last executing test programs: 2.004869246s ago: executing program 1 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000"], 0x9c}}, 0x0) 1.981664921s ago: executing program 3 (id=488): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r5}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000280)={0x0, r5}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4880) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='sysv\x00', 0x1008000, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="500000000000000000000000070000000b0d254ceb2f6c6daf94e750f18615000000030007c244a5770a000892196b2ac88e891741ac141438ac1414bb7f00000164010101ac1414388307a6ac1414301c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bb0a010101000000001c000000000000000000000008"], 0xc0}}], 0x1, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.873308741s ago: executing program 3 (id=490): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000008e283e348fde7d8ebad05d2836daedfecdbd199e511098f949b1a207d9f00d11144d0377a6accfed34064db8c3e7219605e5ab17aec7313beced977bed6921ad3527b6517e01d2ffdbb6eb185e4d48298af1a627d1", @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x400042, 0x3c) close(r6) r7 = fanotify_init(0x8, 0x0) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000240)) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000200), 0x4) socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setresgid(r10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r12) sendmmsg$unix(r11, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r12}}}], 0x20}}], 0x2, 0x0) fanotify_mark(r7, 0x51, 0x8000038, r8, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r13, 0x0) r14 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r14, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(r13, 0x0, 0x0, 0x0) 1.868094157s ago: executing program 1 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e80)={0x7c, r2, 0x5, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x7c}}, 0x0) 1.722984793s ago: executing program 3 (id=494): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"0e080000000000000000000004000001"}}}}, 0x118) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x0) sendmsg$inet6(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001d3"], 0x28}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0xfffffffc, 0x0) r6 = gettid() write$cgroup_pid(r5, &(0x7f00000002c0)=r6, 0x12) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$uinput_user_dev(r10, &(0x7f0000000700)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.665354306s ago: executing program 1 (id=496): request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)='/\x00', 0xfffffffffffffffe) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) (fail_nth: 5) 1.383690212s ago: executing program 1 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000"], 0x9c}}, 0x0) 1.323633186s ago: executing program 1 (id=500): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='virtio_transport_alloc_pkt\x00'}, 0x10) bind$x25(0xffffffffffffffff, &(0x7f0000000240), 0x12) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b43a4aaaaaaaa00080045000500000000000000907800000000ffffffffe000907800000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1114, &(0x7f0000000240)={0x0, 0x0, 0x80, 0x1}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) pselect6(0x40, &(0x7f00000001c0)={0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080), 0x8) 1.248882849s ago: executing program 3 (id=501): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0xe, 0x2, 0x0, 0x18, 0x0, 0x62}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0xc0096616, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r2, &(0x7f000000e700)=[{{&(0x7f00000024c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002540)=""/82, 0x52}, {&(0x7f00000025c0)=""/53, 0x35}, {0x0}, {&(0x7f0000003600)=""/130, 0x82}], 0x4, &(0x7f0000003700)=""/61, 0x3d}, 0x1}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000003740)=""/181, 0xb5}, {&(0x7f0000003800)=""/163, 0xa3}, {&(0x7f00000038c0)=""/193, 0xc1}, {&(0x7f0000003ac0)=""/47, 0x2f}, {&(0x7f0000003b00)=""/246, 0xf6}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/233, 0xe9}], 0x8, &(0x7f0000005dc0)=""/77, 0x4d}, 0x9}, {{&(0x7f0000005e40)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000007240)=[{&(0x7f0000005ec0)=""/143, 0x8f}, {&(0x7f0000005f80)=""/143, 0x8f}, {&(0x7f0000006040)=""/84, 0x54}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/134, 0x86}], 0x5}, 0x5}, {{&(0x7f00000072c0)=@vsock, 0x80, &(0x7f0000008440)=[{&(0x7f0000007340)=""/179, 0xb3}, {&(0x7f0000007400)=""/4096, 0x1000}, {&(0x7f0000008500)=""/130, 0x82}], 0x3, &(0x7f0000008680)=""/211, 0xd3}, 0x3b5f}, {{&(0x7f000000ce80)=@llc, 0x80, &(0x7f000000d040)=[{&(0x7f000000cf00)=""/24, 0x18}, {&(0x7f000000cf40)=""/235, 0xeb}], 0x2}}, {{&(0x7f000000d080)=@nl, 0x80, &(0x7f000000d200)=[{&(0x7f000000d100)=""/26, 0x1a}, {&(0x7f000000d140)=""/8, 0x8}, {&(0x7f000000d180)=""/37, 0x25}, {&(0x7f000000d1c0)}], 0x4, &(0x7f000000d240)=""/7, 0x7}}, {{&(0x7f000000d280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f000000e680)=[{&(0x7f000000d300)=""/136, 0x88}, {&(0x7f000000d3c0)=""/169, 0xa9}, {&(0x7f000000d480)=""/204, 0xcc}, {&(0x7f000000d580)=""/76, 0x4c}, {&(0x7f000000d600)=""/4096, 0x1000}, {&(0x7f000000e600)=""/93, 0x5d}], 0x6}, 0x8}], 0x7, 0x40000100, &(0x7f000000e980)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r5 = open(&(0x7f0000000240)='./bus\x00', 0x10d27e, 0x0) fallocate(r5, 0x0, 0x0, 0x7fff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x4d, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4f, 0x2}}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/71) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_evict_inode\x00', r6}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 712.070121ms ago: executing program 0 (id=503): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000008e283e348fde7d8ebad05d2836daedfecdbd199e511098f949b1a207d9f00d11144d0377a6accfed34064db8c3e7219605e5ab17aec7313beced977bed6921ad3527b6517e01d2ffdbb6eb185e4d48298af1a627d1", @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x400042, 0x3c) close(r6) r7 = fanotify_init(0x8, 0x0) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000240)) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000200), 0x4) socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setresgid(r10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r12) sendmmsg$unix(r11, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r12}}}], 0x20}}], 0x2, 0x0) fanotify_mark(r7, 0x51, 0x8000038, r8, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r13, 0x0) r14 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r14, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(r13, 0x0, 0x0, 0x0) 657.611738ms ago: executing program 0 (id=505): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6d, &(0x7f0000000640)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x5f, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, @source_quench={0x4, 0x0, 0x0, 0x0, {0xf, 0x4, 0x1, 0x0, 0x7, 0x66, 0x34a2, 0x9, 0x96, 0x59e3, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0x28, 0xc5, 0x0, 0x0, [0x6, 0x9, 0x7, 0x8df1, 0x5, 0x6, 0x7, 0x8, 0x8]}]}}, "c497020b24c3a7"}}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r7, @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="0800050001000000b4000880"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) close(r8) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, 0x1c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000400)={0x0, @rand_addr, @initdev}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x17cb3325c5736d94}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, r9, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x64008001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) socket(0x11, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800001f200001000000000000000000020000000000000000000000080017004e234e2108000d000000000005001500000000000c000c4000005bc10000000008000e0000000000"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) 542.837243ms ago: executing program 1 (id=506): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000058c0)=@newtfilter={0x40, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfffb}}]}}]}, 0x40}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @remote}, 0x10) r5 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r5, &(0x7f0000000800)={{0x500}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100039040093d172c2792be8bf000000", @ANYRES32=r7, @ANYBLOB="00080000000000002000128008000100677265"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001000)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001300)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fedbdf25150000004000018008000300000000000800030001000000080003000100000008000300000000000800030001000000140002006d6163766c616e3100000000000000001c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c00018008000100a66a343497359f76b8219c9518ecd9b854842844933a9de76f2bcd2c39fa93301b0d1b83118f1603e6b1aa8cb4e0005a47389db72cd7786cbb975d9339f103ab6125e7e4f87ebadfeefa462bb91afffe4019ecd7eaf169b3f78e5b9685fa9577d6ce302f11f121ed", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000006c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f300000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020074756e6c3000000000000000000000004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e300000000000001400020077673200000000000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="040001800c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="5c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020076657468305f746f5f62726964676500140002007866726d30000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="240001800800030001000000080003000100000008000300020000000800030003000000"], 0x1e8}}, 0x200000c0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xfff1, 0xffff}, {0xe, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@deltclass={0x38, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x5, 0x3}, {0x8, 0x3}, {0x1, 0xffff}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x52, 0xf8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000014) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f00000007c0)={0x748, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xf87, 0x2, 0x80, 0x4}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000000}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x94, 0xfc, 0x7, 0xffffffff}, {0x5, 0x0, 0x81, 0x401}, {0x3a0, 0x1, 0x2, 0x9}, {0x5, 0x8, 0x0, 0x7ff}, {0x6, 0x81, 0x2, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xdff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8000, 0x8, 0x7}, {0x8, 0x1, 0x7c, 0xffffffff}, {0x8000, 0x2, 0xb, 0x5}, {0x8, 0x9, 0x3, 0x80000000}, {0x2, 0x7, 0x5, 0xfffffff8}, {0x7, 0x7, 0x6, 0x10}, {0xb, 0x8, 0x1, 0x7}]}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x6, 0x5, 0xbd}, {0x8, 0x2, 0x0, 0xdc2}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x26a}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x89d}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x748}}, 0x80) socket$kcm(0x11, 0xa, 0x300) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r13, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) 484.050282ms ago: executing program 0 (id=507): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (fail_nth: 5) 479.380692ms ago: executing program 2 (id=508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000"], 0x9c}}, 0x0) 478.950813ms ago: executing program 0 (id=509): syz_emit_vhci(0x0, 0x22) (async) syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040b0b050100baff000001000000", @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="41b3d9ac25cbd60469cc5cce754c77804e35090a218ab56742648f6186fc19d3750af7e45f76faf5f855c28759bc2c3edd382814441048d382c47e858720b6693a2150a7d85e9a9e0de15ae1dc16", @ANYRESDEC], 0xe) (async) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040b0b050100baff000001000000", @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="41b3d9ac25cbd60469cc5cce754c77804e35090a218ab56742648f6186fc19d3750af7e45f76faf5f855c28759bc2c3edd382814441048d382c47e858720b6693a2150a7d85e9a9e0de15ae1dc16", @ANYRESDEC], 0xe) syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0xd) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000080)={0x0, &(0x7f0000000340)=""/108, 0x6c}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000740)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x0, 0x800, @empty, 0x1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r1, 0x0, r1) (async) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x20000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0409007a7c28e8"], 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0409007a7c28e8"], 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02cb0012000e00050014000a0000000700ffff00000700", @ANYRESHEX=r4, @ANYRESDEC=r4, @ANYRESDEC=r0], 0x17) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="03c800e78aa4c90289febcbfdf70b1c2e1041053587f8b2a7f9fac5f1fe9fe845eff17625c579c754eb9f115e32ec9c54ff30a65aa8e9a681dd8c4d980118da19473c5498634ce0118233c9fff8881b6c325e382d448b1b6915005dfe3db580812052c0823442ce4186c214f1d0a3f59d73431e3c2feaa47526e35686fd36ce98fce255c272f1927d75408ed821f196ec1d0308ef2e8a333b2d91d501bdfc89a9c2bd420bf135c24cc9f3353b8ee8ab5404884b9416a010000002bdcbbedaec185f7e5b526e45a7fcda92d50c91a39fbc972be262d8fba287814fd32ff3405556487e518c1674c650c9d52"], 0xeb) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfffffffffffffff9, 0x88b}, 0x0) 433.193193ms ago: executing program 2 (id=510): syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@routing={0x84}]}}}}}, 0x0) (fail_nth: 5) 283.825798ms ago: executing program 2 (id=511): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @private, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'nq\x00'}, 0x2c) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @private}, &(0x7f0000000380)=0xc) openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x2, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\a', @ANYRES16], 0xd) r3 = getegid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) r6 = geteuid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000300)="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", 0x2000, &(0x7f0000003480)={&(0x7f0000000200)={0x50, 0x0, 0x7fffffffffffffff, {0x7, 0x27, 0xb8f1, 0x2461100, 0x7ff, 0x4, 0x3, 0x5}}, &(0x7f0000000280)={0x18, 0xfffffffffffffff5, 0x1, {0x7}}, &(0x7f0000002300)={0x18, 0x0, 0x400, {0x7f}}, &(0x7f0000002340)={0x18, 0x0, 0x1, {0x401}}, &(0x7f0000002380)={0x18, 0x0, 0xffff, {0x7ff}}, &(0x7f00000023c0)={0x28, 0x0, 0xfe, {{0x9, 0x3ef, 0x1}}}, &(0x7f0000002400)={0x60, 0x0, 0x1, {{0x3, 0x4, 0x7, 0x40, 0x7, 0x3, 0x4, 0x8}}}, &(0x7f0000002480)={0x18, 0x0, 0x1, {0xff}}, &(0x7f00000024c0)={0x29, 0xfffffffffffffff5, 0x100, {'trusted.overlay.redirect\x00'}}, &(0x7f0000002500)={0x20, 0x0, 0x1000000000, {0x0, 0x6}}, &(0x7f0000002600)={0x78, 0x0, 0xd2e, {0x6, 0x0, 0x0, {0x1, 0x4b, 0xfffffffffffffffb, 0xb73, 0x6, 0x2, 0x5, 0x8, 0x4, 0x0, 0xdcc, 0x0, 0xffffffffffffffff, 0xe5c, 0x9}}}, &(0x7f0000002680)={0x90, 0x0, 0x1b4, {0x3, 0x0, 0x2, 0x0, 0x6, 0x0, {0x3, 0x0, 0x3f, 0x4, 0x9, 0x2, 0x5, 0x5, 0x7, 0xc000, 0xffff, 0x0, r3, 0x8000, 0x1}}}, 0x0, &(0x7f0000002e00)={0x558, 0x0, 0x2, [{{0x3, 0x3, 0x8, 0x2, 0x8000, 0x8, {0x4, 0x80000001, 0x7, 0x0, 0x9, 0xeca, 0x2, 0x0, 0x7, 0xa000, 0x3, 0x0, r3, 0x3, 0x6b}}, {0x0, 0x8, 0x19, 0x5f0a, 'trusted.overlay.redirect\x00'}}, {{0x1, 0x0, 0x5, 0x8, 0x8, 0x3, {0x2, 0x1, 0x8000, 0x3ff, 0x3ff, 0x200, 0x20, 0x8001, 0x2, 0x6000, 0x1, 0x0, r3, 0x4, 0x4}}, {0x3, 0x6, 0xa, 0x1, '/dev/ptp0\x00'}}, {{0x1, 0x1, 0x2f, 0x9, 0x7, 0xcd97, {0x7f, 0x48, 0xff, 0x9, 0x9, 0x7, 0x6, 0x8001, 0x901b, 0x8000, 0x3ff, 0x0, r3, 0x1, 0x472}}, {0x3, 0x7f, 0xa, 0x800, '/dev/ptp0\x00'}}, {{0x0, 0x0, 0x3, 0xffffffffffff0000, 0x9, 0x1, {0x4, 0x0, 0x42, 0x3d72, 0x1, 0x4, 0x1000, 0x7, 0x0, 0x4000, 0x1, 0x0, 0x0, 0x8000, 0xea6d}}, {0x4, 0x1, 0x14, 0xfffffff9, '/dev/dri/renderD128\x00'}}, {{0x1, 0x0, 0x80000001, 0x8001, 0x200, 0x0, {0x4, 0xfffffffffffffffe, 0x10001, 0x5, 0xfa, 0x1000, 0x101, 0x7f, 0x10000, 0x6000, 0x2, 0x0, r3, 0x6, 0x6}}, {0x6, 0x5, 0xf, 0x0, '/dev/cpu/#/msr\x00'}}, {{0x81, 0x0, 0x0, 0xdec, 0x800, 0x1, {0x6, 0x3, 0xff1d, 0xffffffff, 0x8, 0x4, 0x6, 0x5, 0x3, 0xc000, 0x1, r5, 0x0, 0xcb4b, 0x80000001}}, {0x0, 0x1ff, 0x3, 0x0, '*-%'}}, {{0x1, 0x2, 0x4, 0x474, 0x7, 0x8000, {0x6, 0x8, 0xc0, 0x3f, 0x1, 0x80000000, 0x7ff, 0x0, 0xbc0, 0x4000, 0x100, r6, r3, 0x9, 0x100}}, {0x6, 0x1, 0xf, 0x2, '/dev/cpu/#/msr\x00'}}, {{0x3, 0x2, 0x321, 0x1, 0x8, 0x1, {0x1, 0x4, 0x1, 0xfffffffffffffffd, 0xef1, 0x2, 0x80000000, 0x0, 0x5, 0xc000, 0x3, 0x0, r3, 0x8, 0x3ff}}, {0x2, 0x4, 0x1, 0x7eab, '\x00'}}]}, &(0x7f0000003380)={0xa0, 0x0, 0xac1a000000000000, {{0x3, 0x1, 0x8, 0x0, 0x3f, 0x0, {0x0, 0x8000000000000001, 0x1ff, 0x798, 0x1, 0x3f, 0x9, 0x1, 0x100, 0x1000, 0x37, 0x0, r3, 0x0, 0x4}}, {0x0, 0x2}}}, &(0x7f0000003440)={0x20, 0xfffffffffffffffe, 0x7, {0xae, 0x4, 0x81, 0x8001}}}) getgroups(0x9, &(0x7f0000000300)=[0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xee00, 0xee00, 0xee00, 0xffffffffffffffff, 0xee00]) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getgroups(0x7, &(0x7f0000000000)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xee00, 0xee00]) stat(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r9, r12, r13) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000700)=[r11, r13, r14, r9, r10]) getgroups(0x8, &(0x7f0000000580)=[0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xee00, 0x0, 0x0]) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [{0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x5}, {0x8, 0x4}, {0x8, 0x3, r3}, {0x8, 0x2, r7}, {0x8, 0x5, r14}, {0x8, 0xa, r15}]}, 0x5c, 0x2) r16 = fsmount(r1, 0x0, 0x80) setsockopt$IP_VS_SO_SET_STOPDAEMON(r16, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'bond0\x00', 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x1121, 0x7f, 0x0, 0x1601, 0x1, 0x80000001, '\x00', r2, r16, 0x1, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r16, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000000f80), 0x0, 0x43, &(0x7f0000000fc0)=[{}, {}], 0x10, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) ioctl$TIOCGSOFTCAR(r16, 0x5419, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000180)}], 0x2, 0x5, 0x400) 223.881175ms ago: executing program 2 (id=512): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x3081, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x1a000, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) 143.073112ms ago: executing program 3 (id=513): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000008e283e348fde7d8ebad05d2836daedfecdbd199e511098f949b1a207d9f00d11144d0377a6accfed34064db8c3e7219605e5ab17aec7313beced977bed6921ad3527b6517e01d2ffdbb6eb185e4d48298af1a627d1", @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x400042, 0x3c) close(r6) r7 = fanotify_init(0x8, 0x0) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000240)) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000200), 0x4) socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setresgid(r10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r12) sendmmsg$unix(r11, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r12}}}], 0x20}}], 0x2, 0x0) fanotify_mark(r7, 0x51, 0x8000038, r8, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r13, 0x0) r14 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r14, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(r13, 0x0, 0x0, 0x0) 142.814985ms ago: executing program 2 (id=514): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x3081, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) (fail_nth: 5) 24.176822ms ago: executing program 2 (id=515): syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004005, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)='syz') r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0) write$P9_RWSTAT(r7, &(0x7f00000003c0)={0x7}, 0x7) syz_open_pts(r0, 0x0) r8 = dup3(r6, 0xffffffffffffffff, 0x80000) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise}]}}) 24.024688ms ago: executing program 0 (id=516): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="553a45983c430093df0d6038ba2f78777934ebc21b7361cf1d39e6b11ef1763e2a10519b", 0x24}], 0x2}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 23.699217ms ago: executing program 0 (id=517): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$bt_hci(r0, 0x0, 0x13, 0x0, &(0x7f0000000280)) socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000001c0)=0x3ff, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$video(0x0, 0x7, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001418) ioctl$TUNSETOFFLOAD(r1, 0x80047441, 0x100000000000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04004220"], 0x7) setgroups(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000140)={0xc, 0x100, 0x6, {0x8, 0x3ff, 0x4, 0x2}}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r4 = socket(0xa, 0x6, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="53cbf1775504", 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_mreq(r4, 0x10d, 0xdf, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="03c900da8eb02ee4c976907d623a0d51ce7badabf9295e709626f15b2af3e18d605d46a3c6c4dbf30893754b3b2220664ac9a0c803e5099e517c0f1a8eaef86eeeb4217d18a3d9bfb7fa1ba79a3f1e3cb183a4ec41060af55a642598509f81e41f79b7caf5414a65e5cbccd408004f09258d69bdf63b092f066d1723684f3157c73f93e6e84102c3d9bffb09ad1c2377edd6095f78da4de856b44d5989d916f0ae1f957b079fc28306c05968ca11d56db45fcfcedd8400269370e62a860f4cb08b5e05d2671a06bf9e775a4b04ff07"], 0xde) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 3 (id=518): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfdef) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x81040, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67a38975705f69643d", @ANYRES32=r0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000009000601080000000000000000030069820500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000081) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) sendto$inet6(r0, &(0x7f0000000140)="cc5f1c5d085614a2b803e3c9", 0xc, 0x5, &(0x7f00000001c0)={0xa, 0x4e24, 0x7fff, @remote, 0x6}, 0x1c) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000240)={{}, 0x3, &(0x7f0000000100)=[0x8, 0x0, 0x6e00db25], 0x0, 0xf, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) unshare(0x68020280) dup(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200001}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000010000000731199000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000001000071000040"]) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900030073797a30000000000900020073797a320000000038000480340001800b00010065787468647200001200028005000a0000000000080001400000001508000340000000000800044000000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) faccessat2(r2, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000001540)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): [ 45.524898][ T39] audit: type=1400 audit(1721982825.878:81): avc: denied { rlimitinh } for pid=5267 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.533553][ T39] audit: type=1400 audit(1721982825.878:82): avc: denied { siginh } for pid=5267 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.892232][ T57] cfg80211: failed to load regulatory.db [ 367.342514][ T39] audit: type=1400 audit(1721983147.718:83): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 367.359692][ T39] audit: type=1400 audit(1721983147.718:84): avc: denied { append } for pid=4807 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 367.373426][ T39] audit: type=1400 audit(1721983147.718:85): avc: denied { open } for pid=4807 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 367.384576][ T39] audit: type=1400 audit(1721983147.718:86): avc: denied { getattr } for pid=4807 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:19148' (ED25519) to the list of known hosts. [ 367.669480][ T39] audit: type=1400 audit(1721983148.038:87): avc: denied { name_bind } for pid=5352 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 367.713231][ T39] audit: type=1400 audit(1721983148.098:88): avc: denied { execute } for pid=5354 comm="sh" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 367.722306][ T39] audit: type=1400 audit(1721983148.098:89): avc: denied { execute_no_trans } for pid=5354 comm="sh" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 370.327388][ T39] audit: type=1400 audit(1721983150.708:90): avc: denied { mounton } for pid=5354 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 370.334471][ T5354] cgroup: Unknown subsys name 'net' [ 370.337095][ T39] audit: type=1400 audit(1721983150.708:91): avc: denied { mount } for pid=5354 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 370.367912][ T39] audit: type=1400 audit(1721983150.728:92): avc: denied { unmount } for pid=5354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 370.552257][ T5354] cgroup: Unknown subsys name 'rlimit' [ 370.770445][ T5357] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 372.025375][ T5354] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 376.516696][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 376.516711][ T39] audit: type=1400 audit(1721983156.888:105): avc: denied { execmem } for pid=5359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 377.264251][ T39] audit: type=1400 audit(1721983157.638:106): avc: denied { mounton } for pid=5363 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 377.276781][ T39] audit: type=1400 audit(1721983157.638:107): avc: denied { mount } for pid=5364 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 377.287424][ T39] audit: type=1400 audit(1721983157.638:108): avc: denied { create } for pid=5364 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 377.296437][ T39] audit: type=1400 audit(1721983157.638:109): avc: denied { read write } for pid=5364 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 377.307005][ T39] audit: type=1400 audit(1721983157.638:110): avc: denied { open } for pid=5364 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 377.317544][ T39] audit: type=1400 audit(1721983157.648:111): avc: denied { ioctl } for pid=5364 comm="syz-executor" path="socket:[5099]" dev="sockfs" ino=5099 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 377.342197][ T5371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.346862][ T5371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.349237][ T5377] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.351193][ T5371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.355070][ T5377] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.357838][ T5371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.359252][ T5379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.360463][ T5379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.361330][ T5379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.362363][ T5377] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.363523][ T5377] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.364127][ T5377] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 377.364427][ T5378] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.364914][ T5371] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 377.365859][ T5378] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.366075][ T5378] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.366619][ T5371] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.368504][ T5379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.369404][ T5378] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.370769][ T5377] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.375149][ T39] audit: type=1400 audit(1721983157.748:112): avc: denied { read } for pid=5364 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 377.376608][ T5379] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 377.379310][ T39] audit: type=1400 audit(1721983157.748:113): avc: denied { open } for pid=5364 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 377.388420][ T5379] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 377.389139][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.391454][ T39] audit: type=1400 audit(1721983157.748:114): avc: denied { mounton } for pid=5364 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 377.448501][ T5379] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.790441][ T5368] chnl_net:caif_netlink_parms(): no params data found [ 377.830402][ T5364] chnl_net:caif_netlink_parms(): no params data found [ 378.009151][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.012910][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.015750][ T5368] bridge_slave_0: entered allmulticast mode [ 378.019373][ T5368] bridge_slave_0: entered promiscuous mode [ 378.043732][ T5363] chnl_net:caif_netlink_parms(): no params data found [ 378.088205][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.091991][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.095280][ T5368] bridge_slave_1: entered allmulticast mode [ 378.099439][ T5368] bridge_slave_1: entered promiscuous mode [ 378.175133][ T5368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.184834][ T5368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.371164][ T5364] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.388911][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.392278][ T5364] bridge_slave_0: entered allmulticast mode [ 378.395459][ T5364] bridge_slave_0: entered promiscuous mode [ 378.404538][ T5368] team0: Port device team_slave_0 added [ 378.418767][ T5372] chnl_net:caif_netlink_parms(): no params data found [ 378.425860][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.428942][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.431980][ T5364] bridge_slave_1: entered allmulticast mode [ 378.435059][ T5364] bridge_slave_1: entered promiscuous mode [ 378.462946][ T5368] team0: Port device team_slave_1 added [ 378.534635][ T5364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.622184][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.624893][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.627644][ T5363] bridge_slave_0: entered allmulticast mode [ 378.631531][ T5363] bridge_slave_0: entered promiscuous mode [ 378.637662][ T5364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.691438][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.695513][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.708216][ T5368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.718537][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.722203][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.725586][ T5363] bridge_slave_1: entered allmulticast mode [ 378.729978][ T5363] bridge_slave_1: entered promiscuous mode [ 378.777999][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.780907][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.791973][ T5368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.854239][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.856987][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.870079][ T5364] team0: Port device team_slave_0 added [ 378.875889][ T5364] team0: Port device team_slave_1 added [ 378.961536][ T5363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.002712][ T5364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.005659][ T5364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.015973][ T5364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.022115][ T5364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.024439][ T5364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.036270][ T5364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.046932][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.049594][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.052682][ T5372] bridge_slave_0: entered allmulticast mode [ 379.055888][ T5372] bridge_slave_0: entered promiscuous mode [ 379.062101][ T5363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.144494][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.147653][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.150751][ T5372] bridge_slave_1: entered allmulticast mode [ 379.154615][ T5372] bridge_slave_1: entered promiscuous mode [ 379.187088][ T5368] hsr_slave_0: entered promiscuous mode [ 379.190952][ T5368] hsr_slave_1: entered promiscuous mode [ 379.275287][ T5363] team0: Port device team_slave_0 added [ 379.281990][ T5364] hsr_slave_0: entered promiscuous mode [ 379.284914][ T5364] hsr_slave_1: entered promiscuous mode [ 379.288570][ T5364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.295043][ T5364] Cannot create hsr debugfs directory [ 379.352785][ T5363] team0: Port device team_slave_1 added [ 379.387109][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.398643][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.411337][ T5375] Bluetooth: hci2: command tx timeout [ 379.414125][ T5375] Bluetooth: hci0: command tx timeout [ 379.417291][ T5375] Bluetooth: hci1: command tx timeout [ 379.500164][ T5375] Bluetooth: hci3: command tx timeout [ 379.596321][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.599034][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.611869][ T5363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.624878][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.627880][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.638330][ T5363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.657436][ T5372] team0: Port device team_slave_0 added [ 379.662150][ T5372] team0: Port device team_slave_1 added [ 379.810343][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.813203][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.823273][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.829915][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.832856][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.843387][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.911353][ T5363] hsr_slave_0: entered promiscuous mode [ 379.914382][ T5363] hsr_slave_1: entered promiscuous mode [ 379.917219][ T5363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.920443][ T5363] Cannot create hsr debugfs directory [ 380.080962][ T5372] hsr_slave_0: entered promiscuous mode [ 380.086090][ T5372] hsr_slave_1: entered promiscuous mode [ 380.091680][ T5372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.094931][ T5372] Cannot create hsr debugfs directory [ 380.246924][ T5364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.276683][ T5364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.289870][ T5364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.299605][ T5364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.395130][ T5368] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 380.417349][ T5368] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 380.426796][ T5368] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 380.436569][ T5368] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 380.495936][ T5363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.503011][ T5363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.508632][ T5363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.514265][ T5363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.609454][ T5372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 380.631382][ T5372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 380.636413][ T5372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.642842][ T5372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.673128][ T5364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.688120][ T5368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.707195][ T5364] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.742017][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.746272][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.758177][ T5368] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.777587][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.780734][ T5315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.798678][ T5315] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.801993][ T5315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.829405][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.832525][ T5315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.888436][ T5363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.905378][ T5364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.936084][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.948009][ T5363] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.970443][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.973647][ T5348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.999200][ T5372] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.015579][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.018838][ T5315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.047727][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.050723][ T5409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.055910][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.059136][ T5409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.126962][ T5364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.192506][ T5368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.203568][ T5364] veth0_vlan: entered promiscuous mode [ 381.215300][ T5364] veth1_vlan: entered promiscuous mode [ 381.263695][ T5364] veth0_macvtap: entered promiscuous mode [ 381.267266][ T5368] veth0_vlan: entered promiscuous mode [ 381.272926][ T5364] veth1_macvtap: entered promiscuous mode [ 381.295603][ T5368] veth1_vlan: entered promiscuous mode [ 381.326438][ T5363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.336758][ T5364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.349935][ T5364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.357875][ T5364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.362852][ T5364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.366355][ T5364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.370027][ T5364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.409122][ T5372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.414427][ T5368] veth0_macvtap: entered promiscuous mode [ 381.446977][ T5368] veth1_macvtap: entered promiscuous mode [ 381.470313][ T5384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.475763][ T5384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.489166][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.492572][ T5375] Bluetooth: hci2: command tx timeout [ 381.492661][ T5369] Bluetooth: hci1: command tx timeout [ 381.493609][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.501067][ T5369] Bluetooth: hci0: command tx timeout [ 381.505144][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.509829][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.515420][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.523815][ T5363] veth0_vlan: entered promiscuous mode [ 381.532156][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.534803][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 381.534815][ T39] audit: type=1400 audit(1721983161.908:117): avc: denied { mount } for pid=5364 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 381.536523][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.538870][ T39] audit: type=1400 audit(1721983161.908:118): avc: denied { mounton } for pid=5364 comm="syz-executor" path="/syzkaller.ySwRH3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 381.549889][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.553772][ T39] audit: type=1400 audit(1721983161.908:119): avc: denied { mount } for pid=5364 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 381.567758][ T5368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.577185][ T39] audit: type=1400 audit(1721983161.918:120): avc: denied { unmount } for pid=5364 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 381.577223][ T39] audit: type=1400 audit(1721983161.928:121): avc: denied { mounton } for pid=5364 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 381.577255][ T39] audit: type=1400 audit(1721983161.928:122): avc: denied { mount } for pid=5364 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 381.581911][ T5369] Bluetooth: hci3: command tx timeout [ 381.595132][ T5368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.621619][ T5368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.626836][ T5368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.639205][ T5363] veth1_vlan: entered promiscuous mode [ 381.683864][ T39] audit: type=1400 audit(1721983162.048:123): avc: denied { read write } for pid=5364 comm="syz-executor" name="loop3" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.684766][ T5372] veth0_vlan: entered promiscuous mode [ 381.701429][ T39] audit: type=1400 audit(1721983162.048:124): avc: denied { open } for pid=5364 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.713803][ T5372] veth1_vlan: entered promiscuous mode [ 381.728015][ T39] audit: type=1400 audit(1721983162.048:125): avc: denied { ioctl } for pid=5364 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.762243][ T39] audit: type=1400 audit(1721983162.118:126): avc: denied { create } for pid=5430 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 381.862252][ T5363] veth0_macvtap: entered promiscuous mode [ 381.872242][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.875428][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.917127][ T5372] veth0_macvtap: entered promiscuous mode [ 381.935517][ T5363] veth1_macvtap: entered promiscuous mode [ 381.943658][ T5436] netlink: 45 bytes leftover after parsing attributes in process `syz.3.5'. [ 381.959880][ T5372] veth1_macvtap: entered promiscuous mode [ 381.976889][ T5392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.980162][ T5392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.998475][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.003736][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.007576][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.027489][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.035356][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.051908][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.055696][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.059686][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.066891][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.070823][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.075076][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.081710][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.094181][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.099192][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.108704][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.113174][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.119846][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.125547][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.129835][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.134456][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.154462][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.159249][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.164920][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.171810][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.189140][ T5372] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.192660][ T5372] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.202210][ T5372] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.205170][ T5372] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.225123][ T5363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.229955][ T5363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.234017][ T5363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.237546][ T5363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.378097][ T5392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.381814][ T5392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.426307][ T5416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.433501][ T5416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.440610][ T5392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.444957][ T5392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.498493][ T3135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.508297][ T3135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.558752][ T5445] program syz.0.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.678067][ T5451] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 382.714610][ T5453] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3'. [ 382.922429][ T5459] netlink: 45 bytes leftover after parsing attributes in process `syz.2.8'. [ 383.223866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 383.264508][ T5469] program syz.2.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.514262][ T5476] netlink: 45 bytes leftover after parsing attributes in process `syz.1.12'. [ 383.571297][ T5369] Bluetooth: hci2: command tx timeout [ 383.572314][ T5375] Bluetooth: hci0: command tx timeout [ 383.574004][ T5369] Bluetooth: hci1: command tx timeout [ 383.661342][ T5369] Bluetooth: hci3: command tx timeout [ 383.851912][ T1104] Bluetooth: hci4: Frame reassembly failed (-84) [ 383.855343][ T1104] Bluetooth: hci4: Frame reassembly failed (-84) [ 383.858356][ T5484] Bluetooth: hci4: Frame reassembly failed (-84) [ 384.028572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 384.260934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 384.540964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 384.591118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 384.845047][ T5528] netlink: 45 bytes leftover after parsing attributes in process `syz.1.16'. [ 384.976033][ T5535] netlink: 45 bytes leftover after parsing attributes in process `syz.1.17'. [ 385.053839][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 385.257414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 385.359817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 385.465438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 385.564581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 385.667007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 385.670812][ T5375] Bluetooth: hci1: command tx timeout [ 385.671643][ T66] Bluetooth: hci2: command tx timeout [ 385.673439][ T5379] Bluetooth: hci0: command tx timeout [ 385.772206][ T5375] Bluetooth: hci3: command tx timeout [ 385.890832][ T5369] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 386.526853][ T5549] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 386.539685][ T5549] macvlan0: entered promiscuous mode [ 386.589289][ T39] kauditd_printk_skb: 54 callbacks suppressed [ 386.589303][ T39] audit: type=1400 audit(1721983166.958:181): avc: denied { read write } for pid=5546 comm="syz.0.22" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 386.603285][ T5549] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 386.605652][ T39] audit: type=1400 audit(1721983166.958:182): avc: denied { open } for pid=5546 comm="syz.0.22" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 388.028094][ T1108] Bluetooth: hci4: Frame reassembly failed (-84) [ 388.282438][ T5505] Bluetooth: hci5: Frame reassembly failed (-84) [ 388.380440][ T5600] Bluetooth: hci6: Frame reassembly failed (-84) [ 390.051423][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 390.054190][ T5375] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 390.184055][ T39] audit: type=1400 audit(1721983170.558:183): avc: denied { open } for pid=5613 comm="syz.2.35" path="/dev/ptyq9" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 390.241145][ T39] audit: type=1400 audit(1721983170.618:184): avc: denied { ioctl } for pid=5613 comm="syz.2.35" path="/dev/ptyq9" dev="devtmpfs" ino=138 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 390.291161][ T5369] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 390.309669][ T39] audit: type=1400 audit(1721983170.678:185): avc: denied { setopt } for pid=5613 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 390.348435][ T5369] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10 [ 390.374273][ T5379] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 390.615110][ T5630] netlink: 45 bytes leftover after parsing attributes in process `syz.3.39'. [ 390.781463][ T5633] netlink: 'syz.3.40': attribute type 10 has an invalid length. [ 390.791223][ T5633] macvlan0: entered promiscuous mode [ 390.829293][ T5633] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 391.367777][ T5642] program syz.0.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.524475][ T5525] Bluetooth: hci4: Frame reassembly failed (-84) [ 391.871632][ T5369] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10 [ 392.001242][ T39] audit: type=1400 audit(1721983172.368:186): avc: denied { create } for pid=5652 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 392.064822][ T5493] Bluetooth: hci5: Frame reassembly failed (-84) [ 392.370959][ T5375] Bluetooth: hci2: command tx timeout [ 392.863216][ T39] audit: type=1400 audit(1721983173.238:187): avc: denied { bind } for pid=5663 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 392.868528][ T5664] netlink: 56 bytes leftover after parsing attributes in process `syz.2.50'. [ 393.571642][ T5379] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 393.764894][ T5379] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 394.029181][ T5688] netlink: 56 bytes leftover after parsing attributes in process `syz.3.60'. [ 394.052181][ T5369] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 394.233333][ T5369] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 394.323203][ T5699] netlink: 45 bytes leftover after parsing attributes in process `syz.1.62'. [ 394.460820][ T5369] Bluetooth: hci2: command tx timeout [ 394.511654][ T5494] Bluetooth: hci4: Frame reassembly failed (-84) [ 394.823980][ T5716] netlink: 56 bytes leftover after parsing attributes in process `syz.0.69'. [ 394.972237][ T5718] program syz.0.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.280093][ T5506] Bluetooth: hci5: Frame reassembly failed (-84) [ 395.371165][ T5375] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10 [ 395.811094][ T5375] Bluetooth: hci1: command tx timeout [ 396.294882][ T5375] Bluetooth: hci3: command tx timeout [ 396.531114][ T5369] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 396.817090][ T5743] program syz.2.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.330842][ T5369] Bluetooth: hci5: command 0x1003 tx timeout [ 397.330873][ T5379] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 397.411626][ T5379] Bluetooth: hci2: command tx timeout [ 397.739409][ T5498] Bluetooth: hci4: Frame reassembly failed (-84) [ 398.060827][ T5369] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 398.065235][ T5369] Bluetooth: hci3: Injecting HCI hardware error event [ 398.069565][ T5369] Bluetooth: hci3: hardware error 0x00 [ 398.814314][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 398.979704][ T5766] syz.1.87: attempt to access beyond end of device [ 398.979704][ T5766] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 398.986027][ T5766] (syz.1.87,5766,3):ocfs2_get_sector:1771 ERROR: status = -5 [ 398.989263][ T5766] (syz.1.87,5766,3):ocfs2_sb_probe:749 ERROR: status = -5 [ 399.003586][ T5766] (syz.1.87,5766,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 399.008665][ T5766] (syz.1.87,5766,3):ocfs2_fill_super:1178 ERROR: status = -5 [ 399.372856][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 399.741367][ T5379] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 399.741769][ T5375] Bluetooth: hci4: command 0x1003 tx timeout [ 400.140820][ T5369] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 400.256189][ T5775] syz.3.90: attempt to access beyond end of device [ 400.256189][ T5775] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 400.261844][ T5775] (syz.3.90,5775,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 400.265166][ T5775] (syz.3.90,5775,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 400.268361][ T5775] (syz.3.90,5775,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 400.272449][ T5775] (syz.3.90,5775,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 400.381997][ T5779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 400.870305][ T39] audit: type=1400 audit(1721983181.238:188): avc: denied { write } for pid=5788 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 400.884771][ T39] audit: type=1400 audit(1721983181.258:189): avc: denied { map_read map_write } for pid=5788 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 401.231191][ T39] audit: type=1400 audit(1721983181.568:190): avc: denied { connect } for pid=5795 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 401.240418][ T39] audit: type=1400 audit(1721983181.568:191): avc: denied { name_connect } for pid=5795 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 401.243927][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 401.251222][ T39] audit: type=1400 audit(1721983181.618:192): avc: denied { setopt } for pid=5795 comm="syz.2.99" laddr=fe80::11 lport=33052 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 401.262604][ T39] audit: type=1400 audit(1721983181.638:193): avc: denied { create } for pid=5795 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 401.283955][ T39] audit: type=1400 audit(1721983181.648:194): avc: denied { ioctl } for pid=5795 comm="syz.2.99" path="/dev/ppp" dev="devtmpfs" ino=716 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 401.313581][ T39] audit: type=1400 audit(1721983181.688:195): avc: denied { setopt } for pid=5795 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 401.324162][ T39] audit: type=1400 audit(1721983181.688:196): avc: denied { create } for pid=5795 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.335489][ T39] audit: type=1400 audit(1721983181.688:197): avc: denied { write } for pid=5795 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 401.824312][ T5802] syz.3.101: attempt to access beyond end of device [ 401.824312][ T5802] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 401.829771][ T5802] (syz.3.101,5802,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 401.833393][ T5802] (syz.3.101,5802,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 401.837312][ T5802] (syz.3.101,5802,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 401.841072][ T5802] (syz.3.101,5802,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 402.164262][ T5814] syz.1.106: attempt to access beyond end of device [ 402.164262][ T5814] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 402.169771][ T5814] (syz.1.106,5814,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 402.174185][ T5814] (syz.1.106,5814,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 402.177905][ T5814] (syz.1.106,5814,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 402.181992][ T5814] (syz.1.106,5814,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 402.234059][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 403.099616][ T5841] syz.0.119: attempt to access beyond end of device [ 403.099616][ T5841] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 403.106579][ T5841] (syz.0.119,5841,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 403.110265][ T5841] (syz.0.119,5841,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 403.113726][ T5841] (syz.0.119,5841,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 403.117941][ T5841] (syz.0.119,5841,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 403.446360][ T5858] netlink: 45 bytes leftover after parsing attributes in process `syz.3.126'. [ 403.813077][ T5873] syz.3.133: attempt to access beyond end of device [ 403.813077][ T5873] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 403.818841][ T5873] (syz.3.133,5873,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 403.821769][ T5873] (syz.3.133,5873,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 403.824958][ T5873] (syz.3.133,5873,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 403.838157][ T5873] (syz.3.133,5873,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 403.921225][ T5884] netlink: 45 bytes leftover after parsing attributes in process `syz.2.136'. [ 404.037863][ T5893] netlink: 45 bytes leftover after parsing attributes in process `syz.3.138'. [ 404.071787][ T5896] netlink: 'syz.2.139': attribute type 10 has an invalid length. [ 404.076477][ T5896] macvlan0: entered promiscuous mode [ 404.093124][ T5896] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 404.131578][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 405.079339][ T5912] usb usb8: usbfs: process 5912 (syz.1.146) did not claim interface 0 before use [ 406.210181][ T5933] usb usb8: usbfs: process 5933 (syz.1.155) did not claim interface 0 before use [ 406.314412][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 406.522418][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 406.936325][ T5954] program syz.0.163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.627172][ T5963] netlink: 45 bytes leftover after parsing attributes in process `syz.3.167'. [ 408.677887][ T5988] syz.2.176: attempt to access beyond end of device [ 408.677887][ T5988] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 408.683220][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 408.683234][ T39] audit: type=1400 audit(1721983189.058:199): avc: denied { create } for pid=5989 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 408.687609][ T39] audit: type=1400 audit(1721983189.058:200): avc: denied { read } for pid=5989 comm="syz.3.177" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 408.693995][ T5988] (syz.2.176,5988,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 408.694043][ T5988] (syz.2.176,5988,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 408.694061][ T5988] (syz.2.176,5988,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 408.708218][ T39] audit: type=1400 audit(1721983189.088:201): avc: denied { open } for pid=5989 comm="syz.3.177" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 408.710049][ T5988] (syz.2.176,5988,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 408.760257][ T39] audit: type=1400 audit(1721983189.128:202): avc: denied { read write } for pid=5989 comm="syz.3.177" name="raw-gadget" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.770425][ T39] audit: type=1400 audit(1721983189.128:203): avc: denied { open } for pid=5989 comm="syz.3.177" path="/dev/raw-gadget" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.795340][ T39] audit: type=1400 audit(1721983189.128:204): avc: denied { ioctl } for pid=5989 comm="syz.3.177" path="/dev/raw-gadget" dev="devtmpfs" ino=763 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.865580][ T39] audit: type=1400 audit(1721983189.238:205): avc: denied { ioctl } for pid=5996 comm="syz.1.179" path="socket:[10511]" dev="sockfs" ino=10511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 408.897958][ T6004] syz.0.182: attempt to access beyond end of device [ 408.897958][ T6004] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 408.904351][ T6004] (syz.0.182,6004,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 408.907561][ T6004] (syz.0.182,6004,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 408.910306][ T6004] (syz.0.182,6004,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 408.918296][ T6004] (syz.0.182,6004,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 409.067930][ T6014] syz.1.186: attempt to access beyond end of device [ 409.067930][ T6014] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 409.073617][ T6014] (syz.1.186,6014,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 409.076958][ T6014] (syz.1.186,6014,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 409.080232][ T6014] (syz.1.186,6014,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 409.084308][ T6014] (syz.1.186,6014,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 409.119642][ T6015] netlink: 'syz.0.185': attribute type 10 has an invalid length. [ 409.970187][ T6026] syz.2.190: attempt to access beyond end of device [ 409.970187][ T6026] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 409.975777][ T6026] (syz.2.190,6026,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 409.979036][ T6026] (syz.2.190,6026,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 409.982245][ T6026] (syz.2.190,6026,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 409.985908][ T6026] (syz.2.190,6026,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 410.091353][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 411.229334][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 411.325441][ T5580] Bluetooth: hci4: Frame reassembly failed (-84) [ 411.628165][ T5511] Bluetooth: hci5: Frame reassembly failed (-84) [ 412.989486][ T6087] syz.1.212: attempt to access beyond end of device [ 412.989486][ T6087] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 412.995167][ T6087] (syz.1.212,6087,2):ocfs2_get_sector:1771 ERROR: status = -5 [ 412.998537][ T6087] (syz.1.212,6087,2):ocfs2_sb_probe:749 ERROR: status = -5 [ 413.001861][ T6087] (syz.1.212,6087,2):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 413.005523][ T6087] (syz.1.212,6087,2):ocfs2_fill_super:1178 ERROR: status = -5 [ 413.331204][ T5369] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 413.651064][ T5369] Bluetooth: hci5: command 0x1003 tx timeout [ 413.654170][ T5379] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 413.694698][ T3929] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 413.886666][ T3929] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 413.890682][ T3929] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.895874][ T3929] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 413.906019][ T3929] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.915013][ T3929] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 413.918848][ T3929] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 413.930807][ T3929] usb 6-1: Product: syz [ 413.932492][ T3929] usb 6-1: Manufacturer: syz [ 413.944560][ T3929] cdc_wdm 6-1:1.0: skipping garbage [ 413.946802][ T3929] cdc_wdm 6-1:1.0: skipping garbage [ 413.974205][ T3929] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 413.976905][ T3929] cdc_wdm 6-1:1.0: Unknown control protocol [ 414.012286][ T6113] syz.0.222: attempt to access beyond end of device [ 414.012286][ T6113] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 414.017785][ T6113] (syz.0.222,6113,2):ocfs2_get_sector:1771 ERROR: status = -5 [ 414.021232][ T6113] (syz.0.222,6113,2):ocfs2_sb_probe:749 ERROR: status = -5 [ 414.024533][ T6113] (syz.0.222,6113,2):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 414.028295][ T6113] (syz.0.222,6113,2):ocfs2_fill_super:1178 ERROR: status = -5 [ 414.218053][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 414.220056][ T5340] usb 6-1: USB disconnect, device number 2 [ 414.221274][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 414.226406][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 414.664910][ T6124] netlink: 'syz.2.226': attribute type 10 has an invalid length. [ 414.923386][ T5515] Bluetooth: hci4: Frame reassembly failed (-84) [ 415.167208][ T5593] Bluetooth: hci5: Frame reassembly failed (-84) [ 416.930962][ T5379] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 416.933680][ T5375] Bluetooth: hci4: command 0x1003 tx timeout [ 417.148971][ T5484] Bluetooth: hci4: Frame reassembly failed (-84) [ 417.170907][ T5375] Bluetooth: hci5: command 0x1003 tx timeout [ 417.171216][ T5369] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 418.434585][ T5369] Bluetooth: hci0: unexpected event 0x04 length: 14 > 10 [ 418.493971][ T6175] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 418.505219][ T6175] macvlan0: entered promiscuous mode [ 418.529631][ T6175] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 418.598991][ T39] audit: type=1326 audit(1721983198.968:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.1.241" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8deb77299 code=0x0 [ 418.674509][ T5580] Bluetooth: hci5: Frame reassembly failed (-84) [ 419.171052][ T5379] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 420.450769][ T5379] Bluetooth: hci0: command tx timeout [ 420.690775][ T5369] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 420.692058][ T5379] Bluetooth: hci5: command 0x1003 tx timeout [ 420.737743][ T5498] Bluetooth: hci4: Frame reassembly failed (-84) [ 420.913467][ T6205] syz.3.252: attempt to access beyond end of device [ 420.913467][ T6205] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 420.918824][ T6205] (syz.3.252,6205,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 420.922675][ T6205] (syz.3.252,6205,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 420.926217][ T6205] (syz.3.252,6205,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 420.929860][ T6205] (syz.3.252,6205,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 421.025686][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 421.248479][ T6211] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 421.450189][ T39] audit: type=1326 audit(1721983201.818:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.3.254" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f802e36e2e7 code=0x0 [ 422.775157][ T5369] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 422.778403][ T5379] Bluetooth: hci4: command 0x1003 tx timeout [ 422.822361][ T5595] Bluetooth: hci4: Frame reassembly failed (-84) [ 423.032897][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 423.201055][ T6236] netlink: 'syz.3.261': attribute type 10 has an invalid length. [ 423.415161][ T5522] Bluetooth: hci5: Frame reassembly failed (-84) [ 424.861010][ T5375] Bluetooth: hci4: command 0x1003 tx timeout [ 424.862841][ T5379] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 425.092875][ T6243] program syz.1.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.410929][ T5369] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 426.405915][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.269'. [ 426.410086][ T6256] netlink: 56 bytes leftover after parsing attributes in process `syz.3.269'. [ 426.414342][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.269'. [ 426.566507][ T6262] netlink: 'syz.3.270': attribute type 10 has an invalid length. [ 426.588084][ T39] audit: type=1326 audit(1721983206.958:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.270" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f802e377299 code=0x0 [ 426.710753][ T5408] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 426.905392][ T5408] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 426.909249][ T5408] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.914525][ T5408] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 426.918569][ T5408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.928678][ T5408] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 426.933385][ T5408] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 426.937152][ T5408] usb 5-1: Product: syz [ 426.939011][ T5408] usb 5-1: Manufacturer: syz [ 426.949246][ T5408] cdc_wdm 5-1:1.0: skipping garbage [ 426.951814][ T5408] cdc_wdm 5-1:1.0: skipping garbage [ 426.961187][ T5408] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 426.963782][ T5408] cdc_wdm 5-1:1.0: Unknown control protocol [ 427.234920][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 427.235725][ T5408] usb 5-1: USB disconnect, device number 2 [ 427.237791][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 427.243403][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 427.939072][ T5416] Bluetooth: hci4: Frame reassembly failed (-84) [ 428.053110][ T5375] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.082094][ T5375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.124309][ T5375] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.154485][ T5375] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.190083][ T5375] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 428.212603][ T5375] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.266126][ T39] audit: type=1400 audit(1721983208.618:209): avc: denied { mounton } for pid=6268 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 428.417601][ T6271] syz.0.273: attempt to access beyond end of device [ 428.417601][ T6271] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 428.451883][ T6271] (syz.0.273,6271,3):ocfs2_get_sector:1771 ERROR: status = -5 [ 428.455244][ T6271] (syz.0.273,6271,3):ocfs2_sb_probe:749 ERROR: status = -5 [ 428.458514][ T6271] (syz.0.273,6271,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 428.520870][ T6271] (syz.0.273,6271,3):ocfs2_fill_super:1178 ERROR: status = -5 [ 428.749404][ T6268] chnl_net:caif_netlink_parms(): no params data found [ 428.857438][ T6285] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 428.986949][ T5524] Bluetooth: hci6: Frame reassembly failed (-84) [ 429.069549][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.092902][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.097669][ T6268] bridge_slave_0: entered allmulticast mode [ 429.123150][ T6268] bridge_slave_0: entered promiscuous mode [ 429.134016][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.137293][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.161643][ T6268] bridge_slave_1: entered allmulticast mode [ 429.165981][ T6268] bridge_slave_1: entered promiscuous mode [ 429.327465][ T6268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.347038][ T6268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.505597][ T6268] team0: Port device team_slave_0 added [ 429.516612][ T6268] team0: Port device team_slave_1 added [ 429.716014][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.719170][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.731752][ T6268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.751420][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.754443][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.780767][ T6268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.983353][ T5369] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 430.038924][ T6268] hsr_slave_0: entered promiscuous mode [ 430.061089][ T6268] hsr_slave_1: entered promiscuous mode [ 430.075623][ T6268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.079382][ T6268] Cannot create hsr debugfs directory [ 430.301019][ T5369] Bluetooth: hci5: command tx timeout [ 430.650802][ T6268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.782845][ T6268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.916958][ T6268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.011053][ T5369] Bluetooth: hci6: command 0x1003 tx timeout [ 431.015338][ T5375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 431.086001][ T6268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.306430][ T6268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 431.319795][ T6268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 431.334724][ T6268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 431.350012][ T6268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 431.574410][ T6268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.616320][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.643939][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.646876][ T5411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.708265][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.712115][ T5411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.797548][ T6268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.820887][ T6268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.088284][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.268282][ T6268] veth0_vlan: entered promiscuous mode [ 432.298630][ T5593] Bluetooth: hci4: Frame reassembly failed (-84) [ 432.306063][ T6268] veth1_vlan: entered promiscuous mode [ 432.372090][ T5369] Bluetooth: hci5: command tx timeout [ 432.464250][ T6268] veth0_macvtap: entered promiscuous mode [ 432.469417][ T6268] veth1_macvtap: entered promiscuous mode [ 432.488259][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.493553][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.497875][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.514161][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.517898][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.521886][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.537171][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.561356][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.610362][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.639717][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.646336][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.651775][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.658485][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.677431][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.691115][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.695061][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.699125][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.713745][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.724070][ T6268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.734121][ T6268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.738244][ T6268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.752167][ T6268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.980047][ T5488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.989608][ T5488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.094555][ T5602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.097940][ T5602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.119728][ T39] audit: type=1400 audit(1721983213.488:210): avc: denied { mount } for pid=6268 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 433.281152][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 433.421586][ T5578] Bluetooth: hci6: Frame reassembly failed (-84) [ 433.531214][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 434.088799][ T6353] netlink: 'syz.3.291': attribute type 10 has an invalid length. [ 434.370857][ T5375] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 434.370997][ T5379] Bluetooth: hci4: command 0x1003 tx timeout [ 434.450862][ T5375] Bluetooth: hci5: command tx timeout [ 434.789663][ T6356] syz.0.292: attempt to access beyond end of device [ 434.789663][ T6356] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 434.795179][ T6356] (syz.0.292,6356,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 434.798172][ T6356] (syz.0.292,6356,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 434.801219][ T6356] (syz.0.292,6356,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 434.804971][ T6356] (syz.0.292,6356,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 434.912661][ T39] audit: type=1400 audit(1721983215.288:211): avc: denied { write } for pid=6359 comm="syz.1.294" name="netlink" dev="proc" ino=4026533004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 434.989524][ T6365] netlink: 56 bytes leftover after parsing attributes in process `syz.0.295'. [ 435.086608][ T39] audit: type=1400 audit(1721983215.448:212): avc: denied { bind } for pid=6366 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 435.096004][ T6370] input: syz0 as /devices/virtual/input/input5 [ 435.107052][ T39] audit: type=1400 audit(1721983215.458:213): avc: denied { read write } for pid=6369 comm="syz.0.297" name="uinput" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 435.117530][ T39] audit: type=1400 audit(1721983215.458:214): avc: denied { open } for pid=6369 comm="syz.0.297" path="/dev/uinput" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 435.129570][ T39] audit: type=1400 audit(1721983215.458:215): avc: denied { name_bind } for pid=6366 comm="syz.1.296" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 435.141290][ T39] audit: type=1400 audit(1721983215.458:216): avc: denied { node_bind } for pid=6366 comm="syz.1.296" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 435.150390][ T39] audit: type=1400 audit(1721983215.458:217): avc: denied { ioctl } for pid=6369 comm="syz.0.297" path="/dev/uinput" dev="devtmpfs" ino=866 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 435.165705][ T39] audit: type=1400 audit(1721983215.478:218): avc: denied { read } for pid=4810 comm="acpid" name="event4" dev="devtmpfs" ino=2398 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.178093][ T39] audit: type=1400 audit(1721983215.478:219): avc: denied { open } for pid=4810 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2398 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.411012][ T5369] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 435.411073][ T5375] Bluetooth: hci6: command 0x1003 tx timeout [ 435.458330][ T5488] Bluetooth: hci4: Frame reassembly failed (-84) [ 435.627632][ T6378] syz.2.299: attempt to access beyond end of device [ 435.627632][ T6378] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 435.634085][ T6378] (syz.2.299,6378,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 435.637339][ T6378] (syz.2.299,6378,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 435.640770][ T6378] (syz.2.299,6378,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 435.645042][ T6378] (syz.2.299,6378,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 436.530948][ T5375] Bluetooth: hci5: command tx timeout [ 437.182704][ T6401] syz.2.304: attempt to access beyond end of device [ 437.182704][ T6401] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 437.188292][ T6401] (syz.2.304,6401,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 437.191697][ T6401] (syz.2.304,6401,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 437.201694][ T6401] (syz.2.304,6401,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 437.205436][ T6401] (syz.2.304,6401,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 437.491467][ T5375] Bluetooth: hci4: command 0x1003 tx timeout [ 437.501545][ T5369] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 437.598785][ T6403] netlink: 56 bytes leftover after parsing attributes in process `syz.2.305'. [ 437.897444][ T6412] netlink: 'syz.1.309': attribute type 3 has an invalid length. [ 438.068458][ T5505] Bluetooth: hci4: Frame reassembly failed (-84) [ 438.125582][ T6421] fuse: Unknown parameter 'WhÖ‹K_id' [ 438.438242][ T6432] syz.3.315: attempt to access beyond end of device [ 438.438242][ T6432] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 438.443687][ T6432] (syz.3.315,6432,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 438.447138][ T6432] (syz.3.315,6432,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 438.450570][ T6432] (syz.3.315,6432,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 438.454822][ T6432] (syz.3.315,6432,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 438.539376][ T5522] Bluetooth: hci6: Frame reassembly failed (-84) [ 438.549285][ T6440] FAULT_INJECTION: forcing a failure. [ 438.549285][ T6440] name failslab, interval 1, probability 0, space 0, times 1 [ 438.554937][ T6440] CPU: 3 UID: 0 PID: 6440 Comm: syz.0.318 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 438.559562][ T6440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 438.564397][ T6440] Call Trace: [ 438.565887][ T6440] [ 438.567247][ T6440] dump_stack_lvl+0x16c/0x1f0 [ 438.569393][ T6440] should_fail_ex+0x497/0x5b0 [ 438.572338][ T6440] ? fs_reclaim_acquire+0xae/0x160 [ 438.574523][ T6440] should_failslab+0xc2/0x120 [ 438.576427][ T6440] __kmalloc_cache_noprof+0x6b/0x300 [ 438.578414][ T6440] ? io_uring_setup+0x222/0x36c0 [ 438.580477][ T6440] io_uring_setup+0x222/0x36c0 [ 438.582636][ T6440] ? do_sigaltstack.constprop.0+0x547/0x800 [ 438.585282][ T6440] ? restore_altstack+0x110/0x170 [ 438.587647][ T6440] ? __pfx_io_uring_setup+0x10/0x10 [ 438.590215][ T6440] ? __do_sys_rt_sigreturn+0x167/0x230 [ 438.592865][ T6440] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 438.595412][ T6440] __x64_sys_io_uring_setup+0x98/0x140 [ 438.597732][ T6440] do_syscall_64+0xcd/0x250 [ 438.599673][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.602153][ T6440] RIP: 0033:0x7f47f4977299 [ 438.604126][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.612114][ T6440] RSP: 002b:00007f47f5732048 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 438.615591][ T6440] RAX: ffffffffffffffda RBX: 00007f47f4b06058 RCX: 00007f47f4977299 [ 438.618992][ T6440] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000000030d5 [ 438.622139][ T6440] RBP: 00007f47f57320a0 R08: 0000000000000000 R09: 0000000000000000 [ 438.625242][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.628395][ T6440] R13: 000000000000006e R14: 00007f47f4b06058 R15: 00007ffdf33cb468 [ 438.631743][ T6440] [ 439.043234][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 439.131264][ T6456] netlink: 45 bytes leftover after parsing attributes in process `syz.0.322'. [ 439.244737][ T5379] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 439.264106][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 439.264120][ T39] audit: type=1400 audit(1721983219.638:231): avc: denied { setattr } for pid=6461 comm="syz.3.324" path="/dev/ptmx" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 439.283070][ T6462] netlink: 'syz.3.324': attribute type 11 has an invalid length. [ 439.285898][ T6462] netlink: 'syz.3.324': attribute type 11 has an invalid length. [ 439.289370][ T39] audit: type=1400 audit(1721983219.658:232): avc: denied { create } for pid=6461 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 439.315631][ T6462] Zero length message leads to an empty skb [ 439.369312][ T6469] netlink: 45 bytes leftover after parsing attributes in process `syz.0.326'. [ 439.412173][ T39] audit: type=1400 audit(2000000000.090:233): avc: denied { read } for pid=6470 comm="syz.3.327" name="card1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 439.435992][ T39] audit: type=1400 audit(2000000000.090:234): avc: denied { open } for pid=6470 comm="syz.3.327" path="/dev/dri/card1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 439.460898][ T6473] FAULT_INJECTION: forcing a failure. [ 439.460898][ T6473] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 439.464531][ T39] audit: type=1400 audit(2000000000.140:235): avc: denied { connect } for pid=6470 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 439.470149][ T6471] fuse: Bad value for 'fd' [ 439.479121][ T39] audit: type=1400 audit(2000000000.140:236): avc: denied { bind } for pid=6470 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 439.494968][ T6473] CPU: 2 UID: 0 PID: 6473 Comm: syz.0.328 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 439.499233][ T39] audit: type=1400 audit(2000000000.170:237): avc: denied { execute } for pid=6470 comm="syz.3.327" path="/76/cpu.stat" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 439.499503][ T6473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 439.514315][ T6473] Call Trace: [ 439.515629][ T6473] [ 439.516934][ T6473] dump_stack_lvl+0x16c/0x1f0 [ 439.519107][ T6473] should_fail_ex+0x497/0x5b0 [ 439.521605][ T6473] _copy_to_user+0x30/0xc0 [ 439.523742][ T6473] pagemap_read+0x565/0x8c0 [ 439.525803][ T6473] ? __pfx_pagemap_read+0x10/0x10 [ 439.527888][ T6473] ? __pfx_pagemap_read+0x10/0x10 [ 439.530109][ T6473] vfs_read+0x1d4/0xbd0 [ 439.531955][ T6473] ? __pfx_lock_release+0x10/0x10 [ 439.534356][ T6473] ? __pfx_vfs_read+0x10/0x10 [ 439.536477][ T6473] ? __mutex_unlock_slowpath+0x164/0x650 [ 439.539020][ T6473] ? __fget_files+0x256/0x400 [ 439.540829][ T6473] __x64_sys_pread64+0x1fe/0x260 [ 439.542720][ T6473] ? __pfx___x64_sys_pread64+0x10/0x10 [ 439.544546][ T39] audit: type=1400 audit(2000000000.200:238): avc: denied { ioctl } for pid=6470 comm="syz.3.327" path="/dev/dri/card1" dev="devtmpfs" ino=638 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 439.544821][ T6473] do_syscall_64+0xcd/0x250 [ 439.557460][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.560048][ T6473] RIP: 0033:0x7f47f4977299 [ 439.561982][ T6473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.570431][ T6473] RSP: 002b:00007f47f5753048 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 439.574273][ T6473] RAX: ffffffffffffffda RBX: 00007f47f4b05f80 RCX: 00007f47f4977299 [ 439.577443][ T6473] RDX: 0000000000019000 RSI: 000000002001a240 RDI: 0000000000000005 [ 439.580692][ T6473] RBP: 00007f47f57530a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.584172][ T6473] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000002 [ 439.587646][ T6473] R13: 000000000000000b R14: 00007f47f4b05f80 R15: 00007ffdf33cb468 [ 439.591185][ T6473] [ 439.668022][ T39] audit: type=1400 audit(2000000000.340:239): avc: denied { create } for pid=6477 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 439.684365][ T39] audit: type=1400 audit(2000000000.360:240): avc: denied { read } for pid=6477 comm="syz.0.330" name="mice" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 439.888648][ T6489] input: syz1 as /devices/virtual/input/input6 [ 439.923043][ T6489] pim6reg1: entered promiscuous mode [ 439.927890][ T6489] pim6reg1: entered allmulticast mode [ 440.051142][ T5369] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 440.184867][ T6490] sp0: Synchronizing with TNC [ 440.304394][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.307548][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.540864][ T5375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 440.540993][ T5369] Bluetooth: hci6: command 0x1003 tx timeout [ 440.894722][ T6506] ======================================================= [ 440.894722][ T6506] WARNING: The mand mount option has been deprecated and [ 440.894722][ T6506] and is ignored by this kernel. Remove the mand [ 440.894722][ T6506] option from the mount to silence this warning. [ 440.894722][ T6506] ======================================================= [ 441.196715][ T6515] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 441.258775][ T5375] Bluetooth: hci1: command tx timeout [ 441.337077][ T5594] Bluetooth: hci4: Frame reassembly failed (-84) [ 441.340211][ T5594] Bluetooth: hci4: Frame reassembly failed (-84) [ 441.343902][ T5594] Bluetooth: hci4: Frame reassembly failed (-84) [ 441.869685][ T6540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6540 comm=syz.1.348 [ 442.573009][ T5369] Bluetooth: hci0: unknown advertising packet type: 0x7a [ 442.573087][ T5369] Bluetooth: hci0: Malformed LE Event: 0x02 [ 442.579102][ T5369] Bluetooth: hci0: unknown advertising packet type: 0x7a [ 442.579119][ T5369] Bluetooth: hci0: Malformed LE Event: 0x02 [ 442.585279][ T6556] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 442.605176][ T6556] macvlan0: entered promiscuous mode [ 442.616282][ T6556] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 442.628676][ T6558] netlink: 'syz.1.352': attribute type 10 has an invalid length. [ 443.031753][ T6564] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 443.421686][ T5369] Bluetooth: hci4: command 0x1003 tx timeout [ 443.424756][ T5375] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 443.503865][ T6572] syz.3.355: attempt to access beyond end of device [ 443.503865][ T6572] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 443.509262][ T6572] (syz.3.355,6572,3):ocfs2_get_sector:1771 ERROR: status = -5 [ 443.512949][ T6572] (syz.3.355,6572,3):ocfs2_sb_probe:749 ERROR: status = -5 [ 443.516186][ T6572] (syz.3.355,6572,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 443.519808][ T6572] (syz.3.355,6572,3):ocfs2_fill_super:1178 ERROR: status = -5 [ 443.798325][ T6576] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 444.392684][ T6598] netlink: 45 bytes leftover after parsing attributes in process `syz.0.365'. [ 444.552212][ T5516] Bluetooth: hci4: Frame reassembly failed (-84) [ 444.788045][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 445.433872][ T39] kauditd_printk_skb: 54 callbacks suppressed [ 445.433897][ T39] audit: type=1400 audit(2000000006.110:295): avc: denied { setattr } for pid=6615 comm="syz.0.372" name="card1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 445.452197][ T6617] netlink: 'syz.1.371': attribute type 10 has an invalid length. [ 445.760958][ T5315] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 445.961032][ T5315] usb 5-1: Using ep0 maxpacket: 8 [ 445.966379][ T5315] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 445.969715][ T5315] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 446.005810][ T5315] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 446.010030][ T5315] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 446.026188][ T5315] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 446.057453][ T5315] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 446.062992][ T5315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.079607][ T5315] usbtmc 5-1:16.0: bulk endpoints not found [ 446.263119][ T6625] @: renamed from vlan0 (while UP) [ 446.320683][ T39] audit: type=1400 audit(2000000006.980:296): avc: denied { map } for pid=6624 comm="syz.2.374" path="/proc/45/net/vlan/vlan0" dev="proc" ino=4026533993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 446.612059][ T5375] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 446.663555][ T39] audit: type=1400 audit(2000000007.340:297): avc: denied { sys_module } for pid=6626 comm="syz.2.375" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 446.666083][ T6631] netlink: zone id is out of range [ 446.681733][ T6631] netlink: zone id is out of range [ 446.683916][ T6631] netlink: zone id is out of range [ 446.686072][ T6631] netlink: zone id is out of range [ 446.688888][ T6631] netlink: zone id is out of range [ 446.712369][ T6631] netlink: zone id is out of range [ 446.715681][ T6631] netlink: zone id is out of range [ 446.718305][ T6631] netlink: zone id is out of range [ 446.771270][ T6631] netlink: zone id is out of range [ 446.977564][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 447.170326][ T39] audit: type=1400 audit(2000000007.840:298): avc: denied { ioctl } for pid=6640 comm="syz.3.378" path="socket:[12187]" dev="sockfs" ino=12187 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 447.554265][ T6650] netlink: 'syz.3.379': attribute type 10 has an invalid length. [ 448.040160][ T39] audit: type=1400 audit(2000000008.710:299): avc: denied { read } for pid=6651 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 448.525751][ T35] usb 5-1: USB disconnect, device number 3 [ 448.947423][ T6659] syz.1.382: attempt to access beyond end of device [ 448.947423][ T6659] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 448.954187][ T6659] (syz.1.382,6659,2):ocfs2_get_sector:1771 ERROR: status = -5 [ 448.957554][ T6659] (syz.1.382,6659,2):ocfs2_sb_probe:749 ERROR: status = -5 [ 448.960389][ T6659] (syz.1.382,6659,2):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 448.963883][ T6659] (syz.1.382,6659,2):ocfs2_fill_super:1178 ERROR: status = -5 [ 448.973744][ T6663] capability: warning: `syz.0.384' uses 32-bit capabilities (legacy support in use) [ 448.993335][ T39] audit: type=1400 audit(2000000009.660:300): avc: denied { setopt } for pid=6662 comm="syz.0.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 449.049194][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 449.214993][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 449.230874][ T39] audit: type=1400 audit(2000000009.900:301): avc: denied { read } for pid=6668 comm="syz.1.387" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 449.238121][ T6670] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 449.244963][ T39] audit: type=1400 audit(2000000009.900:302): avc: denied { open } for pid=6668 comm="syz.1.387" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 449.281178][ T39] audit: type=1400 audit(2000000009.900:303): avc: denied { ioctl } for pid=6668 comm="syz.1.387" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 449.295585][ T39] audit: type=1400 audit(2000000009.900:304): avc: denied { mounton } for pid=6668 comm="syz.1.387" path="/proc/306/task" dev="proc" ino=12250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 449.637710][ T5369] Bluetooth: hci2: unexpected event 0x07 length: 4 < 255 [ 450.576233][ T6700] netlink: 'syz.3.396': attribute type 10 has an invalid length. [ 450.602656][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 450.602669][ T39] audit: type=1400 audit(2000000011.280:323): avc: denied { create } for pid=6698 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 450.847341][ T39] audit: type=1400 audit(2000000011.520:324): avc: denied { create } for pid=6702 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 451.328286][ T39] audit: type=1400 audit(2000000012.000:325): avc: denied { bind } for pid=6708 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 451.389842][ T39] audit: type=1400 audit(2000000012.060:326): avc: denied { create } for pid=6711 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 451.409190][ T39] audit: type=1400 audit(2000000012.070:327): avc: denied { bind } for pid=6711 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 451.420952][ T39] audit: type=1400 audit(2000000012.070:328): avc: denied { write } for pid=6711 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 451.829994][ T39] audit: type=1400 audit(2000000012.500:329): avc: denied { name_bind } for pid=6708 comm="syz.2.400" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 451.864961][ T5411] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 452.001065][ T39] audit: type=1400 audit(2000000012.680:330): avc: denied { watch } for pid=6718 comm="syz.0.404" path="/104/file1" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 452.011509][ T39] audit: type=1400 audit(2000000012.680:331): avc: denied { watch_sb watch_reads } for pid=6718 comm="syz.0.404" path="/104/file1" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 452.022944][ T39] audit: type=1400 audit(2000000012.680:332): avc: denied { watch watch_reads } for pid=6718 comm="syz.0.404" path="/104" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 452.081027][ T5411] usb 6-1: Using ep0 maxpacket: 32 [ 452.089592][ T5411] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 452.095513][ T5411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.099602][ T5411] usb 6-1: Product: syz [ 452.120073][ T5411] usb 6-1: Manufacturer: syz [ 452.122701][ T5411] usb 6-1: SerialNumber: syz [ 452.129704][ T5411] usb 6-1: config 0 descriptor?? [ 452.839403][ T6734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.408'. [ 452.844053][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'. [ 452.844369][ T5411] (unnamed net_device) (uninitialized): Assigned a random MAC address: 16:ed:b6:e9:80:d4 [ 452.875266][ T5411] rtl8150 6-1:0.0: eth2: rtl8150 is detected [ 453.056458][ T5411] usb 6-1: USB disconnect, device number 3 [ 453.217421][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 453.354199][ T6746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65374 sclass=netlink_route_socket pid=6746 comm=syz.3.410 [ 453.460516][ T6749] Bluetooth: MGMT ver 1.23 [ 453.517178][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 453.839622][ T6760] syz.3.413: attempt to access beyond end of device [ 453.839622][ T6760] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 453.845700][ T6760] (syz.3.413,6760,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 453.849060][ T6760] (syz.3.413,6760,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 453.852362][ T6760] (syz.3.413,6760,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 453.856307][ T6760] (syz.3.413,6760,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 454.257894][ T5397] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 454.470754][ T5397] usb 6-1: Using ep0 maxpacket: 8 [ 454.475181][ T5397] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.478871][ T5397] usb 6-1: config 0 has no interface number 0 [ 454.490031][ T5397] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 454.494997][ T5397] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 454.499104][ T5397] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 454.508382][ T5397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.522934][ T5397] usb 6-1: config 0 descriptor?? [ 454.534524][ T5397] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 454.733325][ T6758] iowarrior 6-1:0.1: Error -90 while submitting URB [ 455.023059][ T57] usb 6-1: USB disconnect, device number 4 [ 455.042497][ T57] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 455.076304][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 455.281516][ T6779] warning: `syz.3.421' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 455.537231][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 455.693856][ T6786] syz.2.423: attempt to access beyond end of device [ 455.693856][ T6786] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 455.698712][ T6786] (syz.2.423,6786,2):ocfs2_get_sector:1771 ERROR: status = -5 [ 455.702230][ T6786] (syz.2.423,6786,2):ocfs2_sb_probe:749 ERROR: status = -5 [ 455.705399][ T6786] (syz.2.423,6786,2):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 455.709618][ T6786] (syz.2.423,6786,2):ocfs2_fill_super:1178 ERROR: status = -5 [ 455.834313][ T6791] input: syz0 as /devices/virtual/input/input7 [ 455.982011][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 455.990854][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 455.990867][ T39] audit: type=1400 audit(2000000016.660:355): avc: denied { map } for pid=6790 comm="syz.2.425" path="socket:[13170]" dev="sockfs" ino=13170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 456.007979][ T39] audit: type=1400 audit(2000000016.660:356): avc: denied { read } for pid=6790 comm="syz.2.425" path="socket:[13170]" dev="sockfs" ino=13170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 456.168209][ T39] audit: type=1400 audit(2000000016.830:357): avc: denied { write } for pid=6794 comm="syz.1.426" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 456.195490][ T39] audit: type=1400 audit(2000000016.840:358): avc: denied { map } for pid=6794 comm="syz.1.426" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 456.244711][ T39] audit: type=1400 audit(2000000016.840:359): avc: denied { execute } for pid=6794 comm="syz.1.426" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 456.260748][ T39] audit: type=1400 audit(2000000016.930:360): avc: denied { read write } for pid=6794 comm="syz.1.426" name="uhid" dev="devtmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 456.276129][ T39] audit: type=1400 audit(2000000016.930:361): avc: denied { open } for pid=6794 comm="syz.1.426" path="/dev/uhid" dev="devtmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 456.283777][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 456.288598][ T39] audit: type=1400 audit(2000000016.960:362): avc: denied { create } for pid=6794 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 457.137794][ T39] audit: type=1400 audit(2000000017.810:363): avc: denied { unlink } for pid=6810 comm="syz.2.430" name="#1" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 457.175329][ T39] audit: type=1400 audit(2000000017.840:364): avc: denied { mount } for pid=6810 comm="syz.2.430" name="/" dev="overlay" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 457.277848][ T6811] evm: overlay not supported [ 457.435724][ T6815] (syz.1.431,6815,3):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 459.280072][ T6841] netlink: 'syz.1.439': attribute type 10 has an invalid length. [ 459.319002][ T6841] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 460.322435][ T6857] FAULT_INJECTION: forcing a failure. [ 460.322435][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 460.329430][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.1.445 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 460.333696][ T6857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 460.338415][ T6857] Call Trace: [ 460.339907][ T6857] [ 460.341237][ T6857] dump_stack_lvl+0x16c/0x1f0 [ 460.343406][ T6857] should_fail_ex+0x497/0x5b0 [ 460.345572][ T6857] ? fs_reclaim_acquire+0xae/0x160 [ 460.348000][ T6857] should_failslab+0xc2/0x120 [ 460.350269][ T6857] __kmalloc_noprof+0xcb/0x400 [ 460.352433][ T6857] shmem_initxattrs+0x168/0x5a0 [ 460.354165][ T6857] ? evm_inode_init_security+0x237/0x320 [ 460.356613][ T6857] security_inode_init_security+0x21c/0x380 [ 460.358873][ T6857] ? __pfx_shmem_initxattrs+0x10/0x10 [ 460.361083][ T6857] ? __pfx_security_inode_init_security+0x10/0x10 [ 460.363822][ T6857] ? shmem_get_inode+0x6e4/0xe90 [ 460.365793][ T6857] shmem_mknod+0xe9/0x240 [ 460.367110][ T6857] ? security_inode_create+0xe3/0x120 [ 460.368928][ T6857] vfs_create+0x4c2/0x770 [ 460.370590][ T6857] do_mknodat+0x3d5/0x5d0 [ 460.372269][ T6857] ? __pfx_do_mknodat+0x10/0x10 [ 460.374499][ T6857] ? getname_flags.part.0+0x1c5/0x550 [ 460.376935][ T6857] ? __pfx_ksys_write+0x10/0x10 [ 460.379008][ T6857] __x64_sys_mknodat+0xaf/0xe0 [ 460.381041][ T6857] do_syscall_64+0xcd/0x250 [ 460.383246][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.385936][ T6857] RIP: 0033:0x7ff8deb77299 [ 460.387799][ T6857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.395952][ T6857] RSP: 002b:00007ff8df90e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 460.400666][ T6857] RAX: ffffffffffffffda RBX: 00007ff8ded05f80 RCX: 00007ff8deb77299 [ 460.404671][ T6857] RDX: 0000000000000000 RSI: 0000000020002600 RDI: 0000000000000003 [ 460.408120][ T6857] RBP: 00007ff8df90e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 460.411370][ T6857] R10: 0000000000000702 R11: 0000000000000246 R12: 0000000000000002 [ 460.414695][ T6857] R13: 000000000000000b R14: 00007ff8ded05f80 R15: 00007fff01e8bc48 [ 460.418291][ T6857] May 18 03:33:41 syzkaller kern.notice kernel: [ 460.322435][ T6857] FAULT_INJECTION: forcing a failure. May 18 03:33:41 syzkaller kern.notice kernel: [ 460.322435][ T6857] name failslab, interval 1, probability 0, space 0, times 0 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.329430][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.1.445 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.333696][ T6857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.338415][ T6857] Call Trace: May 18 03:33:41 syzkaller kern.warn kernel: [ 460.339907][ T6857] May 18 03:33:41 syzkaller kern.warn kernel: [ 460.341237][ T6857] dump_stack_lvl+0x16c/0x1f0 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.343406][ T6857] should_fail_ex+0x497/0x5b0 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.345572][ T6857] ? fs_reclaim_acquire+0xae/0x160 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.348000][ T6857] should_failslab+0xc2/0x120 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.350269][ T6857] __kmalloc_noprof+0xcb/0x400 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.352433][ T6857] shmem_initxattrs+0x168/0x5a0 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.354165][ T6857] ? evm_inode_init_security+0x237/0x320 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.356613][ T6857] security_inode_init_security+0x21c/0x380 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.358873][ T6857] ? __pfx_shmem_initxattrs+0x10/0x10 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.361083][ T6857] ? __pfx_security_inode_init_security+0x10/0x10 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.363822][ T6857] ? shmem_get_inode+0x6e4/0xe90 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.365793][ T6857] shmem_mknod+0xe9/0x240 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.367110][ T6857] ? security_inode_create+0xe3/0x120 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.368928][ T6857] vfs_create+0x4c2/0x770 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.370590][ T6857] do_mknodat+0x3d5/0x5d0 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.372269][ T6857] ? __pfx_do_mknodat+0x10/0x10 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.374499][ T6857] ? getname_flags.part.0+0x1c5/0x550 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.376935][ T6857] ? __pfx_ksys_write+0x10/0x10 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.379008][ T6857] __x64_sys_mknodat+0xaf/0xe0 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.381041][ T6857] do_syscall_64+0xcd/0x250 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.383246][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:41 syzkaller kern.warn kernel: [ 460.385936][ T6857] RIP: 0033:0x7ff8deb77299 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.387799][ T6857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.395952][ T6857] RSP: 002b:00007ff8df90e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.400666][ T6857] RAX: ffffffffffffffda RBX: 00007ff8ded05f80 RCX: 00007ff8deb77299 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.404671][ T6857] RDX: 0000000000000000 RSI: 0000000020002600 RDI: 0000000000000003 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.408120][ T6857] RBP: 00007ff8df90e0a0 R08: 0000000000000000 R09: 0000000000000000 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.411370][ T6857] R10: 0000000000000702 R11: 0000000000000246 R12: 0000000000000002 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.414695][ T6857] R13: 000000000000000b R14: 00007ff8ded05f80 R15: 00007fff01e8bc48 May 18 03:33:41 syzkaller kern.warn kernel: [ 460.418291][ T6857] [ 460.699556][ T5375] Bluetooth: hci4: sending frame failed (-49) [ 460.704859][ T5369] Bluetooth: hci4: Opcode 0x1003 failed: -49 May 18 03:33:41 syzkaller kern.err kernel: [ 460.699556][ T5375] Bluetooth: hci4: sending frame failed (-49) May 18 03:33:41 syzkaller kern.err kernel: [ 460.704859][ T5369] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 461.011152][ T39] kauditd_printk_skb: 94 callbacks suppressed [ 461.011167][ T39] audit: type=1400 audit(2000000021.690:459): avc: denied { create } for pid=6868 comm="syz.1.452" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 461.024689][ T39] audit: type=1400 audit(2000000021.700:460): avc: denied { map_create } for pid=6868 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 May 18 03:33:41 syzkaller kern.warn kernel: [ 461.011152][ T39] kauditd_printk_skb: 94 callbacks suppressed May 18 03:33:41 syzkaller kern.notice kernel: [ 461.011167][ T39] audit: type=1400 audit(2000000021.690:459): avc: denied { create } for pid=6868 comm="syz.1.452" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode pe [ 461.053892][ T39] audit: type=1400 audit(2000000021.700:461): avc: denied { prog_load } for pid=6868 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 May 18 03:33:41 syzkaller kern.notice kernel: [ 461.024689][ T39] audit: type=1400 audit(2000000021.700:460): avc: denied { map_create } for pid=6868 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 May 18 03:33:41 syzkaller kern.notice kernel: [ 461.053892][ T39] audit: type=1400 audit(2000000021.700:461): avc: denied { prog_load } for pid=6868 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 461.084624][ T39] audit: type=1400 audit(2000000021.700:462): avc: denied { prog_load } for pid=6868 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 461.093373][ T39] audit: type=1400 audit(2000000021.700:463): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 461.101985][ T39] audit: type=1400 audit(2000000021.710:464): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 461.116407][ T39] audit: type=1400 audit(2000000021.710:465): avc: denied { prog_load } for pid=6872 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 461.124947][ T39] audit: type=1400 audit(2000000021.710:466): avc: denied { create } for pid=6867 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 May 18 03:33:41 [ 461.134508][ T39] audit: type=1400 audit(2000000021.730:467): avc: denied { read } for pid=6872 comm="syz.2.451" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 syzkaller kern.notice kernel: [ 461.084624][ T39] audit: type=1400 audit(2000000021.700:462): avc: denied { prog_load } for pid=6868 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0[ 461.160668][ T39] audit: type=1400 audit(2000000021.730:468): avc: denied { create } for pid=6872 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 May 18 03:33:41 syzkaller kern.notice kernel: [ 461.093373][ T39] audit: type=1400 audit(2000000021.700:463): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l May 18 03:33:41 syzkaller kern.notice kernel: [ 461.101985][ T39] audit: type=1400 audit(2000000021.710:464): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l May 18 03:33:41 syzkaller kern.notice kernel: [ 461.116407][ T39] audit: type=1400 audit(2000000021.710:465): avc: denied { prog_load } for pid=6872 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 May 18 03:33:41 syzkaller kern.notice kernel: [ 461.124947][ T39] audit: type=1400 audit(2000000021.710:466): avc: denied { create } for pid=6867 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissiv May 18 03:33:41 syzkaller kern.notice kernel: [ 461.134508][ T39] audit: type=1400 audit(2000000021.730:467): avc: denied { read } for pid=6872 comm="syz.2.451" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_d May 18 03:33:41 syzkaller kern.notice kernel: [ 461.160668][ T39] audit: type=1400 audit(2000000021.730:468): avc: denied { create } for pid=6872 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 463.678561][ T6950] veth0_vlan: entered allmulticast mode May 18 03:33:44 syzkaller kern.info kernel: [ 463.678561][ T6950] veth0_vlan: entered allmulticast mode [ 463.782909][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.787678][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state May 18 03:33:44 syzkaller kern.info kernel: [ 463.782909][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state May 18 03:33:44 syzkaller kern.info kernel: [ 463.787678][ T6950] bridge0: port 1(br[ 463.807557][ T6950] bridge0: entered allmulticast mode idge_slave_0) entered disabled state May 18 03:33:44 syzkaller kern.info kernel: [ 463.807557][ T6950] bridge0: entered allmulticast mode [ 464.296865][ T6981] veth0_vlan: entered allmulticast mode [ 464.301431][ T6985] FAULT_INJECTION: forcing a failure. [ 464.301431][ T6985] name fail_usercopy, interval 1, probability 0, space 0, times 0 May 18 03:33:44 syzkaller kern.info kernel: [ 464.296865][ T6981] veth0_vlan: entered allmulticast mode May 18 03:33:44 syzkaller kern.notice kernel: [ 464.301431][ T6985] FAULT_INJECTION: forcing a failure. May 18 03:33:44 syzkaller kern.notice kernel: [ 464.301431][ T6985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.323921][ T6985] CPU: 2 UID: 0 PID: 6985 Comm: syz.1.496 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 464.328725][ T6985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 464.333073][ T6985] Call Trace: [ 464.334493][ T6985] [ 464.335718][ T6985] dump_stack_lvl+0x16c/0x1f0 [ 464.337706][ T6985] should_fail_ex+0x497/0x5b0 [ 464.340490][ T6985] _copy_from_user+0x30/0xf0 [ 464.342823][ T6985] __do_sys_add_key+0x22d/0x460 [ 464.345033][ T6985] ? __pfx___do_sys_add_key+0x10/0x10 [ 464.347484][ T6985] ? ksys_write+0x1ab/0x260 [ 464.349401][ T6985] do_syscall_64+0xcd/0x250 [ 464.351295][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.353874][ T6985] RIP: 0033:0x7ff8deb77299 [ 464.355866][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.364318][ T6985] RSP: 002b:00007ff8df90e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 464.368563][ T6985] RAX: ffffffffffffffda RBX: 00007ff8ded05f80 RCX: 00007ff8deb77299 [ 464.372368][ T6985] RDX: 0000000020001940 RSI: 0000000020001900 RDI: 00000000200018c0 [ 464.376166][ T6985] RBP: 00007ff8df90e0a0 R08: fffffffffffffffe R09: 0000000000000000 [ 464.379679][ T6985] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 464.383181][ T6985] R13: 000000000000000b R14: 00007ff8ded05f80 R15: 00007fff01e8bc48 [ 464.386648][ T6985] May 18 03:33:45 syzkaller kern.warn kernel: [ 464.323921][ T6985] CPU: 2 UID: 0 PID: 6985 Comm: syz.1.496 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.328725][ T6985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.333073][ T6985] Call Trace: May 18 03:33:45 syzkaller kern.warn kernel: [ 464.334493][ T6985] May 18 03:33:45 syzkaller kern.warn kernel: [ 464.335718][ T6985] dump_stack_lvl+0x16c/0x1f0 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.337706][ T6985] should_fail_ex+0x497/0x5b0 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.340490][ T6985] _copy_from_user+0x30/0xf0 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.342823][ T6985] __do_sys_add_key+0x22d/0x460 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.345033][ T6985] ? __pfx___do_sys_add_key+0x10/0x10 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.347484][ T6985] ? ksys_write+0x1ab/0x260 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.349401][ T6985] do_syscall_64+0xcd/0x250 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.351295][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:45 syzkaller kern.warn kernel: [ 464.353874][ T6985] RIP: 0033:0x7ff8deb77299 May 18 03:33:45 syzkaller kern.w[ 464.473444][ T6981] ªªªªªªm: renamed from vlan0 arn kernel: [ 464.355866][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.364318][ T6985] RSP: 002b:00007ff8df90e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.368563][ T6985] RAX: ffffffffffffffda RBX: 00007ff8ded05f80 RCX: 00007ff8deb77299 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.372368][ T6985] RDX: 0000000020001940 RSI: 0000000020001900 RDI: 00000000200018c0 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.376166][ T6985] RBP: 00007ff8df90e0a0 R08: fffffffffffffffe R09: 0000000000000000 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.379679][ T6985] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.383181][ T6985] R13: 000000000000000b R14: 00007ff8ded05f80 R15: 00007fff01e8bc48 May 18 03:33:45 syzkaller kern.warn kernel: [ 464.386648][ T6985] May 18 03:33:45 syzkaller kern.info kernel: [ 464.473444][ T6981] ªªªªªªm: renamed from vlan0 [ 464.559901][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.565187][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.575941][ T6988] bridge0: entered allmulticast mode May 18 03:33:45 syzkaller kern.info kernel: [ 464.559901][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state May 18 03:33:45 syzkaller kern.info kernel: [ 464.565187][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state May 18 03:33:45 syzkaller kern.info kernel: [ 464.575941][ T6988] bridge0: entered allmulticast mode [ 465.505161][ T7020] FAULT_INJECTION: forcing a failure. [ 465.505161][ T7020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.514386][ T7020] CPU: 1 UID: 0 PID: 7020 Comm: syz.2.510 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 465.518592][ T7020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.525346][ T7020] Call Trace: [ 465.527376][ T7020] [ 465.529162][ T7020] dump_stack_lvl+0x16c/0x1f0 [ 465.531598][ T7020] should_fail_ex+0x497/0x5b0 [ 465.533806][ T7020] _copy_from_user+0x30/0xf0 [ 465.535980][ T7020] kstrtouint_from_user+0xd7/0x1c0 [ 465.539372][ T7020] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 465.542383][ T7020] ? __pfx_lock_acquire+0x10/0x10 [ 465.544543][ T7020] proc_fail_nth_write+0x84/0x270 [ 465.546948][ T7020] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 465.549462][ T7020] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 465.551948][ T7020] vfs_write+0x29a/0x1140 [ 465.553884][ T7020] ? __fdget_pos+0xeb/0x180 [ 465.555875][ T7020] ? __pfx_vfs_write+0x10/0x10 [ 465.559018][ T7020] ? __pfx___mutex_lock+0x10/0x10 [ 465.561300][ T7020] ? __fget_files+0x256/0x400 [ 465.563447][ T7020] ksys_write+0x12f/0x260 [ 465.565479][ T7020] ? __pfx_ksys_write+0x10/0x10 [ 465.568110][ T7020] do_syscall_64+0xcd/0x250 [ 465.570403][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.573468][ T7020] RIP: 0033:0x7fabc4375e1f [ 465.575821][ T7020] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 465.585148][ T7020] RSP: 002b:00007fabc3dff040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 465.588623][ T7020] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fabc4375e1f [ 465.591809][ T7020] RDX: 0000000000000001 RSI: 00007fabc3dff0b0 RDI: 0000000000000003 [ 465.594797][ T7020] RBP: 00007fabc3dff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 465.597782][ T7020] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 465.601372][ T7020] R13: 000000000000000b R14: 00007fabc4505f80 R15: 00007ffe23358218 [ 465.605464][ T7020] May 18 03:33:46 [ 465.627608][ T5369] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3 syzkaller kern.notice kernel: [ 465.505161][ T7020] FAULT_INJECTION: forcing a failure. May 18 03:33:46 syzkaller kern.notice kernel: [ 465.505161][ T7020] name fail_usercopy, interval 1, probability 0, space 0, times 0 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.514386][ T7020] CPU: 1 UID: 0 PID: 7020 Comm: syz.2.510 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.518592][ T7020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.525346][ T7020] Call Trace: May 18 03:33:46 syzkaller kern.warn kernel: [ 465.527376][ T7020] May 18 03:33:46 syzkaller kern.warn kernel: [ 465.529162][ T7020] dump_stack_lvl+0x16c/0x1f0 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.531598][ T7020] should_fail_ex+0x497/0x5b0 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.533806][ T7020] _copy_from_user+0x30/0xf0 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.535980][ T7020] kstrtouint_from_user+0xd7/0x1c0 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.539372][ T7020] ? __pfx_kstrtouint_from_user+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.542383][ T7020] ? __pfx_lock_acquire+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.544543][ T7020] proc_fail_nth_write+0x84/0x270 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.546948][ T7020] ? __pfx_proc_fail_nth_write+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.549462][ T7020] ? __pfx_proc_fail_nth_write+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.551948][ T7020] vfs_write+0x29a/0x1140 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.553884][ T7020] ? __fdget_pos+0xeb/0x180 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.555875][ T7020] ? __pfx_vfs_write+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.559018][ T7020] ? __pfx___mutex_lock+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.561300][ T7020] ? __fget_files+0x256/0x400 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.563447][ T7020] ksys_write+0x12f/0x260 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.565479][ T7020] ? __pfx_ksys_write+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.568110][ T7020] do_syscall_64+0xcd/0x250 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.570403][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:46 syzkaller kern.warn kernel: [ 465.573468][ T7020] RIP: 0033:0x7fabc4375e1f May 18 03:33:46 syzkaller kern.warn kernel: [ 465.575821][ T7020] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.585148][ T7020] RSP: 002b:00007fabc3dff040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.588623][ T7020] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fabc4375e1f May 18 03:33:46 syzkaller kern.warn kernel: [ 465.591809][ T7020] RDX: 0000000000000001 RSI: 00007fabc3dff0b0 RDI: 0000000000000003 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.594797][ T7020] RBP: 00007fabc3dff0a0 R08: 0000000000000000 R09: 0000000000000000 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.597782][ T7020] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.601372][ T7020] R13: 000000000000000b R14: 00007fabc4505f80 R15: 00007ffe23358218 May 18 03:33:46 syzkaller kern.warn kernel: [ 465.605464][ T7020] May 18 03:33:46 syzkaller kern.warn kernel: [ 465.627608][ T5369] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3 [ 465.627714][ T5369] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3 [ 465.982647][ T5369] BUG: workqueue leaked atomic, lock or RCU: kworker/u33:2[5369] [ 465.982647][ T5369] preempt=0x00000000 lock=0->1 RCU=0->0 workfn=hci_rx_work [ 466.009347][ T5369] 1 lock held by kworker/u33:2/5369: May 18 03:33:46 [ 466.013092][ T5369] #0: ffff888046089518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f6/0x8eb0 [ 466.016946][ T5369] CPU: 1 UID: 0 PID: 5369 Comm: kworker/u33:2 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 syzkaller kern.w[ 466.023598][ T5369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 arn kernel: [ 4[ 466.029963][ T5369] Workqueue: hci0 hci_rx_work [ 466.033773][ T5369] Call Trace: [ 466.035292][ T5369] [ 466.036613][ T5369] dump_stack_lvl+0x16c/0x1f0 [ 466.038664][ T5369] process_one_work+0x11ea/0x1b40 [ 466.040569][ T5369] ? __pfx_hci_rx_work+0x10/0x10 65.627714][ T5369] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3 [ 466.059739][ T39] kauditd_printk_skb: 486 callbacks suppressed [ 466.059753][ T39] audit: type=1400 audit(2000000026.730:955): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 466.067825][ T5369] ? __pfx_hci_rx_work+0x10/0x10 [ 466.067883][ T5369] ? __pfx_hci_rx_work+0x10/0x10 [ 466.067905][ T5369] ? __pfx_process_one_work+0x10/0x10 [ 466.091608][ T5369] ? assign_work+0x1a0/0x250 [ 466.091633][ T5369] worker_thread+0x6c8/0xf20 [ 466.091655][ T5369] ? __pfx_worker_thread+0x10/0x10 [ 466.091674][ T5369] kthread+0x2c1/0x3a0 [ 466.091688][ T5369] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.091709][ T5369] ? __pfx_kthread+0x10/0x10 [ 466.091722][ T5369] ret_from_fork+0x45/0x80 [ 466.091744][ T5369] ? __pfx_kthread+0x10/0x10 [ 466.091758][ T5369] ret_from_fork_asm+0x1a/0x30 May 18 03:33:46 [ 466.091781][ T5369] syzkaller kern.e[ 466.109214][ T39] audit: type=1400 audit(2000000026.740:956): avc: denied { read write } for pid=5363 comm="syz-executor" name="loop0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 rr kernel: [ 465.982647][ T5369] BUG: workqueue leaked atomic, lock or RCU: kworker/u33:2[5369] [ 466.136134][ T7041] capability: warning: `syz.3.518' uses deprecated v2 capabilities in a way that may be insecure May 18 03:33:46 syzkaller kern.err kernel: [ 465.982647][ T5369] preempt=0x00000000 lock=0->1 RCU=0->0 workfn=hci_rx_work May 18 03:33:46 syzkaller kern.warn kernel: [ 466.009347][ T5369] 1 lock held by kworker/u33:2/5369: May 18 03:33:46 syzkaller kern.warn kernel: [ 466.013092][ T5369] #0: ffff888046089518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_fra[ 466.183317][ T39] audit: type=1400 audit(2000000026.770:957): avc: denied { node_bind } for pid=7031 comm="syz.2.515" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=0 me+0x14f6/0x8eb0 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.016946][ T5369] CPU: 1 UID: 0 PID: 5369 Comm: kworker/u33:2 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.023598][ T5369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.029963][ T5369] Workqueue: hci0 hci_rx_work May 18 03:33:46 syzkaller kern.warn kernel: [ 466.033773][ T5369] Call Trace: May 18 03:33:46 syzkaller kern.warn kernel: [ 466.035292][ T5369] May 18 03:33:46 syzkaller kern.warn kernel: [ 466.036613][ T5369] dump_stack_lvl+0x16c/0x1f0 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.038664][ T5369] process_one_work+0x[ 466.227199][ T39] audit: type=1400 audit(2000000026.770:958): avc: denied { map_create } for pid=7031 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 466.253366][ T39] audit: type=1400 audit(2000000026.810:959): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 11ea/0x1b40 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.040569][ T5369] ? __pfx_hci_rx_work+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.059739][ T39] kauditd_printk_skb: 486 callbacks suppressed[ 466.262290][ T39] audit: type=1400 audit(2000000026.820:960): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 May 18 03:33:46[ 466.284814][ T39] audit: type=1400 audit(2000000026.820:961): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.notice kernel: [[ 466.294911][ T39] audit: type=1400 audit(2000000026.820:962): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 466.059753][ [ 466.305751][ T39] audit: type=1400 audit(2000000026.820:963): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 T39] audit: typ[ 466.315492][ T39] audit: type=1400 audit(2000000026.820:964): avc: denied { prog_load } for pid=7036 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 e=1400 audit(2000000026.730:955): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l May 18 03:33:46 syzkaller kern.warn kernel: [ 466.067825][ T5369] ? __pfx_hci_rx_work+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.067883][ T5369] ? __pfx_hci_rx_work+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.067905][ T5369] ? __pfx_process_one_work+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.091608][ T5369] ? assign_work+0x1a0/0x250 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.091633][ T5369] worker_thread+0x6c8/0xf20 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.091655][ T5369] ? __pfx_worker_thread+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.091674][ T5369] kthread+0x2c1/0x3a0 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.091688][ T5369] ? _raw_spin_unlock_irq+0x23/0x50 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.091709][ T5369] ? __pfx_kthread+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.091722][ T5369] ret_from_fork+0x45/0x80 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.091744][ T5369] ? __pfx_kthread+0x10/0x10 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.091758][ T5369] ret_from_fork_asm+0x1a/0x30 May 18 03:33:46 syzkaller kern.warn kernel: [ 466.091781][ T5369] May 18 03:33:46 syzkaller kern.notice kernel: [ 466.109214][ T39] audit: type=1400 audit(2000000026.740:956): avc: denied { read write } for pid=5363 comm="syz-executor" name="loop0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fix May 18 03:33:46 syzkaller kern.info kernel: [ 466.136134][ T7041] capability: warning: `syz.3.518' uses deprecated v2 capabilities in a way that may be insecure May 18 03:33:46 syzkaller kern.notice kernel: [ 466.183317][ T39] audit: type=1400 audit(2000000026.770:957): avc: denied { node_bind } for pid=7031 comm="syz.2.515" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissi May 18 03:33:46 syzkaller kern.notice kernel: [ 466.227199][ T39] audit: type=1400 audit(2000000026.770:958): avc: denied { map_create } for pid=7031 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 May 18 03:33:46 syzkaller kern.notice kernel: [ 466.253366][ T39] audit: type=1400 audit(2000000026.810:959): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l May 18 03:33:47 syzkaller kern.notice kernel: [ 466.262290][ T39] audit: type=1400 audit(2000000026.820:960): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l May 18 03:33:47 syzkaller kern.notice kernel: [ 466.284814][ T39] audit: type=1400 audit(2000000026.820:961): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l May 18 03:33:47 syzkaller kern.notice kernel: [ 466.294911][ T39] audit: type=1400 audit(2000000026.820:962): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l May 18 03:33:47 syzkaller kern.notice kernel: [ 466.305751][ T39] audit: type=1400 audit(2000000026.820:963): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=l May 18 03:33:47 syzkaller kern.notice kernel: [ 466.315492][ T39] audit: type=1400 audit(2000000026.820:964): avc: denied { prog_load } for pid=7036 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 467.410067][ T5369] [ 467.411194][ T5369] ====================================================== [ 467.414323][ T5369] WARNING: possible circular locking dependency detected [ 467.417067][ T5369] 6.10.0-syzkaller-12562-g1722389b0d86 #0 Not tainted [ 467.420268][ T5369] ------------------------------------------------------ [ 467.423346][ T5369] kworker/u33:2/5369 is trying to acquire lock: [ 467.426110][ T5369] ffff88801f3d1948 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 467.430576][ T5369] [ 467.430576][ T5369] but task is already holding lock: [ 467.436431][ T5369] ffff888046089518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f6/0x8eb0 [ 467.440463][ T5369] [ 467.440463][ T5369] which lock already depends on the new lock. [ 467.440463][ T5369] [ 467.444922][ T5369] [ 467.444922][ T5369] the existing dependency chain (in reverse order) is: [ 467.448858][ T5369] [ 467.448858][ T5369] -> #2 (&chan->lock/1){+.+.}-{3:3}: [ 467.452166][ T5369] __mutex_lock+0x175/0x9c0 [ 467.454214][ T5369] l2cap_recv_frame+0x14f6/0x8eb0 [ 467.456693][ T5369] l2cap_recv_acldata+0x9b4/0xb70 [ 467.459226][ T5369] hci_rx_work+0xaab/0x1610 [ 467.461575][ T5369] process_one_work+0x9c5/0x1b40 [ 467.463904][ T5369] worker_thread+0x6c8/0xf20 [ 467.466099][ T5369] kthread+0x2c1/0x3a0 [ 467.468183][ T5369] ret_from_fork+0x45/0x80 [ 467.470312][ T5369] ret_from_fork_asm+0x1a/0x30 [ 467.472519][ T5369] [ 467.472519][ T5369] -> #1 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}: [ 467.475985][ T5369] process_one_work+0x927/0x1b40 [ 467.478020][ T5369] worker_thread+0x6c8/0xf20 [ 467.479948][ T5369] kthread+0x2c1/0x3a0 [ 467.481737][ T5369] ret_from_fork+0x45/0x80 [ 467.483800][ T5369] ret_from_fork_asm+0x1a/0x30 [ 467.486088][ T5369] [ 467.486088][ T5369] -> #0 ((wq_completion)hci5#2){+.+.}-{0:0}: [ 467.489553][ T5369] __lock_acquire+0x24ed/0x3cb0 [ 467.492137][ T5369] lock_acquire+0x1b1/0x560 [ 467.494781][ T5369] process_one_work+0x12a6/0x1b40 [ 467.497111][ T5369] worker_thread+0x6c8/0xf20 [ 467.499171][ T5369] kthread+0x2c1/0x3a0 [ 467.501043][ T5369] ret_from_fork+0x45/0x80 [ 467.503038][ T5369] ret_from_fork_asm+0x1a/0x30 [ 467.505127][ T5369] [ 467.505127][ T5369] other info that might help us debug this: [ 467.505127][ T5369] [ 467.509181][ T5369] Chain exists of: [ 467.509181][ T5369] (wq_completion)hci5#2 --> (work_completion)(&hdev->rx_work) --> &chan->lock/1 [ 467.509181][ T5369] [ 467.515033][ T5369] Possible unsafe locking scenario: [ 467.515033][ T5369] [ 467.518028][ T5369] CPU0 CPU1 [ 467.520053][ T5369] ---- ---- [ 467.521980][ T5369] lock(&chan->lock/1); [ 467.523696][ T5369] lock((work_completion)(&hdev->rx_work)); [ 467.526935][ T5369] lock(&chan->lock/1); [ 467.529589][ T5369] lock((wq_completion)hci5#2); [ 467.531709][ T5369] [ 467.531709][ T5369] *** DEADLOCK *** [ 467.531709][ T5369] [ 467.534944][ T5369] 1 lock held by kworker/u33:2/5369: [ 467.537080][ T5369] #0: ffff888046089518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f6/0x8eb0 [ 467.540841][ T5369] [ 467.540841][ T5369] stack backtrace: [ 467.542985][ T5369] CPU: 1 UID: 0 PID: 5369 Comm: kworker/u33:2 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 467.546698][ T5369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.550581][ T5369] Workqueue: hci5 hci_cmd_timeout [ 467.552846][ T5369] Call Trace: [ 467.554236][ T5369] [ 467.555420][ T5369] dump_stack_lvl+0x116/0x1f0 [ 467.557281][ T5369] check_noncircular+0x31a/0x400 [ 467.559227][ T5369] ? __pfx_check_noncircular+0x10/0x10 [ 467.561526][ T5369] ? lockdep_lock+0xc6/0x200 [ 467.563526][ T5369] ? __pfx_lockdep_lock+0x10/0x10 [ 467.565656][ T5369] __lock_acquire+0x24ed/0x3cb0 [ 467.567853][ T5369] ? __pfx___lock_acquire+0x10/0x10 [ 467.570156][ T5369] ? __pfx_mark_lock+0x10/0x10 [ 467.572259][ T5369] ? find_held_lock+0x2d/0x110 [ 467.574488][ T5369] lock_acquire+0x1b1/0x560 [ 467.576627][ T5369] ? process_one_work+0x1277/0x1b40 [ 467.579019][ T5369] ? __pfx_lock_acquire+0x10/0x10 [ 467.581218][ T5369] ? __pfx_lock_release+0x10/0x10 [ 467.583480][ T5369] ? mark_held_locks+0x9f/0xe0 [ 467.585565][ T5369] ? process_one_work+0x1277/0x1b40 [ 467.587898][ T5369] process_one_work+0x12a6/0x1b40 [ 467.590124][ T5369] ? process_one_work+0x1277/0x1b40 [ 467.592443][ T5369] ? __pfx_lock_acquire+0x10/0x10 [ 467.594545][ T5369] ? __pfx_process_one_work+0x10/0x10 [ 467.596670][ T5369] ? assign_work+0x1a0/0x250 [ 467.598685][ T5369] worker_thread+0x6c8/0xf20 [ 467.600801][ T5369] ? __pfx_worker_thread+0x10/0x10 [ 467.603150][ T5369] kthread+0x2c1/0x3a0 [ 467.605017][ T5369] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.607348][ T5369] ? __pfx_kthread+0x10/0x10 [ 467.609448][ T5369] ret_from_fork+0x45/0x80 [ 467.611454][ T5369] ? __pfx_kthread+0x10/0x10 [ 467.613642][ T5369] ret_from_fork_asm+0x1a/0x30 [ 467.615815][ T5369] [ 467.619505][ T5369] Bluetooth: hci5: command tx timeout May 18 03:33:48 syzkaller kern.warn kernel: [ 467.410067][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.411194][ T5369] =============================[ 467.630999][ T5369] BUG: workqueue leaked atomic, lock or RCU: kworker/u33:2[5369] [ 467.630999][ T5369] preempt=0x00000000 lock=1->0 RCU=0->0 workfn=hci_cmd_timeout [ 467.638473][ T5369] INFO: lockdep is turned off. ================[ 467.640552][ T5369] CPU: 1 UID: 0 PID: 5369 Comm: kworker/u33:2 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 ========= May 18 03:33:48 syzka[ 467.645296][ T5369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 ller kern.warn k[ 467.645308][ T5369] Workqueue: hci5 hci_cmd_timeout ernel: [ 467.414323][ T5369] WARNING: possible circular locking dependency detected May 18 03:33:48 syzkaller kern.warn kernel: [ 467.417067][ T5369] 6.10.0-syzkaller-12562-g1722389b0d86 #0 Not tainted [ 467.645328][ T5369] Call Trace: [ 467.645334][ T5369] [ 467.645340][ T5369] dump_stack_lvl+0x16c/0x1f0 [ 467.645362][ T5369] process_one_work+0x11ea/0x1b40 [ 467.645383][ T5369] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 467.645397][ T5369] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 467.645411][ T5369] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 467.645419][ T5369] ? __pfx_process_one_work+0x10/0x10 [ 467.645431][ T5369] ? assign_work+0x1a0/0x250 [ 467.645442][ T5369] worker_thread+0x6c8/0xf20 [ 467.645454][ T5369] ? __pfx_worker_thread+0x10/0x10 [ 467.645465][ T5369] kthread+0x2c1/0x3a0 [ 467.645473][ T5369] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.645485][ T5369] ? __pfx_kthread+0x10/0x10 [ 467.645493][ T5369] ret_from_fork+0x45/0x80 [ 467.645506][ T5369] ? __pfx_kthread+0x10/0x10 [ 467.645514][ T5369] ret_from_fork_asm+0x1a/0x30 [ 467.645528][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.420268][ T5369] ------------------------------------------------------ May 18 03:33:48 syzkaller kern.warn kernel: [ 467.423346][ T5369] kworker/u33:2/5369 is trying to acquire lock: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.426110][ T5369] ffff88801f3d1948 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.430576][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.430576][ T5369] but task is already holding lock: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.436431][ T5369] ffff888046089518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f6/0x8eb0 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.440463][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.440463][ T5369] which lock already depends on the new lock. May 18 03:33:48 syzkaller kern.warn kernel: [ 467.440463][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.444922][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.444922][ T5369] the existing dependency chain (in reverse order) is: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.448858][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.448858][ T5369] -> #2 (&chan->lock/1){+.+.}-{3:3}: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.452166][ T5369] __mutex_lock+0x175/0x9c0 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.454214][ T5369] l2cap_recv_frame+0x14f6/0x8eb0 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.456693][ T5369] l2cap_recv_acldata+0x9b4/0xb70 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.459226][ T5369] hci_rx_work+0xaab/0x1610 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.461575][ T5369] process_one_work+0x9c5/0x1b40 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.463904][ T5369] worker_thread+0x6c8/0xf20 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.466099][ T5369] kthread+0x2c1/0x3a0 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.468183][ T5369] ret_from_fork+0x45/0x80 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.470312][ T5369] ret_from_fork_asm+0x1a/0x30 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.472519][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.472519][ T5369] -> #1 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.475985][ T5369] process_one_work+0x927/0x1b40 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.478020][ T5369] worker_thread+0x6c8/0xf20 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.479948][ T5369] kthread+0x2c1/0x3a0 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.481737][ T5369] ret_from_fork+0x45/0x80 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.483800][ T5369] ret_from_fork_asm+0x1a/0x30 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.486088][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.486088][ T5369] -> #0 ((wq_completion)hci5#2){+.+.}-{0:0}: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.489553][ T5369] __lock_acquire+0x24ed/0x3cb0 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.492137][ T5369] lock_acquire+0x1b1/0x560 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.494781][ T5369] process_one_work+0x12a6/0x1b40 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.497111][ T5369] worker_thread+0x6c8/0xf20 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.499171][ T5369] kthread+0x2c1/0x3a0 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.501043][ T5369] ret_from_fork+0x45/0x80 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.503038][ T5369] ret_from_fork_asm+0x1a/0x30 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.505127][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.505127][ T5369] other info that might help us debug this: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.505127][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.509181][ T5369] Chain exists of: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.509181][ T5369] (wq_completion)hci5#2 --> (work_completion)(&hdev->rx_work) --> &chan->lock/1 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.509181][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.515033][ T5369] Possible unsafe locking scenario: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.515033][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.518028][ T5369] CPU0 CPU1 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.520053][ T5369] ---- ---- May 18 03:33:48 syzkaller kern.warn kernel: [ 467.521980][ T5369] lock(&chan->lock/1); May 18 03:33:48 syzkaller kern.warn kernel: [ 467.523696][ T5369] lock((work_completion)(&hdev->rx_work)); May 18 03:33:48 syzkaller kern.warn kernel: [ 467.526935][ T5369] lock(&chan->lock/1); May 18 03:33:48 syzkaller kern.warn kernel: [ 467.529589][ T5369] lock((wq_completion)hci5#2); May 18 03:33:48 syzkaller kern.warn kernel: [ 467.531709][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.531709][ T5369] *** DEADLOCK *** May 18 03:33:48 syzkaller kern.warn kernel: [ 467.531709][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.534944][ T5369] 1 lock held by kworker/u33:2/5369: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.537080][ T5369] #0: ffff888046089518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f6/0x8eb0 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.540841][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.540841][ T5369] stack backtrace: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.542985][ T5369] CPU: 1 UID: 0 PID: 5369 Comm: kworker/u33:2 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.546698][ T5369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.550581][ T5369] Workqueue: hci5 hci_cmd_timeout May 18 03:33:48 syzkaller kern.warn kernel: [ 467.552846][ T5369] Call Trace: May 18 03:33:48 syzkaller kern.warn kernel: [ 467.554236][ T5369] May 18 03:33:48 syzkaller kern.warn kernel: [ 467.555420][ T5369] dump_stack_lvl+0x116/0x1f0 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.557281][ T5369] check_noncircular+0x31a/0x400 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.559227][ T5369] ? __pfx_check_noncircular+0x10/0x10 May 18 03:33:48 syzkaller kern.warn kernel: [ 46May 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.warn kernel: [ 467.570156][ T5369] ? __pfx_markMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 May 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.warn kernel: [ 467.609448][ T5369] ret_from_fork+0x45/0x80 May 18 03:33:48 syzkaller kern.warn kernel: [ 467.May 18 03:33:48 syzkaller kern.wMay 18 03:33:48 May 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.wMay 18 03:33:48 syzkaller kern.warn kernel: [ 4May 18 03:33:48 syzkaller kern.w[ 470.050800][ T5369] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 470.053974][ T5369] Bluetooth: hci1: Injecting HCI hardware error event [ 470.056887][ T5369] Bluetooth: hci1: hardware error 0x00 May 18 03:33:50 syzkaller kern.err kernel: [ 470.050800][ T5369] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 May 18 03:33:50 syzkaller kern.err kernel: [ 470.053974][ T5369] Bluetooth: hci1: Injecting HCI hardware error event May 18 03:33:50 syzkaller kern.err kernel: [ 470.056887][ T5369] Bluetooth: hci1: hardware error 0x00 [ 472.129606][ T5369] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 472.141710][ T39] kauditd_printk_skb: 239 callbacks suppressed [ 472.141721][ T39] audit: type=1400 audit(2000000032.821:1084): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 May 18 03:33:52 syzkaller kern.err kernel: [ 472.129606][ T5369] Bluetooth: hci1: Opcode 0x0c03 failed: -110 May 18 03:33:52 syzkaller kern.warn kernel: [ 472.141710][ T39] kauditd_printk_skb: 239 callbacks suppressed May 18 03:33:52 syzkaller kern.notice kernel: [ 472.141721][ T39] audit: type=1400 audit(2000000032.821:1084): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= [ 472.181296][ T39] audit: type=1400 audit(2000000032.841:1085): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 472.193015][ T39] audit: type=1400 audit(2000000032.841:1086): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 May 18 03:33:52 [ 472.209327][ T39] audit: type=1400 audit(2000000032.881:1087): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.notice kernel: [ 472.181296][ T39] audit: type=1400 audit(2000000032.841:1085)[ 472.221011][ T39] audit: type=1400 audit(2000000032.891:1088): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 : avc: denied { read } for pid=4807 comm="sys[ 472.230568][ T39] audit: type=1400 audit(2000000032.911:1089): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 logd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= May 18 03:33:52 syzkaller kern.notice kernel: [ 472.193015][ T39] audit: type=1400 audit(2000000032.841:1086): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:syste[ 472.253667][ T39] audit: type=1400 audit(2000000032.931:1090): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 m_r:syslogd_t tcontext=system_u:object_r:var_t tclass= May 18 03:33:52 syzkaller kern.notice kernel: [ 472.209327][ T39] audit: type=1400 audit(2000000032.881:1087): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= May 18 03:33:52 syzkaller kern.notice kernel: [ 472.221011][ T39] audit: type=1400 audit(2000000032.891:1088): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= [ 472.309899][ T39] audit: type=1400 audit(2000000032.991:1091): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 May 18 03:33:52 [ 472.323349][ T39] audit: type=1400 audit(2000000033.001:1092): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.notice kernel: [ 472.230568][ T39] audit: type=1400 audit(2000000032.911:1089): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= May 18 03:33:52 syzkaller kern.notice kernel: [ 472.253667][ T39] audit: type=1400 audit(2000000032.931:1090): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= May 18 03:33:53 [ 472.357034][ T39] audit: type=1400 audit(2000000033.031:1093): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.notice kernel: [ 472.309899][ T39] audit: type=1400 audit(2000000032.991:1091): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= May 18 03:33:53 syzkaller kern.notice kernel: [ 472.323349][ T39] audit: type=1400 audit(2000000033.001:1092): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= May 18 03:33:53 syzkaller kern.notice kernel: [ 472.357034][ T39] audit: type=1400 audit(2000000033.031:1093): avc: denied { read } for pid=4807 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass= VM DIAGNOSIS: 08:40:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806b144bc0 RCX=ffffffff817e4c2b RDX=ffff888044ddc880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003adf930 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d628979 R13=0000000000000001 R14=ffff88806b144bc8 R15=ffff88806b040000 RIP=ffffffff817e4c00 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005594a4a62e38 CR3=000000001fefc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb8f41060 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f802e3e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f802e3e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f802e3e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f802e3e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f802e3e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f802e3e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fdc7f5 RDI=ffffffff95197720 RBP=ffffffff951976e0 RSP=ffffc9000346f7f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000044 R14=ffffffff84fdc790 R15=0000000000000000 RIP=ffffffff84fdc81f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3f148f CR3=000000002e640000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c1fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558923f498 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555589245d7a 0000555589245cf0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555892419a0 0000555589241970 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555892419e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03800300100012b0 82100006800401c7 0800080029b40030 656c69662f2e01ff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0488000c88030004 000c84030404000c 800301e608000410 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000c8004010000 0c08060601018c00 08000c9803000800 0c90031ffffffffe ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0129f40073746e65 76652e79726f6d65 6d01ffffffffffff ffffe30803800320 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01001000019db410 0003800401c70800 080129f40073746e 6576652e79726f6d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d01ffffffffff ffffffe308038003 2010000c80040100 000c08060601018c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000c98030008 000c90031fffffff fe0488000c880300 04000c8403040400 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c800301e6080004 1000041000060c3e ee00100000040108 0006013486000800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000187ca1 RBX=0000000000000002 RCX=ffffffff8b112529 RDX=0000000000000000 RSI=ffffffff8b4cc580 RDI=ffffffff8bb08c00 RBP=ffffed100305b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d646fe1 R10=ffff88806b237f0b R11=0000000000000000 R12=0000000000000002 R13=ffff8880182d8000 R14=ffffffff90129fd8 R15=0000000000000000 RIP=ffffffff8b11391f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3340fff8 CR3=0000000025d20000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9113511fe893632f 01536e0710b14076 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda538e64fa8c1e0 6870d0411d38c04d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b36f9be1ea3cfb46 1e10bc79817b0dbb ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 887171a6d90da2e9 4336c8783ac99e87 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006b00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 84831db889321f38 0000011b0000011b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0195506f898f4792 905ad58a89f05dbc ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 88d2491a0000011b 000000000000011b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011b0000011b 89cbbea000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bb40fde2178fcf68 8f906ee6348181d4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bdd5ad61166953d2 814f95d9c7396a16 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff819c4bfd ffffffff819c4b84 ffffffff819c4ab5 ffffffff819b4a88 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff819c4c24 ffffffff819c4bfd ffffffff00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff819b4a88 ffffffff819b4a12 ffffffff819b49d7 ffffffff8132d795 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000003 RCX=ffffffff815560c2 RDX=fffffbfff264b0dd RSI=0000000000000008 RDI=ffffffff932586e0 RBP=ffff888045cfd720 RSP=ffffc90000908bf0 R8 =0000000000000000 R9 =fffffbfff264b0dc R10=ffffffff932586e7 R11=0000000000000000 R12=0000000000000003 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88801c0da000 RIP=ffffffff815560ca RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000040 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabc43e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabc43e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabc43e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabc43e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabc43e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabc43e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabc44d5488 00007fabc44d5480 00007fabc44d5478 00007fabc44d5450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabc503d100 00007fabc44d5440 00007fabc44d0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabc44d5498 00007fabc44d5490 00007fabc44d5488 00007fabc44d5480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000