last executing test programs: 992.780724ms ago: executing program 3 (id=4): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) futex(&(0x7f000000cffc)=0x2, 0x4, 0x1, 0x0, 0x0, 0xfffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4000) clock_nanosleep(0x9, 0x1, &(0x7f00000002c0)={0x77359400}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa08000900"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0xfdff, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 571.366412ms ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000640)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x7fff, 0x0, 0x62, 0x200}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x9, {0x1a9}}}}]}]}, 0x68}}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000003400)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003300)=[{{&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000b40)=""/223, 0xdf}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x2, &(0x7f00000004c0)=""/110, 0x6e}, 0x7}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/148, 0x94}, {&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000000540)=""/55, 0x37}], 0x6, &(0x7f0000002d80)=""/203, 0xcb}, 0x87}, {{&(0x7f0000002e80)=@phonet, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f00)=""/63, 0x3f}, {&(0x7f0000002fc0)=""/64, 0x40}], 0x2, &(0x7f0000004000)=""/4096, 0x1000}, 0xf8b}, {{&(0x7f0000003040)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000031c0)=[{&(0x7f00000030c0)=""/46, 0x2e}, {&(0x7f0000003100)=""/123, 0x7b}, {&(0x7f0000003180)=""/62, 0x3e}], 0x3, &(0x7f0000003200)=""/232, 0xe8}, 0x6}], 0x4, 0x12002, &(0x7f0000003440)={r4, r5+10000000}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x368, 0x8, 0x7f02ae, 0x0, 0x200, 0x438, 0x2e8, 0x2e8, 0x438, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv4=@remote, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90644}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 528.68127ms ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x3, [0x6, 0x1]}, {0x80000000, 0x0, 0x1, [0xfffffff7, 0x9]}, 0x2, [0x5, 0x80000000]}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x10}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x14210}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000030425b070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r9, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 519.448592ms ago: executing program 0 (id=1): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 403.003577ms ago: executing program 0 (id=5): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_vs\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x3) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='qnx6\x00', 0x20000a, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r1, 0x0) close(0x3) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc4c03d12, &(0x7f0000000380)={0x3, 0x4}) 323.774652ms ago: executing program 0 (id=6): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000a00000005000400000000000900020073797a31000000000c"], 0x58}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) writev(r4, &(0x7f0000000240)=[{0x0}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x1ff) sendto$inet(r5, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) 262.560709ms ago: executing program 1 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xba01}, 0x0) 241.232802ms ago: executing program 2 (id=8): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = socket(0x28, 0x5, 0x0) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000008) statx(0xffffffffffffff9c, 0x0, 0x0, 0x200, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x42) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_setup(0x9, &(0x7f0000000240)) r3 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0xffffffffffffff6f, 0x22, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x202200, 0x140) 174.411416ms ago: executing program 0 (id=9): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_num_supported_iac={{}, {0xb1, 0x5}}}}, 0x8) 164.566074ms ago: executing program 1 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x128, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flow={{0x9}, {0xf0, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0xd4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x2, 0x9, 0xa}}}, @TCF_EM_CONTAINER={0x54, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x200}, "f951a46b47500678738197b2aaa1df31465b98cc4a1f68bc70703dae2cc6cfc86f04a83653d5649f86bd98d551684f1f1480026ae4a53dcf51dccfc502b40d6299cdce89af"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1000, 0x8, 0xa99}, {0x0, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x3}, {0x1c0000, 0x10001, 0x8, 0x2, 0x3, 0x3, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x8, 0x2, 0xfff0}, {0x4, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8}, {0x6, 0xfff, 0x6, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x128}}, 0x0) 128.443234ms ago: executing program 0 (id=11): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x7}, 0x14) 119.785048ms ago: executing program 1 (id=12): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x13, 0x84, 0x62}, 0x2c) 85.865368ms ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000000)=0x8, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="e038060000000050505050505093916b4ba01fe88a000c0103007f0020010136000000000000000000"], 0x22) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/94, 0x5e}], 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x2}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8, 0x10000000}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xf49, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffb, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) 51.725399ms ago: executing program 3 (id=14): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x8b9, 0x10, {0xffffffffffffffff}, {}, 0x1, 0x2}) prlimit64(r0, 0xd, &(0x7f00000000c0)={0x5, 0x8}, &(0x7f0000000240)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) sync_file_range(r4, 0x1, 0x7, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r7 = dup(0xffffffffffffffff) setsockopt$inet_int(r7, 0x0, 0xce, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) socket$inet6(0xa, 0x80002, 0x0) 0s ago: executing program 1 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 45.908981][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.912539][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.915118][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.917993][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.920742][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.920849][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.926929][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.927770][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.928022][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.929504][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.929889][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.931987][ T40] audit: type=1400 audit(1749688078.088:85): avc: denied { read } for pid=5939 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.932526][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.933003][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.933296][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.934347][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.935847][ T40] audit: type=1400 audit(1749688078.098:86): avc: denied { open } for pid=5939 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.939024][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.943216][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.943719][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.944000][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.944616][ T40] audit: type=1400 audit(1749688078.098:87): avc: denied { mounton } for pid=5939 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.164684][ T40] audit: type=1400 audit(1749688078.328:88): avc: denied { module_request } for pid=5939 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.210767][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 46.229895][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 46.302000][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 46.406366][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.414491][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.416764][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.419102][ T5939] bridge_slave_0: entered allmulticast mode [ 46.422325][ T5939] bridge_slave_0: entered promiscuous mode [ 46.425960][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.428287][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.431893][ T5939] bridge_slave_1: entered allmulticast mode [ 46.434532][ T5939] bridge_slave_1: entered promiscuous mode [ 46.497739][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.500194][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.502448][ T5934] bridge_slave_0: entered allmulticast mode [ 46.505122][ T5934] bridge_slave_0: entered promiscuous mode [ 46.511594][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.513837][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.516201][ T5934] bridge_slave_1: entered allmulticast mode [ 46.518928][ T5934] bridge_slave_1: entered promiscuous mode [ 46.551619][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.599287][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.602349][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.604615][ T5932] bridge_slave_0: entered allmulticast mode [ 46.607624][ T5932] bridge_slave_0: entered promiscuous mode [ 46.612381][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.626176][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.629146][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.635046][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.637168][ T5932] bridge_slave_1: entered allmulticast mode [ 46.640436][ T5932] bridge_slave_1: entered promiscuous mode [ 46.695998][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.713948][ T5939] team0: Port device team_slave_0 added [ 46.716124][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.718380][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.720759][ T5940] bridge_slave_0: entered allmulticast mode [ 46.723388][ T5940] bridge_slave_0: entered promiscuous mode [ 46.754368][ T5939] team0: Port device team_slave_1 added [ 46.771634][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.773889][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.776156][ T5940] bridge_slave_1: entered allmulticast mode [ 46.778718][ T5940] bridge_slave_1: entered promiscuous mode [ 46.803540][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.834367][ T5934] team0: Port device team_slave_0 added [ 46.838572][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.843165][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.845360][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.854264][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.874440][ T5934] team0: Port device team_slave_1 added [ 46.896401][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.899151][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.907313][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.912319][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.947977][ T5932] team0: Port device team_slave_0 added [ 46.951323][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.968688][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.970965][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.978801][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.984276][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.986442][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.994438][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.998948][ T5932] team0: Port device team_slave_1 added [ 47.039558][ T5940] team0: Port device team_slave_0 added [ 47.087510][ T5940] team0: Port device team_slave_1 added [ 47.106378][ T5939] hsr_slave_0: entered promiscuous mode [ 47.109149][ T5939] hsr_slave_1: entered promiscuous mode [ 47.126108][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.128307][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.136301][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.140612][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.142768][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.150687][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.199674][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.201859][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.209978][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.230443][ T5934] hsr_slave_0: entered promiscuous mode [ 47.234194][ T5934] hsr_slave_1: entered promiscuous mode [ 47.236462][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.239005][ T5934] Cannot create hsr debugfs directory [ 47.253428][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.256043][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.265090][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.340093][ T5932] hsr_slave_0: entered promiscuous mode [ 47.342397][ T5932] hsr_slave_1: entered promiscuous mode [ 47.344521][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.346957][ T5932] Cannot create hsr debugfs directory [ 47.501226][ T5940] hsr_slave_0: entered promiscuous mode [ 47.504382][ T5940] hsr_slave_1: entered promiscuous mode [ 47.507307][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.510575][ T5940] Cannot create hsr debugfs directory [ 47.820778][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.827728][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.832936][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.842564][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.873954][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.878764][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.883743][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.887714][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.956355][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.963078][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.969752][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.975673][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.990233][ T5935] Bluetooth: hci0: command tx timeout [ 47.990495][ T5299] Bluetooth: hci3: command tx timeout [ 47.990867][ T5943] Bluetooth: hci2: command tx timeout [ 47.991132][ T63] Bluetooth: hci1: command tx timeout [ 48.036932][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.056005][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.072705][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.080345][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.087240][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.099077][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.102397][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.112550][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.115107][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.125586][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.127880][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.148516][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.178277][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.181284][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.210293][ T1255] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.213302][ T1255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.227151][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.245494][ T40] audit: type=1400 audit(1749688080.408:89): avc: denied { sys_module } for pid=5939 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.250739][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.260494][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.276055][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.278386][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.289403][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.291683][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.296627][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.307926][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.310509][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.338789][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.341149][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.359824][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.418532][ T5939] veth0_vlan: entered promiscuous mode [ 48.424911][ T5939] veth1_vlan: entered promiscuous mode [ 48.445952][ T5939] veth0_macvtap: entered promiscuous mode [ 48.454790][ T5939] veth1_macvtap: entered promiscuous mode [ 48.464325][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.474489][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.487072][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.492874][ T5939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.496435][ T5939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.500835][ T5939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.504399][ T5939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.528322][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.542186][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.566864][ T5934] veth0_vlan: entered promiscuous mode [ 48.600608][ T5934] veth1_vlan: entered promiscuous mode [ 48.617032][ T5940] veth0_vlan: entered promiscuous mode [ 48.626288][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.629976][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.646909][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.646914][ T5932] veth0_vlan: entered promiscuous mode [ 48.649476][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.655827][ T5940] veth1_vlan: entered promiscuous mode [ 48.665424][ T5934] veth0_macvtap: entered promiscuous mode [ 48.672214][ T5934] veth1_macvtap: entered promiscuous mode [ 48.687191][ T5932] veth1_vlan: entered promiscuous mode [ 48.693675][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.700824][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.706022][ T5940] veth0_macvtap: entered promiscuous mode [ 48.716218][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.721750][ T5940] veth1_macvtap: entered promiscuous mode [ 48.731616][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.736888][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.740321][ T5934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.743029][ T6023] netlink: 'syz.3.4': attribute type 27 has an invalid length. [ 48.743188][ T5934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.748484][ T5934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.752602][ T5934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.778126][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.781189][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.825775][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.831777][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.849770][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 48.866981][ T6023] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.871285][ T6023] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.874070][ T6023] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.876871][ T6023] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.919593][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.922360][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.925820][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.929746][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.949450][ T6026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.952558][ T6026] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.958312][ T6026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.988126][ T5932] veth0_macvtap: entered promiscuous mode [ 48.994841][ T5932] veth1_macvtap: entered promiscuous mode [ 49.018548][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.034074][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.037217][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.040140][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.052228][ T5932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.055777][ T5932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.059293][ T5932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.063413][ T5932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.078728][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.081401][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.090610][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.093207][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.114314][ T1255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.117930][ T1255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.134603][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.137072][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.156735][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.162674][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.222721][ T6030] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 49.225956][ T6032] usb 1-1: USB disconnect, device number 2 [ 49.234054][ T6033] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 49.238218][ T6030] vxcan3: entered allmulticast mode [ 49.276132][ T6032] hub 1-0:1.0: USB hub found [ 49.277930][ T6032] hub 1-0:1.0: 6 ports detected [ 49.286439][ T6034] gretap1: entered promiscuous mode [ 49.333045][ T6036] syz.0.5: attempt to access beyond end of device [ 49.333045][ T6036] loop0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 49.338145][ T6036] qnx6: unable to read the first superblock [ 49.342821][ T6036] syz.0.5: attempt to access beyond end of device [ 49.342821][ T6036] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 49.343054][ T6030] 8021q: VLANs not supported on gre0 [ 49.346737][ T6036] qnx6: unable to read the first superblock [ 49.351967][ T6036] qnx6: unable to read the first superblock [ 49.396966][ T6028] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 49.459497][ T54] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 49.500311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.504247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.508237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.512579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 49.532813][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 49.537724][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 49.643891][ T54] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 49.646776][ T54] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 49.659681][ T54] usb 1-1: Product: QEMU USB Tablet [ 49.661459][ T54] usb 1-1: Manufacturer: QEMU [ 49.663288][ T54] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 49.670303][ T6057] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 49.673876][ T6020] IPVS: starting estimator thread 0... [ 49.749429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 49.794125][ T6066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.822705][ T6061] IPVS: using max 44 ests per chain, 105600 per kthread [ 49.851078][ T54] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input5 [ 49.859901][ T54] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 50.013939][ T6072] process 'syz.3.14' launched './file0' with NULL argv: empty string added [ 50.079468][ T5299] Bluetooth: hci1: command tx timeout [ 50.081876][ T5299] Bluetooth: hci2: command tx timeout [ 50.084528][ T5299] Bluetooth: hci3: command tx timeout [ 50.094141][ T6069] loop8: detected capacity change from 0 to 16384 [ 50.159152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.199528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.202413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.205709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.239663][ T6071] loop8: detected capacity change from 16384 to 16320 [ 50.249816][ T6071] [ 50.250698][ T6071] ====================================================== [ 50.252851][ T6071] WARNING: possible circular locking dependency detected [ 50.255368][ T6071] 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 Not tainted [ 50.259347][ T6071] ------------------------------------------------------ [ 50.261899][ T6071] syz.1.15/6071 is trying to acquire lock: [ 50.263958][ T6071] ffffffff908b2be8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 50.266959][ T6071] [ 50.266959][ T6071] but task is already holding lock: [ 50.269239][ T6071] ffff888026876278 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 50.272943][ T6071] [ 50.272943][ T6071] which lock already depends on the new lock. [ 50.272943][ T6071] [ 50.276134][ T6071] [ 50.276134][ T6071] the existing dependency chain (in reverse order) is: [ 50.278842][ T6071] [ 50.278842][ T6071] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 50.281795][ T6071] blk_alloc_queue+0x619/0x760 [ 50.283672][ T6071] blk_mq_alloc_queue+0x175/0x290 [ 50.285383][ T6071] __blk_mq_alloc_disk+0x29/0x120 [ 50.287127][ T6071] loop_add+0x49e/0xb70 [ 50.288878][ T6071] loop_init+0x164/0x270 [ 50.290423][ T6071] do_one_initcall+0x120/0x6e0 [ 50.292204][ T6071] kernel_init_freeable+0x5c2/0x900 [ 50.294068][ T6071] kernel_init+0x1c/0x2b0 [ 50.295563][ T6071] ret_from_fork+0x5d4/0x6f0 [ 50.297265][ T6071] ret_from_fork_asm+0x1a/0x30 [ 50.298905][ T6071] [ 50.298905][ T6071] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 50.301299][ T6071] fs_reclaim_acquire+0x102/0x150 [ 50.303098][ T6071] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 50.305166][ T6071] __alloc_skb+0x2b2/0x380 [ 50.307052][ T6071] alloc_uevent_skb+0x7d/0x210 [ 50.308741][ T6071] kobject_uevent_env+0xca4/0x1870 [ 50.310582][ T6071] kobject_synth_uevent+0x7d4/0x8a0 [ 50.312946][ T6071] bus_uevent_store+0x3d/0x90 [ 50.314702][ T6071] bus_attr_store+0x71/0xb0 [ 50.316339][ T6071] sysfs_kf_write+0xf2/0x150 [ 50.317984][ T6071] kernfs_fop_write_iter+0x351/0x510 [ 50.319902][ T6071] vfs_write+0x6c7/0x1150 [ 50.321470][ T6071] ksys_write+0x12a/0x250 [ 50.323073][ T6071] do_syscall_64+0xcd/0x4c0 [ 50.324789][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.327160][ T6071] [ 50.327160][ T6071] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 50.329663][ T6071] __lock_acquire+0x126f/0x1c90 [ 50.331662][ T6071] lock_acquire+0x179/0x350 [ 50.333521][ T6071] __mutex_lock+0x199/0xb90 [ 50.335205][ T6071] kobject_uevent_env+0xb36/0x1870 [ 50.337039][ T6071] set_capacity_and_notify+0x1ca/0x240 [ 50.338961][ T6071] loop_set_status+0x94c/0xb90 [ 50.340690][ T6071] loop_set_status_old+0x162/0x1d0 [ 50.342494][ T6071] lo_ioctl+0xb3f/0x2760 [ 50.344031][ T6071] blkdev_ioctl+0x274/0x6d0 [ 50.345920][ T6071] __x64_sys_ioctl+0x18e/0x210 [ 50.347655][ T6071] do_syscall_64+0xcd/0x4c0 [ 50.349276][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.351603][ T6071] [ 50.351603][ T6071] other info that might help us debug this: [ 50.351603][ T6071] [ 50.355117][ T6071] Chain exists of: [ 50.355117][ T6071] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 50.355117][ T6071] [ 50.359429][ T6071] Possible unsafe locking scenario: [ 50.359429][ T6071] [ 50.361794][ T6071] CPU0 CPU1 [ 50.363650][ T6071] ---- ---- [ 50.365368][ T6071] lock(&q->q_usage_counter(io)#25); [ 50.367365][ T6071] lock(fs_reclaim); [ 50.369434][ T6071] lock(&q->q_usage_counter(io)#25); [ 50.372370][ T6071] lock(uevent_sock_mutex); [ 50.373952][ T6071] [ 50.373952][ T6071] *** DEADLOCK *** [ 50.373952][ T6071] [ 50.376558][ T6071] 3 locks held by syz.1.15/6071: [ 50.378166][ T6071] #0: ffff88810627e400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xb90 [ 50.381164][ T6071] #1: ffff888026876278 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 50.384853][ T6071] #2: ffff8880268762b0 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 50.388926][ T6071] [ 50.388926][ T6071] stack backtrace: [ 50.390960][ T6071] CPU: 3 UID: 0 PID: 6071 Comm: syz.1.15 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 50.390984][ T6071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.390997][ T6071] Call Trace: [ 50.391010][ T6071] [ 50.391017][ T6071] dump_stack_lvl+0x116/0x1f0 [ 50.391048][ T6071] print_circular_bug+0x275/0x350 [ 50.391076][ T6071] check_noncircular+0x14c/0x170 [ 50.391106][ T6071] __lock_acquire+0x126f/0x1c90 [ 50.391135][ T6071] lock_acquire+0x179/0x350 [ 50.391159][ T6071] ? kobject_uevent_env+0xb36/0x1870 [ 50.391179][ T6071] ? __pfx___might_resched+0x10/0x10 [ 50.391203][ T6071] __mutex_lock+0x199/0xb90 [ 50.391230][ T6071] ? kobject_uevent_env+0xb36/0x1870 [ 50.391249][ T6071] ? kobject_uevent_env+0xb36/0x1870 [ 50.391268][ T6071] ? __pfx___mutex_lock+0x10/0x10 [ 50.391298][ T6071] ? __asan_memcpy+0x3c/0x60 [ 50.391317][ T6071] ? kobject_get_path+0x8e/0x2a0 [ 50.391345][ T6071] ? kobject_uevent_env+0xb36/0x1870 [ 50.391364][ T6071] kobject_uevent_env+0xb36/0x1870 [ 50.391384][ T6071] ? set_capacity_and_notify+0xce/0x240 [ 50.391406][ T6071] set_capacity_and_notify+0x1ca/0x240 [ 50.391426][ T6071] ? __pfx_set_capacity_and_notify+0x10/0x10 [ 50.391447][ T6071] ? __asan_memcpy+0x3c/0x60 [ 50.391466][ T6071] loop_set_status+0x94c/0xb90 [ 50.391489][ T6071] loop_set_status_old+0x162/0x1d0 [ 50.391509][ T6071] ? __pfx_loop_set_status_old+0x10/0x10 [ 50.391528][ T6071] ? __lock_acquire+0x622/0x1c90 [ 50.391558][ T6071] ? find_held_lock+0x2b/0x80 [ 50.391579][ T6071] ? is_bpf_text_address+0x8a/0x1a0 [ 50.391608][ T6071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.391628][ T6071] lo_ioctl+0xb3f/0x2760 [ 50.391649][ T6071] ? __lock_acquire+0x622/0x1c90 [ 50.391678][ T6071] ? __pfx_lo_ioctl+0x10/0x10 [ 50.391697][ T6071] ? find_held_lock+0x2b/0x80 [ 50.391717][ T6071] ? avc_has_extended_perms+0x33a/0x1090 [ 50.391735][ T6071] ? avc_has_extended_perms+0x47c/0x1090 [ 50.391753][ T6071] ? finish_task_switch.isra.0+0x21c/0xc10 [ 50.391774][ T6071] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 50.391790][ T6071] ? rcu_is_watching+0x12/0xc0 [ 50.391812][ T6071] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.391837][ T6071] ? finish_task_switch.isra.0+0x221/0xc10 [ 50.391859][ T6071] ? trace_sched_exit_tp+0xde/0x130 [ 50.391885][ T6071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.391904][ T6071] ? blkdev_common_ioctl+0x1dd/0x2480 [ 50.391922][ T6071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.391941][ T6071] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 50.391961][ T6071] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 50.391982][ T6071] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 50.392014][ T6071] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 50.392040][ T6071] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 50.392071][ T6071] ? __pfx_lo_ioctl+0x10/0x10 [ 50.392091][ T6071] blkdev_ioctl+0x274/0x6d0 [ 50.392110][ T6071] ? __pfx_blkdev_ioctl+0x10/0x10 [ 50.392128][ T6071] ? selinux_file_ioctl+0x180/0x270 [ 50.392150][ T6071] ? selinux_file_ioctl+0xb4/0x270 [ 50.392173][ T6071] ? __pfx_blkdev_ioctl+0x10/0x10 [ 50.392191][ T6071] __x64_sys_ioctl+0x18e/0x210 [ 50.392211][ T6071] do_syscall_64+0xcd/0x4c0 [ 50.392239][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.392257][ T6071] RIP: 0033:0x7fab4518e929 [ 50.392271][ T6071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.392287][ T6071] RSP: 002b:00007fab460ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.392303][ T6071] RAX: ffffffffffffffda RBX: 00007fab453b6080 RCX: 00007fab4518e929 [ 50.392315][ T6071] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000004 [ 50.392326][ T6071] RBP: 00007fab45210b39 R08: 0000000000000000 R09: 0000000000000000 [ 50.392337][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.392347][ T6071] R13: 0000000000000000 R14: 00007fab453b6080 R15: 00007ffd61cc8a38 [ 50.392364][ T6071] [ 50.568658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.159664][ T5299] Bluetooth: hci2: command tx timeout [ 52.159679][ T63] Bluetooth: hci1: command tx timeout [ 52.159708][ T5935] Bluetooth: hci3: command tx timeout [ 53.589556][ T63] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 53.592787][ T63] Bluetooth: hci0: Injecting HCI hardware error event [ 53.596182][ T63] Bluetooth: hci0: hardware error 0x00 [ 54.229828][ T5299] Bluetooth: hci2: command tx timeout [ 54.230084][ T5935] Bluetooth: hci1: command tx timeout [ 54.239629][ T5935] Bluetooth: hci3: command tx timeout [ 55.669575][ T63] Bluetooth: hci0: Opcode 0x0c03 failed: -110 VM DIAGNOSIS: 00:28:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffed1005934000 RCX=ffffffff81c3ec5f RDX=0000000000000000 RSI=ffffffff8c156fe0 RDI=0000000000000001 RBP=ffff88802c9a0000 RSP=ffffc90003f4f818 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90a80c57 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81001530 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa235795880 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563d68a18c58 CR3=00000000504e9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000020 Opmask02=00000000ffffffff Opmask03=0000000082000020 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563d689e2fd0 0000563d68c839b8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff907fd90 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563d689f33a8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563d689e2fd0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2351f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa235152c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a373236303a3330 30302f302e313a31 2d312f312d312f31 6273752f372e6431 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323030302e313030 303a373236303a33 3030302f302e313a 312d312f312d312f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 316273752f372e64 313a30303a303030 302f30303a303030 306963702f736563 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373002a69627500 2a646275002a6473 61640033746e6576 6500357475706e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=ffffc90004c7fb40 RSP=ffffc90004c7fa20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=1ffff9200098ff47 R14=1ffff9200098ff01 R15=0000000000000000 RIP=ffffffff81697018 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd7987566c0 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa2351212c0 CR3=00000000560b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557ac3eb89 000055557ac3e930 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557ac3e0d4 000055557ac3e0d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557ac474d4 000055557ac46f90 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006100020100006 016ff00100000008 0602b08c08000100 0002080606011f86 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff04010800 0a0155c00010000c b010005ec0800401 0800080157f01208 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000690030fffffff ffffff040680030f ffffffffffff0404 10000010000fffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0030fffffffffff ff0406c003001000 06b0030fffffffff ffff0406a0030008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0103800404a4e608 0001080006013ac8 0000000000000000 000000306c6e7574 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff ffdf0803800340a0 a28010000010000f ffffffffffff0401 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800080157f00280 8010000680040108 00060157f2000800 06e00300100006d0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 0406c00300100006 b0030fffffffffff ff0406a003000800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff9adc8988 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81a91bae RDI=ffffffff9adc8988 RBP=ffff88806a627cc8 RSP=ffffc90000648e70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffffc90000648ff8 R12=ffffffff81a91bae R13=ffff88806a627de8 R14=dffffc0000000000 R15=ffff88806a627c80 RIP=ffffffff81987755 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563d68cd6000 CR3=000000004fbd9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffe0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000004000000 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0033333a3331632f 6573756f6d2d3100 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0f0e0d0c0b0a09 0807060504030201 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 33333a3331632f65 73756f6d2d310033 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffff0000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f7912478c5edf 2f2f7912478ea38f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f7912478c5edf 2f2f508d1a300dbf ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d372e64313a30 303a303030302d34 353738325f74656c 6261545f4253555f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 316573756f6d2f35 7475706e692f7475 706e692f32303030 2e313030303a3732 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36303a333030302f 302e313a312d312f 312d312f31627375 2f372e64313a3030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66666f3d73657469 72775f776f6c6c00 33333a3331632f65 73756f6d2d310033 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563d68a43b10 0000563d689e85a0 0000563d689e8520 0000563d689e84c0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563d689ea890 0000563d689ea810 0000563d689ea910 0000563d68a01190 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563d68a01110 0000563d68a01070 0000563d689fe150 0000563d689fe0f0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b5255 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc90005536ca8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e36312e36 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9b088360 R15=ffffffff855b51f0 RIP=ffffffff855b527f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fab460ab6c0 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563d68c84ad0 CR3=0000000050f79000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd61cc8dc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab45211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab45211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab45211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab45211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab45211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab45211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000