last executing test programs: 1.387511317s ago: executing program 1 (id=246): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2, 0x80}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) 1.293227058s ago: executing program 1 (id=298): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.292798795s ago: executing program 1 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x1000, 0x8, 0xd}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='rxrpc_call_complete\x00', r1}, 0x10) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x8000}, 0x18) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) write$P9_RVERSION(r5, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r6, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x45c) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x7) recvmmsg(r7, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e21, 0x1, @mcast1}, {0xa, 0x4e24, 0x761, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0xffffffffffffffff, {[0x401, 0x5d2, 0x0, 0x800, 0xfffffff7, 0x7, 0x8, 0xc]}}, 0x5c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r10, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000500), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32], 0x20}}, 0x0) 1.266896089s ago: executing program 0 (id=300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x5c, r2, 0x103, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x5c}}, 0x0) 1.14459595s ago: executing program 0 (id=301): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) 993.592341ms ago: executing program 0 (id=302): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') pread64(r0, &(0x7f0000001880)=""/4096, 0x1000, 0x7) 917.212378ms ago: executing program 0 (id=303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 792.801399ms ago: executing program 0 (id=306): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000880), 0x4) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @private0, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r1, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x1e, &(0x7f0000000900), 0x8) bind$inet6(r2, &(0x7f0000000100), 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@datasec={0x3, 0x0, 0x0, 0xf, 0x3, [], "e953bb"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "b9"}]}, {0x0, [0x0, 0x0, 0x0, 0x1e]}}, 0x0, 0x3a}, 0x20) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ac38f5bd6e0630e369c7b35d21ff1f4d7ed79c31e2b0f1da"}, 0x3c) fsopen(&(0x7f0000000580)='sysv\x00', 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000000)={0x0, 0x400}) 581.655838ms ago: executing program 3 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a56004429"], 0x82) 545.23093ms ago: executing program 0 (id=310): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="f461", 0x2, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000600)=0x1b, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x65, 0x0, 0x0, 0xfffffffffffffffd}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x146) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) write$binfmt_misc(r2, &(0x7f0000000340)=ANY=[@ANYRES32], 0x6) recvmmsg(r2, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 479.815104ms ago: executing program 2 (id=274): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 433.346732ms ago: executing program 3 (id=311): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2711}, 0x10, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4081], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r3, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0xcaa3269332a152f6, 0x2, 0x21e}, &(0x7f00000008c0), 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @dev}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000f80)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRES32]) 359.260164ms ago: executing program 3 (id=312): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x5a45, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 286.215203ms ago: executing program 1 (id=313): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x3}}, 0x26) 285.899213ms ago: executing program 3 (id=314): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x1e8, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1c9, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x8c, {0x0, 0x0, 0x0, "9af6da3eccb31dfdb01e6e7177c98c64430a038b1a5dfa035ea7a9381b60d5573f7a471f2255656c6fda4f9fe2a1cefb7e307f95a05deb88da8d6767435855a59a04759977ef1cf00cf302f452d67e80c72e836d0cfcfd95ca366d0e284f1c03058e40a2283bb06b723df5c6eef98646cae544fd4eebdf5effc6f1ba5debee4b327b12000000000000"}}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x6, "1cb11f4c9767"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x65, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c"}, {0xdd, 0x6, "4f3fef835ea8"}]}}]}, 0x1e8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020, 0x0, 0x0, {0x2}}) r4 = memfd_secret(0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) fcntl$dupfd(r5, 0x0, r4) socket$caif_stream(0x25, 0x1, 0x1000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0xfffffffb) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x4c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x4c}}, 0x0) 283.965434ms ago: executing program 2 (id=315): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMSTART(r0, 0x127d) 224.298574ms ago: executing program 1 (id=316): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x0) fallocate(r0, 0x0, 0x0, 0x400001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}) lseek(r0, 0x0, 0x0) 198.684072ms ago: executing program 2 (id=317): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0) 115.407667ms ago: executing program 1 (id=318): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) vmsplice(r1, &(0x7f0000000600)=[{&(0x7f0000000240)="1d", 0x1}], 0x1, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x20000112) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000200)='R', 0x1}], 0x1, 0x0) 115.228897ms ago: executing program 2 (id=319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNGETVNETLE(r0, 0x400454cb, &(0x7f0000000980)) 16.965882ms ago: executing program 3 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x24}}, 0x0) 16.254471ms ago: executing program 2 (id=321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x38, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x38}}, 0x0) 16.088454ms ago: executing program 3 (id=322): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x300) syz_usb_disconnect(0xffffffffffffffff) 0s ago: executing program 2 (id=323): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x5a45, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) kernel console output (not intermixed with test programs): [ 45.301642][ T39] audit: type=1400 audit(1721235857.551:82): avc: denied { siginh } for pid=5120 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.636494][ T39] audit: type=1400 audit(1721235857.911:83): avc: denied { write } for pid=5123 comm="sftp-server" path="pipe:[1852]" dev="pipefs" ino=1852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.920390][ T39] audit: type=1400 audit(1721235858.191:84): avc: denied { read } for pid=4676 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 45.933712][ T39] audit: type=1400 audit(1721235858.191:85): avc: denied { append } for pid=4676 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.943367][ T39] audit: type=1400 audit(1721235858.191:86): avc: denied { open } for pid=4676 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.953100][ T39] audit: type=1400 audit(1721235858.191:87): avc: denied { getattr } for pid=4676 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:11076' (ED25519) to the list of known hosts. [ 49.404027][ T5174] cgroup: Unknown subsys name 'net' [ 49.570737][ T5174] cgroup: Unknown subsys name 'rlimit' [ 49.795661][ T5199] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.777604][ T5174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.646106][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 54.646117][ T39] audit: type=1400 audit(1721235866.921:105): avc: denied { execmem } for pid=5204 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.168601][ T39] audit: type=1400 audit(1721235867.441:106): avc: denied { mounton } for pid=5208 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 55.191602][ T39] audit: type=1400 audit(1721235867.441:107): avc: denied { mount } for pid=5208 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 55.201968][ T39] audit: type=1400 audit(1721235867.441:108): avc: denied { create } for pid=5208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.211182][ T39] audit: type=1400 audit(1721235867.441:109): avc: denied { read write } for pid=5208 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.212139][ T5213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.216994][ T5214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.220126][ T39] audit: type=1400 audit(1721235867.441:110): avc: denied { open } for pid=5208 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.226088][ T5221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.230016][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.230630][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.231723][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.233221][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.233771][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.234052][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.240670][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.241780][ T39] audit: type=1400 audit(1721235867.461:111): avc: denied { ioctl } for pid=5208 comm="syz-executor" path="socket:[1910]" dev="sockfs" ino=1910 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.244885][ T4639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.245454][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.246739][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.247617][ T5220] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.252882][ T39] audit: type=1400 audit(1721235867.521:112): avc: denied { read } for pid=5208 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.252930][ T39] audit: type=1400 audit(1721235867.521:113): avc: denied { open } for pid=5208 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.252973][ T39] audit: type=1400 audit(1721235867.521:114): avc: denied { mounton } for pid=5208 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.254588][ T4639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.257238][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.259089][ T5213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.261154][ T4639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.261799][ T4639] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.262095][ T4639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.324974][ T5213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.329517][ T5213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.333371][ T5213] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.337183][ T5213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.644533][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 55.685871][ T5211] chnl_net:caif_netlink_parms(): no params data found [ 55.811705][ T5208] chnl_net:caif_netlink_parms(): no params data found [ 55.920840][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.924721][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.927954][ T5215] bridge_slave_0: entered allmulticast mode [ 55.931873][ T5215] bridge_slave_0: entered promiscuous mode [ 55.940529][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 55.990948][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.994071][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.997322][ T5215] bridge_slave_1: entered allmulticast mode [ 56.000532][ T5215] bridge_slave_1: entered promiscuous mode [ 56.019941][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.022395][ T5211] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.025178][ T5211] bridge_slave_0: entered allmulticast mode [ 56.028323][ T5211] bridge_slave_0: entered promiscuous mode [ 56.081005][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.107518][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.110007][ T5211] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.112779][ T5211] bridge_slave_1: entered allmulticast mode [ 56.116224][ T5211] bridge_slave_1: entered promiscuous mode [ 56.141996][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.266522][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.269724][ T5208] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.273286][ T5208] bridge_slave_0: entered allmulticast mode [ 56.277835][ T5208] bridge_slave_0: entered promiscuous mode [ 56.310691][ T5215] team0: Port device team_slave_0 added [ 56.315432][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.317847][ T5208] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.320270][ T5208] bridge_slave_1: entered allmulticast mode [ 56.323747][ T5208] bridge_slave_1: entered promiscuous mode [ 56.329440][ T5211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.337717][ T5211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.342989][ T5215] team0: Port device team_slave_1 added [ 56.498563][ T5208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.505977][ T5208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.509182][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.511778][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.514348][ T5217] bridge_slave_0: entered allmulticast mode [ 56.517119][ T5217] bridge_slave_0: entered promiscuous mode [ 56.524452][ T5211] team0: Port device team_slave_0 added [ 56.528479][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.531527][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.542731][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.578596][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.581499][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.584309][ T5217] bridge_slave_1: entered allmulticast mode [ 56.588208][ T5217] bridge_slave_1: entered promiscuous mode [ 56.594541][ T5211] team0: Port device team_slave_1 added [ 56.624429][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.627524][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.638346][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.748386][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.751461][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.762617][ T5211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.770095][ T5208] team0: Port device team_slave_0 added [ 56.774208][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.780957][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.785909][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.788974][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.801034][ T5211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.808182][ T5208] team0: Port device team_slave_1 added [ 56.937059][ T5208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.939872][ T5208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.951067][ T5208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.961569][ T5217] team0: Port device team_slave_0 added [ 57.004242][ T5215] hsr_slave_0: entered promiscuous mode [ 57.007388][ T5215] hsr_slave_1: entered promiscuous mode [ 57.012544][ T5208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.015974][ T5208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.027269][ T5208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.033878][ T5217] team0: Port device team_slave_1 added [ 57.101315][ T5211] hsr_slave_0: entered promiscuous mode [ 57.106729][ T5211] hsr_slave_1: entered promiscuous mode [ 57.109956][ T5211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.113844][ T5211] Cannot create hsr debugfs directory [ 57.247220][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.249946][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.261192][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.267671][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.270467][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.280092][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.317290][ T5208] hsr_slave_0: entered promiscuous mode [ 57.320702][ T5208] hsr_slave_1: entered promiscuous mode [ 57.323783][ T5213] Bluetooth: hci1: command tx timeout [ 57.323803][ T5214] Bluetooth: hci2: command tx timeout [ 57.332141][ T5208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.333064][ T5213] Bluetooth: hci0: command tx timeout [ 57.335229][ T5208] Cannot create hsr debugfs directory [ 57.413522][ T5213] Bluetooth: hci3: command tx timeout [ 57.511902][ T5217] hsr_slave_0: entered promiscuous mode [ 57.519673][ T5217] hsr_slave_1: entered promiscuous mode [ 57.523631][ T5217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.526936][ T5217] Cannot create hsr debugfs directory [ 57.917249][ T5215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.926133][ T5215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.933979][ T5215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.940357][ T5215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.990530][ T5217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.999575][ T5217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.008460][ T5217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.015621][ T5217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.080709][ T5211] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.090919][ T5211] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.097935][ T5211] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.104589][ T5211] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.195991][ T5208] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.208389][ T5208] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.215912][ T5208] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.227226][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.232515][ T5208] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.283468][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.306484][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.315207][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.335232][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.339050][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.400187][ T5211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.415575][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.444939][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.469870][ T819] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.473109][ T819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.483214][ T5211] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.498156][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.501417][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.507537][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.510760][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.541958][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.561729][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.599565][ T5208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.686772][ T5208] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.715838][ T819] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.719112][ T819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.744532][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.749054][ T5246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.777465][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.861602][ T5215] veth0_vlan: entered promiscuous mode [ 58.879647][ T5211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.896023][ T5215] veth1_vlan: entered promiscuous mode [ 58.932558][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.951388][ T5211] veth0_vlan: entered promiscuous mode [ 58.968708][ T5215] veth0_macvtap: entered promiscuous mode [ 58.979202][ T5215] veth1_macvtap: entered promiscuous mode [ 58.986924][ T5211] veth1_vlan: entered promiscuous mode [ 59.010532][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.049430][ T5208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.063329][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.076497][ T5215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.080574][ T5215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.084830][ T5215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.088636][ T5215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.096228][ T5211] veth0_macvtap: entered promiscuous mode [ 59.103216][ T5217] veth0_vlan: entered promiscuous mode [ 59.117116][ T5211] veth1_macvtap: entered promiscuous mode [ 59.126729][ T5217] veth1_vlan: entered promiscuous mode [ 59.171964][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.177686][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.182599][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.206816][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.211306][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.218262][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.256829][ T5208] veth0_vlan: entered promiscuous mode [ 59.261306][ T5211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.265732][ T5211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.269476][ T5211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.273820][ T5211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.285590][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.289253][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.299800][ T5208] veth1_vlan: entered promiscuous mode [ 59.339842][ T5217] veth0_macvtap: entered promiscuous mode [ 59.346692][ T5217] veth1_macvtap: entered promiscuous mode [ 59.351662][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.355444][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.396381][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.400185][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.405198][ T5213] Bluetooth: hci0: command tx timeout [ 59.405468][ T5214] Bluetooth: hci1: command tx timeout [ 59.405548][ T5216] Bluetooth: hci2: command tx timeout [ 59.408785][ T5208] veth0_macvtap: entered promiscuous mode [ 59.418607][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.425041][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.429130][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.433010][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.438857][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.464433][ T5208] veth1_macvtap: entered promiscuous mode [ 59.469800][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.474685][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.479189][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.484293][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.490337][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.493599][ T5214] Bluetooth: hci3: command tx timeout [ 59.500026][ T5217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.500039][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.500056][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.505046][ T5217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.513982][ T5217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.517690][ T5217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.557002][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.561540][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.566516][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.570828][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.575619][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.580182][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.586606][ T5208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.604704][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.609275][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.614125][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.618896][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.623955][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.629366][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.636571][ T5208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.656135][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 59.656151][ T39] audit: type=1400 audit(1721235871.931:134): avc: denied { ioctl } for pid=5276 comm="syz.2.3" path="/dev/ppp" dev="devtmpfs" ino=714 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.687358][ T39] audit: type=1400 audit(1721235871.931:135): avc: denied { unmount } for pid=5215 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.687805][ T5208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.699324][ T5208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.703407][ T5208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.706905][ T5208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.709901][ T39] audit: type=1400 audit(1721235871.981:136): avc: denied { prog_load } for pid=5276 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.718066][ T39] audit: type=1400 audit(1721235871.981:137): avc: denied { bpf } for pid=5276 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.759866][ T39] audit: type=1400 audit(1721235872.031:138): avc: denied { create } for pid=5279 comm="syz.1.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 59.768955][ T39] audit: type=1400 audit(1721235872.031:139): avc: denied { getopt } for pid=5279 comm="syz.1.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 59.800028][ T39] audit: type=1400 audit(1721235872.071:140): avc: denied { create } for pid=5281 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.812873][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.816373][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.816468][ T39] audit: type=1400 audit(1721235872.081:141): avc: denied { perfmon } for pid=5281 comm="syz.1.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.847581][ T39] audit: type=1400 audit(1721235872.121:142): avc: denied { prog_run } for pid=5281 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.857368][ T39] audit: type=1400 audit(1721235872.121:143): avc: denied { map_create } for pid=5281 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.888091][ T5284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.898032][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.901282][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.936055][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.939537][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.011818][ T5289] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 60.018285][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.031812][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.052555][ T5289] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 60.112833][ T5295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 60.563916][ T5326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19'. [ 60.629144][ T5329] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 60.698792][ T5253] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.721584][ T5252] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.910136][ T5253] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 60.913990][ T5253] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.919701][ T5253] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 60.925312][ T5253] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.930911][ T5252] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 60.934942][ T5252] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.941024][ T5252] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 60.945353][ T5252] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.951380][ T5253] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 60.957003][ T5253] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 60.961666][ T5253] usb 6-1: Product: syz [ 60.964384][ T5253] usb 6-1: Manufacturer: syz [ 60.967620][ T5252] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 60.976421][ T5252] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 60.980593][ T5252] usb 7-1: Product: syz [ 60.982547][ T5252] usb 7-1: Manufacturer: syz [ 61.005084][ T5253] cdc_wdm 6-1:1.0: skipping garbage [ 61.008276][ T5253] cdc_wdm 6-1:1.0: skipping garbage [ 61.022458][ T5252] cdc_wdm 7-1:1.0: skipping garbage [ 61.026138][ T5253] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 61.029271][ T5253] cdc_wdm 6-1:1.0: Unknown control protocol [ 61.032307][ T5252] cdc_wdm 7-1:1.0: skipping garbage [ 61.036755][ T5252] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 61.039263][ T5252] cdc_wdm 7-1:1.0: Unknown control protocol [ 61.233813][ T5253] usb 6-1: USB disconnect, device number 2 [ 61.316182][ T5348] Cannot find del_set index 0 as target [ 61.469811][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30'. [ 61.619747][ T5214] Bluetooth: hci1: command tx timeout [ 61.621946][ T5214] Bluetooth: hci2: command tx timeout [ 61.677779][ T5363] netlink: 'syz.3.32': attribute type 20 has an invalid length. [ 61.696049][ T5214] Bluetooth: hci3: command tx timeout [ 62.001519][ T5373] xt_CT: No such helper "pptp" [ 62.153869][ T5379] Cannot find del_set index 0 as target [ 62.351800][ T5388] syz.3.40: attempt to access beyond end of device [ 62.351800][ T5388] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 62.357590][ T5388] EXT4-fs (loop3): unable to read superblock [ 63.222174][ T5427] Device name cannot be null; rc = [-22] [ 63.498085][ T819] usb 7-1: USB disconnect, device number 2 [ 63.527229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.632044][ T5441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.742655][ T5438] kvm: emulating exchange as write [ 63.873204][ T5214] Bluetooth: hci1: command tx timeout [ 63.875617][ T5213] Bluetooth: hci2: command tx timeout [ 63.949043][ T5213] Bluetooth: hci3: command tx timeout [ 63.997173][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 64.004776][ T5447] netlink: 72 bytes leftover after parsing attributes in process `syz.3.64'. [ 64.008994][ T5447] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 64.066591][ T5449] netlink: 'syz.3.65': attribute type 9 has an invalid length. [ 64.314029][ T5463] Cannot find del_set index 0 as target [ 64.402177][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 64.413283][ T5470] netlink: 72 bytes leftover after parsing attributes in process `syz.0.74'. [ 64.419034][ T5470] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 64.481535][ T5246] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.508056][ T5474] netlink: 'syz.0.76': attribute type 9 has an invalid length. [ 64.532175][ T5440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.551814][ T5475] Device name cannot be null; rc = [-22] [ 64.681898][ T5482] process 'syz.0.77' launched './file0' with NULL argv: empty string added [ 64.688942][ T5246] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 64.693273][ T5246] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.696622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.698454][ T5246] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 64.706230][ T5246] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.713786][ T5246] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 64.719617][ T5246] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.723314][ T5246] usb 8-1: Product: syz [ 64.725184][ T5246] usb 8-1: Manufacturer: syz [ 64.737450][ T5246] cdc_wdm 8-1:1.0: skipping garbage [ 64.742158][ T5246] cdc_wdm 8-1:1.0: skipping garbage [ 64.751556][ T5246] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 64.754529][ T5246] cdc_wdm 8-1:1.0: Unknown control protocol [ 64.969781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.975875][ T827] usb 8-1: USB disconnect, device number 2 [ 65.174591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.390580][ T39] kauditd_printk_skb: 77 callbacks suppressed [ 65.390594][ T39] audit: type=1400 audit(1721235877.236:221): avc: denied { create } for pid=5498 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.402548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.408743][ T39] audit: type=1326 audit(1721235877.254:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.0.82" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ce5975a99 code=0x0 [ 65.419286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.423098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 65.514713][ T39] audit: type=1400 audit(1721235877.356:223): avc: denied { read } for pid=5503 comm="syz.0.82" name="ptp0" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.518471][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 65.524946][ T39] audit: type=1400 audit(1721235877.356:224): avc: denied { open } for pid=5503 comm="syz.0.82" path="/dev/ptp0" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.529156][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 65.545731][ T39] audit: type=1400 audit(1721235877.356:225): avc: denied { ioctl } for pid=5503 comm="syz.0.82" path="/dev/ptp0" dev="devtmpfs" ino=713 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.547317][ T5509] netlink: 72 bytes leftover after parsing attributes in process `syz.1.84'. [ 65.560445][ T5509] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 65.619699][ T39] audit: type=1400 audit(1721235877.457:226): avc: denied { ioctl } for pid=5518 comm="syz.1.87" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8180 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.813370][ T39] audit: type=1400 audit(1721235877.642:227): avc: denied { getopt } for pid=5526 comm="syz.2.90" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.946190][ T5213] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 65.950726][ T5213] Bluetooth: hci0: Injecting HCI hardware error event [ 65.955176][ T5214] Bluetooth: hci0: hardware error 0x00 [ 66.088127][ T39] audit: type=1400 audit(1721235877.891:228): avc: denied { mounton } for pid=5526 comm="syz.2.90" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.122385][ T39] audit: type=1400 audit(1721235877.919:229): avc: denied { write } for pid=5526 comm="syz.2.90" name="udplite6" dev="proc" ino=4026533110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 66.332494][ T819] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.333258][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 66.339450][ T5545] netlink: 72 bytes leftover after parsing attributes in process `syz.0.97'. [ 66.342928][ T5545] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 66.427293][ T5552] netlink: 'syz.0.100': attribute type 9 has an invalid length. [ 66.570822][ T819] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 66.574481][ T819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.578902][ T819] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 66.585763][ T819] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.600583][ T819] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 66.603788][ T819] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 66.606479][ T819] usb 6-1: Product: syz [ 66.607896][ T819] usb 6-1: Manufacturer: syz [ 66.612427][ T819] cdc_wdm 6-1:1.0: skipping garbage [ 66.624344][ T819] cdc_wdm 6-1:1.0: skipping garbage [ 66.628069][ T819] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 66.630119][ T819] cdc_wdm 6-1:1.0: Unknown control protocol [ 66.848875][ T819] usb 6-1: USB disconnect, device number 3 [ 66.849704][ T5565] overlayfs: failed to decode file handle (len=2, type=251, flags=0, err=-22) [ 66.940711][ T39] audit: type=1400 audit(1721235878.675:230): avc: denied { getopt } for pid=5557 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.949310][ T5558] dvmrp0: entered allmulticast mode [ 66.952656][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 66.956927][ T5571] netlink: 72 bytes leftover after parsing attributes in process `syz.3.106'. [ 66.961888][ T5571] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 66.973644][ T5558] dvmrp0: left allmulticast mode [ 67.255561][ T5588] overlayfs: failed to decode file handle (len=2, type=251, flags=0, err=-22) [ 67.349743][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.355066][ T5594] netlink: 72 bytes leftover after parsing attributes in process `syz.3.116'. [ 67.361334][ T5594] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 67.867440][ T5602] dvmrp0: entered allmulticast mode [ 67.880923][ T5602] dvmrp0: left allmulticast mode [ 68.077654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.082332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.086133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.208156][ T5214] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 68.422049][ T5645] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.596844][ T5246] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.804826][ T5246] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.808847][ T5246] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.813542][ T5246] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.817414][ T5246] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.824400][ T5246] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.828527][ T5246] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.832158][ T5246] usb 8-1: Product: syz [ 68.834099][ T5246] usb 8-1: Manufacturer: syz [ 68.841914][ T5246] cdc_wdm 8-1:1.0: skipping garbage [ 68.844326][ T5246] cdc_wdm 8-1:1.0: skipping garbage [ 68.849115][ T5246] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 68.852596][ T5246] cdc_wdm 8-1:1.0: Unknown control protocol [ 69.068929][ T5246] usb 8-1: USB disconnect, device number 3 [ 69.638296][ T5673] syz.0.148 uses obsolete (PF_INET,SOCK_PACKET) [ 69.758436][ T5679] input: syz0 as /devices/virtual/input/input5 [ 70.146267][ T1939] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.364878][ T1939] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.367985][ T1939] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.371529][ T1939] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.379248][ T1939] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.386614][ T1939] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 70.389808][ T1939] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 70.393140][ T1939] usb 6-1: Product: syz [ 70.394972][ T1939] usb 6-1: Manufacturer: syz [ 70.402460][ T1939] cdc_wdm 6-1:1.0: skipping garbage [ 70.404672][ T1939] cdc_wdm 6-1:1.0: skipping garbage [ 70.412018][ T1939] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 70.414656][ T1939] cdc_wdm 6-1:1.0: Unknown control protocol [ 70.598619][ T5699] warning: `syz.2.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.135553][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 71.135567][ T39] audit: type=1326 audit(1721235882.552:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5709 comm="syz.2.163" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda91775a99 code=0x0 [ 71.261256][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 71.290988][ T5720] input: syz0 as /devices/virtual/input/input6 [ 71.550949][ T39] audit: type=1400 audit(1721235882.930:261): avc: denied { create } for pid=5732 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.560402][ T39] audit: type=1400 audit(1721235882.930:262): avc: denied { bind } for pid=5732 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.567511][ T39] audit: type=1400 audit(1721235882.940:263): avc: denied { listen } for pid=5732 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.575107][ T39] audit: type=1400 audit(1721235882.940:264): avc: denied { read } for pid=5732 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.898829][ T39] audit: type=1326 audit(1721235883.244:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.0.172" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ce5975a99 code=0x0 [ 72.155959][ T39] audit: type=1400 audit(1721235883.484:266): avc: denied { create } for pid=5749 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.169997][ T39] audit: type=1400 audit(1721235883.493:267): avc: denied { getopt } for pid=5749 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.233096][ T5754] input: syz0 as /devices/virtual/input/input7 [ 72.453186][ T39] audit: type=1400 audit(1721235883.761:268): avc: denied { read } for pid=5763 comm="syz.2.180" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.465831][ T39] audit: type=1400 audit(1721235883.761:269): avc: denied { open } for pid=5763 comm="syz.2.180" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.743053][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 72.997707][ T5246] usb 6-1: USB disconnect, device number 4 [ 73.417599][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 74.417819][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 74.798638][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'. [ 75.071398][ T5875] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 75.074436][ T5875] netlink: 'syz.2.225': attribute type 3 has an invalid length. [ 75.079251][ T5875] netlink: 224 bytes leftover after parsing attributes in process `syz.2.225'. [ 75.082587][ T5875] NCSI netlink: No device for ifindex 0 [ 75.090998][ T5877] netlink: 'syz.0.223': attribute type 10 has an invalid length. [ 75.110552][ T5877] team0: Port device netdevsim0 added [ 75.433173][ T5252] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.628266][ T5252] usb 5-1: Using ep0 maxpacket: 32 [ 75.631846][ T5252] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.635938][ T5252] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.641756][ T5252] usb 5-1: config 1 interface 0 has no altsetting 0 [ 75.645385][ T5252] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.648866][ T5252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.653491][ T5252] usb 5-1: SerialNumber: syz [ 75.663009][ T5252] cdc_ether 5-1:1.0: skipping garbage [ 75.665905][ T5252] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 75.886981][ T5252] usb 5-1: USB disconnect, device number 2 [ 76.192496][ T5904] ======================================================= [ 76.192496][ T5904] WARNING: The mand mount option has been deprecated and [ 76.192496][ T5904] and is ignored by this kernel. Remove the mand [ 76.192496][ T5904] option from the mount to silence this warning. [ 76.192496][ T5904] ======================================================= [ 76.410729][ T5910] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.240'. [ 76.530196][ T5918] capability: warning: `syz.0.243' uses deprecated v2 capabilities in a way that may be insecure [ 76.542149][ T5918] Bluetooth: MGMT ver 1.23 [ 76.557320][ T5913] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 41322 - 0 [ 76.560069][ T5913] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 41322 - 0 [ 76.562863][ T5913] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 41322 - 0 [ 76.565533][ T5913] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 41322 - 0 [ 76.568607][ T5913] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 41341 - 0 [ 76.572536][ T5913] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 41341 - 0 [ 76.575535][ T5913] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 41341 - 0 [ 76.578447][ T5913] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 41341 - 0 [ 76.581416][ T5913] geneve2: entered promiscuous mode [ 76.585954][ T5913] geneve2: entered allmulticast mode [ 76.619811][ T101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.696424][ T101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.789873][ T101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.801781][ T5213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.808275][ T5213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.813799][ T5213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.818777][ T5213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.823710][ T5213] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.828536][ T5213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.848208][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 76.848218][ T39] audit: type=1400 audit(1721235887.813:295): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.869863][ T101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.882090][ T5932] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.250'. [ 76.960975][ T5214] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 76.964285][ T5214] Bluetooth: hci1: Injecting HCI hardware error event [ 76.968186][ T5214] Bluetooth: hci1: hardware error 0x00 [ 77.229042][ T101] bridge_slave_1: left allmulticast mode [ 77.232212][ T101] bridge_slave_1: left promiscuous mode [ 77.235491][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.245368][ T101] bridge_slave_0: left allmulticast mode [ 77.247829][ T101] bridge_slave_0: left promiscuous mode [ 77.250187][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.287093][ T39] audit: type=1400 audit(1721235888.228:296): avc: denied { accept } for pid=5937 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.585891][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.593510][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.599508][ T101] bond0 (unregistering): Released all slaves [ 77.610914][ T5940] all: renamed from bridge_slave_0 (while UP) [ 77.758366][ T39] audit: type=1400 audit(1721235888.653:297): avc: denied { search } for pid=4914 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.767687][ T39] audit: type=1400 audit(1721235888.653:298): avc: denied { read } for pid=4914 comm="dhcpcd" name="n71" dev="tmpfs" ino=2328 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.777359][ T39] audit: type=1400 audit(1721235888.653:299): avc: denied { open } for pid=4914 comm="dhcpcd" path="/run/udev/data/n71" dev="tmpfs" ino=2328 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.788965][ T39] audit: type=1400 audit(1721235888.672:300): avc: denied { getattr } for pid=4914 comm="dhcpcd" path="/run/udev/data/n71" dev="tmpfs" ino=2328 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.795575][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 41403 - 0 [ 77.802163][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 41403 - 0 [ 77.807006][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 41403 - 0 [ 77.811103][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 41403 - 0 [ 77.817630][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 53574 - 0 [ 77.821603][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 53574 - 0 [ 77.825555][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 53574 - 0 [ 77.829645][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 53574 - 0 [ 77.833787][ T5950] geneve2: entered promiscuous mode [ 77.836179][ T5950] geneve2: entered allmulticast mode [ 77.851874][ T39] audit: type=1400 audit(1721235888.745:301): avc: denied { read } for pid=5957 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.870939][ T39] audit: type=1400 audit(1721235888.745:302): avc: denied { open } for pid=5957 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.882916][ T39] audit: type=1400 audit(1721235888.745:303): avc: denied { getattr } for pid=5957 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.894921][ T39] audit: type=1400 audit(1721235888.755:304): avc: denied { write } for pid=5956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.934433][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 78.134060][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.136745][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.139567][ T5928] bridge_slave_0: entered allmulticast mode [ 78.144376][ T5928] bridge_slave_0: entered promiscuous mode [ 78.154000][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.156577][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.159052][ T5928] bridge_slave_1: entered allmulticast mode [ 78.162990][ T5928] bridge_slave_1: entered promiscuous mode [ 78.233844][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.240061][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.295867][ T101] hsr_slave_0: left promiscuous mode [ 78.298086][ T101] hsr_slave_1: left promiscuous mode [ 78.300524][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.303309][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.307792][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.310049][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.332892][ T101] veth1_macvtap: left promiscuous mode [ 78.335724][ T101] veth0_macvtap: left promiscuous mode [ 78.339218][ T101] veth1_vlan: left promiscuous mode [ 78.341209][ T101] veth0_vlan: left promiscuous mode [ 78.689986][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.692614][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.042994][ T5213] Bluetooth: hci2: command tx timeout [ 79.115217][ T101] team0 (unregistering): Port device team_slave_1 removed [ 79.176120][ T101] team0 (unregistering): Port device team_slave_0 removed [ 79.205981][ T5214] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 79.741327][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 79.751020][ T5928] team0: Port device team_slave_0 added [ 79.761280][ T5928] team0: Port device team_slave_1 added [ 79.849157][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.852167][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.862265][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.867194][ T5990] overlayfs: failed to decode file handle (len=2, type=251, flags=0, err=-22) [ 79.868299][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.873719][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.886880][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.995678][ T5928] hsr_slave_0: entered promiscuous mode [ 80.015904][ T5928] hsr_slave_1: entered promiscuous mode [ 80.290170][ T5213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.296104][ T5213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.308600][ T5213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.313465][ T5213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.317210][ T5213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.323312][ T5213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.642433][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.653510][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41322 - 0 [ 80.658199][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 41341 - 0 [ 80.690273][ T5213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.694797][ T5213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.702917][ T5213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.707334][ T5213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.716891][ T5213] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.719979][ T5213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.770716][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.775144][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41322 - 0 [ 80.779695][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 41341 - 0 [ 80.793980][ T6005] chnl_net:caif_netlink_parms(): no params data found [ 80.967674][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.971827][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41322 - 0 [ 80.975827][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 41341 - 0 [ 80.984956][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.987393][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.990379][ T6005] bridge_slave_0: entered allmulticast mode [ 80.998271][ T6005] bridge_slave_0: entered promiscuous mode [ 81.005658][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.008515][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.011035][ T6005] bridge_slave_1: entered allmulticast mode [ 81.016672][ T6005] bridge_slave_1: entered promiscuous mode [ 81.082951][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.087604][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 41322 - 0 [ 81.092618][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 41341 - 0 [ 81.176921][ T6005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.203265][ T6005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.283780][ T5214] Bluetooth: hci2: command tx timeout [ 81.289324][ T6005] team0: Port device team_slave_0 added [ 81.298562][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.313410][ T6005] team0: Port device team_slave_1 added [ 81.330778][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.335114][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.344076][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.396663][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.398976][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.408664][ T6005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.467648][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.470782][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.479074][ T6005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.564373][ T101] bridge_slave_1: left allmulticast mode [ 81.566759][ T101] bridge_slave_1: left promiscuous mode [ 81.569226][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.575843][ T101] bridge_slave_0: left allmulticast mode [ 81.578562][ T101] bridge_slave_0: left promiscuous mode [ 81.601486][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.920930][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.929065][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.936126][ T101] bond0 (unregistering): Released all slaves [ 81.951587][ T6005] hsr_slave_0: entered promiscuous mode [ 81.954709][ T6005] hsr_slave_1: entered promiscuous mode [ 81.957633][ T6005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.960311][ T6005] Cannot create hsr debugfs directory [ 82.059685][ T6022] chnl_net:caif_netlink_parms(): no params data found [ 82.309266][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.312617][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.316981][ T6022] bridge_slave_0: entered allmulticast mode [ 82.320052][ T6022] bridge_slave_0: entered promiscuous mode [ 82.324365][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.327350][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.330384][ T6022] bridge_slave_1: entered allmulticast mode [ 82.335188][ T6022] bridge_slave_1: entered promiscuous mode [ 82.460772][ T6022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.467775][ T6022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.542692][ T6022] team0: Port device team_slave_0 added [ 82.548442][ T6022] team0: Port device team_slave_1 added [ 82.585353][ T5214] Bluetooth: hci1: command tx timeout [ 82.640818][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.658585][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.661751][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.673373][ T6022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.691634][ T101] hsr_slave_0: left promiscuous mode [ 82.694265][ T101] hsr_slave_1: left promiscuous mode [ 82.696817][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.699369][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.703555][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.706409][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.734626][ T101] veth1_macvtap: left promiscuous mode [ 82.736996][ T101] veth0_macvtap: left promiscuous mode [ 82.739133][ T101] veth1_vlan: left promiscuous mode [ 82.741026][ T101] veth0_vlan: left promiscuous mode [ 82.930901][ T5214] Bluetooth: hci3: command tx timeout [ 83.367931][ T6086] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 83.374103][ T101] team0 (unregistering): Port device team_slave_1 removed [ 83.434362][ T101] team0 (unregistering): Port device team_slave_0 removed [ 83.540239][ T5214] Bluetooth: hci2: command tx timeout [ 83.918393][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.921562][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.932927][ T6022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.065760][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.081306][ T6022] hsr_slave_0: entered promiscuous mode [ 84.085201][ T6022] hsr_slave_1: entered promiscuous mode [ 84.088424][ T6022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.092753][ T6022] Cannot create hsr debugfs directory [ 84.137964][ T1939] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.141007][ T1939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.148495][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 84.148508][ T39] audit: type=1400 audit(1721235894.560:317): avc: denied { read } for pid=6091 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.223751][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.227461][ T5248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.233923][ T58] cfg80211: failed to load regulatory.db [ 84.262603][ T6092] syzkaller1: entered promiscuous mode [ 84.266046][ T6092] syzkaller1: entered allmulticast mode [ 84.369009][ T6005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.383974][ T6005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.391887][ T6005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.417835][ T6022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.422420][ T6022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41403 - 0 [ 84.427153][ T6022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 53574 - 0 [ 84.444895][ T6005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.507494][ T39] audit: type=1400 audit(1721235894.883:318): avc: denied { sys_module } for pid=5928 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.531814][ T6022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.539928][ T6022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41403 - 0 [ 84.544485][ T6022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 53574 - 0 [ 84.605177][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.630482][ T6005] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.648716][ T6022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.654046][ T6022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41403 - 0 [ 84.658035][ T6022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 53574 - 0 [ 84.673969][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.684194][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.687239][ T5246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.705631][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.708601][ T5264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.721823][ T39] audit: type=1400 audit(1721235895.086:319): avc: denied { read } for pid=6108 comm="syz.0.289" name="sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.727479][ T6109] program syz.0.289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.731787][ T39] audit: type=1400 audit(1721235895.086:320): avc: denied { open } for pid=6108 comm="syz.0.289" path="/dev/sg0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.759616][ T6022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.764705][ T6022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 41403 - 0 [ 84.768396][ T6022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 53574 - 0 [ 84.778181][ T5928] veth0_vlan: entered promiscuous mode [ 84.795918][ T5928] veth1_vlan: entered promiscuous mode [ 84.837736][ T5214] Bluetooth: hci1: command tx timeout [ 84.846636][ T5928] veth0_macvtap: entered promiscuous mode [ 84.855648][ T5928] veth1_macvtap: entered promiscuous mode [ 84.861552][ T101] bridge_slave_1: left allmulticast mode [ 84.864365][ T101] bridge_slave_1: left promiscuous mode [ 84.867284][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.876386][ T101] bridge_slave_0: left allmulticast mode [ 84.878719][ T101] bridge_slave_0: left promiscuous mode [ 84.882149][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.952345][ T6116] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 85.184251][ T5214] Bluetooth: hci3: command tx timeout [ 85.232277][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.239245][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.245324][ T101] bond0 (unregistering): Released all slaves [ 85.265524][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.269716][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.275299][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.279520][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.286438][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.331017][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.336258][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.340771][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.345560][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.353660][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.396017][ T5928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.400084][ T5928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.403881][ T5928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.407221][ T5928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.411110][ T39] audit: type=1400 audit(1721235895.714:321): avc: denied { audit_read } for pid=6119 comm="syz.0.291" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.420982][ T39] audit: type=1400 audit(1721235895.723:322): avc: denied { mount } for pid=6119 comm="syz.0.291" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 85.435233][ T6022] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.443215][ T6022] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.460005][ T39] audit: type=1400 audit(1721235895.769:323): avc: denied { getopt } for pid=6121 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.497934][ T6022] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.506302][ T6022] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.517480][ T6124] netlink: 292 bytes leftover after parsing attributes in process `syz.0.293'. [ 85.528014][ T6005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.621603][ T39] audit: type=1400 audit(1721235895.917:324): avc: denied { create } for pid=6128 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 85.629808][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.633098][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.679381][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.681305][ T6005] veth0_vlan: entered promiscuous mode [ 85.684290][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.693864][ T101] hsr_slave_0: left promiscuous mode [ 85.697243][ T101] hsr_slave_1: left promiscuous mode [ 85.700684][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.704725][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.708841][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.712220][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.763767][ T101] veth1_macvtap: left promiscuous mode [ 85.766404][ T101] veth0_macvtap: left promiscuous mode [ 85.769309][ T101] veth1_vlan: left promiscuous mode [ 85.772138][ T101] veth0_vlan: left promiscuous mode [ 85.801806][ T5214] Bluetooth: hci2: command tx timeout [ 86.470375][ T101] team0 (unregistering): Port device team_slave_1 removed [ 86.533209][ T101] team0 (unregistering): Port device team_slave_0 removed [ 86.802418][ T6136] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 87.083869][ T6005] veth1_vlan: entered promiscuous mode [ 87.091110][ T5214] Bluetooth: hci1: command tx timeout [ 87.154409][ T6005] veth0_macvtap: entered promiscuous mode [ 87.163744][ T6005] veth1_macvtap: entered promiscuous mode [ 87.191758][ T6022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.202611][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.206889][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.210900][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.214950][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.219720][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.241093][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.244999][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.249187][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.254579][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.268612][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.275965][ T6005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.279807][ T6005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.283819][ T6005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.288407][ T6005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.322848][ T6022] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.334725][ T827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.337757][ T827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.351766][ T827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.354819][ T827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.437913][ T5214] Bluetooth: hci3: command tx timeout [ 87.443171][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.446538][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.483224][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.486321][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.585540][ T39] audit: type=1400 audit(1721235897.726:325): avc: denied { create } for pid=6155 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.596011][ T39] audit: type=1400 audit(1721235897.735:326): avc: denied { connect } for pid=6155 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.644880][ T6022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.694656][ T6022] veth0_vlan: entered promiscuous mode [ 87.706598][ T6022] veth1_vlan: entered promiscuous mode [ 87.730860][ T6022] veth0_macvtap: entered promiscuous mode [ 87.737433][ T6022] veth1_macvtap: entered promiscuous mode [ 87.752119][ T6166] capability: warning: `syz.3.307' uses 32-bit capabilities (legacy support in use) [ 87.754485][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.760322][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.765033][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.768967][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.772957][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.778832][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.784916][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.794353][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.800451][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.804128][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.809346][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.813665][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.818737][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.825480][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.836569][ T6022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.841779][ T6022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.845127][ T6022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.848238][ T6022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.907726][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.916853][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.942600][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.945938][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.377344][ T6200] tun0: tun_chr_ioctl cmd 1074025675 [ 88.382973][ T6200] tun0: persist enabled [ 88.385094][ T6200] tun0: tun_chr_ioctl cmd 1074025675 [ 88.386816][ T6200] tun0: persist enabled [ 88.540513][ C3] ================================================================== [ 88.544080][ C3] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2dd6/0x3b30 [ 88.547331][ C3] Read of size 8 at addr ffff888041ae4818 by task udevd/4694 [ 88.552844][ C3] [ 88.553972][ C3] CPU: 3 PID: 4694 Comm: udevd Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 88.558840][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.563995][ C3] Call Trace: [ 88.565534][ C3] [ 88.566856][ C3] dump_stack_lvl+0x116/0x1f0 [ 88.568570][ C3] print_report+0xc3/0x620 [ 88.570231][ C3] ? __virt_addr_valid+0x5e/0x590 [ 88.572095][ C3] ? __phys_addr+0xc6/0x150 [ 88.573753][ C3] kasan_report+0xd9/0x110 [ 88.575613][ C3] ? __lock_acquire+0x2dd6/0x3b30 [ 88.577620][ C3] ? __lock_acquire+0x2dd6/0x3b30 [ 88.580059][ C3] __lock_acquire+0x2dd6/0x3b30 [ 88.582276][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 88.584623][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 88.587065][ C3] lock_acquire+0x1b1/0x560 [ 88.589162][ C3] ? p9_req_put+0xca/0x250 [ 88.591253][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 88.593503][ C3] ? __pfx_lock_release+0x10/0x10 [ 88.595704][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 88.597912][ C3] ? p9_req_put+0xca/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.599935][ C3] p9_req_put+0xca/0x250 [ 88.602127][ C3] req_done+0x1e7/0x2f0 [ 88.604142][ C3] ? __pfx_req_done+0x10/0x10 [ 88.606187][ C3] ? __pfx_req_done+0x10/0x10 [ 88.608195][ C3] vring_interrupt+0x31b/0x400 [ 88.610319][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 88.612575][ C3] __handle_irq_event_percpu+0x229/0x7c0 [ 88.614997][ C3] handle_irq_event+0xab/0x1e0 [ 88.617089][ C3] handle_edge_irq+0x263/0xd10 [ 88.619193][ C3] __common_interrupt+0xdf/0x250 [ 88.621150][ C3] common_interrupt+0xab/0xd0 [ 88.623319][ C3] [ 88.624667][ C3] [ 88.625985][ C3] asm_common_interrupt+0x26/0x40 [ 88.628254][ C3] RIP: 0010:tomoyo_check_acl+0x317/0x410 [ 88.630920][ C3] Code: 0f 92 c7 31 ff 44 89 fe 66 89 44 24 16 e8 71 9e 49 fd 45 84 ff 75 29 e8 c7 a3 49 fd 0f b7 74 24 16 bf 00 01 00 00 48 83 c3 01 84 9e 49 fd 48 81 fb 00 01 00 00 75 a1 45 31 ff e9 c5 fe ff ff [ 88.639449][ C3] RSP: 0018:ffffc900046bf6e8 EFLAGS: 00000202 [ 88.642084][ C3] RAX: 0000000000000000 RBX: 00000000000000ce RCX: ffffffff844459df [ 88.645433][ C3] RDX: ffff88802aa04880 RSI: 00000000000000ce RDI: 0000000000000100 [ 88.648807][ C3] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 88.652340][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc900046bf7d8 [ 88.655862][ C3] R13: ffff888105af1e30 R14: 00000000000000cd R15: 0000000000000000 [ 88.659293][ C3] ? tomoyo_check_acl+0x2ff/0x410 [ 88.661525][ C3] ? tomoyo_check_acl+0x309/0x410 [ 88.663830][ C3] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 88.666546][ C3] tomoyo_path_permission+0x1ff/0x3b0 [ 88.668713][ C3] tomoyo_check_open_permission+0x377/0x3b0 [ 88.671147][ C3] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 88.673988][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 88.676181][ C3] ? __pfx_hook_file_open+0x10/0x10 [ 88.678461][ C3] ? path_get+0x61/0x80 [ 88.680371][ C3] tomoyo_file_open+0x71/0x90 [ 88.682239][ C3] security_file_open+0x78/0x8b0 [ 88.684248][ C3] do_dentry_open+0x5c7/0x15f0 [ 88.686505][ C3] ? inode_permission+0xdd/0x5f0 [ 88.688752][ C3] vfs_open+0x82/0x3f0 [ 88.690557][ C3] ? may_open+0x1f2/0x400 [ 88.692535][ C3] path_openat+0x2141/0x2d20 [ 88.694400][ C3] ? __pfx_path_openat+0x10/0x10 [ 88.696480][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 88.698660][ C3] ? find_held_lock+0x2d/0x110 [ 88.700582][ C3] do_filp_open+0x1dc/0x430 [ 88.702245][ C3] ? __pfx_do_filp_open+0x10/0x10 [ 88.704186][ C3] ? find_held_lock+0x2d/0x110 [ 88.706246][ C3] ? _raw_spin_unlock+0x28/0x50 [ 88.708164][ C3] ? alloc_fd+0x2d7/0x6c0 [ 88.709950][ C3] do_sys_openat2+0x17a/0x1e0 [ 88.712140][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.714273][ C3] __x64_sys_openat+0x175/0x210 [ 88.716360][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 88.718376][ C3] do_syscall_64+0xcd/0x250 [ 88.720108][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.722235][ C3] RIP: 0033:0x7fdda271a477 [ 88.724054][ C3] Code: 10 00 00 00 44 8b 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 82 69 0d 00 f7 d8 64 89 02 48 83 [ 88.731947][ C3] RSP: 002b:00007ffe00270a08 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 88.734838][ C3] RAX: ffffffffffffffda RBX: 0000561c4c2c13f0 RCX: 00007fdda271a477 [ 88.737429][ C3] RDX: 0000000000090800 RSI: 0000561c4c289f60 RDI: 00000000ffffff9c [ 88.740197][ C3] RBP: 0000561c4c304e60 R08: 0000000000090800 R09: 0000561c4c289f60 [ 88.743677][ C3] R10: 0000000000000000 R11: 0000000000000287 R12: 0000561c4c289f60 [ 88.747235][ C3] R13: 00000000000000ff R14: 0000561c4a77d1c4 R15: 0000000000000000 [ 88.750767][ C3] [ 88.752186][ C3] [ 88.753280][ C3] Allocated by task 6213: [ 88.755232][ C3] kasan_save_stack+0x33/0x60 [ 88.757353][ C3] kasan_save_track+0x14/0x30 [ 88.759485][ C3] __kasan_kmalloc+0xaa/0xb0 [ 88.761574][ C3] p9_client_create+0xcf/0x1210 [ 88.763759][ C3] v9fs_session_init+0x1f8/0x1a80 [ 88.766038][ C3] v9fs_mount+0xc6/0xaa0 [ 88.767809][ C3] legacy_get_tree+0x109/0x220 [ 88.769979][ C3] vfs_get_tree+0x8f/0x380 [ 88.772016][ C3] path_mount+0x14e6/0x1f20 [ 88.774076][ C3] __x64_sys_mount+0x294/0x320 [ 88.776226][ C3] do_syscall_64+0xcd/0x250 [ 88.778088][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.780541][ C3] [ 88.781637][ C3] Freed by task 6213: [ 88.783449][ C3] kasan_save_stack+0x33/0x60 [ 88.785584][ C3] kasan_save_track+0x14/0x30 [ 88.787678][ C3] kasan_save_free_info+0x3b/0x60 [ 88.789883][ C3] poison_slab_object+0xf7/0x160 [ 88.792065][ C3] __kasan_slab_free+0x32/0x50 [ 88.794143][ C3] kfree+0x12a/0x3b0 [ 88.795887][ C3] p9_client_create+0xaaa/0x1210 [ 88.798139][ C3] v9fs_session_init+0x1f8/0x1a80 [ 88.800480][ C3] v9fs_mount+0xc6/0xaa0 [ 88.802334][ C3] legacy_get_tree+0x109/0x220 [ 88.804431][ C3] vfs_get_tree+0x8f/0x380 [ 88.806367][ C3] path_mount+0x14e6/0x1f20 [ 88.808121][ C3] __x64_sys_mount+0x294/0x320 [ 88.809939][ C3] do_syscall_64+0xcd/0x250 [ 88.811685][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.813952][ C3] [ 88.814978][ C3] The buggy address belongs to the object at ffff888041ae4800 [ 88.814978][ C3] which belongs to the cache kmalloc-512 of size 512 [ 88.820841][ C3] The buggy address is located 24 bytes inside of [ 88.820841][ C3] freed 512-byte region [ffff888041ae4800, ffff888041ae4a00) [ 88.826866][ C3] [ 88.827933][ C3] The buggy address belongs to the physical page: [ 88.830668][ C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888041ae5400 pfn:0x41ae4 [ 88.834904][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.838639][ C3] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 88.842080][ C3] page_type: 0xffffefff(slab) [ 88.844167][ C3] raw: 00fff00000000040 ffff888015442c80 0000000000000000 0000000000000001 [ 88.847876][ C3] raw: ffff888041ae5400 000000008010000f 00000001ffffefff 0000000000000000 [ 88.851682][ C3] head: 00fff00000000040 ffff888015442c80 0000000000000000 0000000000000001 [ 88.855231][ C3] head: ffff888041ae5400 000000008010000f 00000001ffffefff 0000000000000000 [ 88.858476][ C3] head: 00fff00000000002 ffffea000106b901 ffffffffffffffff 0000000000000000 [ 88.862242][ C3] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 88.865901][ C3] page dumped because: kasan: bad access detected [ 88.868676][ C3] page_owner tracks the page as allocated [ 88.871126][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13, tgid 13 (kworker/u32:1), ts 84844165816, free_ts 84784867570 [ 88.880666][ C3] post_alloc_hook+0x2d1/0x350 [ 88.882831][ C3] get_page_from_freelist+0x1353/0x2e50 [ 88.885251][ C3] __alloc_pages_noprof+0x22b/0x2460 [ 88.887565][ C3] alloc_slab_page+0x56/0x110 [ 88.889642][ C3] new_slab+0x84/0x260 [ 88.891441][ C3] ___slab_alloc+0xdac/0x1870 [ 88.893518][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 88.895870][ C3] kmalloc_trace_noprof+0x2b4/0x300 [ 88.898122][ C3] __ipv6_dev_mc_inc+0x2b7/0xc50 [ 88.900288][ C3] addrconf_dad_work+0x232/0x1500 [ 88.902478][ C3] process_one_work+0x9c5/0x1b40 [ 88.904674][ C3] worker_thread+0x6c8/0xf20 [ 88.906812][ C3] kthread+0x2c1/0x3a0 [ 88.908558][ C3] ret_from_fork+0x45/0x80 [ 88.910519][ C3] ret_from_fork_asm+0x1a/0x30 [ 88.912639][ C3] page last free pid 5928 tgid 5928 stack trace: [ 88.915381][ C3] free_unref_page+0x64a/0xe40 [ 88.917471][ C3] stack_depot_save_flags+0x2da/0x8f0 [ 88.919779][ C3] kasan_save_stack+0x42/0x60 [ 88.921810][ C3] kasan_save_track+0x14/0x30 [ 88.923856][ C3] kasan_save_free_info+0x3b/0x60 [ 88.926029][ C3] poison_slab_object+0xf7/0x160 [ 88.928212][ C3] __kasan_slab_free+0x32/0x50 [ 88.930283][ C3] kfree+0x12a/0x3b0 [ 88.931922][ C3] __free_slab+0x145/0x180 [ 88.933666][ C3] __put_partials+0x14c/0x170 [ 88.935575][ C3] qlist_free_all+0x4e/0x140 [ 88.937584][ C3] kasan_quarantine_reduce+0x192/0x1e0 [ 88.939937][ C3] __kasan_slab_alloc+0x69/0x90 [ 88.942086][ C3] kmalloc_trace_noprof+0x11e/0x300 [ 88.944539][ C3] rtm_to_ifaddr.constprop.0+0x23c/0xd70 [ 88.946770][ C3] inet_rtm_newaddr+0x125/0xae0 [ 88.948902][ C3] [ 88.949950][ C3] Memory state around the buggy address: [ 88.952405][ C3] ffff888041ae4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.956026][ C3] ffff888041ae4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.959590][ C3] >ffff888041ae4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.963061][ C3] ^ [ 88.965113][ C3] ffff888041ae4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.968334][ C3] ffff888041ae4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.971795][ C3] ================================================================== [ 88.975285][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.978005][ C3] CPU: 3 PID: 4694 Comm: udevd Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 88.981847][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.986437][ C3] Call Trace: [ 88.987917][ C3] [ 88.989162][ C3] dump_stack_lvl+0x3d/0x1f0 [ 88.991227][ C3] panic+0x6f5/0x7a0 [ 88.992972][ C3] ? __pfx_panic+0x10/0x10 [ 88.994961][ C3] ? rcu_is_watching+0x12/0xc0 [ 88.996995][ C3] ? __pfx_lock_release+0x10/0x10 [ 88.999195][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 89.001262][ C3] check_panic_on_warn+0xab/0xb0 [ 89.003232][ C3] end_report+0x117/0x180 [ 89.005016][ C3] kasan_report+0xe9/0x110 [ 89.006949][ C3] ? __lock_acquire+0x2dd6/0x3b30 [ 89.009069][ C3] ? __lock_acquire+0x2dd6/0x3b30 [ 89.011255][ C3] __lock_acquire+0x2dd6/0x3b30 [ 89.013386][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 89.015649][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 89.017901][ C3] lock_acquire+0x1b1/0x560 [ 89.019922][ C3] ? p9_req_put+0xca/0x250 [ 89.021845][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 89.024072][ C3] ? __pfx_lock_release+0x10/0x10 [ 89.026296][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 89.028494][ C3] ? p9_req_put+0xca/0x250 [ 89.030436][ C3] p9_req_put+0xca/0x250 [ 89.032397][ C3] req_done+0x1e7/0x2f0 [ 89.034216][ C3] ? __pfx_req_done+0x10/0x10 [ 89.036280][ C3] ? __pfx_req_done+0x10/0x10 [ 89.038319][ C3] vring_interrupt+0x31b/0x400 [ 89.040406][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 89.042656][ C3] __handle_irq_event_percpu+0x229/0x7c0 [ 89.045143][ C3] handle_irq_event+0xab/0x1e0 [ 89.047293][ C3] handle_edge_irq+0x263/0xd10 [ 89.049373][ C3] __common_interrupt+0xdf/0x250 [ 89.051551][ C3] common_interrupt+0xab/0xd0 [ 89.053451][ C3] [ 89.054545][ C3] [ 89.055810][ C3] asm_common_interrupt+0x26/0x40 [ 89.057928][ C3] RIP: 0010:tomoyo_check_acl+0x317/0x410 [ 89.060268][ C3] Code: 0f 92 c7 31 ff 44 89 fe 66 89 44 24 16 e8 71 9e 49 fd 45 84 ff 75 29 e8 c7 a3 49 fd 0f b7 74 24 16 bf 00 01 00 00 48 83 c3 01 84 9e 49 fd 48 81 fb 00 01 00 00 75 a1 45 31 ff e9 c5 fe ff ff [ 89.068251][ C3] RSP: 0018:ffffc900046bf6e8 EFLAGS: 00000202 [ 89.070907][ C3] RAX: 0000000000000000 RBX: 00000000000000ce RCX: ffffffff844459df [ 89.073995][ C3] RDX: ffff88802aa04880 RSI: 00000000000000ce RDI: 0000000000000100 [ 89.077077][ C3] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 89.080134][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc900046bf7d8 [ 89.083265][ C3] R13: ffff888105af1e30 R14: 00000000000000cd R15: 0000000000000000 [ 89.086396][ C3] ? tomoyo_check_acl+0x2ff/0x410 [ 89.088465][ C3] ? tomoyo_check_acl+0x309/0x410 [ 89.090587][ C3] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 89.093158][ C3] tomoyo_path_permission+0x1ff/0x3b0 [ 89.095443][ C3] tomoyo_check_open_permission+0x377/0x3b0 [ 89.098041][ C3] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 89.100844][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 89.103062][ C3] ? __pfx_hook_file_open+0x10/0x10 [ 89.105009][ C3] ? path_get+0x61/0x80 [ 89.106603][ C3] tomoyo_file_open+0x71/0x90 [ 89.108399][ C3] security_file_open+0x78/0x8b0 [ 89.110266][ C3] do_dentry_open+0x5c7/0x15f0 [ 89.112350][ C3] ? inode_permission+0xdd/0x5f0 [ 89.114714][ C3] vfs_open+0x82/0x3f0 [ 89.116308][ C3] ? may_open+0x1f2/0x400 [ 89.117987][ C3] path_openat+0x2141/0x2d20 [ 89.119884][ C3] ? __pfx_path_openat+0x10/0x10 [ 89.121839][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 89.123812][ C3] ? find_held_lock+0x2d/0x110 [ 89.125443][ C3] do_filp_open+0x1dc/0x430 [ 89.127038][ C3] ? __pfx_do_filp_open+0x10/0x10 [ 89.129118][ C3] ? find_held_lock+0x2d/0x110 [ 89.131100][ C3] ? _raw_spin_unlock+0x28/0x50 [ 89.133039][ C3] ? alloc_fd+0x2d7/0x6c0 [ 89.134793][ C3] do_sys_openat2+0x17a/0x1e0 [ 89.136749][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.138674][ C3] __x64_sys_openat+0x175/0x210 [ 89.140356][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 89.142412][ C3] do_syscall_64+0xcd/0x250 [ 89.144440][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.146654][ C3] RIP: 0033:0x7fdda271a477 [ 89.148002][ C3] Code: 10 00 00 00 44 8b 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 82 69 0d 00 f7 d8 64 89 02 48 83 [ 89.155239][ C3] RSP: 002b:00007ffe00270a08 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 89.158117][ C3] RAX: ffffffffffffffda RBX: 0000561c4c2c13f0 RCX: 00007fdda271a477 [ 89.161422][ C3] RDX: 0000000000090800 RSI: 0000561c4c289f60 RDI: 00000000ffffff9c [ 89.164604][ C3] RBP: 0000561c4c304e60 R08: 0000000000090800 R09: 0000561c4c289f60 [ 89.167593][ C3] R10: 0000000000000000 R11: 0000000000000287 R12: 0000561c4c289f60 [ 89.170811][ C3] R13: 00000000000000ff R14: 0000561c4a77d1c4 R15: 0000000000000000 [ 89.173651][ C3] [ 89.175314][ C3] Kernel Offset: disabled [ 89.176784][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:05:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff92000687ec3 RCX=ffffffff81f4f8cd RDX=ffff88802be28000 RSI=0000000000000001 RDI=000000000002a8f2 RBP=000000000002a8f2 RSP=ffffc9000343f5f0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=0000000080000001 R13=0000000000000001 R14=0000000000000001 R15=ffffea0000aa3c80 RIP=ffffffff81f4e7cb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e317ff8 CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000054 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a073 ffffffff8100a073 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a073 ffffffff8100a073 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a073 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36325e4337 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36325e4344 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36325e433e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36325e4352 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36325e43d8 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36325e44b6 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36326d4488 00007f36326d4480 00007f36326d4478 00007f36326d4450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f363323d100 00007f36326d4440 00007f3600040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36326d4498 00007f36326d4490 00007f36326d4488 00007f36326d4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000180 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff9018d754 RCX=ffffffff813d0cd4 RDX=ffff88802bf98000 RSI=ffffffff813d0c73 RDI=0000000000000006 RBP=ffffffff9018d750 RSP=ffffc900035f75d0 R8 =0000000000000006 R9 =ffffffff84458558 R10=ffffffff844584b5 R11=0000000000000003 R12=ffffffff84458558 R13=ffffffff844584b5 R14=dffffc0000000000 R15=ffffffff9018d750 RIP=ffffffff818dfdb0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555d4e4500 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc6fa2cd28 CR3=000000004ce8c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6fa2d4e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f901a7e4337 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f901a7e4344 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f901a7e433e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f901a7e4352 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f901a7e43d8 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f901a7e44b6 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 00000000000001b4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000070ac3 RBX=0000000000000002 RCX=ffffffff8aebe9a9 RDX=0000000000000000 RSI=ffffffff8b2cb4c0 RDI=ffffffff8b904ee0 RBP=ffffed1002fd9000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d646fe1 R10=ffff88806b237f0b R11=0000000000000000 R12=0000000000000002 R13=ffff888017ec8000 R14=ffffffff8fe540d8 R15=0000000000000000 RIP=ffffffff8aebfd9f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020ec4000 CR3=000000002f8ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000080811 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0026ffe0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff00ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64007265646e6962 0000561c4c28d49f 0000000000000031 00003300302e7465 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4489147c13d0b1c1 000056192dee2b5a 0000000000000031 0000000000000033 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fe3125 RDI=ffffffff94dff3e0 RBP=ffffffff94dff3a0 RSP=ffffc90000908610 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006b R14=ffffffff84fe30c0 R15=0000000000000000 RIP=ffffffff84fe314f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdda2b66280 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe4b0359620 CR3=000000002b2dc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=00000000300001ff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561c4c2a7730 0000561c4c28df50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe00270a60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe00270000 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c732f31706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c732f31706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73753a725f746365 6a626f3a746f6f72 0000000000000031 00736576616c732f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4489147c13d0b1c1 000056192ded60dd 0000000000000111 0000000000000033 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020