last executing test programs: 6.064312062s ago: executing program 1 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x14200, 0x0) r1 = openat(r0, &(0x7f0000000000)='./sys/class/net/bonding_masters\x00', 0x1, 0x9b) write(r1, &(0x7f0000000340)='-bond0', 0x6) 6.062609415s ago: executing program 1 (id=82): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000100)) fsopen(&(0x7f0000000800)='pipefs\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000040000901feffffff00000000017c0000040042800c00018006000600884700000c000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x5, 0x1, 0x6b, 0x2}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000018000100000000000000bf7b0000000000000100"/33], 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1f5) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_PARAM={{0x2}, 0x3}}}, 0x7) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f0000000300)=@ethtool_ringparam={0x33, 0xffff5257, 0x2e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) read$FUSE(r4, &(0x7f0000000840)={0x2020}, 0x2020) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f00000032c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000003300), 0x8, 0x10, &(0x7f0000003340), 0x10}, 0x94) fsmount(r7, 0x1, 0x18f) 5.446372728s ago: executing program 1 (id=84): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000400)={0x6, @local, 0x4e20, 0x0, 'rr\x00', 0x1, 0x12c, 0xffffffff}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000440)={{0x6, @local, 0x4e20, 0x0, 'rr\x00', 0x1, 0x12c, 0xffffffff}, {@remote, 0x4e20, 0x0, 0x1, 0x0, 0x2}}, 0x44) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200), 0x8}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000380)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x81, 0x0}) mkdir(&(0x7f00000003c0)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x14) write(r2, &(0x7f0000000180)='res', 0x3) 4.54657669s ago: executing program 1 (id=87): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x2, 0x48f, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0xa1}}}, &(0x7f00000000c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000140)={0x0, 0xfffffffe, 0x700, 0x4, 0x1f3, 0x0, r2}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x20, 0x0, 0x40000006}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x0, 0x40040005, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0x164}}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x26, 0x301, 0x70bd28, 0x65dfdbfb, {0x15}, [@typed={0x5, 0x14e, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_modinfo={0x42, 0x1, 0x65}}) 3.45625842s ago: executing program 1 (id=95): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r1, 0x2f, 0x0, @void}, 0x10) mount(&(0x7f00000006c0)=@sg0, &(0x7f0000000700)='\x00', &(0x7f0000000740)='gfs2meta\x00', 0x2000000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r2, r3, 0x4, r1}, 0x10) syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040e6040500000101020301090220000101008032090400000208065000070581020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001100)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001180)='./file1\x00', 0x0, 0x200, 0x1}) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000004c0)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r4, 0x1) sendmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f00000005c0)={&(0x7f0000000600)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000003c0), 0x0, 0x2) pread64(r6, &(0x7f0000000400)=""/115, 0x73, 0x5) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f0000000480)=0x6b) capset(0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.174152123s ago: executing program 2 (id=105): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b", 0x15}], 0x1, 0x0, 0xfffffff5, 0xc9e}, 0x404c8c4) 2.096080249s ago: executing program 2 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000d00)={"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"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)='0', 0x1) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.006247812s ago: executing program 2 (id=107): r0 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x789c, &(0x7f00000001c0)={0x0, 0x690e, 0x4000, 0x1, 0xcf}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003a00290200000000fadbf1d211"], 0x14}}, 0x8000) 1.916162242s ago: executing program 2 (id=109): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x11, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c220000150001"], 0x225c}, 0x1, 0x0, 0x0, 0x20004855}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001780)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0xf0, 0xf0, 0xffffffff, 0x390, 0xf0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) fsopen(&(0x7f0000000100)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000640)='$-,\x00', 0x0, r1) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "d607f8f9951e76c15164323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3533ee0878ae95bc7072463c468b22548deb01efd00001ed2c41d078b9cf1fc566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000002666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e020000008103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e0c6a9744480000000077000000000000000000000000000000000000000000000000000000000000978200", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b280000000000000001fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a6758eaf8bb81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c8f85f9c9aa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0f2f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cff0d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000001ec0)={0xf0, 0x5, 0x8, "62fcc0d1908d4ebeca9e0da23b770f51bc18014c213d2f8b0e6e37fc4774c0c7fd65410ff0e5b9315fe58c7d4b2d0f6d7c8b217ed84ccf9e2e81a8ba61b96027c07332de0593bcb516cbb0f81983cd6a7e3c62268cd0350fe8dc1a3cb847315d735f2250ff032d17f39c286297c561c66da3c478f7e47c6812546a5bb1b1fcf2fc979859d94c2ed67c8205fb29847e626a8050629d918fbbc6f262b9da4fd5490bc2380034209884a1f6e9fc12fd7665f0dcfdb00972ad24b3d383c7f798866d1280d05cd96d98204c4f1c68cc6918f82d01ea09896502313922694d8824d6f89b555c3156c75039c96fa5f77d31b5bf"}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000016c0)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x1, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) gettid() sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00'/17, @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0c0023800800170005000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 1.915311696s ago: executing program 2 (id=110): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2c80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x48) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000200)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest16=0x80a, 0x30000, 0x0, 0x3}}, @nested_vmlaunch={0x12f, 0x18}], 0xb8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.824854541s ago: executing program 1 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002600), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000027c0)='./sys\x00', &(0x7f0000002800)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000002840)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000002680)='maxtcpc 0x', 0xa) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f0000002940)={0x5000, 0x3}) fchown(r9, 0xee01, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000002700)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000002740)={0x2, 0x0, 0x1}) setsockopt$MRT6_ASSERT(r6, 0x29, 0xcf, &(0x7f00000028c0), 0x4) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f0000000400), 0x1, 0x40}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98ca, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000002980)={0x2020}, 0x2020) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x1, 0x2607, '\x00', 0x0}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002580)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000025c0)='./debug\x00', &(0x7f00000026c0)='debugfs\x00', 0x0, 0x0) r12 = openat(r11, &(0x7f0000002640)='./debug/x86/boot_params/data\x00', 0x0, 0x106) read(r12, 0x0, 0x0) write(r11, &(0x7f0000000180)='27', 0x2) syz_usb_connect$uac1(0x3, 0xfffffffffffffce4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r11, @ANYRESDEC=r0, @ANYRES16=0x0], 0x0) 1.676368475s ago: executing program 3 (id=113): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x7, 0x19, 0xc28, 0x7, "6879a3638b03b069bf9159736a91ff889f5b9e408aa733cc3cf444127f3fe5cc"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'veth1_to_bond\x00'}) close(r0) r1 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) futex(r1, 0x5, 0x1, &(0x7f0000000500), r1, 0x0) futex(r1, 0x5, 0x0, &(0x7f0000000540)={0x0, 0x3938700}, r1, 0x2) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, 0x0}) move_pages(r3, 0x4, &(0x7f0000000600)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000640)=[0xff, 0xb5, 0x8, 0xbb9d, 0x1, 0x6, 0x8c, 0x7, 0x401], &(0x7f0000000680)=[0x0], 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x20400, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000700)) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000740)={0x2, "441959b88a8813d5d7d6db5faf9ade8480fafeae7d9923dfcbbb4e7d622494dc", 0x5, 0x0, 0xffffff45, 0x8, 0x1, 0x2, 0x2, 0x8}) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f00000007c0)) renameat2(r4, &(0x7f00000008c0)='./file0\x00', r4, &(0x7f0000000900)='./file0\x00', 0x4) syz_create_resource$futex(&(0x7f0000000940)=0x1) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000980)={r4, 0xffff0001}) fsetxattr(r0, &(0x7f00000009c0)=@random={'system.', '/dev/null\x00'}, &(0x7f0000000a00)='/dev/null\x00', 0xa, 0x3) r5 = socket$netlink(0x10, 0x3, 0x2) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x11) r7 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@getqdisc={0x38, 0x26, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x6}, {0x3b0dfee2d1782897, 0x9}, {0x0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4802) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000b80)={[0x100000001, 0x0, 0x7, 0x4, 0xc8ef, 0x5, 0x7, 0x8, 0x7, 0x5, 0x0, 0x0, 0x1a9f, 0x1ff, 0x5, 0x3], 0xdddd1000, 0x2e1012}) ioctl$KVM_CAP_HYPERV_VP_INDEX(r6, 0x4068aea3, &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r5, {0xc}}, './file0\x00'}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r6, 0x4008ae73, &(0x7f0000000d00)={0x0, 0x5}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) ioctl$HIDIOCGVERSION(r7, 0x80044801, &(0x7f0000000d40)) 1.675883983s ago: executing program 2 (id=114): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x54000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) (async, rerun: 64) shutdown(r1, 0x1) (async) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffff0}) (async, rerun: 32) r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) (rerun: 32) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000b40)={'syzkaller0\x00', 0x5032}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', 0x1}) (async) writev(r5, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="010000000000260010000900000000010000000000020800450000740001400040063c817f0000017f00000104d204d2", 0x30}, {&(0x7f0000000c40)="00000f0000dba7478481709a41e0a9478b2d592773875532f6fddc40b86c99641599408f8078bcb71fce378fe20b536e4143ff2b433edfb4e7f17ef38de56359f002d65b0261770d66141d2b6e1ce763f4e69a88317c2efe9d44e71f", 0x5c}], 0x2) (async, rerun: 32) write$char_usb(r4, 0x0, 0x0) (rerun: 32) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r8}) (async) add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f0000000580)="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", 0x559, r7) syz_usb_disconnect(r3) (async, rerun: 32) timer_settime(0x0, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000100)={0x9, 0x1, r2}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x70140, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d04, 0x0, 0x1000005}]}) 1.675114414s ago: executing program 3 (id=115): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0xc8c00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000600)={0x4, "abac0011119c871663376126aab5ab0006278ee051881700e4ffffffffffffff", 0xffffffffffffffff}) ppoll(&(0x7f0000000640)=[{r1, 0x400c}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f00000006c0)=0x1, 0x4) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000680)=0x5) sched_setscheduler(0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/kallsyms\x00', 0x0, 0x0) pread64(r3, &(0x7f00000004c0)=""/77, 0x571da, 0x1000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x0) close(r5) openat$cgroup_int(r4, &(0x7f0000000300)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000046000901feffffff00000000047c00000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) setns(0xc9, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@mpls_getnetconf={0x64, 0x52, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x867}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_IFINDEX={0x8, 0x1, r8}]}, 0x64}}, 0x0) mount(0x0, &(0x7f0000000040)='mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mysys/module/xhci_hcd/parameters/quirks\x00', 0x0, 0xa) read(r9, &(0x7f0000000100), 0x40) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa74aaaaffffffffffff000d030000e014000000987c0fce09000000b64e746e6f129487b301673b54db6220213216f237000020b552a3fb7ec804d0f2735eea0ac87e3d0105dcc605697f32ed1b7aa527ceed1f"], 0x0) 1.566135623s ago: executing program 3 (id=117): socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d1}, 0x404c800) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) (async) bind$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000004c0)=0x4, 0x4) (async) sendto$inet6(r3, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000580), 0x0, 0x8015) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="79a9"], 0x0) (async) syz_open_dev$audion(&(0x7f0000000740), 0x3, 0x1) (async) close_range(r4, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/partitions\x00', 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000032bbd7000fdcbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x840) (async) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f00000006c0)='fd/3\x00') sendfile(r6, r6, 0x0, 0x1) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)="2f6450762f7a72616d302c364ba615f379b03b0dfe6df20886aa5bf0c250b6f4131ea635125ace3aec1b8bc38b2aa86393a2fbfdb796964fbc334e9344812ba8e3a5a74d95644106870a8155aebb8a3087bb6969952a1d249e6d429988cd6c72c9539d0269ed14af48fd89509c33050855e7f3b20112f77a99c7a52e1fc808be32a8f0411c815357faf4ca6f87e41771c649309bcc2667d43e8565d8eb0f1a1328099c087a0b8b3823a86025f6541af6c8741b01", 0xb4) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000640)={0x4, &(0x7f00000005c0)=[{0x7, 0x8, &(0x7f0000000240)="ed3a903cdfd97c6c", 0x0, 0x1}, {0x720b, 0x38, &(0x7f0000000280)="ad2847eafc777a396aa7b1312e6a20dada6c52ad14152ca2a48e1e412235a909ccb8e8bf15eb56dc98909d27a4a128181aaec2db7202fdde", 0x0, 0x1}, {0x2, 0xf, &(0x7f0000000440)="45a86e8b41a81e89f133bc6da1e863", 0x0, 0x1}, {0xe, 0xc, &(0x7f0000000480)="10d5a34efbb8f3c9a6a1b15a", 0x0, 0x1}]}) close(0x3) (async) readlinkat(r2, 0x0, 0x0, 0x0) (async) unshare(0x28000600) socket$nl_generic(0x10, 0x3, 0x10) 346.262162ms ago: executing program 3 (id=123): rseq(&(0x7f0000000700)={0x0, 0x0, 0x0, 0x6}, 0x46, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x4f, 0x2, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f00000000c0)="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", 0x559, r0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000940)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) setns(0xc9, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf252700000008000300", @ANYRES32=r5, @ANYBLOB="0a0006005050505050500000060036"], 0x34}}, 0x20000004) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000980)={{0x41000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x3, 0x0, 0x30, 0x19}, {0x5000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x2, 0x3, 0x3}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x41, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0xc, 0xa, 0x4, 0x43, 0x3, 0xfa, 0x82, 0x7, 0xe}, {0x0, 0x40000, 0x17, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0xd, 0x8a, 0xf, 0x4, 0xfd}, {0x25000, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xfd, 0x70}, {0xd000, 0xffffffff, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x50000, 0x2a}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x240000, 0xb, 0x1, 0xe000, [0x6840000000000002, 0x3, 0x4, 0xff]}) (async) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000640)={r1, 0x1f}, &(0x7f0000000680)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) (async) add_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)="f5a1607c905aa5a8b3fd1ec5556b6bfa0ae68b90d45bbf63e650eb5d60742eead875e78df123a130b347290154dbea8dce6686b8cac908c03fda316b000141437c0986520749ea8127428409c8d0034ba959c7f55e38d1d4bc2dc2febb2e8ee0d0c9b0b25ec812909ac14ada3f7232ab06265182568b8984420e7632873ad26384c1b87ba58220972ccc78eb6ff0226a3a1a142bf6e7c093644fde19363d8b25fe9a8e18e49e5fb3e9844dfafa83e574f5bb08dfff4fb7a0d98fc6a4004f5fdf", 0xc0, r1) (async) r6 = fsopen(&(0x7f0000000780)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8a) fchdir(r7) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x1c0) 345.898548ms ago: executing program 3 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./mysys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './mysys\x00'}) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') read$FUSE(r2, &(0x7f00000004c0)={0x2020}, 0x2020) (async) sendfile(r1, r1, 0x0, 0xf4a) 345.695469ms ago: executing program 0 (id=126): r0 = syz_open_dev$video(&(0x7f0000000200), 0x8000000000001, 0x7eb840) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) listns(&(0x7f0000000300)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@bridge_getlink={0x1f, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x886b, 0x956b4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x1, 0x1, 0x0, 0x3, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0xfffff53c) 246.325294ms ago: executing program 0 (id=127): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="6abbc922cd5160dbf8184caa0e68cd6e", 0x10, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 245.78602ms ago: executing program 0 (id=128): r0 = socket(0x1a, 0x57a14943068ea919, 0x10004) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x181) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0xd, 0x4, &(0x7f0000000d40)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000d80)='syzkaller\x00', 0x5}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000b40)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000440)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x20, r4, 0x221, 0x70bd2b, 0x25dfdbde, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc844}, 0x200580e4) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) accept$packet(r5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0xffffffffffffff86) write(r5, &(0x7f00000005c0)='27', 0x2) r6 = syz_open_dev$sndctrl(&(0x7f00000006c0), 0x84, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000740)={0x17, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x4, @local, 0x7fffffff}}}, 0x90) mq_notify(r6, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x40010, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./debug\x00', 0x1ff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002a0000000400000008000a207758fbdabbe5f0cb72eb22e5e86e0508df151c0cf674018c1f1bea9954e7a77f7ac534907c4a2d55aa084849da3d5c783831ba64d1830cc43faf411b276b5db59583a3d8e87b25a6494b2b3f3c71f10f1842d7b48b8000000000000000b7f149091a626f8b46c08ee8892b1a638f5a808a3ddfe4c72d64cd9b06b6c7bfebfcea3461a533ab5b0000000000"], 0x20}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x8800) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f00000000c0)=0x1, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x9, 0x4) 242.577796ms ago: executing program 3 (id=129): keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) (async) mkdir(&(0x7f0000000280)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x4}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000940)=r3, 0x2) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f00000009c0)={0x2, 0x10, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000a40)='{', 0x34000}], 0x1}, 0x80d1) (async, rerun: 32) recvmsg$kcm(r0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@ethernet={0x0, @broadcast}, 0x80, 0x0}, 0x40000000) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f0000000b80)='1', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./lower\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./upper\x00', 0x1a) (async, rerun: 32) r5 = socket$inet(0x2, 0x3, 0x2) (rerun: 32) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000c40)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x8004, &(0x7f0000000c80)={0x2, 0x0, @multicast1}, 0x10) (async) sendto$inet(r5, &(0x7f0000000cc0)="cde0095f3d989229", 0x8, 0x0, &(0x7f0000000d00)={0x2, 0x4e26, @multicast1}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./work\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000dc0)='./mnt\x00', &(0x7f0000000e00)='overlay\x00', 0x0, &(0x7f0000000e40)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mnt/file1\x00', 0x0) (async) umount2(&(0x7f0000000f00)='./mnt\x00', 0x0) (async) add_key(&(0x7f0000000f40)='dns_resolver\x00', &(0x7f0000000f80), &(0x7f0000000fc0), 0x0, 0x0) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000001000)={0xc, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000001040)={0x28, 0x1, 0x0, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000001080)}) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x4) (rerun: 64) 126.73803ms ago: executing program 0 (id=130): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000c, 0x110, 0xffffffffffffffff, 0x100000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000034001a8008000000020000002800048024000180080001000100000008000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="060004"], 0x54}}, 0x0) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 6.277783ms ago: executing program 0 (id=131): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x6, 0x200, 0x400, 0x429}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000005200010000000000000000001c000015140001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040014) 0s ago: executing program 0 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x6, 0x10001, 0x7e, 0x4, 0x4, 0x80000, 0x2, 0x5, 0x100, 0x0, 0x9, 0x2000000000000, 0x5, 0x6, 0x80000000b, 0x4000000000200, 0x0, 0x2, 0x100000, 0x10000000000f48, 0x8, 0x29}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) readv(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/255, 0xff}], 0x1) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) r5 = gettid() tkill(r5, 0x13) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30672' (ED25519) to the list of known hosts. [ 39.500448][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 39.500466][ T43] audit: type=1400 audit(1794215778.302:138): avc: denied { name_bind } for pid=5763 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.532799][ T43] audit: type=1400 audit(1794215778.332:139): avc: denied { execute } for pid=5764 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.533464][ T43] audit: type=1400 audit(1794215778.332:140): avc: denied { execute_no_trans } for pid=5764 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.541368][ T43] audit: type=1400 audit(1794215780.342:141): avc: denied { mounton } for pid=5764 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.543210][ T43] audit: type=1400 audit(1794215780.342:142): avc: denied { mount } for pid=5764 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.545858][ T5764] cgroup: Unknown subsys name 'net' [ 41.547399][ T43] audit: type=1400 audit(1794215780.342:143): avc: denied { unmount } for pid=5764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.712960][ T5764] cgroup: Unknown subsys name 'cpuset' [ 41.716544][ T5764] cgroup: Unknown subsys name 'rlimit' [ 41.856851][ T43] audit: type=1400 audit(1794215780.652:144): avc: denied { setattr } for pid=5764 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.857181][ T43] audit: type=1400 audit(1794215780.652:145): avc: denied { create } for pid=5764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.857382][ T43] audit: type=1400 audit(1794215780.652:146): avc: denied { write } for pid=5764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.857613][ T43] audit: type=1400 audit(1794215780.652:147): avc: denied { read } for pid=5764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.903723][ T5768] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.566683][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.636525][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 45.636541][ T43] audit: type=1400 audit(1794215784.432:154): avc: denied { execmem } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.912313][ T43] audit: type=1400 audit(1794215784.712:155): avc: denied { create } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.912752][ T43] audit: type=1400 audit(1794215784.712:156): avc: denied { read write } for pid=5775 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.913122][ T43] audit: type=1400 audit(1794215784.712:157): avc: denied { open } for pid=5775 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.918425][ T43] audit: type=1400 audit(1794215784.712:158): avc: denied { ioctl } for pid=5775 comm="syz-executor" path="socket:[2716]" dev="sockfs" ino=2716 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.938736][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.940281][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.952882][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.953437][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.953597][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.954510][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.955097][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.956656][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.958157][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.958570][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.959472][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.959801][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.961416][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.961477][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.962449][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.969670][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.971339][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.973686][ T43] audit: type=1400 audit(1794215784.762:159): avc: denied { read } for pid=5780 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.973712][ T43] audit: type=1400 audit(1794215784.762:160): avc: denied { open } for pid=5780 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.974268][ T43] audit: type=1400 audit(1794215784.772:161): avc: denied { mounton } for pid=5780 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.976616][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.978555][ T43] audit: type=1400 audit(1794215784.772:162): avc: denied { module_request } for pid=5780 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.990218][ T5137] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.990457][ T5137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.991422][ T43] audit: type=1400 audit(1794215784.792:164): avc: denied { module_request } for pid=5785 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.191990][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.194815][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.197944][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.206868][ T5776] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.210557][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.232351][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.313526][ T5775] infiniband rxe0: set active [ 46.315393][ T80] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.316328][ T5775] infiniband rxe0: added rxe_eth0 [ 46.326569][ T5775] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 46.326590][ T5775] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 46.326609][ T5775] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 46.343294][ T5775] RDS/IB: rxe0: added [ 46.343403][ T5775] smc: adding ib device rxe0 with port count 1 [ 46.343438][ T5775] smc: ib device rxe0 port 1 has no pnetid [ 46.354067][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.358294][ T5227] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.457776][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.465748][ T3374] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.479588][ T1346] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.558300][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.610390][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.610971][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.611032][ T5785] bridge_slave_0: entered allmulticast mode [ 46.611817][ T5785] bridge_slave_0: entered promiscuous mode [ 46.614153][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.614192][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.614339][ T5785] bridge_slave_1: entered allmulticast mode [ 46.615051][ T5785] bridge_slave_1: entered promiscuous mode [ 46.654207][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.654249][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.654396][ T5780] bridge_slave_0: entered allmulticast mode [ 46.655117][ T5780] bridge_slave_0: entered promiscuous mode [ 46.659430][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.661472][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.672411][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.672505][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.672589][ T5780] bridge_slave_1: entered allmulticast mode [ 46.673662][ T5780] bridge_slave_1: entered promiscuous mode [ 46.704593][ T5785] team0: Port device team_slave_0 added [ 46.705727][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.706591][ T5785] team0: Port device team_slave_1 added [ 46.709567][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.709674][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.709758][ T5776] bridge_slave_0: entered allmulticast mode [ 46.710940][ T5776] bridge_slave_0: entered promiscuous mode [ 46.713036][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.713156][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.713197][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.713345][ T5776] bridge_slave_1: entered allmulticast mode [ 46.714049][ T5776] bridge_slave_1: entered promiscuous mode [ 46.727927][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.758890][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.758903][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.758915][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.760965][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.772781][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.772795][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.772816][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.778001][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.790826][ T5780] team0: Port device team_slave_0 added [ 46.792393][ T5780] team0: Port device team_slave_1 added [ 46.817446][ T5776] team0: Port device team_slave_0 added [ 46.817756][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.817765][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.817776][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.819501][ T5776] team0: Port device team_slave_1 added [ 46.826928][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.826937][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.826949][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.830075][ T5785] hsr_slave_0: entered promiscuous mode [ 46.831121][ T5785] hsr_slave_1: entered promiscuous mode [ 46.851577][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.851593][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.851605][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.859426][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.859436][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.859448][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.901261][ T5780] hsr_slave_0: entered promiscuous mode [ 46.901825][ T5780] hsr_slave_1: entered promiscuous mode [ 46.902111][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 46.902119][ T5780] Cannot create hsr debugfs directory [ 46.941615][ T5776] hsr_slave_0: entered promiscuous mode [ 46.942072][ T5776] hsr_slave_1: entered promiscuous mode [ 46.942391][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 46.942399][ T5776] Cannot create hsr debugfs directory [ 47.158964][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.166672][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.171568][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.174821][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.188119][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.190258][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.201957][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.203658][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.250495][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.250584][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.250637][ T5775] bridge_slave_0: entered allmulticast mode [ 47.251379][ T5775] bridge_slave_0: entered promiscuous mode [ 47.257119][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.257166][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.257316][ T5775] bridge_slave_1: entered allmulticast mode [ 47.258289][ T5775] bridge_slave_1: entered promiscuous mode [ 47.265936][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.268462][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.268906][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.273890][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.283791][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.285966][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.287411][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.291284][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.305940][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.310325][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.318971][ T5775] team0: Port device team_slave_0 added [ 47.335531][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.335588][ T5785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.335835][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.335879][ T5785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.340931][ T5775] team0: Port device team_slave_1 added [ 47.372905][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.372916][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.372928][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.374267][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.374276][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.374292][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.396512][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.400065][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.400964][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.401041][ T5780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.401163][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.401208][ T5780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.426442][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.430910][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.437089][ T5775] hsr_slave_0: entered promiscuous mode [ 47.437773][ T5775] hsr_slave_1: entered promiscuous mode [ 47.438421][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 47.438434][ T5775] Cannot create hsr debugfs directory [ 47.440611][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.444976][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.445688][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.448501][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.481034][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.482067][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.482904][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.483350][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.647759][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.662986][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.678094][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.683800][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.684518][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.688216][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.696101][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.698589][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.703730][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.706907][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.712627][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.716720][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.716914][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.733331][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.733417][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.745417][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.766566][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.766693][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.794509][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.796038][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.796129][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.841124][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.858090][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.858176][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.885130][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.885179][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.904327][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.942534][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.949238][ T667] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.949407][ T667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.962596][ T667] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.962672][ T667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.010211][ T5778] Bluetooth: hci3: command tx timeout [ 48.010323][ T5778] Bluetooth: hci0: command tx timeout [ 48.020367][ T5778] Bluetooth: hci2: command tx timeout [ 48.020515][ T5137] Bluetooth: hci1: command tx timeout [ 48.177936][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.201145][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.210264][ T5785] veth0_vlan: entered promiscuous mode [ 48.217550][ T5785] veth1_vlan: entered promiscuous mode [ 48.245236][ T5780] veth0_vlan: entered promiscuous mode [ 48.251387][ T5780] veth1_vlan: entered promiscuous mode [ 48.258785][ T5785] veth0_macvtap: entered promiscuous mode [ 48.266383][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.266777][ T5785] veth1_macvtap: entered promiscuous mode [ 48.271824][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.295142][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.297963][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.342673][ T5780] veth0_macvtap: entered promiscuous mode [ 48.355451][ T5776] veth0_vlan: entered promiscuous mode [ 48.363412][ T5780] veth1_macvtap: entered promiscuous mode [ 48.366248][ T5775] veth0_vlan: entered promiscuous mode [ 48.396430][ T5775] veth1_vlan: entered promiscuous mode [ 48.401430][ T672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.401448][ T672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.408628][ T5776] veth1_vlan: entered promiscuous mode [ 48.411001][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.436902][ T672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.436922][ T672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.437694][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.454614][ T5775] veth0_macvtap: entered promiscuous mode [ 48.460772][ T5775] veth1_macvtap: entered promiscuous mode [ 48.466938][ T5776] veth0_macvtap: entered promiscuous mode [ 48.472047][ T5776] veth1_macvtap: entered promiscuous mode [ 48.492055][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.500727][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.511150][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.514776][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.530709][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.531790][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.531800][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.533182][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.560627][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.572547][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.572566][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.642727][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.642739][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.655386][ T239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.655394][ T239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.683700][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.683714][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.706695][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.706708][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.719514][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.719744][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.719909][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.719927][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.719944][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.719959][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.719975][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.719991][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.720007][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.720022][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.720038][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.720054][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.720070][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.720085][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.761267][ T5951] bonding: unable to delete non-existent b%?áÅŸñ"2`'Yà [ 48.802653][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.833267][ T5954] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3'. [ 48.933082][ T5969] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.933103][ T5969] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1'. [ 48.933182][ T5969] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 48.933194][ T5969] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.201627][ T5974] trusted_key: encrypted_key: insufficient parameters specified [ 49.206932][ T5974] Zero length message leads to an empty skb [ 49.502856][ T5982] Invalid logical block size (2) [ 49.533942][ T5985] FAULT_INJECTION: forcing a failure. [ 49.533942][ T5985] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.533961][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT(full) [ 49.533975][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.533995][ T5985] Call Trace: [ 49.534008][ T5985] [ 49.534012][ T5985] dump_stack_lvl+0x100/0x190 [ 49.534061][ T5985] should_fail_ex.cold+0x5/0xa [ 49.534079][ T5985] _copy_to_user+0x32/0xd0 [ 49.534094][ T5985] simple_read_from_buffer+0xcb/0x170 [ 49.534110][ T5985] proc_fail_nth_read+0x1af/0x230 [ 49.534125][ T5985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.534140][ T5985] ? rw_verify_area+0xce/0x6d0 [ 49.534155][ T5985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.534169][ T5985] vfs_read+0x1e4/0xb30 [ 49.534180][ T5985] ? lock_acquire+0x1d1/0x380 [ 49.534199][ T5985] ? __fget_files+0x34/0x3d0 [ 49.534211][ T5985] ? __pfx_vfs_read+0x10/0x10 [ 49.534220][ T5985] ? find_held_lock+0x2b/0x80 [ 49.534232][ T5985] ? __fget_files+0x215/0x3d0 [ 49.534246][ T5985] ? __fget_files+0x21f/0x3d0 [ 49.534263][ T5985] ksys_read+0x12a/0x250 [ 49.534273][ T5985] ? __pfx_ksys_read+0x10/0x10 [ 49.534283][ T5985] ? trace_hardirqs_off+0x70/0x170 [ 49.534299][ T5985] do_syscall_64+0x123/0x7b0 [ 49.534332][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.534343][ T5985] RIP: 0033:0x7f129d76034e [ 49.534352][ T5985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.534362][ T5985] RSP: 002b:00007f129e71efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.534383][ T5985] RAX: ffffffffffffffda RBX: 00007f129e71f6c0 RCX: 00007f129d76034e [ 49.534390][ T5985] RDX: 000000000000000f RSI: 00007f129e71f0a0 RDI: 0000000000000004 [ 49.534395][ T5985] RBP: 00007f129e71f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.534401][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.534407][ T5985] R13: 00007f129da26038 R14: 00007f129da25fa0 R15: 00007ffc5d2183b8 [ 49.534420][ T5985] [ 49.604600][ T5987] Bluetooth: MGMT ver 1.23 [ 49.642060][ T5990] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 49.754392][ T6001] syzkaller0: entered promiscuous mode [ 49.754404][ T6001] syzkaller0: entered allmulticast mode [ 50.093243][ T5778] Bluetooth: hci1: command tx timeout [ 50.093283][ T5778] Bluetooth: hci0: command tx timeout [ 50.093320][ T5792] Bluetooth: hci3: command tx timeout [ 50.093419][ T5784] Bluetooth: hci2: command tx timeout [ 50.903026][ T43] kauditd_printk_skb: 123 callbacks suppressed [ 50.903042][ T43] audit: type=1400 audit(1794215789.702:287): avc: denied { mount } for pid=6025 comm="syz.3.19" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.915665][ T43] audit: type=1400 audit(1794215789.712:288): avc: denied { create } for pid=6025 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.916275][ T43] audit: type=1400 audit(1794215789.712:289): avc: denied { connect } for pid=6025 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.917132][ T43] audit: type=1400 audit(1794215789.712:290): avc: denied { write } for pid=6025 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.917563][ T43] audit: type=1400 audit(1794215789.712:291): avc: denied { read } for pid=6025 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.968500][ T43] audit: type=1400 audit(1794215789.762:292): avc: denied { search } for pid=6025 comm="syz.3.19" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.968929][ T43] audit: type=1400 audit(1794215789.762:293): avc: denied { read write } for pid=6025 comm="syz.3.19" name="set_event" dev="tracefs" ino=2170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.969340][ T43] audit: type=1400 audit(1794215789.762:294): avc: denied { open } for pid=6025 comm="syz.3.19" path="/11/trace/set_event" dev="tracefs" ino=2170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 51.067457][ T43] audit: type=1400 audit(1794215789.862:295): avc: denied { create } for pid=6029 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.067682][ T43] audit: type=1400 audit(1794215789.862:296): avc: denied { bind } for pid=6029 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.620118][ T5137] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 51.947824][ T6049] netlink: 64 bytes leftover after parsing attributes in process `syz.2.23'. [ 51.958143][ T6049] syzkaller1: entered promiscuous mode [ 51.958161][ T6049] syzkaller1: entered allmulticast mode [ 51.962489][ T6048] ublk0: read batch cmd buffer failed [ 51.962538][ T6048] ublk0: read batch cmd buffer failed [ 51.982012][ T6048] ublk0: read batch cmd buffer failed [ 51.982061][ T6048] ublk0: read batch cmd buffer failed [ 52.144503][ T107] IPVS: starting estimator thread 0... [ 52.147419][ T6068] tc_dump_action: action bad kind [ 52.169752][ T5137] Bluetooth: hci1: command tx timeout [ 52.169782][ T5137] Bluetooth: hci2: command tx timeout [ 52.169801][ T5137] Bluetooth: hci3: command tx timeout [ 52.169821][ T5137] Bluetooth: hci0: command 0x040f tx timeout [ 52.215947][ T6072] syzkaller0: entered promiscuous mode [ 52.216000][ T6072] syzkaller0: entered allmulticast mode [ 52.239412][ T6074] IPVS: using max 22 ests per chain, 52800 per kthread [ 53.441262][ T6110] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET) [ 53.452940][ T6110] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.37'. [ 53.555644][ T6119] netlink: 'syz.3.42': attribute type 2 has an invalid length. [ 53.573164][ T6124] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 53.573181][ T6124] overlayfs: missing 'lowerdir' [ 54.171912][ T6174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.56'. [ 54.238809][ T6184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.56'. [ 54.249862][ T5778] Bluetooth: hci0: command 0x040f tx timeout [ 54.250195][ T5137] Bluetooth: hci3: command tx timeout [ 54.250214][ T5137] Bluetooth: hci2: command tx timeout [ 54.250225][ T5137] Bluetooth: hci1: command tx timeout [ 54.316763][ T6194] cgroup2: Unknown parameter 'nsaelegate' [ 54.393850][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 54.393886][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.63'. [ 54.416107][ T6201] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 54.441410][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.64'. [ 54.441444][ T6205] netlink: 36 bytes leftover after parsing attributes in process `syz.2.64'. [ 54.451869][ T6205] team0: Device ipip0 is up. Set it down before adding it as a team port [ 54.479891][ T6207] CUSE: info not properly terminated [ 54.497472][ T6210] Bluetooth: hci0: unsupported parameter 5161 [ 54.497491][ T6210] Bluetooth: hci0: unsupported parameter 8192 [ 54.497501][ T6210] Bluetooth: hci0: unsupported parameter 5161 [ 54.497511][ T6210] Bluetooth: hci0: unsupported parameter 8192 [ 54.504360][ T5776] svc: failed to register nfsdv3 RPC service (errno 5). [ 54.504382][ T5776] failed to unregister tcp with rpcbind [ 54.530649][ T6212] /dev/sr0: Can't open blockdev [ 54.565468][ T6214] Bluetooth: MGMT ver 1.23 [ 54.567956][ T6214] nbd: must specify an index to disconnect [ 54.580943][ T5825] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.783873][ T6232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.72'. [ 54.785346][ T6232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6232 comm=syz.2.72 [ 54.794726][ T6232] clocksource: Switched to clocksource acpi_pm [ 54.796913][ T6232] clocksource: Switched to clocksource tsc [ 54.833805][ T6234] netlink: 156 bytes leftover after parsing attributes in process `syz.2.73'. [ 54.869528][ T5874] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 54.872114][ T6236] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 54.873455][ T6236] /dev/sr0: Can't open blockdev [ 54.909418][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.978456][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 55.000258][ T5874] usb 5-1: device descriptor read/64, error -71 [ 55.069485][ T58] usb 8-1: Using ep0 maxpacket: 16 [ 55.070291][ T58] usb 8-1: New USB device found: idVendor=18d1, idProduct=9400, bcdDevice=0.40 [ 55.073020][ T58] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 55.073044][ T58] usb 8-1: config 1 interface 0 has no altsetting 0 [ 55.075404][ T6245] 9pnet_virtio: no channels available for device syz [ 55.092257][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.092277][ T58] usb 8-1: Product: syz [ 55.092288][ T58] usb 8-1: Manufacturer: syz [ 55.092299][ T58] usb 8-1: SerialNumber: syz [ 55.190013][ T6253] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 55.192276][ T6253] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 55.239518][ T5874] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 55.369566][ T5874] usb 5-1: device descriptor read/64, error -71 [ 55.480159][ T5874] usb usb5-port1: attempt power cycle [ 55.781283][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.84'. [ 55.781723][ T6259] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 55.819445][ T5874] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 55.840673][ T5874] usb 5-1: device descriptor read/8, error -71 [ 56.079453][ T5874] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 56.099936][ T5874] usb 5-1: device descriptor read/8, error -71 [ 56.209549][ T5874] usb usb5-port1: unable to enumerate USB device [ 56.329479][ T5778] Bluetooth: hci0: command 0x040f tx timeout [ 56.348520][ T6260] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 56.506199][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 56.506213][ T43] audit: type=1400 audit(1794215795.306:413): avc: denied { map_read map_write } for pid=6256 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.622529][ T43] audit: type=1400 audit(1794215795.426:414): avc: denied { create } for pid=6266 comm="syz.2.86" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.670363][ T43] audit: type=1400 audit(1794215795.476:415): avc: denied { map } for pid=6268 comm="syz.1.87" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.670782][ T43] audit: type=1400 audit(1794215795.476:416): avc: denied { read write } for pid=6268 comm="syz.1.87" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.672283][ T43] audit: type=1400 audit(1794215795.476:417): avc: denied { map } for pid=6268 comm="syz.1.87" path="socket:[12382]" dev="sockfs" ino=12382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 56.718212][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.774014][ T43] audit: type=1400 audit(1794215795.576:418): avc: denied { write } for pid=6270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.861523][ T43] audit: type=1400 audit(1794215795.666:419): avc: denied { write } for pid=6276 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.019277][ T6280] xt_CONNSECMARK: invalid mode: 0 [ 57.063852][ T6282] FAULT_INJECTION: forcing a failure. [ 57.063852][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.063871][ T6282] CPU: 3 UID: 0 PID: 6282 Comm: syz.2.89 Not tainted syzkaller #0 PREEMPT(full) [ 57.063882][ T6282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.063889][ T6282] Call Trace: [ 57.063905][ T6282] [ 57.063909][ T6282] dump_stack_lvl+0x100/0x190 [ 57.063958][ T6282] should_fail_ex.cold+0x5/0xa [ 57.063977][ T6282] _copy_from_user+0x2e/0xd0 [ 57.063993][ T6282] restore_altstack+0x98/0x170 [ 57.064010][ T6282] ? __pfx_restore_altstack+0x10/0x10 [ 57.064026][ T6282] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.064063][ T6282] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.064076][ T6282] ? _raw_spin_unlock_irq+0x2e/0x50 [ 57.064089][ T6282] __do_sys_rt_sigreturn+0x176/0x290 [ 57.064102][ T6282] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 57.064118][ T6282] do_syscall_64+0x123/0x7b0 [ 57.064132][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.064143][ T6282] RIP: 0033:0x7f3e22540e99 [ 57.064153][ T6282] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 57.064163][ T6282] RSP: 002b:00007f3e2345a340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 57.064180][ T6282] RAX: ffffffffffffffda RBX: 00007f3e22825fa0 RCX: 00007f3e22540e99 [ 57.064186][ T6282] RDX: 00007f3e2345a340 RSI: 00007f3e2345a470 RDI: 0000000000000021 [ 57.064192][ T6282] RBP: 00007f3e22637b70 R08: 0000000000000000 R09: 0000000000000000 [ 57.064198][ T6282] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 57.064204][ T6282] R13: 00007f3e22826038 R14: 00007f3e22825fa0 R15: 00007ffda786f0c8 [ 57.064218][ T6282] [ 57.223477][ T43] audit: type=1400 audit(1794215796.026:420): avc: denied { ioctl } for pid=6281 comm="syz.2.89" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10887 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.327809][ T43] audit: type=1400 audit(1794215796.126:421): avc: denied { connect } for pid=6283 comm="syz.2.90" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.347915][ T43] audit: type=1400 audit(1794215796.146:422): avc: denied { write } for pid=6283 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.570659][ T58] usbhid 8-1:1.0: can't add hid device: -71 [ 57.570708][ T58] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 57.576012][ T58] usb 8-1: USB disconnect, device number 2 [ 57.597255][ T6295] overlay: Unknown parameter 'audit' [ 58.419467][ T1346] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.561870][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.564556][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.565072][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.565486][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.565930][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.570573][ T1346] usb 6-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 58.570878][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.571527][ T1346] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.571560][ T1346] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.573404][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.574142][ T1346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.574156][ T1346] usb 6-1: Product: syz [ 58.574165][ T1346] usb 6-1: Manufacturer: syz [ 58.574175][ T1346] usb 6-1: SerialNumber: syz [ 58.579213][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.580675][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.583183][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.584920][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.586451][ T1346] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 58.587760][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.592044][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.594279][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.596628][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.597559][ T1346] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 58.597559][ T1346] Please send a copy of this message to and [ 58.597880][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.603495][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.605128][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.606817][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.608842][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.614945][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.624362][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.626149][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.630100][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.632285][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.634371][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.636046][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.638928][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.646176][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.647729][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.653145][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.655593][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.657680][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.659842][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.661853][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.663628][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.666542][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.667137][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.668868][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.670885][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.673081][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.674495][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.676372][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.678066][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.680174][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.681999][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.684065][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.685388][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.687251][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.689063][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.691307][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.693472][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.695456][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.697284][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.698895][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.700785][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.702565][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.704671][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.708036][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.717715][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.721356][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.722310][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.723055][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.723885][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.724148][ T6322] overlayfs: failed to resolve './bus': -2 [ 58.887729][ T35] usb 6-1: USB disconnect, device number 2 [ 59.199861][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 59.199922][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.107'. [ 59.212332][ T6355] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 59.213884][ T6355] bond1 (unregistering): Released all slaves [ 59.306314][ T6364] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 59.315089][ T6364] netlink: 8572 bytes leftover after parsing attributes in process `syz.2.109'. [ 59.645926][ T6384] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 59.661119][ T6387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=6387 comm=syz.0.116 [ 59.739945][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.809402][ T80] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.869408][ T35] usb 6-1: device descriptor read/64, error -71 [ 59.934833][ T6405] openvswitch: netlink: IP tunnel dst address not specified [ 59.941404][ T5882] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 59.980307][ T80] usb 7-1: Using ep0 maxpacket: 32 [ 59.980929][ T80] usb 7-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 59.981780][ T80] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 59.981804][ T80] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 59.981816][ T80] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.981828][ T80] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 59.983724][ T80] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.983736][ T80] usb 7-1: Product: syz [ 59.983743][ T80] usb 7-1: Manufacturer: syz [ 59.983749][ T80] usb 7-1: SerialNumber: syz [ 59.993723][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 59.996167][ T5778] Bluetooth: hci0: Zero size dump init pkt [ 60.004134][ T80] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input7 [ 60.100221][ T5882] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 60.101174][ T5882] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.101197][ T5882] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 60.101217][ T5882] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.103015][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 60.103034][ T5882] usb 8-1: Product: syz [ 60.103045][ T5882] usb 8-1: Manufacturer: syz [ 60.103056][ T5882] usb 8-1: SerialNumber: syz [ 60.107316][ T5882] usb 8-1: config 0 descriptor?? [ 60.117617][ T5882] usb 8-1: selecting invalid altsetting 0 [ 60.129458][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 60.193277][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.193528][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.194074][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.202964][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.204069][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.204559][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.213654][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.214129][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.219975][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.220334][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.250296][ T80] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 60.250308][ T80] (id 0x00) [ 60.259563][ T35] usb 6-1: device descriptor read/64, error -71 [ 60.299433][ T80] rc_core: IR keymap rc-imon-pad not found [ 60.299452][ T80] Registered IR keymap rc-empty [ 60.299730][ T80] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 60.299746][ T80] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 60.381354][ T35] usb usb6-port1: attempt power cycle [ 60.451138][ T80] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 60.457482][ T80] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input8 [ 60.469287][ T80] imon 7-1:155.0: iMON device (15c2:ffdc) on usb<7:2> initialized [ 60.476750][ T80] usb 7-1: USB disconnect, device number 2 [ 60.719504][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 60.740801][ T35] usb 6-1: device descriptor read/8, error -71 [ 60.810347][ T5778] Bluetooth: hci0: command 0x040f tx timeout [ 60.812890][ T5874] usb 8-1: USB disconnect, device number 3 [ 60.875550][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 60.979672][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 60.999913][ T35] usb 6-1: device descriptor read/8, error -71 [ 61.026845][ T6434] Console: switching to colour dummy device 80x25 [ 61.054058][ T6430] FAULT_INJECTION: forcing a failure. [ 61.054058][ T6430] name fail_futex, interval 1, probability 0, space 0, times 1 [ 61.054087][ T6430] CPU: 3 UID: 0 PID: 6430 Comm: syz.0.128 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.054110][ T6430] Tainted: [L]=SOFTLOCKUP [ 61.054116][ T6430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.054140][ T6430] Call Trace: [ 61.054149][ T6430] [ 61.054154][ T6430] dump_stack_lvl+0x100/0x190 [ 61.054180][ T6430] should_fail_ex.cold+0x5/0xa [ 61.054198][ T6430] get_futex_key+0x1c9/0x13e0 [ 61.054215][ T6430] ? __pfx_get_futex_key+0x10/0x10 [ 61.054230][ T6430] futex_wait_setup+0x91/0x540 [ 61.054248][ T6430] __futex_wait+0x19f/0x360 [ 61.054263][ T6430] ? __pfx___futex_wait+0x10/0x10 [ 61.054276][ T6430] ? futex_hash+0x311/0x400 [ 61.054289][ T6430] ? __pfx_futex_wake_mark+0x10/0x10 [ 61.054307][ T6430] ? __pfx_futex_hash+0x10/0x10 [ 61.054317][ T6430] ? __pfx_get_futex_key+0x10/0x10 [ 61.054333][ T6430] futex_wait+0xe6/0x370 [ 61.054348][ T6430] ? __pfx_futex_wait+0x10/0x10 [ 61.054362][ T6430] ? __fget_files+0x215/0x3d0 [ 61.054381][ T6430] do_futex+0x265/0x440 [ 61.054394][ T6430] ? __pfx_do_futex+0x10/0x10 [ 61.054406][ T6430] ? __pfx_do_mq_notify+0x10/0x10 [ 61.054422][ T6430] __x64_sys_futex+0x34f/0x4d0 [ 61.054436][ T6430] ? __pfx___x64_sys_futex+0x10/0x10 [ 61.054453][ T6430] do_syscall_64+0x123/0x7b0 [ 61.054471][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.054481][ T6430] RIP: 0033:0x7fa96b99fb19 [ 61.054491][ T6430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.054500][ T6430] RSP: 002b:00007fa96c8ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 61.054520][ T6430] RAX: ffffffffffffffda RBX: 00007fa96bc25fa8 RCX: 00007fa96b99fb19 [ 61.054527][ T6430] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa96bc25fa8 [ 61.054534][ T6430] RBP: 00007fa96bc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 61.054540][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.054547][ T6430] R13: 00007fa96bc26038 R14: 00007fffaf9f2a80 R15: 00007fffaf9f2b68 [ 61.054561][ T6430] [ 61.113390][ T35] usb usb6-port1: unable to enumerate USB device [ 61.183962][ T6440] mmap: syz.0.130 (6440) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.312906][ T6444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 61.337426][ T6434] ------------[ cut here ]------------ [ 61.337446][ T6434] Memory manager not clean during takedown. [ 61.337458][ T6434] WARNING: drivers/gpu/drm/drm_mm.c:965 at drm_mm_takedown+0x62/0x280, CPU#0: syz.3.129/6434 [ 61.344757][ T6434] Modules linked in: [ 61.346018][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.3.129 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.349293][ T6434] Tainted: [L]=SOFTLOCKUP [ 61.351039][ T6434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.354182][ T6434] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 61.355895][ T6434] Code: 8b 43 38 48 39 c5 75 16 e8 ab 3b 28 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 95 3b 28 fc 48 8d 3d ee eb 8f 0c <67> 48 0f b9 3a 48 c7 c0 80 a4 8f 8e 48 ba 00 00 00 00 00 fc ff df [ 61.362321][ T6434] RSP: 0018:ffffc90003eaf788 EFLAGS: 00010293 [ 61.364285][ T6434] RAX: 0000000000000000 RBX: ffff888028d9a468 RCX: 0000000000000000 [ 61.366783][ T6434] RDX: ffff8880290fcb00 RSI: ffffffff85e6456b RDI: ffffffff92763160 [ 61.369264][ T6434] RBP: ffff888028d9a4a0 R08: 0000000000000000 R09: 0000000000000000 [ 61.372202][ T6434] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888023de3000 [ 61.374585][ T6434] R13: ffff888023de3018 R14: ffffffff85e51c60 R15: 0000000000000000 [ 61.376911][ T6434] FS: 00007f8becbb46c0(0000) GS:ffff8880d4471000(0000) knlGS:0000000000000000 [ 61.379859][ T6434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.381915][ T6434] CR2: 000000110c2fe13f CR3: 00000000394c0000 CR4: 0000000000352ef0 [ 61.384401][ T6434] Call Trace: [ 61.385486][ T6434] [ 61.386421][ T6434] ? __pfx_drm_gem_init_release+0x10/0x10 [ 61.388191][ T6434] drm_managed_release+0x1bb/0x540 [ 61.389988][ T6434] ? __pfx_virtio_gpu_release+0x10/0x10 [ 61.391994][ T6434] drm_dev_put.part.0+0xca/0x140 [ 61.393759][ T6434] drm_dev_put+0x1f/0x30 [ 61.395095][ T6434] virtio_dev_remove+0xbf/0x220 [ 61.396692][ T6434] ? __pfx_virtio_dev_remove+0x10/0x10 [ 61.398453][ T6434] device_remove+0xcb/0x180 [ 61.400200][ T6434] device_release_driver_internal+0x441/0x610 [ 61.402151][ T6434] ? driver_release+0x80/0x90 [ 61.403664][ T6434] bus_remove_device+0x2bc/0x560 [ 61.405192][ T6434] ? __pfx_bus_remove_device+0x10/0x10 [ 61.406859][ T6434] ? __pfx_device_remove_attrs+0x10/0x10 [ 61.408716][ T6434] device_del+0x376/0x9b0 [ 61.410273][ T6434] ? __pfx_device_del+0x10/0x10 [ 61.411795][ T6434] ? __pfx___might_resched+0x10/0x10 [ 61.413465][ T6434] ? __pfx_pci_device_is_present+0x10/0x10 [ 61.415316][ T6434] device_unregister+0x1d/0xe0 [ 61.416833][ T6434] unregister_virtio_device+0x39/0x60 [ 61.418493][ T6434] virtio_pci_remove+0x7c/0x110 [ 61.420240][ T6434] pci_device_remove+0xb2/0x1d0 [ 61.421766][ T6434] ? __pfx_pci_device_remove+0x10/0x10 [ 61.423467][ T6434] device_remove+0xcb/0x180 [ 61.424904][ T6434] device_release_driver_internal+0x441/0x610 [ 61.426715][ T6434] pci_stop_bus_device+0x120/0x160 [ 61.428391][ T6434] pci_stop_and_remove_bus_device+0x58/0xa0 [ 61.430409][ T6434] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 61.432348][ T6434] remove_store+0x123/0x140 [ 61.433846][ T6434] ? __pfx_remove_store+0x10/0x10 [ 61.435414][ T6434] ? find_held_lock+0x2b/0x80 [ 61.436907][ T6434] ? sysfs_file_kobj+0xe4/0x290 [ 61.438436][ T6434] ? sysfs_file_kobj+0xe4/0x290 [ 61.440053][ T6434] ? __pfx_remove_store+0x10/0x10 [ 61.441633][ T6434] dev_attr_store+0x58/0x80 [ 61.443221][ T6434] ? __pfx_dev_attr_store+0x10/0x10 [ 61.444847][ T6434] sysfs_kf_write+0xf2/0x150 [ 61.446282][ T6434] kernfs_fop_write_iter+0x3e0/0x5f0 [ 61.448137][ T6434] ? __pfx_sysfs_kf_write+0x10/0x10 [ 61.449976][ T6434] vfs_write+0x6af/0x1040 [ 61.451313][ T6434] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 61.453047][ T6434] ? __pfx_vfs_write+0x10/0x10 [ 61.454576][ T6434] ? find_held_lock+0x2b/0x80 [ 61.456142][ T6434] ksys_write+0x12a/0x250 [ 61.457537][ T6434] ? __pfx_ksys_write+0x10/0x10 [ 61.459073][ T6434] do_syscall_64+0x123/0x7b0 [ 61.460623][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.462469][ T6434] RIP: 0033:0x7f8bebd9fb19 [ 61.463937][ T6434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.470129][ T6434] RSP: 002b:00007f8becbb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.473465][ T6434] RAX: ffffffffffffffda RBX: 00007f8bec026180 RCX: 00007f8bebd9fb19 [ 61.475889][ T6434] RDX: 0000000000000001 RSI: 0000200000000b80 RDI: 0000000000000005 [ 61.478225][ T6434] RBP: 00007f8bebe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 61.480635][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.483078][ T6434] R13: 00007f8bec026218 R14: 00007f8bec026180 R15: 00007fffde82b6a8 [ 61.485572][ T6434] [ 61.486743][ T6434] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 61.489008][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.3.129 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.492292][ T6434] Tainted: [L]=SOFTLOCKUP [ 61.493685][ T6434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.496803][ T6434] Call Trace: [ 61.497862][ T6434] [ 61.498799][ T6434] dump_stack_lvl+0x100/0x190 [ 61.500284][ T6434] vpanic+0x2dc/0x6f8 [ 61.501505][ T6434] panic+0xd1/0xe0 [ 61.502652][ T6434] ? __pfx_panic+0x10/0x10 [ 61.504030][ T6434] check_panic_on_warn.cold+0x19/0x34 [ 61.505572][ T6434] ? drm_mm_takedown+0x62/0x280 [ 61.507022][ T6434] __warn.cold+0x191/0x321 [ 61.508429][ T6434] __report_bug+0x30f/0x440 [ 61.509858][ T6434] ? drm_mm_takedown+0x62/0x280 [ 61.511386][ T6434] ? __pfx___report_bug+0x10/0x10 [ 61.512961][ T6434] ? device_remove+0xcb/0x180 [ 61.514486][ T6434] ? device_release_driver_internal+0x441/0x610 [ 61.516464][ T6434] ? pci_stop_bus_device+0x120/0x160 [ 61.518115][ T6434] ? drm_mm_takedown+0x5b/0x280 [ 61.519660][ T6434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.521564][ T6434] report_bug_entry+0xe2/0x290 [ 61.523071][ T6434] ? drm_mm_takedown+0x62/0x280 [ 61.524650][ T6434] handle_bug+0x1cd/0x2a0 [ 61.526014][ T6434] exc_invalid_op+0x17/0x50 [ 61.527444][ T6434] asm_exc_invalid_op+0x1a/0x20 [ 61.528975][ T6434] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 61.530668][ T6434] Code: 8b 43 38 48 39 c5 75 16 e8 ab 3b 28 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 95 3b 28 fc 48 8d 3d ee eb 8f 0c <67> 48 0f b9 3a 48 c7 c0 80 a4 8f 8e 48 ba 00 00 00 00 00 fc ff df [ 61.536635][ T6434] RSP: 0018:ffffc90003eaf788 EFLAGS: 00010293 [ 61.538524][ T6434] RAX: 0000000000000000 RBX: ffff888028d9a468 RCX: 0000000000000000 [ 61.540974][ T6434] RDX: ffff8880290fcb00 RSI: ffffffff85e6456b RDI: ffffffff92763160 [ 61.543427][ T6434] RBP: ffff888028d9a4a0 R08: 0000000000000000 R09: 0000000000000000 [ 61.545895][ T6434] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888023de3000 [ 61.548345][ T6434] R13: ffff888023de3018 R14: ffffffff85e51c60 R15: 0000000000000000 [ 61.550812][ T6434] ? __pfx_drm_gem_init_release+0x10/0x10 [ 61.552596][ T6434] ? drm_mm_takedown+0x5b/0x280 [ 61.554143][ T6434] ? drm_mm_takedown+0x5b/0x280 [ 61.555666][ T6434] ? __pfx_drm_gem_init_release+0x10/0x10 [ 61.557462][ T6434] drm_managed_release+0x1bb/0x540 [ 61.559060][ T6434] ? __pfx_virtio_gpu_release+0x10/0x10 [ 61.560782][ T6434] drm_dev_put.part.0+0xca/0x140 [ 61.562242][ T6434] drm_dev_put+0x1f/0x30 [ 61.563537][ T6434] virtio_dev_remove+0xbf/0x220 [ 61.565046][ T6434] ? __pfx_virtio_dev_remove+0x10/0x10 [ 61.566693][ T6434] device_remove+0xcb/0x180 [ 61.568141][ T6434] device_release_driver_internal+0x441/0x610 [ 61.570038][ T6434] ? driver_release+0x80/0x90 [ 61.571520][ T6434] bus_remove_device+0x2bc/0x560 [ 61.573078][ T6434] ? __pfx_bus_remove_device+0x10/0x10 [ 61.574802][ T6434] ? __pfx_device_remove_attrs+0x10/0x10 [ 61.576587][ T6434] device_del+0x376/0x9b0 [ 61.577953][ T6434] ? __pfx_device_del+0x10/0x10 [ 61.579476][ T6434] ? __pfx___might_resched+0x10/0x10 [ 61.581137][ T6434] ? __pfx_pci_device_is_present+0x10/0x10 [ 61.582909][ T6434] device_unregister+0x1d/0xe0 [ 61.584522][ T6434] unregister_virtio_device+0x39/0x60 [ 61.586198][ T6434] virtio_pci_remove+0x7c/0x110 [ 61.587729][ T6434] pci_device_remove+0xb2/0x1d0 [ 61.589266][ T6434] ? __pfx_pci_device_remove+0x10/0x10 [ 61.590963][ T6434] device_remove+0xcb/0x180 [ 61.592387][ T6434] device_release_driver_internal+0x441/0x610 [ 61.594328][ T6434] pci_stop_bus_device+0x120/0x160 [ 61.596022][ T6434] pci_stop_and_remove_bus_device+0x58/0xa0 [ 61.597982][ T6434] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 61.599955][ T6434] remove_store+0x123/0x140 [ 61.601342][ T6434] ? __pfx_remove_store+0x10/0x10 [ 61.602849][ T6434] ? find_held_lock+0x2b/0x80 [ 61.604339][ T6434] ? sysfs_file_kobj+0xe4/0x290 [ 61.605794][ T6434] ? sysfs_file_kobj+0xe4/0x290 [ 61.607232][ T6434] ? __pfx_remove_store+0x10/0x10 [ 61.608761][ T6434] dev_attr_store+0x58/0x80 [ 61.610140][ T6434] ? __pfx_dev_attr_store+0x10/0x10 [ 61.611699][ T6434] sysfs_kf_write+0xf2/0x150 [ 61.613172][ T6434] kernfs_fop_write_iter+0x3e0/0x5f0 [ 61.614830][ T6434] ? __pfx_sysfs_kf_write+0x10/0x10 [ 61.616473][ T6434] vfs_write+0x6af/0x1040 [ 61.617824][ T6434] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 61.619633][ T6434] ? __pfx_vfs_write+0x10/0x10 [ 61.621178][ T6434] ? find_held_lock+0x2b/0x80 [ 61.622622][ T6434] ksys_write+0x12a/0x250 [ 61.623947][ T6434] ? __pfx_ksys_write+0x10/0x10 [ 61.625415][ T6434] do_syscall_64+0x123/0x7b0 [ 61.626791][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.628608][ T6434] RIP: 0033:0x7f8bebd9fb19 [ 61.630010][ T6434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.635828][ T6434] RSP: 002b:00007f8becbb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.638322][ T6434] RAX: ffffffffffffffda RBX: 00007f8bec026180 RCX: 00007f8bebd9fb19 [ 61.640658][ T6434] RDX: 0000000000000001 RSI: 0000200000000b80 RDI: 0000000000000005 [ 61.643095][ T6434] RBP: 00007f8bebe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 61.645548][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.647980][ T6434] R13: 00007f8bec026218 R14: 00007f8bec026180 R15: 00007fffde82b6a8 [ 61.650424][ T6434] [ 61.652094][ T6434] Kernel Offset: disabled [ 61.653391][ T6434] Rebooting in 86400 seconds..