[ 46.043848][ T39] audit: type=1400 audit(1719027002.989:82): avc: denied { siginh } for pid=5132 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.052045][ T39] audit: type=1400 audit(1719027003.019:83): avc: denied { read } for pid=4669 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 46.313059][ T39] audit: type=1400 audit(1719027003.289:84): avc: denied { write } for pid=5135 comm="sftp-server" path="pipe:[5454]" dev="pipefs" ino=5454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 47.295561][ T39] audit: type=1400 audit(1719027004.269:85): avc: denied { append } for pid=4669 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.305957][ T39] audit: type=1400 audit(1719027004.269:86): avc: denied { open } for pid=4669 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.315492][ T39] audit: type=1400 audit(1719027004.269:87): avc: denied { getattr } for pid=4669 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:10418' (ED25519) to the list of known hosts. [ 51.548881][ T39] audit: type=1400 audit(1719027008.519:88): avc: denied { name_bind } for pid=5194 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.589105][ T39] audit: type=1400 audit(1719027008.559:89): avc: denied { execute } for pid=5196 comm="sh" name="syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 51.597389][ T39] audit: type=1400 audit(1719027008.569:90): avc: denied { execute_no_trans } for pid=5196 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2024/06/22 03:30:08 fuzzer started 2024/06/22 03:30:09 dialing manager at localhost:30000 [ 52.110530][ T39] audit: type=1400 audit(1719027009.089:91): avc: denied { node_bind } for pid=5196 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.120396][ T39] audit: type=1400 audit(1719027009.089:92): avc: denied { name_bind } for pid=5196 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 52.387779][ T39] audit: type=1400 audit(1719027009.349:93): avc: denied { setattr } for pid=5207 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.405969][ T5211] cgroup: Unknown subsys name 'net' [ 52.409085][ T39] audit: type=1400 audit(1719027009.359:94): avc: denied { mounton } for pid=5209 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 52.420174][ T39] audit: type=1400 audit(1719027009.359:95): avc: denied { mount } for pid=5209 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 52.430757][ T39] audit: type=1400 audit(1719027009.369:96): avc: denied { create } for pid=5215 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.441230][ T39] audit: type=1400 audit(1719027009.369:97): avc: denied { write } for pid=5215 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.457103][ T5218] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.661030][ T5211] cgroup: Unknown subsys name 'rlimit' [ 53.612498][ T5208] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/22 03:30:10 starting 4 executor processes [ 54.440313][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.445685][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.451129][ T4632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.455912][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.461573][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.473584][ T4632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.478256][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.482287][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.486439][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.486940][ T4632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.488168][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.488405][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.490069][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.491028][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.491378][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.491615][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.493603][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.493720][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.494449][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.494710][ T4632] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.494893][ T4632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.495133][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.495511][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.498173][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.936817][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 54.953645][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 54.994638][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 55.046415][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 55.273537][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.276573][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.279495][ T5228] bridge_slave_0: entered allmulticast mode [ 55.283478][ T5228] bridge_slave_0: entered promiscuous mode [ 55.306928][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.309323][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.312338][ T5233] bridge_slave_0: entered allmulticast mode [ 55.315324][ T5233] bridge_slave_0: entered promiscuous mode [ 55.323968][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.326489][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.329371][ T5232] bridge_slave_0: entered allmulticast mode [ 55.333135][ T5232] bridge_slave_0: entered promiscuous mode [ 55.337384][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.341404][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.345594][ T5228] bridge_slave_1: entered allmulticast mode [ 55.350299][ T5228] bridge_slave_1: entered promiscuous mode [ 55.355366][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.357960][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.360699][ T5233] bridge_slave_1: entered allmulticast mode [ 55.363728][ T5233] bridge_slave_1: entered promiscuous mode [ 55.385645][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.389257][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.392960][ T5232] bridge_slave_1: entered allmulticast mode [ 55.395871][ T5232] bridge_slave_1: entered promiscuous mode [ 55.508074][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.511702][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.514444][ T5225] bridge_slave_0: entered allmulticast mode [ 55.517542][ T5225] bridge_slave_0: entered promiscuous mode [ 55.540478][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.570910][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.573870][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.577660][ T5225] bridge_slave_1: entered allmulticast mode [ 55.582343][ T5225] bridge_slave_1: entered promiscuous mode [ 55.587607][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.593566][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.598253][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.606596][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.698213][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.705748][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.779827][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.789351][ T5232] team0: Port device team_slave_0 added [ 55.797207][ T5228] team0: Port device team_slave_0 added [ 55.858205][ T5232] team0: Port device team_slave_1 added [ 55.893908][ T5228] team0: Port device team_slave_1 added [ 55.904145][ T5233] team0: Port device team_slave_0 added [ 55.910690][ T5225] team0: Port device team_slave_0 added [ 55.916072][ T5225] team0: Port device team_slave_1 added [ 55.959646][ T5233] team0: Port device team_slave_1 added [ 55.986627][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.989497][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.999087][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.125393][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.128219][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.139126][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.144097][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.147202][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.160848][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.166772][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.168885][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.178980][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.205039][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.207530][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.217102][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.235098][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.238101][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.250754][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.256867][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.262272][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.275153][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.281961][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.284915][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.296902][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.389565][ T5225] hsr_slave_0: entered promiscuous mode [ 56.396938][ T5225] hsr_slave_1: entered promiscuous mode [ 56.495670][ T5232] hsr_slave_0: entered promiscuous mode [ 56.499423][ T5232] hsr_slave_1: entered promiscuous mode [ 56.503209][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.506255][ T5232] Cannot create hsr debugfs directory [ 56.580591][ T4632] Bluetooth: hci2: command tx timeout [ 56.580613][ T64] Bluetooth: hci3: command tx timeout [ 56.583508][ T5237] Bluetooth: hci0: command tx timeout [ 56.590178][ T5237] Bluetooth: hci1: command tx timeout [ 56.606897][ T5228] hsr_slave_0: entered promiscuous mode [ 56.611735][ T5228] hsr_slave_1: entered promiscuous mode [ 56.614901][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.618235][ T5228] Cannot create hsr debugfs directory [ 56.694533][ T5233] hsr_slave_0: entered promiscuous mode [ 56.697313][ T5233] hsr_slave_1: entered promiscuous mode [ 56.700426][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.704049][ T5233] Cannot create hsr debugfs directory [ 57.163580][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.177022][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.184770][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.192060][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.254748][ T5232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.262255][ T5232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.272971][ T5232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.280541][ T5232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.363316][ T5225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.388260][ T5225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.404221][ T5225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.420688][ T5225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.531498][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.535086][ T5233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.543038][ T5233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.551857][ T5233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.567539][ T5233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.627050][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.657104][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.661785][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.676716][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.680048][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.688567][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.738577][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.765085][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.767801][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.813422][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.816629][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.832035][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.841302][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.886665][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 57.886682][ T39] audit: type=1400 audit(1719027014.859:118): avc: denied { sys_module } for pid=5228 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.905730][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.915898][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.956088][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.959999][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.966865][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.970181][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.993361][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.008528][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.011843][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.041238][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.044780][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.104585][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.119135][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.222420][ T5232] veth0_vlan: entered promiscuous mode [ 58.225659][ T5228] veth0_vlan: entered promiscuous mode [ 58.236212][ T5228] veth1_vlan: entered promiscuous mode [ 58.262599][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.279471][ T5232] veth1_vlan: entered promiscuous mode [ 58.339360][ T5228] veth0_macvtap: entered promiscuous mode [ 58.348206][ T5228] veth1_macvtap: entered promiscuous mode [ 58.357709][ T5232] veth0_macvtap: entered promiscuous mode [ 58.368946][ T5232] veth1_macvtap: entered promiscuous mode [ 58.385174][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.400179][ T5225] veth0_vlan: entered promiscuous mode [ 58.414999][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.421817][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.426332][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.432620][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.449420][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.453745][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.457487][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.462969][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.475279][ T5225] veth1_vlan: entered promiscuous mode [ 58.484748][ T5232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.488006][ T5232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.491836][ T5232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.495564][ T5232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.514618][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.518666][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.523027][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.526679][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.564490][ T5233] veth0_vlan: entered promiscuous mode [ 58.592995][ T5233] veth1_vlan: entered promiscuous mode [ 58.626277][ T5225] veth0_macvtap: entered promiscuous mode [ 58.634320][ T5225] veth1_macvtap: entered promiscuous mode [ 58.660770][ T5237] Bluetooth: hci0: command tx timeout [ 58.672291][ T5237] Bluetooth: hci1: command tx timeout [ 58.672322][ T4632] Bluetooth: hci2: command tx timeout [ 58.674661][ T5237] Bluetooth: hci3: command tx timeout [ 58.677219][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.682951][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.697873][ T5233] veth0_macvtap: entered promiscuous mode [ 58.718383][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.723099][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.724063][ T5233] veth1_macvtap: entered promiscuous mode [ 58.734893][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.740252][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.744946][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.749549][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.761356][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.776952][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.781815][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.785948][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.791268][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.797592][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.808057][ T5225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.811535][ T5225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.814596][ T5225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.818192][ T5225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.829586][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.833437][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.867410][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.867599][ T39] audit: type=1400 audit(1719027015.839:119): avc: denied { mounton } for pid=5232 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.872745][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.884049][ T39] audit: type=1400 audit(1719027015.839:120): avc: denied { mount } for pid=5232 comm="syz-executor.3" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.887430][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.905340][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.909537][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.915419][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.922688][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.927854][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.933746][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.942260][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.946367][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.955489][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.960969][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.965395][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.970962][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.977550][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.993853][ T5233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.997866][ T5233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.004023][ T5233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.008665][ T5233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000300)=""/80, 0x50}], 0x2}}], 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="060100001701c7003199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa91", 0xe9}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f00000001c0)='\x06\x00\x00\x00s\x00') [ 59.034778][ T39] audit: type=1400 audit(1719027016.009:121): avc: denied { read write } for pid=5232 comm="syz-executor.3" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 executing program 0: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000180)={0x0, 0x80}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x94}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000880)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000940)={0x1, 0xb32, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0xfc, 0x0, 0x0, 0x0, "4210220097b2bb36662d7dd23a59126b470b759d7b9beb929157fbabb8971fdf7268450b731d6d110917f27e538256a669fea5023441247712804650cc7d8236"}}, 0x80}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b15000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000020014001280090001007665746800000000040002800800040060000000"], 0x3c}}, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000240)=0x8) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000040)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000000)={0x17c04}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 59.048284][ T39] audit: type=1400 audit(1719027016.009:122): avc: denied { open } for pid=5232 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.074827][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.075248][ T39] audit: type=1400 audit(1719027016.009:123): avc: denied { ioctl } for pid=5232 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.085780][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.091354][ T39] audit: type=1400 audit(1719027016.049:124): avc: denied { create } for pid=5290 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.104180][ T39] audit: type=1400 audit(1719027016.059:125): avc: denied { connect } for pid=5290 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.114668][ T39] audit: type=1400 audit(1719027016.059:126): avc: denied { write } for pid=5290 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 executing program 3: connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) inotify_init1(0x0) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GJAkEYBeB3x3FcdiXsdmAJIoaWYGpiZmS8VmELNmAvNqO/7K6sHSjC9wWPNzxmYMJbff32Wf/jqarqOXXrsfxMMWlW113Spv1O/oabtzonmT/2Tbpjsq+q5fBUkllfTpftIkmXJodXfA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsI9AAD//yg1FLI=") [ 59.137960][ T39] audit: type=1400 audit(1719027016.109:127): avc: denied { prog_load } for pid=5290 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.155646][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.159052][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.211509][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.215273][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) executing program 2: r0 = socket(0x0, 0x2, 0x0) write(r0, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) [ 59.305161][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.308710][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_submit(0x0, 0x1, &(0x7f0000000580)=[0x0]) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0xc, 0x0, &(0x7f0000000080)) executing program 1: close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340)=@gcm_128={{}, "ded3230b29450259", "0e37553bdd6b7cb1f70cf33b43f7ad9b", "ce826994", "1d29e04b07602d61"}, 0x28) executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) executing program 2: mkdir(&(0x7f0000000080)='./bus\x00', 0x0) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() lseek(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) executing program 1: syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 59.543829][ T5312] loop3: detected capacity change from 0 to 8192 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000100)=""/8, 0x8}, {0x0}], 0x4, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x7}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_START_REQ(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r5, 0x4b36) sched_getscheduler(0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x0, 0x0, 0x3, [0x2], [0x80ffff]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) executing program 1: writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="000202"], 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @remote}, {0x0, @broadcast}, 0x1c, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 'bond_slave_0\x00'}) [ 60.244069][ T5324] 9pnet_fd: Insufficient options for proto=fd [ 60.250392][ T5324] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$tun(r1, &(0x7f0000000780)=ANY=[], 0x9) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000080)) executing program 1: r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)=""/59, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) executing program 0: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') executing program 2: syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000700)=""/201, 0xc9}], 0x1, 0x7cd3b3b8, 0x0) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x0) [ 60.554025][ C2] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 60.559600][ T5341] loop2: detected capacity change from 0 to 2048 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) [ 60.656665][ T5341] Alternate GPT is invalid, using primary GPT. [ 60.663458][ T5341] loop2: p2 p3 p7 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mkdirat$cgroup(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 60.749940][ T5237] Bluetooth: hci2: command tx timeout [ 60.750809][ T64] Bluetooth: hci1: command tx timeout [ 60.750880][ T4632] Bluetooth: hci0: command tx timeout [ 60.753452][ T5237] Bluetooth: hci3: command tx timeout executing program 2: syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="000202"], 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @remote}, {0x0, @broadcast}, 0x1c, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 'bond_slave_0\x00'}) executing program 1: mkdir(&(0x7f0000000080)='./bus\x00', 0x0) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() lseek(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) [ 60.883459][ T5349] 9pnet_fd: Insufficient options for proto=fd executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) [ 60.957639][ C2] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000280)=""/169, 0xa9}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x44) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$tun(r1, &(0x7f0000000780)=ANY=[], 0x9) executing program 2: syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000700)=""/201, 0xc9}], 0x1, 0x7cd3b3b8, 0x0) [ 61.737109][ T5372] loop2: detected capacity change from 0 to 2048 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mkdirat$cgroup(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 61.826244][ T5372] Alternate GPT is invalid, using primary GPT. [ 61.828954][ T5372] loop2: p2 p3 p7 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002000d0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}}, 0x0) executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}}, 0x0) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) executing program 3: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000180)='./file2\x00', 0x14018, &(0x7f0000000400)=ANY=[@ANYBLOB="63726561746f723d7b19c20300702172743d30309b00603034ad689a04f6913349003b68d80bbeb87a736e2c6e6f646537e4484e63fdc5ac636f6d706f730d63e45479e4a4caa35f04000000c381fd1f840ba90acd0f3b37a1047c38c3d72d0a71267f00c84e40ee3e5cb300000000000000", @ANYRESHEX, @ANYRES16=0x0], 0x9, 0x6d0, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) executing program 1: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x14}, {}]}) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x143281) r0 = socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f0000000400)) [ 62.004729][ T5383] loop3: detected capacity change from 0 to 1024 [ 62.014591][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59520000000000000000a000000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff000000000800080000010000"], 0x34}}, 0x0) executing program 2: syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800090, &(0x7f0000005f80)=ANY=[@ANYRESDEC, @ANYBLOB="7ab40d920812b31712aebf5d8db36327ff98becda5e07962faff8215a30ec62916b4074a1c15b53809722b4dcb2f0c724259112bb70e9bad005ab1742f042ae13d0ae29e68cdbd7982672640d6d7dc1d6203b0f5b5274363136c7676a31b14808229ff6d8f5c399c914ad00c1439e8fcfad24246037d39f9ed8b", @ANYRES64], 0x1, 0x5bd7, &(0x7f000000bc00)="$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") truncate(&(0x7f0000000340)='./file2\x00', 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)="4a17a250f12fba83c589b270c85f9b1f", 0x10}], 0x1}], 0x1, 0x0) read$alg(r1, &(0x7f0000000180)=""/191, 0xbf) [ 62.368510][ T5401] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 62.379172][ T5401] CIFS mount error: No usable UNC path provided in device string! [ 62.379172][ T5401] [ 62.382923][ T5401] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81044e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffff", 0x42}], 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000002c0)="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", 0x1ca}], 0x1}}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) [ 62.419431][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 62.623975][ T5402] loop3: detected capacity change from 0 to 32768 [ 62.724194][ T5402] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 62.730774][ T5402] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 62.757583][ T5402] bcachefs (loop3): alloc_read... done [ 62.762196][ T5402] bcachefs (loop3): stripes_read... done [ 62.765043][ T5402] bcachefs (loop3): snapshots_read... done [ 62.782124][ T5402] bcachefs (loop3): going read-write [ 62.787288][ T5402] bcachefs (loop3): journal_replay... [ 62.789901][ T5270] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.805743][ T5402] done [ 62.813475][ T5402] bcachefs (loop3): resume_logged_ops... done [ 62.816136][ T5402] bcachefs (loop3): delete_dead_inodes... done [ 62.820703][ T5237] Bluetooth: hci1: command tx timeout [ 62.821844][ T5402] bcachefs (loop3): done starting filesystem executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000080)) [ 62.830021][ T5237] Bluetooth: hci3: command tx timeout [ 62.830209][ T4632] Bluetooth: hci2: command tx timeout [ 62.835456][ T64] Bluetooth: hci0: command tx timeout [ 62.925307][ T39] kauditd_printk_skb: 53 callbacks suppressed [ 62.925323][ T39] audit: type=1400 audit(1719027019.899:181): avc: denied { write } for pid=5400 comm="syz-executor.3" name="file2" dev="loop3" ino=1610612736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}}, 0x0) [ 62.967393][ T39] audit: type=1400 audit(1719027019.899:182): avc: denied { open } for pid=5400 comm="syz-executor.3" name="file2" dev="loop3" ino=1610612736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.969272][ T1100] ================================================================== [ 62.980054][ T1100] BUG: KASAN: slab-use-after-free in bch2_sb_errors_from_cpu+0x255/0x280 [ 62.980094][ T1100] Read of size 8 at addr ffff888020ee8d80 by task kworker/u32:9/1100 [ 62.980111][ T1100] [ 62.980124][ T1100] CPU: 0 PID: 1100 Comm: kworker/u32:9 Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 62.980146][ T1100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 62.980159][ T1100] Workqueue: btree_update btree_interior_update_work [ 62.980186][ T1100] Call Trace: [ 62.980195][ T1100] [ 62.980203][ T1100] dump_stack_lvl+0x116/0x1f0 [ 62.980238][ T1100] print_report+0xc3/0x620 [ 62.980270][ T1100] ? __virt_addr_valid+0x5e/0x580 [ 62.980290][ T1100] ? __phys_addr+0xc6/0x150 [ 62.980309][ T1100] kasan_report+0xd9/0x110 [ 62.980328][ T1100] ? bch2_sb_errors_from_cpu+0x255/0x280 [ 62.980355][ T1100] ? bch2_sb_errors_from_cpu+0x255/0x280 [ 62.980388][ T1100] bch2_sb_errors_from_cpu+0x255/0x280 [ 62.980417][ T1100] bch2_write_super+0x12b2/0x37a0 [ 62.980442][ T1100] ? __pfx_bch2_write_super+0x10/0x10 [ 62.980465][ T1100] ? bch2_dev_btree_bitmap_mark+0x3d5/0xb30 [ 62.980497][ T1100] ? __pfx_bch2_dev_btree_bitmap_mark+0x10/0x10 [ 62.980529][ T1100] ? btree_interior_update_work+0x46e/0x2cb0 [ 62.980553][ T1100] btree_interior_update_work+0x46e/0x2cb0 [ 62.980579][ T1100] ? __queue_work+0x55e/0x1020 [ 62.980601][ T1100] ? btree_interior_update_work+0xdf/0x2cb0 [ 62.980626][ T1100] ? __pfx_btree_interior_update_work+0x10/0x10 [ 62.980651][ T1100] ? __pfx_lock_acquire+0x10/0x10 [ 62.980682][ T1100] ? __pfx_lock_release+0x10/0x10 [ 62.980714][ T1100] ? process_one_work+0x9fb/0x1b60 [ 62.980734][ T1100] process_one_work+0x9fb/0x1b60 [ 62.980757][ T1100] ? __pfx_btree_update_set_nodes_written+0x10/0x10 [ 62.980779][ T1100] ? __pfx_process_one_work+0x10/0x10 [ 62.980801][ T1100] ? assign_work+0x1a0/0x250 [ 62.980833][ T1100] worker_thread+0x6c8/0xf70 [ 62.980855][ T1100] ? __kthread_parkme+0x148/0x220 [ 62.980881][ T1100] ? __pfx_worker_thread+0x10/0x10 [ 62.980902][ T1100] kthread+0x2c1/0x3a0 [ 62.980926][ T1100] ? _raw_spin_unlock_irq+0x23/0x50 [ 62.980956][ T1100] ? __pfx_kthread+0x10/0x10 [ 62.980981][ T1100] ret_from_fork+0x45/0x80 [ 62.981010][ T1100] ? __pfx_kthread+0x10/0x10 [ 62.981033][ T1100] ret_from_fork_asm+0x1a/0x30 [ 62.981066][ T1100] [ 62.981073][ T1100] [ 62.981078][ T1100] Allocated by task 5402: [ 62.981087][ T1100] kasan_save_stack+0x33/0x60 [ 62.981121][ T1100] kasan_save_track+0x14/0x30 [ 62.981148][ T1100] __kasan_kmalloc+0xaa/0xb0 [ 62.981173][ T1100] __kmalloc_node_noprof+0x215/0x440 [ 62.981193][ T1100] kvmalloc_node_noprof+0x9d/0x1a0 [ 62.981218][ T1100] __bch2_darray_resize+0xd8/0x250 [ 62.981244][ T1100] bch2_sb_error_count+0x34f/0x4e0 [ 62.981267][ T1100] __bch2_inode_invalid+0x2c6/0x4d0 [ 62.981285][ T1100] bch2_inode_v3_invalid+0x1f1/0x2e0 [ 62.981304][ T1100] bch2_bkey_val_invalid+0x222/0x2f0 [ 62.981331][ T1100] bch2_btree_node_read_done+0x3294/0x4fe0 [ 62.981361][ T1100] btree_node_read_work+0x567/0x1060 [ 62.981378][ T1100] bch2_btree_node_read+0x8b3/0xe40 [ 62.981395][ T1100] bch2_btree_root_read+0x2ca/0x690 [ 62.981412][ T1100] bch2_fs_recovery+0x1ba8/0x3db0 [ 62.981439][ T1100] bch2_fs_start+0x2e9/0x600 [ 62.981466][ T1100] bch2_fs_open+0xfa0/0x1110 [ 62.981493][ T1100] bch2_mount+0xe2c/0x1230 [ 62.981517][ T1100] legacy_get_tree+0x109/0x220 [ 62.981537][ T1100] vfs_get_tree+0x8f/0x380 [ 62.981562][ T1100] path_mount+0x14e6/0x1f20 [ 62.981587][ T1100] __x64_sys_mount+0x297/0x320 [ 62.981610][ T1100] do_syscall_64+0xcd/0x250 [ 62.981632][ T1100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.981656][ T1100] [ 62.981660][ T1100] Freed by task 5402: [ 62.981669][ T1100] kasan_save_stack+0x33/0x60 [ 62.981692][ T1100] kasan_save_track+0x14/0x30 [ 62.981716][ T1100] kasan_save_free_info+0x3b/0x60 [ 62.981738][ T1100] poison_slab_object+0xf7/0x160 [ 62.981764][ T1100] __kasan_slab_free+0x32/0x50 [ 62.981790][ T1100] kfree+0x12a/0x3b0 [ 62.981813][ T1100] kvfree+0x47/0x50 [ 62.981836][ T1100] __bch2_darray_resize+0x185/0x250 [ 62.981860][ T1100] bch2_sb_error_count+0x34f/0x4e0 [ 62.981883][ T1100] bch2_fsck_err+0x180/0x1730 [ 62.981908][ T1100] bch2_bucket_ref_update+0xcd3/0xf80 [ 62.981933][ T1100] __mark_pointer+0x10c/0x410 [ 62.981985][ T1100] bch2_trigger_pointer.constprop.0+0xce4/0x25c0 [ 62.982014][ T1100] __trigger_extent+0x414/0xc00 [ 62.982039][ T1100] bch2_trigger_extent+0x4ee/0x5d0 [ 62.982066][ T1100] run_btree_triggers+0x6f1/0xd10 [ 62.982092][ T1100] __bch2_trans_commit+0x366/0x7ad0 [ 62.982125][ T1100] bch2_extent_update+0x494/0xa40 [ 62.982151][ T1100] bch2_fpunch_at+0x7e6/0xbc0 [ 62.982174][ T1100] __bch2_resume_logged_op_truncate+0x4ce/0x7a0 [ 62.982199][ T1100] bch2_truncate+0x1e1/0x220 [ 62.982222][ T1100] bchfs_truncate+0x90c/0xd70 [ 62.982238][ T1100] bch2_setattr+0x1ab/0x250 [ 62.982260][ T1100] notify_change+0x742/0x11f0 [ 62.982277][ T1100] do_truncate+0x15c/0x220 [ 62.982300][ T1100] vfs_truncate+0x3ef/0x4e0 [ 62.982322][ T1100] __x64_sys_truncate+0x177/0x1f0 [ 62.982346][ T1100] do_syscall_64+0xcd/0x250 [ 62.982364][ T1100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.982387][ T1100] [ 62.982392][ T1100] The buggy address belongs to the object at ffff888020ee8d80 [ 62.982392][ T1100] which belongs to the cache kmalloc-16 of size 16 [ 62.982407][ T1100] The buggy address is located 0 bytes inside of [ 62.982407][ T1100] freed 16-byte region [ffff888020ee8d80, ffff888020ee8d90) [ 62.982424][ T1100] [ 62.982429][ T1100] The buggy address belongs to the physical page: [ 62.982436][ T1100] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888020ee8040 pfn:0x20ee8 [ 62.982454][ T1100] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 62.982472][ T1100] page_type: 0xffffefff(slab) [ 62.982491][ T1100] raw: 00fff00000000200 ffff888015442640 ffffea000098db50 ffffea0000a6e950 [ 62.982509][ T1100] raw: ffff888020ee8040 0000000000800068 00000001ffffefff 0000000000000000 [ 62.982520][ T1100] page dumped because: kasan: bad access detected [ 62.982529][ T1100] page_owner tracks the page as allocated [ 62.982535][ T1100] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21361014922, free_ts 21352580976 [ 62.982569][ T1100] register_dummy_stack+0x8a/0xd0 [ 62.982591][ T1100] init_page_owner+0x48/0xbf0 [ 62.982616][ T1100] page_ext_init+0x6af/0xaa0 [ 62.982641][ T1100] mm_core_init+0x68d/0x740 [ 62.982664][ T1100] page last free pid 1 tgid 1 stack trace: [ 62.982673][ T1100] free_unref_page+0x64a/0xe40 [ 62.982696][ T1100] __put_partials+0x14c/0x170 [ 62.982721][ T1100] qlist_free_all+0x4e/0x140 [ 62.982744][ T1100] kasan_quarantine_reduce+0x192/0x1e0 [ 62.982768][ T1100] __kasan_slab_alloc+0x69/0x90 [ 62.982792][ T1100] kmalloc_node_track_caller_noprof+0x1c1/0x430 [ 62.982809][ T1100] krealloc_noprof+0x5d/0x100 [ 62.982826][ T1100] add_sysfs_param+0xcb/0x960 [ 62.982845][ T1100] param_sysfs_builtin_init+0x2ce/0x460 [ 62.982871][ T1100] do_one_initcall+0x128/0x700 [ 62.982894][ T1100] kernel_init_freeable+0x69d/0xca0 [ 62.982914][ T1100] kernel_init+0x1c/0x2b0 [ 62.982927][ T1100] ret_from_fork+0x45/0x80 [ 62.982941][ T1100] ret_from_fork_asm+0x1a/0x30 [ 62.982956][ T1100] [ 62.982958][ T1100] Memory state around the buggy address: [ 62.982963][ T1100] ffff888020ee8c80: 00 00 fc fc 00 00 fc fc fa fb fc fc 00 00 fc fc [ 62.982971][ T1100] ffff888020ee8d00: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 62.982979][ T1100] >ffff888020ee8d80: fa fb fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 62.982986][ T1100] ^ [ 62.982991][ T1100] ffff888020ee8e00: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 62.982999][ T1100] ffff888020ee8e80: 00 00 fc fc fa fb fc fc 00 00 fc fc fa fb fc fc [ 62.983004][ T1100] ================================================================== [ 62.983593][ T1100] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 62.983604][ T1100] CPU: 0 PID: 1100 Comm: kworker/u32:9 Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 62.983639][ T1100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 62.983651][ T1100] Workqueue: btree_update btree_interior_update_work [ 62.983674][ T1100] Call Trace: [ 62.983681][ T1100] [ 62.983687][ T1100] dump_stack_lvl+0x3d/0x1f0 [ 62.983717][ T1100] panic+0x6f5/0x7a0 [ 62.983743][ T1100] ? __pfx_panic+0x10/0x10 [ 62.983767][ T1100] ? irqentry_exit+0x3b/0x90 [ 62.983786][ T1100] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.983804][ T1100] ? preempt_schedule_thunk+0x1a/0x30 [ 62.983822][ T1100] ? preempt_schedule_common+0x44/0xc0 [ 62.983849][ T1100] ? check_panic_on_warn+0x1f/0xb0 [ 62.983875][ T1100] check_panic_on_warn+0xab/0xb0 [ 62.983901][ T1100] end_report+0x117/0x180 [ 62.983928][ T1100] kasan_report+0xe9/0x110 [ 62.983944][ T1100] ? bch2_sb_errors_from_cpu+0x255/0x280 [ 62.983967][ T1100] ? bch2_sb_errors_from_cpu+0x255/0x280 [ 62.983991][ T1100] bch2_sb_errors_from_cpu+0x255/0x280 [ 62.984015][ T1100] bch2_write_super+0x12b2/0x37a0 [ 62.984036][ T1100] ? __pfx_bch2_write_super+0x10/0x10 [ 62.984055][ T1100] ? bch2_dev_btree_bitmap_mark+0x3d5/0xb30 [ 62.984082][ T1100] ? __pfx_bch2_dev_btree_bitmap_mark+0x10/0x10 [ 62.984109][ T1100] ? btree_interior_update_work+0x46e/0x2cb0 [ 62.984134][ T1100] btree_interior_update_work+0x46e/0x2cb0 [ 62.984157][ T1100] ? __queue_work+0x55e/0x1020 [ 62.984175][ T1100] ? btree_interior_update_work+0xdf/0x2cb0 [ 62.984196][ T1100] ? __pfx_btree_interior_update_work+0x10/0x10 [ 62.984216][ T1100] ? __pfx_lock_acquire+0x10/0x10 [ 62.984243][ T1100] ? __pfx_lock_release+0x10/0x10 [ 62.984270][ T1100] ? process_one_work+0x9fb/0x1b60 [ 62.984286][ T1100] process_one_work+0x9fb/0x1b60 [ 62.984305][ T1100] ? __pfx_btree_update_set_nodes_written+0x10/0x10 [ 62.984324][ T1100] ? __pfx_process_one_work+0x10/0x10 [ 62.984343][ T1100] ? assign_work+0x1a0/0x250 [ 62.984368][ T1100] worker_thread+0x6c8/0xf70 [ 62.984386][ T1100] ? __kthread_parkme+0x148/0x220 [ 62.984408][ T1100] ? __pfx_worker_thread+0x10/0x10 [ 62.984425][ T1100] kthread+0x2c1/0x3a0 [ 62.984445][ T1100] ? _raw_spin_unlock_irq+0x23/0x50 [ 62.984470][ T1100] ? __pfx_kthread+0x10/0x10 [ 62.984490][ T1100] ret_from_fork+0x45/0x80 [ 62.984513][ T1100] ? __pfx_kthread+0x10/0x10 [ 62.984532][ T1100] ret_from_fork_asm+0x1a/0x30 [ 62.984558][ T1100] [ 62.985218][ T1100] Kernel Offset: disabled VM DIAGNOSIS: 03:30:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fdeab5 RDI=ffffffff94de1420 RBP=ffffffff94de13e0 RSP=ffffc900042f7368 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6530323038386552 R12=0000000000000000 R13=0000000000000064 R14=ffffffff84fdea50 R15=0000000000000000 RIP=ffffffff84fdeadf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1d869a8000 CR3=0000000025b6e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffbfef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd86350430 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3da32c8dc8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3da32c8dd5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3da32c8dcf ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3da32c8de3 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3da32c8e69 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3da32c8f47 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000080000008 RCX=ffffffff8132d098 RDX=ffff88802fc12440 RSI=ffffffff8132d0b9 RDI=ffffffff92e899a0 RBP=0000000000000001 RSP=ffffc900008b0078 R8 =0000000000000001 R9 =fffffbfff25d1334 R10=ffffffff92e899a7 R11=0000000000000006 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132d0ba RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3cd24a6d00 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3426979bf8 CR3=000000002afc0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 408865b07c10b6e5 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f986b47c33d9ac0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000bffce2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000260f9b0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000bffce7 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000260f9ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000c0252f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000260f9ab ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000bfd294 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000260f9ac ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000c02535 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000260f9aa ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000bfe1a1 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000080000008 RCX=ffffffff8132d098 RDX=ffff88801fa80000 RSI=ffffffff8132d0b9 RDI=ffffffff92e899a0 RBP=0000000000000002 RSP=ffffc90000858fd0 R8 =0000000000000001 R9 =fffffbfff25d1334 R10=ffffffff92e899a7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132d0ba RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556561b480 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f342697b038 CR3=000000002b4e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffbfef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1e778640 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34268c8dc8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34268c8dd5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34268c8dcf ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34268c8de3 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34268c8e69 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34268c8f47 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000080000008 RCX=ffffffff8132d098 RDX=ffff888017eca440 RSI=ffffffff8132d0b9 RDI=ffffffff92e899a0 RBP=0000000000000003 RSP=ffffc90000908fd0 R8 =0000000000000001 R9 =fffffbfff25d1334 R10=ffffffff92e899a7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132d0ba RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1d869ac018 CR3=000000001e7d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000000000000 Opmask02=00000000dfffdfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d868c8dc8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d868c8dd5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d868c8dcf ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d868c8de3 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d868c8e69 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d868c8f47 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d8697f840 00007f1d8697f848 00007f1d8697f840 00007f1d874db020 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000