[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.004587][ T26] audit: type=1800 audit(1569237179.245:25): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 58.036710][ T26] audit: type=1800 audit(1569237179.255:26): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 58.064785][ T26] audit: type=1800 audit(1569237179.255:27): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.188' (ECDSA) to the list of known hosts. 2019/09/23 11:13:11 fuzzer started 2019/09/23 11:13:13 dialing manager at 10.128.0.26:45087 2019/09/23 11:13:13 syscalls: 2338 2019/09/23 11:13:13 code coverage: enabled 2019/09/23 11:13:13 comparison tracing: enabled 2019/09/23 11:13:13 extra coverage: extra coverage is not supported by the kernel 2019/09/23 11:13:13 setuid sandbox: enabled 2019/09/23 11:13:13 namespace sandbox: enabled 2019/09/23 11:13:13 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/23 11:13:13 fault injection: enabled 2019/09/23 11:13:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/23 11:13:13 net packet injection: enabled 2019/09/23 11:13:13 net device setup: enabled 11:15:28 executing program 0: r0 = socket(0x22, 0x2, 0x4) recvmmsg(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) syzkaller login: [ 207.239676][ T8884] IPVS: ftp: loaded support on port[0] = 21 11:15:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x4000, 0x0, 0x0, 0x0, 0x0) pipe(0x0) [ 207.384009][ T8884] chnl_net:caif_netlink_parms(): no params data found [ 207.433027][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.435658][ T8887] IPVS: ftp: loaded support on port[0] = 21 [ 207.451830][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.461424][ T8884] device bridge_slave_0 entered promiscuous mode [ 207.485304][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.492509][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.502336][ T8884] device bridge_slave_1 entered promiscuous mode [ 207.541700][ T8884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.554504][ T8884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.587711][ T8884] team0: Port device team_slave_0 added [ 207.595093][ T8884] team0: Port device team_slave_1 added 11:15:28 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x3e00, 0x0) [ 207.677809][ T8884] device hsr_slave_0 entered promiscuous mode [ 207.715838][ T8884] device hsr_slave_1 entered promiscuous mode [ 207.753075][ T8890] IPVS: ftp: loaded support on port[0] = 21 [ 207.797001][ T8887] chnl_net:caif_netlink_parms(): no params data found [ 207.839627][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.846943][ T8884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.854878][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.861963][ T8884] bridge0: port 1(bridge_slave_0) entered forwarding state 11:15:29 executing program 3: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f95a0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7e499f5c5fd21dacb7b35ad2998aca50dedea299e5deb90bd622b9f4a177373afcbc3b5bf61816d9160365cccc061c938047d9953b277929434509c7ecfe9659f8afccc983090dfe92f8ec65fcc8e262ebca23c7e811847e2477054fc0136e136f1c21122803ab2e3a7c209f2ad15cbf989a88b6f264c970c954c01b33dd9e31ea8a7dc73435827acf47ed6c54e943473102300841ecb2e78bd261b870452493a3426094b006c2694acba7374666ae1dd0b6e1bd8307f1220b4944f972b13c88dad75f0010ef63c18ad73ee87cd8", @ANYRES64, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="9f3388c5b87b558d8aedcbb605ebcfca9ba7e5b7f64c5649b189d8f1e87738c76cf8a8e40e1fbf46ab9732e45248041521c0ba892dff7fce"], 0x0, 0x134}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000140)=0xc) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 207.946977][ T8887] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.954330][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.963057][ T8887] device bridge_slave_0 entered promiscuous mode [ 207.998743][ T8887] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.008461][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.017457][ T8887] device bridge_slave_1 entered promiscuous mode [ 208.117408][ T8887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.159684][ T8884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.177907][ T8887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.204402][ T8890] chnl_net:caif_netlink_parms(): no params data found [ 208.228023][ T8895] IPVS: ftp: loaded support on port[0] = 21 [ 208.228297][ T8884] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.242356][ T8887] team0: Port device team_slave_0 added [ 208.250587][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:15:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) [ 208.262525][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.289596][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.307639][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 208.368637][ T8887] team0: Port device team_slave_1 added [ 208.381717][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.395297][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.402583][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.472019][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.498878][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.515278][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.522393][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.532999][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 11:15:29 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='cgroup\x00', 0x0, &(0x7f00000001c0)='sysfs\x00') [ 208.583893][ T8898] IPVS: ftp: loaded support on port[0] = 21 [ 208.617705][ T8887] device hsr_slave_0 entered promiscuous mode [ 208.678308][ T8900] IPVS: ftp: loaded support on port[0] = 21 [ 208.685582][ T8887] device hsr_slave_1 entered promiscuous mode [ 208.744919][ T8887] debugfs: Directory 'hsr0' with parent '/' already present! [ 208.756590][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.765662][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.772899][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.781751][ T8890] device bridge_slave_0 entered promiscuous mode [ 208.800083][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.809250][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.832612][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.840171][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.848217][ T8890] device bridge_slave_1 entered promiscuous mode [ 208.856675][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.889950][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.899583][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.921183][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.953774][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.963790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.972889][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.035361][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.044089][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.058541][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.078616][ T8890] team0: Port device team_slave_0 added [ 209.087350][ T8895] chnl_net:caif_netlink_parms(): no params data found [ 209.114041][ T8890] team0: Port device team_slave_1 added [ 209.152809][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.163049][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.171120][ T8895] device bridge_slave_0 entered promiscuous mode [ 209.180174][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.187394][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.195658][ T8895] device bridge_slave_1 entered promiscuous mode [ 209.307658][ T8890] device hsr_slave_0 entered promiscuous mode [ 209.345609][ T8890] device hsr_slave_1 entered promiscuous mode [ 209.395291][ T8890] debugfs: Directory 'hsr0' with parent '/' already present! [ 209.410007][ T8887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.431252][ T8884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.446008][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.456387][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 209.525514][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.562754][ T8895] team0: Port device team_slave_0 added [ 209.574058][ T8895] team0: Port device team_slave_1 added [ 209.583951][ T8887] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.592724][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 11:15:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x2200, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) [ 209.620099][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.666924][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.674109][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.683121][ T8900] device bridge_slave_0 entered promiscuous mode [ 209.691290][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.698989][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.712774][ T8900] device bridge_slave_1 entered promiscuous mode [ 209.728301][ T8898] chnl_net:caif_netlink_parms(): no params data found [ 209.787989][ T8895] device hsr_slave_0 entered promiscuous mode [ 209.838305][ T8895] device hsr_slave_1 entered promiscuous mode 11:15:31 executing program 0: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r2, r1}}, 0x18) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x40046109, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$addseals(r5, 0x409, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x40046109, &(0x7f0000000300)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xda4fff08) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 209.884850][ T8895] debugfs: Directory 'hsr0' with parent '/' already present! [ 209.900182][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.955118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.963877][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.980333][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.988026][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.996709][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.005675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.014909][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.021985][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.030280][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.039330][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 11:15:31 executing program 0: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r2, r1}}, 0x18) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x40046109, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$addseals(r5, 0x409, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x40046109, &(0x7f0000000300)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xda4fff08) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 210.048336][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.057780][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.068684][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.085977][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.111103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.151676][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.164367][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.185573][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 11:15:31 executing program 0: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r2, r1}}, 0x18) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x40046109, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$addseals(r5, 0x409, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x40046109, &(0x7f0000000300)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xda4fff08) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) [ 210.195261][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.244495][ T8900] team0: Port device team_slave_0 added [ 210.276901][ T8900] team0: Port device team_slave_1 added [ 210.282852][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.290369][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.298776][ T8898] device bridge_slave_0 entered promiscuous mode [ 210.306911][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.314370][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.322778][ T8898] device bridge_slave_1 entered promiscuous mode 11:15:31 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000540)={0xfffffffffffffff9, 0x7fffffff, 0xffff, 0x401, 0x14, 0x80000001}) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) getpgrp(0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r3}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'sm3-generic\x00\x00\x00\x03\x00'}}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) close(r11) r12 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="fe9ea9fb8c9bbd4f"], 0x8) ftruncate(r12, 0x200004) sendfile(r6, r12, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x14}, 0x1}, @in6={0xa, 0x4e23, 0xfffffffffffffff7, @loopback, 0x4}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000002c0)={r13, 0x1}, &(0x7f0000000300)=0x8) [ 210.358963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.390314][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.421656][ T8887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.428820][ C0] hrtimer: interrupt took 34797 ns [ 210.507795][ T8900] device hsr_slave_0 entered promiscuous mode [ 210.555096][ T8900] device hsr_slave_1 entered promiscuous mode [ 210.587329][ T8937] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 210.595151][ T8900] debugfs: Directory 'hsr0' with parent '/' already present! [ 210.633566][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.686002][ T8887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.695637][ T8898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.739672][ T8898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.800620][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.809969][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.824228][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.834472][ T8895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.846598][ T8898] team0: Port device team_slave_0 added [ 210.879661][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.893841][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.903303][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.910544][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.919135][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.928916][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.937718][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.945033][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.963309][ T8898] team0: Port device team_slave_1 added [ 211.013751][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.050566][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.076686][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.109672][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.124359][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.140908][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.153018][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.229712][ T8895] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.265377][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 11:15:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d56f070") socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x20, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) poll(&(0x7f0000000080), 0x1fffffe2, 0x6d) [ 211.278441][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.329751][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.373056][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 11:15:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000140)=0x7fff, 0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SMI(r7, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) fstat(r3, &(0x7f0000000080)) [ 211.446891][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.497076][ T8890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.528661][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.552434][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.561545][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.570560][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.579658][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.586825][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.587754][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.688403][ T8898] device hsr_slave_0 entered promiscuous mode [ 211.775881][ T8898] device hsr_slave_1 entered promiscuous mode [ 211.797943][ T8898] debugfs: Directory 'hsr0' with parent '/' already present! [ 211.821434][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.830884][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.847139][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.854229][ T8891] bridge0: port 2(bridge_slave_1) entered forwarding state 11:15:33 executing program 0: futex(0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0) [ 211.870953][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.914868][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.923699][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.951010][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.954090][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.004082][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.022862][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.038875][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.048140][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.071426][ T8895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.088624][ T8895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.115755][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.124145][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.133197][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.143090][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.152559][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.178553][ T8895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.197114][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.206172][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 11:15:33 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x5080, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000080)) openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000080)) dup2(r1, r2) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000000)=0x401) getuid() socket$inet(0x2, 0x3, 0x2) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x69b, 0x3014, 0x5, 0x0, 0x1}}) preadv(r3, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 212.234421][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.271613][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.294374][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.314290][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.321438][ T8891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.350743][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.358878][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.381802][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.390972][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.398223][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.424885][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.433544][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.484299][ T8975] ptrace attach of "/root/syz-executor.3"[8974] was attempted by "/root/syz-executor.3"[8975] [ 212.515797][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 11:15:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffed8) ioctl(0xffffffffffffffff, 0x10001, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x13fd11861db1e4e2) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0x2b) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x20, 0x20, 0xf29}, 0x20}}, 0x0) [ 212.533872][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.544190][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.559085][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.568919][ T8921] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.582347][ T8898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.598093][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.607796][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.618900][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.629417][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.640777][ T8900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.651484][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.684819][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.692781][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.701965][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.725928][ T8898] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.752625][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.783997][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.796107][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.804414][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.811631][ T8891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.819666][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.841966][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.851645][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.862522][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.869692][ T8891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.877756][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.886704][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.895567][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.904375][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.913117][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.921905][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.931939][ T8891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.953174][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.961840][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.980029][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.988904][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.998697][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.026767][ T8898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.072924][ T8983] cgroup1: Unknown subsys name 'sysfs' 11:15:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x2e3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x9, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xff, 0x0, 0x2, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 11:15:34 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000000c0)=0x0) tkill(r7, 0x27) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000500)) recvmmsg(0xffffffffffffffff, &(0x7f0000007b00)=[{{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000002740)}, 0x49bf}, {{&(0x7f0000002780)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002800)}, {&(0x7f0000002840)=""/143, 0x8f}, {&(0x7f0000002900)=""/24, 0x18}], 0x3, &(0x7f0000002980)=""/97, 0x61}, 0x4}, {{&(0x7f0000002a00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002a80)=""/47, 0x2f}, {&(0x7f0000002ac0)=""/250, 0xfa}, {&(0x7f0000002bc0)=""/33, 0x21}], 0x3, &(0x7f0000002c40)=""/167, 0xa7}}, {{&(0x7f0000002d00)=@x25={0x9, @remote}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d80)=""/59, 0x3b}, {&(0x7f0000002dc0)=""/235, 0xeb}, {&(0x7f0000002ec0)=""/13, 0xd}, {&(0x7f0000002f00)=""/199, 0xf6}, {&(0x7f0000003000)=""/102, 0x66}], 0x5}, 0x2}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000003180)=""/227, 0xe3}, {&(0x7f0000003280)=""/117, 0x75}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/207, 0xcf}, {&(0x7f0000004400)}], 0x5, &(0x7f00000044c0)}, 0x3}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005a40)=""/89, 0x59}, {&(0x7f0000005ac0)=""/223, 0xdf}, {&(0x7f0000005bc0)=""/245, 0xf5}, {&(0x7f0000005cc0)=""/128, 0x80}, {&(0x7f0000005d40)=""/170, 0xaa}, {&(0x7f0000005e00)=""/185, 0xb9}, {0x0}, {&(0x7f0000005f80)=""/183, 0xb7}], 0x8, &(0x7f00000060c0)=""/230, 0xe6}, 0x9}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f00000061c0)=""/202, 0xca}, {&(0x7f00000062c0)=""/167, 0xa7}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/127, 0x7f}, {&(0x7f0000007400)=""/20, 0x14}, {&(0x7f0000007440)=""/128, 0x80}, {&(0x7f00000074c0)=""/184, 0xb8}, {&(0x7f0000007580)=""/89, 0x59}, {&(0x7f0000007600)=""/46, 0x2e}, {&(0x7f0000007640)=""/98, 0x62}], 0xa}, 0x4}, {{&(0x7f0000007780)=@nl=@unspec, 0x80, &(0x7f0000007a00)=[{0x0}, {&(0x7f0000007980)=""/81, 0x51}], 0x2, &(0x7f0000007a40)=""/132, 0x84}, 0x2}], 0x8, 0x2060, 0x0) connect$can_bcm(r4, &(0x7f0000007d40)={0x1d, r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'nlmon0\x00', r8}) r10 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x8000, 0x8101) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x11, 0xfffffffffffffc3f, 0x6, 0x100, 0x140, r1, 0xfffffffffffffffa, [], r9, r10, 0x0, 0x5}, 0x3c) ftruncate(r1, 0x200004) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f00000002c0)="663f3433c7ed083b068331567744d76d30b2338c488ce0c646c82dd81e24534defd25b6e1f9411e87cf26de9ccac54455ab2bc9af05d7a2d7d9199bd5a542035bee61b3f", &(0x7f0000000540)=""/4096, 0x8}, 0x20) prctl$PR_MCE_KILL_GET(0x22) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$l2tp(r10, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x4, 0x1, 0x3, 0x4, {0xa, 0x4e21, 0x4, @mcast1, 0x7}}}, 0x3a) sendfile(r0, r1, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="530000001ca5038ea488f18ef63ad162d98d2bef6fd4213836959820b2ec58b97ab62298b23483ef2de99e203856e251ee2d3289956e4bc0d058d105577b163572e0e1d5240b9efa103c55000000000000000000000000008a0e6c2ed08f48e6b800"/111], &(0x7f0000000000)=0x5b) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r12, 0x4, 0xe6eeac47a0b1ffd4}, 0xc) 11:15:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000d06000), 0x4) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x5}, 0x8) ftruncate(r2, 0x200004) flistxattr(r2, &(0x7f00000000c0)=""/89, 0x59) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000000)={0x5, 0x3, 0xfffffffffffffc01}) 11:15:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='ip6erfpan0\x00\x80S\x00'}) ioctl$sock_SIOCGIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00\x00\x00\x04\x00'}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000180)=0x14) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) 11:15:34 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x17fe, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = dup2(r0, r0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x0) tee(r3, r2, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) connect$vsock_dgram(r2, &(0x7f0000000100), 0x10) tkill(r4, 0x16) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x1) 11:15:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000000010, 0x1) ioctl$FS_IOC_FSGETXATTR(r3, 0xc00c5512, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e21, 0x7fffffff, @mcast1, 0x4ccb}}, 0x7, 0xfffffffffffffff9, 0x20, 0x9}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r6, 0x1fffe00000000000}, &(0x7f0000000140)=0xc) r7 = dup(r0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0x88) r8 = socket(0x9, 0x80000, 0x400) setsockopt$inet6_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "a2187aebaf8b059a", "2474e4ccb66e28a36962b7c1a728bd0f", "0200", "c5fc6234cba07309"}, 0x28) r9 = socket$inet6(0xa, 0x400000000001, 0x0) close(r9) r10 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r10, 0x200004) sendfile(r9, r10, 0x0, 0x80001d00c0d0) write$UHID_CREATE(r10, &(0x7f0000000340)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000001c0)=""/93, 0x5d, 0x7, 0x3, 0x9, 0xffffffffffffff2c, 0x3}, 0x120) write$FUSE_ATTR(r7, &(0x7f0000000040)={0xffffffffffffff09}, 0xfddf) read$FUSE(r7, 0x0, 0x0) 11:15:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) write$P9_RREAD(r6, &(0x7f00000003c0)={0x10a, 0x75, 0x2, {0xff, "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"}}, 0x10a) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r7, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000000)) 11:15:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x2e3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x9, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xff, 0x0, 0x2, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 11:15:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregs(0xd, r2, 0x10001, &(0x7f0000000040)="0893203ad61cfea21e260cd6bb330bad25fbed323a28bee982d945a876eaeee5f0555ddf602d29c76a64fec44f0a657a04bedce6a21c8ebf28187d53b266") write$P9_RRENAMEAT(r1, 0x0, 0xc0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000200)=""/241) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) 11:15:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, &(0x7f0000000280)) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40a85321, &(0x7f0000000280)={{0xffffffffffffff80}}) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') write$apparmor_exec(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x22) r4 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) mkdirat(r4, &(0x7f0000000380)='./file1/file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) ustat(0x80, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f00000001c0)=0x68) r5 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x0, 0x80) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000540)=ANY=[@ANYBLOB="c700"/186]) renameat(r4, &(0x7f0000000240)='./file1/file0\x00', r4, &(0x7f00000003c0)='./file1\x00') acct(&(0x7f0000000140)='./file1\x00') 11:15:34 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x100000000000001, 0x0, &(0x7f0000000000)=0xfffffffffffffead) fallocate(r0, 0x20, 0x8, 0x100000001) [ 213.790922][ T33] Bluetooth: hci0: Frame reassembly failed (-84) 11:15:35 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:15:35 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0x6, 0xa3, [], &(0x7f00000001c0)=0x6}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0xa, @sliced}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000240)={0xfffffffffffff800, 0x1, 0x4, 0x100000, {}, {0x1, 0xc, 0x1, 0x4, 0x5026, 0x1, "9bdf3afd"}, 0x9, 0x2, @userptr=0x1f7a, 0x4}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f0000000000)='stat\x00') sched_getattr(r4, &(0x7f0000000000)={0x30}, 0x30, 0x0) 11:15:35 executing program 5: unshare(0x2000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)={0x18, r5, 0x31b, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="04002abd7000fcdbdf250f0000000400060028000600040002000400020008000100080000000800010006000000040002000400020004000200180005000c000200080001000d00000008006962000040000500080d971e0f74680008000002000000000000020008000200fcffffff0800020005000000080003000500000008000a03377091fb97d3010069620000"], 0x98}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) ftruncate(r0, 0x0) rmdir(&(0x7f0000000200)='./bus\x00') 11:15:35 executing program 0: sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x8000) 11:15:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002ec0)={{{@in=@local, @in6=@local}}, {{@in6=@initdev}}}, &(0x7f0000002fc0)=0xe8) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x200002) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000001c0)=0x9, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000200)={0x66f4a765, 0x21a, 0xac6, 0x4, 0x6, 0x1}) sendfile(r0, r2, 0x0, 0x80000003) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@dev, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, 0x0) 11:15:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0x5421, &(0x7f0000000180)={0x0, 0xff8, 0x0, {0x0, @vbi={0x0, 0x0, 0xffffffffffffff81}}}) 11:15:35 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x48) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x5}]}, 0x24}}, 0x0) [ 215.815417][ T1523] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 215.815713][ T3504] Bluetooth: hci0: command 0xfc11 tx timeout 11:15:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) write$P9_RREAD(r6, &(0x7f00000003c0)={0x10a, 0x75, 0x2, {0xff, "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"}}, 0x10a) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r7, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000000)) 11:15:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001400)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x4a909cc48c06d785, 0x2000, 0x1, 0x2e9e631c98120c5, 0x11}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) getsockname$inet(r5, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) ioctl$SG_IO(r0, 0x1267, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:15:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) getsockopt$inet_dccp_int(r5, 0x21, 0x0, &(0x7f0000000100), &(0x7f0000000180)=0x4) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r6, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffff81}]) 11:15:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000000)='stat\x00') r2 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/ipc\x00') ioctl$FS_IOC_GETFLAGS(r2, 0xb701, 0x0) 11:15:37 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) fanotify_init(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x301040, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xffffff15) rt_sigaction(0x19, 0x0, 0x0, 0x6, &(0x7f0000000000)) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x309580, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) r2 = socket(0x10, 0x80002, 0x7) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000001c0)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x8000}, &(0x7f0000000200)=0x10) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={r3, 0x7, 0x4, 0x40, 0x1, 0x8001, 0x0, 0x8001, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0xfffffffffffffffe, 0x525, 0xbc, 0x0, 0x9}}, &(0x7f0000000440)=0xb0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000580)=0x5) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0xa82296df33e19a4f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 11:15:37 executing program 1: unshare(0xa0000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='r2\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000000)={0x290000000000, 0x3f, 0x5fbf, 0x2}) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffd02, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r1, 0xe9b038d1c8b8214d, 0x0, 0xfffffffffffffffe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) 11:15:37 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net//..\x00', 0x314ea2ec15e387bd, 0x0) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x4100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = epoll_create1(0x180000) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000080)=0x8000, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000000)={r2, r5, 0x4}) [ 216.087703][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.094110][ T7] Bluetooth: hci0: Frame reassembly failed (-84) 11:15:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x8c2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000140)) [ 216.176326][ T9073] bond0: (slave bond_slave_1): Releasing backup interface 11:15:37 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) dup2(r0, r1) 11:15:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_cmd={0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000}}) 11:15:37 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0000000000000000ef00000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400000c000000000000000aaaaaa90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0a4fa9aaa73e4c40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000ab000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38) socket(0x1, 0x800, 0x0) [ 216.584586][ T9112] ebt_among: dst integrity fail: 200 [ 216.600584][ T9112] ebt_among: dst integrity fail: 200 11:15:37 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x0, 0x0, 0x2}}, 0x14) [ 217.036913][ T9083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.084694][ C0] [ 217.087072][ C0] ======================================================== [ 217.094268][ C0] WARNING: possible irq lock inversion dependency detected [ 217.101569][ C0] 5.3.0+ #0 Not tainted [ 217.105708][ C0] -------------------------------------------------------- [ 217.113073][ C0] syz-executor.0/9108 just changed the state of lock: [ 217.119857][ C0] ffff8880561c7b58 (&(&ctx->ctx_lock)->rlock){..-.}, at: free_ioctx_users+0x2d/0x490 [ 217.129575][ C0] but this lock took another, SOFTIRQ-unsafe lock in the past: [ 217.137176][ C0] (&fiq->waitq){+.+.} [ 217.137184][ C0] [ 217.137184][ C0] [ 217.137184][ C0] and interrupts could create inverse lock ordering between them. [ 217.137184][ C0] [ 217.155967][ C0] [ 217.155967][ C0] other info that might help us debug this: [ 217.164009][ C0] Possible interrupt unsafe locking scenario: [ 217.164009][ C0] [ 217.172310][ C0] CPU0 CPU1 [ 217.177663][ C0] ---- ---- [ 217.183008][ C0] lock(&fiq->waitq); [ 217.187057][ C0] local_irq_disable(); [ 217.193802][ C0] lock(&(&ctx->ctx_lock)->rlock); [ 217.201497][ C0] lock(&fiq->waitq); [ 217.208061][ C0] [ 217.211495][ C0] lock(&(&ctx->ctx_lock)->rlock); [ 217.217041][ C0] [ 217.217041][ C0] *** DEADLOCK *** [ 217.217041][ C0] [ 217.225171][ C0] 4 locks held by syz-executor.0/9108: [ 217.230605][ C0] #0: ffff88808adbcc20 (&(ptlock_ptr(page))->rlock#2){+.+.}, at: unmap_page_range+0x818/0x2580 [ 217.241012][ C0] #1: ffffffff88fab300 (rcu_read_lock){....}, at: lock_page_memcg+0x0/0x240 [ 217.249762][ C0] #2: ffffffff88fab240 (rcu_callback){....}, at: rcu_core+0x60e/0x1560 [ 217.258079][ C0] #3: ffffffff88fab280 (rcu_read_lock_sched){....}, at: percpu_ref_switch_to_atomic_rcu+0x20e/0x570 [ 217.269004][ C0] [ 217.269004][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 217.278356][ C0] -> (&fiq->waitq){+.+.} { [ 217.282950][ C0] HARDIRQ-ON-W at: [ 217.287005][ C0] lock_acquire+0x190/0x410 [ 217.293318][ C0] _raw_spin_lock+0x2f/0x40 [ 217.299624][ C0] flush_bg_queue+0x1f3/0x3c0 [ 217.306106][ C0] fuse_request_queue_background+0x2f8/0x5a0 [ 217.313887][ C0] fuse_request_send_background+0x58/0x110 [ 217.321496][ C0] cuse_channel_open+0x5ba/0x830 [ 217.328238][ C0] misc_open+0x395/0x4c0 [ 217.334284][ C0] chrdev_open+0x245/0x6b0 [ 217.340504][ C0] do_dentry_open+0x4df/0x1250 [ 217.347071][ C0] vfs_open+0xa0/0xd0 [ 217.352855][ C0] path_openat+0x10e9/0x4630 [ 217.359248][ C0] do_filp_open+0x1a1/0x280 [ 217.365561][ C0] do_sys_open+0x3fe/0x5d0 [ 217.371781][ C0] __x64_sys_openat+0x9d/0x100 [ 217.378386][ C0] do_syscall_64+0xfa/0x760 [ 217.384904][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.392599][ C0] SOFTIRQ-ON-W at: [ 217.396999][ C0] lock_acquire+0x190/0x410 [ 217.403306][ C0] _raw_spin_lock+0x2f/0x40 [ 217.409618][ C0] flush_bg_queue+0x1f3/0x3c0 [ 217.416098][ C0] fuse_request_queue_background+0x2f8/0x5a0 [ 217.423881][ C0] fuse_request_send_background+0x58/0x110 [ 217.431513][ C0] cuse_channel_open+0x5ba/0x830 [ 217.438340][ C0] misc_open+0x395/0x4c0 [ 217.444483][ C0] chrdev_open+0x245/0x6b0 [ 217.450792][ C0] do_dentry_open+0x4df/0x1250 [ 217.457370][ C0] vfs_open+0xa0/0xd0 [ 217.463247][ C0] path_openat+0x10e9/0x4630 [ 217.469640][ C0] do_filp_open+0x1a1/0x280 [ 217.475951][ C0] do_sys_open+0x3fe/0x5d0 [ 217.482173][ C0] __x64_sys_openat+0x9d/0x100 [ 217.488754][ C0] do_syscall_64+0xfa/0x760 [ 217.495148][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.502841][ C0] INITIAL USE at: [ 217.506806][ C0] lock_acquire+0x190/0x410 [ 217.513023][ C0] _raw_spin_lock+0x2f/0x40 [ 217.519242][ C0] flush_bg_queue+0x1f3/0x3c0 [ 217.525647][ C0] fuse_request_queue_background+0x2f8/0x5a0 [ 217.533343][ C0] fuse_request_send_background+0x58/0x110 [ 217.540968][ C0] cuse_channel_open+0x5ba/0x830 [ 217.547645][ C0] misc_open+0x395/0x4c0 [ 217.553614][ C0] chrdev_open+0x245/0x6b0 [ 217.559839][ C0] do_dentry_open+0x4df/0x1250 [ 217.566327][ C0] vfs_open+0xa0/0xd0 [ 217.572024][ C0] path_openat+0x10e9/0x4630 [ 217.578514][ C0] do_filp_open+0x1a1/0x280 [ 217.586036][ C0] do_sys_open+0x3fe/0x5d0 [ 217.592254][ C0] __x64_sys_openat+0x9d/0x100 [ 217.598736][ C0] do_syscall_64+0xfa/0x760 [ 217.604971][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.612580][ C0] } [ 217.615164][ C0] ... key at: [] __key.44672+0x0/0x40 [ 217.622848][ C0] ... acquired at: [ 217.626723][ C0] _raw_spin_lock+0x2f/0x40 [ 217.631397][ C0] io_submit_one+0xefa/0x2ef0 [ 217.636239][ C0] __x64_sys_io_submit+0x1bd/0x570 [ 217.641856][ C0] do_syscall_64+0xfa/0x760 [ 217.646517][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.652643][ C0] [ 217.654971][ C0] -> (&(&ctx->ctx_lock)->rlock){..-.} { [ 217.660596][ C0] IN-SOFTIRQ-W at: [ 217.664577][ C0] lock_acquire+0x190/0x410 [ 217.670884][ C0] _raw_spin_lock_irq+0x60/0x80 [ 217.677390][ C0] free_ioctx_users+0x2d/0x490 [ 217.683789][ C0] percpu_ref_switch_to_atomic_rcu+0x4c0/0x570 [ 217.691571][ C0] rcu_core+0x581/0x1560 [ 217.697440][ C0] rcu_core_si+0x9/0x10 [ 217.703224][ C0] __do_softirq+0x262/0x98c [ 217.709358][ C0] irq_exit+0x19b/0x1e0 [ 217.715147][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 217.722318][ C0] apic_timer_interrupt+0xf/0x20 [ 217.728880][ C0] __rcu_read_unlock+0x42/0x6b0 [ 217.735434][ C0] __unlock_page_memcg+0x58/0x100 [ 217.742088][ C0] unlock_page_memcg+0x2c/0x40 [ 217.748568][ C0] page_remove_rmap+0x614/0x1190 [ 217.755132][ C0] unmap_page_range+0xd43/0x2580 [ 217.761706][ C0] unmap_single_vma+0x19d/0x300 [ 217.768187][ C0] unmap_vmas+0x189/0x300 [ 217.774150][ C0] exit_mmap+0x2ba/0x530 [ 217.780033][ C0] mmput+0x179/0x4d0 [ 217.785557][ C0] do_exit+0x84e/0x2e50 [ 217.791428][ C0] do_group_exit+0x135/0x360 [ 217.797657][ C0] __x64_sys_exit_group+0x44/0x50 [ 217.804313][ C0] do_syscall_64+0xfa/0x760 [ 217.810445][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.817964][ C0] INITIAL USE at: [ 217.821841][ C0] lock_acquire+0x190/0x410 [ 217.827889][ C0] _raw_spin_lock_irq+0x60/0x80 [ 217.834283][ C0] io_submit_one+0xeb5/0x2ef0 [ 217.840502][ C0] __x64_sys_io_submit+0x1bd/0x570 [ 217.847156][ C0] do_syscall_64+0xfa/0x760 [ 217.853316][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.860764][ C0] } [ 217.863278][ C0] ... key at: [] __key.54289+0x0/0x40 [ 217.870737][ C0] ... acquired at: [ 217.874536][ C0] mark_lock+0x517/0x1220 [ 217.879133][ C0] __lock_acquire+0x1eaf/0x4e70 [ 217.884276][ C0] lock_acquire+0x190/0x410 [ 217.890377][ C0] _raw_spin_lock_irq+0x60/0x80 [ 217.895388][ C0] free_ioctx_users+0x2d/0x490 [ 217.900327][ C0] percpu_ref_switch_to_atomic_rcu+0x4c0/0x570 [ 217.906646][ C0] rcu_core+0x581/0x1560 [ 217.911045][ C0] rcu_core_si+0x9/0x10 [ 217.915356][ C0] __do_softirq+0x262/0x98c [ 217.920008][ C0] irq_exit+0x19b/0x1e0 [ 217.924315][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 217.930021][ C0] apic_timer_interrupt+0xf/0x20 [ 217.935111][ C0] __rcu_read_unlock+0x42/0x6b0 [ 217.940204][ C0] __unlock_page_memcg+0x58/0x100 [ 217.945383][ C0] unlock_page_memcg+0x2c/0x40 [ 217.950298][ C0] page_remove_rmap+0x614/0x1190 [ 217.955385][ C0] unmap_page_range+0xd43/0x2580 [ 217.960493][ C0] unmap_single_vma+0x19d/0x300 [ 217.965496][ C0] unmap_vmas+0x189/0x300 [ 217.969978][ C0] exit_mmap+0x2ba/0x530 [ 217.974370][ C0] mmput+0x179/0x4d0 [ 217.978419][ C0] do_exit+0x84e/0x2e50 [ 217.982726][ C0] do_group_exit+0x135/0x360 [ 217.987470][ C0] __x64_sys_exit_group+0x44/0x50 [ 217.992820][ C0] do_syscall_64+0xfa/0x760 [ 217.997475][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.003514][ C0] [ 218.005844][ C0] [ 218.005844][ C0] stack backtrace: [ 218.011717][ C0] CPU: 0 PID: 9108 Comm: syz-executor.0 Not tainted 5.3.0+ #0 [ 218.019166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.029201][ C0] Call Trace: [ 218.032464][ C0] [ 218.035305][ C0] dump_stack+0x172/0x1f0 [ 218.039619][ C0] print_irq_inversion_bug.part.0+0x2e4/0x2f1 [ 218.045666][ C0] check_usage_forwards.cold+0x20/0x29 [ 218.051106][ C0] ? check_usage_backwards+0x330/0x330 [ 218.056911][ C0] mark_lock+0x517/0x1220 [ 218.061232][ C0] ? check_usage_backwards+0x330/0x330 [ 218.066678][ C0] __lock_acquire+0x1eaf/0x4e70 [ 218.071516][ C0] ? __kasan_check_read+0x11/0x20 [ 218.076527][ C0] ? mark_lock+0xc2/0x1220 [ 218.081012][ C0] ? mark_held_locks+0xf0/0xf0 [ 218.085759][ C0] lock_acquire+0x190/0x410 [ 218.090252][ C0] ? free_ioctx_users+0x2d/0x490 [ 218.095169][ C0] _raw_spin_lock_irq+0x60/0x80 [ 218.099996][ C0] ? free_ioctx_users+0x2d/0x490 [ 218.104912][ C0] free_ioctx_users+0x2d/0x490 [ 218.109674][ C0] ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 218.115554][ C0] percpu_ref_switch_to_atomic_rcu+0x4c0/0x570 [ 218.121882][ C0] ? percpu_ref_exit+0xd0/0xd0 [ 218.126625][ C0] rcu_core+0x581/0x1560 [ 218.130860][ C0] ? __rcu_read_unlock+0x6b0/0x6b0 [ 218.136095][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 218.141618][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 218.147662][ C0] rcu_core_si+0x9/0x10 [ 218.151810][ C0] __do_softirq+0x262/0x98c [ 218.156292][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 218.161125][ C0] irq_exit+0x19b/0x1e0 [ 218.165264][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 218.170812][ C0] apic_timer_interrupt+0xf/0x20 [ 218.175759][ C0] [ 218.178704][ C0] RIP: 0010:__rcu_read_unlock+0x42/0x6b0 [ 218.184333][ C0] Code: 48 8b 1c 25 40 fe 01 00 4c 8d a3 78 03 00 00 48 83 ec 18 4c 89 e2 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e d8 00 00 00 <44> 8b b3 78 03 00 00 41 83 fe 01 74 2c 41 8d 96 fd ff ff 3f 41 8d [ 218.203920][ C0] RSP: 0018:ffff8880565878a8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 218.212312][ C0] RAX: 0000000000000000 RBX: ffff88809524e3c0 RCX: ffffffff8160bc24 [ 218.220311][ C0] RDX: 1ffff11012a49ce7 RSI: 0000000000000004 RDI: ffff8880ae8356a0 [ 218.228365][ C0] RBP: ffff8880565878e8 R08: 1ffff11015d06ad4 R09: ffffed1015d06ad5 [ 218.236316][ C0] R10: ffffed1015d06ad4 R11: ffff8880ae8356a3 R12: ffff88809524e738 [ 218.244352][ C0] R13: 0000000000000000 R14: ffffea000246eac8 R15: dead000000000100 [ 218.252402][ C0] ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 218.258286][ C0] ? __kasan_check_read+0x11/0x20 [ 218.263378][ C0] ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 218.269260][ C0] __unlock_page_memcg+0x58/0x100 [ 218.274264][ C0] unlock_page_memcg+0x2c/0x40 [ 218.279008][ C0] page_remove_rmap+0x614/0x1190 [ 218.283944][ C0] ? __tlb_remove_page_size+0x138/0x4a0 [ 218.289819][ C0] unmap_page_range+0xd43/0x2580 [ 218.294742][ C0] ? vm_normal_page_pmd+0x5b0/0x5b0 [ 218.299917][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 218.306143][ C0] ? uprobe_munmap+0xad/0x320 [ 218.310823][ C0] unmap_single_vma+0x19d/0x300 [ 218.315654][ C0] unmap_vmas+0x189/0x300 [ 218.319964][ C0] ? zap_vma_ptes+0x110/0x110 [ 218.324639][ C0] ? __kasan_check_write+0x14/0x20 [ 218.329728][ C0] exit_mmap+0x2ba/0x530 [ 218.333950][ C0] ? __ia32_sys_munmap+0x80/0x80 [ 218.338882][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 218.345100][ C0] ? __khugepaged_exit+0xcf/0x410 [ 218.350106][ C0] mmput+0x179/0x4d0 [ 218.353982][ C0] do_exit+0x84e/0x2e50 [ 218.358115][ C0] ? __sched_text_start+0x8/0x8 [ 218.363034][ C0] ? mm_update_next_owner+0x640/0x640 [ 218.368394][ C0] ? preempt_schedule_common+0x63/0xe0 [ 218.373832][ C0] ? preempt_schedule+0x4b/0x60 [ 218.378662][ C0] ? ___preempt_schedule+0x16/0x20 [ 218.383770][ C0] do_group_exit+0x135/0x360 [ 218.388516][ C0] __x64_sys_exit_group+0x44/0x50 [ 218.393519][ C0] do_syscall_64+0xfa/0x760 [ 218.398003][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.403877][ C0] RIP: 0033:0x459a09 [ 218.407757][ C0] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 218.427336][ C0] RSP: 002b:0000000000a6fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 218.435724][ C0] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000459a09 [ 218.444728][ C0] RDX: 00000000004136f1 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 218.452688][ C0] RBP: 0000000000000000 R08: ffffffffffffffff R09: 0000000000a6fde0 [ 218.460641][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 218.468589][ C0] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 218.485600][ T1523] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 218.485921][ T2872] Bluetooth: hci0: command 0xfc11 tx timeout [ 218.504929][ T9078] kobject: 'rfkill6' (0000000016c58009): kobject_uevent_env [ 218.517786][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env [ 218.520422][ T9078] kobject: 'rfkill6' (0000000016c58009): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill6' [ 218.526688][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 218.538601][ T9078] kobject: 'rfkill6' (0000000016c58009): kobject_cleanup, parent 000000000efc25e0 [ 218.559739][ T9078] kobject: 'rfkill6' (0000000016c58009): calling ktype release [ 218.567377][ T9078] kobject: 'rfkill6': free name [ 218.572311][ T9078] kobject: 'hci0' (00000000ac4de218): kobject_uevent_env [ 218.584942][ T9078] kobject: 'hci0' (00000000ac4de218): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 218.596744][ T3892] kobject: 'loop4' (00000000a764314e): kobject_uevent_env [ 218.603892][ T3892] kobject: 'loop4' (00000000a764314e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 218.617496][ T9078] kobject: 'bluetooth' (0000000095f6ad11): kobject_cleanup, parent 000000000efc25e0 [ 218.619025][ T3892] kobject: 'loop5' (00000000eb65a0de): kobject_uevent_env [ 218.627557][ T9078] kobject: 'bluetooth' (0000000095f6ad11): calling ktype release [ 218.634169][ T3892] kobject: 'loop5' (00000000eb65a0de): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 218.644243][ T9078] kobject: 'bluetooth': free name [ 218.662223][ T9078] kobject: 'hci0' (00000000ac4de218): kobject_cleanup, parent 000000000efc25e0 [ 218.672333][ T9078] kobject: 'hci0' (00000000ac4de218): calling ktype release [ 218.685726][ T9078] kobject: 'hci0': free name 11:15:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) write$P9_RREAD(r6, &(0x7f00000003c0)={0x10a, 0x75, 0x2, {0xff, "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"}}, 0x10a) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r7, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000000)) 11:15:39 executing program 2: mount(0x0, &(0x7f0000000500)='./file1\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) symlink(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000100)='./file1\x00') getegid() setregid(0x0, 0x0) r1 = geteuid() getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = geteuid() r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40400) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xa6) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() r13 = getgid() r14 = getgid() fstat(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r9, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="040002000000000008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r14, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0db3cfaed7ad098004", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r15], 0x21, 0x1) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r18 = socket$can_raw(0x1d, 0x3, 0x1) r19 = geteuid() r20 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40400) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xa6) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r17, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getegid() r27 = getgid() r28 = getgid() fstat(r18, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=r19, @ANYBLOB="02000100", @ANYRES32=r21, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=r22, @ANYBLOB="02000400", @ANYRES32=r23, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="040002000000000008000100", @ANYRES32=r24, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r25, @ANYBLOB="08000300", @ANYRES32=r26, @ANYBLOB="08000200", @ANYRES32=r27, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r28, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0db3cfaed7ad098004", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r29], 0x21, 0x1) r30 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r31 = socket$can_raw(0x1d, 0x3, 0x1) r32 = geteuid() r33 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40400) getsockopt$inet6_IPV6_XFRM_POLICY(r33, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xa6) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r30, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r39 = getegid() r40 = getgid() r41 = getgid() fstat(r31, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=r32, @ANYBLOB="02000100", @ANYRES32=r34, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=r35, @ANYBLOB="02000400", @ANYRES32=r36, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="040002000000000008000100", @ANYRES32=r37, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r38, @ANYBLOB="08000300", @ANYRES32=r39, @ANYBLOB="08000200", @ANYRES32=r40, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r41, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0db3cfaed7ad098004", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r42], 0x21, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x6}, [{0x2, 0x67b3913dae5e1877, r1}, {0x2, 0x0, r2}], {0x4, 0x5}, [{0x8, 0x2, r15}, {0x8, 0x1, r16}, {0x8, 0x1, r27}, {0x8, 0xb, r39}], {0x10, 0x4}, {0x20, 0x1}}, 0x54, 0x0) quotactl(0x2080000201, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000000)) 11:15:39 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000000010, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc00c5512, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300)={r5}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e21, 0x7fffffff, @mcast1, 0x4ccb}}, 0x7, 0xfffffffffffffff9, 0x20, 0x9}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r5, 0x7ff, 0x9, [0xf04, 0x401, 0x8, 0x3, 0x80, 0xe13c, 0xb3d, 0x800, 0x40]}, &(0x7f0000000080)=0x1a) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SMI(r8, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x80045505, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 11:15:39 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0xffff, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc972, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0xfff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) 11:15:39 executing program 4: timer_create(0x0, &(0x7f0000000040)={0x0, 0x20, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2000000000002, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x9}}, &(0x7f0000d43000)) 11:15:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, r4}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) [ 218.690702][ T9078] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 218.698036][ T9078] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:15:40 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0xffff, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc972, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0xfff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) 11:15:40 executing program 4: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x6b) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0) [ 218.752573][ T9129] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 218.770370][ T3892] kobject: 'loop3' (0000000004bd60cf): kobject_uevent_env [ 218.777320][ T9129] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 218.786959][ T3892] kobject: 'loop3' (0000000004bd60cf): fill_kobj_path: path = '/devices/virtual/block/loop3' 11:15:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x285) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x300000000000000, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) 11:15:40 executing program 4: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x6b) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0) [ 218.840704][ T3892] kobject: 'loop4' (00000000a764314e): kobject_uevent_env [ 218.848834][ T3892] kobject: 'loop4' (00000000a764314e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 218.872502][ T9141] kobject: 'bluetooth' (00000000a6a0b108): kobject_add_internal: parent: 'virtual', set: '(null)' 11:15:40 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0xffff, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc972, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0xfff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) [ 218.897806][ T9130] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 218.919236][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env [ 218.923869][ T9148] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 218.926726][ T9141] kobject: 'hci0' (000000004c75df7c): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 218.945915][ T9148] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 218.947707][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 218.966114][ T9130] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 218.979728][ T9126] kobject: 'kvm' (000000008902fec9): kobject_uevent_env 11:15:40 executing program 4: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x6b) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0) [ 218.995128][ T9128] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 218.998580][ T3892] kobject: 'loop2' (0000000060182184): kobject_uevent_env [ 219.002137][ T9128] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 219.010451][ T9126] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 219.043370][ T3892] kobject: 'loop2' (0000000060182184): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 219.071300][ T3892] kobject: 'loop4' (00000000a764314e): kobject_uevent_env [ 219.073119][ T9146] xt_connbytes: Forcing CT accounting to be enabled [ 219.096183][ T9141] kobject: 'hci0' (000000004c75df7c): kobject_uevent_env [ 219.098023][ T3892] kobject: 'loop4' (00000000a764314e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 219.116138][ T9129] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 219.123237][ T9129] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 219.123819][ T9140] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 219.135663][ T9146] x_tables: eb_tables: snat target: used from hooks OUTPUT, but only usable from POSTROUTING [ 219.153186][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env [ 219.162676][ T9140] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 219.173237][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 219.205658][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env [ 219.238324][ T9140] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 219.240357][ T9141] kobject: 'hci0' (000000004c75df7c): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 219.245441][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 219.276489][ T9158] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 219.283671][ T9140] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 219.296034][ T9158] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 219.304901][ T9141] kobject: 'rfkill7' (00000000a53e8826): kobject_add_internal: parent: 'hci0', set: 'devices' [ 219.334950][ T9141] kobject: 'rfkill7' (00000000a53e8826): kobject_uevent_env [ 219.339526][ T3892] kobject: 'loop2' (0000000060182184): kobject_uevent_env [ 219.342430][ T9141] kobject: 'rfkill7' (00000000a53e8826): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill7' [ 219.366818][ T3892] kobject: 'loop2' (0000000060182184): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 219.377179][ T21] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.391537][ T3892] kobject: 'loop1' (000000004b9db9ad): kobject_uevent_env [ 219.398839][ T3892] kobject: 'loop1' (000000004b9db9ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 219.465068][ T3892] kobject: 'loop5' (00000000eb65a0de): kobject_uevent_env [ 219.477141][ T3892] kobject: 'loop5' (00000000eb65a0de): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 221.414713][ T8891] Bluetooth: hci0: command 0xfc11 tx timeout [ 221.417035][ T1523] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 221.428441][ T9139] kobject: 'rfkill7' (00000000a53e8826): kobject_uevent_env [ 221.435923][ T9139] kobject: 'rfkill7' (00000000a53e8826): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill7' [ 221.447800][ T9139] kobject: 'rfkill7' (00000000a53e8826): kobject_cleanup, parent 000000000efc25e0 [ 221.457202][ T9139] kobject: 'rfkill7' (00000000a53e8826): calling ktype release [ 221.464799][ T9139] kobject: 'rfkill7': free name [ 221.469715][ T9139] kobject: 'hci0' (000000004c75df7c): kobject_uevent_env [ 221.476837][ T9139] kobject: 'hci0' (000000004c75df7c): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 221.487284][ T9139] kobject: 'bluetooth' (00000000a6a0b108): kobject_cleanup, parent 000000000efc25e0 [ 221.496723][ T9139] kobject: 'bluetooth' (00000000a6a0b108): calling ktype release [ 221.504445][ T9139] kobject: 'bluetooth': free name 11:15:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) write$P9_RREAD(r6, &(0x7f00000003c0)={0x10a, 0x75, 0x2, {0xff, "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"}}, 0x10a) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r7, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000000)) 11:15:42 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0xffff, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc972, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0xfff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) 11:15:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x285) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x300000000000000, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) 11:15:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r14 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0) r15 = syz_open_dev$sndmidi(&(0x7f0000000940)='/dev/snd/midiC#D#\x00', 0x7, 0x42) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r17, 0xae60) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) r18 = socket$inet6(0xa, 0x400000000001, 0x0) close(r18) r19 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r18, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r19, 0x200004) sendfile(r18, r19, 0x0, 0x80001d00c0d0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={0xffffffffffffffff, r19, 0x0, 0x1, &(0x7f0000000980)='\x00'}, 0x30) r21 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r21, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r21, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000b00)=0xe8) r23 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r24 = ioctl$KVM_CREATE_VM(r23, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r24, 0xae60) r25 = ioctl$KVM_CREATE_VCPU(r24, 0xae41, 0x0) ioctl$KVM_SMI(r25, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r25, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r25, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r25, 0xae80, 0x0) fstat(r25, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r28 = ioctl$KVM_CREATE_VM(r27, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r28, 0xae60) r29 = ioctl$KVM_CREATE_VCPU(r28, 0xae41, 0x0) ioctl$KVM_SMI(r29, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r29, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r29, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r29, 0xae80, 0x0) r30 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r31 = ioctl$KVM_CREATE_VM(r30, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r31, 0xae60) r32 = ioctl$KVM_CREATE_VCPU(r31, 0xae41, 0x0) ioctl$KVM_SMI(r32, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r32, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r32, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r32, 0xae80, 0x0) r33 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r34 = ioctl$KVM_CREATE_VM(r33, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r34, 0xae60) r35 = ioctl$KVM_CREATE_VCPU(r34, 0xae41, 0x0) ioctl$KVM_SMI(r35, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r35, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r35, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r35, 0xae80, 0x0) r36 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r36, 0xae01, 0x0) r37 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r38 = ioctl$KVM_CREATE_VM(r37, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r38, 0xae60) r39 = ioctl$KVM_CREATE_VCPU(r38, 0xae41, 0x0) ioctl$KVM_SMI(r39, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r39, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r39, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r39, 0xae80, 0x0) r40 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r40, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r40, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r40, 0x8904, &(0x7f0000000bc0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000d00)=0xe8) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000f00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000100)={0xe8, 0x2c, 0x300, 0x70bd26, 0x25dfdbfb, "", [@generic="11cd36cfc89b1ee92d0ba31fff41d7f94dc3b710b0ee508de7d7f433adac2138e5c411b2b4a8deb2e1ad4c9b0362d6cb9a4634b02752df805b682d2a6bcab56169036e8aee8e545eadbe3f6f31996754c3a4c00133233d6b27049abdcaf5972089f0f6631a6f487e3e09f388ea79567ba9129c5b45fab848e715a0ca767a3025f63d39f8e1634c67cbb632eb07a21d19d1287eecab579820749bd15f82402b9876e0b90957d35876d6f7ba3d18e74134dfc669c5fe8d92a8a127cdc7047e18db17925504fbc63b514828ecf6beff12136c8082384c"]}, 0xe8}, {&(0x7f0000000200)={0x290, 0x1f, 0x20, 0x70bd26, 0x25dfdbfb, "", [@typed={0x4, 0x9}, @nested={0x184, 0x6d, [@generic="8408abe885fec3ee7eb7711dd34bfcd6a8b5f9e5f97684b1962b1ef391634e7ace7c802cc6f98155abfdc35057def1005a9e656667911c1f625babcb6a735cadf684f1d4308974b6332aaea72fc72a654af6ce6a7020d6841c35b28a9ec9850a4209cee7edd8af1c4b70ee4261c50c78166d19f2dbfeff53cb89a7b2140b70aacb7fcc340d455be42009978b3d171b5103df48f38e8b13dab8185f882ba2", @generic="2b260f34ffcc8d1fd840312e5fd3c8fb77af6ee401509cd45a2955dcd3375936a1ebf01aed79b5a5f66143df3d6aaabade8e75c99c7a6988950f6f75fd4e09407386bf8c3c2ee527d9a0e7", @generic="2ddb9b6e74ef0b28a608cd8f31ae07d0ef70ada1988acdce21926db3adae28814179d625eb1eeae7cc576ef8cd9d860365324099be7f124fc10f1d7241d3b89d2ee757567b1b34b11f66cf4a9baeb7382b8e5b0342f645d8f225ae8d89843e16ed82075128a3f92493a0613652c72e08025f97ba867a200e2712030da7be4c76a74328cddf99a1808ece2d1e3bdd6428e344b1b34d"]}, @typed={0x8, 0x71, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="af43cec7d6fb6fb082a6c68309f4c1ae5146e01cfa46f597c4d5d41c1c734e6f150c5de134b919d92943a4894bca29fc09e4bc6fc920534d687e2cdf25e8fc51c51c71ac942fe7df88c38b060c6175f3138afc31e0cff73d79a1b75340c8e310865cfed15a24cc84d662ba61d739ee99ba4ea9f55cf8b285e9ca8740f79d86930a72da959fa36d279454e556a8246a923dfa318ad69dc28e88c49d1b6f68846d5559e7b735d7d779b8bede0269c9f67b8f338733177eaf9fc4ffb4415d9f92958d1cc35b869218dd9bf52eefd62767e8a34a117e", @typed={0x14, 0x48, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x57, @ipv4=@multicast1}]}, 0x290}, {&(0x7f00000004c0)={0x3fc, 0x31, 0x200, 0x70bd25, 0x25dfdbfd, "", [@nested={0xc, 0x42, [@typed={0x8, 0x75, @u32=0x4}]}, @generic="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", @nested={0xd4, 0x67, [@generic="94a02807397342029b8355ab75b139e8a4367da721aad6a14baa3b689ba851ee83624c05acb70a4e6b8620e83ef3243f968bf8595ccddea9eb15735646c7968c48e4cb511abf825ec1e43ad7afab7d8d41d1e9189220d823d75df36fd6936f2983421f247e988ae86adc605835dc58aaad684d5dbb96db6d79efbc9538b25e1703ea70f711656c874f8b258bbc1dc6920054f3385543670fb5048ce00dabeb2d521fb195a4376997b199ea52bf782602916f1477d6a8ad3bc8c33d79534c2e709c197cde1f29edd50cc07f8133a1"]}, @typed={0x8, 0x3e, @str='}\x00'}, @generic="2fecabdbce16faa81fe38ba0f645ce0abd4f9b8f77fa1cdfc3d24e14958d1164e61ae1002a58df8d10e7f7aae6dd4589c533ab35ce7e960658305b70a3a13ccb661b4f4b0ca42c80b86688fa8a4ee3d0e0dfaa8633786208571f4b549b45ce16b58d2a1e2e574753dade3e3f9d114e8ff603a79751f48d261acbd95d426b31782c84caafaa82b735bb3da7bdec9e26fc980817b0229780d64a5746a539a7ab0ca7971398959efee7ed0e8731e5e5de489c5f6c6ba39b0a344ed7cbbbfceb7c63c2000deacdd5907838fbde176b7abf632b2350e1a160c2200f0d7e018df879fa20074b238eb8", @nested={0x18, 0x8, [@generic="9cee68aaef243832b36d15eac7d01498e5"]}, @nested={0x10, 0xe, [@typed={0xc, 0x1c, @u64=0x8}]}, @generic="eb0ef9541d409e7ac7fdafe9cd6c37f8d1935d48d59f544302ab8229624931a40dad436bc79f0bfc908c53707c1a1146c8f9e4aa019d12f99249a2460082b26cc6c740acd2b0acd957790aaee44c5f2f04cc351aeeadde5af1b3d14663ea7b4d86f37632f6e0e2301f0be10a93f629a96f764e0f7b54d5afa92bec5a812302dff6a642653d8ca95ee40dc3682ce5eb5c6b4085995ee741989ff170667448e9fc6065cef87c71262c68b1862b26f9cb1989ae7b667a79bd34ab19a00ba6f968d52c6ab4abdba443a54b47ce792c492dfc7065b4dee6a326626e6407b969269480527e418fac8522228293ffcd177674c4573f2933b0"]}, 0x3fc}], 0x3, &(0x7f0000000e00)=[@rights={{0x18, 0x1, 0x1, [r3, r6]}}, @rights={{0x38, 0x1, 0x1, [r7, 0xffffffffffffffff, r9, r11, r13, r14, r0, r15, r17, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r20, r22, r26}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r29, r32]}}, @rights={{0x1c, 0x1, 0x1, [r35, r36, r39]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r41, r42, r43}}}], 0xf0, 0x8000}, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0xc0c0583b, &(0x7f0000000040)) 11:15:42 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000000010, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc00c5512, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300)={r5}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e21, 0x7fffffff, @mcast1, 0x4ccb}}, 0x7, 0xfffffffffffffff9, 0x20, 0x9}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r5, 0x7ff, 0x9, [0xf04, 0x401, 0x8, 0x3, 0x80, 0xe13c, 0xb3d, 0x800, 0x40]}, &(0x7f0000000080)=0x1a) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SMI(r8, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x80045505, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 11:15:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, r4}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) [ 221.509615][ T9139] kobject: 'hci0' (000000004c75df7c): kobject_cleanup, parent 000000000efc25e0 [ 221.518652][ T9139] kobject: 'hci0' (000000004c75df7c): calling ktype release [ 221.526324][ T9139] kobject: 'hci0': free name [ 221.531235][ T9139] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 221.538288][ T9139] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:15:42 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0xffff, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc972, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0xfff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) [ 221.610408][ T3892] kobject: 'loop3' (0000000004bd60cf): kobject_uevent_env [ 221.617851][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 221.628521][ T3892] kobject: 'loop3' (0000000004bd60cf): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 221.630256][ T9181] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 221.679924][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env [ 221.683006][ T9186] kobject: 'bluetooth' (00000000701a61e3): kobject_add_internal: parent: 'virtual', set: '(null)' [ 221.688530][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 221.719365][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' 11:15:42 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0xffff, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc972, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0xfff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) [ 221.735222][ T9181] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 221.743596][ T9186] kobject: 'hci0' (00000000ed773aa2): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 221.757813][ T9184] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 221.765547][ T9178] x_tables: eb_tables: snat target: used from hooks OUTPUT, but only usable from POSTROUTING 11:15:43 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0xffff, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc972, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0xfff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) [ 221.823595][ T9186] kobject: 'hci0' (00000000ed773aa2): kobject_uevent_env [ 221.843020][ T9184] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 221.845065][ T9183] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 221.862109][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env 11:15:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x285) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x300000000000000, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) [ 221.872326][ T9186] kobject: 'hci0' (00000000ed773aa2): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 221.877880][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 221.897000][ T9189] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 221.904052][ T9189] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:15:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) [ 221.917054][ T9183] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 221.935985][ T3892] kobject: 'loop2' (0000000060182184): kobject_uevent_env [ 221.961821][ T3892] kobject: 'loop2' (0000000060182184): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 221.972766][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.008784][ T9205] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.022354][ T9186] kobject: 'rfkill8' (000000002afafc48): kobject_add_internal: parent: 'hci0', set: 'devices' [ 222.038166][ T9174] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.066646][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.077620][ T9184] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.082752][ T9174] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.085176][ T9184] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.105887][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env 11:15:43 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) [ 222.111792][ T9202] x_tables: eb_tables: snat target: used from hooks OUTPUT, but only usable from POSTROUTING [ 222.113077][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 222.154841][ T9176] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.167878][ T9186] kobject: 'rfkill8' (000000002afafc48): kobject_uevent_env [ 222.183338][ T9176] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.197358][ T9205] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.207496][ T9186] kobject: 'rfkill8' (000000002afafc48): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill8' [ 222.240977][ T3892] kobject: 'loop2' (0000000060182184): kobject_uevent_env [ 222.250117][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 222.258165][ T3892] kobject: 'loop2' (0000000060182184): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 222.270766][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.280176][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.296548][ T3892] kobject: 'loop1' (000000004b9db9ad): kobject_uevent_env [ 222.306763][ T3892] kobject: 'loop1' (000000004b9db9ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 222.319714][ T3892] kobject: 'loop5' (00000000eb65a0de): kobject_uevent_env [ 222.327254][ T3892] kobject: 'loop5' (00000000eb65a0de): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 222.331402][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.347472][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.378400][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.401407][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.430003][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.437633][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.458081][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.465289][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.490428][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.497528][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.510503][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.517576][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.624835][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.631877][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.654905][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.661885][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.685137][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.692354][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.715016][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.722014][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.745716][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.752706][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.775039][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.782051][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.804657][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.811806][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.837024][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.844168][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.868128][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.875301][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.898651][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.898786][ T9184] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.911153][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.912878][ T9184] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.935578][ T9205] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.942961][ T9205] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.947397][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.960021][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.963647][ T9184] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.977670][ T9184] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 222.990070][ T9189] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 222.994795][ T9205] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.006716][ T9216] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.008531][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.013727][ T9216] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.020847][ T9189] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.033208][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.051105][ T9205] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.066171][ T9184] debugfs: Directory 'vcpu0' with parent '9179-33' already present! [ 223.076907][ T9179] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.083909][ T9179] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.096760][ T9216] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.103749][ T9216] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.117124][ T9205] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.125428][ T9184] debugfs: Directory 'vcpu0' with parent '9179-38' already present! [ 223.127615][ T9205] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.204802][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.211827][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.232113][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.240016][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.252094][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.261283][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.283388][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.291263][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.310699][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.318234][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.341371][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.348462][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.370893][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.378358][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.404262][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.411380][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.434492][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.441952][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.465955][ T9173] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.473258][ T9173] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.500011][ T9189] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.507133][ T9189] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.525066][ T9189] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.532113][ T9189] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.555050][ T9189] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.562581][ T9189] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.578539][ T9189] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.586311][ T9189] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.605375][ T9189] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.612412][ T9189] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.635914][ T9189] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 223.643021][ T9189] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 223.675312][ T3892] kobject: 'loop4' (00000000a764314e): kobject_uevent_env [ 223.682634][ T3892] kobject: 'loop4' (00000000a764314e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 224.294850][ T1523] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 224.294857][ T8921] Bluetooth: hci0: command 0xfc11 tx timeout [ 224.309197][ T9185] kobject: 'rfkill8' (000000002afafc48): kobject_uevent_env [ 224.316643][ T9185] kobject: 'rfkill8' (000000002afafc48): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill8' [ 224.329064][ T9185] kobject: 'rfkill8' (000000002afafc48): kobject_cleanup, parent 000000000efc25e0 [ 224.338525][ T9185] kobject: 'rfkill8' (000000002afafc48): calling ktype release [ 224.346699][ T9185] kobject: 'rfkill8': free name [ 224.351896][ T9185] kobject: 'hci0' (00000000ed773aa2): kobject_uevent_env [ 224.359362][ T9185] kobject: 'hci0' (00000000ed773aa2): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 224.370297][ T9185] kobject: 'bluetooth' (00000000701a61e3): kobject_cleanup, parent 000000000efc25e0 [ 224.379769][ T9185] kobject: 'bluetooth' (00000000701a61e3): calling ktype release [ 224.387730][ T9185] kobject: 'bluetooth': free name 11:15:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) write$P9_RREAD(r6, &(0x7f00000003c0)={0x10a, 0x75, 0x2, {0xff, "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"}}, 0x10a) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r7, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11:15:45 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) 11:15:45 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000000010, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc00c5512, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300)={r5}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e21, 0x7fffffff, @mcast1, 0x4ccb}}, 0x7, 0xfffffffffffffff9, 0x20, 0x9}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r5, 0x7ff, 0x9, [0xf04, 0x401, 0x8, 0x3, 0x80, 0xe13c, 0xb3d, 0x800, 0x40]}, &(0x7f0000000080)=0x1a) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SMI(r8, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x80045505, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 11:15:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x285) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x300000000000000, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x290) 11:15:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) 11:15:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r14 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0) r15 = syz_open_dev$sndmidi(&(0x7f0000000940)='/dev/snd/midiC#D#\x00', 0x7, 0x42) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r17, 0xae60) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) r18 = socket$inet6(0xa, 0x400000000001, 0x0) close(r18) r19 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r18, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r19, 0x200004) sendfile(r18, r19, 0x0, 0x80001d00c0d0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={0xffffffffffffffff, r19, 0x0, 0x1, &(0x7f0000000980)='\x00'}, 0x30) r21 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r21, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r21, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000b00)=0xe8) r23 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r24 = ioctl$KVM_CREATE_VM(r23, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r24, 0xae60) r25 = ioctl$KVM_CREATE_VCPU(r24, 0xae41, 0x0) ioctl$KVM_SMI(r25, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r25, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r25, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r25, 0xae80, 0x0) fstat(r25, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r28 = ioctl$KVM_CREATE_VM(r27, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r28, 0xae60) r29 = ioctl$KVM_CREATE_VCPU(r28, 0xae41, 0x0) ioctl$KVM_SMI(r29, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r29, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r29, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r29, 0xae80, 0x0) r30 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r31 = ioctl$KVM_CREATE_VM(r30, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r31, 0xae60) r32 = ioctl$KVM_CREATE_VCPU(r31, 0xae41, 0x0) ioctl$KVM_SMI(r32, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r32, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r32, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r32, 0xae80, 0x0) r33 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r34 = ioctl$KVM_CREATE_VM(r33, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r34, 0xae60) r35 = ioctl$KVM_CREATE_VCPU(r34, 0xae41, 0x0) ioctl$KVM_SMI(r35, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r35, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r35, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r35, 0xae80, 0x0) r36 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r36, 0xae01, 0x0) r37 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r38 = ioctl$KVM_CREATE_VM(r37, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r38, 0xae60) r39 = ioctl$KVM_CREATE_VCPU(r38, 0xae41, 0x0) ioctl$KVM_SMI(r39, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r39, 0x4048ae9b, &(0x7f00000000c0)={0xb8003}) ioctl$KVM_SET_REGS(r39, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r39, 0xae80, 0x0) r40 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r40, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r40, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r40, 0x8904, &(0x7f0000000bc0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000d00)=0xe8) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000f00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000100)={0xe8, 0x2c, 0x300, 0x70bd26, 0x25dfdbfb, "", [@generic="11cd36cfc89b1ee92d0ba31fff41d7f94dc3b710b0ee508de7d7f433adac2138e5c411b2b4a8deb2e1ad4c9b0362d6cb9a4634b02752df805b682d2a6bcab56169036e8aee8e545eadbe3f6f31996754c3a4c00133233d6b27049abdcaf5972089f0f6631a6f487e3e09f388ea79567ba9129c5b45fab848e715a0ca767a3025f63d39f8e1634c67cbb632eb07a21d19d1287eecab579820749bd15f82402b9876e0b90957d35876d6f7ba3d18e74134dfc669c5fe8d92a8a127cdc7047e18db17925504fbc63b514828ecf6beff12136c8082384c"]}, 0xe8}, {&(0x7f0000000200)={0x290, 0x1f, 0x20, 0x70bd26, 0x25dfdbfb, "", [@typed={0x4, 0x9}, @nested={0x184, 0x6d, [@generic="8408abe885fec3ee7eb7711dd34bfcd6a8b5f9e5f97684b1962b1ef391634e7ace7c802cc6f98155abfdc35057def1005a9e656667911c1f625babcb6a735cadf684f1d4308974b6332aaea72fc72a654af6ce6a7020d6841c35b28a9ec9850a4209cee7edd8af1c4b70ee4261c50c78166d19f2dbfeff53cb89a7b2140b70aacb7fcc340d455be42009978b3d171b5103df48f38e8b13dab8185f882ba2", @generic="2b260f34ffcc8d1fd840312e5fd3c8fb77af6ee401509cd45a2955dcd3375936a1ebf01aed79b5a5f66143df3d6aaabade8e75c99c7a6988950f6f75fd4e09407386bf8c3c2ee527d9a0e7", @generic="2ddb9b6e74ef0b28a608cd8f31ae07d0ef70ada1988acdce21926db3adae28814179d625eb1eeae7cc576ef8cd9d860365324099be7f124fc10f1d7241d3b89d2ee757567b1b34b11f66cf4a9baeb7382b8e5b0342f645d8f225ae8d89843e16ed82075128a3f92493a0613652c72e08025f97ba867a200e2712030da7be4c76a74328cddf99a1808ece2d1e3bdd6428e344b1b34d"]}, @typed={0x8, 0x71, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="af43cec7d6fb6fb082a6c68309f4c1ae5146e01cfa46f597c4d5d41c1c734e6f150c5de134b919d92943a4894bca29fc09e4bc6fc920534d687e2cdf25e8fc51c51c71ac942fe7df88c38b060c6175f3138afc31e0cff73d79a1b75340c8e310865cfed15a24cc84d662ba61d739ee99ba4ea9f55cf8b285e9ca8740f79d86930a72da959fa36d279454e556a8246a923dfa318ad69dc28e88c49d1b6f68846d5559e7b735d7d779b8bede0269c9f67b8f338733177eaf9fc4ffb4415d9f92958d1cc35b869218dd9bf52eefd62767e8a34a117e", @typed={0x14, 0x48, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x57, @ipv4=@multicast1}]}, 0x290}, {&(0x7f00000004c0)={0x3fc, 0x31, 0x200, 0x70bd25, 0x25dfdbfd, "", [@nested={0xc, 0x42, [@typed={0x8, 0x75, @u32=0x4}]}, @generic="dacda3bc09f4226bbb86fa9f42f9c691ef975c976549c97dc7928c6e84d591fd19e84b61ec6a44e171ceb4fceaab4a38e2670c7f95977550ac2be9855c82fbac89a5c7c7884095712f5f9c2fffb9f7957f4d112945d98a8a6d1478fed1302f0bbc8bb6785be4163b3901d31e75dc0e17e272e25a20459fd41ad209a1ffd4ebcbcffb4b5ca7ac9669942ffacf6bd16d0454532c52f274f19c835dc3b9e21e4e9e1071a14dcc2b6db327fbcf700aae135956711a190ec00e343f1243de1c90a02937f05117fdc54cc0e1c2c572ca58a73bae9b7a3f70c9893a5efbd52d2c2e52faf3dd85ec0d60b7b24762c809779a5f27b1d3fc26adadeac6536810433c25a7", @nested={0xd4, 0x67, [@generic="94a02807397342029b8355ab75b139e8a4367da721aad6a14baa3b689ba851ee83624c05acb70a4e6b8620e83ef3243f968bf8595ccddea9eb15735646c7968c48e4cb511abf825ec1e43ad7afab7d8d41d1e9189220d823d75df36fd6936f2983421f247e988ae86adc605835dc58aaad684d5dbb96db6d79efbc9538b25e1703ea70f711656c874f8b258bbc1dc6920054f3385543670fb5048ce00dabeb2d521fb195a4376997b199ea52bf782602916f1477d6a8ad3bc8c33d79534c2e709c197cde1f29edd50cc07f8133a1"]}, @typed={0x8, 0x3e, @str='}\x00'}, @generic="2fecabdbce16faa81fe38ba0f645ce0abd4f9b8f77fa1cdfc3d24e14958d1164e61ae1002a58df8d10e7f7aae6dd4589c533ab35ce7e960658305b70a3a13ccb661b4f4b0ca42c80b86688fa8a4ee3d0e0dfaa8633786208571f4b549b45ce16b58d2a1e2e574753dade3e3f9d114e8ff603a79751f48d261acbd95d426b31782c84caafaa82b735bb3da7bdec9e26fc980817b0229780d64a5746a539a7ab0ca7971398959efee7ed0e8731e5e5de489c5f6c6ba39b0a344ed7cbbbfceb7c63c2000deacdd5907838fbde176b7abf632b2350e1a160c2200f0d7e018df879fa20074b238eb8", @nested={0x18, 0x8, [@generic="9cee68aaef243832b36d15eac7d01498e5"]}, @nested={0x10, 0xe, [@typed={0xc, 0x1c, @u64=0x8}]}, @generic="eb0ef9541d409e7ac7fdafe9cd6c37f8d1935d48d59f544302ab8229624931a40dad436bc79f0bfc908c53707c1a1146c8f9e4aa019d12f99249a2460082b26cc6c740acd2b0acd957790aaee44c5f2f04cc351aeeadde5af1b3d14663ea7b4d86f37632f6e0e2301f0be10a93f629a96f764e0f7b54d5afa92bec5a812302dff6a642653d8ca95ee40dc3682ce5eb5c6b4085995ee741989ff170667448e9fc6065cef87c71262c68b1862b26f9cb1989ae7b667a79bd34ab19a00ba6f968d52c6ab4abdba443a54b47ce792c492dfc7065b4dee6a326626e6407b969269480527e418fac8522228293ffcd177674c4573f2933b0"]}, 0x3fc}], 0x3, &(0x7f0000000e00)=[@rights={{0x18, 0x1, 0x1, [r3, r6]}}, @rights={{0x38, 0x1, 0x1, [r7, 0xffffffffffffffff, r9, r11, r13, r14, r0, r15, r17, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r20, r22, r26}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r29, r32]}}, @rights={{0x1c, 0x1, 0x1, [r35, r36, r39]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r41, r42, r43}}}], 0xf0, 0x8000}, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0xc0c0583b, &(0x7f0000000040)) [ 224.392963][ T9185] kobject: 'hci0' (00000000ed773aa2): kobject_cleanup, parent 000000000efc25e0 [ 224.403134][ T9185] kobject: 'hci0' (00000000ed773aa2): calling ktype release [ 224.410601][ T9185] kobject: 'hci0': free name 11:15:45 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) 11:15:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) [ 224.457264][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 224.457912][ T3892] kobject: 'loop3' (0000000004bd60cf): kobject_uevent_env [ 224.473802][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 224.498089][ T3892] kobject: 'loop3' (0000000004bd60cf): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 224.528472][ T3892] kobject: 'loop5' (00000000eb65a0de): kobject_uevent_env [ 224.533723][ T9232] kobject: 'bluetooth' (00000000711d1153): kobject_add_internal: parent: 'virtual', set: '(null)' [ 224.558485][ T3892] kobject: 'loop5' (00000000eb65a0de): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 224.579464][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 224.591947][ T9240] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 224.610568][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env [ 224.614330][ T9232] kobject: 'hci0' (000000005a376216): kobject_add_internal: parent: 'bluetooth', set: 'devices' 11:15:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) [ 224.618857][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 224.653952][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 224.655101][ T9240] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' 11:15:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) [ 224.668147][ T9226] x_tables: eb_tables: snat target: used from hooks OUTPUT, but only usable from POSTROUTING [ 224.678636][ T9230] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 224.699106][ T3892] kobject: 'loop5' (00000000eb65a0de): kobject_uevent_env [ 224.714709][ T3892] kobject: 'loop5' (00000000eb65a0de): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:15:46 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x70e000}}) 11:15:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) [ 224.729930][ T9230] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 224.735692][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env [ 224.770101][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 224.775200][ T9232] kobject: 'hci0' (000000005a376216): kobject_uevent_env [ 224.807307][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 224.825436][ T9232] kobject: 'hci0' (000000005a376216): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 224.832112][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env [ 224.852817][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 224.859344][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 224.881383][ T3892] kobject: 'loop0' (00000000d4b82a31): kobject_uevent_env [ 224.889093][ T3892] kobject: 'loop0' (00000000d4b82a31): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 224.897233][ T9232] kobject: 'rfkill9' (00000000eff92b55): kobject_add_internal: parent: 'hci0', set: 'devices' [ 224.932563][ T9220] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 224.942151][ T9232] kobject: 'rfkill9' (00000000eff92b55): kobject_uevent_env [ 224.951070][ T9220] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 224.957586][ T9232] kobject: 'rfkill9' (00000000eff92b55): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill9' [ 224.980860][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 224.995171][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.004980][ T2568] Bluetooth: hci0: Frame reassembly failed (-84) [ 225.020981][ T3892] kobject: 'loop2' (0000000060182184): kobject_uevent_env [ 225.035905][ T2568] Bluetooth: hci0: Frame reassembly failed (-84) [ 225.044863][ T9232] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.056928][ T9232] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.065341][ T3892] kobject: 'loop2' (0000000060182184): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 225.099755][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.117441][ T3892] kobject: 'loop1' (000000004b9db9ad): kobject_uevent_env [ 225.118140][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.129997][ T3892] kobject: 'loop1' (000000004b9db9ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 225.244216][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.263619][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.302481][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.310077][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.380887][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.388805][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.425657][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.434446][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.479375][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.487109][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.535442][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.543071][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.584230][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.592278][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.616445][ T9228] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.623563][ T9228] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.744949][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.753398][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.772964][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.781408][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.807663][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.815798][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.841055][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.849273][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.874876][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.883056][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.908496][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.916180][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.935880][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.945049][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 225.977611][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 225.985539][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 226.012600][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 226.021552][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 226.045857][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 226.053929][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 226.080910][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 226.089547][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 226.116431][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 226.126043][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 226.141522][ T9221] kobject: 'kvm' (000000008902fec9): kobject_uevent_env [ 226.150583][ T9221] kobject: 'kvm' (000000008902fec9): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 226.183474][ T3892] kobject: 'loop4' (00000000a764314e): kobject_uevent_env [ 226.193336][ T3892] kobject: 'loop4' (00000000a764314e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 227.014793][ T8921] Bluetooth: hci0: command 0xfc11 tx timeout [ 227.014811][ T1523] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 227.031800][ T9232] kobject: 'rfkill9' (00000000eff92b55): kobject_uevent_env [ 227.040967][ T9232] kobject: 'rfkill9' (00000000eff92b55): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill9' [ 227.055387][ T9232] kobject: 'rfkill9' (00000000eff92b55): kobject_cleanup, parent 000000000efc25e0 [ 227.065271][ T9232] kobject: 'rfkill9' (00000000eff92b55): calling ktype release [ 227.073723][ T9232] kobject: 'rfkill9': free name [ 227.080079][ T9232] kobject: 'hci0' (000000005a376216): kobject_uevent_env [ 227.088426][ T9232] kobject: 'hci0' (000000005a376216): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 227.099942][ T9232] kobject: 'bluetooth' (00000000711d1153): kobject_cleanup, parent 000000000efc25e0