last executing test programs: 1m1.111351406s ago: executing program 2 (id=461): add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) (async) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000180)='W\x97\x17(\x87c\xe4\xd0>\xf9\n\x95\xd9\x03\xfe\x06\xe8\x14\xea\xe6\x98\x99\x17\x9erslG\xdd\xdf4\xd7[\xed\x1eg@WM\xfcj\xc7:\xdcK\xc6\xc6\xf0\x84\x9f\xe2\xc6\xdf\x1d\xac*Q3\xce]\xc9\x82s\xf9\xdfa\x8b9\x88\xcf\xac\xa9\xfc\xd2\xb2b\xd6\xae\x84\xf6d\xe77\xde\x15O\xd1PR\xe8n\x03^\x85\xcf?\"X 8\xe2\xff\x1ey\xd4\xb8P:\x8d\xc5\xf5\x18+\x1f\x95\x96\xban[xq\xb0C\x8e\xaf\xc9C\xecE\ta\x02\x1a\r\xfe\x81\xd1U!\xc6\xecA\x91\x81=]\xa1\xe3~\x8f\x10\xf6\xc1\x16B\x93\r\xa7\xd1\xdd\xef\x91\x96rc\x93\xd7\xb9\x8e]\x13\xa7\x00\x00\x00\xa2\xae$\xd3V\x1d\xf3\x92\x1c-\xfe\xab~\xd2\xb0\x97I\xab\xaa\x8f\f\xa4\xe5=K\xa1~[\xc5$B\xa7\xac\xc7{p\"J\x0ef\x92\xb0\xc5\x04\xd6#\x19\xd2Nu\xf9Zz\x9c\xc53\n\xf1\x87\xa4H/)Q\xa1\xbb(\xce\xad\xd2\xaf\xca^!\x17\x93\x1e\x19q0\x82\xee\xa4/\xc9\xec\xf58(\xa3V<\xd8\x83]\xf1\xb3_\xf2\xbb\xe0r\xb2\xe1,\xb7\xd9|\xb2m\x93B\xf1=K\x00\xea\xacs\x88\a\xa4\xae\x87\x16P\r\a\x149\x82\x90d\xd1bw\xa2\xb3\xca)\xea\xafq\xa86\x83d\xa2\x7f\xfb\xf6\"~z\x01\xbc\x1cT\xd5\xa3\x99g\x88\xb3HC+\xeb\xb0v\xe0-T\x1a\xdf\x19\xf4\x16\"\x85\xceL\xcb7\xdb\xfc\xcfB3\x0e\x9f\xb3\r_b\x18\x8cJ\xba?3\xdc\x16H\xabfDN\xbf\x82\xfe=\x95l7\x83\xe5.\xc2\x81FF\xc8\r\xce.\x13lZ\x16\x13\xc1\x1d\xe7\xe6\xfb\x90+TP\xe26\xf7\"y\t\xbb \x821\xb3\rFg\xe5\xb4\xd09', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRES64=r0]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x164, @mcast1, 0x2}], 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x83, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x83, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000380)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ax25_SIOCADDRT(r6, 0x89e3, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) (async) ioctl$sock_ax25_SIOCADDRT(r6, 0x89e3, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, 0x0, 0x0) (async) connect$netrom(r8, 0x0, 0x0) sendto$netrom(r8, 0x0, 0x1a000, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) sendto$netrom(r8, 0x0, 0x1a000, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000380)={@my=0x0, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x0, &(0x7f0000000340)) 1m1.108676052s ago: executing program 2 (id=462): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) chroot(0x0) (async) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5386, &(0x7f0000003f80)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0xb8ad) 1m0.206974618s ago: executing program 2 (id=465): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000001c740)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}]}, 0x38}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) unshare(0x22020400) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x4, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x6bee6908376ec444, 0xd503}}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x20008801) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) 1m0.089317674s ago: executing program 2 (id=466): r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) splice(r4, 0x0, r6, 0x0, 0x200000000001, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r3, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x88, 0x578c07e4, 0xf4, 0xffffffff, 0x1ff, 0x8001, 0x7f}, 0x1c) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000200)={0x2, 0x0, 0x2, {0xf, 0xffffffff, 0x7427, 0xab1}}) 1m0.087641901s ago: executing program 2 (id=468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES8=r2], 0x18}, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) recvfrom$inet6(r5, &(0x7f0000000300)=""/103, 0x67, 0x0, &(0x7f0000000380)={0xa, 0x4e23, 0x6, @local, 0x4}, 0x1c) ftruncate(r5, 0x8800000) (async) r6 = socket$inet6(0xa, 0x1, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8}) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) (async) bind$inet6(r6, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xa176) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0x1, 0x700, 0x0) (async) sendfile(r7, r5, 0x0, 0x578410e9) (async) sendfile(r7, r5, 0x0, 0x101000000) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x2, @vifc_lcl_addr=@private=0xa010100, @rand_addr=0x64010101}, 0x10) 59.939378434s ago: executing program 2 (id=469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044944, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000001f40)={0x2020}, 0x2020) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x80000000], [0xfa]], '\x00', [], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 59.877956403s ago: executing program 32 (id=469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044944, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000001f40)={0x2020}, 0x2020) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x80000000], [0xfa]], '\x00', [], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 30.552286982s ago: executing program 3 (id=729): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) unshare(0x2a020400) pread64(r0, &(0x7f0000000540)=""/167, 0xa7, 0xe) 30.552145116s ago: executing program 3 (id=730): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 30.55179758s ago: executing program 3 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 30.506784468s ago: executing program 1 (id=734): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 30.506679962s ago: executing program 3 (id=735): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) write$nbd(r1, &(0x7f0000000200)={0x67446698, 0x1, 0x3, 0x4, 0x4}, 0x10) 30.277185667s ago: executing program 3 (id=736): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)={0xb0, 0x1403, 0x2, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20008004}, 0x40008) recvmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000540)=""/180, 0xb4}], 0x2}, 0x5}], 0x1, 0x20040, 0x0) 30.277087095s ago: executing program 3 (id=737): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 29.656963671s ago: executing program 1 (id=739): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) 28.776807084s ago: executing program 1 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) rt_sigaction(0x1, 0x0, 0x0, 0x8, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) 27.844403691s ago: executing program 1 (id=752): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6021a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket(0x5, 0x4, 0xfffff43f) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) 27.473175102s ago: executing program 1 (id=759): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 27.472991003s ago: executing program 1 (id=762): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) 14.663803985s ago: executing program 33 (id=737): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 12.29288875s ago: executing program 34 (id=762): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) 2.096089753s ago: executing program 6 (id=1137): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) 2.035973195s ago: executing program 6 (id=1139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.136929723s ago: executing program 6 (id=1154): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="070000000100", 0x6) 1.136693873s ago: executing program 6 (id=1156): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='sys_enter\x00', r0}, 0x10) open(&(0x7f00000000c0)='./bus\x00', 0x40004c141, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fadvise64(r1, 0x3f, 0x0, 0x4) 1.136632541s ago: executing program 5 (id=1157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008095}, 0x4) 1.076823634s ago: executing program 6 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x80000002}) r0 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x8, 0x0) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x8000}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) ptrace$cont(0x20, r3, 0x1, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010000", 0x7) 1.076673684s ago: executing program 5 (id=1159): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.076516707s ago: executing program 5 (id=1160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xe0003, 0x0, [0x5, 0x0, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x8000003]}) 1.016611834s ago: executing program 4 (id=1162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) 1.016524947s ago: executing program 4 (id=1163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000008680)=@newtaction={0x48, 0x76, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}}, 0x0) 936.014274ms ago: executing program 4 (id=1164): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000140)) 935.893082ms ago: executing program 4 (id=1165): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="070000000100", 0x6) 935.752852ms ago: executing program 4 (id=1166): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000300)={0x0, 0xea60}, 0x10) 866.269191ms ago: executing program 5 (id=1167): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e0, 0x220, 0x128, 0x128, 0x2b8, 0x128, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast2, 0xffffffff, 0x0, 'team_slave_1\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x7, @ipv4=@broadcast, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x3, 0x1, 0x5, 0x4], 0x2}, {0x0, [0x9, 0x0, 0x0, 0x2, 0x5], 0x5, 0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0xff, 0xff000000, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x89, 0x1, 0x8}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x2, 0x9, 0x3}}}, {{@ip={@loopback, @broadcast, 0xff, 0xff, 'hsr0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x11, 0x6, 0x10}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 866.046248ms ago: executing program 5 (id=1168): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 806.68694ms ago: executing program 4 (id=1169): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002555224082057d00993f000000010902230001000000000904"], 0x0) 216.756588ms ago: executing program 6 (id=1175): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0xfc, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xfa}, [@selector_unit={0x7, 0x24, 0x5, 0x2, 0x3, 'ED'}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x9, "cc"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x2, 0x2, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfa, 0x44, 0xf, {0x7, 0x25, 0x1, 0x80, 0xfa, 0xcc21}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xea, 0xd, {0x7, 0x25, 0x1, 0x80, 0x4, 0x2}}}}}}}]}}, 0x0) 216.558327ms ago: executing program 0 (id=1177): io_pgetevents(0x0, 0xd6, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0xffffffffffffffff]}, 0x8}) 178.465862ms ago: executing program 0 (id=1178): r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000200)={0x2, 0x0, 0x2, {0xf, 0xffffffff, 0x7427, 0xab1}}) 176.5286ms ago: executing program 0 (id=1179): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000200), &(0x7f0000000300)=[r4], &(0x7f0000000580)}) (async) ptrace(0x10, r0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x7ff, 0x2001) (async) r5 = syz_open_dev$video(&(0x7f0000000680), 0x1, 0x202) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000740)={0xa00000, 0x8, 0x507, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x99096d, 0x7, '\x00', @p_u8=0x0}}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x2}}]}]}]}, 0x3c}}, 0x0) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, r12, 0x1, 0x0, 0x25dfdbfb, {0x23}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) (async, rerun: 64) r13 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (rerun: 64) ioctl$FBIOPAN_DISPLAY(r13, 0x4606, &(0x7f0000000200)={0xf00, 0x1000, 0x690, 0x800, 0x40, 0x8000, 0x1, 0x1, {0x4, 0x8}, {0x0, 0x7ff}, {0x6, 0xc, 0x1}, {0x0, 0x10000, 0x1}, 0x2, 0x12, 0xaf, 0x9, 0x0, 0xfd, 0xffffffff, 0x58ac, 0x2, 0x1000, 0x8, 0x4, 0x1, 0x100, 0x1, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r15, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 76.982708ms ago: executing program 0 (id=1180): r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000200)={0x2, 0x0, 0x2, {0xf, 0xffffffff, 0x7427, 0xab1}}) (fail_nth: 3) 6.756007ms ago: executing program 0 (id=1181): syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa01000000000008004500000000001190"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r4, 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052ca", 0x21}], 0x1}, 0x8010) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x182d2, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x69b0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, 0x0) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r3, @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00'}, 0x10) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)=0xf0) syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') socket$kcm(0x15, 0x5, 0x0) 6.379915ms ago: executing program 0 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x6ee89126bd9a2aaa}, 0xc) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000140), 0x2006030, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d6673a98c20ca652c76657273696f6e3d3970323030302e75"]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000300)) r4 = dup3(r2, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r6 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x0, 0x0, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x8, 0x2, 0x2e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/194, 0xc2}, @fda={0x66646185, 0x5, 0x1, 0x1f}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}, 0x40}, @exit_looper, @enter_looper], 0x0, 0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 0s ago: executing program 5 (id=1183): syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa01000000000008004500000000001190"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) kernel console output (not intermixed with test programs): { execute_no_trans } for pid=6801 comm="syz.0.215" path="/58/file1" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.694049][ T39] audit: type=1400 audit(1730165269.345:447): avc: denied { name_connect } for pid=6804 comm="syz.0.216" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 67.874667][ T39] audit: type=1400 audit(1730165269.525:448): avc: denied { setattr } for pid=6806 comm="syz.2.217" name="/" dev="9p" ino=36574231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.881689][ T6807] netlink: 48 bytes leftover after parsing attributes in process `syz.2.217'. [ 67.887621][ T6807] input: syz1 as /devices/virtual/input/input8 [ 67.910845][ T39] audit: type=1400 audit(1730165269.555:449): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.940605][ T39] audit: type=1400 audit(1730165269.585:450): avc: denied { read } for pid=6808 comm="syz.3.219" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.999712][ T39] audit: type=1400 audit(1730165269.645:451): avc: denied { write } for pid=6811 comm="syz.2.218" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.169087][ T6836] netlink: 252 bytes leftover after parsing attributes in process `syz.2.226'. [ 68.186435][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 68.201777][ T6834] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 68.209700][ T39] audit: type=1400 audit(1730165269.855:452): avc: denied { setopt } for pid=6839 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.392037][ T39] audit: type=1400 audit(1730165270.045:453): avc: denied { connect } for pid=6847 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.478760][ T6359] bond0: (slave bond_slave_0): interface is now down [ 68.482940][ T6359] bond0: (slave bond_slave_1): interface is now down [ 68.487875][ T6359] bond0: now running without any active interface! [ 68.493017][ T6851] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 68.498394][ T6851] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 68.507509][ T6851] vlan0: entered promiscuous mode [ 68.510246][ T6852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6852 comm=syz.2.228 [ 68.513985][ T6852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=6852 comm=syz.2.228 [ 68.517300][ T6852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6852 comm=syz.2.228 [ 68.520699][ T6852] netlink: 300 bytes leftover after parsing attributes in process `syz.2.228'. [ 68.523997][ T6852] program syz.2.228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.632514][ T39] audit: type=1400 audit(1730165270.285:454): avc: denied { write } for pid=6853 comm="syz.1.230" path="socket:[13713]" dev="sockfs" ino=13713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.638896][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 69.240960][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.245471][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.292532][ T39] audit: type=1400 audit(1730165270.945:455): avc: denied { setattr } for pid=6872 comm="syz.2.234" path="/dev/snd/seq" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 69.688767][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 69.800122][ T6881] loop2: detected capacity change from 0 to 7 [ 69.803165][ T6881] Dev loop2: unable to read RDB block 7 [ 69.804721][ T6881] loop2: unable to read partition table [ 69.806262][ T6881] loop2: partition table beyond EOD, truncated [ 69.807994][ T6881] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 70.323757][ T6886] trusted_key: syz.2.238 sent an empty control message without MSG_MORE. [ 70.453656][ T6894] can0: slcan on ptm0. [ 70.522457][ T6894] can0 (unregistered): slcan off ptm0. [ 70.699716][ T6925] TCP: tcp_parse_options: Illegal window scaling value 197 > 14 received [ 70.702667][ T6924] TCP: tcp_parse_options: Illegal window scaling value 197 > 14 received [ 71.064621][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.722320][ T6983] pim6reg9: entered allmulticast mode [ 71.758246][ T6987] syz.2.252: attempt to access beyond end of device [ 71.758246][ T6987] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 71.763719][ T6987] gfs2: error -5 reading superblock [ 71.981883][ T6995] Bluetooth: MGMT ver 1.23 [ 72.404025][ T7022] evm: overlay not supported [ 72.465471][ T7027] __nla_validate_parse: 5 callbacks suppressed [ 72.465481][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 72.547076][ T7025] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 72.678028][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 72.678043][ T39] audit: type=1326 audit(1730165274.325:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.270" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f155977e719 code=0x0 [ 72.709933][ T39] audit: type=1400 audit(1730165274.355:479): avc: denied { read } for pid=7055 comm="syz.1.271" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.716788][ T39] audit: type=1400 audit(1730165274.355:480): avc: denied { open } for pid=7055 comm="syz.1.271" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.723885][ T39] audit: type=1400 audit(1730165274.355:481): avc: denied { ioctl } for pid=7055 comm="syz.1.271" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.791671][ T2284] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 72.820557][ T5935] Bluetooth: hci4: sending frame failed (-49) [ 72.827498][ T5294] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 72.942360][ T7085] overlayfs: overlapping lowerdir path [ 72.943958][ T7082] input: syz0 as /devices/virtual/input/input10 [ 72.953385][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 74.397390][ T39] audit: type=1400 audit(1730165276.045:482): avc: denied { sys_chroot } for pid=7102 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 74.403775][ T39] audit: type=1400 audit(1730165276.045:483): avc: denied { setgid } for pid=7102 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 74.420919][ T5294] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.182727][ T63] cfg80211: failed to load regulatory.db [ 83.048534][ T39] audit: type=1400 audit(1730165284.695:484): avc: denied { map } for pid=7117 comm="syz.1.280" path="socket:[13969]" dev="sockfs" ino=13969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.050928][ T7121] IPv6: Can't replace route, no match found [ 83.057538][ T39] audit: type=1400 audit(1730165284.705:485): avc: denied { bind } for pid=7120 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.060166][ T7121] cgroup: fork rejected by pids controller in [ 83.063400][ T39] audit: type=1400 audit(1730165284.705:486): avc: denied { bind } for pid=7120 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.063418][ T39] audit: type=1400 audit(1730165284.705:487): avc: denied { ioctl } for pid=7120 comm="syz.2.281" path="socket:[15556]" dev="sockfs" ino=15556 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.065692][ T7121] /syz0 [ 83.133955][ T39] audit: type=1400 audit(1730165284.785:488): avc: denied { ioctl } for pid=7131 comm="syz.1.284" path="socket:[13982]" dev="sockfs" ino=13982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 83.201136][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 83.242937][ T39] audit: type=1400 audit(1730165284.895:489): avc: denied { map } for pid=7146 comm="syz.1.288" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.248943][ T39] audit: type=1400 audit(1730165284.895:490): avc: denied { write } for pid=7146 comm="syz.1.288" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.257956][ T39] audit: type=1400 audit(1730165284.905:491): avc: denied { validate_trans } for pid=7146 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 83.265007][ T39] audit: type=1400 audit(1730165284.915:492): avc: denied { bind } for pid=7151 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.398711][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.415345][ T39] audit: type=1400 audit(1730165285.065:493): avc: denied { execute } for pid=7170 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 83.474632][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.562928][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.643591][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.744763][ T45] bridge_slave_1: left allmulticast mode [ 83.746425][ T45] bridge_slave_1: left promiscuous mode [ 83.749015][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.753669][ T45] bridge_slave_0: left allmulticast mode [ 83.755198][ T45] bridge_slave_0: left promiscuous mode [ 83.756719][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.005735][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.009676][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.013098][ T45] bond0 (unregistering): Released all slaves [ 84.065157][ T45] tipc: Left network mode [ 84.293174][ T45] hsr_slave_0: left promiscuous mode [ 84.295116][ T45] hsr_slave_1: left promiscuous mode [ 84.297069][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.299227][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.303419][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.305753][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.324016][ T45] veth1_macvtap: left promiscuous mode [ 84.325975][ T45] veth0_macvtap: left promiscuous mode [ 84.327496][ T45] veth1_vlan: left promiscuous mode [ 84.329088][ T45] veth0_vlan: left promiscuous mode [ 84.380923][ T45] pim6reg9 (unregistering): left allmulticast mode [ 84.911873][ T45] team0 (unregistering): Port device team_slave_1 removed [ 84.974711][ T45] team0 (unregistering): Port device team_slave_0 removed [ 93.547734][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 93.547745][ T39] audit: type=1400 audit(1730165295.195:495): avc: denied { bind } for pid=7273 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.566479][ T39] audit: type=1400 audit(1730165295.195:496): avc: denied { node_bind } for pid=7273 comm="syz.3.294" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 93.626820][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.630414][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.634811][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.639148][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.644209][ T5935] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.646727][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.656891][ T39] audit: type=1400 audit(1730165295.305:497): avc: denied { mounton } for pid=7287 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 93.686533][ T7288] netlink: 96 bytes leftover after parsing attributes in process `syz.3.298'. [ 93.701239][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 93.735402][ T7296] pim6reg1: entered promiscuous mode [ 93.737315][ T7296] pim6reg1: entered allmulticast mode [ 93.802206][ T7287] chnl_net:caif_netlink_parms(): no params data found [ 93.814139][ T39] audit: type=1400 audit(1730165295.465:498): avc: denied { relabelfrom } for pid=7311 comm="syz.1.301" name="ALG" dev="sockfs" ino=16720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.814409][ T7312] SELinux: Context system_u:object_r:depmod_exec_t:s0 is not valid (left unmapped). [ 93.825694][ T39] audit: type=1400 audit(1730165295.475:499): avc: denied { relabelto } for pid=7311 comm="syz.1.301" name="ALG" dev="sockfs" ino=16720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=alg_socket permissive=1 trawcon="system_u:object_r:depmod_exec_t:s0" [ 93.847847][ T39] audit: type=1400 audit(1730165295.495:500): avc: denied { mount } for pid=7311 comm="syz.1.301" name="/" dev="ramfs" ino=14100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 93.876564][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.878524][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.881456][ T7287] bridge_slave_0: entered allmulticast mode [ 93.883620][ T7287] bridge_slave_0: entered promiscuous mode [ 93.887150][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.889142][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.892196][ T7287] bridge_slave_1: entered allmulticast mode [ 93.894511][ T7287] bridge_slave_1: entered promiscuous mode [ 93.918581][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.921177][ T39] audit: type=1400 audit(1730165295.565:501): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 93.928260][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.960517][ T7287] team0: Port device team_slave_0 added [ 93.965622][ T7287] team0: Port device team_slave_1 added [ 93.988648][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.991597][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.998269][ T7287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.003831][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.006024][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.014588][ T7287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.045034][ T7287] hsr_slave_0: entered promiscuous mode [ 94.047322][ T7287] hsr_slave_1: entered promiscuous mode [ 94.050963][ T6492] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 94.202496][ T6492] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.205509][ T6492] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.208916][ T6492] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.215034][ T6492] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.217194][ T6492] usb 7-1: SerialNumber: syz [ 94.433439][ T6492] usb 7-1: 0:2 : does not exist [ 94.435576][ T6492] usb 7-1: unit 13 not found! [ 94.437053][ T6492] usb 7-1: unit 255 not found! [ 94.446010][ T6492] usb 7-1: USB disconnect, device number 13 [ 94.464868][ T6328] udevd[6328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.516593][ T7287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.520598][ T7287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.526581][ T7287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.531296][ T7287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.546762][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.548738][ T7287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.551338][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.553603][ T7287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.564503][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 94.581525][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.592570][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.595733][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.608524][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.621526][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.623511][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.626123][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.628195][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.708417][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.731999][ T7287] veth0_vlan: entered promiscuous mode [ 94.736243][ T7287] veth1_vlan: entered promiscuous mode [ 94.749737][ T7287] veth0_macvtap: entered promiscuous mode [ 94.754754][ T7287] veth1_macvtap: entered promiscuous mode [ 94.762131][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.765842][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.768430][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.772066][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.775136][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.778085][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.782983][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.787271][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.789992][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.792830][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.795577][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.798113][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.801796][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.805539][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.809457][ T7287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.811886][ T7287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.814110][ T7287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.816376][ T7287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.847154][ T6975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.849363][ T6975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.860205][ T6358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.864029][ T6358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.870275][ T39] audit: type=1400 audit(1730165296.515:502): avc: denied { mounton } for pid=7287 comm="syz-executor" path="/syzkaller.y5PAxy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 95.700892][ T5935] Bluetooth: hci1: command tx timeout [ 97.781164][ T5935] Bluetooth: hci1: command tx timeout [ 99.861423][ T5935] Bluetooth: hci1: command tx timeout [ 99.911634][ T1087] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 99.914337][ T1087] ata1: failed to read log page 10h (errno=-5) [ 99.916557][ T1087] ata1.00: exception Emask 0x1 SAct 0x800000 SErr 0x0 action 0x0 [ 99.919418][ T1087] ata1.00: irq_stat 0x40000000 [ 99.921380][ T1087] ata1.00: failed command: WRITE FPDMA QUEUED [ 99.923738][ T1087] ata1.00: cmd 61/48:b8:12:06:10/00:00:00:00:00/40 tag 23 ncq dma 36864 out [ 99.923738][ T1087] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 99.929870][ T1087] ata1.00: status: { DRDY } [ 99.931840][ T1087] ata1.00: error: { ABRT } [ 99.934377][ T1087] ata1.00: configured for UDMA/100 [ 99.936560][ T1087] ata1: EH complete [ 100.377824][ T39] audit: type=1400 audit(1730165302.025:503): avc: denied { connect } for pid=7454 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.385552][ T39] audit: type=1400 audit(1730165302.035:504): avc: denied { setopt } for pid=7454 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.396676][ T39] audit: type=1400 audit(1730165302.035:505): avc: denied { listen } for pid=7454 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.402153][ T7455] can: request_module (can-proto-0) failed. [ 100.405339][ T39] audit: type=1400 audit(1730165302.055:506): avc: denied { accept } for pid=7454 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.460773][ T39] audit: type=1400 audit(1730165302.105:507): avc: denied { lock } for pid=7454 comm="syz.1.306" path="socket:[17467]" dev="sockfs" ino=17467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 100.471302][ T2284] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 101.940964][ T5935] Bluetooth: hci1: command tx timeout [ 110.542817][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.309'. [ 110.610102][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 110.614274][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 110.625111][ T39] audit: type=1400 audit(1730165312.275:508): avc: denied { create } for pid=7514 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.630997][ T39] audit: type=1400 audit(1730165312.275:509): avc: denied { connect } for pid=7514 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.636266][ T7521] fuse: Bad value for 'fd' [ 110.638160][ T39] audit: type=1400 audit(1730165312.275:510): avc: denied { setopt } for pid=7514 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.645743][ T39] audit: type=1400 audit(1730165312.275:511): avc: denied { bind } for pid=7514 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.656707][ T39] audit: type=1400 audit(1730165312.275:512): avc: denied { write } for pid=7514 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.672394][ T39] audit: type=1400 audit(1730165312.285:513): avc: denied { create } for pid=7518 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.681811][ T39] audit: type=1400 audit(1730165312.285:514): avc: denied { getopt } for pid=7518 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 110.765290][ T39] audit: type=1400 audit(1730165312.415:515): avc: denied { ioctl } for pid=7536 comm="syz.2.319" path="socket:[17547]" dev="sockfs" ino=17547 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.815647][ T39] audit: type=1400 audit(1730165312.465:516): avc: denied { create } for pid=7511 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.832525][ T7539] jfs: Unrecognized mount option "gid=" or missing value [ 110.833010][ T39] audit: type=1400 audit(1730165312.485:517): avc: denied { listen } for pid=7536 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 111.102699][ T7547] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 111.102730][ T7547] netlink: 236 bytes leftover after parsing attributes in process `syz.3.322'. [ 111.251486][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 121.536534][ T7605] netlink: 14 bytes leftover after parsing attributes in process `syz.3.334'. [ 121.589315][ T7609] jfs: Unrecognized mount option "gid=" or missing value [ 121.692978][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 121.707337][ T7615] xt_hashlimit: size too large, truncated to 1048576 [ 121.758468][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 121.758547][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 122.143184][ T7653] x_tables: unsorted entry at hook 2 [ 122.182849][ T39] audit: type=1400 audit(1730165552.830:518): avc: denied { name_bind } for pid=7655 comm="syz.0.342" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 122.252342][ T39] audit: type=1400 audit(1730165552.900:519): avc: denied { write } for pid=7655 comm="syz.0.342" name="ip_mr_cache" dev="proc" ino=4026532912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 132.083822][ T7685] netlink: 'syz.1.344': attribute type 3 has an invalid length. [ 132.083838][ T7685] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.344'. [ 132.109533][ T7686] jfs: Unrecognized mount option "gid=" or missing value [ 132.151836][ T2284] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 132.204812][ T39] audit: type=1400 audit(1730165562.850:520): avc: denied { create } for pid=7697 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 132.205303][ T39] audit: type=1400 audit(1730165562.850:521): avc: denied { bind } for pid=7697 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 132.353159][ T7700] kvm: kvm [7699]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 132.353621][ T7700] kvm: kvm [7699]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 132.354263][ T7700] kvm: kvm [7699]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 132.371576][ T7700] kvm: kvm [7699]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 132.371832][ T7700] kvm: kvm [7699]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 132.390290][ T7700] kvm: kvm [7699]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 132.391327][ T7700] kvm: kvm [7699]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 132.456894][ T39] audit: type=1400 audit(1730165563.100:522): avc: denied { read write } for pid=7697 comm="syz.2.352" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 132.456919][ T39] audit: type=1400 audit(1730165563.100:523): avc: denied { open } for pid=7697 comm="syz.2.352" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 132.456935][ T39] audit: type=1400 audit(1730165563.100:524): avc: denied { ioctl } for pid=7697 comm="syz.2.352" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 132.513867][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.896670][ T39] audit: type=1400 audit(1730165569.540:525): avc: denied { create } for pid=7738 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.896944][ T7751] delete_channel: no stack [ 138.905195][ T39] audit: type=1400 audit(1730165569.550:526): avc: denied { create } for pid=7738 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.915020][ T39] audit: type=1400 audit(1730165569.550:527): avc: denied { setopt } for pid=7738 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.924464][ T39] audit: type=1400 audit(1730165569.570:528): avc: denied { write } for pid=7745 comm="syz.0.359" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 138.944549][ T7753] netlink: 'syz.1.362': attribute type 3 has an invalid length. [ 138.961982][ T1324] e1000 0000:00:06.0 eth0: Reset adapter [ 138.987579][ T7764] jfs: Unrecognized mount option "gid=" or missing value [ 139.022003][ T7773] tipc: Started in network mode [ 139.023420][ T7773] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 139.026026][ T7773] tipc: Enabled bearer , priority 0 [ 140.154534][ T5979] tipc: Node number set to 10463914 [ 141.141844][ T1324] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 152.370728][ T7802] vlan0: left promiscuous mode [ 152.383609][ T39] audit: type=1326 audit(1730165583.030:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.1.368" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a3a17e719 code=0x0 [ 152.409297][ T2284] libceph: connect (1)[c::]:6789 error -101 [ 152.412216][ T2284] libceph: mon0 (1)[c::]:6789 connect error [ 152.432270][ T7808] ceph: No mds server is up or the cluster is laggy [ 152.544014][ T39] audit: type=1400 audit(1730165583.190:530): avc: denied { write } for pid=7819 comm="syz.0.373" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.562218][ T7820] overlayfs: cannot append lower layer [ 152.589195][ T39] audit: type=1400 audit(1730165583.230:531): avc: denied { wake_alarm } for pid=7801 comm="syz.1.368" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.647797][ T7826] jfs: Unrecognized mount option "gid=" or missing value [ 152.961165][ T7845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.376'. [ 152.970520][ T39] audit: type=1400 audit(1730165583.610:532): avc: denied { write } for pid=7834 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 153.315196][ T7885] smc: net device bond0 erased user defined pnetid S [ 153.340227][ T7889] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not . [ 153.359997][ T7889] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not . [ 153.363462][ T39] audit: type=1400 audit(1730165584.010:533): avc: denied { setopt } for pid=7884 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 153.363614][ T7889] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not . [ 153.371555][ T7889] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not . [ 153.374240][ T7889] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not . [ 153.376750][ T7889] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not . [ 153.381467][ T7889] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not . [ 153.384056][ T7889] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not . [ 153.386303][ T7888] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 153.386825][ T7889] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not . [ 153.392964][ T7889] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not . [ 153.430062][ T39] audit: type=1400 audit(1730165584.070:534): avc: denied { write } for pid=7886 comm="syz.2.388" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.730998][ T6492] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 153.796572][ T7926] pim6reg1: entered promiscuous mode [ 153.798093][ T7926] pim6reg1: entered allmulticast mode [ 153.881080][ T6492] usb 7-1: Using ep0 maxpacket: 8 [ 153.884798][ T6492] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 153.888134][ T6492] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 153.891763][ T6492] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.894765][ T6492] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.898281][ T6492] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.900779][ T6492] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.910515][ T39] audit: type=1400 audit(1730165584.550:535): avc: denied { map } for pid=7927 comm="syz.0.399" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 153.917772][ T39] audit: type=1400 audit(1730165584.550:536): avc: denied { execute } for pid=7927 comm="syz.0.399" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 154.111014][ T6492] usb 7-1: GET_CAPABILITIES returned 0 [ 154.112484][ T6492] usbtmc 7-1:16.0: can't read capabilities [ 154.189767][ T39] audit: type=1400 audit(1730165584.830:537): avc: denied { watch } for pid=7938 comm="syz.0.403" path="/35" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 154.195938][ T39] audit: type=1400 audit(1730165584.830:538): avc: denied { watch_sb } for pid=7938 comm="syz.0.403" path="/35" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 154.260569][ T7947] bond0: entered promiscuous mode [ 154.260584][ T7947] bond_slave_0: entered promiscuous mode [ 154.260723][ T7947] bond_slave_1: entered promiscuous mode [ 154.260780][ T7947] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 154.291887][ T7949] jfs: Unrecognized mount option "gid=" or missing value [ 154.320070][ T9] usb 7-1: USB disconnect, device number 14 [ 154.515247][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 154.873941][ T8000] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 154.875884][ T8000] PKCS7: Only support pkcs7_signedData type [ 154.898469][ T8000] devpts: called with bogus options [ 154.930468][ T8005] netlink: 68 bytes leftover after parsing attributes in process `syz.0.419'. [ 155.077420][ T5935] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 155.079636][ T5935] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 155.262864][ T8026] 9p: Unknown access argument 18446744073709551615: -34 [ 155.374991][ T8029] xt_connbytes: Forcing CT accounting to be enabled [ 155.377093][ T8029] Cannot find add_set index 0 as target [ 155.380196][ T8029] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 155.680585][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 155.683457][ T8040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.685495][ T8040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.688145][ T8040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.690160][ T8040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.048574][ T8060] jfs: Unrecognized mount option "gid=" or missing value [ 156.292564][ T8070] xt_hashlimit: Unknown mode mask FF0, kernel too old? [ 156.344173][ T8084] fuse: Unknown parameter 'defaulons' [ 156.435606][ T8100] jfs: Unrecognized mount option "gid=" or missing value [ 157.233276][ T8119] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 157.728266][ T8142] jfs: Unrecognized mount option "gid=" or missing value [ 158.051630][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 158.051640][ T39] audit: type=1400 audit(1730165588.700:558): avc: denied { ioctl } for pid=8148 comm="syz.2.461" path="socket:[18299]" dev="sockfs" ino=18299 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 158.063571][ T39] audit: type=1400 audit(1730165588.700:559): avc: denied { connect } for pid=8148 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 158.070391][ T39] audit: type=1400 audit(1730165588.700:560): avc: denied { write } for pid=8148 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 158.962424][ T39] audit: type=1400 audit(1730165589.610:561): avc: denied { write } for pid=8164 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 159.023383][ T39] audit: type=1400 audit(1730165589.670:562): avc: denied { bind } for pid=8167 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.213064][ T8171] jfs: Unrecognized mount option "gid=" or missing value [ 159.293170][ T6969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.359327][ T6969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.436718][ T6969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.444853][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.446902][ T5294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.448147][ T5294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.456156][ T5294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.475748][ T5294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.476063][ T5294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.493264][ T6969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.566988][ T39] audit: type=1400 audit(1730165590.210:563): avc: denied { setopt } for pid=8180 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.572883][ T39] audit: type=1400 audit(1730165590.210:564): avc: denied { append } for pid=8180 comm="syz.0.472" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.573902][ T8181] loop6: detected capacity change from 0 to 7 [ 159.586905][ T8181] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.591003][ T8181] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.593217][ T8181] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.595698][ T8181] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.596214][ T8176] chnl_net:caif_netlink_parms(): no params data found [ 159.598197][ T8181] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.598253][ T8181] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.605647][ T8181] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.607766][ T8181] ldm_validate_partition_table(): Disk read failed. [ 159.609527][ T8181] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.612918][ T8181] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.615407][ T8181] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.617791][ T8181] Dev loop6: unable to read RDB block 0 [ 159.619653][ T8181] loop6: unable to read partition table [ 159.623250][ T8181] loop6: partition table beyond EOD, truncated [ 159.625406][ T8181] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 159.625406][ T8181] ) failed (rc=-5) [ 159.692648][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.696967][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.699100][ T8176] bridge_slave_0: entered allmulticast mode [ 159.702792][ T8176] bridge_slave_0: entered promiscuous mode [ 159.720837][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.724506][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.726536][ T8176] bridge_slave_1: entered allmulticast mode [ 159.731001][ T8176] bridge_slave_1: entered promiscuous mode [ 159.745827][ T39] audit: type=1400 audit(1730165590.390:565): avc: denied { read } for pid=8191 comm="syz.3.475" lport=44566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.775290][ T8176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.778141][ T6969] bridge_slave_1: left allmulticast mode [ 159.779578][ T6969] bridge_slave_1: left promiscuous mode [ 159.781386][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.791490][ T6969] bridge_slave_0: left allmulticast mode [ 159.792955][ T6969] bridge_slave_0: left promiscuous mode [ 159.794577][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.881549][ T39] audit: type=1400 audit(1730165590.530:566): avc: denied { write } for pid=8208 comm="syz.0.478" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 159.881847][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 160.326181][ T8222] jfs: Unrecognized mount option "gid=" or missing value [ 160.342550][ T6969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.344567][ T6969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.346524][ T6969] bond0 (unregistering): Released all slaves [ 160.351806][ T8176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.383812][ T8176] team0: Port device team_slave_0 added [ 160.385968][ T8176] team0: Port device team_slave_1 added [ 160.437521][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.437533][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.437547][ T8176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.440395][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.454395][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.454419][ T8176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.564891][ T39] audit: type=1400 audit(1730165591.210:567): avc: denied { bind } for pid=8223 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 160.569874][ T8176] hsr_slave_0: entered promiscuous mode [ 160.573501][ T8226] nbd: couldn't find device at index 51456 [ 160.576843][ T8176] hsr_slave_1: entered promiscuous mode [ 160.580751][ T8176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.580789][ T8176] Cannot create hsr debugfs directory [ 160.631113][ T8224] netlink: 'syz.1.481': attribute type 9 has an invalid length. [ 160.677248][ T8237] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 160.746710][ T6969] hsr_slave_0: left promiscuous mode [ 160.749200][ T6969] hsr_slave_1: left promiscuous mode [ 160.751354][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.751384][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.752566][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.752580][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.769101][ T6969] veth1_macvtap: left promiscuous mode [ 160.772153][ T6969] veth0_macvtap: left promiscuous mode [ 160.774616][ T6969] veth1_vlan: left promiscuous mode [ 160.776168][ T6969] veth0_vlan: left promiscuous mode [ 160.973025][ T8258] /dev/sr0: Can't open blockdev [ 161.546203][ T5294] Bluetooth: hci0: command tx timeout [ 161.566435][ T6969] team0 (unregistering): Port device team_slave_1 removed [ 162.225183][ T8176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.237513][ T8176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.245247][ T8270] overlayfs: failed to resolve './file0': -2 [ 162.250804][ T8176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.272506][ T8176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.333965][ T8277] afs: Unknown parameter 'dynl' [ 162.361692][ T8176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.379827][ T8176] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.411378][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.413726][ T6362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.418453][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.420802][ T6362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.501328][ T6969] IPVS: stop unused estimator thread 0... [ 162.564064][ T8176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.758284][ T8176] veth0_vlan: entered promiscuous mode [ 162.771917][ T8176] veth1_vlan: entered promiscuous mode [ 162.783022][ T8176] veth0_macvtap: entered promiscuous mode [ 162.786216][ T8176] veth1_macvtap: entered promiscuous mode [ 162.793904][ T8176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.796820][ T8176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.799537][ T8176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.802672][ T8176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.806421][ T8176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.813342][ T8176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.816897][ T8176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.819628][ T8176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.827287][ T8176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.834564][ T8176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.846236][ T8176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.850002][ T8176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.852740][ T8176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.855268][ T8176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.885861][ T6363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.892730][ T6363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.907338][ T6960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.909524][ T6960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.054978][ T8317] netlink: 260 bytes leftover after parsing attributes in process `syz.3.492'. [ 163.097497][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 163.097508][ T39] audit: type=1400 audit(1730165593.740:575): avc: denied { setopt } for pid=8319 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 163.097569][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 163.202880][ T8334] jfs: Unrecognized mount option "gid=" or missing value [ 163.472853][ T39] audit: type=1400 audit(1730165594.120:576): avc: denied { setattr } for pid=8350 comm="syz.3.498" name="[io_uring]" dev="anon_inodefs" ino=20989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 163.481804][ T39] audit: type=1400 audit(1730165594.120:577): avc: denied { accept } for pid=8350 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.620866][ T5294] Bluetooth: hci0: command 0x041b tx timeout [ 163.783670][ T39] audit: type=1400 audit(1730165594.430:578): avc: denied { remount } for pid=8362 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.855206][ T39] audit: type=1326 audit(1730165594.500:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8369 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92bf7e719 code=0x7ffc0000 [ 163.861496][ T39] audit: type=1326 audit(1730165594.500:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8369 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc92bf7e719 code=0x7ffc0000 [ 163.867398][ T39] audit: type=1326 audit(1730165594.500:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8369 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92bf7e719 code=0x7ffc0000 [ 163.873450][ T39] audit: type=1326 audit(1730165594.500:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8369 comm="syz.3.502" exe="/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc92bf7e719 code=0x7ffc0000 [ 164.000068][ T39] audit: type=1400 audit(1730165594.640:583): avc: denied { getopt } for pid=8381 comm="syz.3.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 164.038178][ T8253] syz.0.487: vmalloc error: size 3907584, failed to allocated page array size 7632, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.038843][ T8253] CPU: 1 UID: 0 PID: 8253 Comm: syz.0.487 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 164.038857][ T8253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.038864][ T8253] Call Trace: [ 164.038868][ T8253] [ 164.038873][ T8253] dump_stack_lvl+0x16c/0x1f0 [ 164.038908][ T8253] warn_alloc+0x24d/0x3a0 [ 164.038923][ T8253] ? __pfx_warn_alloc+0x10/0x10 [ 164.038940][ T8253] ? __get_vm_area_node+0x190/0x2d0 [ 164.038957][ T8253] ? __get_vm_area_node+0x1bc/0x2d0 [ 164.038975][ T8253] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 164.038991][ T8253] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 164.039014][ T8253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.039028][ T8253] ? __get_vm_area_node+0x190/0x2d0 [ 164.039044][ T8253] ? __get_vm_area_node+0x1bc/0x2d0 [ 164.039061][ T8253] __vmalloc_node_range_noprof+0xd85/0x15a0 [ 164.039073][ T8253] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 164.039091][ T8253] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 164.039107][ T8253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.039118][ T8253] ? rcu_is_watching+0x12/0xc0 [ 164.039133][ T8253] ? rcu_is_watching+0x12/0xc0 [ 164.039146][ T8253] ? trace_kmalloc+0x2d/0xe0 [ 164.039159][ T8253] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 164.039170][ T8253] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 164.039184][ T8253] __kvmalloc_node_noprof+0x14f/0x1a0 [ 164.039198][ T8253] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 164.039212][ T8253] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 164.039227][ T8253] vivid_update_format_cap+0x127b/0x2530 [ 164.039245][ T8253] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 164.039260][ T8253] ? v4l2_match_dv_timings+0x1df/0x1010 [ 164.039278][ T8253] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 164.039296][ T8253] vidioc_s_dv_timings+0xa5/0xc0 [ 164.039312][ T8253] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 164.039324][ T8253] __video_do_ioctl+0xaf0/0xf00 [ 164.039342][ T8253] ? __pfx___video_do_ioctl+0x10/0x10 [ 164.039368][ T8253] video_usercopy+0x4ce/0x1600 [ 164.039380][ T8253] ? __pfx___video_do_ioctl+0x10/0x10 [ 164.039397][ T8253] ? __pfx_video_usercopy+0x10/0x10 [ 164.039416][ T8253] v4l2_ioctl+0x1ba/0x250 [ 164.039431][ T8253] ? __pfx_v4l2_ioctl+0x10/0x10 [ 164.039447][ T8253] __x64_sys_ioctl+0x18f/0x220 [ 164.039463][ T8253] do_syscall_64+0xcd/0x250 [ 164.039481][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.039496][ T8253] RIP: 0033:0x7f7b6357e719 [ 164.039506][ T8253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.039517][ T8253] RSP: 002b:00007f7b642a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.039528][ T8253] RAX: ffffffffffffffda RBX: 00007f7b63735f80 RCX: 00007f7b6357e719 [ 164.039535][ T8253] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 164.039542][ T8253] RBP: 00007f7b635f132e R08: 0000000000000000 R09: 0000000000000000 [ 164.039549][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.039556][ T8253] R13: 0000000000000000 R14: 00007f7b63735f80 R15: 00007ffd296eeee8 [ 164.039569][ T8253] [ 164.039574][ T8253] Mem-Info: [ 164.039579][ T8253] active_anon:5606 inactive_anon:0 isolated_anon:0 [ 164.039579][ T8253] active_file:10788 inactive_file:38387 isolated_file:0 [ 164.039579][ T8253] unevictable:2792 dirty:80 writeback:0 [ 164.039579][ T8253] slab_reclaimable:8323 slab_unreclaimable:72688 [ 164.039579][ T8253] mapped:18322 shmem:3492 pagetables:908 [ 164.039579][ T8253] sec_pagetables:311 bounce:0 [ 164.039579][ T8253] kernel_misc_reclaimable:0 [ 164.039579][ T8253] free:410377 free_pcp:16307 free_cma:0 [ 164.039606][ T8253] Node 0 active_anon:22424kB inactive_anon:0kB active_file:43152kB inactive_file:153472kB unevictable:7632kB isolated(anon):0kB isolated(file):0kB mapped:73288kB dirty:312kB writeback:0kB shmem:10432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13424kB pagetables:3632kB sec_pagetables:1244kB all_unreclaimable? no [ 164.039632][ T8253] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 164.039657][ T8253] Node 0 DMA free:15304kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 164.039685][ T8253] lowmem_reserve[]: 0 1214 0 0 0 [ 164.039707][ T8253] Node 0 DMA32 free:98020kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:22424kB inactive_anon:0kB active_file:43152kB inactive_file:153472kB unevictable:7632kB writepending:312kB present:2080628kB managed:1272188kB mlocked:0kB bounce:0kB free_pcp:2780kB local_pcp:796kB free_cma:0kB [ 164.039737][ T8253] lowmem_reserve[]: 0 0 0 0 0 [ 164.039758][ T8253] Node 1 Normal free:1528184kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:62392kB local_pcp:36628kB free_cma:0kB [ 164.039787][ T8253] lowmem_reserve[]: 0 0 0 0 0 [ 164.039809][ T8253] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 0*2048kB 3*4096kB (U) = 15304kB [ 164.039893][ T8253] Node 0 DMA32: 1*4kB (M) 121*8kB (UME) 62*16kB (ME) 97*32kB (UME) 58*64kB (ME) 46*128kB (ME) 15*256kB (ME) 11*512kB (ME) 24*1024kB (UME) 6*2048kB (UM) 9*4096kB (UM) = 97868kB [ 164.039991][ T8253] Node 1 Normal: 46*4kB (UE) 20*8kB (UME) 34*16kB (UME) 156*32kB (UE) 84*64kB (UE) 31*128kB (UME) 16*256kB (UE) 11*512kB (UE) 8*1024kB (UE) 6*2048kB (UM) 362*4096kB (UM) = 1528184kB [ 164.040089][ T8253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.040098][ T8253] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.040107][ T8253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.040116][ T8253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.040124][ T8253] 52667 total pagecache pages [ 164.040129][ T8253] 0 pages in swap cache [ 164.040133][ T8253] Free swap = 124984kB [ 164.040137][ T8253] Total swap = 124996kB [ 164.040142][ T8253] 1048443 pages RAM [ 164.040146][ T8253] 0 pages HighMem/MovableOnly [ 164.040150][ T8253] 281075 pages reserved [ 164.040154][ T8253] 0 pages cma reserved [ 164.087739][ T8387] jfs: Unrecognized mount option "gid=" or missing value [ 164.375218][ T39] audit: type=1400 audit(1730165595.020:584): avc: denied { connect } for pid=8391 comm="syz.4.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.397031][ T8398] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 164.397046][ T8398] netlink: 'syz.1.509': attribute type 3 has an invalid length. [ 164.397054][ T8398] netlink: 216 bytes leftover after parsing attributes in process `syz.1.509'. [ 164.397062][ T8398] NCSI netlink: No device for ifindex 813332851 [ 164.568277][ T8416] syz.1.513 (8416): /proc/8415/oom_adj is deprecated, please use /proc/8415/oom_score_adj instead. [ 164.755459][ T8438] random: crng reseeded on system resumption [ 164.995545][ T8451] SELinux: Context system_u:object_r:selinux_config_t:s0 is not valid (left unmapped). [ 165.059809][ T8461] syz.1.523[8461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.059862][ T8461] syz.1.523[8461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.071694][ T8462] syz.1.523[8462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.071770][ T8462] syz.1.523[8462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.071822][ T8462] syz.1.523[8462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.078928][ T8461] syz.1.523[8461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.102553][ T8462] hub 6-0:1.0: USB hub found [ 165.102737][ T8462] hub 6-0:1.0: 1 port detected [ 165.134735][ T8468] jfs: Unrecognized mount option "gid=" or missing value [ 165.159559][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 165.159611][ T8465] netlink: 'syz.1.523': attribute type 25 has an invalid length. [ 165.167891][ T8465] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.173983][ T8465] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.174004][ T8465] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.174020][ T8465] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.176084][ T8465] vxlan0: entered promiscuous mode [ 165.700812][ T5935] Bluetooth: hci0: command 0x041b tx timeout [ 165.789302][ T8485] binder: 8483:8485 ioctl 4058534c 20000040 returned -22 [ 165.794988][ T8486] dvmrp8: entered allmulticast mode [ 165.797055][ T8483] dvmrp8: left allmulticast mode [ 165.883246][ T8489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8489 comm=syz.3.533 [ 166.181183][ T8501] FAULT_INJECTION: forcing a failure. [ 166.181183][ T8501] name failslab, interval 1, probability 0, space 0, times 1 [ 166.181212][ T8501] CPU: 2 UID: 0 PID: 8501 Comm: syz.0.537 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 166.181225][ T8501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.181232][ T8501] Call Trace: [ 166.181236][ T8501] [ 166.181241][ T8501] dump_stack_lvl+0x16c/0x1f0 [ 166.181260][ T8501] should_fail_ex+0x497/0x5b0 [ 166.181273][ T8501] ? fs_reclaim_acquire+0xae/0x150 [ 166.181286][ T8501] should_failslab+0xc2/0x120 [ 166.181299][ T8501] __kmalloc_noprof+0xcb/0x400 [ 166.181314][ T8501] tomoyo_encode2+0x100/0x3e0 [ 166.181328][ T8501] tomoyo_encode+0x29/0x50 [ 166.181347][ T8501] tomoyo_realpath_from_path+0x19d/0x720 [ 166.181360][ T8501] ? tomoyo_path_number_perm+0x232/0x590 [ 166.181378][ T8501] tomoyo_path_number_perm+0x245/0x590 [ 166.181393][ T8501] ? tomoyo_path_number_perm+0x232/0x590 [ 166.181410][ T8501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 166.181437][ T8501] ? trace_lock_acquire+0x14a/0x1d0 [ 166.181454][ T8501] ? lock_acquire+0x2f/0xb0 [ 166.181463][ T8501] ? __fget_files+0x40/0x3f0 [ 166.181480][ T8501] ? __fget_files+0x244/0x3f0 [ 166.181497][ T8501] security_file_ioctl+0x9b/0x240 [ 166.181510][ T8501] __x64_sys_ioctl+0xbb/0x220 [ 166.181525][ T8501] do_syscall_64+0xcd/0x250 [ 166.181543][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.181558][ T8501] RIP: 0033:0x7f7b6357e719 [ 166.181568][ T8501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.181578][ T8501] RSP: 002b:00007f7b642a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.181591][ T8501] RAX: ffffffffffffffda RBX: 00007f7b63735f80 RCX: 00007f7b6357e719 [ 166.181598][ T8501] RDX: 0000000020000000 RSI: 0000000000008949 RDI: 0000000000000004 [ 166.181605][ T8501] RBP: 00007f7b642a1090 R08: 0000000000000000 R09: 0000000000000000 [ 166.181612][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.181619][ T8501] R13: 0000000000000000 R14: 00007f7b63735f80 R15: 00007ffd296eeee8 [ 166.181633][ T8501] [ 166.181641][ T8501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.224840][ T8502] jfs: Unrecognized mount option "gid=" or missing value [ 166.342057][ T6034] e1000 0000:00:06.0 eth0: Reset adapter [ 166.347453][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 166.347477][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 166.347499][ T8504] netlink: 'syz.0.538': attribute type 20 has an invalid length. [ 166.442067][ T6034] e1000 0000:00:06.0 eth0: Reset adapter [ 166.599931][ T8513] FAULT_INJECTION: forcing a failure. [ 166.599931][ T8513] name failslab, interval 1, probability 0, space 0, times 0 [ 166.611294][ T8513] CPU: 2 UID: 0 PID: 8513 Comm: syz.4.542 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 166.615087][ T8513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.618257][ T8513] Call Trace: [ 166.619169][ T8513] [ 166.619954][ T8513] dump_stack_lvl+0x16c/0x1f0 [ 166.621181][ T8513] should_fail_ex+0x497/0x5b0 [ 166.622394][ T8513] ? fs_reclaim_acquire+0xae/0x150 [ 166.623743][ T8513] should_failslab+0xc2/0x120 [ 166.624948][ T8513] __kmalloc_noprof+0xcb/0x400 [ 166.626127][ T8513] ? d_absolute_path+0x137/0x1b0 [ 166.627840][ T8513] tomoyo_encode2+0x100/0x3e0 [ 166.629480][ T8513] tomoyo_encode+0x29/0x50 [ 166.630885][ T8513] tomoyo_realpath_from_path+0x19d/0x720 [ 166.632611][ T8513] tomoyo_path_number_perm+0x245/0x590 [ 166.634068][ T8513] ? tomoyo_path_number_perm+0x232/0x590 [ 166.635594][ T8513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 166.637160][ T8513] ? trace_lock_acquire+0x14a/0x1d0 [ 166.638555][ T8513] ? lock_acquire+0x2f/0xb0 [ 166.639683][ T8513] ? __fget_files+0x40/0x3f0 [ 166.640888][ T8513] ? __fget_files+0x244/0x3f0 [ 166.642116][ T8513] security_file_ioctl+0x9b/0x240 [ 166.643531][ T8513] __x64_sys_ioctl+0xbb/0x220 [ 166.644780][ T8513] do_syscall_64+0xcd/0x250 [ 166.645972][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.647577][ T8513] RIP: 0033:0x7f2fb257e719 [ 166.648702][ T8513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.653752][ T8513] RSP: 002b:00007f2fb3455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.655984][ T8513] RAX: ffffffffffffffda RBX: 00007f2fb2735f80 RCX: 00007f2fb257e719 [ 166.658122][ T8513] RDX: 0000000020000200 RSI: 00000000c040565f RDI: 0000000000000003 [ 166.658132][ T8513] RBP: 00007f2fb3455090 R08: 0000000000000000 R09: 0000000000000000 [ 166.658139][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.658146][ T8513] R13: 0000000000000000 R14: 00007f2fb2735f80 R15: 00007ffcd85db738 [ 166.658160][ T8513] [ 166.658954][ T8513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 167.767981][ T6969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.770950][ T6969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.781127][ T5935] Bluetooth: hci0: command 0x041b tx timeout [ 167.827841][ T6969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.830748][ T6969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.905744][ T6969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.909466][ T6969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.990457][ T6969] bond0: (slave netdevsim0): Releasing backup interface [ 167.993168][ T6969] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 167.996489][ T6969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.999263][ T6969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.068285][ T6969] bridge_slave_1: left allmulticast mode [ 168.069994][ T6969] bridge_slave_1: left promiscuous mode [ 168.071801][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.075831][ T6969] bridge_slave_0: left allmulticast mode [ 168.077356][ T6969] bridge_slave_0: left promiscuous mode [ 168.078944][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.174202][ T6969] erspan0 (unregistering): left promiscuous mode [ 168.187759][ T6969] gretap0 (unregistering): left promiscuous mode [ 168.532632][ T6969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.536055][ T6969] bond_slave_0: left promiscuous mode [ 168.538922][ T6969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.541603][ T6969] bond_slave_1: left promiscuous mode [ 168.544073][ T6969] bond0 (unregistering): Released all slaves [ 168.828677][ T6969] batadv_slave_1: left promiscuous mode [ 168.833759][ T6969] hsr_slave_0: left promiscuous mode [ 168.835854][ T6969] hsr_slave_1: left promiscuous mode [ 168.838244][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.840227][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.843557][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.845562][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.860323][ T6969] veth1_macvtap: left promiscuous mode [ 168.862770][ T6969] veth0_macvtap: left promiscuous mode [ 168.864296][ T6969] veth1_vlan: left promiscuous mode [ 168.865706][ T6969] veth0_vlan: left promiscuous mode [ 168.911624][ T6034] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 169.475312][ T6969] team0 (unregistering): Port device team_slave_1 removed [ 169.550311][ T6969] team0 (unregistering): Port device team_slave_0 removed [ 169.860855][ T5935] Bluetooth: hci0: command 0x041b tx timeout [ 179.068070][ T8683] netlink: zone id is out of range [ 179.070325][ T8683] netlink: zone id is out of range [ 179.072157][ T8683] netlink: zone id is out of range [ 179.073717][ T8683] netlink: zone id is out of range [ 179.075214][ T8683] netlink: zone id is out of range [ 179.076658][ T8683] netlink: zone id is out of range [ 179.078025][ T8683] netlink: zone id is out of range [ 179.080184][ T8683] netlink: zone id is out of range [ 179.081733][ T8683] netlink: zone id is out of range [ 179.084773][ T8683] netlink: set zone limit has 4 unknown bytes [ 179.108687][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.112635][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.115806][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.118357][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.124797][ T5944] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 179.127738][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.191539][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 179.191550][ T39] audit: type=1400 audit(1730165609.840:595): avc: denied { accept } for pid=8698 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.198822][ T39] audit: type=1400 audit(1730165609.840:596): avc: denied { read } for pid=8698 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.213012][ T8686] chnl_net:caif_netlink_parms(): no params data found [ 179.262012][ T8711] binder: BINDER_SET_CONTEXT_MGR already set [ 179.264382][ T8711] binder: 8709:8711 ioctl 4018620d 20000000 returned -16 [ 179.304691][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.306812][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.308833][ T8686] bridge_slave_0: entered allmulticast mode [ 179.311712][ T8686] bridge_slave_0: entered promiscuous mode [ 179.314675][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.316773][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.318852][ T8686] bridge_slave_1: entered allmulticast mode [ 179.321340][ T8686] bridge_slave_1: entered promiscuous mode [ 179.322662][ T8717] Bluetooth: MGMT ver 1.23 [ 179.356185][ T8686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.360575][ T8686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.384380][ T8686] team0: Port device team_slave_0 added [ 179.388164][ T8686] team0: Port device team_slave_1 added [ 179.406377][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.408205][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.415534][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.419091][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.422342][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.429158][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.475470][ T8686] hsr_slave_0: entered promiscuous mode [ 179.478146][ T8686] hsr_slave_1: entered promiscuous mode [ 179.480305][ T8686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.482696][ T8686] Cannot create hsr debugfs directory [ 179.672597][ T39] audit: type=1400 audit(1730165610.320:597): avc: denied { read } for pid=8741 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.729143][ T39] audit: type=1400 audit(1730165610.370:598): avc: denied { write } for pid=8741 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.116214][ T8686] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.134479][ T8686] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.141165][ T8686] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.144482][ T8686] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.155104][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.157068][ T8686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.159122][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.161234][ T8686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.182834][ T8686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.189033][ T8686] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.234152][ T8686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.236961][ T8686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.242175][ T5294] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 180.269422][ T39] audit: type=1400 audit(1730165610.910:599): avc: denied { connect } for pid=8790 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.309664][ T5294] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 180.320096][ T8686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.356270][ T8686] veth0_vlan: entered promiscuous mode [ 180.362678][ T8686] veth1_vlan: entered promiscuous mode [ 180.404149][ T8686] veth0_macvtap: entered promiscuous mode [ 180.407548][ T8686] veth1_macvtap: entered promiscuous mode [ 180.414330][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.417877][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.421092][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.424197][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.427663][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.434259][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.437516][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.442981][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.446366][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.452063][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.459983][ T8686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.469014][ T8686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.473864][ T8686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.480063][ T8686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.544150][ T6363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.546253][ T6363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.555761][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.558577][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.767099][ T2284] IPVS: starting estimator thread 0... [ 180.812714][ T39] audit: type=1400 audit(1730165611.460:600): avc: denied { watch_mount watch_reads } for pid=8839 comm="syz.1.583" path="/4/cgroup.controllers" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.860805][ T8834] IPVS: using max 36 ests per chain, 86400 per kthread [ 181.150816][ T5294] Bluetooth: hci2: command tx timeout [ 181.387626][ T39] audit: type=1400 audit(1730165612.030:601): avc: denied { ioctl } for pid=8910 comm="syz.3.598" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 181.719105][ T39] audit: type=1400 audit(1730165612.350:602): avc: denied { map } for pid=8915 comm="syz.0.600" path="socket:[23932]" dev="sockfs" ino=23932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 182.420356][ T39] audit: type=1400 audit(1730165613.060:603): avc: denied { bind } for pid=8942 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.530135][ T8957] sp0: Synchronizing with TNC [ 182.534740][ T8956] [U] è [ 182.691001][ T39] audit: type=1400 audit(1730165613.340:604): avc: denied { ioctl } for pid=8952 comm="syz.3.611" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 184.266514][ T5944] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 184.270890][ T5944] Bluetooth: hci0: Injecting HCI hardware error event [ 184.805091][ T9070] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 185.067162][ T9079] SELinux: security_context_str_to_sid (d>Óî) failed with errno=-22 [ 185.747030][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 185.747041][ T39] audit: type=1400 audit(1730165616.390:607): avc: denied { bind } for pid=9095 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 185.764094][ T39] audit: type=1400 audit(1730165616.390:608): avc: denied { name_bind } for pid=9095 comm="syz.3.660" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 185.769997][ T39] audit: type=1400 audit(1730165616.390:609): avc: denied { node_bind } for pid=9095 comm="syz.3.660" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 185.796599][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 185.796691][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 186.020877][ T39] audit: type=1400 audit(1730165616.670:610): avc: denied { getopt } for pid=9110 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.064086][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 186.067470][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 186.085246][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 186.087871][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 186.093707][ T9119] bridge1: entered promiscuous mode [ 186.095315][ T9119] bridge1: entered allmulticast mode [ 186.210731][ T39] audit: type=1400 audit(1730165616.820:611): avc: denied { connect } for pid=9116 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 186.313964][ T39] audit: type=1400 audit(1730165616.960:612): avc: denied { create } for pid=9120 comm="syz.4.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 186.391847][ T9097] ceph: No mds server is up or the cluster is laggy [ 186.432708][ T5944] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 186.435696][ T5944] Bluetooth: hci1: Injecting HCI hardware error event [ 186.439523][ T5945] Bluetooth: hci1: hardware error 0x00 [ 187.025537][ T9160] nbd: couldn't find device at index 41013 [ 187.060980][ T5944] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 187.065212][ T5944] Bluetooth: hci2: Injecting HCI hardware error event [ 187.138354][ T39] audit: type=1400 audit(1730165617.780:613): avc: denied { bind } for pid=9168 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 187.253514][ T9187] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96 [ 187.400805][ T5938] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 187.411636][ C3] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 187.530786][ T5938] usb 9-1: device descriptor read/64, error -71 [ 187.960821][ T5938] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 188.100763][ T5938] usb 9-1: device descriptor read/64, error -71 [ 188.210892][ T5938] usb usb9-port1: attempt power cycle [ 188.255429][ T9215] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 188.415754][ T39] audit: type=1400 audit(1730165619.060:614): avc: denied { write } for pid=9228 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 188.430879][ T39] audit: type=1400 audit(1730165619.060:615): avc: denied { nlmsg_read } for pid=9228 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 188.500859][ T5945] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 188.562682][ T5938] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 188.601083][ T5938] usb 9-1: device descriptor read/8, error -71 [ 188.665351][ T9265] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 188.699416][ T39] audit: type=1400 audit(1730165619.340:616): avc: denied { accept } for pid=9260 comm="syz.0.731" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 188.841131][ T5938] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 188.863452][ T5938] usb 9-1: device descriptor read/8, error -71 [ 188.972317][ T5938] usb usb9-port1: unable to enumerate USB device [ 190.616366][ T5945] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 191.346635][ T9323] lo: entered allmulticast mode [ 191.350093][ T9323] tunl0: entered allmulticast mode [ 191.357351][ T9323] gre0: entered allmulticast mode [ 191.362729][ T9323] gretap0: entered allmulticast mode [ 191.368042][ T9323] erspan0: entered allmulticast mode [ 191.372039][ T9323] ip_vti0: entered allmulticast mode [ 191.376142][ T9323] ip6_vti0: entered allmulticast mode [ 191.380117][ T9323] sit0: entered allmulticast mode [ 191.384232][ T9323] ip6tnl0: entered allmulticast mode [ 191.387342][ T9323] ip6gre0: entered allmulticast mode [ 191.392004][ T9323] syz_tun: entered allmulticast mode [ 191.395962][ T9323] ip6gretap0: entered allmulticast mode [ 191.409466][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.411693][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.415279][ T9323] bridge0: entered allmulticast mode [ 191.423761][ T9323] vcan0: entered allmulticast mode [ 191.427550][ T9323] bond0: entered allmulticast mode [ 191.428973][ T9323] bond_slave_0: entered allmulticast mode [ 191.430868][ T9323] bond_slave_1: entered allmulticast mode [ 191.436304][ T9323] team0: entered allmulticast mode [ 191.437921][ T9323] team_slave_0: entered allmulticast mode [ 191.439478][ T9323] team_slave_1: entered allmulticast mode [ 191.448605][ T9323] dummy0: entered allmulticast mode [ 191.453627][ T9323] nlmon0: entered allmulticast mode [ 191.456006][ T9323] caif0: entered allmulticast mode [ 191.458182][ T9323] batadv0: entered allmulticast mode [ 191.462818][ T9323] vxcan0: entered allmulticast mode [ 191.465224][ T9323] vxcan1: entered allmulticast mode [ 191.468680][ T9323] veth0: entered allmulticast mode [ 191.473460][ T9323] veth1: entered allmulticast mode [ 191.478103][ T9323] wg0: entered allmulticast mode [ 191.484096][ T9323] wg1: entered allmulticast mode [ 191.487195][ T9323] wg2: entered allmulticast mode [ 191.490341][ T9323] veth0_to_bridge: entered allmulticast mode [ 191.498653][ T9323] veth1_to_bridge: entered allmulticast mode [ 191.504817][ T9323] veth0_to_bond: entered allmulticast mode [ 191.509717][ T9323] veth1_to_bond: entered allmulticast mode [ 191.515696][ T9323] veth0_to_team: entered allmulticast mode [ 191.520415][ T9323] veth1_to_team: entered allmulticast mode [ 191.526059][ T9323] veth0_to_batadv: entered allmulticast mode [ 191.528799][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.532408][ T9323] batadv_slave_0: entered allmulticast mode [ 191.536247][ T9323] veth1_to_batadv: entered allmulticast mode [ 191.539068][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.542663][ T9323] batadv_slave_1: entered allmulticast mode [ 191.545806][ T9323] xfrm0: entered allmulticast mode [ 191.549847][ T9323] veth0_to_hsr: entered allmulticast mode [ 191.552894][ T9323] hsr_slave_0: entered allmulticast mode [ 191.556052][ T9323] veth1_to_hsr: entered allmulticast mode [ 191.559680][ T9323] hsr_slave_1: entered allmulticast mode [ 191.562966][ T9323] hsr0: entered allmulticast mode [ 191.566646][ T9323] veth1_virt_wifi: entered allmulticast mode [ 191.570765][ T9323] veth0_virt_wifi: entered allmulticast mode [ 191.574881][ T9323] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 191.578469][ T9323] veth1_vlan: entered allmulticast mode [ 191.583231][ T9323] veth0_vlan: entered allmulticast mode [ 191.588729][ T9323] vlan0: entered allmulticast mode [ 191.590366][ T9323] vlan1: entered allmulticast mode [ 191.592770][ T9323] macvlan0: entered allmulticast mode [ 191.597228][ T9323] macvlan1: entered allmulticast mode [ 191.599981][ T9323] ipvlan0: entered allmulticast mode [ 191.601524][ T9323] ipvlan1: entered allmulticast mode [ 191.603964][ T9323] veth1_macvtap: entered allmulticast mode [ 191.609280][ T9323] veth0_macvtap: entered allmulticast mode [ 191.614266][ T9323] macvtap0: entered allmulticast mode [ 191.617631][ T9323] macsec0: entered allmulticast mode [ 191.621315][ T9323] geneve0: entered allmulticast mode [ 191.624419][ T9323] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.626712][ T9323] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.629070][ T9323] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.631519][ T9323] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.634084][ T9323] geneve1: entered allmulticast mode [ 191.637412][ T9323] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 191.641919][ T9323] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 191.645925][ T9323] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 191.649585][ T9323] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 191.658623][ T9323] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 191.662266][ T9323] ip6tnl1: entered allmulticast mode [ 191.663725][ T9323] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 191.710774][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 191.710787][ T39] audit: type=1400 audit(1730165622.350:618): avc: denied { unmount } for pid=8686 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 192.170460][ T9358] xt_CT: No such helper "snmp_trap" [ 192.725324][ T9368] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 192.768125][ T9372] netlink: 'syz.4.773': attribute type 4 has an invalid length. [ 192.860601][ T9389] binder: 9388:9389 ioctl 40046210 9999999999999999 returned -14 [ 192.880254][ T9391] Illegal XDP return value 4294967294 on prog (id 106) dev N/A, expect packet loss! [ 193.206748][ T39] audit: type=1400 audit(1730165623.850:619): avc: denied { read } for pid=9431 comm="syz.0.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 193.616660][ T9443] input: syz0 as /devices/virtual/input/input14 [ 193.944422][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.103788][ T9458] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 194.107372][ T9457] mac80211_hwsim hwsim13 syzkaller0: left allmulticast mode [ 194.412878][ T9477] x_tables: ip_tables: osf match: only valid for protocol 6 [ 194.459401][ T39] audit: type=1400 audit(1730165625.100:620): avc: denied { read } for pid=9480 comm="syz.0.824" path="socket:[23517]" dev="sockfs" ino=23517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.935409][ T9531] kvm: kvm [9530]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 195.943153][ T9531] kvm: kvm [9530]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 196.092596][ T9541] netlink: 32 bytes leftover after parsing attributes in process `syz.4.850'. [ 196.094983][ T9541] netlink: 32 bytes leftover after parsing attributes in process `syz.4.850'. [ 196.097518][ T9541] netlink: 53 bytes leftover after parsing attributes in process `syz.4.850'. [ 196.122505][ T39] audit: type=1400 audit(1730165626.770:621): avc: denied { append } for pid=9543 comm="syz.4.851" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 196.278710][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 196.316832][ T39] audit: type=1400 audit(1730165626.960:622): avc: denied { accept } for pid=9568 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 196.502860][ T9578] trusted_key: encrypted_key: insufficient parameters specified [ 197.540852][ T828] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 197.691317][ T828] usb 9-1: too many configurations: 248, using maximum allowed: 8 [ 197.700784][ T828] usb 9-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=74.01 [ 197.703229][ T828] usb 9-1: New USB device strings: Mfr=29, Product=254, SerialNumber=225 [ 197.705476][ T828] usb 9-1: Product: syz [ 197.706599][ T828] usb 9-1: Manufacturer: syz [ 197.708499][ T828] usb 9-1: SerialNumber: syz [ 197.710820][ T828] usb 9-1: config 0 descriptor?? [ 197.714690][ T828] ttusbir 9-1:0.0: cannot find expected altsetting [ 197.920248][ T828] usb 9-1: USB disconnect, device number 6 [ 198.501693][ T9640] netlink: 32 bytes leftover after parsing attributes in process `syz.4.892'. [ 198.951888][ T828] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 199.103063][ T828] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.105818][ T828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.113113][ T828] usb 9-1: config 0 descriptor?? [ 199.116018][ T828] cp210x 9-1:0.0: cp210x converter detected [ 199.719603][ T828] cp210x 9-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 199.721766][ T828] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 199.728075][ T828] usb 9-1: cp210x converter now attached to ttyUSB0 [ 199.732281][ T828] usb 9-1: USB disconnect, device number 7 [ 199.736262][ T828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.738651][ T828] cp210x 9-1:0.0: device disconnected [ 201.894131][ T9707] input: syz0 as /devices/virtual/input/input16 [ 202.773363][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 202.888740][ T39] audit: type=1400 audit(1730165633.530:623): avc: denied { append } for pid=9723 comm="syz.4.927" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 203.117399][ T39] audit: type=1326 audit(1730165633.760:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.0.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6357e719 code=0x7ffc0000 [ 203.123599][ T39] audit: type=1326 audit(1730165633.760:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.0.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6357e719 code=0x7ffc0000 [ 203.129534][ T39] audit: type=1326 audit(1730165633.760:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.0.928" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7b6357e719 code=0x7ffc0000 [ 203.136231][ T39] audit: type=1326 audit(1730165633.760:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.0.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6357e719 code=0x7ffc0000 [ 203.142664][ T39] audit: type=1326 audit(1730165633.760:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.0.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6357e719 code=0x7ffc0000 [ 203.148562][ T39] audit: type=1326 audit(1730165633.760:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.0.928" exe="/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f7b6357e719 code=0x7ffc0000 [ 203.154477][ T39] audit: type=1326 audit(1730165633.760:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.0.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6357e719 code=0x7ffc0000 [ 203.160008][ T39] audit: type=1326 audit(1730165633.760:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9726 comm="syz.0.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6357e719 code=0x7ffc0000 [ 203.870766][ T39] audit: type=1400 audit(1730165634.510:632): avc: denied { listen } for pid=9732 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.622760][ T5944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.626521][ T5944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.631067][ T5944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.634371][ T5944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.640489][ T5944] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.644664][ T5944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.723797][ T9754] chnl_net:caif_netlink_parms(): no params data found [ 204.835393][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.837503][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.839565][ T9754] bridge_slave_0: entered allmulticast mode [ 204.842000][ T9754] bridge_slave_0: entered promiscuous mode [ 204.845079][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.847116][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.849235][ T9754] bridge_slave_1: entered allmulticast mode [ 204.851670][ T9754] bridge_slave_1: entered promiscuous mode [ 204.871905][ T9754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.875716][ T9754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.903087][ T9754] team0: Port device team_slave_0 added [ 204.906220][ T9754] team0: Port device team_slave_1 added [ 204.924116][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.926035][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.934702][ T9754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.939766][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.941971][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.948793][ T9754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.979328][ T9754] hsr_slave_0: entered promiscuous mode [ 204.983289][ T9754] hsr_slave_1: entered promiscuous mode [ 204.985410][ T9754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.988568][ T9754] Cannot create hsr debugfs directory [ 205.065340][ T9754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.068980][ T9754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.072390][ T9754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.075894][ T9754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.087473][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.089473][ T9754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.091552][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.093547][ T9754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.119125][ T9754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.127171][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.130408][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.143733][ T9754] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.149768][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.151755][ T6968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.156294][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.158222][ T6969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.236093][ T9754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.326596][ T9754] veth0_vlan: entered promiscuous mode [ 205.331545][ T9754] veth1_vlan: entered promiscuous mode [ 205.344024][ T9754] veth0_macvtap: entered promiscuous mode [ 205.347915][ T9754] veth1_macvtap: entered promiscuous mode [ 205.354292][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.357401][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.360254][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.363661][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.367266][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.374611][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.377403][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.380039][ T9754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.383061][ T9754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.386714][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.390826][ T9754] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.393832][ T9754] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.396205][ T9754] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.398471][ T9754] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.426287][ T6968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.428671][ T6968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.438982][ T6968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.441377][ T6968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.661296][ T5944] Bluetooth: hci4: command tx timeout [ 206.988713][ T5945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.991735][ T5945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.994145][ T5945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.997690][ T5945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.000600][ T5945] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.002946][ T5945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.088561][ T9818] chnl_net:caif_netlink_parms(): no params data found [ 207.090780][ T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 207.148923][ T9818] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.151045][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.152981][ T9818] bridge_slave_0: entered allmulticast mode [ 207.155103][ T9818] bridge_slave_0: entered promiscuous mode [ 207.158028][ T9818] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.160090][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.162291][ T9818] bridge_slave_1: entered allmulticast mode [ 207.164513][ T9818] bridge_slave_1: entered promiscuous mode [ 207.186473][ T9818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.190563][ T9818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.216199][ T9818] team0: Port device team_slave_0 added [ 207.218951][ T9818] team0: Port device team_slave_1 added [ 207.239443][ T9818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.240787][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 207.241799][ T9818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.249448][ T9818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.252957][ T25] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 207.254739][ T9818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.255267][ T25] usb 10-1: config 179 has no interface number 0 [ 207.257067][ T9818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.258753][ T25] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 207.265735][ T9818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.273115][ T25] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 207.276544][ T25] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.279548][ T25] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 207.282616][ T25] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 207.287118][ T25] usb 10-1: config 179 interface 65 has no altsetting 0 [ 207.288978][ T25] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 207.293451][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.295270][ T9818] hsr_slave_0: entered promiscuous mode [ 207.298006][ T9818] hsr_slave_1: entered promiscuous mode [ 207.298463][ T9806] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 207.306119][ T9818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.308263][ T9818] Cannot create hsr debugfs directory [ 207.314822][ T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input17 [ 207.451218][ T9818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 207.454618][ T9818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 207.457764][ T9818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 207.464585][ T9818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 207.476183][ T9818] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.478069][ T9818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.480140][ T9818] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.482240][ T9818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.523463][ T9818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.533330][ T9818] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.537139][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.542329][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.564378][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.566981][ T6957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.574135][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.576076][ T6359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.650538][ T9833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.957'. [ 207.655865][ T9833] IPv6: Can't replace route, no match found [ 207.684766][ T9818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.804356][ T9818] veth0_vlan: entered promiscuous mode [ 207.808584][ T9818] veth1_vlan: entered promiscuous mode [ 207.820543][ T9818] veth0_macvtap: entered promiscuous mode [ 207.824250][ T9818] veth1_macvtap: entered promiscuous mode [ 207.831781][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.834619][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.837226][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.839984][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.844628][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.847505][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.852122][ T9818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.860152][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.866531][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.869123][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.872033][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.874609][ T9818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.877628][ T9818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.881793][ T9818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.888741][ T9818] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.891973][ T9818] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.893258][ T39] kauditd_printk_skb: 141 callbacks suppressed [ 207.893269][ T39] audit: type=1400 audit(1730165638.540:774): avc: denied { read } for pid=9849 comm="syz.4.961" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 207.894475][ T9818] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.896172][ T39] audit: type=1400 audit(1730165638.540:775): avc: denied { open } for pid=9849 comm="syz.4.961" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 207.903066][ T9818] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.962965][ T39] audit: type=1400 audit(1730165638.600:776): avc: denied { perfmon } for pid=9849 comm="syz.4.961" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.969114][ T39] audit: type=1400 audit(1730165638.610:777): avc: denied { ioctl } for pid=9849 comm="syz.4.961" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 207.976627][ T39] audit: type=1400 audit(1730165638.620:778): avc: denied { bind } for pid=9849 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.982219][ T39] audit: type=1400 audit(1730165638.620:779): avc: denied { listen } for pid=9849 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.012076][ T6362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.014769][ T6362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.036537][ T6957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.038944][ T6957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.053412][ T39] audit: type=1400 audit(1730165638.700:780): avc: denied { mounton } for pid=9818 comm="syz-executor" path="/syzkaller.GR4SBM/syz-tmp" dev="sda1" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 208.061937][ T39] audit: type=1400 audit(1730165638.700:781): avc: denied { mount } for pid=9818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.073025][ T39] audit: type=1400 audit(1730165638.700:782): avc: denied { mounton } for pid=9818 comm="syz-executor" path="/syzkaller.GR4SBM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 208.079693][ T39] audit: type=1400 audit(1730165638.710:783): avc: denied { mount } for pid=9818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 208.750724][ T5944] Bluetooth: hci4: command tx timeout [ 209.061518][ T5944] Bluetooth: hci5: command tx timeout [ 209.548073][ T5977] usb 10-1: USB disconnect, device number 2 [ 209.548153][ C2] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 209.551909][ T5977] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 209.701625][ T9896] netlink: 16 bytes leftover after parsing attributes in process `syz.5.978'. [ 210.225992][ T9914] netlink: 'syz.6.986': attribute type 3 has an invalid length. [ 210.820766][ T5944] Bluetooth: hci4: command tx timeout [ 211.117883][ T9934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.994'. [ 211.151188][ T5944] Bluetooth: hci5: command tx timeout [ 211.474581][ T9958] netlink: 'syz.0.1004': attribute type 3 has an invalid length. [ 211.632389][ T9980] tc_dump_action: action bad kind [ 212.490348][T10045] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1039'. [ 212.910766][ T5944] Bluetooth: hci4: command tx timeout [ 213.032906][ T39] kauditd_printk_skb: 68 callbacks suppressed [ 213.032918][ T39] audit: type=1400 audit(1730165643.680:852): avc: denied { ioctl } for pid=10047 comm="syz.6.1043" path="socket:[28410]" dev="sockfs" ino=28410 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 213.043751][T10056] SELinux: policydb string length 16187400 does not match expected length 8 [ 213.046162][T10056] SELinux: failed to load policy [ 213.053859][ T39] audit: type=1400 audit(1730165643.690:853): avc: denied { load_policy } for pid=10047 comm="syz.6.1043" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 213.150114][ T39] audit: type=1400 audit(1730165643.790:854): avc: denied { getopt } for pid=10057 comm="syz.4.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.221147][ T5944] Bluetooth: hci5: command tx timeout [ 213.305911][T10070] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 213.341690][T10079] netlink: 'syz.4.1055': attribute type 30 has an invalid length. [ 213.346562][ T39] audit: type=1400 audit(1730165643.990:855): avc: denied { write } for pid=10080 comm="syz.5.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 213.407645][ T39] audit: type=1400 audit(1730165644.050:856): avc: denied { create } for pid=10088 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.414019][ T39] audit: type=1400 audit(1730165644.050:857): avc: denied { connect } for pid=10088 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.424230][T10093] cgroup: Unknown subsys name 'cpuset' [ 213.464267][T10097] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 213.496419][ T39] audit: type=1400 audit(1730165644.140:858): avc: denied { write } for pid=10102 comm="syz.4.1067" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.502537][ T39] audit: type=1400 audit(1730165644.150:859): avc: denied { read } for pid=10102 comm="syz.4.1067" path="socket:[29819]" dev="sockfs" ino=29819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.799543][ T39] audit: type=1400 audit(1730165644.440:860): avc: denied { relabelfrom } for pid=10113 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 213.805161][ T39] audit: type=1400 audit(1730165644.440:861): avc: denied { relabelto } for pid=10113 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 214.521727][T10162] xt_hashlimit: max too large, truncated to 1048576 [ 214.721335][ T2284] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 214.870794][ T2284] usb 10-1: Using ep0 maxpacket: 8 [ 214.875949][ T2284] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.879098][ T2284] usb 10-1: config 0 has no interfaces? [ 214.881387][ T2284] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 214.885537][ T2284] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.893569][ T2284] usb 10-1: config 0 descriptor?? [ 215.282712][ T828] usb 10-1: USB disconnect, device number 3 [ 215.300783][ T5944] Bluetooth: hci5: command tx timeout [ 215.426337][T10196] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 217.133793][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 217.540842][ T5944] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 217.545005][ T5944] Bluetooth: hci4: Injecting HCI hardware error event [ 217.550551][ T5944] Bluetooth: hci4: hardware error 0x00 [ 218.012057][T10306] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 218.041714][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1155'. [ 218.162335][T10327] ptrace attach of "/syz-executor exec"[10320] was attempted by "/syz-executor exec"[10327] [ 218.620740][ T2284] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 218.792333][ T2284] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.795575][ T2284] usb 9-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 218.799043][ T2284] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.803639][ T2284] usb 9-1: config 0 descriptor?? [ 218.810804][ T2284] usb 9-1: interface 1 not found [ 218.923762][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 218.923774][ T39] audit: type=1400 audit(1730165649.570:898): avc: denied { mount } for pid=10356 comm="syz.0.1174" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 218.933101][ T39] audit: type=1400 audit(1730165649.570:899): avc: denied { mounton } for pid=10356 comm="syz.0.1174" path="/275/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 218.960297][ T39] audit: type=1400 audit(1730165649.600:900): avc: denied { unmount } for pid=7287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 219.007841][ T39] audit: type=1400 audit(1730165649.650:901): avc: denied { read } for pid=10364 comm="syz.0.1178" name="video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 219.011082][ T6717] usb 9-1: USB disconnect, device number 8 [ 219.016330][ T39] audit: type=1400 audit(1730165649.650:902): avc: denied { open } for pid=10364 comm="syz.0.1178" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 219.024506][ T39] audit: type=1400 audit(1730165649.650:903): avc: denied { ioctl } for pid=10364 comm="syz.0.1178" path="/dev/video8" dev="devtmpfs" ino=976 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 219.040549][ T39] audit: type=1400 audit(1730165649.680:904): avc: denied { read } for pid=10366 comm="syz.0.1179" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 219.046806][ T39] audit: type=1400 audit(1730165649.680:905): avc: denied { open } for pid=10366 comm="syz.0.1179" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 219.053213][ T39] audit: type=1400 audit(1730165649.690:906): avc: denied { ioctl } for pid=10366 comm="syz.0.1179" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 219.085887][T10373] FAULT_INJECTION: forcing a failure. [ 219.085887][T10373] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 219.089552][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.0.1180 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 219.092699][T10373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.095850][T10373] Call Trace: [ 219.096782][T10373] [ 219.097593][T10373] dump_stack_lvl+0x16c/0x1f0 [ 219.098925][T10373] should_fail_ex+0x497/0x5b0 [ 219.100200][T10373] _copy_from_user+0x32/0x100 [ 219.101496][T10373] video_usercopy+0xed4/0x1600 [ 219.102870][T10373] ? __pfx___video_do_ioctl+0x10/0x10 [ 219.104302][T10373] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 219.106129][T10373] ? __pfx_video_usercopy+0x10/0x10 [ 219.107506][T10373] v4l2_ioctl+0x1ba/0x250 [ 219.108695][T10373] ? __pfx_v4l2_ioctl+0x10/0x10 [ 219.110003][T10373] __x64_sys_ioctl+0x18f/0x220 [ 219.111287][T10373] do_syscall_64+0xcd/0x250 [ 219.112500][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.114145][T10373] RIP: 0033:0x7f7b6357e719 [ 219.115341][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.120405][T10373] RSP: 002b:00007f7b642a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.122848][T10373] RAX: ffffffffffffffda RBX: 00007f7b63735f80 RCX: 00007f7b6357e719 [ 219.124960][T10373] RDX: 0000000020000200 RSI: 00000000c040565f RDI: 0000000000000003 [ 219.127062][T10373] RBP: 00007f7b642a1090 R08: 0000000000000000 R09: 0000000000000000 [ 219.129149][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.131261][T10373] R13: 0000000000000000 R14: 00007f7b63735f80 R15: 00007ffd296eeee8 [ 219.133368][T10373] [ 219.134263][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.158058][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 219.167440][ T39] audit: type=1400 audit(1730165649.810:907): avc: denied { create } for pid=10374 comm="syz.0.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.200758][ T5938] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 219.288920][T10384] netfs: Couldn't get user pages (rc=-14) [ 219.321076][ T2284] e1000 0000:00:06.0 eth0: Reset adapter [ 219.343123][T10386] FAULT_INJECTION: forcing a failure. [ 219.343123][T10386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.346699][T10386] CPU: 3 UID: 0 PID: 10386 Comm: syz.5.1186 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 219.349496][T10386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.352320][T10386] Call Trace: [ 219.353202][T10386] [ 219.354015][T10386] dump_stack_lvl+0x16c/0x1f0 [ 219.355272][T10386] should_fail_ex+0x497/0x5b0 [ 219.356526][T10386] _copy_from_user+0x32/0x100 [ 219.357809][T10386] do_sock_getsockopt+0x5f6/0x800 [ 219.359146][T10386] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 219.360614][T10386] ? __fget_files+0x244/0x3f0 [ 219.361902][T10386] __sys_getsockopt+0x1a1/0x270 [ 219.363192][T10386] ? __pfx___sys_getsockopt+0x10/0x10 [ 219.364630][T10386] ? fput+0x30/0x390 [ 219.365676][T10386] ? ksys_write+0x1ad/0x260 [ 219.366928][T10386] ? __pfx_ksys_write+0x10/0x10 [ 219.368239][T10386] __x64_sys_getsockopt+0xbd/0x160 [ 219.369609][T10386] ? do_syscall_64+0x91/0x250 [ 219.370891][T10386] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.372284][T10386] do_syscall_64+0xcd/0x250 [ 219.373498][T10386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.375079][T10386] RIP: 0033:0x7f2417f7e719 [ 219.376257][T10386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.381295][T10386] RSP: 002b:00007f2418dac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 219.383547][T10386] RAX: ffffffffffffffda RBX: 00007f2418135f80 RCX: 00007f2417f7e719 [ 219.385697][T10386] RDX: 0000000000002721 RSI: 0000200000000114 RDI: 0000000000000003 [ 219.387770][T10386] RBP: 00007f2418dac090 R08: 0000000020000000 R09: 0000000000000000 [ 219.389870][T10386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.391970][T10386] R13: 0000000000000000 R14: 00007f2418135f80 R15: 00007ffcc64ac7d8 [ 219.394916][T10386] [ 219.398827][ T5938] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.401743][ T5938] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.404125][ T5938] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 219.409626][ T5938] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.412668][ T5938] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.415605][ T5938] usb 11-1: Product: syz [ 219.416969][ T5938] usb 11-1: Manufacturer: syz [ 219.418272][ T5938] usb 11-1: SerialNumber: syz [ 219.420861][T10359] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 219.444232][T10388] kvm: kvm [10387]: vcpu0, guest rIP: 0x1b Unhandled WRMSR(0xc1) = 0xd [ 219.446675][T10388] kvm: kvm [10387]: vcpu0, guest rIP: 0x1d Unhandled WRMSR(0xc1) = 0xd [ 219.547838][ T9278] [ 219.548576][ T9278] ============================================ [ 219.550216][ T9278] WARNING: possible recursive locking detected [ 219.551844][ T9278] 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 Not tainted [ 219.555389][ T9278] -------------------------------------------- [ 219.558220][ T9278] syz.3.737/9278 is trying to acquire lock: [ 219.559942][ T9278] ffff88801f980078 (&hdev->lock){+.+.}-{3:3}, at: mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 219.562789][ T9278] [ 219.562789][ T9278] but task is already holding lock: [ 219.564961][ T9278] ffff88801f980078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x3ab/0x11b0 [ 219.567454][ T9278] [ 219.567454][ T9278] other info that might help us debug this: [ 219.569592][ T9278] Possible unsafe locking scenario: [ 219.569592][ T9278] [ 219.571758][ T9278] CPU0 [ 219.572728][ T9278] ---- [ 219.574201][ T9278] lock(&hdev->lock); [ 219.576128][ T9278] lock(&hdev->lock); [ 219.577416][ T9278] [ 219.577416][ T9278] *** DEADLOCK *** [ 219.577416][ T9278] [ 219.579939][ T9278] May be due to missing lock nesting notation [ 219.579939][ T9278] [ 219.582360][ T9278] 3 locks held by syz.3.737/9278: [ 219.584221][ T9278] #0: ffff88801f980d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 219.586868][ T9278] #1: ffff88801f980078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x3ab/0x11b0 [ 219.589457][ T9278] #2: ffff88801f980690 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_dequeue+0x50/0x1f0 [ 219.592557][ T9278] [ 219.592557][ T9278] stack backtrace: [ 219.594651][ T9278] CPU: 3 UID: 0 PID: 9278 Comm: syz.3.737 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 219.597641][ T9278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.600550][ T9278] Call Trace: [ 219.601452][ T9278] [ 219.602284][ T9278] dump_stack_lvl+0x116/0x1f0 [ 219.603577][ T9278] print_deadlock_bug+0x2e3/0x410 [ 219.604989][ T9278] __lock_acquire+0x2185/0x3ce0 [ 219.606278][ T9278] ? __pfx___lock_acquire+0x10/0x10 [ 219.607661][ T9278] ? hlock_class+0x4e/0x130 [ 219.608856][ T9278] ? __lock_acquire+0x163e/0x3ce0 [ 219.610170][ T9278] lock_acquire.part.0+0x11b/0x380 [ 219.611478][ T9278] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 219.613291][ T9278] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 219.615288][ T9278] ? rcu_is_watching+0x12/0xc0 [ 219.616580][ T9278] ? trace_lock_acquire+0x14a/0x1d0 [ 219.618027][ T9278] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 219.619738][ T9278] ? lock_acquire+0x2f/0xb0 [ 219.620894][ T9278] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 219.622535][ T9278] __mutex_lock+0x175/0x9c0 [ 219.623730][ T9278] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 219.625326][ T9278] ? __mutex_trylock_common+0xea/0x250 [ 219.626695][ T9278] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 219.628289][ T9278] ? hci_cmd_sync_dequeue+0x50/0x1f0 [ 219.629639][ T9278] ? __pfx___mutex_lock+0x10/0x10 [ 219.630904][ T9278] ? rcu_is_watching+0x12/0xc0 [ 219.632145][ T9278] ? __mutex_lock+0x1a6/0x9c0 [ 219.633968][ T9278] ? mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 219.636298][ T9278] mgmt_remove_adv_monitor_complete+0x9e/0x2e0 [ 219.637894][ T9278] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 219.639659][ T9278] ? kasan_quarantine_put+0x10a/0x240 [ 219.641070][ T9278] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 219.642936][ T9278] _hci_cmd_sync_cancel_entry.constprop.0+0x6c/0x1d0 [ 219.644835][ T9278] hci_cmd_sync_dequeue+0x178/0x1f0 [ 219.646396][ T9278] cmd_complete_rsp+0x46/0x1e0 [ 219.647680][ T9278] mgmt_pending_foreach+0xdf/0x140 [ 219.649062][ T9278] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 219.650461][ T9278] __mgmt_power_off+0x12a/0x2c0 [ 219.652160][ T9278] ? __pfx___mgmt_power_off+0x10/0x10 [ 219.654238][ T9278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.656425][ T9278] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.657944][ T9278] ? 0xffffffff81000000 [ 219.659123][ T9278] hci_dev_close_sync+0xcbb/0x11b0 [ 219.660511][ T9278] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 219.662037][ T9278] hci_dev_do_close+0x2e/0x90 [ 219.663390][ T9278] hci_dev_close+0x183/0x1e0 [ 219.664650][ T9278] hci_sock_ioctl+0x28c/0x880 [ 219.665911][ T9278] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 219.667281][ T9278] sock_do_ioctl+0x116/0x280 [ 219.668511][ T9278] ? __pfx_sock_do_ioctl+0x10/0x10 [ 219.669850][ T9278] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 219.671515][ T9278] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 219.673567][ T9278] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 219.676622][ T9278] sock_ioctl+0x228/0x6c0 [ 219.677772][ T9278] ? __pfx_sock_ioctl+0x10/0x10 [ 219.679042][ T9278] ? selinux_file_ioctl+0x180/0x270 [ 219.680381][ T9278] ? selinux_file_ioctl+0xb4/0x270 [ 219.681696][ T9278] ? __pfx_sock_ioctl+0x10/0x10 [ 219.683010][ T9278] __x64_sys_ioctl+0x18f/0x220 [ 219.684248][ T9278] do_syscall_64+0xcd/0x250 [ 219.685455][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.686998][ T9278] RIP: 0033:0x7fc92bf7e719 [ 219.688166][ T9278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.695228][ T9278] RSP: 002b:00007fc92cd1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.697536][ T9278] RAX: ffffffffffffffda RBX: 00007fc92c135f80 RCX: 00007fc92bf7e719 [ 219.699591][ T9278] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 219.701547][ T9278] RBP: 00007fc92bff132e R08: 0000000000000000 R09: 0000000000000000 [ 219.703565][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.705700][ T9278] R13: 0000000000000000 R14: 00007fc92c135f80 R15: 00007fffdfb064b8 [ 219.707772][ T9278] [ 219.711294][ T5944] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 219.715689][ T5938] usb 11-1: 0:2 : does not exist [ 219.718694][ T5938] usb 11-1: USB disconnect, device number 2 [ 220.663882][ T6969] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.724048][ T6969] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.783581][ T6969] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.853526][ T6969] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.936543][ T6969] bridge_slave_1: left allmulticast mode [ 220.938086][ T6969] bridge_slave_1: left promiscuous mode [ 220.939588][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.942131][ T6969] bridge_slave_0: left allmulticast mode [ 220.943739][ T6969] bridge_slave_0: left promiscuous mode [ 220.945260][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.035319][ T6969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.038995][ T6969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.042588][ T6969] bond0 (unregistering): Released all slaves [ 221.334509][ T6969] hsr_slave_0: left promiscuous mode [ 221.337058][ T6969] hsr_slave_1: left promiscuous mode [ 221.338903][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.341013][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.343288][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.345366][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.349655][ T6969] veth1_macvtap: left promiscuous mode [ 221.351480][ T6969] veth0_macvtap: left promiscuous mode [ 221.353139][ T6969] veth1_vlan: left promiscuous mode [ 221.354654][ T6969] veth0_vlan: left promiscuous mode [ 221.543487][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 221.580067][ T6969] team0 (unregistering): Port device team_slave_1 removed [ 221.622711][ T6969] team0 (unregistering): Port device team_slave_0 removed [ 222.205223][ T6969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.244452][ T6969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.283521][ T6969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.323795][ T6969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.372313][ T6969] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.423614][ T6969] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.513247][ T6969] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.553043][ T6969] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 222.620097][ T6969] bridge_slave_1: left allmulticast mode [ 222.621733][ T6969] bridge_slave_1: left promiscuous mode [ 222.623314][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.625628][ T6969] bridge_slave_0: left allmulticast mode [ 222.627110][ T6969] bridge_slave_0: left promiscuous mode [ 222.628645][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.632333][ T6969] bridge_slave_1: left allmulticast mode [ 222.634327][ T6969] bridge_slave_1: left promiscuous mode [ 222.635993][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.638704][ T6969] bridge_slave_0: left allmulticast mode [ 222.640958][ T6969] bridge_slave_0: left promiscuous mode [ 222.643381][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.833817][ T6969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.837468][ T6969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.840463][ T6969] bond0 (unregistering): Released all slaves [ 222.845725][ T6969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.848870][ T6969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.851839][ T6969] bond0 (unregistering): Released all slaves [ 223.264220][ T6969] hsr_slave_0: left promiscuous mode [ 223.265965][ T6969] hsr_slave_1: left promiscuous mode [ 223.268801][ T6969] hsr_slave_0: left promiscuous mode [ 223.270514][ T6969] hsr_slave_1: left promiscuous mode [ 223.272251][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.274195][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.276322][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.278371][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.282409][ T6969] veth1_macvtap: left promiscuous mode [ 223.283882][ T6969] veth0_macvtap: left promiscuous mode [ 223.285337][ T6969] veth1_vlan: left promiscuous mode [ 223.286735][ T6969] veth0_vlan: left promiscuous mode [ 223.288516][ T6969] veth1_macvtap: left promiscuous mode [ 223.289963][ T6969] veth0_macvtap: left promiscuous mode [ 223.291524][ T6969] veth1_vlan: left promiscuous mode [ 223.292911][ T6969] veth0_vlan: left promiscuous mode [ 223.481384][ T6969] team0 (unregistering): Port device team_slave_1 removed [ 223.521709][ T6969] team0 (unregistering): Port device team_slave_0 removed [ 223.938028][ T6969] team0 (unregistering): Port device team_slave_1 removed [ 223.976605][ T6969] team0 (unregistering): Port device team_slave_0 removed [ 224.698831][ T6969] IPVS: stop unused estimator thread 0... [ 224.989497][ T6969] bridge_slave_1: left promiscuous mode [ 224.991169][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.993668][ T6969] bridge_slave_0: left promiscuous mode [ 224.995219][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.250376][ T6969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.253229][ T6969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.256236][ T6969] bond0 (unregistering): Released all slaves [ 225.549340][ T6969] hsr_slave_0: left promiscuous mode [ 225.551144][ T6969] hsr_slave_1: left promiscuous mode [ 225.552962][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.555071][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.119552][ T6969] team0 (unregistering): Port device team_slave_1 removed [ 226.196011][ T6969] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 01:30:21 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff8880621924c0 RCX=1ffff1100c4324b1 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff8b6c9264 RBP=0000000000000626 RSP=ffffc90003faf760 R8 =0000000000000299 R9 =0000000000000299 R10=0000000080000002 R11=ffffffff8b6f8740 R12=0000000000000001 R13=0000000000000001 R14=ffff88806219259c R15=0000000000000001 RIP=ffffffff8165133a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558d6e4500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7b63737a8c CR3=0000000029674000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b6370c488 00007f7b6370c480 00007f7b6370c478 00007f7b6370c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b6426d100 00007f7b6370c440 00007f7b6370c458 00007f7b6370c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b6370c498 00007f7b6370c490 00007f7b6370c488 00007f7b6370c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 0000000000000264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000002779fc RBX=0000000000000001 RCX=ffffffff8b2305e9 RDX=ffffed100d4e7026 RSI=ffffffff8bd1acc0 RDI=ffffffff8164784c RBP=ffffed1003b55910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801daac880 R14=ffffffff905f5088 R15=0000000000000000 RIP=ffffffff8b2319cf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7b642a0f98 CR3=0000000029674000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b6370c488 00007f7b6370c480 00007f7b6370c478 00007f7b6370c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b6426d100 00007f7b6370c440 00007f7b6370c458 00007f7b6370c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b6370c498 00007f7b6370c490 00007f7b6370c488 00007f7b6370c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 0000000000000264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000008000 RBX=0000000000000000 RCX=00000000c0000080 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90003d8f970 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b22aaa0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f2418dac6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88806a800000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000526ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b635f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b46e5 RDI=ffffffff9aae7bc0 RBP=ffffffff9aae7b80 RSP=ffffc90005a8f030 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000039 R14=ffffffff850b4680 R15=0000000000000000 RIP=ffffffff850b470f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fc92cd1a6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7b6344e010 CR3=0000000054180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0409000000000100 230209010000003f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb25f21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb25f21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb25f21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb25f21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb25f226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb25f234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb270c488 00007f2fb270c480 00007f2fb270c478 00007f2fb270c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb326d100 00007f2fb270c440 00007f2fb2700004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fb270c498 00007f2fb270c490 00007f2fb270c488 00007f2fb270c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000