last executing test programs: 2.943593475s ago: executing program 1 (id=416): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newpolicy={0xe4, 0x13, 0x309, 0x0, 0x0, {{@in=@empty, @in6=@local, 0x0, 0xfffc, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@user_kmaddress={0x2c, 0x13, {@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x2}}]}, 0xe4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a0300000000ec00000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x2) 2.93404111s ago: executing program 1 (id=417): socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60a7751a00003a6cfe880000000000000000000000e9ff01ff0200000000000000001f0000000001"], 0x0) 2.867797454s ago: executing program 1 (id=418): r0 = socket$inet6(0xa, 0x3, 0x33) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x60, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1, 0xffffff01}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000003240)={&(0x7f00000020c0), 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x14, r4, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2004408c}, 0x4048044) write$UHID_INPUT(r2, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e08385d090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b6d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000003140)={0x0, 0xfffffffffffffffd, 0x0, 0x2, @scatter={0x2, 0x0, &(0x7f0000002080)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000001080)=""/4096, 0x1000}]}, &(0x7f00000020c0), &(0x7f0000002100)=""/4096, 0x1, 0x10020, 0x2, &(0x7f0000003100)}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="3cc9", 0x2}], 0x1) 2.867613552s ago: executing program 1 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf255a0000000800", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2.801480934s ago: executing program 1 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000ffffff8500000034000100ca00000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.801081169s ago: executing program 1 (id=421): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000011c0), 0x12140) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000001200)={0x5, 0x60, 0x7f, {0x4, 0x7f}, 0x178bb3a4, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20000000, 0x20000000, 0x3, 0x7, 0x0, 0x40}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x0, 0xf, 0xce, {0xce, 0x7, "ec7e7e1c8722770e24085add7b5f63208a31e8b279f905cbb92dce34b058503697c30e5e4da61d01e1b6cdc1764e69c6c9ebb90c07365c4bbfa37053441f93087734b863136a39b8e4ade3e12a692a039157fd562c771bbeffd8c411e23bf0d61d062d74a56284f7a3df3ab0fa4d65662f1a821e931c39efd59bbc40d0ef081083943341ed2cf60af0333425e4c2e498654a5402d386c0206360781212d1803b4ba8dd7b6c5419b499c30abeaecd4e231385b1fb5994955a7aeb7678a7b9c987ce179154c205a1e8f3381a72"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}, &(0x7f00000010c0)=ANY=[@ANYBLOB="000f28000000050f28000403100b0b10010412000e020100800a1003020800080308000b10010808003dc2080009e3023c98cf32414018c0372ee276fda6cde9de777d929bd16b04a2c164a89844de1dc12c8a7e61f70a4a05f056d8e60b2a99bcfe5d95f6102255c08f4b357834831ef8d61ca1ffca896d75297d7ab9848648a06685553d2b99e313b7496321ce258543c55e88e080c1a61505f710fec203f5093014b918ab80d077b7afd381b7b961679fa795af3ecb1673fb66d056e09d86b0e70e28f0d5c548830dba7acc68073a450615b4f6951ccd8346ea34b309e716e5d216"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x1, 0x0, "ce525b92", "a885eee0"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x4, 0x2, 0x9, 0x7, 0x4}}}, &(0x7f0000001000)={0x84, &(0x7f0000000680)={0x9896993865a5ede3, 0x1b, 0x93, "d04a1ff15a5cde5c2339eb4b91cc5d7e5ac69239e32a172b6bb7e8e50ea42ab8c2a922ddf03d816ddd62d70917c360cef5d8f573d73c78fd90c5ce52ed088b1414d40a0be6059b66b37e1b92f2d564c51fc07c8af29936322aa6e7e8b922b408a7e3ae0d9b0b940011683051530055280a8ae983cfc9512ef27ac91766e2600476d79c362eb4e630bf0cf4348cc256ba966cb9"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x400, 0x1}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0xb, 0x2, "6b94"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x7f9a}, &(0x7f0000000900)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x19, 0x2, 'Ha'}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000fc0)={0x40, 0x21, 0x1, 0x1}}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$uinput_user_dev(r3, &(0x7f0000000300)={'syz0\x00', {0x9, 0x1, 0x5, 0x871}, 0x1d, [0x401, 0xd23, 0xffff, 0x376969d5, 0x1, 0x3, 0x5, 0x6, 0xb, 0x1, 0x81, 0x10, 0xc, 0x101, 0x3, 0x2a, 0x9, 0x7, 0x4, 0x7fff, 0x5, 0x8, 0x800, 0x659b, 0xfffffffd, 0x1, 0x4, 0xbc6, 0x100, 0x9, 0x3, 0x6, 0x400, 0x2, 0x9, 0x81, 0x3ff, 0x843, 0xf6, 0xff, 0x4, 0xfcf0, 0x1, 0x200, 0x9, 0x3, 0x906, 0x7fffffff, 0xb4a7, 0x4, 0x1, 0x8497, 0xffff, 0x4, 0x100, 0xff, 0x3, 0xfffffff8, 0xa, 0x6, 0x8000, 0x9, 0x70000000, 0x15b2], [0xff, 0x7, 0x7, 0x1ff, 0x3, 0x8, 0x9, 0x81, 0x5, 0x2a, 0x6, 0x8, 0x6d9, 0x5, 0x40, 0x4, 0x7ab, 0x10001, 0x2, 0x7c7, 0x1, 0x7, 0x3ff, 0x1, 0x9, 0x6, 0x9, 0x9, 0x4, 0xfb5e, 0x2, 0x81, 0x4, 0x7, 0x8, 0x4, 0x3, 0x1, 0x3, 0x7, 0xf102, 0x5, 0x9, 0xd, 0x0, 0x400, 0x3, 0xff, 0x800, 0x82, 0xe9f5, 0x3, 0x0, 0x10, 0xf0, 0xd2ec, 0x77a, 0x1, 0x3, 0x0, 0x7ff, 0x0, 0x400, 0x1ff], [0xbd3, 0x7, 0x3, 0xd, 0x8, 0x54b5, 0x1, 0x0, 0x1, 0xf0a7, 0x8000, 0x8, 0x7, 0x5, 0x9, 0x1, 0xe4, 0x8, 0x2, 0x5, 0x7, 0x9, 0x1, 0x0, 0x733dbade, 0x4, 0x6, 0x800, 0x8c52, 0x5, 0x52b, 0x0, 0x3, 0x3, 0x40, 0x6, 0x9, 0xade00000, 0x0, 0x6e6, 0x10000, 0x9, 0x2, 0x901, 0x8, 0xfddd, 0xa, 0x7f, 0x5, 0x8001, 0x4, 0x9, 0x4, 0x7, 0x8, 0x9, 0x56d688c2, 0x9c3, 0x1, 0x4, 0x40, 0x78e, 0x10, 0xfffffffd], [0x0, 0x1ff, 0x2, 0x1, 0x38c5eef5, 0x3, 0x4, 0x9, 0x6, 0x5, 0x7, 0x2, 0x929, 0x5, 0x525f068f, 0x0, 0x1000, 0x8, 0x3, 0x401, 0x7, 0xa1, 0xe0, 0x1, 0x3, 0x6, 0x0, 0x8, 0x7, 0x5, 0x1, 0x8, 0x9, 0x4, 0xfffffffe, 0x7, 0x3, 0x1, 0x5, 0x34b, 0x9, 0xffffff4e, 0x10, 0x80, 0x1, 0x3, 0x800, 0x1, 0x7, 0x47, 0x550, 0x8, 0x3, 0xffffffb5, 0x7, 0x7, 0x6, 0x1, 0xffffffff, 0x3, 0x400, 0x0, 0x9, 0x6]}, 0x45c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000001300)="9d8d645e53b6", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r6}, 0x38) syz_emit_ethernet(0x76, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd606b88ef00403a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000000000190000000000000000000001000000000000000000000000000000000600000000000000df7d270c77aa81ed000000000000000000"], 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x90020, &(0x7f0000000300)=ANY=[@ANYBLOB='mode=00']) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002680)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x4b}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 2.238667235s ago: executing program 2 (id=433): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01230000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x1000000}, 0x0) 2.192005813s ago: executing program 2 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) 2.191250283s ago: executing program 2 (id=436): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800fd4193e9298830f50b0000000000b000000100000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioperm(0x0, 0x5, 0x4000000000000020) getpriority(0x0, 0x5) write$binfmt_script(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$netlink(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40003, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x40187013, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x0, 0xf}}) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r2) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000300)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x45000, 0x61520}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) io_uring_setup(0x48ae, &(0x7f00000000c0)) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'}) 895.196222ms ago: executing program 0 (id=447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="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", 0x1e2}], 0x1}}], 0x1, 0x4000011) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r5, 0xa49a, 0x30}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000002c0)={r5, 0x807fff}, &(0x7f0000000140)=0x8) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r8 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000000000040000000000600000000000000010000401ce41f39bf"]) accept$alg(r6, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0x40045731, &(0x7f0000000100)={0x0, 0xffffffffffffffbf, 0x8000000000000000}) accept4(r6, 0x0, 0x0, 0x80800) r12 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r12) mkdir(0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESHEX=r13], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06000d08"], 0x9) 782.381285ms ago: executing program 0 (id=448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 781.4908ms ago: executing program 0 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES64=0x0, @ANYBLOB="030000000000000018001280c8a6a908000100677470000c00028008000100", @ANYBLOB="89af8dde1348570e2b2b21150e23aa8a36796b33f3090b2482b93ffc9906a45ff19ca18a9cfc57f5e5960dac85999b324c45594f770f87c4936c18173c1850be2fd91fcfd5e839a984b361c848f5cf5c6d015a143534bf05eb4c0ed5408a2729660bb218dbe76692d593bf00de4efc2572a298ff21cded5a94cc761cebb81fd01cd222bb664a35498fe79b5e26b6dc43b854fea0bfa9ddb9", @ANYBLOB='\b\x00\n!', @ANYRES32=r2, @ANYBLOB="23db8bdb1ca18a3db422b6dc109591da32"], 0x40}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x22201, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000001200)={0x1d, r10}, 0x18) writev(r9, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r11, 0x0) r12 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r13 = dup(r12) write$6lowpan_enable(r13, &(0x7f0000000000)='0', 0xfffffd2c) write$selinux_validatetrans(r8, 0x0, 0x81) ioctl$DVD_WRITE_STRUCT(r7, 0x1268, &(0x7f0000000d40)=@type=0x4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xd) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01230000000000001c0012000c000100626f6e64000000000c00020008000f"], 0x3c}}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0xa1, 0x888001) r15 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r15, 0x11b, 0x1, &(0x7f0000000240), &(0x7f0000000040)=0x80) 695.766843ms ago: executing program 0 (id=450): syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x0, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x0, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60b60, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r4, 0x4004510f, &(0x7f0000001b80)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x71, "e913660f68319baa440106b6d9be80b3d430fc3cb986cc53ca901b3d4447bcba7e58b24a8a2b9f20faa8fd672ac99d77055b35e80b3f0540cbbfa7018fbe5d8b8feff0456ae3ebd35595227672f6a2bb24cf0b16e8e91183b8bab1ce80ac431842d0acd1577d89ab6f453ee902f108d5a6"}, &(0x7f0000000080)=0x79) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x71, "e913660f68319baa440106b6d9be80b3d430fc3cb986cc53ca901b3d4447bcba7e58b24a8a2b9f20faa8fd672ac99d77055b35e80b3f0540cbbfa7018fbe5d8b8feff0456ae3ebd35595227672f6a2bb24cf0b16e8e91183b8bab1ce80ac431842d0acd1577d89ab6f453ee902f108d5a6"}, &(0x7f0000000080)=0x79) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x10) copy_file_range(r6, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) (async) copy_file_range(r6, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xe, 0x1, 0x7, 0x0, 0x0, 0xff, 0x9, 0x8001, 0x7, 0xa8, 0xeddd, 0x66c, 0x81, 0xb, 0x1, 0x3, 0x800, 0x5, 0xd1, 0x9, 0x1a3, 0x8, 0x80000001}}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r8], 0x2c}}, 0x0) 694.499695ms ago: executing program 0 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e08067b0c00c8"], 0xb) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$inet6(0xa, 0x5, 0x7ee) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc110000", @ANYRES16=0x0, @ANYBLOB="08002abd707d0edbdf250000000000000000", @ANYRES32=0x0, @ANYBLOB="0c009900030000002f000000dc011d8044000080060005003200000005000900000000000c000200060000000000000005000b00010000000c0003000800000000000000050007005200000005000900010000007001008005000700d300000054010d805800038014000300ff00000409000600ff0000800900faff0500040002000000140005000800010002000600000405000e00ff0705000400020000000500070002000000140003000500070004000c00080007000100090060000280400002003b5219311d10333a24101b0aad2e4436310110564d004529383130503057331c513149520c0847093e220a4f2c3a48381328084f2a483d38323f200e14000300ff0706000000a0059c0301000300080005000600000000006400028005000700000000001400030001000900060000001da401800080145e410002001e2636213b280c44451539294a21203355403a1f1e191456011e003e1d01264447242548503800050c1d45484706011a0d213a2901422e3c0c2722294100000034000280140005000d0001006000632307002400440c06000500070002000000120001001b241b014800013605030518061200000500060001000000050008005c0000001400008006000500f800000005000b0000000000100000800c000200ff7f00000000000074001d803800008005000a000100000005000a0000000000050008005300000005000a000100000005000800d60000000c000300050000000000000038000080050008009b00000005000700a300000006000500ca000000050006000100000005000c000100000005000a000100000004000400d4001d801400008005000900010000000500060000000000100000800400040005000700760000002000008005000c00020000000c000200810000000000000005000600000000008c00008088000d800c0003800500070002000000780001804100020001211b292b464d06423407404048433547204011300e3f490f442d1b0212141142251c564314140e1848021048512a38100057134741104b194f5639160000001400050004000000f9ff0100040008000200030005000700020000001400030000000900003809008100fffffbff0100c8021d8044020080050006000000000005000b000100000004000400060005009200000005000b000100000014020d80c8000280140003000a00a4000f2f06000d000500060002000500040000000000460002001b00321d28504a503247362d34511b063007181549301a3532372a4844102608573d301938573e151e10182040025550291c3b114a30125104292a32451231363b4f0000140005000f000600d20d0100050085d00500400033000200181e1e101f2025134d1427360a513c3835461301172c002f2845352f05334e082b4e09003c2311342d55332a164735000f000100010b0930091b186c1b180c0005000700010000002800038014000300ff7f0000050007000600ffff03000100070002000905070008000100366018069400038035000200572c0a33011f1500255248533734141a315129152d3b33342513522c4729075420100f331d3d1e1f30303a21304054320800000005000700010000004f000200163e3f164228193039112348213523190a4d304e3e081855432c500a1c0b35201454144a0739324a372e2f5647502a5157364909492300393429401d11330228431828424e1135240653030048000080150001006c16030c2400000b0048004803601b0236000000050007000000000005000600000000001400030001000d000700f3ffd60d960f018008000500040002000000440002800c000200492849530f12292814000300050008000b000000090080000500a4ae200002004726014a0e302013131b202c431700183a2b0d08292000233401384b05000b00000000001800008004000400050009000000000005000700ad0000002c00008005000800270000000500090000000000050007008500000005000a000000000005000900010000003c00008005000a00010000001c000d80180001800500060002000000090001000c3004360b0000000c0003000800000000000000060005008000000014051d80ac030080040004003c020d8044000280140003000b00020004000700fdff6c088efb000105000400000000000e0001000b0b2402301b16120c300000140005000800000048000500000004006e05050018000380140003000300000201000600ff030300b2ee006a0c00018005000600020000003c000280140005000400ff1a00000c007f005bac0900faff2300020024300b4614344d08353243571e2a0f44415020271119091f2a522d133d2c54004c00008005000600020000001400050045ea008083070200c9180200d504fc000500040001000000210001004804096004164804030402010c120004180c5c60180b1818090304246c0000001400018008000100040509010500040001000000cc00018014000300020016d50500147b0200018009000050050004000300000014000300070006000300d03d07000200ba640500140005000400000000000b000400f7ff0180c100140005000000cb7e05000500bc000700080007001d0002000d133a38130c1f164e231f0a110830253b0e32493f032a4d470000001c0001000c180306000c0c6c0c1b0218363604241b0c6b05323630092a0002003935525411351d3004493e22534129133f301d56334a01092b1d170a291b19321356544e3734000005000700000000002000038014000500060003000000230dff00020008002a33050006000200000048000080140003000800040008000d00780204002200030014000300090095130200100008000001f1010000140003000300ff00080006006b00050008000002050007000100000005000a00010000000600050078000000050009000100000048010d80a8000380050006000200000021000100063612606c121b3602065a6c050504301b051e05160402181206220304000000050004000200000014000500000107000400070001004202ff0300021100020050210a1801313145292f1c21500000004600020017273e181b3c4f56411e0101482c123a2b0f464a284c55324b0913380bd5105720211934211351081b224d0d43282133400134010102411425141010101811062f440000340003800500060002000000050004000200000005000600020000000500040000000000050004000000000005000700000000003800018016000200300e0a4e1429341a22032639003e513c500700001400050007000603cd000b0004000400010405000500040001000000100001800c00010003186c0b1b180c6f20000180050007000200000014000500050001007f0000fc910ed4000000050005000900010000009800008005000c000100000005000a0000000000050009000000000005000900010000004c000d80480003801600010001091b186036050212603360242460186c030000050006000100000005000400020000000500040000000000140003000800feff5acf000809002d07070004000400040005000c000100000005000b00000000000c000300000000000000000005000800d8000000880000805c000d8058000180050007000100000014000500010008000400c32507000b0003000400140003000600001043e9ff07f7ff040009000900050004000100000007000100061804001200010006604805051b090c24166c483636000005000c000100000005000c000200000005000c00020000000500090000000000060005001000000024000080050008005f000000050009000000000006000500f2000000050006000100000020000080040004000c000300c67a0000000000000400040005000800af0000003c011d800c00008005000a00010000002c010080050009000100000005000c000200000000010d80c00003801f00010006010b03186c3c3000122424166c020060300b12060c6003241601001a0001000b18122404061218050c0312080512012424480b484800000500060000000000050004000200000005000600010000001400050003000500ff000c00100003cd07000800110002002f494147160c2213335444011d0000000500060001000000220001000406094b16051b0c12300b60041b30030b1809120912120c120c242402020000110002000b1b23501b1057271917434a560000003c0001802d00020045252d45243b2800314b312519521e2950493536071d012f2d514f2f3a3457380b2f3243081236132a0000000500070001000000050007001b00000005000c0002000000050007005300000054051d8004030080d0020d8054000080140003007f000200fbff0700033b0600060002003b00020057233a1a370042422e061c3c0d18013f1d3b571a400f3b3551561f001c202605512e1739010f341937035153354a322a3136070a484c1b008400008005000600020000002700020000091b324a00042d48253808101e314c2e392f490a293f194d4f4c39401a4b1f36202c000500060002000000190002001a083f071116441f3831152a00394c164c561838510000000500070002000000050004000200000005000600010000001100020013074c4443463430505610263f000000c8000080050007000100000005000400010000000500010006000000430002000b2d180f0b143040494820051d18231c451e5726070c1243121e0712310353503c09052e081d503d450d304d00502030192006571a36270357382d404c3119001f0001001b481b090216486c1b3660020b60601624120416791624060c481b0014000300030008000000090006000f00030039071a000100240109241203240b240c033012481b09186c0c240c0200000f0001000c060124025b0009062409000500060001000000280001801400050003000700a5050300060018000800050005000400020000000500060000000000180001801400050040000010060081000d940c0010000000a000028005000400020000000500070000000000050006000000000014000500020008000f0001000300000808005b04050007000100000043000200013e4044112b094701371731005601354e2d0e4a37394f483c0309203100190e311d2d14251a51111b40284c0a482c4f4b5529484c3c0c4e551f3810314351001400030017f6c600ff03000006000200070081ff050004000100000005000400020000004c0002800b0001000b12186c06050900050004000100000022000100e40336031b486c123c030b02300b30040c090905368f2404160916011b020000050004000000000005000700010000000500090000000000040004000500090000000000050006000100000005000700310000000c00020001fcffffffffffff0800008004000400ac000080050008009a00000098000d803400038005000400010000001400050008000b000200040008000800c200ffff140005000100040000000800f7ff05000300faff4400008005000700000000003600020037193a01552e493e061543050f1e3657132a2350070c360929522b372c06030046273928571c29162d5121252c080f421a4700001c00008018000100483009050509040902000636032e24030606012405000900010000009801008005000a00010000000400040088010d803400018014000300000801000900090002000020120009001400030000000900080002000400ff0f00020800050007000100000094000080140005000600800005000600e3420100060003001400030001010180070009005d9e4aff008042001400030001000200040001001500090038c856060500060000000000140005000900fdff0700400001008000ffff09000c000100046c06360100360905000600010000000500070001000000140003000200d707a1540101090004000000030005000600020000003c0000800d000100043060120b48304816000000140003000800ee0504005a070004010000800700140003000500090081000800080000100000dd00400000802000010016300930021b095c041b30043660306c360105053906090606010c601400050001000600feff06000600ff7fff00c60205000600010000004000018005000400000000001400030000081c000600ff0300020200010007000500060002000000050006000000000005000100240000000500070002000000"], 0x11bc}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4457, 0x4) clock_adjtime(0x0, &(0x7f0000000440)={0x7fff, 0x7fffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x9, 0xff, 0xc0000, 0x4, 0x300, 0x0, 0x2902, 0x20, 0x3, 0xfffffffffffffffd, 0x0, 0x400000000000, 0x0, 0x5, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x4}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x0, '\x00', @value64=0xfffffffffffffff9}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 639.821714ms ago: executing program 0 (id=452): r0 = eventfd(0x800a8) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="f4f3450f1efc642e64f3410f42200f01c8f2430f0114ee362e660f38230eb9800000c00f3235010000000f30f3420f5af3652e0f01d1410f380ba300000000", 0x3f}], 0x1, 0x8, &(0x7f0000000100)=[@flags={0x3, 0x10}, @cr0={0x0, 0x20}], 0x2) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) (async) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 506.374684ms ago: executing program 3 (id=453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newpolicy={0xe4, 0x13, 0x309, 0x0, 0x0, {{@in=@empty, @in6=@local, 0x0, 0xfffc, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@user_kmaddress={0x2c, 0x13, {@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x2}}]}, 0xe4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000fff500000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x2) 506.189769ms ago: executing program 3 (id=454): socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60a7751a00003a6cfe880000000000000000000000e9ff01ff020000000000000000600000000001"], 0x0) 458.389247ms ago: executing program 3 (id=455): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000000)={0x95, 0xd790}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{}, [@null, @null, @default, @remote, @bcast, @default, @default, @null]}, &(0x7f00000000c0)=0x48, 0x80000) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) preadv(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/201, 0xc9}, {&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000400)=""/166, 0xa6}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/225, 0xe1}], 0x6, 0x4, 0xfd9) fcntl$addseals(r2, 0x409, 0x5) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000680)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000006c0)={0x4}) io_setup(0xf, &(0x7f0000000700)=0x0) io_cancel(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x1ff, r2, &(0x7f0000000740)="74d658876babc8a59dd664b5dcebd3b028366069b6b8e8e77316844ad2b4eac5c9a3999345a9ef3a0a1a8acf18", 0x2d, 0x4, 0x0, 0x1, r2}, &(0x7f00000007c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$I2C_TIMEOUT(r2, 0x702, 0xf) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x34000080}, 0x220408a0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40011) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'ip6gre0\x00', r6, 0x2f, 0x88, 0xa6, 0x2, 0x4a, @local, @loopback, 0x7800, 0x10, 0x1, 0x8}}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4000400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x24004800) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000cc0)=0x20) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000d00)) r9 = openat$cgroup_ro(r2, &(0x7f0000000d40)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2be1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x41ded8ab}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r9, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x4000811) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x44, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8000) 325.460697ms ago: executing program 3 (id=456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01230000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x3000000}, 0x0) 325.279081ms ago: executing program 3 (id=457): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 325.143026ms ago: executing program 3 (id=458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32], 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1c, 0x200141) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x8, 0x0, &(0x7f0000000240)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe, 0x0, "fffffffffffffff7"}) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000040)={r6, 0x4, 0x1, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000af08f95f85000000b90000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) (async) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) (async) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x4c, &(0x7f00000006c0)=ANY=[]) (async) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r11, &(0x7f0000000000)=""/73, 0x49) (async) sendfile(r9, r9, 0x0, 0xa) (async) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000000)=ANY=[]) (async) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x1a0, 0x0, 0xfffffffffffffffe}]}) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000300)={0xf000000, 0x6, 0x0, r9, 0x0, &(0x7f0000000180)={0x9b090f, 0x3, '\x00', @p_u8=&(0x7f0000000140)=0x6}}) (async) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x7) write(r2, &(0x7f0000000040)="aefc00001a0037f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410fa94a235a2a441f9ab42c631c63afd28eaa361fdef7b9df68527e813862089f547f8157aa56d37821ed0c08892ab1d89619f448f578f9cc8bbf7344bc158185fd9649fd57ccc865b25f32aceb77fc4cb75a5add8e4d71324f8edf438866b2ef31e7dcd7936cea23f7286c9ef87f5b7a1432d27c8ae3ca1df63b5dae9472e74ea7d560995797a32d71703708b529ac2c08e651ca93c4aaa95c1d491", 0x8a) 48.690065ms ago: executing program 2 (id=459): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01230000000000001c0012000c000100626f6e64000000000c00020008000f"], 0x3c}}, 0x0) 583.579µs ago: executing program 2 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r1, 0x400, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e08067b0c00c8"], 0xb) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$inet6(0xa, 0x5, 0x7ee) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc110000", @ANYRES16=0x0, @ANYBLOB="08002abd707d0edbdf250000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x11bc}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4457, 0x4) clock_adjtime(0x0, &(0x7f0000000440)={0x7fff, 0x7fffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x9, 0xff, 0xc0000, 0x4, 0x300, 0x0, 0x2902, 0x20, 0x3, 0xfffffffffffffffd, 0x0, 0x400000000000, 0x0, 0x5, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x4}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x0, '\x00', @value64=0xfffffffffffffff9}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 0s ago: executing program 2 (id=461): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400)={0xa91da26caa56bc93, 0x20, 0x1}, 0x18) mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0xad) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = socket$inet6(0xa, 0x3, 0xff) r4 = fsopen(&(0x7f0000000000)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000200)='\xa0\x87\x06\x00\x00\x00\x00\x00\x00\x00\nx\xed\x7f\x05\t', 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = dup2(r3, r3) sendmsg$inet6(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000003c0)="a728343faabd089c3b1ecd51da2900a3374781dc5f86d41dcefddb276d8f0bdfaf947fdae1d7d6667a97ffbc601ae3ab1c0e7b039b0d9fc8fc3b", 0x3a}, {0x0, 0xf5}], 0x2, &(0x7f0000000d00)=[@hopopts_2292={{0x60}}, @dstopts_2292={{0x12, 0x29, 0x4, {0x0, 0x2, '\x00', [@enc_lim, @hao={0xc9, 0x10, @local}]}}}, @flowinfo={{0x14}}], 0x60}, 0x0) io_setup(0xbf5, &(0x7f0000000600)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x10}]) pselect6(0x40, &(0x7f0000000040)={0xffff, 0x9, 0xe, 0x18ff, 0x9, 0x9, 0x9, 0x7}, &(0x7f00000000c0)={0x1, 0x1af55105, 0xd, 0x9b98, 0x7fff, 0xb, 0x7, 0xb}, &(0x7f0000000140)={0x1000, 0x3, 0xfffffffffffff885, 0x4, 0x869e, 0x6, 0x34f9, 0x4ce}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000240)={&(0x7f00000001c0)={[0x6]}, 0x8}) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="cc5b7ca430f740cb1c00120000000c00020008000f00f55dc124afb44d5d15c4a2b6dd78ed9fb33c44531e1501b3861fc0325e65bd00cea214e2ad04e8eedecab044a11269750a7f44b300bae7727329233868e67f8686456d0b76b737b924e478531d377ea36eb7cdf03711c42b258f494ca93cc7428cefb89100e867c938185bf22c1a265391cb66639f9fedf71552fac38acf516e6ee386c581f2175f934f0b275bbc7e4b5c0ab3cec085b1544a494b96eab1cf58d29d5f14beb120090fb9e0c0bc4403390ca2abb8a29b932ab52781634df0c4a40111f94a4c"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): [ 31.288492][ T39] audit: type=1400 audit(1731634644.415:80): avc: denied { write } for pid=5854 comm="sh" path="pipe:[5880]" dev="pipefs" ino=5880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 31.294346][ T39] audit: type=1400 audit(1731634644.415:81): avc: denied { rlimitinh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.299215][ T39] audit: type=1400 audit(1731634644.415:82): avc: denied { siginh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.230763][ T39] audit: type=1400 audit(1731634645.365:83): avc: denied { read } for pid=5344 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.236337][ T39] audit: type=1400 audit(1731634645.365:84): avc: denied { append } for pid=5344 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.241831][ T39] audit: type=1400 audit(1731634645.365:85): avc: denied { open } for pid=5344 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.247711][ T39] audit: type=1400 audit(1731634645.365:86): avc: denied { getattr } for pid=5344 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:58750' (ED25519) to the list of known hosts. [ 32.807439][ T39] audit: type=1400 audit(1731634645.945:87): avc: denied { name_bind } for pid=5861 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.421648][ T5866] cgroup: Unknown subsys name 'net' [ 34.566619][ T5866] cgroup: Unknown subsys name 'cpuset' [ 34.569691][ T5866] cgroup: Unknown subsys name 'rlimit' [ 34.748229][ T5923] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.301184][ T5866] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.448950][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 37.448961][ T39] audit: type=1400 audit(1731634650.585:105): avc: denied { execmem } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.569308][ T39] audit: type=1400 audit(1731634650.705:106): avc: denied { create } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.574976][ T39] audit: type=1400 audit(1731634650.705:107): avc: denied { read write } for pid=5941 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.580892][ T39] audit: type=1400 audit(1731634650.705:108): avc: denied { open } for pid=5941 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.587385][ T39] audit: type=1400 audit(1731634650.715:109): avc: denied { ioctl } for pid=5941 comm="syz-executor" path="socket:[6430]" dev="sockfs" ino=6430 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.617675][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.619804][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.622252][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.625993][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.628932][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.630436][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.631101][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.633214][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.634874][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.637115][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.638902][ T5951] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.640408][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.640492][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.641198][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.641993][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.642135][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.642555][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.642603][ T5951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.642783][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.648070][ T39] audit: type=1400 audit(1731634650.785:110): avc: denied { read } for pid=5941 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.649815][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.650186][ T5954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.650346][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.650662][ T39] audit: type=1400 audit(1731634650.785:111): avc: denied { read } for pid=5944 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.652773][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.654021][ T39] audit: type=1400 audit(1731634650.785:112): avc: denied { open } for pid=5941 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.657785][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.662532][ T39] audit: type=1400 audit(1731634650.785:113): avc: denied { mounton } for pid=5941 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.785863][ T39] audit: type=1400 audit(1731634650.925:114): avc: denied { module_request } for pid=5941 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.849780][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 37.855171][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 37.873559][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 37.937187][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 37.967854][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.970074][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.971941][ T5942] bridge_slave_0: entered allmulticast mode [ 37.973846][ T5942] bridge_slave_0: entered promiscuous mode [ 37.976926][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.978691][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.980458][ T5941] bridge_slave_0: entered allmulticast mode [ 37.982334][ T5941] bridge_slave_0: entered promiscuous mode [ 37.987497][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.989296][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.991109][ T5941] bridge_slave_1: entered allmulticast mode [ 37.993051][ T5941] bridge_slave_1: entered promiscuous mode [ 38.006018][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.007820][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.009613][ T5942] bridge_slave_1: entered allmulticast mode [ 38.011614][ T5942] bridge_slave_1: entered promiscuous mode [ 38.051594][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.053396][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.055376][ T5948] bridge_slave_0: entered allmulticast mode [ 38.057279][ T5948] bridge_slave_0: entered promiscuous mode [ 38.068881][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.076064][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.078441][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.080243][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.082027][ T5948] bridge_slave_1: entered allmulticast mode [ 38.083990][ T5948] bridge_slave_1: entered promiscuous mode [ 38.087154][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.117787][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.136798][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.138611][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.140521][ T5944] bridge_slave_0: entered allmulticast mode [ 38.142451][ T5944] bridge_slave_0: entered promiscuous mode [ 38.162584][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.168242][ T5942] team0: Port device team_slave_0 added [ 38.170200][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.172012][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.173874][ T5944] bridge_slave_1: entered allmulticast mode [ 38.176049][ T5944] bridge_slave_1: entered promiscuous mode [ 38.188564][ T5941] team0: Port device team_slave_0 added [ 38.191274][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.195706][ T5942] team0: Port device team_slave_1 added [ 38.219523][ T5941] team0: Port device team_slave_1 added [ 38.247898][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.249688][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.256793][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.261042][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.281221][ T5948] team0: Port device team_slave_0 added [ 38.283676][ T5948] team0: Port device team_slave_1 added [ 38.285546][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.287363][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.293705][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.297664][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.300209][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.301921][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.308936][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.331287][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.333100][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.339887][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.351237][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.352973][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.359522][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.373423][ T5944] team0: Port device team_slave_0 added [ 38.390469][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.392185][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.398538][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.404853][ T5944] team0: Port device team_slave_1 added [ 38.408075][ T5942] hsr_slave_0: entered promiscuous mode [ 38.410012][ T5942] hsr_slave_1: entered promiscuous mode [ 38.443262][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.446040][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.452341][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.465141][ T5941] hsr_slave_0: entered promiscuous mode [ 38.467099][ T5941] hsr_slave_1: entered promiscuous mode [ 38.468915][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.470971][ T5941] Cannot create hsr debugfs directory [ 38.473265][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.475972][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.482233][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.508230][ T5948] hsr_slave_0: entered promiscuous mode [ 38.510116][ T5948] hsr_slave_1: entered promiscuous mode [ 38.511858][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.513693][ T5948] Cannot create hsr debugfs directory [ 38.553967][ T5944] hsr_slave_0: entered promiscuous mode [ 38.555874][ T5944] hsr_slave_1: entered promiscuous mode [ 38.557576][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.559482][ T5944] Cannot create hsr debugfs directory [ 38.715852][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.722245][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.725986][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.730753][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.755744][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.757845][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.759909][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.761774][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.764869][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.767770][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.770548][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.773483][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.798460][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.800568][ T5941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.802593][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.804530][ T5941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.808101][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.821179][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.824779][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.828129][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.843375][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.846753][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.849586][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.852330][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.857053][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.860292][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.863013][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.866294][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.881402][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.892637][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.907354][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.914986][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.916722][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.919742][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.921447][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.942603][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.956561][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.958293][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.960749][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.962458][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.002803][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.006962][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.012204][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.023119][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.024941][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.030176][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.034644][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.036444][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.044954][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.046721][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.054841][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.058053][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.059863][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.092192][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.106518][ T5942] veth0_vlan: entered promiscuous mode [ 39.113078][ T5942] veth1_vlan: entered promiscuous mode [ 39.147001][ T5942] veth0_macvtap: entered promiscuous mode [ 39.151007][ T5941] veth0_vlan: entered promiscuous mode [ 39.153479][ T5942] veth1_macvtap: entered promiscuous mode [ 39.160398][ T5941] veth1_vlan: entered promiscuous mode [ 39.171926][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.179003][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.182197][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.185108][ T5941] veth0_macvtap: entered promiscuous mode [ 39.193437][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.196143][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.198414][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.200626][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.202825][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.206727][ T5941] veth1_macvtap: entered promiscuous mode [ 39.231036][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.234064][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.238519][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.254752][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.258315][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.262522][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.276109][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.276813][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.278171][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.280528][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.285253][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.287432][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.291978][ T5944] veth0_vlan: entered promiscuous mode [ 39.302905][ T5944] veth1_vlan: entered promiscuous mode [ 39.304837][ T5948] veth0_vlan: entered promiscuous mode [ 39.311574][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.313606][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.325810][ T5948] veth1_vlan: entered promiscuous mode [ 39.331855][ T5944] veth0_macvtap: entered promiscuous mode [ 39.340014][ T5944] veth1_macvtap: entered promiscuous mode [ 39.353091][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.353966][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.355202][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.359987][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.362596][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.366073][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.370044][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.377408][ T5942] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.382959][ T5948] veth0_macvtap: entered promiscuous mode [ 39.388628][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.391560][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.394001][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.397709][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.401838][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.405067][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.405521][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.407062][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.411733][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.413939][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.417312][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.423263][ T5948] veth1_macvtap: entered promiscuous mode [ 39.433369][ T6006] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 39.435912][ T6006] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.440450][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.443733][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.447257][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.450209][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.452682][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.455763][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.459014][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.465686][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.468552][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.471471][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.475202][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.478276][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.481539][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.485686][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.493917][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.497114][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.499683][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.501959][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.516012][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.518210][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.519035][ T6010] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 39.545201][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.547490][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.568742][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.570772][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.581888][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.589009][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.678955][ T6034] Bluetooth: MGMT ver 1.23 [ 39.714647][ T5953] Bluetooth: hci1: command tx timeout [ 39.714659][ T5950] Bluetooth: hci0: command tx timeout [ 39.714719][ T65] Bluetooth: hci3: command tx timeout [ 39.714771][ T5945] Bluetooth: hci2: command tx timeout [ 39.783461][ T6051] Zero length message leads to an empty skb [ 39.786164][ T6051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'. [ 39.921336][ T6069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21'. [ 39.931174][ T6069] vlan2: entered promiscuous mode [ 39.932560][ T6069] vlan2: entered allmulticast mode [ 39.933976][ T6069] hsr_slave_1: entered allmulticast mode [ 39.952889][ T6071] vlan2: entered promiscuous mode [ 39.954274][ T6071] vlan2: entered allmulticast mode [ 39.955553][ T6071] hsr_slave_1: entered allmulticast mode [ 40.087663][ T6082] netlink: 'syz.0.25': attribute type 3 has an invalid length. [ 40.212937][ T6093] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 40.243973][ T6097] netlink: 48 bytes leftover after parsing attributes in process `syz.2.31'. [ 40.274324][ T6102] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 40.283835][ T6102] bond1: entered promiscuous mode [ 40.285534][ T6102] bond1: entered allmulticast mode [ 40.287448][ T6102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.378290][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.380960][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.386111][ T6109] bridge0: entered allmulticast mode [ 40.407784][ T5953] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 40.408109][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 40.409098][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.409172][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.409263][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.409553][ T6109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.410081][ T6109] bridge0: entered promiscuous mode [ 40.411730][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 40.430233][ T6111] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.432865][ T6111] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.435103][ T6111] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.437284][ T6111] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 40.439679][ T6111] geneve2: entered promiscuous mode [ 40.441035][ T6111] geneve2: entered allmulticast mode [ 40.505707][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.508095][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.510414][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.513448][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.515172][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.516852][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.519871][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.521797][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.523522][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.525161][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.526813][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.528999][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.530683][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.533020][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.535355][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.538381][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.541043][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.543664][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.546678][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.553774][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.559664][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.564839][ T6116] overlayfs: failed to resolve './file0': -2 [ 40.588621][ T6123] netlink: 48 bytes leftover after parsing attributes in process `syz.0.41'. [ 40.597913][ T6123] vlan2: entered promiscuous mode [ 40.599650][ T6123] vlan2: entered allmulticast mode [ 40.601295][ T6123] hsr_slave_1: entered allmulticast mode [ 40.649466][ T6128] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 40.656833][ T6128] bond1: entered promiscuous mode [ 40.658178][ T6128] bond1: entered allmulticast mode [ 40.659662][ T6128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.769856][ T6139] overlay: filesystem on ./bus not supported as upperdir [ 40.853040][ T6144] netlink: 48 bytes leftover after parsing attributes in process `syz.1.50'. [ 40.887616][ T6146] overlayfs: failed to resolve './file1': -2 [ 40.957748][ T6159] pimreg: entered allmulticast mode [ 40.967999][ T6162] pimreg: left allmulticast mode [ 41.051187][ T62] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 41.100720][ T6164] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.185276][ T1015] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 41.186059][ T62] usb 8-1: device descriptor read/64, error -71 [ 41.327309][ T1015] usb 5-1: Invalid ep0 maxpacket: 64 [ 41.432576][ T62] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 41.451690][ T1015] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 41.565685][ T62] usb 8-1: device descriptor read/64, error -71 [ 41.603378][ T1015] usb 5-1: Invalid ep0 maxpacket: 64 [ 41.606307][ T1015] usb usb5-port1: attempt power cycle [ 41.670449][ T62] usb usb8-port1: attempt power cycle [ 41.698640][ T5945] Bluetooth: hci0: command tx timeout [ 41.699031][ T65] Bluetooth: hci3: command tx timeout [ 41.701285][ T5953] Bluetooth: hci2: command tx timeout [ 41.701575][ T5954] Bluetooth: hci1: command tx timeout [ 41.928874][ T1015] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 41.947030][ T1015] usb 5-1: Invalid ep0 maxpacket: 64 [ 42.003863][ T62] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 42.023369][ T62] usb 8-1: device descriptor read/8, error -71 [ 42.070523][ T1015] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 42.090139][ T1015] usb 5-1: Invalid ep0 maxpacket: 64 [ 42.091984][ T1015] usb usb5-port1: unable to enumerate USB device [ 42.270429][ T62] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 42.299902][ T62] usb 8-1: device descriptor read/8, error -71 [ 42.386006][ T5950] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 42.386214][ T5953] Bluetooth: hci4: command 0x1003 tx timeout [ 42.403858][ T62] usb usb8-port1: unable to enumerate USB device [ 42.419752][ T39] kauditd_printk_skb: 151 callbacks suppressed [ 42.419761][ T39] audit: type=1400 audit(1731635423.689:266): avc: denied { create } for pid=6201 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.426469][ T39] audit: type=1400 audit(1731635423.700:267): avc: denied { bind } for pid=6201 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.426706][ T6202] netlink: 'syz.1.69': attribute type 11 has an invalid length. [ 42.431142][ T39] audit: type=1400 audit(1731635423.700:268): avc: denied { setopt } for pid=6201 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.431160][ T39] audit: type=1400 audit(1731635423.700:269): avc: denied { read } for pid=6201 comm="syz.1.69" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 42.431175][ T39] audit: type=1400 audit(1731635423.700:270): avc: denied { open } for pid=6201 comm="syz.1.69" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 42.431190][ T39] audit: type=1400 audit(1731635423.700:271): avc: denied { write } for pid=6201 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.435392][ T6202] netlink: 148 bytes leftover after parsing attributes in process `syz.1.69'. [ 42.439557][ T39] audit: type=1400 audit(1731635423.700:272): avc: denied { ioctl } for pid=6201 comm="syz.1.69" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 42.640757][ T39] audit: type=1400 audit(1731635423.920:273): avc: denied { name_bind } for pid=6203 comm="syz.2.70" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.230910][ T39] audit: type=1400 audit(1731635424.540:274): avc: denied { read } for pid=6213 comm="syz.2.74" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.237373][ T39] audit: type=1400 audit(1731635424.540:275): avc: denied { open } for pid=6213 comm="syz.2.74" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.260041][ T6221] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.264126][ T6221] capability: warning: `syz.2.76' uses 32-bit capabilities (legacy support in use) [ 43.553227][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.79'. [ 43.576899][ T6252] netlink: 48 bytes leftover after parsing attributes in process `syz.1.80'. [ 43.603039][ T6256] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 43.611819][ T6256] bond1: entered promiscuous mode [ 43.613548][ T6256] bond1: entered allmulticast mode [ 43.615056][ T6256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.680535][ T5950] Bluetooth: hci0: command tx timeout [ 43.682122][ T5950] Bluetooth: hci1: command tx timeout [ 43.689156][ T5950] Bluetooth: hci3: command tx timeout [ 43.826603][ T6281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.89'. [ 43.854117][ T6286] loop4: detected capacity change from 0 to 16384 [ 43.862280][ T6289] vlan2: entered promiscuous mode [ 43.863741][ T6289] vlan2: entered allmulticast mode [ 43.865081][ T6289] hsr_slave_1: entered allmulticast mode [ 43.897536][ T6291] netlink: 'syz.3.93': attribute type 1 has an invalid length. [ 43.906186][ T6291] bond1: entered promiscuous mode [ 43.907604][ T6291] bond1: entered allmulticast mode [ 43.910136][ T6291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.960663][ T6302] vlan4: entered promiscuous mode [ 43.962135][ T6302] vlan4: entered allmulticast mode [ 44.222015][ T6318] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 44.229206][ T6318] bond2: entered promiscuous mode [ 44.230573][ T6318] bond2: entered allmulticast mode [ 44.232023][ T6318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 44.241592][ T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 44.305924][ T6326] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 44.311332][ T6326] __nla_validate_parse: 3 callbacks suppressed [ 44.311341][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 44.340800][ T6332] vlan4: entered promiscuous mode [ 44.342211][ T6332] vlan4: entered allmulticast mode [ 44.366919][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.112'. [ 44.367403][ T35] usb 5-1: device descriptor read/64, error -71 [ 44.489059][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.530296][ T6349] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 44.538204][ T6349] bond3: entered promiscuous mode [ 44.539634][ T6349] bond3: entered allmulticast mode [ 44.541080][ T6349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 44.594661][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 44.727236][ T35] usb 5-1: device descriptor read/64, error -71 [ 44.746946][ T5346] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 44.832849][ T35] usb usb5-port1: attempt power cycle [ 44.867176][ T6378] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 44.875937][ T6378] bond4: entered promiscuous mode [ 44.877262][ T6378] bond4: entered allmulticast mode [ 44.878701][ T6378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 44.908922][ T5346] usb 8-1: Using ep0 maxpacket: 8 [ 44.913014][ T5346] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 44.915888][ T5346] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 44.919374][ T5346] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 44.922790][ T5346] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 44.926283][ T5346] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 44.930771][ T5346] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 44.933262][ T6383] autofs: Bad value for 'fd' [ 44.933631][ T5346] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.156142][ T35] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 45.175719][ T35] usb 5-1: device descriptor read/8, error -71 [ 45.194793][ T5346] usb 8-1: usb_control_msg returned -32 [ 45.196402][ T5346] usbtmc 8-1:16.0: can't read capabilities [ 45.292912][ T5950] block nbd2: Receive control failed (result -32) [ 45.339557][ T6403] block nbd2: shutting down sockets [ 45.400639][ T6408] bond5: entered promiscuous mode [ 45.401968][ T6408] bond5: entered allmulticast mode [ 45.403390][ T6408] 8021q: adding VLAN 0 to HW filter on device bond5 [ 45.423236][ T35] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 45.444277][ T35] usb 5-1: device descriptor read/8, error -71 [ 45.549067][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 45.556058][ T35] usb usb5-port1: unable to enumerate USB device [ 45.627649][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 45.630027][ T6428] netlink: 'syz.2.150': attribute type 11 has an invalid length. [ 45.632028][ T6428] netlink: 'syz.2.150': attribute type 13 has an invalid length. [ 45.637356][ T6428] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.639713][ T6428] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.642055][ T6428] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.644673][ T6428] vxlan0: entered promiscuous mode [ 45.649604][ T6428] lo: entered promiscuous mode [ 45.650944][ T6428] lo: entered allmulticast mode [ 45.660846][ T5950] Bluetooth: hci0: command tx timeout [ 45.680078][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 45.706251][ T6432] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 45.728705][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 45.730983][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.154'. [ 45.734791][ T6435] gtp0: entered promiscuous mode [ 45.736182][ T6435] gtp0: entered allmulticast mode [ 45.743566][ T6435] program syz.1.154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.771271][ T6437] vlan4: entered promiscuous mode [ 45.772770][ T6437] vlan4: entered allmulticast mode [ 45.821750][ T6441] bond2: entered promiscuous mode [ 45.823217][ T6441] bond2: entered allmulticast mode [ 45.824701][ T6441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 45.868322][ T6449] usbtmc 8-1:16.0: usb_clear_halt returned -32 [ 45.872501][ T6449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=6449 comm=syz.3.113 [ 45.920647][ T6454] netlink: 48 bytes leftover after parsing attributes in process `syz.1.161'. [ 45.949072][ T6456] process 'syz.1.162' launched './file1' with NULL argv: empty string added [ 46.048790][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'. [ 46.063782][ T5346] usb 8-1: USB disconnect, device number 6 [ 46.071448][ T6469] MTD: Couldn't look up '/dev/sg0': -15 [ 46.192704][ T6481] fuse: Unknown parameter '' [ 46.201619][ T6481] netlink: 188 bytes leftover after parsing attributes in process `syz.1.173'. [ 46.204665][ T6481] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 46.398342][ T5950] Bluetooth: hci2: Unknown advertising packet type: 0x3e [ 46.398376][ T5950] Bluetooth: hci2: Malformed LE Event: 0x0d [ 46.413772][ T6501] bond6: entered promiscuous mode [ 46.415171][ T6501] bond6: entered allmulticast mode [ 46.416639][ T6501] 8021q: adding VLAN 0 to HW filter on device bond6 [ 46.444471][ T6504] sp0: Synchronizing with TNC [ 46.449375][ T6504] /dev/sg0: Can't lookup blockdev [ 46.593586][ T6512] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 46.600310][ T6515] vlan4: entered promiscuous mode [ 46.601731][ T6515] vlan4: entered allmulticast mode [ 46.778942][ T6536] bond3: entered promiscuous mode [ 46.780301][ T6536] bond3: entered allmulticast mode [ 46.781754][ T6536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 46.810911][ T6540] bond4: entered promiscuous mode [ 46.812269][ T6540] bond4: entered allmulticast mode [ 46.814007][ T6540] 8021q: adding VLAN 0 to HW filter on device bond4 [ 47.298593][ T35] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 47.356396][ T6596] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 47.474347][ T35] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 47.476816][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.478829][ T35] usb 5-1: Product: syz [ 47.480684][ T35] usb 5-1: Manufacturer: syz [ 47.482481][ T35] usb 5-1: SerialNumber: syz [ 47.486307][ T35] usb 5-1: config 0 descriptor?? [ 47.584129][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 47.584144][ T39] audit: type=1400 audit(1731644645.105:338): avc: denied { setopt } for pid=6620 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.620142][ T6621] trusted_key: syz.3.229 sent an empty control message without MSG_MORE. [ 47.625485][ T6621] netlink: 'syz.3.229': attribute type 10 has an invalid length. [ 47.628092][ T6630] netlink: 'syz.1.232': attribute type 2 has an invalid length. [ 47.630815][ T6621] team0: Device hsr_slave_0 failed to register rx_handler [ 47.643866][ T6630] : entered promiscuous mode [ 47.682069][ T35] usb 5-1: USB disconnect, device number 10 [ 47.878254][ T39] audit: type=1400 audit(1731644645.420:339): avc: denied { watch watch_reads } for pid=6551 comm="syz.0.201" path="/24/file0" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.886958][ T39] audit: type=1400 audit(1731644645.430:340): avc: denied { accept } for pid=6551 comm="syz.0.201" lport=44617 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.887775][ T6552] overlay: Unknown parameter 'uid<00000000000000000000' [ 47.894574][ T39] audit: type=1400 audit(1731644645.430:341): avc: denied { write } for pid=6551 comm="syz.0.201" lport=44617 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 47.905180][ T39] audit: type=1400 audit(1731644645.430:342): avc: denied { setopt } for pid=6551 comm="syz.0.201" lport=44617 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 48.009007][ T39] audit: type=1400 audit(1731644645.556:343): avc: denied { connect } for pid=6674 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.016864][ T39] audit: type=1400 audit(1731644645.567:344): avc: denied { open } for pid=6674 comm="syz.2.251" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 48.023760][ T6675] (unnamed net_device) (uninitialized): down delay (536871808) is not a multiple of miimon (129), value rounded to 536871684 ms [ 48.025273][ T5346] hid-generic 0005:0C45:1011.0002: item fetching failed at offset 0/1 [ 48.028649][ T39] audit: type=1400 audit(1731644645.577:345): avc: denied { getopt } for pid=6674 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.030592][ T5346] hid-generic 0005:0C45:1011.0002: probe with driver hid-generic failed with error -22 [ 48.047463][ T39] audit: type=1400 audit(1731644645.598:346): avc: denied { bind } for pid=6683 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.096554][ T6684] bond2: entered allmulticast mode [ 48.099512][ T6684] bond2 (unregistering): Released all slaves [ 48.141120][ T6688] loop2: detected capacity change from 0 to 7 [ 48.145251][ T6688] Dev loop2: unable to read RDB block 7 [ 48.147266][ T6688] loop2: unable to read partition table [ 48.148819][ T6688] loop2: partition table beyond EOD, truncated [ 48.150478][ T6688] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 48.342288][ T6712] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.346537][ T39] audit: type=1400 audit(1731644645.913:347): avc: denied { ioctl } for pid=6711 comm="syz.3.265" path="socket:[11953]" dev="sockfs" ino=11953 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.359501][ T6712] ufs: Invalid option: "workdir=./bus" or missing value [ 48.361390][ T6712] ufs: wrong mount options [ 48.675444][ T6763] sg_write: data in/out 79/60 bytes for SCSI command 0x0-- guessing data in; [ 48.675444][ T6763] program syz.1.284 not setting count and/or reply_len properly [ 48.797196][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.807349][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.851735][ T6795] bridge_slave_0 (unregistering): left allmulticast mode [ 48.853612][ T6795] bridge_slave_0 (unregistering): left promiscuous mode [ 48.855453][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.132455][ T6839] __nla_validate_parse: 19 callbacks suppressed [ 49.132467][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'. [ 49.241025][ T6846] dccp_invalid_packet: invalid packet type [ 49.265842][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 49.350935][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 49.353268][ T6866] bridge_slave_1: left allmulticast mode [ 49.354823][ T6866] bridge_slave_1: left promiscuous mode [ 49.357103][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.456303][ T6873] netlink: 104 bytes leftover after parsing attributes in process `syz.3.327'. [ 49.477532][ T6875] [U] [ 49.478426][ T6875] [U] [ 49.479175][ T6875] [U] [ 49.479902][ T6875] [U] [ 49.481547][ T6875] [U] [ 49.482315][ T6875] [U] [ 49.483061][ T6875] [U] [ 49.483791][ T6875] [U] [ 49.484657][ T6875] [U] [ 49.485402][ T6875] [U] [ 49.486135][ T6875] [U] [ 49.486877][ T6875] [U] [ 49.488001][ T6875] [U] [ 49.488755][ T6875] [U] [ 49.489512][ T6875] [U] [ 49.490243][ T6875] [U] [ 49.491826][ T6875] [U] [ 49.492583][ T6875] [U] [ 49.493312][ T6875] [U] [ 49.494049][ T6875] [U] [ 49.494934][ T6875] [U] [ 49.495684][ T6875] [U] [ 49.496413][ T6875] [U] [ 49.497147][ T6875] [U] [ 49.499457][ T6875] [U] [ 49.500580][ T6875] [U] [ 49.501512][ T6875] [U] [ 49.502440][ T6875] [U] [ 49.503890][ T6875] [U] [ 49.504880][ T6875] [U] [ 49.505831][ T6875] [U] [ 49.506757][ T6875] [U] [ 49.507775][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'. [ 49.507882][ T6875] [U] [ 49.511038][ T6875] [U] [ 49.511914][ T6875] [U] [ 49.512637][ T6875] [U] [ 49.514004][ T6875] [U] [ 49.514763][ T6875] [U] [ 49.515493][ T6875] [U] [ 49.516208][ T6875] [U] [ 49.517149][ T6875] [U] [ 49.517895][ T6875] [U] [ 49.518611][ T6875] [U] [ 49.519310][ T6875] [U] [ 49.520147][ T6875] [U] [ 49.520859][ T6875] [U] [ 49.521523][ T6875] [U] [ 49.522203][ T6875] [U] [ 49.522932][ T6875] [U] [ 49.523629][ T6875] [U] [ 49.524303][ T6875] [U] [ 49.524993][ T6875] [U] [ 49.525718][ T6875] [U] [ 49.526415][ T6875] [U] [ 49.527123][ T6875] [U] [ 49.527848][ T6875] [U] [ 49.528745][ T6875] [U] [ 49.529491][ T6875] [U] [ 49.530220][ T6875] [U] [ 49.530963][ T6875] [U] [ 49.531749][ T6875] [U] [ 49.532467][ T6875] [U] [ 49.533175][ T6875] [U] [ 49.533889][ T6875] [U] [ 49.534670][ T6875] [U] [ 49.535398][ T6875] [U] [ 49.536113][ T6875] [U] [ 49.536828][ T6875] [U] [ 49.537777][ T6875] [U] [ 49.538512][ T6875] [U] [ 49.539193][ T6875] [U] [ 49.539914][ T6875] [U] [ 49.540707][ T6875] [U] [ 49.541442][ T6875] [U] [ 49.542171][ T6875] [U] [ 49.542907][ T6875] [U] [ 49.543683][ T6875] [U] [ 49.544413][ T6875] [U] [ 49.545145][ T6875] [U] [ 49.545875][ T6875] [U] [ 49.546731][ T6875] [U] [ 49.547484][ T6875] [U] [ 49.548213][ T6875] [U] [ 49.548943][ T6875] [U] [ 49.549731][ T6875] [U] [ 49.550461][ T6875] [U] [ 49.551196][ T6875] [U] [ 49.551925][ T6875] [U] [ 49.552710][ T6875] [U] [ 49.553446][ T6875] [U] [ 49.554173][ T6875] [U] [ 49.554908][ T6875] [U] [ 49.555680][ T6875] [U] [ 49.556418][ T6875] [U] [ 49.557300][ T6875] [U] [ 49.558109][ T6875] [U] [ 49.559113][ T6875] [U] [ 49.559856][ T6875] [U] [ 49.560588][ T6875] [U] [ 49.561316][ T6875] [U] [ 49.562110][ T6875] [U] [ 49.562866][ T6875] [U] [ 49.563603][ T6875] [U] [ 49.564354][ T6875] [U] [ 49.565162][ T6875] [U] [ 49.565910][ T6875] [U] [ 49.566637][ T6875] [U] [ 49.567369][ T6875] [U] [ 49.568239][ T6875] [U] [ 49.568986][ T6875] [U] [ 49.569732][ T6875] [U] [ 49.570463][ T6875] [U] [ 49.571262][ T6875] [U] [ 49.571997][ T6875] [U] [ 49.572728][ T6875] [U] [ 49.573460][ T6875] [U] [ 49.574242][ T6875] [U] [ 49.575004][ T6875] [U] [ 49.575762][ T6875] [U] [ 49.576500][ T6875] [U] [ 49.577822][ T6875] [U] [ 49.579152][ T6875] [U] [ 49.579887][ T6875] [U] [ 49.580619][ T6875] [U] [ 49.581385][ T6875] [U] [ 49.582119][ T6875] [U] [ 49.582867][ T6875] [U] [ 49.585280][ T6883] netlink: 96 bytes leftover after parsing attributes in process `syz.2.332'. [ 49.585594][ T6874] [U] [ 49.829150][ T6898] netlink: 48 bytes leftover after parsing attributes in process `syz.1.337'. [ 49.848769][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.338'. [ 50.111690][ T6931] netlink: 48 bytes leftover after parsing attributes in process `syz.3.348'. [ 50.111978][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 50.201050][ T6958] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 50.488925][ T35] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 50.517799][ T6991] ubi0: attaching mtd0 [ 50.522015][ T6991] ubi0: scanning is finished [ 50.523373][ T6991] ubi0: empty MTD device detected [ 50.634100][ T35] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 50.636286][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 50.639076][ T35] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.642255][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 50.645148][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 50.650624][ T35] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 50.652943][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 50.656015][ T35] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.659022][ T6991] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 50.659043][ T6991] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 50.659052][ T6991] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 50.659060][ T6991] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 50.659068][ T6991] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 50.659076][ T6991] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 50.659084][ T6991] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 279002889 [ 50.659093][ T6991] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 50.659445][ T7003] ubi0: background thread "ubi_bgt0d" started, PID 7003 [ 50.661682][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 50.680898][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 50.684868][ T35] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 50.686823][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 50.689846][ T35] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.692857][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 50.695726][ T35] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 50.700923][ T35] usb 8-1: string descriptor 0 read error: -22 [ 50.702583][ T35] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 50.705108][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.711188][ T7007] loop7: detected capacity change from 0 to 16384 [ 50.712145][ T35] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 50.765549][ T7007] loop7: detected capacity change from 16384 to 16383 [ 50.819382][ T7028] overlay: filesystem on ./bus not supported as upperdir [ 50.912692][ T6967] input: syz1 as /devices/virtual/input/input6 [ 50.924164][ T6004] usb 8-1: USB disconnect, device number 7 [ 50.986028][ T5950] Bluetooth: Frame is too long (len 22, expected len 4) [ 51.117440][ T829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.261665][ T829] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 51.264486][ T829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.267361][ T829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.270148][ T829] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 51.274779][ T829] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 51.277225][ T829] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 51.279338][ T829] usb 7-1: Manufacturer: syz [ 51.281558][ T829] usb 7-1: config 0 descriptor?? [ 51.477426][ T5950] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 51.518435][ T7054] Process accounting resumed [ 51.670402][ T829] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 51.673253][ T829] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 51.680904][ T829] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 51.728356][ T7046] orangefs_mount: mount request failed with -4 [ 51.779999][ T6004] libceph: connect (1)[c::]:6789 error -101 [ 51.782416][ T6004] libceph: mon0 (1)[c::]:6789 connect error [ 51.786158][ T7083] syzkaller0: entered allmulticast mode [ 51.823231][ T5346] libceph: connect (1)[c::]:6789 error -101 [ 51.824913][ T5346] libceph: mon0 (1)[c::]:6789 connect error [ 51.978197][ T5346] usb 7-1: USB disconnect, device number 2 [ 52.025066][ T7105] netlink: 'syz.1.409': attribute type 72 has an invalid length. [ 52.034143][ T828] libceph: connect (1)[c::]:6789 error -101 [ 52.036317][ T828] libceph: mon0 (1)[c::]:6789 connect error [ 52.070496][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 52.072081][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 52.208946][ T7123] tipc: Enabling of bearer rejected, failed to enable media [ 52.261294][ T7125] netlink: 'syz.1.419': attribute type 72 has an invalid length. [ 52.299466][ T7129] xt_hashlimit: size too large, truncated to 1048576 [ 52.301284][ T7129] xt_hashlimit: max too large, truncated to 1048576 [ 52.512045][ T5950] Bluetooth: hci1: unexpected event 0x01 length: 33 > 1 [ 52.518505][ T828] libceph: connect (1)[c::]:6789 error -101 [ 52.521953][ T828] libceph: mon0 (1)[c::]:6789 connect error [ 52.527036][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.556090][ T5346] libceph: connect (1)[c::]:6789 error -101 [ 52.557718][ T5346] libceph: mon0 (1)[c::]:6789 connect error [ 52.562457][ T7086] ceph: No mds server is up or the cluster is laggy [ 52.562585][ T7080] ceph: No mds server is up or the cluster is laggy [ 52.600308][ T39] kauditd_printk_skb: 54 callbacks suppressed [ 52.600323][ T39] audit: type=1400 audit(1731645418.375:402): avc: denied { mount } for pid=7132 comm="syz.2.423" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.671223][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 52.674306][ T35] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.676750][ T35] usb 6-1: config 179 has no interface number 0 [ 52.678322][ T35] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 52.681512][ T35] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 52.684333][ T35] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.687601][ T35] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 52.691148][ T35] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 52.694719][ T35] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 52.697364][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.700005][ T39] audit: type=1400 audit(1731645418.491:403): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.703577][ T7129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.736373][ T7140] bond8: entered promiscuous mode [ 52.737964][ T7140] bond8: entered allmulticast mode [ 52.739436][ T7140] 8021q: adding VLAN 0 to HW filter on device bond8 [ 52.748288][ T7143] bond2: entered promiscuous mode [ 52.749686][ T7143] bond2: entered allmulticast mode [ 52.751126][ T7143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.775698][ T7150] FAULT_INJECTION: forcing a failure. [ 52.775698][ T7150] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.779332][ T7150] CPU: 2 UID: 0 PID: 7150 Comm: syz.0.428 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 52.781885][ T7150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.784573][ T7150] Call Trace: [ 52.785443][ T7150] [ 52.786196][ T7150] dump_stack_lvl+0x16c/0x1f0 [ 52.787412][ T7150] should_fail_ex+0x497/0x5b0 [ 52.788595][ T7150] _copy_from_user+0x2e/0xd0 [ 52.789826][ T7150] copy_msghdr_from_user+0x99/0x160 [ 52.791148][ T7150] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 52.792621][ T7150] ? __pfx___lock_acquire+0x10/0x10 [ 52.794210][ T7150] ___sys_sendmsg+0xff/0x1e0 [ 52.795857][ T7150] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.797698][ T7150] ? lock_acquire+0x2f/0xb0 [ 52.798821][ T7150] ? __fget_files+0x40/0x3f0 [ 52.799997][ T7150] ? fdget+0x176/0x210 [ 52.800992][ T7150] __sys_sendmsg+0x117/0x1f0 [ 52.802142][ T7150] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.803498][ T7150] ? __fget_files+0x244/0x3f0 [ 52.804859][ T7150] do_syscall_64+0xcd/0x250 [ 52.806126][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.807665][ T7150] RIP: 0033:0x7fc93997e719 [ 52.808807][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.813936][ T7150] RSP: 002b:00007fc93a80e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.816651][ T7150] RAX: ffffffffffffffda RBX: 00007fc939b35f80 RCX: 00007fc93997e719 [ 52.818618][ T7150] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 52.820592][ T7150] RBP: 00007fc93a80e090 R08: 0000000000000000 R09: 0000000000000000 [ 52.822553][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.824542][ T7150] R13: 0000000000000000 R14: 00007fc939b35f80 R15: 00007ffdb20d9948 [ 52.826481][ T7150] [ 52.827347][ C2] vkms_vblank_simulate: vblank timer overrun [ 52.855489][ T39] audit: type=1400 audit(1731645418.648:404): avc: denied { cmd } for pid=7153 comm="syz.0.430" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 53.016827][ T39] audit: type=1400 audit(1731646186.816:405): avc: denied { bind } for pid=7163 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.021518][ T39] audit: type=1400 audit(1731646186.816:406): avc: denied { write } for pid=7163 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.136880][ T828] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.298373][ T828] usb 7-1: Using ep0 maxpacket: 8 [ 53.300919][ T828] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 53.303000][ T828] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 53.305088][ T828] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 53.307354][ T828] usb 7-1: config 250 has no interface number 0 [ 53.309009][ T828] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 53.311958][ T828] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 53.315413][ T828] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 53.318783][ T828] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 53.322212][ T828] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 53.326372][ T828] usb 7-1: config 250 interface 228 has no altsetting 0 [ 53.329976][ T828] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 53.332862][ T828] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 53.335473][ T828] usb 7-1: Product: syz [ 53.336792][ T828] usb 7-1: SerialNumber: syz [ 53.340260][ T828] hub 7-1:250.228: bad descriptor, ignoring hub [ 53.341856][ T828] hub 7-1:250.228: probe with driver hub failed with error -5 [ 53.427420][ T39] audit: type=1400 audit(1731646187.247:407): avc: denied { map } for pid=7128 comm="syz.1.421" path="/161/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 53.435340][ T39] audit: type=1400 audit(1731646187.257:408): avc: denied { remount } for pid=7128 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 53.534267][ T828] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 53.726257][ T39] audit: type=1400 audit(1731646187.551:409): avc: denied { read write } for pid=7165 comm="syz.2.436" name="lp0" dev="devtmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 53.734321][ T39] audit: type=1400 audit(1731646187.551:410): avc: denied { open } for pid=7165 comm="syz.2.436" path="/dev/usb/lp0" dev="devtmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 53.737297][ T7171] bond3: entered promiscuous mode [ 53.741373][ T7171] bond3: entered allmulticast mode [ 53.742774][ T7171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 53.840790][ T39] audit: type=1400 audit(1731646187.677:411): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.856696][ T7175] FAULT_INJECTION: forcing a failure. [ 53.856696][ T7175] name failslab, interval 1, probability 0, space 0, times 1 [ 53.859968][ T7175] CPU: 3 UID: 0 PID: 7175 Comm: syz.0.438 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 53.862578][ T7175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.865159][ T7175] Call Trace: [ 53.865989][ T7175] [ 53.866758][ T7175] dump_stack_lvl+0x16c/0x1f0 [ 53.867966][ T7175] should_fail_ex+0x497/0x5b0 [ 53.869139][ T7175] ? fs_reclaim_acquire+0xae/0x150 [ 53.870433][ T7175] should_failslab+0xc2/0x120 [ 53.871655][ T7175] kmem_cache_alloc_node_noprof+0x71/0x310 [ 53.873114][ T7175] ? __alloc_skb+0x2b1/0x380 [ 53.874300][ T7175] __alloc_skb+0x2b1/0x380 [ 53.875454][ T7175] ? __pfx___alloc_skb+0x10/0x10 [ 53.876702][ T7175] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 53.878205][ T7175] netlink_alloc_large_skb+0x69/0x130 [ 53.879579][ T7175] netlink_sendmsg+0x689/0xd70 [ 53.880791][ T7175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.882111][ T7175] ____sys_sendmsg+0xaaf/0xc90 [ 53.883352][ T7175] ? copy_msghdr_from_user+0x10b/0x160 [ 53.884753][ T7175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 53.886131][ T7175] ? __pfx___lock_acquire+0x10/0x10 [ 53.887501][ T7175] ___sys_sendmsg+0x135/0x1e0 [ 53.888721][ T7175] ? __pfx____sys_sendmsg+0x10/0x10 [ 53.890090][ T7175] ? lock_acquire+0x2f/0xb0 [ 53.891283][ T7175] ? __fget_files+0x40/0x3f0 [ 53.892490][ T7175] ? fdget+0x176/0x210 [ 53.893552][ T7175] __sys_sendmsg+0x117/0x1f0 [ 53.894753][ T7175] ? __pfx___sys_sendmsg+0x10/0x10 [ 53.896084][ T7175] ? __fget_files+0x244/0x3f0 [ 53.897289][ T7175] do_syscall_64+0xcd/0x250 [ 53.898457][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.899977][ T7175] RIP: 0033:0x7fc93997e719 [ 53.901096][ T7175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.905836][ T7175] RSP: 002b:00007fc93a80e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.907927][ T7175] RAX: ffffffffffffffda RBX: 00007fc939b35f80 RCX: 00007fc93997e719 [ 53.909949][ T7175] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 53.911928][ T7175] RBP: 00007fc93a80e090 R08: 0000000000000000 R09: 0000000000000000 [ 53.913910][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.915852][ T7175] R13: 0000000000000000 R14: 00007fc939b35f80 R15: 00007ffdb20d9948 [ 53.917812][ T7175] [ 54.062035][ T7184] __nla_validate_parse: 15 callbacks suppressed [ 54.062045][ T7184] netlink: 48 bytes leftover after parsing attributes in process `syz.0.441'. [ 54.198140][ T7196] bond4: entered promiscuous mode [ 54.199478][ T7196] bond4: entered allmulticast mode [ 54.200912][ T7196] 8021q: adding VLAN 0 to HW filter on device bond4 [ 54.356913][ T5988] IPVS: starting estimator thread 0... [ 54.357365][ T7204] netlink: 32 bytes leftover after parsing attributes in process `syz.0.449'. [ 54.395127][ T7207] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 54.425902][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.451'. [ 54.443634][ T7205] IPVS: using max 34 ests per chain, 81600 per kthread [ 54.542319][ T828] usb 7-1: USB disconnect, device number 3 [ 54.545492][ T828] usblp0: removed [ 54.584943][ T7217] netlink: 48 bytes leftover after parsing attributes in process `syz.3.453'. [ 55.050631][ T35] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 55.062101][ T7231] bond9: entered promiscuous mode [ 55.063449][ T7231] bond9: entered allmulticast mode [ 55.064876][ T7231] 8021q: adding VLAN 0 to HW filter on device bond9 [ 55.101325][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.460'. [ 55.131665][ T7236] sit0: entered promiscuous mode [ 55.135504][ T7236] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 55.138312][ T7236] netlink: 1 bytes leftover after parsing attributes in process `syz.2.461'. [ 55.145227][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.461'. [ 55.165121][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 55.165130][ T829] usb 6-1: USB disconnect, device number 2 [ 55.165266][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 55.171968][ C3] ================================================================== [ 55.173972][ C3] BUG: KASAN: slab-use-after-free in register_lock_class+0x1033/0x1240 [ 55.176173][ C3] Read of size 1 at addr ffff88802a550091 by task syz.1.421/7169 [ 55.179504][ C3] [ 55.180474][ C3] CPU: 3 UID: 0 PID: 7169 Comm: syz.1.421 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 55.183080][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.185770][ C3] Call Trace: [ 55.186639][ C3] [ 55.187408][ C3] dump_stack_lvl+0x116/0x1f0 [ 55.188602][ C3] print_report+0xc3/0x620 [ 55.189742][ C3] ? __virt_addr_valid+0x5e/0x590 [ 55.191011][ C3] ? __phys_addr+0xc6/0x150 [ 55.192148][ C3] kasan_report+0xd9/0x110 [ 55.193300][ C3] ? register_lock_class+0x1033/0x1240 [ 55.194665][ C3] ? register_lock_class+0x1033/0x1240 [ 55.196020][ C3] register_lock_class+0x1033/0x1240 [ 55.197323][ C3] ? __pfx_register_lock_class+0x10/0x10 [ 55.198729][ C3] __lock_acquire+0x135/0x3ce0 [ 55.199958][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 55.201299][ C3] lock_acquire.part.0+0x11b/0x380 [ 55.202612][ C3] ? __wake_up+0x1c/0x60 [ 55.203689][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 55.205101][ C3] ? rcu_is_watching+0x12/0xc0 [ 55.206306][ C3] ? trace_lock_acquire+0x14a/0x1d0 [ 55.207668][ C3] ? __wake_up+0x1c/0x60 [ 55.208781][ C3] ? lock_acquire+0x2f/0xb0 [ 55.209987][ C3] ? __wake_up+0x1c/0x60 [ 55.211113][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 55.212451][ C3] ? __wake_up+0x1c/0x60 [ 55.213531][ C3] __wake_up+0x1c/0x60 [ 55.214593][ C3] usb_anchor_resume_wakeups+0xc2/0xe0 [ 55.215916][ C3] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 55.217237][ C3] usb_hcd_giveback_urb+0x396/0x450 [ 55.218541][ C3] dummy_timer+0x17f0/0x3930 [ 55.219708][ C3] ? lock_acquire+0x2f/0xb0 [ 55.220849][ C3] ? debug_object_deactivate+0x13c/0x370 [ 55.222246][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 55.223568][ C3] ? find_held_lock+0x2d/0x110 [ 55.224781][ C3] ? __hrtimer_run_queues+0x53d/0xae0 [ 55.226114][ C3] ? __pfx_lock_release+0x10/0x10 [ 55.227378][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 55.228612][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.230080][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 55.231332][ C3] __hrtimer_run_queues+0x20a/0xae0 [ 55.232651][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 55.234086][ C3] ? ktime_get_update_offsets_now+0x201/0x310 [ 55.235631][ C3] hrtimer_run_softirq+0x17d/0x350 [ 55.236965][ C3] handle_softirqs+0x213/0x8f0 [ 55.238177][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 55.239522][ C3] irq_exit_rcu+0xbb/0x120 [ 55.240656][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 55.242094][ C3] [ 55.242874][ C3] [ 55.243658][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 55.245191][ C3] RIP: 0010:lock_release+0x3e5/0x6f0 [ 55.246500][ C3] Code: 7e 83 f8 01 0f 85 fd 01 00 00 9c 58 f6 c4 02 0f 85 e8 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 48 8b 84 24 88 [ 55.251265][ C3] RSP: 0018:ffffc9000324f408 EFLAGS: 00000206 [ 55.252795][ C3] RAX: dffffc0000000000 RBX: 1ffff92000649e83 RCX: ffffc9000324f458 [ 55.254748][ C3] RDX: 1ffff110045e25e2 RSI: ffffffff8b6cd2c0 RDI: ffffffff8bd1b6c0 [ 55.256722][ C3] RBP: ffffffffffffffff R08: 0000000000000000 R09: fffffbfff20beb99 [ 55.258692][ C3] R10: ffffffff905f5ccf R11: 0000000000000000 R12: 0000000000000000 [ 55.260645][ C3] R13: 0000000000000001 R14: ffff888022f12f18 R15: ffff888022f12440 [ 55.262590][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 55.263906][ C3] ? __pfx_lock_release+0x10/0x10 [ 55.265164][ C3] ? trace_lock_acquire+0x14a/0x1d0 [ 55.266475][ C3] ? lock_acquire+0x2f/0xb0 [ 55.267635][ C3] ? is_bpf_text_address+0x30/0x1a0 [ 55.268936][ C3] ? bpf_ksym_find+0x127/0x1c0 [ 55.270145][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 55.271693][ C3] is_bpf_text_address+0x8f/0x1a0 [ 55.272970][ C3] kernel_text_address+0x8d/0x100 [ 55.274276][ C3] __kernel_text_address+0xd/0x40 [ 55.275544][ C3] unwind_get_return_address+0x59/0xa0 [ 55.276850][ C3] arch_stack_walk+0xa7/0x100 [ 55.277999][ C3] stack_trace_save+0x95/0xd0 [ 55.279204][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 55.280611][ C3] ? lock_acquire.part.0+0x11b/0x380 [ 55.281940][ C3] kasan_save_stack+0x33/0x60 [ 55.283151][ C3] ? kasan_save_stack+0x33/0x60 [ 55.284372][ C3] ? kasan_save_track+0x14/0x30 [ 55.285617][ C3] ? kasan_save_free_info+0x3b/0x60 [ 55.286953][ C3] ? __kasan_slab_free+0x51/0x70 [ 55.288187][ C3] ? kmem_cache_free+0x152/0x4b0 [ 55.289440][ C3] ? kfree_skbmem+0x1a4/0x1f0 [ 55.290660][ C3] ? consume_skb+0xcc/0x100 [ 55.291823][ C3] ? kobject_uevent_env+0xcd5/0x1860 [ 55.293156][ C3] ? __kobject_del+0x168/0x1f0 [ 55.294371][ C3] ? kobject_put+0x327/0x5a0 [ 55.295544][ C3] ? bus_remove_driver+0x16e/0x2c0 [ 55.296829][ C3] ? driver_unregister+0x76/0xb0 [ 55.298078][ C3] ? usb_gadget_unregister_driver+0x49/0x70 [ 55.299572][ C3] ? raw_release+0x1ae/0x2b0 [ 55.300733][ C3] ? __fput+0x3f6/0xb60 [ 55.301783][ C3] ? task_work_run+0x14e/0x250 [ 55.302989][ C3] ? do_exit+0xadd/0x2d70 [ 55.304057][ C3] ? do_group_exit+0xd3/0x2a0 [ 55.305230][ C3] ? get_signal+0x25fb/0x2770 [ 55.306413][ C3] ? arch_do_signal_or_restart+0x90/0x7e0 [ 55.307887][ C3] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 55.309359][ C3] ? do_syscall_64+0xda/0x250 [ 55.310555][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.312079][ C3] kasan_save_track+0x14/0x30 [ 55.313308][ C3] kasan_save_free_info+0x3b/0x60 [ 55.314614][ C3] __kasan_slab_free+0x51/0x70 [ 55.315861][ C3] kmem_cache_free+0x152/0x4b0 [ 55.317018][ C3] ? kfree_skbmem+0x1a4/0x1f0 [ 55.318171][ C3] kfree_skbmem+0x1a4/0x1f0 [ 55.319320][ C3] consume_skb+0xcc/0x100 [ 55.320410][ C3] kobject_uevent_env+0xcd5/0x1860 [ 55.321680][ C3] ? up_write+0x1b2/0x520 [ 55.322766][ C3] __kobject_del+0x168/0x1f0 [ 55.323957][ C3] kobject_put+0x327/0x5a0 [ 55.325106][ C3] ? __pfx_raw_release+0x10/0x10 [ 55.326382][ C3] bus_remove_driver+0x16e/0x2c0 [ 55.327657][ C3] driver_unregister+0x76/0xb0 [ 55.328882][ C3] usb_gadget_unregister_driver+0x49/0x70 [ 55.330347][ C3] raw_release+0x1ae/0x2b0 [ 55.331472][ C3] __fput+0x3f6/0xb60 [ 55.332479][ C3] task_work_run+0x14e/0x250 [ 55.333675][ C3] ? __pfx_task_work_run+0x10/0x10 [ 55.335001][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 55.336338][ C3] do_exit+0xadd/0x2d70 [ 55.337401][ C3] ? get_signal+0x8f2/0x2770 [ 55.338559][ C3] ? __pfx_do_exit+0x10/0x10 [ 55.339718][ C3] ? do_raw_spin_lock+0x12d/0x2c0 [ 55.340977][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 55.342318][ C3] do_group_exit+0xd3/0x2a0 [ 55.343481][ C3] get_signal+0x25fb/0x2770 [ 55.344644][ C3] ? __pfx_get_signal+0x10/0x10 [ 55.345858][ C3] ? __pfx_do_futex+0x10/0x10 [ 55.347092][ C3] arch_do_signal_or_restart+0x90/0x7e0 [ 55.348491][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 55.350054][ C3] ? selinux_file_ioctl+0xb4/0x270 [ 55.351350][ C3] syscall_exit_to_user_mode+0x150/0x2a0 [ 55.352773][ C3] do_syscall_64+0xda/0x250 [ 55.353947][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.355478][ C3] RIP: 0033:0x7f480cd7e719 [ 55.356644][ C3] Code: Unable to access opcode bytes at 0x7f480cd7e6ef. [ 55.358416][ C3] RSP: 002b:00007f480b1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.360470][ C3] RAX: fffffffffffffe00 RBX: 00007f480cf36060 RCX: 00007f480cd7e719 [ 55.362485][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f480cf36060 [ 55.364468][ C3] RBP: 00007f480cf36058 R08: 0000000000000000 R09: 0000000000000000 [ 55.366461][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f480cf36064 [ 55.368399][ C3] R13: 0000000000000000 R14: 00007ffc79464de0 R15: 00007ffc79464ec8 [ 55.370376][ C3] [ 55.371195][ C3] [ 55.371820][ C3] Allocated by task 35: [ 55.372867][ C3] kasan_save_stack+0x33/0x60 [ 55.374061][ C3] kasan_save_track+0x14/0x30 [ 55.375254][ C3] __kasan_kmalloc+0xaa/0xb0 [ 55.376430][ C3] xpad_probe+0x27e/0x1f50 [ 55.377565][ C3] usb_probe_interface+0x309/0x9d0 [ 55.378861][ C3] really_probe+0x23e/0xa90 [ 55.380018][ C3] __driver_probe_device+0x1de/0x440 [ 55.381368][ C3] driver_probe_device+0x4c/0x1b0 [ 55.382689][ C3] __device_attach_driver+0x1df/0x310 [ 55.384080][ C3] bus_for_each_drv+0x157/0x1e0 [ 55.385354][ C3] __device_attach+0x1e8/0x4b0 [ 55.386585][ C3] bus_probe_device+0x17f/0x1c0 [ 55.387794][ C3] device_add+0x114b/0x1a70 [ 55.388945][ C3] usb_set_configuration+0x10cb/0x1c50 [ 55.390313][ C3] usb_generic_driver_probe+0xb1/0x110 [ 55.391734][ C3] usb_probe_device+0xec/0x3e0 [ 55.392978][ C3] really_probe+0x23e/0xa90 [ 55.394161][ C3] __driver_probe_device+0x1de/0x440 [ 55.395482][ C3] driver_probe_device+0x4c/0x1b0 [ 55.396749][ C3] __device_attach_driver+0x1df/0x310 [ 55.398111][ C3] bus_for_each_drv+0x157/0x1e0 [ 55.399348][ C3] __device_attach+0x1e8/0x4b0 [ 55.400556][ C3] bus_probe_device+0x17f/0x1c0 [ 55.401781][ C3] device_add+0x114b/0x1a70 [ 55.402931][ C3] usb_new_device+0xd90/0x1a10 [ 55.404142][ C3] hub_event+0x2d9a/0x4e10 [ 55.405293][ C3] process_one_work+0x9c5/0x1ba0 [ 55.406524][ C3] worker_thread+0x6c8/0xf00 [ 55.407683][ C3] kthread+0x2c1/0x3a0 [ 55.408684][ C3] ret_from_fork+0x45/0x80 [ 55.409816][ C3] ret_from_fork_asm+0x1a/0x30 [ 55.411012][ C3] [ 55.411623][ C3] Freed by task 829: [ 55.412602][ C3] kasan_save_stack+0x33/0x60 [ 55.413784][ C3] kasan_save_track+0x14/0x30 [ 55.414963][ C3] kasan_save_free_info+0x3b/0x60 [ 55.416228][ C3] __kasan_slab_free+0x51/0x70 [ 55.417441][ C3] kfree+0x14f/0x4b0 [ 55.418453][ C3] xpad_disconnect+0x1cf/0x580 [ 55.419664][ C3] usb_unbind_interface+0x1e8/0x970 [ 55.420962][ C3] device_remove+0x122/0x170 [ 55.422120][ C3] device_release_driver_internal+0x44a/0x610 [ 55.423672][ C3] bus_remove_device+0x22f/0x420 [ 55.424887][ C3] device_del+0x396/0x9f0 [ 55.425974][ C3] usb_disable_device+0x36c/0x7f0 [ 55.427240][ C3] usb_disconnect+0x2e1/0x920 [ 55.428467][ C3] hub_event+0x1da5/0x4e10 [ 55.429639][ C3] process_one_work+0x9c5/0x1ba0 [ 55.430931][ C3] worker_thread+0x6c8/0xf00 [ 55.432129][ C3] kthread+0x2c1/0x3a0 [ 55.433175][ C3] ret_from_fork+0x45/0x80 [ 55.434310][ C3] ret_from_fork_asm+0x1a/0x30 [ 55.435521][ C3] [ 55.436141][ C3] The buggy address belongs to the object at ffff88802a550000 [ 55.436141][ C3] which belongs to the cache kmalloc-1k of size 1024 [ 55.439556][ C3] The buggy address is located 145 bytes inside of [ 55.439556][ C3] freed 1024-byte region [ffff88802a550000, ffff88802a550400) [ 55.442941][ C3] [ 55.443550][ C3] The buggy address belongs to the physical page: [ 55.445145][ C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a550 [ 55.447319][ C3] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 55.449400][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 55.451266][ C3] page_type: f5(slab) [ 55.452238][ C3] raw: 00fff00000000040 ffff88801b042dc0 ffffea0000a33a00 dead000000000002 [ 55.454325][ C3] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 55.456443][ C3] head: 00fff00000000040 ffff88801b042dc0 ffffea0000a33a00 dead000000000002 [ 55.458651][ C3] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 55.460799][ C3] head: 00fff00000000003 ffffea0000a95401 ffffffffffffffff 0000000000000000 [ 55.462960][ C3] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 55.465177][ C3] page dumped because: kasan: bad access detected [ 55.466819][ C3] page_owner tracks the page as allocated [ 55.468235][ C3] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u32:1), ts 39069607565, free_ts 39029584361 [ 55.473267][ C3] post_alloc_hook+0x2d1/0x350 [ 55.474485][ C3] get_page_from_freelist+0xfce/0x2f80 [ 55.475891][ C3] __alloc_pages_noprof+0x223/0x25a0 [ 55.477235][ C3] alloc_pages_mpol_noprof+0x2c9/0x610 [ 55.478635][ C3] new_slab+0x2c9/0x410 [ 55.479712][ C3] ___slab_alloc+0xdac/0x1880 [ 55.480887][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 55.482229][ C3] __kmalloc_node_track_caller_noprof+0x355/0x430 [ 55.483836][ C3] kmalloc_reserve+0xef/0x2c0 [ 55.485034][ C3] __alloc_skb+0x164/0x380 [ 55.486159][ C3] inet6_rt_notify+0xf0/0x2c0 [ 55.487353][ C3] fib6_add+0x2524/0x4b50 [ 55.488447][ C3] ip6_route_add+0x8d/0x1c0 [ 55.489605][ C3] addrconf_prefix_route+0x2fe/0x510 [ 55.490934][ C3] addrconf_add_linklocal+0x32a/0x620 [ 55.492263][ C3] addrconf_addr_gen+0x36f/0x3c0 [ 55.493502][ C3] page last free pid 5942 tgid 5942 stack trace: [ 55.495105][ C3] free_unref_page+0x661/0x1080 [ 55.496373][ C3] __mmdrop+0xd5/0x460 [ 55.497446][ C3] finish_task_switch.isra.0+0x7af/0xcc0 [ 55.498913][ C3] __schedule+0xe5d/0x5740 [ 55.500054][ C3] preempt_schedule_notrace+0x62/0xe0 [ 55.501424][ C3] preempt_schedule_notrace_thunk+0x1a/0x30 [ 55.502928][ C3] stack_depot_save_flags+0x38a/0x8f0 [ 55.504507][ C3] kasan_save_stack+0x42/0x60 [ 55.505754][ C3] kasan_save_track+0x14/0x30 [ 55.507013][ C3] __kasan_kmalloc+0xaa/0xb0 [ 55.508187][ C3] __kmalloc_noprof+0x1e8/0x400 [ 55.509433][ C3] tomoyo_encode2+0x100/0x3e0 [ 55.510640][ C3] tomoyo_encode+0x29/0x50 [ 55.511775][ C3] tomoyo_realpath_from_path+0x19d/0x720 [ 55.513183][ C3] tomoyo_path_number_perm+0x245/0x590 [ 55.514555][ C3] security_file_ioctl+0x9b/0x240 [ 55.515851][ C3] [ 55.516469][ C3] Memory state around the buggy address: [ 55.517906][ C3] ffff88802a54ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.519879][ C3] ffff88802a550000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.521818][ C3] >ffff88802a550080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.523863][ C3] ^ [ 55.525049][ C3] ffff88802a550100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.527077][ C3] ffff88802a550180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.529119][ C3] ================================================================== [ 55.531150][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 55.532900][ C3] CPU: 3 UID: 0 PID: 7169 Comm: syz.1.421 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 55.535576][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.538225][ C3] Call Trace: [ 55.539100][ C3] [ 55.539858][ C3] dump_stack_lvl+0x3d/0x1f0 [ 55.541085][ C3] panic+0x71d/0x800 [ 55.542088][ C3] ? __pfx_panic+0x10/0x10 [ 55.543229][ C3] ? rcu_is_watching+0x12/0xc0 [ 55.544428][ C3] ? __pfx_lock_release+0x10/0x10 [ 55.545713][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 55.547005][ C3] check_panic_on_warn+0xab/0xb0 [ 55.548248][ C3] end_report+0x117/0x180 [ 55.549351][ C3] kasan_report+0xe9/0x110 [ 55.550459][ C3] ? register_lock_class+0x1033/0x1240 [ 55.551828][ C3] ? register_lock_class+0x1033/0x1240 [ 55.553210][ C3] register_lock_class+0x1033/0x1240 [ 55.554530][ C3] ? __pfx_register_lock_class+0x10/0x10 [ 55.555959][ C3] __lock_acquire+0x135/0x3ce0 [ 55.557173][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 55.558486][ C3] lock_acquire.part.0+0x11b/0x380 [ 55.559782][ C3] ? __wake_up+0x1c/0x60 [ 55.560864][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 55.562325][ C3] ? rcu_is_watching+0x12/0xc0 [ 55.563570][ C3] ? trace_lock_acquire+0x14a/0x1d0 [ 55.564922][ C3] ? __wake_up+0x1c/0x60 [ 55.566028][ C3] ? lock_acquire+0x2f/0xb0 [ 55.567221][ C3] ? __wake_up+0x1c/0x60 [ 55.568330][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 55.569683][ C3] ? __wake_up+0x1c/0x60 [ 55.570793][ C3] __wake_up+0x1c/0x60 [ 55.571869][ C3] usb_anchor_resume_wakeups+0xc2/0xe0 [ 55.573292][ C3] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 55.574658][ C3] usb_hcd_giveback_urb+0x396/0x450 [ 55.576000][ C3] dummy_timer+0x17f0/0x3930 [ 55.577207][ C3] ? lock_acquire+0x2f/0xb0 [ 55.578383][ C3] ? debug_object_deactivate+0x13c/0x370 [ 55.579854][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 55.581216][ C3] ? find_held_lock+0x2d/0x110 [ 55.582471][ C3] ? __hrtimer_run_queues+0x53d/0xae0 [ 55.583865][ C3] ? __pfx_lock_release+0x10/0x10 [ 55.585171][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 55.586432][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 55.587900][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 55.589143][ C3] __hrtimer_run_queues+0x20a/0xae0 [ 55.590471][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 55.591903][ C3] ? ktime_get_update_offsets_now+0x201/0x310 [ 55.593429][ C3] hrtimer_run_softirq+0x17d/0x350 [ 55.594728][ C3] handle_softirqs+0x213/0x8f0 [ 55.595951][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 55.597293][ C3] irq_exit_rcu+0xbb/0x120 [ 55.598421][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 55.599845][ C3] [ 55.600601][ C3] [ 55.601352][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 55.602857][ C3] RIP: 0010:lock_release+0x3e5/0x6f0 [ 55.604194][ C3] Code: 7e 83 f8 01 0f 85 fd 01 00 00 9c 58 f6 c4 02 0f 85 e8 01 00 00 48 f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 c7 43 08 00 00 00 00 48 8b 84 24 88 [ 55.609018][ C3] RSP: 0018:ffffc9000324f408 EFLAGS: 00000206 [ 55.610546][ C3] RAX: dffffc0000000000 RBX: 1ffff92000649e83 RCX: ffffc9000324f458 [ 55.612537][ C3] RDX: 1ffff110045e25e2 RSI: ffffffff8b6cd2c0 RDI: ffffffff8bd1b6c0 [ 55.614549][ C3] RBP: ffffffffffffffff R08: 0000000000000000 R09: fffffbfff20beb99 [ 55.616587][ C3] R10: ffffffff905f5ccf R11: 0000000000000000 R12: 0000000000000000 [ 55.618542][ C3] R13: 0000000000000001 R14: ffff888022f12f18 R15: ffff888022f12440 [ 55.620541][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 55.621860][ C3] ? __pfx_lock_release+0x10/0x10 [ 55.623125][ C3] ? trace_lock_acquire+0x14a/0x1d0 [ 55.624441][ C3] ? lock_acquire+0x2f/0xb0 [ 55.625579][ C3] ? is_bpf_text_address+0x30/0x1a0 [ 55.626898][ C3] ? bpf_ksym_find+0x127/0x1c0 [ 55.628100][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 55.629680][ C3] is_bpf_text_address+0x8f/0x1a0 [ 55.631000][ C3] kernel_text_address+0x8d/0x100 [ 55.632315][ C3] __kernel_text_address+0xd/0x40 [ 55.633619][ C3] unwind_get_return_address+0x59/0xa0 [ 55.635030][ C3] arch_stack_walk+0xa7/0x100 [ 55.636217][ C3] stack_trace_save+0x95/0xd0 [ 55.637421][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 55.638779][ C3] ? lock_acquire.part.0+0x11b/0x380 [ 55.640107][ C3] kasan_save_stack+0x33/0x60 [ 55.641302][ C3] ? kasan_save_stack+0x33/0x60 [ 55.642538][ C3] ? kasan_save_track+0x14/0x30 [ 55.643777][ C3] ? kasan_save_free_info+0x3b/0x60 [ 55.645068][ C3] ? __kasan_slab_free+0x51/0x70 [ 55.646308][ C3] ? kmem_cache_free+0x152/0x4b0 [ 55.647560][ C3] ? kfree_skbmem+0x1a4/0x1f0 [ 55.648743][ C3] ? consume_skb+0xcc/0x100 [ 55.649886][ C3] ? kobject_uevent_env+0xcd5/0x1860 [ 55.651226][ C3] ? __kobject_del+0x168/0x1f0 [ 55.652424][ C3] ? kobject_put+0x327/0x5a0 [ 55.653586][ C3] ? bus_remove_driver+0x16e/0x2c0 [ 55.654877][ C3] ? driver_unregister+0x76/0xb0 [ 55.656127][ C3] ? usb_gadget_unregister_driver+0x49/0x70 [ 55.657615][ C3] ? raw_release+0x1ae/0x2b0 [ 55.658789][ C3] ? __fput+0x3f6/0xb60 [ 55.659851][ C3] ? task_work_run+0x14e/0x250 [ 55.661057][ C3] ? do_exit+0xadd/0x2d70 [ 55.662151][ C3] ? do_group_exit+0xd3/0x2a0 [ 55.663348][ C3] ? get_signal+0x25fb/0x2770 [ 55.664553][ C3] ? arch_do_signal_or_restart+0x90/0x7e0 [ 55.665982][ C3] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 55.667416][ C3] ? do_syscall_64+0xda/0x250 [ 55.668634][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.670164][ C3] kasan_save_track+0x14/0x30 [ 55.671364][ C3] kasan_save_free_info+0x3b/0x60 [ 55.672645][ C3] __kasan_slab_free+0x51/0x70 [ 55.673868][ C3] kmem_cache_free+0x152/0x4b0 [ 55.675239][ C3] ? kfree_skbmem+0x1a4/0x1f0 [ 55.676500][ C3] kfree_skbmem+0x1a4/0x1f0 [ 55.677634][ C3] consume_skb+0xcc/0x100 [ 55.678711][ C3] kobject_uevent_env+0xcd5/0x1860 [ 55.680007][ C3] ? up_write+0x1b2/0x520 [ 55.681071][ C3] __kobject_del+0x168/0x1f0 [ 55.682247][ C3] kobject_put+0x327/0x5a0 [ 55.683379][ C3] ? __pfx_raw_release+0x10/0x10 [ 55.684644][ C3] bus_remove_driver+0x16e/0x2c0 [ 55.685940][ C3] driver_unregister+0x76/0xb0 [ 55.687186][ C3] usb_gadget_unregister_driver+0x49/0x70 [ 55.688635][ C3] raw_release+0x1ae/0x2b0 [ 55.689792][ C3] __fput+0x3f6/0xb60 [ 55.690840][ C3] task_work_run+0x14e/0x250 [ 55.692026][ C3] ? __pfx_task_work_run+0x10/0x10 [ 55.693277][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 55.694578][ C3] do_exit+0xadd/0x2d70 [ 55.695630][ C3] ? get_signal+0x8f2/0x2770 [ 55.696777][ C3] ? __pfx_do_exit+0x10/0x10 [ 55.697907][ C3] ? do_raw_spin_lock+0x12d/0x2c0 [ 55.699183][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 55.700526][ C3] do_group_exit+0xd3/0x2a0 [ 55.701663][ C3] get_signal+0x25fb/0x2770 [ 55.702805][ C3] ? __pfx_get_signal+0x10/0x10 [ 55.704059][ C3] ? __pfx_do_futex+0x10/0x10 [ 55.705271][ C3] arch_do_signal_or_restart+0x90/0x7e0 [ 55.706687][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 55.708278][ C3] ? selinux_file_ioctl+0xb4/0x270 [ 55.709576][ C3] syscall_exit_to_user_mode+0x150/0x2a0 [ 55.711006][ C3] do_syscall_64+0xda/0x250 [ 55.712173][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.713687][ C3] RIP: 0033:0x7f480cd7e719 [ 55.714854][ C3] Code: Unable to access opcode bytes at 0x7f480cd7e6ef. [ 55.716615][ C3] RSP: 002b:00007f480b1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.718748][ C3] RAX: fffffffffffffe00 RBX: 00007f480cf36060 RCX: 00007f480cd7e719 [ 55.720770][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f480cf36060 [ 55.722760][ C3] RBP: 00007f480cf36058 R08: 0000000000000000 R09: 0000000000000000 [ 55.724776][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f480cf36064 [ 55.726807][ C3] R13: 0000000000000000 R14: 00007ffc79464de0 R15: 00007ffc79464ec8 [ 55.728847][ C3] [ 56.782009][ C3] Shutting down cpus with NMI [ 56.783843][ C3] Kernel Offset: disabled [ 56.784960][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:37:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff888027b62540 RCX=fffff52000675fb4 RDX=ffff8880246dc880 RSI=ffffffff82012b20 RDI=ffff888027b62540 RBP=ffff888027b62588 RSP=ffffc900033afe78 R8 =0000000000000005 R9 =0000000000000000 R10=ffffc900033afe88 R11=0000000000000000 R12=0000000000000008 R13=ffff8880293d0e90 R14=ffff8880341f6d38 R15=ffff8880293d0e90 RIP=ffffffff821ef886 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff60b9c7280 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000001cbe4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000002 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=4000040442002010 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2af1a490 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 727265006d25203a 7d73257b52545441 20676e6974697277 20726f7272650065 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e5e490041090c16 515f095752545441 0c4b424558455e5b 0c5e435e5e490049 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a46f6eabceed14b7 0000000557df5e5f 0000000000000411 0000000000000031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68636163627c2a64 76787c2a64767c2a 72737c2a64737c2a 656d766e7c00312d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c2a6d656d707c2a 6d63737c2a646275 7c2a003177617264 6968007761726469 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557df5e104b0 0000557df5df4e20 0000557df5e062d0 0000557df5e11550 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 3a2433273f397b27 697a787c69303b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=000000000007b79b RBX=0000000000000001 RCX=ffffffff8b23b459 RDX=0000000000000000 RSI=ffffffff8b6ccfc0 RDI=ffffffff8bd1b6c0 RBP=ffffed1003b56910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801dab4880 R14=ffffffff905f5cc8 R15=0000000000000000 RIP=ffffffff8b23c83f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9930723000 CR3=0000000030b44000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557df5e0c8d0 0000557df5e071e0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d362f36627375 2f312e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000009bb1 0000000000000035 362e39373100312d 362f366273752f31 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a46f6eabceed14b7 00005578a23e6212 00000000000001e1 00000035362e3937 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3069727276626964 7d793049255b4655 486556595c4d325c 5910003057455c4d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 767b777e777f7d7f 7d7f7f7f777f7777 7e7d7f7d7f7f7f7f 7d7e77777f757d7d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 3a2433273f397b27 697a787c69303b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 423230302c390030 302c383030300035 3234343030300034 350034313434313d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c302c2c300030 2c2c302c302c0030 2c302c30302c002c 30002c302c30302c ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=00000000000651bb RBX=0000000000000002 RCX=ffffffff8b23b459 RDX=0000000000000000 RSI=ffffffff8b6ccfc0 RDI=ffffffff8bd1b6c0 RBP=ffffed1003bd9000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dec8000 R14=ffffffff905f5cc8 R15=0000000000000000 RIP=ffffffff8b23c83f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f992fb37a8c CR3=00000000232c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f708490 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f709f07 000055557f709ee0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 23297372e7ba00b3 447f0a756912a144 b0cadeeee804ade2 14a2ce00bd655e32 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 498f252bc41137f0 cdb76ea37e371d53 78e424b937b7760b 6d4586867fe66838 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa5215f7ed9f9f63 66cb9153261a2cf2 5b1838c967e80091 b8ef8c42c73ca94c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b494a54b185c0ce b30a5c4b7ebc5b27 0b4f935f17f281c5 86e36e6e51cf8ac3 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100002800401 0000000806060144 b200080002e00300 100002d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02c00302100002b0 0378100010034c4a f91101a4c4f04d63 8127b52a939ba2b8 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aba20c390344bcc0 e0b90f0920b1be14 5f9dd258cfb1ea96 4b494a54b185c0ce ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b30a5c4b7ebc5b27 0b4f935f17f281c5 86e36e6e51cf8ac3 fa5215f7ed9f9f63 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850bb975 RDI=ffffffff9aaebc80 RBP=ffffffff9aaebc40 RSP=ffffc90000908228 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff850bb910 R15=0000000000000000 RIP=ffffffff850bb99f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c270d9d CR3=000000004980e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc79465260 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f480cdf25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f480cdf2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f480cdf2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f480cdf2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f480cdf269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f480cdf277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000