: type=1400 audit(1751901880.432:319): avc: denied { write } for pid=6555 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.393428][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 66.393957][ T40] audit: type=1400 audit(1751901880.452:320): avc: denied { write } for pid=6555 comm="syz.3.151" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.414884][ T29] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.419626][ T40] audit: type=1400 audit(1751901880.472:321): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.427070][ T40] audit: type=1400 audit(1751901880.472:322): avc: denied { connect } for pid=6560 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.493264][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 66.512822][ T6566] tipc: Started in network mode [ 66.515180][ T6566] tipc: Node identity ac1414aa, cluster identity 4711 [ 66.517626][ T1027] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.520284][ T6566] tipc: Enabled bearer , priority 10 [ 66.524193][ T6566] tipc: Enabled bearer , priority 0 [ 66.557999][ T40] audit: type=1400 audit(1751901880.612:323): avc: denied { mount } for pid=6567 comm="syz.3.154" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.566093][ T40] audit: type=1400 audit(1751901880.612:324): avc: denied { mounton } for pid=6567 comm="syz.3.154" path="/49/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 66.569207][ T6571] overlayfs: maximum fs stacking depth exceeded [ 66.572984][ T40] audit: type=1400 audit(1751901880.622:325): avc: denied { sqpoll } for pid=6567 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.583017][ T6572] cgroup: fork rejected by pids controller in /syz3 [ 66.584990][ T6571] overlayfs: maximum fs stacking depth exceeded [ 66.605356][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 66.624831][ T29] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.634140][ T40] audit: type=1400 audit(1751901880.692:326): avc: denied { read } for pid=6695 comm="syz.0.156" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.642741][ T40] audit: type=1400 audit(1751901880.692:327): avc: denied { open } for pid=6695 comm="syz.0.156" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.703187][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 66.724139][ T9] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.793529][ T6389] raw-gadget.0 gadget.2: failed to queue resume event [ 66.810371][ T6707] overlay: ./file0 is not a directory [ 66.817101][ T9] raw-gadget.0 gadget.2: failed to queue suspend event [ 66.825297][ T6389] raw-gadget.0 gadget.2: failed to queue disconnect event [ 66.834346][ T29] usb 7-1: USB disconnect, device number 3 [ 66.851821][ T6737] tmpfs: Bad value for 'mpol' [ 67.111421][ T6756] veth0_to_batadv: entered allmulticast mode [ 67.278512][ T6777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.170'. [ 67.282811][ T6777] program syz.2.170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.297288][ T5964] Bluetooth: hci0: Malformed LE Event: 0x0b [ 67.337846][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 67.348348][ T6786] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.351711][ T6786] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.354812][ T6786] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.357433][ T6786] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.360689][ T6786] vxlan0: entered promiscuous mode [ 67.544411][ T1027] tipc: Node number set to 2886997162 [ 67.603166][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.763268][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 67.767438][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 67.770875][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.775243][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.779105][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.782979][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.793170][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.797328][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.803183][ T1027] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.953332][ T1027] usb 6-1: Using ep0 maxpacket: 32 [ 67.957263][ T1027] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 67.960529][ T1027] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 67.965208][ T1027] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 67.969724][ T1027] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 67.975406][ T1027] usb 6-1: config 0 interface 0 has no altsetting 0 [ 67.980208][ T1027] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 67.984140][ T1027] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 67.987713][ T1027] usb 6-1: Product: syz [ 67.989515][ T1027] usb 6-1: Manufacturer: syz [ 67.991545][ T1027] usb 6-1: SerialNumber: syz [ 67.995384][ T1027] usb 6-1: config 0 descriptor?? [ 68.000285][ T1027] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 68.008544][ T9] usb 7-1: usb_control_msg returned -32 [ 68.010346][ T9] usbtmc 7-1:16.0: can't read capabilities [ 68.012717][ T1027] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 68.443277][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 68.632027][ T29] usb 6-1: USB disconnect, device number 4 [ 68.636811][ T29] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 68.952001][ T6828] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 68.993135][ T6831] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 69.079660][ T6838] ptrace attach of "/syz-executor exec"[5947] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 69.134039][ T6844] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 69.164800][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 69.177858][ T6844] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 69.180573][ T6844] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 69.574482][ T6873] mmap: syz.1.195 (6873) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.687541][ T6878] netlink: 'syz.0.197': attribute type 1 has an invalid length. [ 69.688803][ T6880] 8021q: VLANs not supported on gre0 [ 69.905128][ T6897] program syz.1.201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.954686][ T1106] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 69.957180][ T1106] ata1.00: irq_stat 0x40000000 [ 69.958804][ T1106] ata1.00: failed command: ZAC MANAGEMENT OUT [ 69.960821][ T1106] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 25 [ 69.960821][ T1106] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 69.966101][ T1106] ata1.00: status: { DRDY ERR } [ 69.967689][ T1106] ata1.00: error: { ABRT } [ 69.969140][ T1106] ata1.00: device reported invalid CHS sector 0 [ 70.012875][ T6033] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 70.024629][ T6033] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 70.117441][ T6910] PM: Enabling pm_trace changes system date and time during resume. [ 70.117441][ T6910] PM: Correct system time has to be restored manually after resume. [ 70.126112][ T6910] __nla_validate_parse: 3 callbacks suppressed [ 70.126122][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 70.131807][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 70.215828][ T5964] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 70.219513][ T5964] Bluetooth: hci2: Injecting HCI hardware error event [ 70.223154][ T63] Bluetooth: hci2: hardware error 0x00 [ 70.276076][ T1027] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.278434][ T6912] NILFS (nullb0): couldn't find nilfs on the device [ 70.292110][ T6033] usb 7-1: USB disconnect, device number 4 [ 70.306820][ T6914] xt_l2tp: invalid flags combination: c [ 70.423892][ T1027] usb 8-1: Using ep0 maxpacket: 16 [ 70.428307][ T1027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 70.433295][ T1027] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 70.436359][ T1027] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.438766][ T1027] usb 8-1: Product: syz [ 70.440083][ T1027] usb 8-1: Manufacturer: syz [ 70.441516][ T1027] usb 8-1: SerialNumber: syz [ 70.446223][ T1027] usb 8-1: config 0 descriptor?? [ 70.450620][ T1027] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 70.453566][ T1027] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 70.463377][ T6925] fuse: Unknown parameter 'ghoup_kd' [ 70.465506][ T6926] fuse: Unknown parameter 'ghoup_kd' [ 70.624930][ T1106] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 70.627062][ T1106] ata1: failed to read log page 10h (errno=-5) [ 70.628947][ T1106] ata1.00: exception Emask 0x1 SAct 0x400 SErr 0x0 action 0x0 [ 70.631208][ T1106] ata1.00: irq_stat 0x40000000 [ 70.632720][ T1106] ata1.00: failed command: WRITE FPDMA QUEUED [ 70.635430][ T1106] ata1.00: cmd 61/08:50:36:2f:07/00:00:00:00:00/40 tag 10 ncq dma 4096 out [ 70.635430][ T1106] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 70.641243][ T1106] ata1.00: status: { DRDY } [ 70.645222][ T1106] ata1.00: configured for UDMA/100 [ 70.647131][ T1106] ata1: EH complete [ 70.713460][ T1027] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 70.784635][ T1027] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 70.793236][ T1027] em28xx 8-1:0.0: board has no eeprom [ 70.854587][ T1027] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 70.857404][ T1027] em28xx 8-1:0.0: dvb set to bulk mode. [ 70.862072][ T59] em28xx 8-1:0.0: Binding DVB extension [ 70.870981][ T6957] program syz.1.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.874457][ T1027] usb 8-1: USB disconnect, device number 2 [ 70.874964][ T6957] ata1.00: invalid service action 31 [ 70.887933][ T1027] em28xx 8-1:0.0: Disconnecting em28xx [ 70.897508][ T6957] program syz.1.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.913511][ T59] em28xx 8-1:0.0: Registering input extension [ 70.915936][ T1027] em28xx 8-1:0.0: Closing input extension [ 70.925981][ T1027] em28xx 8-1:0.0: Freeing device [ 70.928732][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 70.948696][ T6963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.096509][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.098460][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.182182][ T6985] syzkaller0: entered allmulticast mode [ 71.298238][ T7005] netlink: 48 bytes leftover after parsing attributes in process `syz.0.228'. [ 71.463308][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 71.613432][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 71.621800][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 71.630326][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 71.634175][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 71.637257][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 71.637267][ T40] audit: type=1400 audit(1751901885.692:372): avc: denied { mounton } for pid=7017 comm="syz.0.233" path="/54/file0" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.637478][ T9] usb 7-1: Product: syz [ 71.652926][ T9] usb 7-1: Manufacturer: syz [ 71.654946][ T9] usb 7-1: SerialNumber: syz [ 71.661263][ T9] usb 7-1: config 0 descriptor?? [ 71.665505][ T6996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.670128][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 71.672679][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 71.678058][ T40] audit: type=1400 audit(1751901885.732:373): avc: denied { setopt } for pid=7021 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.687760][ T7022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.234'. [ 71.691492][ T7022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.234'. [ 71.869047][ T40] audit: type=1400 audit(1751901885.922:374): avc: denied { listen } for pid=7035 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 71.905353][ T40] audit: type=1400 audit(1751901885.962:375): avc: denied { remount } for pid=7040 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.996787][ T40] audit: type=1400 audit(1751901886.052:376): avc: denied { write } for pid=7053 comm="syz.0.244" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 72.116002][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 72.119069][ T7060] netlink: 5 bytes leftover after parsing attributes in process `syz.1.245'. [ 72.149133][ T40] audit: type=1400 audit(1751901886.202:377): avc: denied { getopt } for pid=7062 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.293232][ T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 72.293276][ T6996] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 72.378281][ T40] audit: type=1400 audit(1751901886.432:378): avc: denied { map } for pid=7066 comm="syz.3.248" path="socket:[11877]" dev="sockfs" ino=11877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.386032][ T40] audit: type=1400 audit(1751901886.432:379): avc: denied { read accept } for pid=7066 comm="syz.3.248" path="socket:[11877]" dev="sockfs" ino=11877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.403135][ T838] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 72.475327][ T7045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.557067][ T838] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.560633][ T838] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.564963][ T838] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.568639][ T838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 72.572846][ T838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 72.578044][ T838] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.580892][ T838] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.584262][ T838] usb 6-1: Product: syz [ 72.585572][ T838] usb 6-1: Manufacturer: syz [ 72.591699][ T838] cdc_wdm 6-1:1.0: skipping garbage [ 72.593520][ T838] cdc_wdm 6-1:1.0: skipping garbage [ 72.596546][ T838] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 72.598860][ T838] cdc_wdm 6-1:1.0: Unknown control protocol [ 72.651415][ T40] audit: type=1400 audit(1751901886.702:380): avc: denied { listen } for pid=7074 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.658710][ T40] audit: type=1400 audit(1751901886.712:381): avc: denied { getopt } for pid=7074 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.714439][ T7075] sd 0:0:0:0: PR command failed: 1026 [ 72.716167][ T7075] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 72.718178][ T7075] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 73.214102][ T839] raw-gadget.0 gadget.2: failed to queue suspend event [ 73.283204][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 73.304854][ T839] raw-gadget.0 gadget.2: failed to queue suspend event [ 73.340796][ T7087] block device autoloading is deprecated and will be removed. [ 73.344599][ T7085] md: md2 stopped. [ 73.373277][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 73.394048][ T839] raw-gadget.0 gadget.2: failed to queue suspend event [ 73.397815][ T7083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.246'. [ 73.463165][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 73.483878][ T839] raw-gadget.0 gadget.2: failed to queue suspend event [ 73.553174][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 73.574199][ T5961] raw-gadget.0 gadget.2: failed to queue suspend event [ 73.643362][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 73.675096][ T5961] raw-gadget.0 gadget.2: failed to queue suspend event [ 73.743166][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 73.761261][ T7095] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 73.763892][ T839] raw-gadget.0 gadget.2: failed to queue suspend event [ 73.777501][ T7095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.833826][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 73.853973][ T839] raw-gadget.0 gadget.2: failed to queue suspend event [ 73.923267][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 73.943837][ T839] raw-gadget.0 gadget.2: failed to queue suspend event [ 74.023224][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 74.053856][ T59] raw-gadget.0 gadget.2: failed to queue suspend event [ 74.123164][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 74.143831][ T839] raw-gadget.0 gadget.2: failed to queue suspend event [ 74.213170][ T6996] raw-gadget.0 gadget.2: failed to queue resume event [ 74.245754][ T839] raw-gadget.0 gadget.2: failed to queue suspend event [ 74.259078][ T6996] raw-gadget.0 gadget.2: failed to queue disconnect event [ 74.264128][ T6033] usb 7-1: USB disconnect, device number 5 [ 74.400051][ T7113] misc userio: Begin command sent, but we're already running [ 74.402514][ T7113] misc userio: Begin command sent, but we're already running [ 74.406298][ T7113] misc userio: Begin command sent, but we're already running [ 74.408841][ T7113] misc userio: Begin command sent, but we're already running [ 74.411035][ T7113] misc userio: Begin command sent, but we're already running [ 74.415506][ T7113] misc userio: Begin command sent, but we're already running [ 74.417749][ T7113] misc userio: Begin command sent, but we're already running [ 74.420047][ T7113] misc userio: Begin command sent, but we're already running [ 74.422289][ T7113] misc userio: Begin command sent, but we're already running [ 74.424693][ T7113] misc userio: Begin command sent, but we're already running [ 74.426967][ T7113] misc userio: Begin command sent, but we're already running [ 74.429307][ T7113] misc userio: Begin command sent, but we're already running [ 74.431604][ T7113] misc userio: Begin command sent, but we're already running [ 74.434374][ T7113] misc userio: Begin command sent, but we're already running [ 74.436818][ T7113] misc userio: Begin command sent, but we're already running [ 74.439137][ T7113] misc userio: Begin command sent, but we're already running [ 74.441454][ T7113] misc userio: Begin command sent, but we're already running [ 74.443996][ T7113] misc userio: Begin command sent, but we're already running [ 74.446319][ T7113] misc userio: Begin command sent, but we're already running [ 74.448908][ T7113] misc userio: Begin command sent, but we're already running [ 74.451361][ T7113] misc userio: Begin command sent, but we're already running [ 74.471756][ T7119] tipc: Started in network mode [ 74.473900][ T7119] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 74.476371][ T7119] tipc: Enabled bearer , priority 10 [ 74.478716][ T7119] mac80211_hwsim hwsim5 `ëÿÿ: renamed from wlan1 (while UP) [ 74.843183][ T59] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.933338][ T1027] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.993165][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 74.996140][ T59] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 75.000840][ T59] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 75.004281][ T59] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 75.006868][ T59] usb 7-1: Product: syz [ 75.008242][ T59] usb 7-1: Manufacturer: syz [ 75.009821][ T59] usb 7-1: SerialNumber: syz [ 75.012838][ T59] usb 7-1: config 0 descriptor?? [ 75.015233][ T7130] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.018313][ T59] hub 7-1:0.0: bad descriptor, ignoring hub [ 75.020352][ T59] hub 7-1:0.0: probe with driver hub failed with error -5 [ 75.083194][ T1027] usb 8-1: Using ep0 maxpacket: 32 [ 75.086036][ T1027] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 75.090659][ T1027] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 75.093615][ T1027] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 75.096224][ T1027] usb 8-1: Product: syz [ 75.097987][ T1027] usb 8-1: Manufacturer: syz [ 75.099843][ T1027] usb 8-1: SerialNumber: syz [ 75.103472][ T1027] usb 8-1: config 0 descriptor?? [ 75.105783][ T7135] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 75.109911][ T1027] hub 8-1:0.0: bad descriptor, ignoring hub [ 75.112401][ T1027] hub 8-1:0.0: probe with driver hub failed with error -5 [ 75.117476][ T1027] chaoskey 8-1:0.0: Unable to register with hwrng [ 75.163472][ T839] usb 6-1: USB disconnect, device number 5 [ 75.193492][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.219505][ T7130] FAULT_INJECTION: forcing a failure. [ 75.219505][ T7130] name failslab, interval 1, probability 0, space 0, times 1 [ 75.225565][ T7130] CPU: 3 UID: 0 PID: 7130 Comm: syz.2.265 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 75.225590][ T7130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.225602][ T7130] Call Trace: [ 75.225607][ T7130] [ 75.225614][ T7130] dump_stack_lvl+0x16c/0x1f0 [ 75.225673][ T7130] should_fail_ex+0x512/0x640 [ 75.225702][ T7130] ? fs_reclaim_acquire+0xae/0x150 [ 75.225722][ T7130] should_failslab+0xc2/0x120 [ 75.225749][ T7130] __kmalloc_cache_noprof+0x6a/0x3e0 [ 75.225770][ T7130] ? hub_ext_port_status+0x5e/0x670 [ 75.225809][ T7130] ? usb_control_msg+0xbc/0x4a0 [ 75.225831][ T7130] usb_control_msg+0xbc/0x4a0 [ 75.225849][ T7130] ? __pfx_usb_control_msg+0x10/0x10 [ 75.225865][ T7130] ? is_bpf_text_address+0x8a/0x1a0 [ 75.225894][ T7130] hub_ext_port_status+0x14e/0x670 [ 75.225929][ T7130] hub_activate+0x6e5/0x1d60 [ 75.225954][ T7130] ? __pfx_hub_activate+0x10/0x10 [ 75.225970][ T7130] ? find_held_lock+0x2b/0x80 [ 75.225993][ T7130] ? usbdev_open+0x6e0/0x8b0 [ 75.226017][ T7130] ? usbfs_notify_resume+0x25/0xf0 [ 75.226049][ T7130] hub_resume+0xa8/0x3f0 [ 75.226067][ T7130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.226094][ T7130] ? __pfx_hub_resume+0x10/0x10 [ 75.226111][ T7130] ? __pfx_hcd_bus_resume+0x10/0x10 [ 75.226139][ T7130] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 75.226165][ T7130] usb_resume_both+0x273/0x800 [ 75.226188][ T7130] ? __pfx_usb_resume_both+0x10/0x10 [ 75.226212][ T7130] ? mark_held_locks+0x49/0x80 [ 75.226239][ T7130] ? __pfx_usb_runtime_resume+0x10/0x10 [ 75.226263][ T7130] __rpm_callback+0xc5/0x610 [ 75.226289][ T7130] ? __pfx_usb_runtime_resume+0x10/0x10 [ 75.226313][ T7130] rpm_callback+0x1b7/0x200 [ 75.226334][ T7130] ? __pfx_usb_runtime_resume+0x10/0x10 [ 75.226357][ T7130] rpm_resume+0xd0a/0x1310 [ 75.226385][ T7130] ? __pfx_rpm_resume+0x10/0x10 [ 75.226408][ T7130] ? do_raw_spin_lock+0x12c/0x2b0 [ 75.226428][ T7130] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 75.226446][ T7130] ? rpm_resume+0x632/0x1310 [ 75.226473][ T7130] rpm_resume+0x744/0x1310 [ 75.226502][ T7130] ? __pfx_rpm_resume+0x10/0x10 [ 75.226525][ T7130] ? do_raw_spin_lock+0x12c/0x2b0 [ 75.226544][ T7130] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 75.226563][ T7130] ? rpm_resume+0x632/0x1310 [ 75.226591][ T7130] rpm_resume+0x744/0x1310 [ 75.226621][ T7130] ? __pfx_rpm_resume+0x10/0x10 [ 75.226643][ T7130] ? do_raw_spin_lock+0x12c/0x2b0 [ 75.226662][ T7130] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 75.226688][ T7130] ? __mutex_trylock_common+0xe9/0x250 [ 75.226715][ T7130] __pm_runtime_resume+0xb6/0x170 [ 75.226742][ T7130] usb_autopm_get_interface+0x20/0xe0 [ 75.226767][ T7130] _chaoskey_fill+0x28d/0x8e0 [ 75.226796][ T7130] ? chaoskey_read+0x254/0x610 [ 75.226823][ T7130] ? __pfx__chaoskey_fill+0x10/0x10 [ 75.226847][ T7130] ? __pfx___mutex_lock+0x10/0x10 [ 75.226872][ T7130] ? __pfx_autoremove_wake_function+0x10/0x10 [ 75.226899][ T7130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.226927][ T7130] ? get_pid_task+0xfc/0x250 [ 75.226952][ T7130] chaoskey_read+0x2e3/0x610 [ 75.226983][ T7130] ? __pfx_chaoskey_read+0x10/0x10 [ 75.227010][ T7130] vfs_read+0x1e1/0xc60 [ 75.227038][ T7130] ? __pfx_vfs_read+0x10/0x10 [ 75.227057][ T7130] ? find_held_lock+0x2b/0x80 [ 75.227079][ T7130] ? __fget_files+0x204/0x3c0 [ 75.227107][ T7130] ? __fget_files+0x20e/0x3c0 [ 75.227138][ T7130] ksys_read+0x12a/0x250 [ 75.227160][ T7130] ? __pfx_ksys_read+0x10/0x10 [ 75.227190][ T7130] do_syscall_64+0xcd/0x4c0 [ 75.227216][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.227235][ T7130] RIP: 0033:0x7fb92338e929 [ 75.227249][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.227267][ T7130] RSP: 002b:00007fb924154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.227284][ T7130] RAX: ffffffffffffffda RBX: 00007fb9235b5fa0 RCX: 00007fb92338e929 [ 75.227295][ T7130] RDX: 00000000000000bc RSI: 0000200000000000 RDI: 0000000000000004 [ 75.227306][ T7130] RBP: 00007fb924154090 R08: 0000000000000000 R09: 0000000000000000 [ 75.227316][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.227326][ T7130] R13: 0000000000000000 R14: 00007fb9235b5fa0 R15: 00007ffed2f80c88 [ 75.227351][ T7130] [ 75.227503][ T7130] hub 7-0:1.0: hub_ext_port_status failed (err = -12) [ 75.363423][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 75.391931][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 75.396800][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 75.399495][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 75.401880][ T9] usb 5-1: Product: syz [ 75.403170][ T9] usb 5-1: Manufacturer: syz [ 75.404688][ T9] usb 5-1: SerialNumber: syz [ 75.408066][ T9] usb 5-1: config 0 descriptor?? [ 75.410129][ T7140] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 75.413156][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 75.414998][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 75.483190][ T838] tipc: Node number set to 10136234 [ 75.613185][ T7130] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 75.776950][ T7130] usb 7-1: device firmware changed [ 75.780567][ T839] usb usb7-port1: device 7-1 not suspended yet [ 75.782779][ T9] chaoskey 5-1:0.0: Unable to register with hwrng [ 75.805070][ T9] usb 5-1: USB disconnect, device number 2 [ 75.808258][ T1027] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 75.957951][ T1027] usb 8-1: device firmware changed [ 75.961612][ T1027] usb 8-1: USB disconnect, device number 3 [ 76.193171][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.263231][ T1027] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.343272][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 76.347073][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 76.354806][ T9] usb 5-1: string descriptor 0 read error: -22 [ 76.357024][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 76.359872][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 76.364236][ T9] usb 5-1: config 0 descriptor?? [ 76.366995][ T7140] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 76.371016][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 76.373633][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 76.422521][ T1027] usb 8-1: Using ep0 maxpacket: 32 [ 76.425518][ T1027] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 76.432409][ T1027] usb 8-1: string descriptor 0 read error: -22 [ 76.432739][ T7154] loop3: detected capacity change from 0 to 1 [ 76.435452][ T1027] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 76.441423][ T7154] Dev loop3: unable to read RDB block 1 [ 76.441647][ T1027] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 76.443757][ T7154] loop3: unable to read partition table [ 76.450224][ T7154] loop3: partition table beyond EOD, truncated [ 76.451615][ T1027] usb 8-1: config 0 descriptor?? [ 76.453591][ T7154] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 76.459280][ T7147] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 76.462562][ T1027] hub 8-1:0.0: bad descriptor, ignoring hub [ 76.464584][ T1027] hub 8-1:0.0: probe with driver hub failed with error -5 [ 76.470827][ T1027] chaoskey 8-1:0.0: Unable to register with hwrng [ 76.667143][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 76.683376][ T839] usb 5-1: USB disconnect, device number 3 [ 76.773383][ T1027] usb 8-1: USB disconnect, device number 4 [ 76.843394][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 77.109813][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 77.109829][ T40] audit: type=1400 audit(1751901891.162:395): avc: denied { append } for pid=7163 comm="syz.0.275" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.179993][ T7173] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 77.180115][ T7172] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 77.198230][ T7172] bond3: entered promiscuous mode [ 77.200519][ T7172] bond3: entered allmulticast mode [ 77.202866][ T7172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 77.211532][ T7172] bridge0: entered promiscuous mode [ 77.213830][ T7172] bridge0: entered allmulticast mode [ 77.216351][ T7172] bond3: (slave bridge0): Enslaving as a backup interface with an up link [ 77.217044][ T40] audit: type=1400 audit(1751901891.272:396): avc: denied { bind } for pid=7175 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.219311][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 77.305659][ T6721] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 77.310795][ T7177] hsr_slave_0 (unregistering): left promiscuous mode [ 77.379486][ T40] audit: type=1400 audit(1751901891.432:397): avc: denied { rename } for pid=7169 comm="syz.1.277" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 77.413608][ T6721] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 77.468079][ T7189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.638297][ T40] audit: type=1400 audit(1751901891.692:398): avc: denied { listen } for pid=7200 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.646582][ T40] audit: type=1400 audit(1751901891.692:399): avc: denied { accept } for pid=7200 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.657721][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 77.703253][ T6176] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 77.723996][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 77.883146][ T6176] usb 8-1: Using ep0 maxpacket: 32 [ 77.900079][ T6176] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 77.906699][ T6176] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 77.909974][ T6176] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 77.912617][ T6176] usb 8-1: Product: syz [ 77.914614][ T6176] usb 8-1: Manufacturer: syz [ 77.917165][ T6176] usb 8-1: SerialNumber: syz [ 77.931464][ T6176] usb 8-1: config 0 descriptor?? [ 77.937286][ T7190] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 77.941471][ T6176] hub 8-1:0.0: bad descriptor, ignoring hub [ 77.944271][ T6176] hub 8-1:0.0: probe with driver hub failed with error -5 [ 77.949502][ T6176] chaoskey 8-1:0.0: Unable to register with hwrng [ 78.131401][ T40] audit: type=1400 audit(1751901892.182:400): avc: denied { ioctl } for pid=7225 comm="syz.1.288" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.433175][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 78.433597][ T5961] usb 8-1: USB disconnect, device number 5 [ 78.583155][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 78.587194][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 78.595797][ T34] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 78.599815][ T34] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 78.603442][ T34] usb 6-1: Product: syz [ 78.605206][ T34] usb 6-1: Manufacturer: syz [ 78.607236][ T34] usb 6-1: SerialNumber: syz [ 78.615157][ T34] usb 6-1: config 0 descriptor?? [ 78.617642][ T7229] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.620829][ T34] hub 6-1:0.0: bad descriptor, ignoring hub [ 78.622951][ T34] hub 6-1:0.0: probe with driver hub failed with error -5 [ 78.627022][ T34] chaoskey 6-1:0.0: Unable to register with hwrng [ 78.754674][ T7238] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 79.031320][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 79.035152][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 79.065462][ T7266] block device autoloading is deprecated and will be removed. [ 79.118059][ T40] audit: type=1400 audit(1751901893.172:401): avc: denied { ioctl } for pid=7273 comm="syz.0.300" path="ipc:[4026533063]" dev="nsfs" ino=4026533063 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.119769][ T7265] md2: using deprecated bitmap file support [ 79.129771][ T7265] md2: error: failed to get bitmap file [ 79.147834][ T40] audit: type=1400 audit(1751901893.202:402): avc: denied { write } for pid=7276 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.263209][ T6176] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 79.410916][ T7293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.419678][ T6176] usb 6-1: device firmware changed [ 79.422460][ T6176] usb 6-1: USB disconnect, device number 6 [ 79.603163][ T1027] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.619581][ T40] audit: type=1400 audit(1751901893.672:403): avc: denied { write } for pid=7299 comm="syz.2.305" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.619732][ T7300] random: crng reseeded on system resumption [ 79.628998][ T40] audit: type=1400 audit(1751901893.672:404): avc: denied { open } for pid=7299 comm="syz.2.305" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.642929][ T7300] Restarting kernel threads ... [ 79.646167][ T7300] Done restarting kernel threads. [ 79.723304][ T6176] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 79.744499][ T7307] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 79.763170][ T1027] usb 8-1: Using ep0 maxpacket: 32 [ 79.766821][ T1027] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 79.767173][ T7307] macvlan0: entered promiscuous mode [ 79.772812][ T7307] macvlan0: entered allmulticast mode [ 79.774821][ T1027] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 79.774845][ T1027] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 79.774861][ T1027] usb 8-1: Product: syz [ 79.774873][ T1027] usb 8-1: Manufacturer: syz [ 79.774887][ T1027] usb 8-1: SerialNumber: syz [ 79.776967][ T1027] usb 8-1: config 0 descriptor?? [ 79.778869][ T7307] bond4: entered promiscuous mode [ 79.782244][ T7284] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.783265][ T7307] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 79.786462][ T1027] hub 8-1:0.0: bad descriptor, ignoring hub [ 79.798982][ T1027] hub 8-1:0.0: probe with driver hub failed with error -5 [ 79.802065][ T7307] bond4: left promiscuous mode [ 79.802596][ T1027] chaoskey 8-1:0.0: Unable to register with hwrng [ 79.883202][ T6176] usb 6-1: Using ep0 maxpacket: 32 [ 79.886908][ T6176] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 79.893899][ T6176] usb 6-1: string descriptor 0 read error: -22 [ 79.896642][ T6176] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 79.900340][ T6176] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 79.913720][ T6176] usb 6-1: config 0 descriptor?? [ 79.916615][ T7229] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.920694][ T6176] hub 6-1:0.0: bad descriptor, ignoring hub [ 79.925559][ T6176] hub 6-1:0.0: probe with driver hub failed with error -5 [ 80.233364][ T6176] usb 6-1: USB disconnect, device number 7 [ 80.273462][ T34] usb 8-1: USB disconnect, device number 6 [ 80.726877][ T7322] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.729908][ T7322] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 80.751735][ T7322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.775226][ T7322] gretap1: entered promiscuous mode [ 81.133141][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.223162][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 81.293186][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 81.297185][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 81.303165][ T24] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.306769][ T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 81.309946][ T24] usb 6-1: Product: syz [ 81.311684][ T24] usb 6-1: Manufacturer: syz [ 81.313591][ T24] usb 6-1: SerialNumber: syz [ 81.316733][ T24] usb 6-1: config 0 descriptor?? [ 81.320034][ T7341] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.324561][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 81.326495][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 81.331472][ T24] chaoskey 6-1:0.0: Unable to register with hwrng [ 81.331493][ T10] cfg80211: failed to load regulatory.db [ 81.383980][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 81.385002][ T7367] ======================================================= [ 81.385002][ T7367] WARNING: The mand mount option has been deprecated and [ 81.385002][ T7367] and is ignored by this kernel. Remove the mand [ 81.385002][ T7367] option from the mount to silence this warning. [ 81.385002][ T7367] ======================================================= [ 81.387407][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 81.404851][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.407678][ T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 81.410206][ T9] usb 8-1: Product: syz [ 81.411553][ T9] usb 8-1: Manufacturer: syz [ 81.413029][ T9] usb 8-1: SerialNumber: syz [ 81.416946][ T9] usb 8-1: config 0 descriptor?? [ 81.419094][ T7351] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.422432][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 81.424422][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 81.428089][ T9] chaoskey 8-1:0.0: Unable to register with hwrng [ 81.465388][ T7366] /dev/sr0: Can't open blockdev [ 81.584787][ T7367] /dev/sr0: Can't open blockdev [ 81.633798][ T7373] fuse: Unknown parameter 'ub×FUCÙÜ?4S¨/.ðòç‹DcüÝ:*¬„ù·Iê' [ 81.803266][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 81.803300][ T5964] Bluetooth: hci4: command 0x1003 tx timeout [ 81.913205][ T34] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 81.963560][ T839] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 82.063202][ T838] usb 8-1: reset high-speed USB device number 7 using dummy_hcd [ 82.075332][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.078720][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 82.082088][ T34] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 82.085074][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.088918][ T34] usb 5-1: config 0 descriptor?? [ 82.090897][ T7375] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 82.126720][ T839] usb 6-1: device firmware changed [ 82.128638][ T839] usb 6-1: USB disconnect, device number 8 [ 82.217293][ T838] usb 8-1: device firmware changed [ 82.220256][ T838] usb 8-1: USB disconnect, device number 7 [ 82.296659][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 82.298583][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 82.302709][ T34] usb 5-1: USB disconnect, device number 4 [ 82.423309][ T839] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 82.543194][ T838] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 82.583124][ T839] usb 6-1: Using ep0 maxpacket: 32 [ 82.586021][ T839] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 82.591321][ T839] usb 6-1: string descriptor 0 read error: -22 [ 82.593517][ T839] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.596461][ T839] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.601114][ T839] usb 6-1: config 0 descriptor?? [ 82.606154][ T7341] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 82.610007][ T839] hub 6-1:0.0: bad descriptor, ignoring hub [ 82.611905][ T839] hub 6-1:0.0: probe with driver hub failed with error -5 [ 82.713367][ T838] usb 8-1: Using ep0 maxpacket: 32 [ 82.716486][ T838] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 82.721780][ T838] usb 8-1: string descriptor 0 read error: -22 [ 82.723908][ T838] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.726744][ T838] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.731021][ T838] usb 8-1: config 0 descriptor?? [ 82.733401][ T7351] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 82.736374][ T838] hub 8-1:0.0: bad descriptor, ignoring hub [ 82.738241][ T838] hub 8-1:0.0: probe with driver hub failed with error -5 [ 82.742526][ T838] chaoskey 8-1:0.0: Unable to register with hwrng [ 82.794302][ T7384] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 82.832529][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 82.832540][ T40] audit: type=1400 audit(1751901896.882:418): avc: denied { module_request } for pid=7385 comm="syz.0.336" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.842979][ T40] audit: type=1400 audit(1751901896.882:419): avc: denied { module_request } for pid=7388 comm="syz.2.337" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.868785][ T40] audit: type=1400 audit(1751901896.922:420): avc: denied { write } for pid=7385 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.933400][ T839] usb 6-1: USB disconnect, device number 9 [ 83.021150][ T40] audit: type=1400 audit(1751901897.072:421): avc: denied { append } for pid=7404 comm="syz.2.338" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.022762][ T7405] loop6: detected capacity change from 0 to 524287999 [ 83.054224][ T9] usb 8-1: USB disconnect, device number 8 [ 83.093331][ T40] audit: type=1400 audit(1751901897.142:422): avc: denied { map } for pid=7406 comm="syz.0.339" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 83.185235][ T40] audit: type=1400 audit(1751901897.242:423): avc: denied { read } for pid=7411 comm="syz.0.340" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.193050][ T40] audit: type=1400 audit(1751901897.242:424): avc: denied { open } for pid=7411 comm="syz.0.340" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.200518][ T40] audit: type=1400 audit(1751901897.242:425): avc: denied { ioctl } for pid=7411 comm="syz.0.340" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.449424][ T7420] qrtr: Invalid version 0 [ 83.461351][ T7421] netlink: 72 bytes leftover after parsing attributes in process `syz.1.343'. [ 83.467532][ T7420] sctp: [Deprecated]: syz.0.342 (pid 7420) Use of int in max_burst socket option. [ 83.467532][ T7420] Use struct sctp_assoc_value instead [ 83.569742][ T40] audit: type=1400 audit(1751901897.622:426): avc: denied { remove_name } for pid=7432 comm="syz.2.349" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.577969][ T40] audit: type=1400 audit(1751901897.622:427): avc: denied { unlink } for pid=7432 comm="syz.2.349" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.588524][ T7439] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 83.635652][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 83.642425][ T7439] kvm: MWAIT instruction emulated as NOP! [ 83.642743][ T7444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.351'. [ 83.763915][ T7449] syz.2.353: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 83.782663][ T6033] libceph: connect (1)[b::]:6789 error -101 [ 83.782759][ T6002] libceph: connect (1)[c::]:6789 error -101 [ 83.786008][ T6033] libceph: mon0 (1)[b::]:6789 connect error [ 83.791619][ T6002] libceph: mon0 (1)[c::]:6789 connect error [ 83.819094][ T7449] ceph: No mds server is up or the cluster is laggy [ 83.819184][ T7450] ceph: No mds server is up or the cluster is laggy [ 83.853268][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.033183][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 84.037822][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 84.042587][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 84.046595][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 84.050144][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.056690][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.060610][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.064919][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 84.068137][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.072147][ T24] usb 5-1: config 0 descriptor?? [ 84.277877][ T24] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.284226][ T24] usb 5-1: USB disconnect, device number 5 [ 84.289172][ T24] usblp1: removed [ 84.430752][ T7466] netlink: 'syz.3.358': attribute type 5 has an invalid length. [ 84.433311][ T7466] netlink: 'syz.3.358': attribute type 25 has an invalid length. [ 84.473446][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 84.635676][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 84.639156][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.642272][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.648915][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.651847][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.654819][ T9] usb 6-1: SerialNumber: syz [ 84.658416][ T7464] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 84.665918][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 84.713165][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.716727][ T7477] XFS (nullb0): Invalid superblock magic number [ 84.878003][ T7464] ufs: You didn't specify the type of your ufs filesystem [ 84.878003][ T7464] [ 84.878003][ T7464] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 84.878003][ T7464] [ 84.878003][ T7464] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 84.878530][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 84.887864][ T7464] ufs: failed to set blocksize [ 84.891308][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 84.894382][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 84.895744][ T6176] usb 6-1: USB disconnect, device number 10 [ 84.897916][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 84.899440][ T7489] bridge0: port 3(syz_tun) entered disabled state [ 84.901609][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.906806][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.909717][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.914102][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 84.915162][ T7489] syz_tun (unregistering): left allmulticast mode [ 84.916861][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.919519][ T7489] syz_tun (unregistering): left promiscuous mode [ 84.923710][ T24] usb 5-1: config 0 descriptor?? [ 84.924526][ T7489] bridge0: port 3(syz_tun) entered disabled state [ 85.132280][ T24] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 85.137935][ T24] usb 5-1: USB disconnect, device number 6 [ 85.142691][ T24] usblp1: removed [ 85.281806][ T5964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.285494][ T5964] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.288305][ T5964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.291547][ T5964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.296026][ T5964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.392277][ T7494] chnl_net:caif_netlink_parms(): no params data found [ 85.475095][ T7506] nfs: Bad value for 'source' [ 85.477161][ T7494] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.479435][ T7494] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.481680][ T7494] bridge_slave_0: entered allmulticast mode [ 85.485079][ T7494] bridge_slave_0: entered promiscuous mode [ 85.489853][ T7494] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.492272][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.496548][ T7494] bridge_slave_1: entered allmulticast mode [ 85.499145][ T7494] bridge_slave_1: entered promiscuous mode [ 85.548335][ T7494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.552867][ T7494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.607438][ T7494] team0: Port device team_slave_0 added [ 85.612584][ T7494] team0: Port device team_slave_1 added [ 85.671721][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.674621][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.686427][ T7494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.691977][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.694820][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.702940][ T7494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.762403][ T7494] hsr_slave_0: entered promiscuous mode [ 85.764730][ T7494] hsr_slave_1: entered promiscuous mode [ 85.766693][ T7494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.768989][ T7494] Cannot create hsr debugfs directory [ 85.820998][ T7521] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 85.822843][ T7521] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 85.843924][ T7520] [U]  [ 85.883585][ T7494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.887728][ T7494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.963776][ T7494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.967217][ T7494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.032726][ T7494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.036666][ T7494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.116744][ T7494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.120479][ T7494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.236075][ T7494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.241011][ T7494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.246255][ T7494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.254643][ T7494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.297370][ T7494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.307463][ T7494] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.312629][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.315608][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.322774][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.325982][ T6721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.379360][ T7558] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 86.467178][ T7494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.498287][ T7494] veth0_vlan: entered promiscuous mode [ 86.505146][ T7494] veth1_vlan: entered promiscuous mode [ 86.530506][ T7494] veth0_macvtap: entered promiscuous mode [ 86.534822][ T7494] veth1_macvtap: entered promiscuous mode [ 86.543251][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.551423][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.559074][ T7494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.562166][ T7494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.565553][ T7494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.568347][ T7494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.608936][ T6721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.613405][ T6721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.628780][ T6721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.631171][ T6721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.176321][ T7578] [U]  [ 87.181000][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 87.413350][ T839] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 87.567745][ T839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.570761][ T839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.574732][ T839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.577494][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.782482][ T839] usb 5-1: usb_control_msg returned -32 [ 87.784737][ T839] usbtmc 5-1:16.0: can't read capabilities [ 88.154484][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 88.154494][ T40] audit: type=1400 audit(1751901902.212:441): avc: denied { write } for pid=7579 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.855866][ T6721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.048055][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.051865][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.056169][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.059958][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.063456][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.170832][ T7590] chnl_net:caif_netlink_parms(): no params data found [ 89.274888][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.277838][ T7590] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.280683][ T7590] bridge_slave_0: entered allmulticast mode [ 89.284896][ T7590] bridge_slave_0: entered promiscuous mode [ 89.290521][ T7590] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.294841][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.297787][ T7590] bridge_slave_1: entered allmulticast mode [ 89.302635][ T7590] bridge_slave_1: entered promiscuous mode [ 89.332576][ T7590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.337309][ T7590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.369933][ T7590] team0: Port device team_slave_0 added [ 89.373815][ T7590] team0: Port device team_slave_1 added [ 89.401726][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.403995][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.411814][ T7590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.415997][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.418149][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.426086][ T7590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.463806][ T7590] hsr_slave_0: entered promiscuous mode [ 89.466029][ T7590] hsr_slave_1: entered promiscuous mode [ 89.468081][ T7590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.470342][ T7590] Cannot create hsr debugfs directory [ 90.194230][ T6176] usb 5-1: USB disconnect, device number 7 [ 90.325258][ T7603] can0: slcan on ttyS3. [ 90.370212][ T6721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.443000][ T6721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.451169][ T40] audit: type=1400 audit(1751901904.502:442): avc: denied { ioctl } for pid=7609 comm="syz.2.393" path="socket:[16225]" dev="sockfs" ino=16225 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.496758][ T40] audit: type=1400 audit(1751901904.552:443): avc: denied { ioctl } for pid=7612 comm="syz.2.394" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.497583][ T7613] loop6: detected capacity change from 0 to 524287487 [ 90.508940][ T7613] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.512290][ T7613] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.517910][ T7613] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.521906][ T7613] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.525454][ T7613] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.528826][ T7613] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.532796][ T7613] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.533584][ T6721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.536363][ T7613] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.543906][ T7613] ldm_validate_partition_table(): Disk read failed. [ 90.546838][ T7613] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.550165][ T7613] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.553699][ T7613] Dev loop6: unable to read RDB block 0 [ 90.556480][ T7613] loop6: unable to read partition table [ 90.559113][ T7613] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 90.656993][ T7614] loop6: detected capacity change from 524287487 to 524288 [ 90.715224][ T40] audit: type=1400 audit(1751901904.772:444): avc: denied { accept } for pid=7616 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.722825][ T40] audit: type=1400 audit(1751901904.772:445): avc: denied { setopt } for pid=7616 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.725297][ T6721] bridge_slave_1: left allmulticast mode [ 90.729406][ T40] audit: type=1400 audit(1751901904.772:446): avc: denied { ioctl } for pid=7616 comm="syz.2.395" path="socket:[16226]" dev="sockfs" ino=16226 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.731510][ T6721] bridge_slave_1: left promiscuous mode [ 90.739279][ T40] audit: type=1400 audit(1751901904.772:447): avc: denied { ioctl } for pid=7616 comm="syz.2.395" path="socket:[18772]" dev="sockfs" ino=18772 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.747124][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.757656][ T6721] bridge_slave_0: left allmulticast mode [ 90.759991][ T6721] bridge_slave_0: left promiscuous mode [ 90.762402][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.810174][ T7622] 9pnet_fd: Insufficient options for proto=fd [ 90.814506][ T40] audit: type=1400 audit(1751901904.872:448): avc: denied { block_suspend } for pid=7620 comm="syz.2.396" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.873027][ T7624] ntfs3(sr0): Primary boot signature is not NTFS. [ 90.875841][ T7624] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 90.917649][ T7626] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 90.922183][ T40] audit: type=1400 audit(1751901904.972:449): avc: denied { read } for pid=5346 comm="acpid" name="mouse2" dev="devtmpfs" ino=2988 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.932213][ T40] audit: type=1400 audit(1751901904.972:450): avc: denied { open } for pid=5346 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2988 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.975614][ T7629] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 90.977885][ T7629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.982307][ T7629] vhci_hcd vhci_hcd.0: Device attached [ 90.987771][ T7629] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(17) [ 90.990466][ T7629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.000100][ T7629] vhci_hcd vhci_hcd.0: Device attached [ 91.006800][ T7629] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(20) [ 91.009532][ T7629] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 91.013948][ T7629] vhci_hcd vhci_hcd.0: Device attached [ 91.020023][ T7629] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.032267][ T7629] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(24) [ 91.034366][ T7629] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.037011][ T7629] vhci_hcd vhci_hcd.0: Device attached [ 91.043147][ T7629] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(26) [ 91.045287][ T7629] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 91.048984][ T7629] vhci_hcd vhci_hcd.0: Device attached [ 91.054439][ T7629] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.060542][ T7629] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.064099][ T7629] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.067004][ T6721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.071488][ T6721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.075681][ T6721] bond0 (unregistering): Released all slaves [ 91.079588][ T7638] vhci_hcd: connection closed [ 91.079608][ T7636] vhci_hcd: connection closed [ 91.081123][ T6714] vhci_hcd: stop threads [ 91.081497][ T6714] vhci_hcd: release socket [ 91.083246][ T7634] vhci_hcd: connection closed [ 91.083351][ T7632] vhci_hcd: connection closed [ 91.084327][ T63] Bluetooth: hci2: command tx timeout [ 91.087254][ T6714] vhci_hcd: disconnect device [ 91.089121][ T7630] vhci_hcd: connection closed [ 91.101042][ T6714] vhci_hcd: stop threads [ 91.103953][ T6714] vhci_hcd: release socket [ 91.106039][ T6714] vhci_hcd: disconnect device [ 91.107670][ T6714] vhci_hcd: stop threads [ 91.109154][ T6714] vhci_hcd: release socket [ 91.110593][ T6714] vhci_hcd: disconnect device [ 91.112307][ T6714] vhci_hcd: stop threads [ 91.113943][ T6714] vhci_hcd: release socket [ 91.115475][ T6714] vhci_hcd: disconnect device [ 91.117799][ T6714] vhci_hcd: stop threads [ 91.119334][ T6714] vhci_hcd: release socket [ 91.120803][ T6714] vhci_hcd: disconnect device [ 91.173464][ T6002] vhci_hcd: vhci_device speed not set [ 91.284657][ T7601] can0 (unregistered): slcan off ttyS3. [ 91.321413][ T7649] delete_channel: no stack [ 91.488854][ T6721] hsr_slave_0: left promiscuous mode [ 91.491045][ T6721] hsr_slave_1: left promiscuous mode [ 91.494375][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.496924][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.500142][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.502503][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.528464][ T6721] veth1_macvtap: left promiscuous mode [ 91.530474][ T6721] veth0_macvtap: left promiscuous mode [ 91.532280][ T6721] veth1_vlan: left promiscuous mode [ 91.534800][ T6721] veth0_vlan: left promiscuous mode [ 91.623861][ T1027] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 91.661653][ T7664] usb usb8: usbfs: process 7664 (syz.2.402) did not claim interface 0 before use [ 91.783575][ T1027] usb 5-1: Using ep0 maxpacket: 32 [ 91.787314][ T1027] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 91.791927][ T1027] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 91.795241][ T1027] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.797798][ T1027] usb 5-1: Product: syz [ 91.799108][ T1027] usb 5-1: Manufacturer: syz [ 91.800563][ T1027] usb 5-1: SerialNumber: syz [ 91.803713][ T1027] usb 5-1: config 0 descriptor?? [ 91.806614][ T7655] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.809838][ T1027] hub 5-1:0.0: bad descriptor, ignoring hub [ 91.811765][ T1027] hub 5-1:0.0: probe with driver hub failed with error -5 [ 91.815377][ T1027] chaoskey 5-1:0.0: Unable to register with hwrng [ 92.047709][ T7655] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 92.053809][ T7655] qnx6: wrong signature (magic) in superblock #1. [ 92.056667][ T7655] qnx6: unable to read the first superblock [ 92.075633][ T6721] team0 (unregistering): Port device team_slave_1 removed [ 92.147491][ T6721] team0 (unregistering): Port device team_slave_0 removed [ 92.203322][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 92.293758][ T5961] usb 5-1: USB disconnect, device number 8 [ 92.593929][ T7671] sch_fq: defrate 4 ignored. [ 92.599110][ T7670] sch_fq: defrate 4 ignored. [ 92.633364][ T1027] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 92.644470][ T7680] comedi comedi3: dt2817: I/O port conflict (0xfffffffffffffff7,5) [ 92.669457][ T7590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.675012][ T7590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.688071][ T7590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.692706][ T7590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.746083][ T7590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.759783][ T7590] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.765059][ T6723] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.767370][ T6723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.780834][ T1257] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.784185][ T1257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.793215][ T1027] usb 5-1: Invalid ep0 maxpacket: 64 [ 92.911201][ T7590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.934038][ T1027] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 92.935797][ T7590] veth0_vlan: entered promiscuous mode [ 92.941560][ T7590] veth1_vlan: entered promiscuous mode [ 92.956208][ T7590] veth0_macvtap: entered promiscuous mode [ 92.959805][ T7590] veth1_macvtap: entered promiscuous mode [ 92.972094][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.978280][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.983004][ T7590] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.986042][ T7590] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.988753][ T7590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.991463][ T7590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.018567][ T6714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.023231][ T6714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.036765][ T1257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.039643][ T1257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.094961][ T7590] [ 93.095797][ T7590] ====================================================== [ 93.097881][ T7590] WARNING: possible circular locking dependency detected [ 93.100051][ T7590] 6.16.0-rc5-syzkaller #0 Not tainted [ 93.102213][ T7590] ------------------------------------------------------ [ 93.103582][ T1027] usb 5-1: Invalid ep0 maxpacket: 64 [ 93.105170][ T7590] syz-executor/7590 is trying to acquire lock: [ 93.107012][ T1027] usb usb5-port1: attempt power cycle [ 93.109039][ T7590] ffff888037607040 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 93.114278][ T7590] [ 93.114278][ T7590] but task is already holding lock: [ 93.116666][ T7590] ffff888037607338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 93.120056][ T7590] [ 93.120056][ T7590] which lock already depends on the new lock. [ 93.120056][ T7590] [ 93.123934][ T7590] [ 93.123934][ T7590] the existing dependency chain (in reverse order) is: [ 93.127210][ T7590] [ 93.127210][ T7590] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 93.129974][ T7590] __mutex_lock+0x199/0xb90 [ 93.131806][ T7590] l2cap_info_timeout+0x79/0xa0 [ 93.133939][ T7590] process_one_work+0x9cf/0x1b70 [ 93.135807][ T7590] worker_thread+0x6c8/0xf10 [ 93.137409][ T7590] kthread+0x3c5/0x780 [ 93.138864][ T7590] ret_from_fork+0x5d4/0x6f0 [ 93.140484][ T7590] ret_from_fork_asm+0x1a/0x30 [ 93.142140][ T7590] [ 93.142140][ T7590] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 93.145330][ T7590] __lock_acquire+0x126f/0x1c90 [ 93.147007][ T7590] lock_acquire+0x179/0x350 [ 93.148594][ T7590] __flush_work+0x4e4/0xcc0 [ 93.150170][ T7590] __cancel_work_sync+0x10c/0x130 [ 93.151901][ T7590] l2cap_conn_del+0x5af/0x730 [ 93.153852][ T7590] l2cap_disconn_cfm+0x96/0xd0 [ 93.155520][ T7590] hci_conn_hash_flush+0x10b/0x260 [ 93.157265][ T7590] hci_dev_close_sync+0x602/0x11d0 [ 93.159009][ T7590] hci_dev_do_close+0x2e/0x90 [ 93.160613][ T7590] hci_unregister_dev+0x227/0x640 [ 93.162333][ T7590] vhci_release+0x79/0xf0 [ 93.163875][ T7590] __fput+0x3ff/0xb70 [ 93.165340][ T7590] task_work_run+0x14d/0x240 [ 93.166941][ T7590] do_exit+0x86c/0x2bd0 [ 93.168431][ T7590] do_group_exit+0xd3/0x2a0 [ 93.170007][ T7590] __x64_sys_exit_group+0x3e/0x50 [ 93.171741][ T7590] x64_sys_call+0x1530/0x1730 [ 93.173373][ T7590] do_syscall_64+0xcd/0x4c0 [ 93.174998][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.177001][ T7590] [ 93.177001][ T7590] other info that might help us debug this: [ 93.177001][ T7590] [ 93.180133][ T7590] Possible unsafe locking scenario: [ 93.180133][ T7590] [ 93.182431][ T7590] CPU0 CPU1 [ 93.184119][ T7590] ---- ---- [ 93.185832][ T7590] lock(&conn->lock#2); [ 93.187172][ T7590] lock((work_completion)(&(&conn->info_timer)->work)); [ 93.190097][ T7590] lock(&conn->lock#2); [ 93.192201][ T7590] lock((work_completion)(&(&conn->info_timer)->work)); [ 93.194361][ T7590] [ 93.194361][ T7590] *** DEADLOCK *** [ 93.194361][ T7590] [ 93.196873][ T7590] 5 locks held by syz-executor/7590: [ 93.198837][ T7590] #0: ffff888048020dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 93.201791][ T7590] #1: ffff8880480200b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 93.204764][ T7590] #2: ffffffff905d38a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 93.207848][ T7590] #3: ffff888037607338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 93.210700][ T7590] #4: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 93.213524][ T7590] [ 93.213524][ T7590] stack backtrace: [ 93.215403][ T7590] CPU: 1 UID: 0 PID: 7590 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 93.215416][ T7590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.215424][ T7590] Call Trace: [ 93.215428][ T7590] [ 93.215432][ T7590] dump_stack_lvl+0x116/0x1f0 [ 93.215448][ T7590] print_circular_bug+0x275/0x350 [ 93.215466][ T7590] check_noncircular+0x14c/0x170 [ 93.215483][ T7590] __lock_acquire+0x126f/0x1c90 [ 93.215495][ T7590] lock_acquire+0x179/0x350 [ 93.215504][ T7590] ? __flush_work+0x4d0/0xcc0 [ 93.215516][ T7590] ? mark_held_locks+0x49/0x80 [ 93.215532][ T7590] ? __flush_work+0x4d0/0xcc0 [ 93.215544][ T7590] __flush_work+0x4e4/0xcc0 [ 93.215556][ T7590] ? __flush_work+0x4d0/0xcc0 [ 93.215567][ T7590] ? detach_if_pending+0x1e1/0x280 [ 93.215582][ T7590] ? __pfx___flush_work+0x10/0x10 [ 93.215595][ T7590] ? __pfx_wq_barrier_func+0x10/0x10 [ 93.215613][ T7590] ? __pfx___might_resched+0x10/0x10 [ 93.215628][ T7590] __cancel_work_sync+0x10c/0x130 [ 93.215641][ T7590] l2cap_conn_del+0x5af/0x730 [ 93.215654][ T7590] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 93.215666][ T7590] l2cap_disconn_cfm+0x96/0xd0 [ 93.215677][ T7590] hci_conn_hash_flush+0x10b/0x260 [ 93.215689][ T7590] hci_dev_close_sync+0x602/0x11d0 [ 93.215699][ T7590] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 93.215709][ T7590] ? up_write+0x1b2/0x520 [ 93.215720][ T7590] hci_dev_do_close+0x2e/0x90 [ 93.215737][ T7590] hci_unregister_dev+0x227/0x640 [ 93.215747][ T7590] ? __pfx_vhci_release+0x10/0x10 [ 93.215761][ T7590] vhci_release+0x79/0xf0 [ 93.215774][ T7590] __fput+0x3ff/0xb70 [ 93.215790][ T7590] task_work_run+0x14d/0x240 [ 93.215802][ T7590] ? __pfx_task_work_run+0x10/0x10 [ 93.215812][ T7590] ? switch_task_namespaces+0xeb/0x100 [ 93.215828][ T7590] do_exit+0x86c/0x2bd0 [ 93.215844][ T7590] ? do_raw_spin_lock+0x12c/0x2b0 [ 93.215856][ T7590] ? __pfx_do_exit+0x10/0x10 [ 93.215871][ T7590] ? rcu_is_watching+0x12/0xc0 [ 93.215885][ T7590] do_group_exit+0xd3/0x2a0 [ 93.215902][ T7590] __x64_sys_exit_group+0x3e/0x50 [ 93.215917][ T7590] x64_sys_call+0x1530/0x1730 [ 93.215929][ T7590] do_syscall_64+0xcd/0x4c0 [ 93.215945][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.215956][ T7590] RIP: 0033:0x7f558798e929 [ 93.215964][ T7590] Code: Unable to access opcode bytes at 0x7f558798e8ff. [ 93.215970][ T7590] RSP: 002b:00007fffbe026468 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 93.215979][ T7590] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f558798e929 [ 93.215986][ T7590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 93.215992][ T7590] RBP: 00007f55879ee8f0 R08: 00007fffbe024207 R09: 0000000000000003 [ 93.215998][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.216004][ T7590] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fffbe026620 [ 93.216014][ T7590] [ 93.316213][ C1] hpet_rtc_timer_reinit: 10 callbacks suppressed [ 93.316224][ C1] hpet: Lost 13 RTC interrupts [ 93.321206][ T63] Bluetooth: hci2: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 93.426221][ T6714] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.429694][ T6714] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.443159][ T1027] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 93.507380][ T6714] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.510741][ T6714] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.576725][ T6714] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.579856][ T6714] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.689764][ T6714] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.692885][ T6714] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.750381][ T6714] bridge_slave_1: left allmulticast mode [ 93.752222][ T6714] bridge_slave_1: left promiscuous mode [ 93.754378][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.758477][ T6714] bridge_slave_0: left allmulticast mode [ 93.760308][ T6714] bridge_slave_0: left promiscuous mode [ 93.762139][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.006844][ T6714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.011667][ T6714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.015167][ T6714] bond0 (unregistering): Released all slaves [ 94.277915][ T6714] hsr_slave_0: left promiscuous mode [ 94.279995][ T6714] hsr_slave_1: left promiscuous mode [ 94.282065][ T6714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.285779][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.289208][ T6714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.291470][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.296099][ T6714] veth1_macvtap: left promiscuous mode [ 94.297735][ T6714] veth0_macvtap: left promiscuous mode [ 94.299444][ T6714] veth1_vlan: left promiscuous mode [ 94.301068][ T6714] veth0_vlan: left promiscuous mode [ 94.422022][ T6714] team0 (unregistering): Port device team_slave_1 removed [ 94.451941][ T6714] team0 (unregistering): Port device team_slave_0 removed [ 98.523718][ T1027] usb 5-1: device descriptor read/8, error -110 [ 98.763351][ T1027] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 98.783414][ T1027] usb 5-1: device descriptor read/8, error -32 [ 98.893833][ T1027] usb usb5-port1: unable to enumerate USB device VM DIAGNOSIS: 15:25:07 Registers: info registers vcpu 0 CPU#0 RAX=000000000006332c RBX=0000000000000000 RCX=ffffffff8b881c69 RDX=ffffed100d486646 RSI=ffffffff8c1585e0 RDI=ffffffff819201e1 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a97350 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6718000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffbe023d08 CR3=000000003ca8b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7b382846dc04b10 fdfafb5f1b2d286b 43a01d217a21ec1d e63698770572f69e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e85fb4a4b26cb20 bf02c0d49c57f1fe 0e64545b32630004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5041b2917b03f1 da8178b0a6079ee8 6458d0e7b382846d c04b10fdfafb5f1b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bb315 RDI=ffffffff9b0c22a0 RBP=ffffffff9b0c2260 RSP=ffffc9000408f228 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000033 R14=ffffffff9b0c2260 R15=ffffffff855bb2b0 RIP=ffffffff855bb33f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6818000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000003ca8b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb923411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e7b382846dc04b10 fdfafb5f1b2d286b 43a01d217a21ec1d e63698770572f69e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e85fb4a4b26cb20 bf02c0d49c57f1fe 0e64545b32630004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5041b2917b03f1 da8178b0a6079ee8 6458d0e7b382846d c04b10fdfafb5f1b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000200 RCX=ffffffff81a867e8 RDX=ffff888027ffa440 RSI=ffffffff81a868ee RDI=0000000000000007 RBP=ffffc900027cfa00 RSP=ffffc900027cf9b0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000200 R11=0000000000000000 R12=0000000000000000 R13=ffffc900027cfa28 R14=1ffffffff1c42240 R15=ffffffff81a943e1 RIP=ffffffff81bbe6b8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6918000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb9233746c0 CR3=000000005147f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6fe5e2b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b8a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b8a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b8a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b8a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b8a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b8a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004f1b4 RBX=0000000000000003 RCX=ffffffff8b881c69 RDX=ffffed100d4e6646 RSI=ffffffff8c1585e0 RDI=ffffffff819201e1 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90a97350 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a18000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b4b6c29300 CR3=000000002e859000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000003 Opmask01=000000000000ffff Opmask02=000000000301ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9d6cd05b 00007ffd9d6cd05b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e1 0000000000000031 746e6576652f7475 706e692f7665642f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b6e696c74656e20 636972656e656720 6e65706f20746f6e 6e6163203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4b4c4951404b05 464c57404b404205 4b40554a05514a4b 4b4446051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007002400000001 0005000800000000 0004000800000001 0003000800000021 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055de5218b778 0000000000000000 0000000200000005 000055de5218b388 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055de5218a6d5 0000000000000001 0000000200000005 000055de5218b778 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000005 000055de5218b388 0000000000000001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055de5218a6ac 0000000000000001 0000000000000005 000055de5218a6c1 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2d2e28332220 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3724bf2f2b2427bf 2d2e2832312435bf 3728252433342c2f 33bf2d2e28332220 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000