last executing test programs: 59.357997461s ago: executing program 3 (id=639): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r1, 0x0, 0xfffffffffffffffe, 0x400) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r2, 0x40084503, &(0x7f0000001700)=""/4080) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)=0x0) (async) r7 = syz_open_procfs(0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) (async) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x749bc}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f00000001c0)={0x0, 0x44, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48050) close_range(r3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x1, 0x44054, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0xfffffe2a) shutdown(0xffffffffffffffff, 0x1) 49.811150582s ago: executing program 3 (id=639): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r1, 0x0, 0xfffffffffffffffe, 0x400) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r2, 0x40084503, &(0x7f0000001700)=""/4080) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)=0x0) (async) r7 = syz_open_procfs(0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) (async) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x749bc}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f00000001c0)={0x0, 0x44, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48050) close_range(r3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x1, 0x44054, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0xfffffe2a) shutdown(0xffffffffffffffff, 0x1) 40.009094449s ago: executing program 3 (id=639): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r1, 0x0, 0xfffffffffffffffe, 0x400) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r2, 0x40084503, &(0x7f0000001700)=""/4080) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)=0x0) (async) r7 = syz_open_procfs(0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) (async) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x749bc}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f00000001c0)={0x0, 0x44, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48050) close_range(r3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x1, 0x44054, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0xfffffe2a) shutdown(0xffffffffffffffff, 0x1) 27.847219091s ago: executing program 3 (id=639): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r1, 0x0, 0xfffffffffffffffe, 0x400) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r2, 0x40084503, &(0x7f0000001700)=""/4080) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)=0x0) (async) r7 = syz_open_procfs(0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) (async) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x749bc}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f00000001c0)={0x0, 0x44, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48050) close_range(r3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x1, 0x44054, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0xfffffe2a) shutdown(0xffffffffffffffff, 0x1) 18.579932881s ago: executing program 3 (id=639): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r1, 0x0, 0xfffffffffffffffe, 0x400) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r2, 0x40084503, &(0x7f0000001700)=""/4080) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)=0x0) (async) r7 = syz_open_procfs(0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) (async) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x749bc}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f00000001c0)={0x0, 0x44, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48050) close_range(r3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x1, 0x44054, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0xfffffe2a) shutdown(0xffffffffffffffff, 0x1) 8.480156362s ago: executing program 0 (id=984): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000032b4abd6000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaaaaaa50"], 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r6, r6, 0x0, 0x400000000003f) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x0, 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r7, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0) 8.400139338s ago: executing program 2 (id=978): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r1 = inotify_init1(0x80000) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000300)={0x3, 0x1, 0x3, 0x8, 0x1, 0x3}) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) r2 = socket(0x11, 0x3, 0x2) (async, rerun: 64) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f00000000c0), 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000700)=ANY=[], 0x8) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000140)=0x2, 0x4) listen(r4, 0xfff) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async, rerun: 32) sendmmsg(r3, &(0x7f0000002cc0), 0x1a3, 0x0) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pwritev(r5, &(0x7f0000000540)=[{&(0x7f0000000740)="826e51bdd43270f6ef93680fa28f53d3c4dbc851d19d477d6870be01c36505cc199e6632b9e1887e87abb51f072b2102000000000000002a7171bef66400cfed94cc72564d3a1c320302013f18545d25946cd8e48ec001a21c", 0x1}, {0x0, 0xff5a}], 0x2, 0x0, 0x7f) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @multicast1}, 0xaf}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a0083130000000012ad3a76737c9a689a259833ee8af500007a08000e0000000000"], 0x20}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000185c9120cf070110fa8d010203010902120001000080000904b60800625601004ed0105bb22d0f986999da8d010e1f0a3d2dc9b368e2e0936eb1ea7574297e5522de20a3c9fd9f88eee0ac8caf621477eec53525b7747a40cd4b36fd8163689a5bd11e034f75e141dfbaca309ae1aa174854bd10325e6a2d34e3e31f45c19f4d677227d95f72fa39725f01aefafcd6ba96bcc92ec1ef8deeadbf18e0db6a8eaf8765b08c9c1d2a1fea5ffda99f4fbfcb64090329cce067e7a00548ad36063404724351945e407936c745b9fb38a3143a8dde35c52666c575333424ce9ab0e726d0be33"], 0x0) 8.010132381s ago: executing program 2 (id=979): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x6805, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1867000000050000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f00000000c0)='i2c_reply\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x3fd701) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="06f200"], 0x3) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xffffff00, 0xff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xff], 'veth1_virt_wifi\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x1e, 0x4}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x2, {0x9}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0x8000007f, 0xff], 0x4e23, 0x4e23, 0x0, 0x4e20, 0xff, 0x379, 0xfffffff9, 0x81, 0xd}}}, {{@ipv6={@mcast2, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0x0, 0x0, 0xff000000, 0xff], 'bond_slave_1\x00', 'pimreg0\x00', {}, {0xff}, 0x3b, 0x0, 0x6, 0x40}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x6, 0x7, 0x7, 0x0, 0x0, 0x812}}, @common=@ah={{0x30}, {[0x4d3, 0x4d4], 0x0, 0x7d, 0x3}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) syz_emit_vhci(0x0, 0xaf) getpid() openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = epoll_create(0x10000e9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2f, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000c89c0000000000000300000018110000fda79252be54d9f89e7036e8f7f37f10b249bea2d568910a8ec5bbf00e4d763970d11ef25f02cb6c6a0b118644ef42ecace26bbb93506ca713f2", @ANYRESOCT, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000003004000200000018360000050000000000000000000000180000000500000000000000ff00000018180000", @ANYRES32=r5, @ANYBLOB="000000000000000052628000ffffffff18010000696c6c2500000000002020207b1af8ff00002c6a000000000000000007010000f8ffff9bb702000008000000b703000008000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000f7ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001900b704000002000000850000008200000085100000080000001811", @ANYRES32, @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000cc0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97\xffr\xc0\xcbt\x12\xb8\xefu3f\xab\x15\xcc\xf0X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\x00\x00\x00\x00\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d\x00\x00`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xdfJ\xdb\x97f\xff\xa7\xd2:\xc9\xcd\x96q\xa9)\xa0\x95\xb33\xe3\x8b\xcc\x1d\aP\xb5\x89\x82\xb7\x1a\x01\xf9\xc6\x1cO\xd60{~\xe2N\xf0\xfa\xab\xed\xf7\xf2\x1a\xa4\xab\x0fB\x03\x85l\xd5\x1f8># \xf8\xd7a\xcf\b\x91\xf2\xc9\xef9\xd7\xbb\x11\xeeRlt\xcd\x1b\xf5\xe2\x95\xe7!\xb8\xe6\xeaI\xb7\xa1\xfa\xa3', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) 7.309505513s ago: executing program 2 (id=980): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x34000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x1535b9c432f80e4c, 0x0, 0x0, 0x407ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb4d}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES64=r3, @ANYRES32, @ANYRESOCT=r0, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRES32], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000002140)={'wg2\x00'}) syz_usb_connect(0xfdfb, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a"], 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='percpu_free_percpu\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000680001000000000000000000020000000000000006000700040000000c000880050005000000000008000600f200000008000500", @ANYRES32=r8], 0x3c}}, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000140)={"0160bd8f41a34066c329e5c9e7e0b93c4cdc2139bb1c026b2b7398bbddbc"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.201833523s ago: executing program 0 (id=981): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaaaaaa50"], 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r6, r6, 0x0, 0x400000000003f) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x0, 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r7, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0) 6.259150647s ago: executing program 2 (id=986): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"a2e3ad09ed0d09f91a5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaaaaaa50"], 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r6, r6, 0x0, 0x400000000003f) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x0, 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r7, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0) 5.04962462s ago: executing program 2 (id=988): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf250400000005000a000100000008000100", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = epoll_create1(0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r6, &(0x7f0000000380)=""/184, 0xfffffee1) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000)) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x100, 0x0) getdents(0xffffffffffffffff, &(0x7f0000002380)=""/102, 0x66) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x24009814) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r7, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.89984524s ago: executing program 1 (id=989): prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x3e0, 0x10100, 0x0, 0x2e}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 4.899482155s ago: executing program 3 (id=639): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r1, 0x0, 0xfffffffffffffffe, 0x400) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r2, 0x40084503, &(0x7f0000001700)=""/4080) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000040)=0x0) (async) r7 = syz_open_procfs(0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) (async) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x749bc}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f00000001c0)={0x0, 0x44, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48050) close_range(r3, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x1, 0x44054, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0xfffffe2a) shutdown(0xffffffffffffffff, 0x1) 3.520730564s ago: executing program 0 (id=990): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1de, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000400)="f7624a800e6dc300a7c8af1073f7f80565d85cb0e73f45f4f3d53666f000784332e6113ff3e3a0d49c7ea76f4a31561cf1828eae6bec281c2a70ddd7a233e68eba25eff429708fdad8cd4dc88934bf913ef2a79bd435292a074c9a8a298e27f22767d72c2d10aa827a7c6f0d6779605e2612dfc3dddcdd7a0e", 0x8}]) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000340)="7e9adf65", 0x4}], 0x1) 3.500909212s ago: executing program 1 (id=991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r1, 0x29, 0xcb, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x430042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r2, &(0x7f00000082c0)={0x2020}, 0x2020) 3.50043325s ago: executing program 2 (id=992): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000000)=0xfe, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="d0b4163e96457321d877d01ac22cf3078c8aba0a", 0x14, 0x40000, &(0x7f00000001c0)={0x11, 0x1c, r4, 0x1, 0x70, 0x6, @local}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000f80)="09e06a1a16dd3b8192130a35b8997c80bd9b317a4ef2a60e9b025285a27a7ddcca58547df1332e79971a74cd19af147c0285f3b131f3ff67d65000bba3d19a3680264c31925ffd1d8d57cdae67c2633dacc632a80946ba3a30bd27f1d72e", 0x5e, r9}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000500)={r8, 0x0, 0x0}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000079b"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x93, {0x93, 0x2, "9bd03e441b6f3bc42b1b7a6d0a6f0690adf39a7a45bd4c1721caa17d08eb4dd6ed0cf6e1aa010b29d040f7b062c8359eabd09f3e9ab7c4db584929b65d75c9d584b1d9ca75b538bfb687fef95f6a853455c03dacb480170cf11442bc91cd3f64bc824779af0798dd2bd92087f572f702629909d39d751f23228fb4a7c8dc36a4c695a69e779394979ab2024609c2109bbf"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000000980)=ANY=[@ANYBLOB="000f1b000000050f1b00020b1001021f0007064002040000011500b6792ae4fdb463508bf76ae9d8b2fe63d1a10d12dd848a098f6cb0baa4dfb8684654ebbd2139f11255e9d772100d30719276fe60272cad65f355e9b4047b3d940bafef9989f69418a68fe1f10b426e55"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2f, 0x0, 0x9, 0x5d, "ff29fd1b", "f9f95646"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x60, 0x3, 0x3, 0xff, 0xe, 0x400}}}, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000550000007674436f33ae7313ebf6d284817e110ae0420e5307960588dbec64f9216620bc10b9e08c294084e6c42a32ae29fe6b9ac92344b0a9ab9790b47ec6ce2b08c6e0aad1b200"/87], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x80, 0x8}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x2c}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "b742"}, &(0x7f0000000600)={0x40, 0xf, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x19, 0x2, "86f7"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x4800}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x10}}) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}}) tkill(0x0, 0x7) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000100), 0x12) 2.44544093s ago: executing program 0 (id=993): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="398e94e2180a415d080736f7e054c660fc1fa06f48f9f5db4b57ab6ddc4780a7dd7d2a1b9e0c6a147ca39732aba5ae5a73e678410320baeb434c0685ba7cbb6d1fe8c6a7e42c6b15c5133c37fdda8377847749eb5c0241d46b05eabaabd79564a7abf979190cd266e6ebdfcf8cd660a7e59609b120271d81bbf9a5da4e12122998a57e09b978aa7c111c3999225611f51832ed8d8d4d77a58513da8873fad507fa2ee009852f29cf3e5051e946cf3b0debb21ed324997a2c2a0afc8db3aa105b720a3ce80cccf902f28037395fa9eb74d97101dd2e05707747eb5b", 0xdb}, {&(0x7f0000000fc0)="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", 0x63a}], 0x3}}], 0x1, 0x0) 2.445058846s ago: executing program 1 (id=994): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="398e94e2180a415d080736f7e054c660fc1fa06f48f9f5db4b57ab6ddc4780a7dd7d2a1b9e0c6a147ca39732aba5ae5a73e678410320baeb434c0685ba7cbb6d1fe8c6a7e42c6b15c5133c37fdda8377847749eb5c0241d46b05eabaabd79564a7abf979190cd266e6ebdfcf8cd660a7e59609b120271d81bbf9a5da4e12122998a57e09b978aa7c111c3999225611f51832ed8d8d4d77a58513da8873fad507fa2ee009852f29cf3e5051e946cf3b0debb21ed324997a2c2a0afc8db3aa105b720a3ce80cccf902f28037395fa9eb74d97101dd2e05707747eb5b", 0xdb}, {&(0x7f0000000fc0)="8e02ce374a95c3f22fb4328f2cb9d29b687f81454c1818b86e5ef364287f66f0958c2db04e3d3faf71f4442f8a0490784e35fce38acd10b221179de9e6513a893146cab95208fe93fbb6e2eaecc0746d3c5d69d32c2d155444c4d59a4c65a68adcd4c855e20557161a7d9df5f6b72877d5415d9e379d08130525b4c304d711bc1fe32d3109de14fe3eda6599045134ad7e0f68923d06e157cdc20640de147850da1ee316adc86ca0d61e863a81796a6ed5d9717ecba17eee6eb487023aae7c3994733016c15cf268a430f62dd19de2463e5f6950492f73f5cab192eb833272440ccb2cf83895f817e3d3f9a0b6c6ab74bc053e489106654779a463a709f54d017cdc12e00b4a23b9997e41a330f69605a9622767b276bfcdefbd67dd9f882cddd7518c4d3e4e0b99efa7bd9d509c59d8f172bb3321c6852b0b4775eb267e0898c1380e240055b45a929816aaa1f17aefc6308f1185d4f053d4edfe8314180aa324a29ccb1fb56b47613256f4bb29f153b76dd5f77d6fed43a4a7c7d37ea34ba810c16ff6c8b0bbc03186078598916234cd8103dfd038876fd0b17d2d0387ffb224dcd290d1f8a405ad6d4c86adda5c6a0025bf8b64bbadf35c784ddc67d9ae3c827a1b343c87fb35c5eb38b7367aa344c7b811f9ad1c039b229886eeee97a3b0abafe184ee55f6b1418ed43844ec46e943f50cdf9fc62fdea043d1fc86ac519989398e0b5a7a8a5f23a549ae7c9790471886cb08ec88108423f1ef37a0df2a444ed18ed61faf9b9611c82f71b73e16ee5057dfa53439f8456f394c8d2f926cd188ec8d1c145465a01bb77b643df919db25711a8a096a9d4955668dff54f47c08f29468daa748c61f08077c2b3ce7b37323a5e7e8e3376ddaa554977e74211a86e0e51e2434bd1f5f38e8d751d80f1b99de0da5fac3d863ddd7ce70edd7d31b947a983b56e7cfcb8226b29b6aed77f43b108dafffbde74de8ca830798eb5465393fc97ba290bbd1c770fa6d43939051847de01953d2449a005a7aae3c8e4737c228f4e91bd8c11b417588318b3f224422c013421e8acfadc37447ceb34cbd3c2008270bbaa80c6606fc267d5275f01a2772fbb759add968f813aaa8835cf8d024ba489d8d64dff1b4b4191ec0d4832668a3b822d70592a46548a3b4b3a42a8322b97c50183b2c51db1969d90253da0628d7c6351e227a9cdf457f5f845a8afb96b7385125d42c2337c89609bdf5ebf9256a19fc1a506716b6dd70e41cb369c48ac4aff32637eed05d8162f2e71acef90cf99b183febb9e82aa6add4fdcfe0a7dcd2ec31a5507732f675ed7811df51c2e2c50aa9c02ad8229f702435b082f71b19deac58cfb5292fae1b2078c3c2dca71da615c0f9127eff756f37cdebe7df386245ecd6e1038d05cb8662ff47cef17c04442cd4ba535f31ebf3f3b635123fd568ff92a413172fd45b31c0ce7c8ea9273c46c8b2707555ffc37e4903e52b242c9da18d2ff3e1a80e2ee34b61dffeff3d98dccb424aaa687a144c3b070c587833d118853d102cfc44e6f41ddcf99feb14c718c65cf0de6b0af11eea655fafa573906166d29099acd9bf848e2ddb1bead1141c83403daee4b14728b7cdaa9d202f48f7f8ef1bc9ecfe277e0ce19c5ac95715e2a455275f2f334096cef02179869f82f986b72c94515a04e2221111f7e9bccc4eec763a0fedc1885d03eccd065b5ab4772de45108f1f72ba7ec4f7298366a3ebfc5953b072303d403b39fece4dc638702c539f5b632dd375e4689a5fb0279176feae799b9676adc9af650d71aea85f69c7f82bb891ee2579d8f5ea3ad077ae5f5af9261fb64189fde3959b9d0f4e26706c26a422b461d70bdec8d97757da8a97ebae001387ca969a99288ef2735c2668cc5e61b0cc5aaef9c7ec6472f9c9bf3e45aa4c8dfdac0b82ec2d029b6db0b1cee238004fd457207189c3ddb4fcacce68c19c07f6902a5ec692d128ad4eb0e8c5db911a51d9f9965604778a22dc388d30119d0f5ae6e5246cb33bf85c7ddeb109133bc9053b00b4daa6fd144fc80af77492ea5daa63130a08341a66b9cf37f74049f114b6733258a1e67c0e2b80081c5ce734835b91fa7d49b8c0802db5cc02feeb2ebcc2ad7808537f59bbabbdee95c231b0425ae9f5d84e532445886a2df4b03a1903711ec5ee0ca13082f28ddcc4a00463fad93acbe527bd33fe09bc82158914e7e478b2a1333bf56fc1b967811897dc6bb7dc12bbc8ca78b", 0x63a}], 0x3}}], 0x1, 0x0) 2.298997588s ago: executing program 1 (id=995): madvise(&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0xa) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) io_setup(0x3, 0x0) io_submit(0x0, 0x5, &(0x7f0000000780)=[0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f00000004c0)="fac4302f2065b1f59528f55bb98dd67c967b47adee0e6d13b0c1003e8db521c53c390e37e299da0a9ff10ae8a872f8493ae2e41263f4295e8ffdde3a79843d7049432ff29b3a58a45cb8b1803fe78274c70eb2337343fef156b89e8ff0f3e4473f3be44e00652289e1d32cf7b9e553f69c75f86b2845d0155702c73263d8f5ef94ad12bcc4fbc099c4ef1acd59801bc6a76eb41bade8f4f740e8daf4739b9a0913125fa4e5ef74681cb59354ea3c74339670266f1e63acec23941c18299f8ee8c0414ee2a6bc23008f494201edd4e3b49aea48888542842b1cb29b5c48cc9952787e0b5997cf419225c43e0a4337c7e220e66dd62281492a77d166a66cde33", 0xff, 0x8a, 0x0, 0x1, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7fff, r0, &(0x7f0000000300)="bb6a46fcfd67fa05a50e7d6d550e1166d36bcdd32055703462f91231d06f0117745b5f725b4e4b7c6378bad45cb2a5d37e3d65997e4bd7ad016cb2332f7ac1b1dfba5391ad52836a5eeeaeb343656568892d3cb5738c60b61835ab5503403f0979f541435cba5d661d6534d06ed9944c60c2c064f0424ddcea7b13", 0x7b, 0x1, 0x0, 0x0, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000000400)="bb598a030d46c13076c09e212ed46c269b981754d0f68b3f36ed05b0c146bd1d462367", 0x23, 0x3, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0xfa6, r1, &(0x7f0000000640)="a1440b8bcccefe9da89830b2b36adbad849f6cc0885825649ad099246795be592cbe0c792ee2770bfc3fea9e356f25f7b3aa22e142ce469b56f3a9db5a828536cdb99a74a1e710b7165bf39de45321a739e4402797e703a4cd426d95b9e3fdcc4329620eecbc513e475a010080bcbf971a20efed41f8862ba4c33b74980d676b550a3f93fe763888445bda53a751e4bcf51a446f49f2", 0x96, 0xffffffffffffffff, 0x0, 0x3, r1}]) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00', 0x1, 0xffffffff, 0xfffffffe}, 0x2c) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x5}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = dup3(r3, r5, 0x0) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000740)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000100)=0x2321000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r9, 0x0, 0x0, 0x1, &(0x7f0000000040)="a2", 0x4}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r10, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r11 = socket$inet(0x2, 0x3, 0x8d) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r11, @ANYRESHEX=r1, @ANYBLOB="ca82d649852325ffa5ce634f35204c50ddcda6a730736bd22bb7dd8588e12ae14e76686a00411c34e39a0c966c049ea72a42a77600234bf0d6115cb5a5139940a47be26bb3f4baa0d6b57529f9f0230a67ab19d5db10325dfddbf841c0aab7c1f1059cf7f4f8c111c41f97ee381e384f83fcb28b1b6d2f1f667bb9f9b741f0a701da23f04484ffc15d7014181994ba662891bf741f82c55c60d330f7c2d3b35b4a76fe346e2e488e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.298541964s ago: executing program 0 (id=996): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000032b4ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaaaaaa50"], 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r6, r6, 0x0, 0x400000000003f) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x0, 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r7, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0) 1.246009532s ago: executing program 1 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001340), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000002400000008000200", @ANYRES32=r6], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') 240.352609ms ago: executing program 1 (id=998): msgget$private(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000fcffffff0000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) 0s ago: executing program 0 (id=999): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200140600fe8000000000000000000000000000bbfe8000"], 0x0) kernel console output (not intermixed with test programs): r" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0561d7dff9 code=0x0 [ 237.560258][ T8581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.580701][ T8581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.582452][ T8618] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.591449][ T8618] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 237.602019][ T98] hsr_slave_0: left promiscuous mode [ 237.606280][ T98] hsr_slave_1: left promiscuous mode [ 237.608549][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.610615][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.613134][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.615440][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.640492][ T98] veth1_macvtap: left promiscuous mode [ 237.642024][ T98] veth0_macvtap: left promiscuous mode [ 237.645345][ T98] veth1_vlan: left promiscuous mode [ 237.646866][ T98] veth0_vlan: left promiscuous mode [ 237.664046][ T5347] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 237.668515][ T5347] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 237.670595][ T5347] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 237.677166][ T5347] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 237.679327][ T5347] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 237.682093][ T5347] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 237.685070][ T5347] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 237.688373][ T5347] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 237.691237][ T5347] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 237.693789][ T5347] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 237.695947][ T5347] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 237.705009][ T5347] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 238.174027][ T39] audit: type=1400 audit(1727857526.445:469): avc: denied { append } for pid=8637 comm="syz.1.824" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.179871][ T39] audit: type=1400 audit(1727857526.445:470): avc: denied { ioctl } for pid=8637 comm="syz.1.824" path="/dev/ppp" dev="devtmpfs" ino=714 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.434281][ T98] team0 (unregistering): Port device team_slave_1 removed [ 238.521386][ T98] team0 (unregistering): Port device team_slave_0 removed [ 239.223596][ T5355] Bluetooth: hci3: command tx timeout [ 239.230623][ T8618] hsr_slave_0: left promiscuous mode [ 239.232649][ T8618] hsr_slave_1: left promiscuous mode [ 239.251302][ T8581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.255139][ T8638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.260529][ T8581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.266122][ T8639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.313066][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.320855][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.326966][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.328885][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.331298][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.333148][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.443040][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.468669][ T8581] veth0_vlan: entered promiscuous mode [ 239.474213][ T8581] veth1_vlan: entered promiscuous mode [ 239.485424][ T8581] veth0_macvtap: entered promiscuous mode [ 239.488548][ T8581] veth1_macvtap: entered promiscuous mode [ 239.495424][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.498098][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.500566][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.503192][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.505832][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.508420][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.510893][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.514564][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.518416][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.524990][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.527696][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.530281][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.533097][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.536139][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.538855][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.541378][ T8581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.544563][ T8581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.547958][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.557656][ T8581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.560249][ T8581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.563010][ T8581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.567426][ T8581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.610531][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.615081][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.634840][ T6935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.636955][ T6935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.398873][ T5347] usb 7-1: USB disconnect, device number 12 [ 240.474221][ T39] audit: type=1400 audit(1727857528.745:471): avc: denied { setopt } for pid=8670 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 241.182031][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 241.190444][ T8681] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 241.195573][ T8681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8681 comm=syz.2.833 [ 241.950365][ T6935] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.749705][ T39] audit: type=1400 audit(1727857531.015:472): avc: denied { nlmsg_write } for pid=8701 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 242.827766][ T5343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.830382][ T5343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.833295][ T5343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.840290][ T5343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.842628][ T5343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 242.847263][ T5343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.933949][ T8709] chnl_net:caif_netlink_parms(): no params data found [ 242.963617][ T1293] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 242.973874][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.975821][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.977945][ T8709] bridge_slave_0: entered allmulticast mode [ 242.980099][ T8709] bridge_slave_0: entered promiscuous mode [ 242.982891][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.985376][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.987278][ T8709] bridge_slave_1: entered allmulticast mode [ 242.989312][ T8709] bridge_slave_1: entered promiscuous mode [ 243.018288][ T8709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.022410][ T8709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.046166][ T8709] team0: Port device team_slave_0 added [ 243.048806][ T8709] team0: Port device team_slave_1 added [ 243.067399][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.069247][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.076921][ T8709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.080534][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.082375][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.089185][ T8709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.117562][ T8709] hsr_slave_0: entered promiscuous mode [ 243.120198][ T8709] hsr_slave_1: entered promiscuous mode [ 243.132285][ T1293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.136215][ T1293] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.140681][ T1293] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.144226][ T1293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.155158][ T1293] usb 6-1: config 0 descriptor?? [ 243.182019][ T8724] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 243.243632][ T5400] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 243.494025][ T5400] usb 7-1: Using ep0 maxpacket: 32 [ 243.501624][ T5400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.510835][ T5400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.519168][ T5400] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 243.523063][ T5400] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 243.527814][ T5400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.541374][ T5400] usb 7-1: config 0 descriptor?? [ 243.617167][ T1293] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 243.620118][ T1293] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 243.622466][ T1293] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 243.625686][ T1293] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 243.627780][ T1293] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 243.630217][ T1293] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 243.632266][ T1293] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 243.636380][ T1293] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 243.639220][ T1293] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 243.642163][ T1293] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 243.648922][ T1293] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 243.664230][ T1293] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 243.965626][ T5400] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.001C/input/input10 [ 244.024270][ T6935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.043029][ T5400] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.001C/input/input11 [ 244.073108][ T5400] kye 0003:0458:5011.001C: input,hiddev1,hidraw2: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 244.102551][ T6935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.194000][ T6935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.336645][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.340277][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.400764][ T6935] bridge_slave_1: left allmulticast mode [ 244.402396][ T6935] bridge_slave_1: left promiscuous mode [ 244.404230][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.417102][ T6935] bridge_slave_0: left allmulticast mode [ 244.422396][ T6935] bridge_slave_0: left promiscuous mode [ 244.428097][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.465828][ T39] audit: type=1400 audit(1727857532.735:473): avc: denied { audit_write } for pid=8735 comm="syz.0.848" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 244.762928][ T6935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.769246][ T6935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.774005][ T6935] bond0 (unregistering): Released all slaves [ 244.914556][ T5355] Bluetooth: hci3: command tx timeout [ 244.941072][ T39] audit: type=1400 audit(1727857533.205:474): avc: denied { setopt } for pid=8751 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.947594][ T39] audit: type=1400 audit(1727857533.205:475): avc: denied { write } for pid=8751 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.987199][ T8755] FAULT_INJECTION: forcing a failure. [ 244.987199][ T8755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.992162][ T8755] CPU: 2 UID: 0 PID: 8755 Comm: syz.0.850 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 244.995014][ T8755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.998045][ T8755] Call Trace: [ 244.999257][ T8755] [ 245.000321][ T8755] dump_stack_lvl+0x16c/0x1f0 [ 245.002059][ T8755] should_fail_ex+0x497/0x5b0 [ 245.003806][ T8755] _copy_from_iter+0x2a1/0x1540 [ 245.005602][ T8755] ? __pfx__copy_from_iter+0x10/0x10 [ 245.007488][ T8755] ? __virt_addr_valid+0x1a4/0x590 [ 245.008721][ T8755] ? __virt_addr_valid+0x5e/0x590 [ 245.010461][ T8755] ? __phys_addr_symbol+0x30/0x80 [ 245.012256][ T8755] ? __check_object_size+0x488/0x710 [ 245.013649][ T8755] netlink_sendmsg+0x813/0xd70 [ 245.014944][ T8755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.016636][ T8755] ? __import_iovec+0x1fd/0x6e0 [ 245.018390][ T8755] ____sys_sendmsg+0xaaf/0xc90 [ 245.020068][ T8755] ? copy_msghdr_from_user+0x10b/0x160 [ 245.022039][ T8755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.023750][ T8755] ? __pfx___lock_acquire+0x10/0x10 [ 245.025493][ T8755] ___sys_sendmsg+0x135/0x1e0 [ 245.027227][ T8755] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.029114][ T8755] ? lock_acquire+0x2f/0xb0 [ 245.030761][ T8755] ? __fget_files+0x40/0x3f0 [ 245.032468][ T8755] ? fdget+0x176/0x210 [ 245.033938][ T8755] __sys_sendmsg+0x117/0x1f0 [ 245.035580][ T8755] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.037396][ T8755] ? __fget_files+0x244/0x3f0 [ 245.039174][ T8755] do_syscall_64+0xcd/0x250 [ 245.040899][ T8755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.043111][ T8755] RIP: 0033:0x7f0561d7dff9 [ 245.044468][ T8755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.051158][ T8755] RSP: 002b:00007f0562c4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.053436][ T8755] RAX: ffffffffffffffda RBX: 00007f0561f35f80 RCX: 00007f0561d7dff9 [ 245.055693][ T8755] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 245.058477][ T8755] RBP: 00007f0562c4b090 R08: 0000000000000000 R09: 0000000000000000 [ 245.061028][ T8755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.063605][ T8755] R13: 0000000000000000 R14: 00007f0561f35f80 R15: 00007fff936e12d8 [ 245.066038][ T8755] [ 245.195677][ T6935] hsr_slave_0: left promiscuous mode [ 245.198658][ T6935] hsr_slave_1: left promiscuous mode [ 245.203431][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.208242][ T6935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.211222][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.213868][ T6935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.226196][ T5409] usb 7-1: reset high-speed USB device number 13 using dummy_hcd [ 245.251132][ T6935] veth1_macvtap: left promiscuous mode [ 245.252610][ T6935] veth0_macvtap: left promiscuous mode [ 245.254476][ T6935] veth1_vlan: left promiscuous mode [ 245.255898][ T6935] veth0_vlan: left promiscuous mode [ 245.343602][ T5381] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 245.503584][ T5381] usb 5-1: Using ep0 maxpacket: 8 [ 245.507104][ T5381] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 245.510204][ T5381] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 245.513222][ T5381] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 245.516605][ T5381] usb 5-1: config 250 has no interface number 0 [ 245.518911][ T5381] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 245.523011][ T5381] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 245.526740][ T5381] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 245.530186][ T5381] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 245.534716][ T5381] usb 5-1: config 250 interface 228 has no altsetting 0 [ 245.538543][ T5381] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 245.541757][ T5381] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 245.544792][ T5381] usb 5-1: Product: syz [ 245.546347][ T5381] usb 5-1: SerialNumber: syz [ 245.550728][ T5381] hub 5-1:250.228: bad descriptor, ignoring hub [ 245.552543][ T5381] hub 5-1:250.228: probe with driver hub failed with error -5 [ 245.740485][ T5347] usb 6-1: USB disconnect, device number 11 [ 245.770033][ T5381] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 245.969714][ T39] audit: type=1400 audit(1727857534.235:476): avc: denied { read write } for pid=8756 comm="syz.0.851" name="lp0" dev="devtmpfs" ino=2666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 245.977867][ T39] audit: type=1400 audit(1727857534.235:477): avc: denied { open } for pid=8756 comm="syz.0.851" path="/dev/usb/lp0" dev="devtmpfs" ino=2666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 246.032100][ T1293] usb 7-1: USB disconnect, device number 13 [ 246.067082][ T6935] team0 (unregistering): Port device team_slave_1 removed [ 246.191454][ T6935] team0 (unregistering): Port device team_slave_0 removed [ 246.430279][ T8757] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 246.842549][ C1] usblp0: nonzero read bulk status received: -71 [ 246.914785][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 246.919884][ T8709] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.925361][ T8709] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.933229][ T8709] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 246.940606][ T8709] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.983625][ T5355] Bluetooth: hci3: command tx timeout [ 247.015597][ T8709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.025458][ T8709] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.031454][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.033674][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.046751][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.048438][ T8757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.048895][ T6804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.055684][ T8757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.068677][ T39] audit: type=1400 audit(1727857535.335:478): avc: denied { relabelfrom } for pid=8756 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 247.074978][ T39] audit: type=1400 audit(1727857535.335:479): avc: denied { relabelto } for pid=8756 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 247.121736][ T39] audit: type=1400 audit(1727857535.395:480): avc: denied { module_request } for pid=8709 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 247.225188][ T8709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.255844][ T8709] veth0_vlan: entered promiscuous mode [ 247.267881][ T8709] veth1_vlan: entered promiscuous mode [ 247.288750][ T8709] veth0_macvtap: entered promiscuous mode [ 247.312195][ T8709] veth1_macvtap: entered promiscuous mode [ 247.325501][ T1293] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 247.329269][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.333136][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.336178][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.339523][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.353389][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.359849][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.363528][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.369025][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.383795][ T8709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.393697][ T5409] usb 5-1: USB disconnect, device number 9 [ 247.399039][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.401794][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.405064][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.405369][ T5409] usblp0: removed [ 247.407844][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.407865][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.421199][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.425446][ T8709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.429177][ T8709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.435681][ T8709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.441664][ T8709] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.445058][ T8709] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.448185][ T8709] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.451336][ T8709] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.483907][ T1293] usb 7-1: Using ep0 maxpacket: 8 [ 247.487479][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.490327][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.493305][ T1293] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 247.499409][ T1293] usb 7-1: config 179 has no interface number 0 [ 247.501613][ T1293] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 247.505237][ T1293] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 247.506257][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.508103][ T1293] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 247.508129][ T1293] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 247.510785][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.517366][ T1293] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 247.523290][ T1293] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 247.526601][ T1293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.531124][ T8781] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 247.539826][ T1293] xpad 7-1:179.65: probe with driver xpad failed with error -5 [ 248.154140][ T8799] syz.0.859: attempt to access beyond end of device [ 248.154140][ T8799] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 248.159757][ T8799] SQUASHFS error: Failed to read block 0x0: -5 [ 248.161898][ T8799] unable to read squashfs_super_block [ 248.388161][ T5355] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 248.396790][ T39] audit: type=1400 audit(1727857536.665:481): avc: denied { read write } for pid=8791 comm="syz.1.857" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.403838][ T39] audit: type=1400 audit(1727857536.665:482): avc: denied { open } for pid=8791 comm="syz.1.857" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.312438][ T5355] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 249.803964][ T5409] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 249.813610][ T6804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.957733][ T5409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.960619][ T5409] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.966721][ T5409] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.969602][ T5409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.973395][ T5409] usb 5-1: config 0 descriptor?? [ 250.138480][ T1293] usb 7-1: USB disconnect, device number 14 [ 250.441134][ T5409] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 250.443131][ T5409] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 250.445715][ T5409] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 250.447739][ T5409] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 250.449700][ T5409] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 250.451618][ T5409] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 250.453748][ T5409] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 250.455665][ T5409] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 250.457608][ T5409] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 250.459613][ T5409] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 250.461835][ T5409] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 250.471147][ T5409] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 250.657041][ T39] audit: type=1400 audit(1727857538.925:483): avc: denied { read write } for pid=8813 comm="syz.2.863" name="uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 250.664486][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.666428][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.668724][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.670798][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.672751][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.674414][ T39] audit: type=1400 audit(1727857538.925:484): avc: denied { open } for pid=8813 comm="syz.2.863" path="/dev/uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 250.679732][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.682664][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.684737][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.686884][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.688866][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.691385][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.696041][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.698128][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.700525][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.703085][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.705100][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.707105][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.710430][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.712844][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.716873][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.716920][ T5355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.718761][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.718777][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.718788][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.718800][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.727913][ T5355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.730198][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.733910][ T5355] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.738071][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.740558][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.743068][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.744553][ T5355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.745978][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.750920][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.753721][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.756310][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.757447][ T5355] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 250.758888][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.761070][ T5355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.763412][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.767888][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.770461][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.773066][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.776097][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.778731][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.793719][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.796394][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.798993][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.801615][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.804861][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.807528][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.810154][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.812811][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.816041][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.818698][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.821318][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.824516][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.827156][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.829722][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.832459][ T5409] hid-generic 0000:000C:0005.001E: unknown main item tag 0x0 [ 250.837749][ T39] audit: type=1400 audit(1727857539.105:485): avc: denied { write } for pid=8813 comm="syz.2.863" path="socket:[31700]" dev="sockfs" ino=31700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 250.852103][ T5409] hid-generic 0000:000C:0005.001E: hidraw2: HID v0.00 Device [syz0] on syz0 [ 250.936535][ T8816] chnl_net:caif_netlink_parms(): no params data found [ 251.022738][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.024836][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.026845][ T8816] bridge_slave_0: entered allmulticast mode [ 251.028926][ T8816] bridge_slave_0: entered promiscuous mode [ 251.031697][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.033743][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.035658][ T8816] bridge_slave_1: entered allmulticast mode [ 251.037825][ T8816] bridge_slave_1: entered promiscuous mode [ 251.084485][ T8816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.089903][ T8816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.109126][ T8828] binder: 8827:8828 ioctl c0306201 0 returned -14 [ 251.118125][ T8816] team0: Port device team_slave_0 added [ 251.120791][ T8828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.864'. [ 251.128146][ T8816] team0: Port device team_slave_1 added [ 251.154101][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.155996][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.162595][ T8816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.166709][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.168559][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.175528][ T8816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.199847][ T8816] hsr_slave_0: entered promiscuous mode [ 251.202175][ T8816] hsr_slave_1: entered promiscuous mode [ 251.204691][ T8816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.206840][ T8816] Cannot create hsr debugfs directory [ 251.734958][ T6804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.826876][ T6804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.930070][ T6804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.036460][ T6804] bridge_slave_1: left allmulticast mode [ 252.037999][ T6804] bridge_slave_1: left promiscuous mode [ 252.041751][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.047834][ T6804] bridge_slave_0: left allmulticast mode [ 252.049345][ T6804] bridge_slave_0: left promiscuous mode [ 252.050873][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.373943][ T6804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.379143][ T6804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.383091][ T6804] bond0 (unregistering): Released all slaves [ 252.600276][ T5400] usb 5-1: USB disconnect, device number 10 [ 252.770014][ T5355] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 252.838623][ T5355] Bluetooth: hci3: command tx timeout [ 253.021622][ T6804] hsr_slave_0: left promiscuous mode [ 253.025460][ T6804] hsr_slave_1: left promiscuous mode [ 253.026741][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.026773][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.027782][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.027904][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.088579][ T6804] veth1_macvtap: left promiscuous mode [ 253.099529][ T6804] veth0_macvtap: left promiscuous mode [ 253.099636][ T6804] veth1_vlan: left promiscuous mode [ 253.101739][ T6804] veth0_vlan: left promiscuous mode [ 254.383610][ T5355] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 254.599932][ T6804] team0 (unregistering): Port device team_slave_1 removed [ 254.843065][ T6804] team0 (unregistering): Port device team_slave_0 removed [ 254.907655][ T5343] Bluetooth: hci3: command tx timeout [ 255.467556][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.469713][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.349735][ T8816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.364882][ T8816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.370170][ T39] audit: type=1400 audit(1727857544.635:486): avc: denied { ioctl } for pid=8876 comm="syz.0.875" path="/dev/nullb0" dev="devtmpfs" ino=691 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 256.371118][ T8816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.393993][ T8816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.487950][ T5343] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 256.599670][ T8816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.633320][ T8816] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.727241][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.727329][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.751117][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.751163][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.983568][ T5355] Bluetooth: hci3: command tx timeout [ 257.058277][ T8816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.239944][ T8816] veth0_vlan: entered promiscuous mode [ 257.244408][ T8816] veth1_vlan: entered promiscuous mode [ 257.259808][ T8816] veth0_macvtap: entered promiscuous mode [ 257.263140][ T8816] veth1_macvtap: entered promiscuous mode [ 257.272365][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.275424][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.278025][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.280758][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.283292][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.286373][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.288954][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.291653][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.297720][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.300943][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.303832][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.306372][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.309060][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.311592][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.316062][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.318641][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.331103][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.335451][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.339962][ T8816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.342297][ T8816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.347696][ T8816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.354175][ T8816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.449802][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.451898][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.491479][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.493787][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.663852][ T5400] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 257.826692][ T5400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.829702][ T5400] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.833128][ T5400] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.836398][ T5400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.845094][ T5400] usb 6-1: config 0 descriptor?? [ 257.972320][ T5355] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 258.588294][ T5400] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.590464][ T5400] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.592540][ T5400] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.595443][ T5400] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.597770][ T5400] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.599997][ T5400] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.602012][ T5400] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.605606][ T5400] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.607969][ T5400] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.609892][ T5400] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.613130][ T5400] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 258.652078][ T5400] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 258.898365][ T8918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.996882][ T39] audit: type=1400 audit(1727857547.265:487): avc: denied { connect } for pid=8919 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 259.065915][ T39] audit: type=1400 audit(1727857547.335:488): avc: denied { write } for pid=8919 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 259.384165][ T6804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.457930][ T7435] usb 6-1: USB disconnect, device number 12 [ 260.724823][ T5355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.730188][ T5355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.733768][ T5355] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.739257][ T5355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.742774][ T5355] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.746019][ T5355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.748522][ T39] audit: type=1400 audit(1727857548.925:489): avc: denied { connect } for pid=8926 comm="syz.2.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 261.093728][ T8934] chnl_net:caif_netlink_parms(): no params data found [ 261.311029][ T6804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.332283][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.339670][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.341927][ T8934] bridge_slave_0: entered allmulticast mode [ 261.345396][ T8934] bridge_slave_0: entered promiscuous mode [ 261.360210][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.362200][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.364970][ T8934] bridge_slave_1: entered allmulticast mode [ 261.367124][ T8934] bridge_slave_1: entered promiscuous mode [ 261.399761][ T8948] futex_wake_op: syz.2.888 tries to shift op by -1; fix this program [ 261.430264][ T6804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.455939][ T8934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.463435][ T8934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.497707][ T8934] team0: Port device team_slave_0 added [ 261.500399][ T8934] team0: Port device team_slave_1 added [ 261.558691][ T6804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.601519][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.603688][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.610607][ T8934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.614925][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.616976][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.624321][ T8934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.694599][ T8934] hsr_slave_0: entered promiscuous mode [ 261.709302][ T8934] hsr_slave_1: entered promiscuous mode [ 261.849107][ T6804] bridge_slave_1: left allmulticast mode [ 261.850715][ T6804] bridge_slave_1: left promiscuous mode [ 261.852964][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.858324][ T6804] bridge_slave_0: left allmulticast mode [ 261.860413][ T6804] bridge_slave_0: left promiscuous mode [ 261.862598][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.198905][ T39] audit: type=1400 audit(1727857550.465:490): avc: granted { setsecparam } for pid=8957 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 262.240899][ T6804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.247734][ T6804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.254381][ T6804] bond0 (unregistering): Released all slaves [ 262.757030][ T6804] hsr_slave_0: left promiscuous mode [ 262.757593][ T6804] hsr_slave_1: left promiscuous mode [ 262.758290][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.758319][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.758932][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.758950][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.774547][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 262.822364][ T6804] veth1_macvtap: left promiscuous mode [ 262.822418][ T6804] veth0_macvtap: left promiscuous mode [ 262.822505][ T6804] veth1_vlan: left promiscuous mode [ 262.822568][ T6804] veth0_vlan: left promiscuous mode [ 262.824010][ T5343] Bluetooth: hci3: command tx timeout [ 263.266146][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.270001][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.274785][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.277934][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.285034][ T9] usb 6-1: config 0 descriptor?? [ 263.473712][ T8948] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 263.819783][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 263.821978][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 263.824549][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 263.826543][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 263.828382][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 263.830490][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 263.832914][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 263.835226][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 263.837148][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 263.838992][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 263.841247][ T9] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 263.858843][ T9] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 264.021387][ T6804] team0 (unregistering): Port device team_slave_1 removed [ 264.153119][ T6804] team0 (unregistering): Port device team_slave_0 removed [ 264.913597][ T5343] Bluetooth: hci3: command tx timeout [ 265.195449][ T8992] netlink: 'syz.2.896': attribute type 1 has an invalid length. [ 265.199330][ T8992] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 265.385419][ T8934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.406177][ T8934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.431366][ T8934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.446826][ T8934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.555707][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.615599][ T8934] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.643261][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.645269][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.679434][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.679487][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.845310][ T8934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.845327][ T8934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.910506][ T5343] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 266.169873][ T8934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.235735][ T5409] usb 6-1: USB disconnect, device number 13 [ 266.241323][ T8934] veth0_vlan: entered promiscuous mode [ 266.259750][ T8934] veth1_vlan: entered promiscuous mode [ 266.339859][ T8934] veth0_macvtap: entered promiscuous mode [ 266.346182][ T8934] veth1_macvtap: entered promiscuous mode [ 266.360610][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.363247][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.368143][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.370989][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.379139][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.381958][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.384918][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.387645][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.391435][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.398250][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.401125][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.416005][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.416022][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.416035][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.416042][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.416055][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.416061][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.416811][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.420826][ T8934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.420880][ T8934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.420895][ T8934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.420909][ T8934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.450500][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.450515][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.476705][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.476719][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.608850][ T9031] syz.1.901: attempt to access beyond end of device [ 266.608850][ T9031] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 266.613002][ T9031] SQUASHFS error: Failed to read block 0x0: -5 [ 266.615386][ T9031] unable to read squashfs_super_block [ 266.967796][ T5343] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 268.581128][ T9057] binder: 9056:9057 ioctl c0306201 0 returned -14 [ 268.588502][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.908'. [ 268.923790][ T5409] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 269.077468][ T5409] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.080345][ T5409] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.083777][ T5409] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.086133][ T5409] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.089258][ T5409] usb 7-1: config 0 descriptor?? [ 269.180273][ T98] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.535356][ T5409] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 269.537340][ T5409] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 269.539253][ T5409] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 269.541229][ T5409] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 269.543153][ T5409] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 269.548117][ T5409] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 269.550113][ T5409] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 269.552038][ T5409] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 269.554087][ T5409] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 269.556023][ T5409] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 269.558234][ T5409] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 269.561618][ T5409] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 270.268805][ T5355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.276203][ T5355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.279445][ T5355] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.282387][ T5355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.291020][ T5355] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.293128][ T5355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.375433][ T9064] chnl_net:caif_netlink_parms(): no params data found [ 270.419804][ T9064] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.421781][ T9064] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.424207][ T9064] bridge_slave_0: entered allmulticast mode [ 270.426693][ T9064] bridge_slave_0: entered promiscuous mode [ 270.430666][ T9064] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.433256][ T9064] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.437306][ T9064] bridge_slave_1: entered allmulticast mode [ 270.440225][ T9064] bridge_slave_1: entered promiscuous mode [ 270.480059][ T9064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.485965][ T9064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.524533][ T9064] team0: Port device team_slave_0 added [ 270.528372][ T9064] team0: Port device team_slave_1 added [ 270.567412][ T9064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.569839][ T9064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.578609][ T9064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.583884][ T9064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.586451][ T9064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.595810][ T9064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.639919][ T9064] hsr_slave_0: entered promiscuous mode [ 270.642041][ T9064] hsr_slave_1: entered promiscuous mode [ 270.644048][ T9064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.646086][ T9064] Cannot create hsr debugfs directory [ 270.948151][ T98] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.018489][ T98] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.097679][ T98] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.204538][ T98] bridge_slave_1: left allmulticast mode [ 271.206547][ T98] bridge_slave_1: left promiscuous mode [ 271.209171][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.212623][ T98] bridge_slave_0: left allmulticast mode [ 271.214872][ T98] bridge_slave_0: left promiscuous mode [ 271.216589][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.568309][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.574814][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.580700][ T98] bond0 (unregistering): Released all slaves [ 271.680559][ T4607] usb 7-1: USB disconnect, device number 15 [ 271.884347][ T5355] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 272.317340][ T9094] FAULT_INJECTION: forcing a failure. [ 272.317340][ T9094] name failslab, interval 1, probability 0, space 0, times 0 [ 272.320657][ T9094] CPU: 1 UID: 0 PID: 9094 Comm: syz.0.913 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 272.323386][ T9094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.326360][ T9094] Call Trace: [ 272.327487][ T9094] [ 272.328283][ T9094] dump_stack_lvl+0x16c/0x1f0 [ 272.329577][ T9094] should_fail_ex+0x497/0x5b0 [ 272.330848][ T9094] ? fs_reclaim_acquire+0xae/0x160 [ 272.332240][ T9094] should_failslab+0xc2/0x120 [ 272.333859][ T9094] __kmalloc_noprof+0xcb/0x400 [ 272.335730][ T9094] group_cpus_evenly+0xc6/0x680 [ 272.337624][ T9094] ? __pfx_group_cpus_evenly+0x10/0x10 [ 272.339104][ T9094] blk_mq_map_queues+0x4a/0x420 [ 272.340384][ T9094] ? rcu_is_watching+0x12/0xc0 [ 272.341642][ T9094] blk_mq_update_queue_map+0x34b/0x3e0 [ 272.343324][ T9094] blk_mq_alloc_tag_set+0x5ff/0x1240 [ 272.345192][ T9094] ? lockdep_init_map_type+0x107/0x7d0 [ 272.346853][ T9094] loop_add+0x3c4/0xb70 [ 272.348111][ T9094] ? do_vfs_ioctl+0x513/0x1990 [ 272.348807][ T5343] Bluetooth: hci3: command tx timeout [ 272.349396][ T9094] ? __pfx_loop_add+0x10/0x10 [ 272.352321][ T9094] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 272.353767][ T9094] ? trace_lock_acquire+0x14a/0x1d0 [ 272.355166][ T9094] loop_control_ioctl+0x13e/0x640 [ 272.356513][ T9094] ? __pfx_loop_control_ioctl+0x10/0x10 [ 272.358339][ T9094] ? selinux_file_ioctl+0x180/0x270 [ 272.360175][ T9094] ? selinux_file_ioctl+0xb4/0x270 [ 272.361689][ T9094] ? __pfx_loop_control_ioctl+0x10/0x10 [ 272.363141][ T9094] __x64_sys_ioctl+0x18f/0x220 [ 272.364468][ T9094] do_syscall_64+0xcd/0x250 [ 272.365725][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.367626][ T9094] RIP: 0033:0x7f0561d7dff9 [ 272.369488][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.375454][ T9094] RSP: 002b:00007f0562c4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.377801][ T9094] RAX: ffffffffffffffda RBX: 00007f0561f35f80 RCX: 00007f0561d7dff9 [ 272.380527][ T9094] RDX: ffffffffffffffb6 RSI: 0000000000004c80 RDI: 0000000000000004 [ 272.383438][ T9094] RBP: 00007f0562c4b090 R08: 0000000000000000 R09: 0000000000000000 [ 272.386717][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.389578][ T9094] R13: 0000000000000000 R14: 00007f0561f35f80 R15: 00007fff936e12d8 [ 272.391970][ T9094] [ 272.653163][ T98] hsr_slave_0: left promiscuous mode [ 272.654211][ T98] hsr_slave_1: left promiscuous mode [ 272.655166][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.655197][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.655881][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.655902][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.710393][ T39] audit: type=1400 audit(1727857560.875:491): avc: denied { read write } for pid=7273 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.710663][ T39] audit: type=1400 audit(1727857560.875:492): avc: denied { open } for pid=7273 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.710750][ T39] audit: type=1400 audit(1727857560.875:493): avc: denied { ioctl } for pid=7273 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.710810][ T39] audit: type=1400 audit(1727857560.905:494): avc: denied { map_create } for pid=9100 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 272.710892][ T39] audit: type=1400 audit(1727857560.915:495): avc: denied { create } for pid=9100 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.710950][ T39] audit: type=1400 audit(1727857560.915:496): avc: denied { create } for pid=9100 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.711004][ T39] audit: type=1400 audit(1727857560.915:497): avc: denied { connect } for pid=9100 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.711115][ T39] audit: type=1400 audit(1727857560.915:498): avc: denied { map } for pid=9100 comm="syz.1.915" path="/proc/315/comm" dev="proc" ino=36575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 272.711171][ T39] audit: type=1400 audit(1727857560.945:499): avc: denied { write } for pid=9100 comm="syz.1.915" path="socket:[36577]" dev="sockfs" ino=36577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.711357][ T39] audit: type=1400 audit(1727857560.945:500): avc: denied { write } for pid=9100 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.856114][ T98] veth1_macvtap: left promiscuous mode [ 272.858120][ T98] veth0_macvtap: left promiscuous mode [ 272.860211][ T98] veth1_vlan: left promiscuous mode [ 272.862170][ T98] veth0_vlan: left promiscuous mode [ 274.423633][ T5343] Bluetooth: hci3: command tx timeout [ 275.003573][ T4607] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 275.101922][ T98] team0 (unregistering): Port device team_slave_1 removed [ 275.171094][ T4607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.174863][ T4607] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.179116][ T4607] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.182127][ T4607] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.201237][ T4607] usb 7-1: config 0 descriptor?? [ 275.203577][ T98] team0 (unregistering): Port device team_slave_0 removed [ 275.805006][ T4607] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 275.810285][ T4607] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 275.815029][ T4607] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 275.816996][ T4607] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 275.818919][ T4607] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 275.824180][ T4607] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 275.826237][ T4607] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 275.828223][ T4607] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 275.830203][ T4607] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 275.832228][ T4607] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 275.836585][ T4607] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 275.850025][ T4607] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 275.962660][ T9064] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.007857][ T9064] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.021140][ T9064] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.041181][ T9064] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.070931][ T9125] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 276.114993][ T9125] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 276.165252][ T9125] bridge0: port 3(bond1) entered blocking state [ 276.167077][ T9125] bridge0: port 3(bond1) entered disabled state [ 276.168844][ T9125] bond1: entered allmulticast mode [ 276.170168][ T9125] bridge1: entered allmulticast mode [ 276.173166][ T9125] bond1: entered promiscuous mode [ 276.177349][ T9125] bridge1: entered promiscuous mode [ 276.231935][ T9064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.265076][ T9064] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.284680][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.286578][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.299736][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.301659][ T6935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.503710][ T5343] Bluetooth: hci3: command tx timeout [ 277.731304][ T39] kauditd_printk_skb: 407 callbacks suppressed [ 277.731960][ T39] audit: type=1400 audit(1727857565.995:908): avc: denied { create } for pid=9150 comm="syz.1.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 277.745188][ T9064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.764951][ T39] audit: type=1400 audit(1727857566.005:909): avc: denied { read } for pid=4817 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 277.804009][ T39] audit: type=1400 audit(1727857566.015:910): avc: denied { search } for pid=4817 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.811943][ T39] audit: type=1400 audit(1727857566.015:911): avc: denied { append } for pid=4817 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.852885][ T39] audit: type=1400 audit(1727857566.035:912): avc: denied { append open } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.881689][ T39] audit: type=1400 audit(1727857566.035:913): avc: denied { getattr } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.907026][ T39] audit: type=1400 audit(1727857566.175:914): avc: denied { create } for pid=9150 comm="syz.1.926" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 277.950966][ T9] usb 7-1: USB disconnect, device number 16 [ 277.984210][ T9064] veth0_vlan: entered promiscuous mode [ 278.005795][ T9064] veth1_vlan: entered promiscuous mode [ 278.022604][ T39] audit: type=1400 audit(1727857566.285:915): avc: denied { read write } for pid=8195 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.038777][ T39] audit: type=1400 audit(1727857566.295:916): avc: denied { read write open } for pid=8195 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.057929][ T39] audit: type=1400 audit(1727857566.295:917): avc: denied { ioctl } for pid=8195 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.102324][ T9064] veth0_macvtap: entered promiscuous mode [ 278.112860][ T9064] veth1_macvtap: entered promiscuous mode [ 278.145946][ T9064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.149271][ T9064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.152296][ T9064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.159623][ T9064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.163286][ T9064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.167498][ T9064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.171205][ T9064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.177812][ T9064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.181936][ T9064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.198340][ T9064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.201985][ T9064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.207797][ T9064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.210993][ T9064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.215848][ T9064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.219148][ T9064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.222153][ T9064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.228182][ T9064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.231611][ T9064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.243588][ T9064] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.246399][ T9064] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.249142][ T9064] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.252160][ T9064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.262382][ T9156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.298212][ T9156] ipt_REJECT: ECHOREPLY no longer supported. [ 278.535898][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.543609][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.583664][ T5343] Bluetooth: hci3: command tx timeout [ 278.637970][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.640988][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.750112][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.933'. [ 280.044592][ T1293] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 280.174094][ T35] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 280.229974][ T1293] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.232855][ T1293] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.237202][ T1293] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.239577][ T1293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.247482][ T1293] usb 7-1: config 0 descriptor?? [ 280.303580][ T35] usb 6-1: device descriptor read/64, error -71 [ 280.543599][ T35] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 280.673580][ T35] usb 6-1: device descriptor read/64, error -71 [ 280.793565][ T35] usb usb6-port1: attempt power cycle [ 280.824955][ T5355] Bluetooth: hci3: command 0x0405 tx timeout [ 280.921032][ T1293] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 280.923053][ T1293] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 280.923068][ T1293] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 280.923080][ T1293] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 280.923110][ T1293] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 280.923122][ T1293] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 280.923133][ T1293] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 280.954384][ T1293] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 280.956456][ T1293] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 280.958397][ T1293] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 280.960611][ T1293] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 281.058242][ T1293] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 281.205100][ T6935] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.291191][ T6935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.399017][ T6935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.456097][ T6935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.571214][ T6935] bridge_slave_1: left allmulticast mode [ 281.572902][ T6935] bridge_slave_1: left promiscuous mode [ 281.580743][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.624061][ T6935] bridge_slave_0: left allmulticast mode [ 281.625640][ T6935] bridge_slave_0: left promiscuous mode [ 281.627253][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.766373][ T35] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 281.791627][ T35] usb 6-1: device descriptor read/8, error -71 [ 282.043600][ T35] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 282.088746][ T35] usb 6-1: device descriptor read/8, error -71 [ 282.195149][ T35] usb usb6-port1: unable to enumerate USB device [ 282.541035][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.550008][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.553613][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.563560][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.584704][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.588382][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.697522][ T1293] usb 7-1: USB disconnect, device number 17 [ 282.745262][ T39] kauditd_printk_skb: 381 callbacks suppressed [ 282.745276][ T39] audit: type=1400 audit(1727857571.005:1299): avc: denied { read write } for pid=8195 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.769227][ T39] audit: type=1400 audit(1727857571.025:1300): avc: denied { write } for pid=9199 comm="syz.0.937" path="socket:[38108]" dev="sockfs" ino=38108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 282.782461][ T39] audit: type=1400 audit(1727857571.025:1301): avc: denied { read } for pid=4817 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 282.790355][ T39] audit: type=1400 audit(1727857571.025:1302): avc: denied { write } for pid=9199 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 282.795786][ T39] audit: type=1400 audit(1727857571.025:1303): avc: denied { search } for pid=4817 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.801342][ T39] audit: type=1400 audit(1727857571.025:1304): avc: denied { append } for pid=4817 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.807262][ T39] audit: type=1400 audit(1727857571.025:1305): avc: denied { append open } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.813204][ T39] audit: type=1400 audit(1727857571.025:1306): avc: denied { ioctl } for pid=9199 comm="syz.0.937" path="socket:[38108]" dev="sockfs" ino=38108 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 282.819731][ T39] audit: type=1400 audit(1727857571.025:1307): avc: denied { getattr } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.825611][ T39] audit: type=1400 audit(1727857571.025:1308): avc: denied { create } for pid=9199 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 282.834330][ T6935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.838988][ T6935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.846302][ T6935] bond0 (unregistering): Released all slaves [ 282.868612][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 283.163372][ T9197] chnl_net:caif_netlink_parms(): no params data found [ 283.223837][ T5355] Bluetooth: hci1: command 0x0406 tx timeout [ 283.321059][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.323604][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.326416][ T9197] bridge_slave_0: entered allmulticast mode [ 283.329195][ T9197] bridge_slave_0: entered promiscuous mode [ 283.358957][ T6935] hsr_slave_0: left promiscuous mode [ 283.367628][ T6935] hsr_slave_1: left promiscuous mode [ 283.370408][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.372411][ T6935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.395888][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.398741][ T6935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.454701][ T6935] veth1_macvtap: left promiscuous mode [ 283.456883][ T6935] veth0_macvtap: left promiscuous mode [ 283.459385][ T6935] veth1_vlan: left promiscuous mode [ 283.461462][ T6935] veth0_vlan: left promiscuous mode [ 283.851934][ T9228] FAULT_INJECTION: forcing a failure. [ 283.851934][ T9228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.863698][ T9228] CPU: 2 UID: 0 PID: 9228 Comm: syz.0.942 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 283.863751][ T9228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.863763][ T9228] Call Trace: [ 283.872686][ T9228] [ 283.873563][ T9228] dump_stack_lvl+0x16c/0x1f0 [ 283.874838][ T9228] should_fail_ex+0x497/0x5b0 [ 283.876100][ T9228] ? fs_reclaim_acquire+0xae/0x160 [ 283.877488][ T9228] should_fail_alloc_page+0xe7/0x130 [ 283.878868][ T9228] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 283.880494][ T9228] ? __pfx_stack_trace_save+0x10/0x10 [ 283.881935][ T9228] __alloc_pages_noprof+0x190/0x25c0 [ 283.883436][ T9228] ? kasan_save_stack+0x42/0x60 [ 283.884748][ T9228] ? kasan_save_stack+0x33/0x60 [ 283.886092][ T9228] ? kasan_save_track+0x14/0x30 [ 283.887446][ T9228] ? kmem_cache_alloc_noprof+0x121/0x2f0 [ 283.889070][ T9228] ? hlock_class+0x4e/0x130 [ 283.890424][ T9228] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 283.891970][ T9228] ? __pfx___lock_acquire+0x10/0x10 [ 283.893439][ T9228] ? mark_lock+0xb5/0xc60 [ 283.894591][ T9228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.896169][ T9228] ? policy_nodemask+0xea/0x4e0 [ 283.897493][ T9228] alloc_pages_mpol_noprof+0x2c9/0x610 [ 283.898949][ T9228] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 283.900558][ T9228] ? __pte_alloc+0x91/0x390 [ 283.901868][ T9228] ? lock_acquire+0x2f/0xb0 [ 283.903159][ T9228] folio_alloc_mpol_noprof+0x36/0xd0 [ 283.904582][ T9228] vma_alloc_folio_noprof+0xee/0x1b0 [ 283.905985][ T9228] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 283.907575][ T9228] ? __pfx___lock_acquire+0x10/0x10 [ 283.909032][ T9228] do_pte_missing+0x2010/0x3e50 [ 283.910430][ T9228] ? lock_vma_under_rcu+0x13e/0x980 [ 283.911877][ T9228] __handle_mm_fault+0x100a/0x2a10 [ 283.913305][ T9228] ? __pfx_lock_release+0x10/0x10 [ 283.914632][ T9228] ? lock_vma_under_rcu+0x13e/0x980 [ 283.916009][ T9228] ? __pfx___handle_mm_fault+0x10/0x10 [ 283.917472][ T9228] ? lockdep_hardirqs_on+0x7c/0x110 [ 283.918858][ T9228] handle_mm_fault+0x3fa/0xaa0 [ 283.920173][ T9228] do_user_addr_fault+0x60d/0x13f0 [ 283.921661][ T9228] exc_page_fault+0x5c/0xc0 [ 283.922915][ T9228] asm_exc_page_fault+0x26/0x30 [ 283.924243][ T9228] RIP: 0033:0x7f0561c4f0c0 [ 283.925452][ T9228] Code: d8 12 00 89 c3 85 c0 0f 88 f5 07 00 00 83 f8 1d 0f 8f 4d 09 00 00 48 8d 3d 65 dc 18 00 31 c0 e8 f6 fd fe ff 41 ba 01 00 00 00 44 0f c1 15 37 12 41 00 41 83 fa 05 7f 06 49 83 fd 1a 77 1b 48 [ 283.930360][ T9228] RSP: 002b:00007f0562c27f70 EFLAGS: 00010206 [ 283.931980][ T9228] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000000000 [ 283.934539][ T9228] RDX: 0000000000000000 RSI: 00007f0561df002c RDI: 00007f0561ddcd18 [ 283.936641][ T9228] RBP: 00007f0562c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 283.938725][ T9228] R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000000000 [ 283.940825][ T9228] R13: 000000000000010b R14: 0000000020000000 R15: 00007fff936e12d8 [ 283.942953][ T9228] [ 283.970450][ T9228] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 284.247796][ T35] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 284.423543][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 284.431002][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 284.433562][ T35] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 284.436172][ T35] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 284.438663][ T35] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 284.442096][ T35] usb 5-1: config 1 interface 0 has no altsetting 0 [ 284.444049][ T35] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 284.446425][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.462423][ T35] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 284.666820][ T5343] Bluetooth: hci3: command tx timeout [ 284.745866][ T6935] team0 (unregistering): Port device team_slave_1 removed [ 284.852929][ T6935] team0 (unregistering): Port device team_slave_0 removed [ 285.551082][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.553083][ T9197] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.555139][ T9197] bridge_slave_1: entered allmulticast mode [ 285.557338][ T9197] bridge_slave_1: entered promiscuous mode [ 285.568642][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 285.588447][ T5400] usb 5-1: USB disconnect, device number 11 [ 285.623872][ T9197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.641086][ T9197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.692764][ T9197] team0: Port device team_slave_0 added [ 285.698364][ T9197] team0: Port device team_slave_1 added [ 285.747009][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.748905][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.758369][ T9197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.766326][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.768260][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.778207][ T9197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.831467][ T9197] hsr_slave_0: entered promiscuous mode [ 285.835474][ T9197] hsr_slave_1: entered promiscuous mode [ 286.559665][ T9197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.575123][ T9197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.592146][ T9197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 286.743573][ T5343] Bluetooth: hci3: command tx timeout [ 286.772909][ T9197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 286.778179][ T9252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.946'. [ 286.905073][ T62] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 286.985027][ T9197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.031743][ T9197] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.054430][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.056335][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.072328][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.074874][ T6935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.129300][ T62] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 287.132097][ T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.180264][ T62] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 287.183928][ T62] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 287.187897][ T62] usb 6-1: Manufacturer: syz [ 287.205510][ T62] usb 6-1: config 0 descriptor?? [ 287.213648][ T7435] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 287.403082][ T7435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.416518][ T7435] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.420899][ T7435] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.453641][ T7435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.477326][ T7435] usb 5-1: config 0 descriptor?? [ 287.863217][ T39] kauditd_printk_skb: 886 callbacks suppressed [ 287.863339][ T39] audit: type=1400 audit(1727857576.105:2195): avc: denied { module_request } for pid=9197 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 287.863841][ T5343] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 287.894161][ T39] audit: type=1400 audit(1727857576.135:2196): avc: denied { map_create } for pid=9264 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 287.894888][ T39] audit: type=1400 audit(1727857576.135:2197): avc: denied { map_read map_write } for pid=9264 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 287.895065][ T39] audit: type=1400 audit(1727857576.155:2198): avc: denied { read } for pid=4817 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 287.895239][ T39] audit: type=1400 audit(1727857576.155:2199): avc: denied { search } for pid=4817 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.895405][ T39] audit: type=1400 audit(1727857576.155:2200): avc: denied { append } for pid=4817 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.904451][ T39] audit: type=1400 audit(1727857576.175:2201): avc: denied { append open } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.911562][ T39] audit: type=1400 audit(1727857576.175:2202): avc: denied { getattr } for pid=4817 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.015380][ T39] audit: type=1400 audit(1727857576.285:2203): avc: denied { read } for pid=9257 comm="syz.0.947" dev="nsfs" ino=4026533171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 288.037039][ T39] audit: type=1400 audit(1727857576.305:2204): avc: denied { ioctl } for pid=9257 comm="syz.0.947" path="/dev/raw-gadget" dev="devtmpfs" ino=761 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.433530][ T62] rc_core: IR keymap rc-hauppauge not found [ 288.435175][ T62] Registered IR keymap rc-empty [ 288.437455][ T62] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 288.440575][ T62] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 288.632193][ T7435] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 288.649950][ T7435] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 288.662126][ T7435] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 288.669256][ T7435] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 288.675928][ T7435] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 288.679519][ T7435] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 288.686022][ T7435] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 288.690702][ T7435] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 288.696400][ T7435] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 288.700969][ T7435] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 288.707789][ T7435] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 288.727252][ T7435] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 288.823558][ T5355] Bluetooth: hci3: command tx timeout [ 289.047180][ T9197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.085743][ T9] usb 6-1: USB disconnect, device number 18 [ 289.150567][ T9197] veth0_vlan: entered promiscuous mode [ 289.169010][ T9197] veth1_vlan: entered promiscuous mode [ 289.247050][ T9197] veth0_macvtap: entered promiscuous mode [ 289.258944][ T9197] veth1_macvtap: entered promiscuous mode [ 289.298194][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.302088][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.309428][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.312231][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.315717][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.318561][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.321166][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.325034][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.328682][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.338442][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.342033][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.345431][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.348924][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.352303][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.355913][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.359167][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.362913][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.367120][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.379163][ T9197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.382144][ T9197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.385482][ T9197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.388532][ T9197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.470185][ T6935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.472920][ T6935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.512205][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.515042][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.821391][ T9291] overlayfs: failed to resolve './file0': -2 [ 290.321252][ T5400] usb 5-1: USB disconnect, device number 12 [ 290.559985][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.586105][ T9290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 290.592962][ T9290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 290.611294][ T9290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 290.616230][ T9290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 290.617958][ T9290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 290.633399][ T9290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 290.639096][ T9290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 290.781041][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.172630][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.346103][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.544046][ T11] bridge_slave_1: left allmulticast mode [ 291.545567][ T11] bridge_slave_1: left promiscuous mode [ 291.546986][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.565503][ T11] bridge_slave_0: left allmulticast mode [ 291.567018][ T11] bridge_slave_0: left promiscuous mode [ 291.568570][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.853065][ T9310] binder: 9308:9310 ioctl c0306201 20000000 returned -14 [ 291.863565][ T5355] Bluetooth: hci1: command 0x0406 tx timeout [ 291.970090][ T5343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.974400][ T5343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.978228][ T5343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.987666][ T5343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.995131][ T5343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.997930][ T5343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.136459][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.153995][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.159292][ T11] bond0 (unregistering): Released all slaves [ 292.418674][ T9318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.957'. [ 292.673608][ T5343] Bluetooth: hci2: command 0x0c1a tx timeout [ 292.785173][ T11] hsr_slave_0: left promiscuous mode [ 292.806817][ T11] hsr_slave_1: left promiscuous mode [ 292.811857][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.813998][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.820109][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.822328][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.846432][ T11] veth1_macvtap: left promiscuous mode [ 292.846468][ T11] veth0_macvtap: left promiscuous mode [ 292.846518][ T11] veth1_vlan: left promiscuous mode [ 292.846555][ T11] veth0_vlan: left promiscuous mode [ 292.876866][ T39] kauditd_printk_skb: 821 callbacks suppressed [ 292.876878][ T39] audit: type=1400 audit(1727857581.145:3026): avc: denied { map_create } for pid=9328 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 292.993559][ T39] audit: type=1400 audit(1727857581.145:3027): avc: denied { map_read map_write } for pid=9328 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 293.004956][ T39] audit: type=1400 audit(1727857581.175:3028): avc: denied { read write } for pid=9328 comm="syz.1.960" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 293.011003][ T39] audit: type=1400 audit(1727857581.175:3029): avc: denied { read write open } for pid=9328 comm="syz.1.960" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 293.100597][ T39] audit: type=1400 audit(1727857581.365:3030): avc: denied { read write } for pid=8195 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.117421][ T39] audit: type=1400 audit(1727857581.365:3031): avc: denied { read write open } for pid=8195 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.143724][ T39] audit: type=1400 audit(1727857581.365:3032): avc: denied { ioctl } for pid=8195 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.171251][ T39] audit: type=1400 audit(1727857581.435:3033): avc: denied { read write } for pid=5338 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.203539][ T39] audit: type=1400 audit(1727857581.455:3034): avc: denied { read write open } for pid=5338 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.211781][ T39] audit: type=1400 audit(1727857581.455:3035): avc: denied { ioctl } for pid=5338 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.327942][ T9337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.387856][ T9337] ipt_REJECT: ECHOREPLY no longer supported. [ 293.953551][ T5355] Bluetooth: hci1: command 0x0406 tx timeout [ 294.119479][ T5355] Bluetooth: hci3: command tx timeout [ 294.753577][ T5355] Bluetooth: hci2: command 0x0c1a tx timeout [ 295.122475][ T9355] 9pnet_fd: Insufficient options for proto=fd [ 295.327758][ T4607] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 295.330684][ T4607] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 295.348858][ T4607] hid-generic 0000:0000:0000.0025: hidraw1: HID v0.00 Device [syz0] on syz1 [ 295.697079][ T11] team0 (unregistering): Port device team_slave_1 removed [ 295.792894][ T11] team0 (unregistering): Port device team_slave_0 removed [ 296.023583][ T5355] Bluetooth: hci1: command 0x0406 tx timeout [ 296.188700][ T5355] Bluetooth: hci3: command tx timeout [ 296.687745][ T9352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.965'. [ 296.693544][ T9352] netlink: 'syz.2.965': attribute type 7 has an invalid length. [ 296.698122][ T9352] netlink: 'syz.2.965': attribute type 8 has an invalid length. [ 296.700154][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 296.823583][ T5355] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.913125][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 296.922038][ T9363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.969'. [ 296.975498][ T9366] netlink: 'syz.1.968': attribute type 9 has an invalid length. [ 296.982915][ T9366] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.968'. [ 296.998881][ T9315] chnl_net:caif_netlink_parms(): no params data found [ 297.078614][ T9371] program syz.2.970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.113070][ T9315] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.119571][ T9315] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.121560][ T9315] bridge_slave_0: entered allmulticast mode [ 297.138027][ T9315] bridge_slave_0: entered promiscuous mode [ 297.208158][ T9315] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.213888][ T9315] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.216567][ T9315] bridge_slave_1: entered allmulticast mode [ 297.223587][ T9315] bridge_slave_1: entered promiscuous mode [ 297.289253][ T5355] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 297.386731][ T9315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.389401][ T9315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.883796][ T39] kauditd_printk_skb: 502 callbacks suppressed [ 297.883817][ T39] audit: type=1400 audit(1727857586.155:3538): avc: denied { search } for pid=9383 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.884466][ T39] audit: type=1400 audit(1727857586.155:3539): avc: denied { search } for pid=9383 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.885151][ T39] audit: type=1400 audit(1727857586.155:3540): avc: denied { search } for pid=9383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.903652][ T39] audit: type=1400 audit(1727857586.155:3541): avc: denied { search } for pid=9383 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.903701][ T39] audit: type=1400 audit(1727857586.155:3542): avc: denied { search } for pid=9383 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.903737][ T39] audit: type=1400 audit(1727857586.155:3543): avc: denied { search } for pid=9383 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.903769][ T39] audit: type=1400 audit(1727857586.155:3544): avc: denied { search } for pid=9383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.903801][ T39] audit: type=1400 audit(1727857586.155:3545): avc: denied { read } for pid=9383 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.903835][ T39] audit: type=1400 audit(1727857586.155:3546): avc: denied { read open } for pid=9383 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.903869][ T39] audit: type=1400 audit(1727857586.155:3547): avc: denied { getattr } for pid=9383 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.131396][ T5343] Bluetooth: hci1: command 0x0406 tx timeout [ 298.313789][ T5343] Bluetooth: hci3: command tx timeout [ 298.918213][ T5343] Bluetooth: hci2: command 0x0c1a tx timeout [ 299.118739][ T9315] team0: Port device team_slave_0 added [ 299.126991][ T9315] team0: Port device team_slave_1 added [ 299.165385][ T9315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.167369][ T9315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.171305][ T9393] serio: Serial port pts0 [ 299.183650][ T9315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.189991][ T9315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.191963][ T9315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.198947][ T9315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.257033][ T9315] hsr_slave_0: entered promiscuous mode [ 299.261234][ T9315] hsr_slave_1: entered promiscuous mode [ 299.942150][ T5355] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 300.075449][ T9315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.106379][ T9315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.119578][ T9315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.181761][ T9315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.343589][ T5355] Bluetooth: hci3: command tx timeout [ 300.472528][ T9315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.501066][ T9315] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.510993][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.512932][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.548479][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.550464][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.696460][ T9415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.741809][ T9415] ipt_REJECT: ECHOREPLY no longer supported. [ 301.303568][ T5355] Bluetooth: hci2: command 0x0c1a tx timeout [ 301.516834][ T9432] x_tables: duplicate underflow at hook 2 [ 301.527050][ T9315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.691827][ T9315] veth0_vlan: entered promiscuous mode [ 301.739064][ T9315] veth1_vlan: entered promiscuous mode [ 301.796742][ T9315] veth0_macvtap: entered promiscuous mode [ 301.814810][ T9315] veth1_macvtap: entered promiscuous mode [ 301.847876][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.850690][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.853230][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.858531][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.864250][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.866931][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.869449][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.872214][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.877913][ T9315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.894363][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.897484][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.900511][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.906806][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.909369][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.912044][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.919334][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.922056][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.928515][ T9315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.939971][ T9315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.942259][ T9315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.947518][ T9315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.949802][ T9315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.072459][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.074925][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.218564][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.218580][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.479731][ T9445] syz_tun: entered promiscuous mode [ 302.481652][ T9445] macsec1: entered promiscuous mode [ 302.483105][ T9445] macsec1: entered allmulticast mode [ 302.488247][ T9445] syz_tun: entered allmulticast mode [ 302.894292][ T39] kauditd_printk_skb: 1056 callbacks suppressed [ 302.894304][ T39] audit: type=1400 audit(1727857591.165:4604): avc: denied { search } for pid=9446 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.901808][ T39] audit: type=1400 audit(1727857591.165:4605): avc: denied { search } for pid=9446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.920324][ T39] audit: type=1400 audit(1727857591.165:4606): avc: denied { search } for pid=9446 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.936638][ T39] audit: type=1400 audit(1727857591.165:4607): avc: denied { search } for pid=9446 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.937767][ T9452] netlink: 'syz.1.985': attribute type 3 has an invalid length. [ 302.943103][ T39] audit: type=1400 audit(1727857591.165:4608): avc: denied { search } for pid=9446 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.957125][ T39] audit: type=1400 audit(1727857591.165:4609): avc: denied { search } for pid=9446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.973603][ T39] audit: type=1400 audit(1727857591.165:4610): avc: denied { read } for pid=9446 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.980359][ T39] audit: type=1400 audit(1727857591.165:4611): avc: denied { read open } for pid=9446 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.996393][ T39] audit: type=1400 audit(1727857591.165:4612): avc: denied { getattr } for pid=9446 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.012619][ T39] audit: type=1400 audit(1727857591.165:4613): avc: denied { search } for pid=9446 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.303681][ T5355] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 304.272896][ T98] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.567553][ T98] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.641945][ T98] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.699597][ T98] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.841411][ T98] bridge_slave_1: left allmulticast mode [ 304.843380][ T98] bridge_slave_1: left promiscuous mode [ 304.845609][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.865134][ T98] bridge_slave_0: left allmulticast mode [ 304.866938][ T98] bridge_slave_0: left promiscuous mode [ 304.868957][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.193267][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.199697][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.203198][ T98] bond0 (unregistering): Released all slaves [ 305.636366][ T98] hsr_slave_0: left promiscuous mode [ 305.652968][ T98] hsr_slave_1: left promiscuous mode [ 305.661104][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.663668][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.668406][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.670933][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.717726][ T98] veth1_macvtap: left promiscuous mode [ 305.719704][ T98] veth0_macvtap: left promiscuous mode [ 305.721700][ T98] veth1_vlan: left promiscuous mode [ 305.723776][ T98] veth0_vlan: left promiscuous mode [ 305.727664][ T5355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.733661][ T5355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.737607][ T5355] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.740852][ T5355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.743927][ T5355] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 305.746451][ T5355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.943555][ T5347] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 306.107844][ T5347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.110802][ T5347] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.115108][ T5347] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.117467][ T5347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.123257][ T5347] usb 7-1: config 0 descriptor?? [ 306.738056][ T5347] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 306.740016][ T5347] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 306.741969][ T5347] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 306.744059][ T5347] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 306.746006][ T5347] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 306.747907][ T5347] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 306.749834][ T5347] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 306.751752][ T5347] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 306.753893][ T5347] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 306.755813][ T5347] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 306.758166][ T5347] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 306.832617][ T5347] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 306.941744][ T7898] IPVS: starting estimator thread 0... [ 307.029895][ T9490] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 307.034457][ T9493] IPVS: using max 36 ests per chain, 86400 per kthread [ 307.126757][ T98] team0 (unregistering): Port device team_slave_1 removed [ 307.220732][ T98] team0 (unregistering): Port device team_slave_0 removed [ 307.784362][ T5355] Bluetooth: hci3: command tx timeout [ 307.973641][ T39] kauditd_printk_skb: 597 callbacks suppressed [ 307.973659][ T39] audit: type=1400 audit(1727857596.235:5211): avc: denied { execmem } for pid=9497 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 308.161278][ T39] audit: type=1400 audit(1727857596.425:5212): avc: denied { read } for pid=9497 comm="syz.1.997" dev="nsfs" ino=4026533762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 308.167723][ T39] audit: type=1400 audit(1727857596.425:5213): avc: denied { read open } for pid=9497 comm="syz.1.997" path="net:[4026533762]" dev="nsfs" ino=4026533762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 308.176496][ T39] audit: type=1400 audit(1727857596.435:5214): avc: denied { create } for pid=9497 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.184707][ T39] audit: type=1400 audit(1727857596.435:5215): avc: denied { prog_load } for pid=9497 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 308.195216][ T39] audit: type=1400 audit(1727857596.435:5216): avc: denied { bpf } for pid=9497 comm="syz.1.997" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.210613][ T39] audit: type=1400 audit(1727857596.435:5217): avc: denied { perfmon } for pid=9497 comm="syz.1.997" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.227185][ T39] audit: type=1400 audit(1727857596.435:5218): avc: denied { perfmon } for pid=9497 comm="syz.1.997" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.232491][ T39] audit: type=1400 audit(1727857596.445:5219): avc: denied { perfmon } for pid=9497 comm="syz.1.997" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.251387][ T39] audit: type=1400 audit(1727857596.445:5220): avc: denied { perfmon } for pid=9497 comm="syz.1.997" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.976120][ T9474] chnl_net:caif_netlink_parms(): no params data found [ 309.091027][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.094632][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.103926][ T9474] bridge_slave_0: entered allmulticast mode [ 309.106903][ T9474] bridge_slave_0: entered promiscuous mode [ 309.116539][ T9474] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.118598][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.120868][ T9474] bridge_slave_1: entered allmulticast mode [ 309.123631][ T9474] bridge_slave_1: entered promiscuous mode [ 309.161290][ C2] [ 309.161976][ C2] ============================================ [ 309.163596][ C2] WARNING: possible recursive locking detected [ 309.165212][ C2] 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 Not tainted [ 309.167704][ C2] -------------------------------------------- [ 309.170396][ C2] syz.1.998/9510 is trying to acquire lock: [ 309.171987][ C2] ffffc900044dd0d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.174507][ C2] [ 309.174507][ C2] but task is already holding lock: [ 309.176407][ C2] ffffc90003a590d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.178949][ C2] [ 309.178949][ C2] other info that might help us debug this: [ 309.180956][ C2] Possible unsafe locking scenario: [ 309.180956][ C2] [ 309.182872][ C2] CPU0 [ 309.183746][ C2] ---- [ 309.184630][ C2] lock(&rb->spinlock); [ 309.185781][ C2] lock(&rb->spinlock); [ 309.186890][ C2] [ 309.186890][ C2] *** DEADLOCK *** [ 309.186890][ C2] [ 309.188992][ C2] May be due to missing lock nesting notation [ 309.188992][ C2] [ 309.191132][ C2] 7 locks held by syz.1.998/9510: [ 309.192464][ C2] #0: ffff88801230cd98 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x35/0x6a0 [ 309.195029][ C2] #1: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: count_memcg_events_mm.constprop.0+0x3a/0x340 [ 309.197881][ C2] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: ieee80211_rx_napi+0xa6/0x400 [ 309.200363][ C2] #3: ffff888046a60168 (&rdev->bss_lock){+.-.}-{2:2}, at: cfg80211_inform_single_bss_data+0x791/0x1de0 [ 309.203242][ C2] #4: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 309.205679][ C2] #5: ffffc90003a590d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.208300][ C2] #6: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 309.210756][ C2] [ 309.210756][ C2] stack backtrace: [ 309.212311][ C2] CPU: 2 UID: 0 PID: 9510 Comm: syz.1.998 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 309.215048][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.217846][ C2] Call Trace: [ 309.218727][ C2] [ 309.219518][ C2] dump_stack_lvl+0x116/0x1f0 [ 309.220797][ C2] print_deadlock_bug+0x2e3/0x410 [ 309.222140][ C2] __lock_acquire+0x2185/0x3ce0 [ 309.223421][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 309.224789][ C2] ? hlock_class+0x4e/0x130 [ 309.226000][ C2] ? __lock_acquire+0xbdd/0x3ce0 [ 309.227317][ C2] lock_acquire.part.0+0x11b/0x380 [ 309.228646][ C2] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.230046][ C2] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 309.231541][ C2] ? rcu_is_watching+0x12/0xc0 [ 309.232809][ C2] ? trace_lock_acquire+0x14a/0x1d0 [ 309.234164][ C2] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.235587][ C2] ? lock_acquire+0x2f/0xb0 [ 309.236795][ C2] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.238216][ C2] _raw_spin_lock_irqsave+0x3a/0x60 [ 309.239578][ C2] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.241029][ C2] __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.242423][ C2] ? bpf_trace_run2+0x1c2/0x590 [ 309.243697][ C2] bpf_ringbuf_output+0x60/0xd0 [ 309.244983][ C2] bpf_prog_a3e2825f60354855+0x46/0x4a [ 309.246404][ C2] bpf_trace_run2+0x231/0x590 [ 309.247647][ C2] ? __pfx_bpf_trace_run2+0x10/0x10 [ 309.249026][ C2] ? __pfx_stack_trace_save+0x10/0x10 [ 309.250433][ C2] ? stack_depot_save_flags+0x28/0x8f0 [ 309.251864][ C2] ? is_bpf_text_address+0x8a/0x1a0 [ 309.253243][ C2] __bpf_trace_contention_end+0xca/0x110 [ 309.254703][ C2] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 309.256338][ C2] ? __pfx_mark_lock+0x10/0x10 [ 309.257594][ C2] ? __lock_acquire+0x163e/0x3ce0 [ 309.258909][ C2] trace_contention_end.constprop.0+0xea/0x170 [ 309.260536][ C2] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 309.262125][ C2] ? lockdep_hardirqs_on_prepare+0x410/0x420 [ 309.263683][ C2] ? __lock_acquire+0xbdd/0x3ce0 [ 309.264990][ C2] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 309.266700][ C2] do_raw_spin_lock+0x210/0x2c0 [ 309.267972][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 309.269397][ C2] ? lock_acquire+0x2f/0xb0 [ 309.270593][ C2] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.272019][ C2] _raw_spin_lock_irqsave+0x42/0x60 [ 309.273386][ C2] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.274805][ C2] __bpf_ringbuf_reserve+0x36e/0x4b0 [ 309.276207][ C2] ? bpf_trace_run2+0x1c2/0x590 [ 309.277490][ C2] bpf_ringbuf_output+0x60/0xd0 [ 309.278760][ C2] bpf_prog_a3e2825f60354855+0x46/0x4a [ 309.280237][ C2] bpf_trace_run2+0x231/0x590 [ 309.281504][ C2] ? __pfx_bpf_trace_run2+0x10/0x10 [ 309.282858][ C2] ? ieee80211_inform_bss+0x76e/0x1100 [ 309.284298][ C2] ? cfg80211_update_known_bss+0x3c0/0x11e0 [ 309.285877][ C2] kfree+0x258/0x4b0 [ 309.286908][ C2] ? mark_held_locks+0x9f/0xe0 [ 309.288168][ C2] ieee80211_inform_bss+0x76e/0x1100 [ 309.289551][ C2] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 309.291033][ C2] ? lock_acquire+0x2f/0xb0 [ 309.292241][ C2] ? cfg80211_inform_single_bss_data+0x791/0x1de0 [ 309.293904][ C2] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 309.295381][ C2] cfg80211_inform_single_bss_data+0x8f6/0x1de0 [ 309.297022][ C2] ? hlock_class+0x4e/0x130 [ 309.298245][ C2] ? __lock_acquire+0xbdd/0x3ce0 [ 309.299545][ C2] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 309.301280][ C2] ? __lock_acquire+0xbdd/0x3ce0 [ 309.302571][ C2] ? lock_acquire.part.0+0x11b/0x380 [ 309.303969][ C2] ? cfg80211_inform_bss_data+0x205/0x3ba0 [ 309.305504][ C2] cfg80211_inform_bss_data+0x205/0x3ba0 [ 309.306969][ C2] ? mark_lock+0xb5/0xc60 [ 309.308110][ C2] ? trace_lock_acquire+0x14a/0x1d0 [ 309.309491][ C2] ? __pfx_mark_lock+0x10/0x10 [ 309.310744][ C2] ? hlock_class+0x4e/0x130 [ 309.311959][ C2] ? mark_lock+0xb5/0xc60 [ 309.313102][ C2] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 309.314718][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 309.316304][ C2] ? __pfx_mark_lock+0x10/0x10 [ 309.317555][ C2] ? __kernel_text_address+0xd/0x40 [ 309.318912][ C2] ? unwind_get_return_address+0x59/0xa0 [ 309.320515][ C2] ? hlock_class+0x4e/0x130 [ 309.321755][ C2] ? __lock_acquire+0xbdd/0x3ce0 [ 309.323092][ C2] ? __pfx_mark_lock+0x10/0x10 [ 309.324414][ C2] ? lock_acquire.part.0+0x11b/0x380 [ 309.325817][ C2] ? find_held_lock+0x2d/0x110 [ 309.327120][ C2] ? ieee80211_bss_info_update+0x2cb/0xab0 [ 309.328682][ C2] cfg80211_inform_bss_frame_data+0x271/0x7a0 [ 309.330311][ C2] ieee80211_bss_info_update+0x311/0xab0 [ 309.331873][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 309.333593][ C2] ? ieee80211_get_channel_khz+0x14d/0x1e0 [ 309.335237][ C2] ieee80211_scan_rx+0x474/0xac0 [ 309.336651][ C2] ieee80211_rx_list+0x1be3/0x2e90 [ 309.338084][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 309.339543][ C2] ? lock_acquire.part.0+0x11b/0x380 [ 309.340956][ C2] ? lock_acquire+0x2f/0xb0 [ 309.342186][ C2] ? ieee80211_rx_napi+0xa6/0x400 [ 309.343554][ C2] ieee80211_rx_napi+0xdd/0x400 [ 309.344865][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 309.346323][ C2] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.347710][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 309.349274][ C2] ieee80211_handle_queued_frames+0xd5/0x130 [ 309.350867][ C2] tasklet_action_common+0x24c/0x3e0 [ 309.352292][ C2] handle_softirqs+0x213/0x8f0 [ 309.353568][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 309.354970][ C2] irq_exit_rcu+0xbb/0x120 [ 309.356161][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 309.357646][ C2] [ 309.358440][ C2] [ 309.359228][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 309.360836][ C2] RIP: 0010:count_memcg_events_mm.constprop.0+0x108/0x340 [ 309.362767][ C2] Code: ba 01 00 00 00 89 de 48 89 ef e8 c3 33 22 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 81 58 b8 ff 48 85 db 0f 85 06 02 00 00 03 56 b8 ff e8 7e 8d 4c 09 31 ff 89 c3 89 c6 e8 33 58 b8 ff 85 [ 309.367812][ C2] RSP: 0018:ffffc900016af9a8 EFLAGS: 00000246 [ 309.369418][ C2] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9002b915000 [ 309.371480][ C2] RDX: 0000000000040000 RSI: ffffffff81d534e8 RDI: 0000000000000007 [ 309.373573][ C2] RBP: ffff888048e5a000 R08: 0000000000000007 R09: 0000000000000000 [ 309.375607][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000200 [ 309.377654][ C2] R13: ffff888048ec3bc0 R14: 0000000000000000 R15: ffff888054bdc880 [ 309.379702][ C2] ? count_memcg_events_mm.constprop.0+0x308/0x340 [ 309.381395][ C2] ? count_memcg_events_mm.constprop.0+0x308/0x340 [ 309.383071][ C2] handle_mm_fault+0x5cc/0xaa0 [ 309.384322][ C2] do_user_addr_fault+0x7a3/0x13f0 [ 309.385647][ C2] exc_page_fault+0x5c/0xc0 [ 309.386830][ C2] asm_exc_page_fault+0x26/0x30 [ 309.388126][ C2] RIP: 0010:_copy_from_user+0xc1/0xf0 [ 309.389515][ C2] Code: 89 df e8 a2 12 fe fc 4d 85 f6 75 9e e8 e8 10 fe fc 0f ae e8 89 ee 4c 89 ef e8 6b 8d 5f fd 0f 01 cb 48 89 e9 4c 89 ef 48 89 de a4 0f 1f 00 48 89 cb 0f 01 ca e9 73 ff ff ff e8 ba 10 fe fc 48 [ 309.394463][ C2] RSP: 0018:ffffc900016afb60 EFLAGS: 00050297 [ 309.396034][ C2] RAX: 0000000000000001 RBX: 000000002048bc3a RCX: 00000000000001a7 [ 309.398095][ C2] RDX: ffffed100afc70ad RSI: 000000002048c000 RDI: ffff888057e383c6 [ 309.400149][ C2] RBP: 000000000000056d R08: 0000000000000001 R09: ffffed100afc70ad [ 309.402206][ C2] R10: 0000000000000004 R11: 0000000000000000 R12: 000000002048c1a7 [ 309.404270][ C2] R13: ffff888057e38000 R14: 0000000000000000 R15: ffff88802e407560 [ 309.406323][ C2] generic_map_update_batch+0x3ff/0x5f0 [ 309.407773][ C2] ? __pfx_generic_map_update_batch+0x10/0x10 [ 309.409377][ C2] ? __pfx_generic_map_update_batch+0x10/0x10 [ 309.410953][ C2] bpf_map_do_batch+0x5a8/0x670 [ 309.412244][ C2] __sys_bpf+0x1ce4/0x49a0 [ 309.413413][ C2] ? __pfx___sys_bpf+0x10/0x10 [ 309.414663][ C2] ? __schedule+0xefd/0x5750 [ 309.415868][ C2] ? do_futex+0x123/0x350 [ 309.417017][ C2] ? __pfx_do_futex+0x10/0x10 [ 309.418249][ C2] ? xfd_validate_state+0x5d/0x180 [ 309.419592][ C2] ? rcu_is_watching+0x12/0xc0 [ 309.420860][ C2] __x64_sys_bpf+0x78/0xc0 [ 309.421962][ C2] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.423314][ C2] do_syscall_64+0xcd/0x250 [ 309.424526][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.426172][ C2] RIP: 0033:0x7ff2d517dff9 [ 309.427379][ C2] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.432438][ C2] RSP: 002b:00007ff2d603f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.434608][ C2] RAX: ffffffffffffffda RBX: 00007ff2d5335f80 RCX: 00007ff2d517dff9 [ 309.436628][ C2] RDX: 0000000000000038 RSI: 00000000200006c0 RDI: 000000000000001a [ 309.438527][ C2] RBP: 00007ff2d51f0296 R08: 0000000000000000 R09: 0000000000000000 [ 309.440645][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.442723][ C2] R13: 0000000000000000 R14: 00007ff2d5335f80 R15: 00007fff0b5009e8 [ 309.444807][ C2] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.651841][ T1134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.655711][ T1134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.664394][ T9510] syz_tun (unregistering): left allmulticast mode [ 309.816141][ T829] usb 7-1: USB disconnect, device number 18 [ 309.820447][ T1134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.823075][ T1134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.928666][ T1134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.932304][ T1134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.019215][ T1134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.022047][ T1134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.125172][ T1134] bond1: left allmulticast mode [ 310.126463][ T1134] bridge1: left allmulticast mode [ 310.131108][ T1134] bond1: left promiscuous mode [ 310.132398][ T1134] bridge1: left promiscuous mode [ 310.138933][ T1134] bridge0: port 3(bond1) entered disabled state [ 310.141632][ T1134] bridge_slave_1: left allmulticast mode [ 310.143101][ T1134] bridge_slave_1: left promiscuous mode [ 310.144679][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.150796][ T1134] bridge_slave_0: left allmulticast mode [ 310.152373][ T1134] bridge_slave_0: left promiscuous mode [ 310.154224][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.285324][ T1134] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 310.360172][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.364741][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.369289][ T1134] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 310.372758][ T1134] batadv0: left promiscuous mode [ 310.376895][ T1134] bond0 (unregistering): Released all slaves [ 310.380539][ T1134] bond1 (unregistering): Released all slaves [ 310.504653][ T1134] IPVS: stopping master sync thread 7914 ... [ 310.626050][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.628053][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.632658][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.634670][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.640214][ T1134] veth1_macvtap: left promiscuous mode [ 310.641676][ T1134] veth0_macvtap: left promiscuous mode [ 310.643141][ T1134] veth1_vlan: left promiscuous mode [ 310.644625][ T1134] veth0_vlan: left promiscuous mode [ 310.904322][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 310.965947][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 311.531646][ T1134] IPVS: stop unused estimator thread 0... [ 311.646448][ T1134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.718610][ T1134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.788419][ T1134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.866968][ T1134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.042756][ T1134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.096219][ T1134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.157226][ T1134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.227221][ T1134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.314750][ T1134] bridge_slave_1: left allmulticast mode [ 312.316177][ T1134] bridge_slave_1: left promiscuous mode [ 312.317951][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.321251][ T1134] bridge_slave_0: left allmulticast mode [ 312.323264][ T1134] bridge_slave_0: left promiscuous mode [ 312.326963][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.333277][ T1134] bridge_slave_1: left allmulticast mode [ 312.335144][ T1134] bridge_slave_1: left promiscuous mode [ 312.337212][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.347001][ T1134] bridge_slave_0: left allmulticast mode [ 312.348931][ T1134] bridge_slave_0: left promiscuous mode [ 312.353491][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.359254][ T1134] bridge_slave_1: left allmulticast mode [ 312.361335][ T1134] bridge_slave_1: left promiscuous mode [ 312.363369][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.367390][ T1134] bridge_slave_0: left allmulticast mode [ 312.369020][ T1134] bridge_slave_0: left promiscuous mode [ 312.371107][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.676609][ T1134] bond0 (unregistering): Released all slaves [ 312.684729][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.689880][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.693325][ T1134] bond0 (unregistering): Released all slaves [ 312.698858][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.701905][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.705093][ T1134] bond0 (unregistering): Released all slaves [ 312.983958][ T39] kauditd_printk_skb: 1741 callbacks suppressed [ 312.983972][ T39] audit: type=1400 audit(1727857601.255:6962): avc: denied { search } for pid=9546 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.991963][ T39] audit: type=1400 audit(1727857601.255:6963): avc: denied { search } for pid=9546 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.000045][ T39] audit: type=1400 audit(1727857601.255:6964): avc: denied { search } for pid=9546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.002499][ T4817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.002706][ T9546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.002719][ T9546] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 313.002730][ T9546] audit: backlog limit exceeded [ 313.002933][ T9546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.002944][ T9546] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 313.002960][ T9546] audit: backlog limit exceeded [ 313.212704][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.215157][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.218282][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.220767][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.225591][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.227533][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.230174][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.232029][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.238237][ T1134] veth1_macvtap: left promiscuous mode [ 313.239649][ T1134] veth0_macvtap: left promiscuous mode [ 313.241119][ T1134] veth1_vlan: left promiscuous mode [ 313.242455][ T1134] veth0_vlan: left promiscuous mode [ 313.249758][ T1134] veth1_macvtap: left promiscuous mode [ 313.251194][ T1134] veth0_macvtap: left promiscuous mode [ 313.252601][ T1134] veth1_vlan: left promiscuous mode [ 313.254006][ T1134] veth0_vlan: left promiscuous mode [ 313.479181][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 313.520446][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 313.809901][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 313.862451][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 315.245825][ T1134] IPVS: stop unused estimator thread 0... [ 316.905363][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.907573][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.994760][ T39] kauditd_printk_skb: 2792 callbacks suppressed [ 317.994776][ T39] audit: type=1400 audit(1727857606.265:9746): avc: denied { search } for pid=9591 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.003904][ T39] audit: type=1400 audit(1727857606.265:9747): avc: denied { search } for pid=9591 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.011103][ T39] audit: type=1400 audit(1727857606.265:9748): avc: denied { search } for pid=9591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.018872][ T39] audit: type=1400 audit(1727857606.265:9749): avc: denied { search } for pid=9591 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.026311][ T39] audit: type=1400 audit(1727857606.265:9750): avc: denied { search } for pid=9590 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.031791][ T39] audit: type=1400 audit(1727857606.265:9751): avc: denied { search } for pid=9590 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.037518][ T39] audit: type=1400 audit(1727857606.265:9752): avc: denied { search } for pid=9590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.044778][ T39] audit: type=1400 audit(1727857606.265:9753): avc: denied { search } for pid=9590 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.052291][ T39] audit: type=1400 audit(1727857606.265:9754): avc: denied { search } for pid=9590 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.059693][ T39] audit: type=1400 audit(1727857606.265:9755): avc: denied { search } for pid=9590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 VM DIAGNOSIS: 08:26:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90003a590c0 RCX=ffffffff8b245894 RDX=fffff5200074b219 RSI=0000000000000004 RDI=ffffc90003a590c0 RBP=0000000000000003 RSP=ffffc90002887380 R8 =0000000000000000 R9 =fffff5200074b218 R10=ffffc90003a590c3 R11=00000000000a4001 R12=fffff5200074b218 R13=0000000000000000 R14=ffff88806a63fdc0 R15=0000000000000000 RIP=ffffffff8b2458d0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f173aed7500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564fc5963528 CR3=000000004302c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed3665010 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8521df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8521df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8521df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8521df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8521df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8521df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf9b10c2094602b2 9a979493779ea695 c6a436dcc8a7b48f 22231f759dd30999 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6202f772f58720d9 2bdd9807af794782 bc643fcd91bc4214 f10c1780b4ac3dc0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5534856a5ff9fe87 b6bf38b575cad9b1 84d5c9755db62949 58dbc4b79a3e9fd0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ab9e35c862b0f740 d0290b01aae1f60c edd64deb087da1ca 21174cbd457a9af3 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff813ca88e RDX=ffff888026ed0000 RSI=ffffffff813ca8ab RDI=0000000000000000 RBP=ffffc90003a590c0 RSP=ffffc900036a6d88 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a73fdc0 R15=fffff5200074b218 RIP=ffffffff813ca8ac RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558a9d9500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f173af54270 CR3=0000000053b06000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000100001ff Opmask02=00000000ffffffff Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005632e27c4220 00005632e278dfb0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8fbc6430 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8fbc5a10 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f30706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f716d2f30706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6fa7c4443f39594e 00000005632e279a 0000000000000131 000000302f716d2f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000363230302e46 4646463a46373430 3a333030302f302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6fa7c4443f39594e 000056378155cbff 00000000000000b1 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f45454d41490054 454e5f4449692e6e 6524004452414f42 4e4f5f454d414e5f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4445414d41450000 454e4c4449452e41 002400444c414442 004144454141424e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a6d05 RDI=ffffffff9aae1b80 RBP=ffffffff9aae1b40 RSP=ffffc900008576d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=ffffffff850a6ca0 R15=0000000000000000 RIP=ffffffff850a6d2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff2d603f6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002048c000 CR3=000000004ef78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000008 Opmask01=0000000000000000 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff936e1670 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000042800000005 00000270000001a0 ffffffff000000d0 0000000000000270 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6568745f69706361 2474616e65706f00 656c62616e655f6e 6170776f6c362474 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e65706f006c6f 72746e6f635f6e61 70776f6c36247461 6e65706f0074616e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90003a590c0 RCX=ffffffff8b245894 RDX=fffff5200074b219 RSI=0000000000000004 RDI=ffffc90003a590c0 RBP=0000000000000003 RSP=ffffc9000164f748 R8 =0000000000000000 R9 =fffff5200074b218 R10=ffffc90003a590c3 R11=00000000000a4001 R12=fffff5200074b218 R13=0000000000000000 R14=ffff88806a93fdc0 R15=0000000000000003 RIP=ffffffff81ef0550 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558bd61500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0561e26920 CR3=000000004f372000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010003003 Opmask01=0000000001000001 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6966696e752f7075 6f7267637a79732f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a79732f64656966 696e752f70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0561df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79732f0073636f72 702e70756f726763 2f73250078616d2e 736469702f732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c560a0056464a57 550b55504a574246 0a5600005d44480b 56414c550a560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000