last executing test programs: 3.615208536s ago: executing program 2 (id=2859): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000000180)="f1", 0x1}) 3.563967217s ago: executing program 2 (id=2861): r0 = socket(0x2, 0x2, 0x0) bind$unix(r0, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 3.484800938s ago: executing program 2 (id=2862): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0x4141, 0x0) 1.912727686s ago: executing program 0 (id=2840): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) poll(&(0x7f0000000580)=[{}], 0x1, 0x0) r2 = dup2(r0, r0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0xfffffdef) write$P9_RSTATu(r1, &(0x7f0000003d40)=ANY=[], 0xfffffdef) 984.449306ms ago: executing program 0 (id=2894): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 883.403732ms ago: executing program 0 (id=2895): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "73195a7375845ee299572d7de2efe20f9d5a12"}) 723.940534ms ago: executing program 1 (id=2896): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r1, 0x0, &(0x7f00000001c0)='X', 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 595.477214ms ago: executing program 0 (id=2897): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) fallocate(r0, 0x50, 0x0, 0x101) 595.17272ms ago: executing program 0 (id=2898): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) 527.546032ms ago: executing program 1 (id=2899): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 520.941666ms ago: executing program 0 (id=2900): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x61) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 473.429776ms ago: executing program 2 (id=2901): socket$rds(0x15, 0x5, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 384.956159ms ago: executing program 2 (id=2903): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 384.657153ms ago: executing program 2 (id=2905): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 334.74035ms ago: executing program 3 (id=2906): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@routing={0x0, 0x0, 0x0, 0x1}]}}}}}, 0x0) 254.988744ms ago: executing program 3 (id=2907): r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, 0x0, &(0x7f0000002280)) 254.814096ms ago: executing program 1 (id=2908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) 194.679505ms ago: executing program 1 (id=2909): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0xc10c, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./bus\x00', 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 194.488232ms ago: executing program 3 (id=2910): pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x48bf, &(0x7f0000000280), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 146.895693ms ago: executing program 3 (id=2911): r0 = syz_io_uring_setup(0x353, &(0x7f0000000280), &(0x7f0000ffb000), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x19, 0x20000000, 0x0) 127.164507ms ago: executing program 1 (id=2912): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper}, @hyper, 0x0, 0x0, 0x3}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000002c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper}, @host, 0x0, 0x7ff}) 1.175962ms ago: executing program 3 (id=2913): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0}) 211.436µs ago: executing program 1 (id=2914): r0 = socket(0x22, 0x2, 0x1) getsockname$l2tp6(r0, 0x0, 0x0) 0s ago: executing program 3 (id=2915): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=virtio,noextend']) kernel console output (not intermixed with test programs): 257.726202][ T39] audit: type=1326 audit(1720854805.560:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.0.1981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe887d75bd9 code=0x7ffc0000 [ 257.738090][ T5237] usb 6-1: Using ep0 maxpacket: 32 [ 257.742320][ T5237] usb 6-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 183, changing to 7 [ 257.746797][ T5237] usb 6-1: config 33 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59294, setting to 1024 [ 257.758381][ T39] audit: type=1326 audit(1720854805.560:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10995 comm="syz.0.1981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe887d75bd9 code=0x7ffc0000 [ 257.785602][ T5237] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 257.792367][ T5237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.795679][ T5237] usb 6-1: Product: syz [ 257.807347][ T5237] usb 6-1: Manufacturer: syz [ 257.809035][ T5237] usb 6-1: SerialNumber: syz [ 257.928131][T11004] fuse: Bad value for 'fd' [ 258.057736][ T5237] usb 6-1: USB disconnect, device number 9 [ 258.484591][T11032] fuse: Bad value for 'fd' [ 258.849446][T11056] netlink: 1252 bytes leftover after parsing attributes in process `syz.1.2007'. [ 259.847440][ T5235] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 260.042037][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.050081][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.053885][ T5235] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 260.059234][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.069293][ T5235] usb 5-1: config 0 descriptor?? [ 260.537389][ T8] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 260.718228][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 260.728430][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 260.732961][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.736415][ T8] usb 7-1: Product: syz [ 260.738823][ T8] usb 7-1: Manufacturer: syz [ 260.741340][ T8] usb 7-1: SerialNumber: syz [ 260.745410][ T8] usb 7-1: config 0 descriptor?? [ 260.923664][T11165] netlink: 'syz.1.2052': attribute type 2 has an invalid length. [ 260.975972][ T8] usb 7-1: Found UVC 0.00 device syz (046d:0821) [ 260.979107][ T8] usb 7-1: No valid video chain found. [ 260.985131][ T8] usb 7-1: USB disconnect, device number 17 [ 260.992062][T10132] udevd[10132]: setting mode of /dev/bus/usb/007/017 to 020664 failed: No such file or directory [ 261.002151][T10132] udevd[10132]: setting owner of /dev/bus/usb/007/017 to uid=0, gid=0 failed: No such file or directory [ 261.380247][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.383038][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.407357][T11186] netlink: 'syz.3.2062': attribute type 1 has an invalid length. [ 262.346027][T11222] netlink: 'syz.1.2074': attribute type 2 has an invalid length. [ 262.362016][ T5235] usbhid 5-1:0.0: can't add hid device: -71 [ 262.380702][ T5235] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 262.403074][ T5235] usb 5-1: USB disconnect, device number 11 [ 262.715425][T11250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11250 comm=syz.3.2086 [ 263.240167][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 263.240181][ T39] audit: type=1400 audit(1720854811.160:748): avc: denied { read } for pid=11267 comm="syz.1.2092" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 263.250866][T11264] xt_l2tp: missing protocol rule (udp|l2tpip) [ 263.257526][ T5235] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 263.449856][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.454116][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.464202][ T5235] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 263.470133][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.478019][ T5235] usb 5-1: config 0 descriptor?? [ 263.645649][ T39] audit: type=1400 audit(1720854811.560:749): avc: denied { mounton } for pid=11280 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 263.668367][ T5209] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.684064][ T5209] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.688913][ T5209] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.692313][ T5209] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.700054][ T5209] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 263.703912][ T5209] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.876733][T11280] chnl_net:caif_netlink_parms(): no params data found [ 264.041671][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.054864][T11280] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.058054][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.061373][T11280] bridge_slave_0: entered allmulticast mode [ 264.065374][T11280] bridge_slave_0: entered promiscuous mode [ 264.071522][T11280] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.074847][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.078325][T11280] bridge_slave_1: entered allmulticast mode [ 264.082418][T11280] bridge_slave_1: entered promiscuous mode [ 264.126471][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.166218][T11280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.181100][T11280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.231967][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.273106][T11280] team0: Port device team_slave_0 added [ 264.279789][T11280] team0: Port device team_slave_1 added [ 264.352832][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.362794][T11280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.366621][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.378016][T11280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.386196][T11280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.390019][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.404542][T11280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.516370][T11292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11292 comm=syz.1.2098 [ 264.530916][T11280] hsr_slave_0: entered promiscuous mode [ 264.535712][T11280] hsr_slave_1: entered promiscuous mode [ 264.540948][T11280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.544167][T11280] Cannot create hsr debugfs directory [ 264.683909][ T39] audit: type=1400 audit(1720854812.600:750): avc: denied { setattr } for pid=11297 comm="syz.1.2101" name="NETLINK" dev="sockfs" ino=48436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.685067][ T11] bridge_slave_1: left allmulticast mode [ 264.699148][ T11] bridge_slave_1: left promiscuous mode [ 264.701992][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.709905][ T11] bridge_slave_0: left allmulticast mode [ 264.712422][ T11] bridge_slave_0: left promiscuous mode [ 264.714986][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.752823][ T39] audit: type=1400 audit(1720854812.670:751): avc: denied { read } for pid=11304 comm="syz.2.2103" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 264.762051][ T39] audit: type=1400 audit(1720854812.670:752): avc: denied { open } for pid=11304 comm="syz.2.2103" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 264.788754][ T39] audit: type=1400 audit(1720854812.710:753): avc: denied { read } for pid=11297 comm="syz.1.2101" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 264.803221][ T39] audit: type=1400 audit(1720854812.710:754): avc: denied { open } for pid=11297 comm="syz.1.2101" path="/205/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 265.118469][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.127020][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.135202][ T11] bond0 (unregistering): Released all slaves [ 265.514753][ T11] hsr_slave_0: left promiscuous mode [ 265.522378][ T11] hsr_slave_1: left promiscuous mode [ 265.526208][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.529708][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.534010][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.537450][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.586602][ T11] veth1_macvtap: left promiscuous mode [ 265.588971][ T11] veth0_macvtap: left promiscuous mode [ 265.591152][ T11] veth1_vlan: left promiscuous mode [ 265.593140][ T11] veth0_vlan: left promiscuous mode [ 265.665753][ T5235] usbhid 5-1:0.0: can't add hid device: -71 [ 265.679697][ T5235] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 265.684960][ T5235] usb 5-1: USB disconnect, device number 12 [ 265.778709][ T4635] Bluetooth: hci6: command tx timeout [ 265.938760][ T39] audit: type=1400 audit(1720854813.860:755): avc: denied { write } for pid=11326 comm="syz.2.2112" name="nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 265.953587][ T39] audit: type=1400 audit(1720854813.860:756): avc: denied { map } for pid=11326 comm="syz.2.2112" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 266.772730][ T11] team0 (unregistering): Port device team_slave_1 removed [ 266.864075][ T11] team0 (unregistering): Port device team_slave_0 removed [ 267.760083][ T39] audit: type=1400 audit(1720854815.680:757): avc: denied { cmd } for pid=11360 comm="syz.2.2125" path="socket:[47359]" dev="sockfs" ino=47359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.800752][T11280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.806692][T11280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.822646][T11280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.832537][T11280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.870504][ T4635] Bluetooth: hci6: command tx timeout [ 267.943103][T11280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.964544][T11280] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.979214][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.982515][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.987834][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.991026][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.022903][T11381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.030052][T11379] can0: slcan on pts0. [ 268.033749][T11381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.085412][T11280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.090570][T11280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.109040][T11382] can0 (unregistered): slcan off pts0. [ 268.109335][T11383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.238555][T11280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.283425][T11280] veth0_vlan: entered promiscuous mode [ 268.292458][T11280] veth1_vlan: entered promiscuous mode [ 268.324587][T11280] veth0_macvtap: entered promiscuous mode [ 268.332645][T11280] veth1_macvtap: entered promiscuous mode [ 268.347728][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.352746][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.357173][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.363909][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.368222][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.372895][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.376936][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.381406][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.385435][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.392391][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.396289][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.400831][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.406413][T11280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.415718][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.420445][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.424316][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.430189][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.435076][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.439499][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.443498][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.447786][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.452085][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.456596][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.461139][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.465666][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.470926][T11280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.480692][T11280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.485353][T11280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.488490][T11280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.492009][T11280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.564226][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.567603][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.593019][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.596451][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.742740][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 268.742753][ T39] audit: type=1400 audit(1720854816.660:761): avc: denied { bind } for pid=11404 comm="syz.3.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.743974][T11405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2141'. [ 268.778579][T11407] vivid-001: ================= START STATUS ================= [ 268.783460][T11407] vivid-001: Radio HW Seek Mode: Bounded [ 268.789963][T11407] vivid-001: Radio Programmable HW Seek: false [ 268.792780][T11407] vivid-001: RDS Rx I/O Mode: Block I/O [ 268.795293][T11407] vivid-001: Generate RBDS Instead of RDS: false [ 268.800285][T11407] vivid-001: RDS Reception: true [ 268.803762][T11407] vivid-001: RDS Program Type: 0 inactive [ 268.806466][T11407] vivid-001: RDS PS Name: inactive [ 268.808815][T11407] vivid-001: RDS Radio Text: inactive [ 268.811819][T11407] vivid-001: RDS Traffic Announcement: false inactive [ 268.815647][T11407] vivid-001: RDS Traffic Program: false inactive [ 268.818575][T11407] vivid-001: RDS Music: false inactive [ 268.820790][T11407] vivid-001: ================== END STATUS ================== [ 269.937871][ T4635] Bluetooth: hci6: command tx timeout [ 270.104103][ T39] audit: type=1326 audit(1720854818.020:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2160" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc959575bd9 code=0x0 [ 271.032205][T11475] batadv_slave_1: entered promiscuous mode [ 271.033743][T11474] batadv_slave_1: left promiscuous mode [ 271.577663][ T39] audit: type=1400 audit(1720854819.490:763): avc: denied { setattr } for pid=11477 comm="syz.2.2172" name="RAWv6" dev="sockfs" ino=49537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 271.617060][ T39] audit: type=1400 audit(1720854819.530:764): avc: denied { accept } for pid=11483 comm="syz.0.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 272.017598][ T4635] Bluetooth: hci6: command tx timeout [ 272.099751][T11502] batadv_slave_1: entered promiscuous mode [ 272.117601][T11501] batadv_slave_1: left promiscuous mode [ 272.687536][ T5235] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 272.727033][T11530] batadv_slave_1: entered promiscuous mode [ 272.731567][T11529] batadv_slave_1: left promiscuous mode [ 272.899786][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.905024][ T5235] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.910682][ T5235] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.914342][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.938943][ T5235] usb 5-1: config 0 descriptor?? [ 273.149334][T11548] can0: slcan on pts0. [ 273.221492][T11548] can0 (unregistered): slcan off pts0. [ 273.412726][ T5235] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 273.415859][ T5235] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 273.419220][ T5235] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 273.422408][ T5235] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 273.425511][ T5235] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 273.429714][ T5235] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 273.459611][ T5235] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 273.696714][ T56] usb 5-1: USB disconnect, device number 13 [ 274.059255][ T825] kernel write not supported for file [eventfd] (pid: 825 comm: kworker/3:3) [ 274.280523][ T39] audit: type=1400 audit(1720854822.200:765): avc: denied { read } for pid=11595 comm="syz.2.2218" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 274.287892][T11596] sd 0:0:0:0: PR command failed: 1026 [ 274.302810][ T39] audit: type=1400 audit(1720854822.200:766): avc: denied { open } for pid=11595 comm="syz.2.2218" path="/207/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 274.302833][T11596] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 274.314069][ T39] audit: type=1400 audit(1720854822.210:767): avc: denied { ioctl } for pid=11595 comm="syz.2.2218" path="/207/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 274.316111][T11596] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 274.403492][T11609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2224'. [ 274.410140][T11609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.474269][T11609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.987524][T11628] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 275.039509][T11632] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11632 comm=syz.2.2233 [ 275.087793][T11634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2234'. [ 275.094184][T11635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11635 comm=syz.2.2233 [ 275.094476][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 275.100343][T11635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=11635 comm=syz.2.2233 [ 275.112202][T11635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11635 comm=syz.2.2233 [ 275.163313][T11640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11640 comm=syz.2.2233 [ 276.453606][T11675] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11675 comm=syz.2.2250 [ 276.466952][T11673] can0: slcan on pts0. [ 276.508739][T11676] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11676 comm=syz.2.2250 [ 276.514730][T11676] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1542 sclass=netlink_audit_socket pid=11676 comm=syz.2.2250 [ 276.522080][T11676] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11676 comm=syz.2.2250 [ 276.579296][T11678] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11678 comm=syz.2.2250 [ 276.668704][T11673] can0 (unregistered): slcan off pts0. [ 276.753624][T11682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.765268][T11682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.815333][T11682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.404869][T11688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2255'. [ 277.411702][T11688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.474663][T11688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.692676][T11692] hfs: can't find a HFS filesystem on dev nullb0 [ 278.150142][ T39] audit: type=1400 audit(1720854826.070:768): avc: denied { create } for pid=11697 comm="syz.3.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 278.158626][ T39] audit: type=1400 audit(1720854826.080:769): avc: denied { sys_admin } for pid=11697 comm="syz.3.2259" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 278.377628][ T39] audit: type=1400 audit(1720854826.290:770): avc: denied { ioctl } for pid=11707 comm="syz.1.2263" path="socket:[49049]" dev="sockfs" ino=49049 ioctlcmd=0x8b0d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 278.494202][T11718] xt_HMARK: proto mask must be zero with L3 mode [ 279.713371][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.826171][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.899965][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.920006][ T5209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.926152][ T5209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.937057][ T5209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.963828][ T5209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.969869][ T5209] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.975621][ T5209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.000297][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.182834][ T39] audit: type=1400 audit(1720854828.100:771): avc: denied { write } for pid=11747 comm="syz.0.2281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 280.199632][ T45] bridge_slave_1: left allmulticast mode [ 280.203304][ T45] bridge_slave_1: left promiscuous mode [ 280.207917][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.215499][ T45] bridge_slave_0: left allmulticast mode [ 280.218577][ T45] bridge_slave_0: left promiscuous mode [ 280.221197][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.671629][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.678739][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.688827][ T45] bond0 (unregistering): Released all slaves [ 280.735785][T11742] chnl_net:caif_netlink_parms(): no params data found [ 280.736921][T11753] xt_HMARK: proto mask must be zero with L3 mode [ 280.875044][T11742] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.877499][T11742] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.880387][T11742] bridge_slave_0: entered allmulticast mode [ 280.884044][T11742] bridge_slave_0: entered promiscuous mode [ 280.957906][T11742] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.960956][T11742] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.964222][T11742] bridge_slave_1: entered allmulticast mode [ 280.968192][T11742] bridge_slave_1: entered promiscuous mode [ 281.161515][T11742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.173111][T11742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.192932][ T826] IPVS: starting estimator thread 0... [ 281.256380][T11742] team0: Port device team_slave_0 added [ 281.263134][T11742] team0: Port device team_slave_1 added [ 281.308778][T11767] IPVS: using max 21 ests per chain, 50400 per kthread [ 281.426160][ T45] hsr_slave_0: left promiscuous mode [ 281.435162][ T45] hsr_slave_1: left promiscuous mode [ 281.444538][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.449341][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.465593][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.470217][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.525917][ T45] veth1_macvtap: left promiscuous mode [ 281.528522][ T45] veth0_macvtap: left promiscuous mode [ 281.531597][ T45] veth1_vlan: left promiscuous mode [ 281.534142][ T45] veth0_vlan: left promiscuous mode [ 281.592019][ T5209] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.601231][ T5209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.607055][ T5209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.612960][ T5209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.616255][ T5209] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.622408][ T5209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.020956][ T5209] Bluetooth: hci2: command tx timeout [ 283.050384][ T45] team0 (unregistering): Port device team_slave_1 removed [ 283.198708][ T45] team0 (unregistering): Port device team_slave_0 removed [ 283.579352][T11804] slcan: can't register candev [ 283.592851][T11804] Falling back ldisc for pts0. [ 283.700011][ T5209] Bluetooth: hci3: command tx timeout [ 284.102527][ T5209] Bluetooth: hci2: command tx timeout [ 284.296083][T11742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.299663][T11742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.314043][T11742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.320344][T11742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.322958][T11742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.337786][T11742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.344024][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.348216][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.367869][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.380818][T11784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.384041][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.386871][T11784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.390455][T11784] bridge0: entered promiscuous mode [ 284.392528][T11784] bridge0: entered allmulticast mode [ 284.576012][T11742] hsr_slave_0: entered promiscuous mode [ 284.593003][T11742] hsr_slave_1: entered promiscuous mode [ 284.601494][T11742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.604507][T11742] Cannot create hsr debugfs directory [ 284.802015][ T39] audit: type=1400 audit(1720854832.720:772): avc: denied { setattr } for pid=11827 comm="syz.0.2312" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 284.903731][T11783] chnl_net:caif_netlink_parms(): no params data found [ 285.038856][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.151492][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.189441][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.194041][T11783] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.197870][T11783] bridge_slave_0: entered allmulticast mode [ 285.201880][T11783] bridge_slave_0: entered promiscuous mode [ 285.221437][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.225309][T11783] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.228938][T11783] bridge_slave_1: entered allmulticast mode [ 285.233306][T11783] bridge_slave_1: entered promiscuous mode [ 285.286884][T11847] program syz.0.2318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.300867][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.354522][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.380006][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.396067][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.514820][ T5209] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 285.545239][T11783] team0: Port device team_slave_0 added [ 285.580019][T11783] team0: Port device team_slave_1 added [ 285.716542][T11783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.722228][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.734957][T11783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.742476][T11783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.745826][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.759526][T11783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.777440][ T5209] Bluetooth: hci3: command tx timeout [ 285.918862][T11742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.959857][ T45] bridge_slave_1: left allmulticast mode [ 285.965242][ T45] bridge_slave_1: left promiscuous mode [ 285.970246][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.982373][ T45] bridge_slave_0: left allmulticast mode [ 285.984921][ T45] bridge_slave_0: left promiscuous mode [ 285.990713][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.187419][ T5209] Bluetooth: hci2: command tx timeout [ 286.616110][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.623714][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.638071][ T45] bond0 (unregistering): Released all slaves [ 286.648837][T11742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 286.685954][T11783] hsr_slave_0: entered promiscuous mode [ 286.711750][T11783] hsr_slave_1: entered promiscuous mode [ 286.727566][T11783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.731975][T11783] Cannot create hsr debugfs directory [ 286.766868][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2328'. [ 286.918486][T11876] team1: Mode changed to "loadbalance" [ 286.927771][T11742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 286.935474][T11742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 287.307018][ T45] hsr_slave_0: left promiscuous mode [ 287.310962][ T45] hsr_slave_1: left promiscuous mode [ 287.314816][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.318531][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.322862][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.326099][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.377945][ T45] veth1_macvtap: left promiscuous mode [ 287.380467][ T45] veth0_macvtap: left promiscuous mode [ 287.383113][ T45] veth1_vlan: left promiscuous mode [ 287.385555][ T45] veth0_vlan: left promiscuous mode [ 287.888592][ T5209] Bluetooth: hci3: command tx timeout [ 288.257793][ T5209] Bluetooth: hci2: command tx timeout [ 288.901676][ T45] team0 (unregistering): Port device team_slave_1 removed [ 289.026535][ T45] team0 (unregistering): Port device team_slave_0 removed [ 289.027375][ T56] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 289.237471][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 289.243503][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.248217][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.252701][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.257151][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.263953][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.268233][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.480762][ T56] usb 5-1: GET_CAPABILITIES returned 0 [ 289.482797][ T56] usbtmc 5-1:16.0: can't read capabilities [ 289.688486][ T817] usb 5-1: USB disconnect, device number 14 [ 289.923621][T11742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.938644][ T5209] Bluetooth: hci3: command tx timeout [ 289.945495][T11742] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.954749][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.957929][ T5237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.997509][ T817] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.000260][ T817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.045839][T11742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.051182][T11742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.142573][T11916] EXT4-fs warning (device sda1): __ext4_ioctl:1257: Setting inode version is not supported with metadata_csum enabled. [ 290.210050][T11742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.256398][T11742] veth0_vlan: entered promiscuous mode [ 290.269425][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.272890][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.289888][T11742] veth1_vlan: entered promiscuous mode [ 290.315798][T11926] ip6tnl0: entered promiscuous mode [ 290.326403][T11922] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.330025][T11922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.333476][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.336640][T11922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.343332][T11922] bridge0: entered promiscuous mode [ 290.345735][T11922] bridge0: entered allmulticast mode [ 290.350968][T11925] ip6tnl0: left promiscuous mode [ 290.357117][T11742] veth0_macvtap: entered promiscuous mode [ 290.366198][T11742] veth1_macvtap: entered promiscuous mode [ 290.412723][T11742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.419897][T11742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.424345][T11742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.429295][T11742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.433734][T11742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.438939][T11742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.443280][T11742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.448661][T11742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.453183][T11742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.457967][T11742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.464529][T11742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.495004][T11742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.500195][T11742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.504524][T11742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.511052][T11742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.515327][T11742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.519317][T11742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.522899][T11742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.527145][T11742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.531551][T11742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.535583][T11742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.541417][T11742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.547399][T11783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.553460][T11783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.562891][T11742] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.566337][T11742] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.570277][T11742] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.573478][T11742] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.578946][T11783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.618673][T11783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.702023][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.707766][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.738722][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.745902][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.775385][T11783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.794269][T11783] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.804703][ T7496] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.808344][ T7496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.819475][ T7496] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.822436][ T7496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.035526][T11783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.076120][T11783] veth0_vlan: entered promiscuous mode [ 291.091232][T11783] veth1_vlan: entered promiscuous mode [ 291.121764][T11783] veth0_macvtap: entered promiscuous mode [ 291.129118][T11783] veth1_macvtap: entered promiscuous mode [ 291.143354][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.147689][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.151921][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.156242][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.160614][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.165419][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.169536][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.174000][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.178070][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.181973][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.185967][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.190237][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.195798][T11783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.205157][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.209587][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.213447][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.218777][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.223099][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.226964][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.232288][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.236751][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.241042][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.245253][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.249371][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.253789][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.260647][T11783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.271335][T11783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.275162][T11783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.279238][T11783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.282610][T11783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.370692][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.374442][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.413024][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.416477][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.421434][T11948] ip6tnl0: entered promiscuous mode [ 291.427153][T11947] ip6tnl0: left promiscuous mode [ 291.483689][ T39] audit: type=1400 audit(1720854839.400:773): avc: denied { write } for pid=11949 comm="syz.0.2352" name="ptp0" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 291.499273][ T39] audit: type=1400 audit(1720854839.410:774): avc: denied { getopt } for pid=11949 comm="syz.0.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 291.577411][ T39] audit: type=1400 audit(1720854839.490:775): avc: denied { accept } for pid=11959 comm="syz.0.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 291.633558][ T39] audit: type=1400 audit(1720854839.550:776): avc: denied { write } for pid=11959 comm="syz.0.2355" path="socket:[52906]" dev="sockfs" ino=52906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 292.485397][T11979] Bluetooth: MGMT ver 1.22 [ 292.546336][ T39] audit: type=1400 audit(1720854840.464:777): avc: denied { bind } for pid=11985 comm="syz.1.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.837700][ T56] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 293.021311][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.027084][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.033377][ T56] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 293.034930][ T5209] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 293.053966][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.059976][ T56] usb 6-1: config 0 descriptor?? [ 293.066816][ T56] usbhid 6-1:0.0: can't add hid device: -22 [ 293.071537][ T56] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 293.400596][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.403807][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.407819][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.411081][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.415061][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.427776][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.431316][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.434574][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.438919][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.442317][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.445658][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.462192][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.466077][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.469502][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.472683][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.475839][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.479042][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.482088][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.485146][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.488276][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.491458][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.495022][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.500771][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.503992][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.507299][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.515444][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.519184][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.522431][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.525726][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.529348][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.532581][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.542753][ T7496] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 293.551261][ T7496] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 293.653403][ T7496] usb 6-1: USB disconnect, device number 10 [ 293.821563][ T39] audit: type=1400 audit(1720854841.744:778): avc: denied { watch } for pid=12019 comm="syz.0.2379" path="/127/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 293.945306][ T5209] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 294.122675][T12043] overlayfs: failed to resolve './file1': -2 [ 294.137405][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'. [ 295.970863][ T5209] Bluetooth: hci4: unexpected event 0x06 length: 17 > 3 [ 295.986006][ T5209] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 295.992717][ T5209] Bluetooth: Wrong link type (-22) [ 295.996159][ T5209] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 295.999435][ T5209] Bluetooth: Wrong link type (-22) [ 296.001884][ T5209] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 296.021440][ T5209] Bluetooth: Wrong link type (-22) [ 296.024009][ T5209] Bluetooth: hci4: link tx timeout [ 296.026889][ T5209] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 296.094154][T12080] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 296.099172][T12080] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 296.193805][ T4635] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 297.339928][ T39] audit: type=1326 audit(1720854845.264:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.2.2417" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ff8d75bd9 code=0x0 [ 297.363052][T12122] netlink: 'syz.0.2418': attribute type 2 has an invalid length. [ 297.366904][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'. [ 297.379466][ T39] audit: type=1400 audit(1720854845.304:780): avc: denied { connect } for pid=12125 comm="syz.3.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 297.465880][T12124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 297.474219][ T39] audit: type=1400 audit(1720854845.394:781): avc: denied { getopt } for pid=12134 comm="syz.3.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 298.097537][ T4635] Bluetooth: hci4: command 0x0406 tx timeout [ 298.507743][T12168] Bluetooth: MGMT ver 1.22 [ 298.966138][T12176] netlink: 'syz.3.2439': attribute type 41 has an invalid length. [ 299.752672][ T39] audit: type=1400 audit(1720854847.673:782): avc: denied { bind } for pid=12205 comm="syz.1.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.968565][ T817] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 300.007674][ T39] audit: type=1400 audit(1720854847.923:783): avc: denied { ioctl } for pid=12214 comm="syz.0.2455" path="socket:[54675]" dev="sockfs" ino=54675 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 300.170334][ T817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.175471][ T817] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 300.196387][ T817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.202406][ T817] usb 7-1: config 0 descriptor?? [ 300.904891][ T5209] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 301.186729][ T817] usbhid 7-1:0.0: can't add hid device: -71 [ 301.195884][ T817] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 301.215021][ T817] usb 7-1: USB disconnect, device number 18 [ 301.362941][ T5209] Bluetooth: hci4: unexpected event 0x06 length: 17 > 3 [ 301.377149][ T5209] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 301.385211][ T5209] Bluetooth: Wrong link type (-22) [ 301.387563][ T5209] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 301.390796][ T5209] Bluetooth: Wrong link type (-22) [ 301.394431][ T5209] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 301.397283][ T5209] Bluetooth: Wrong link type (-22) [ 301.410225][T12253] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 301.414369][T12253] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 302.039187][ T5237] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 302.241589][ T5237] usb 7-1: Using ep0 maxpacket: 8 [ 302.246071][ T5237] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.282042][ T5237] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.282695][ T39] audit: type=1400 audit(1720854850.202:784): avc: denied { setattr } for pid=12278 comm="syz.0.2478" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 302.286254][ T5237] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.286280][ T5237] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.306064][ T5237] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.310193][ T5237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.630839][ T39] audit: type=1400 audit(1720854850.542:785): avc: denied { setopt } for pid=12281 comm="syz.3.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.944620][ T5237] usb 7-1: GET_CAPABILITIES returned 0 [ 302.947137][ T5237] usbtmc 7-1:16.0: can't read capabilities [ 302.955822][ T5237] usb 7-1: USB disconnect, device number 19 [ 303.099815][ T5235] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 303.250750][ T5237] kernel write not supported for file /sg0 (pid: 5237 comm: kworker/1:5) [ 303.291462][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.295869][ T5235] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 303.299895][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.305162][ T5235] usb 5-1: config 0 descriptor?? [ 303.768271][ T5237] kernel write not supported for file /sg0 (pid: 5237 comm: kworker/1:5) [ 304.076998][T12331] tipc: Started in network mode [ 304.079721][T12331] tipc: Node identity e0000001, cluster identity 4711 [ 304.082969][T12331] tipc: Enabling of bearer rejected, failed to enable media [ 304.991630][T12338] 9pnet: p9_errstr2errno: server reported unknown error 017 [ 305.076198][ T5235] usbhid 5-1:0.0: can't add hid device: -71 [ 305.079103][ T5235] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 305.085961][ T5235] usb 5-1: USB disconnect, device number 15 [ 305.288117][T12361] 9pnet: p9_errstr2errno: server reported unknown error 017 [ 305.516264][T12374] tipc: Enabling of bearer rejected, failed to enable media [ 306.396646][T12410] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 306.399892][T12410] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 306.404821][T12410] vhci_hcd vhci_hcd.0: Device attached [ 306.489477][ T39] audit: type=1400 audit(1720854854.400:786): avc: denied { read } for pid=12407 comm="syz.1.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 306.589820][ T39] audit: type=1400 audit(1720854854.500:787): avc: denied { read } for pid=12422 comm="syz.2.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 306.611414][ T8590] vhci_hcd: vhci_device speed not set [ 306.681458][ T8590] usb 15-1: new full-speed USB device number 3 using vhci_hcd [ 306.919914][T12441] tipc: Started in network mode [ 306.922404][T12441] tipc: Node identity e0000001, cluster identity 4711 [ 306.925356][T12441] tipc: Enabling of bearer rejected, failed to enable media [ 307.168418][T12414] vhci_hcd: connection closed [ 307.170848][T12076] vhci_hcd: stop threads [ 307.175895][T12076] vhci_hcd: release socket [ 307.177876][T12076] vhci_hcd: disconnect device [ 308.432450][ T5209] Bluetooth: hci3: command tx timeout [ 308.450524][T12469] tipc: Enabling of bearer rejected, failed to enable media [ 308.603936][T12472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2548'. [ 308.616670][T12472] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2548'. [ 308.620698][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2548'. [ 308.624895][T12472] vlan0: entered allmulticast mode [ 308.627261][T12472] veth0_vlan: entered allmulticast mode [ 309.432874][ T5235] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 309.620072][ T39] audit: type=1400 audit(1720854857.528:788): avc: denied { read write } for pid=12499 comm="syz.0.2560" name="bus" dev="9p" ino=36575286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 309.633088][ T39] audit: type=1400 audit(1720854857.528:789): avc: denied { open } for pid=12499 comm="syz.0.2560" path="/167/file0/bus" dev="9p" ino=36575286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 309.644589][ T39] audit: type=1800 audit(1720854857.528:790): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2560" name="bus" dev="9p" ino=36575286 res=0 errno=0 [ 309.654157][ T39] audit: type=1804 audit(1720854857.548:791): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2560" name="/newroot/167/file0/bus" dev="9p" ino=36575286 res=1 errno=0 [ 309.672596][ T39] audit: type=1800 audit(1720854857.588:792): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2560" name="file1" dev="9p" ino=36575241 res=0 errno=0 [ 309.684235][ T5235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.688910][ T5235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.693574][ T5235] usb 7-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 309.697594][ T5235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.699118][ T39] audit: type=1804 audit(1720854857.608:793): pid=12500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2560" name="/newroot/167/file0/bus" dev="9p" ino=36575286 res=1 errno=0 [ 309.704533][ T5235] usb 7-1: config 0 descriptor?? [ 309.721790][ T5235] usbhid 7-1:0.0: can't add hid device: -22 [ 309.722209][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'. [ 309.724952][ T5235] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 310.142908][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.168252][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.176937][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.189080][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.193206][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.201576][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.207566][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.212377][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.217719][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.222714][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.227416][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.233330][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.243954][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.247636][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.252277][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.255912][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.259377][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.264041][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.268736][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.273291][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.276647][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.279731][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.283212][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.287864][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.290954][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.294773][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.300346][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.303710][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.308590][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.312567][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.316323][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.319223][ T5235] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 310.331332][ T5235] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz0 [ 310.343881][ T35] usb 7-1: USB disconnect, device number 20 [ 310.710537][T12525] tipc: Enabling of bearer rejected, failed to enable media [ 311.200094][T12534] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 311.259539][T12536] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 311.304458][ T39] audit: type=1400 audit(1720854859.217:794): avc: denied { add_name } for pid=12539 comm="syz.0.2577" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 311.375848][ T39] audit: type=1400 audit(1720854859.217:795): avc: denied { create } for pid=12539 comm="syz.0.2577" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 311.519624][ T39] audit: type=1800 audit(1720854859.427:796): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2582" name="bus" dev="9p" ino=36575286 res=0 errno=0 [ 311.541179][ T39] audit: type=1804 audit(1720854859.447:797): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2582" name="/newroot/61/file0/bus" dev="9p" ino=36575286 res=1 errno=0 [ 311.669593][T12565] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 311.783935][ T827] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 311.793029][ T8590] vhci_hcd: vhci_device speed not set [ 311.917848][T12581] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 311.991765][ T827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.004528][ T827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.027544][ T827] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 312.031350][ T827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.087860][ T827] usb 6-1: config 0 descriptor?? [ 312.107629][ T827] usbhid 6-1:0.0: can't add hid device: -22 [ 312.111068][ T827] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 312.476911][T12597] netlink: 'syz.3.2601': attribute type 11 has an invalid length. [ 312.483065][T12597] netlink: 'syz.3.2601': attribute type 1 has an invalid length. [ 312.486514][T12597] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.2601'. [ 312.600682][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.628155][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.635996][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.647119][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.649947][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.653356][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.684380][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.688359][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.692118][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.725427][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.728350][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.731214][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.734821][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.737945][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.741151][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.744224][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.748637][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.751758][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.754936][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.758560][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.761858][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.765218][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.768402][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.771231][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.773390][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.778215][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.781265][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.784327][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.788252][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.791296][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.794293][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.810460][ T5237] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 312.823333][ T5237] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 312.848169][ T8590] usb 6-1: USB disconnect, device number 11 [ 313.205372][T12619] cgroup: No subsys list or none specified [ 313.479327][T12624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.839438][T12641] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 313.950136][T12649] 9pnet_fd: p9_fd_create_tcp (12649): problem connecting socket to 127.0.0.1 [ 313.956450][T12649] 9pnet_fd: p9_fd_create_tcp (12649): problem connecting socket to 127.0.0.1 [ 314.243241][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1 [ 314.248883][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1 [ 314.250132][T12672] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 314.254843][T12672] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 314.257761][T12672] vhci_hcd vhci_hcd.0: Device attached [ 314.456022][ T35] vhci_hcd: vhci_device speed not set [ 314.525462][ T35] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 315.051269][T12674] vhci_hcd: connection closed [ 315.061508][ T1092] vhci_hcd: stop threads [ 315.065739][ T1092] vhci_hcd: release socket [ 315.067709][ T1092] vhci_hcd: disconnect device [ 315.275792][ T9916] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 315.466029][ T9916] usb 6-1: Using ep0 maxpacket: 8 [ 315.475524][ T9916] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 315.482932][ T9916] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.487467][ T9916] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.491897][ T9916] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.498742][ T9916] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.505258][ T9916] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.511321][ T9916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.732484][ T9916] usb 6-1: GET_CAPABILITIES returned 0 [ 315.739189][ T9916] usbtmc 6-1:16.0: can't read capabilities [ 315.948396][T12732] xt_TPROXY: Can be used only with -p tcp or -p udp [ 316.064099][T12701] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 316.071085][T12736] cgroup: No subsys list or none specified [ 316.105250][ T5237] usb 6-1: USB disconnect, device number 12 [ 316.276968][ T5209] Bluetooth: hci2: command tx timeout [ 317.057716][T12769] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2670'. [ 317.061585][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'. [ 317.258099][T12783] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 317.480527][T12794] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2679'. [ 317.484652][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 318.082397][T12813] cdrom: dropping to single frame dma [ 318.286044][T12821] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2689'. [ 318.290104][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 318.716297][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 318.716312][ T39] audit: type=1326 audit(1720854866.624:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12830 comm="syz.2.2693" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ff8d75bd9 code=0x0 [ 319.191406][ T39] audit: type=1400 audit(1720854867.103:808): avc: denied { append } for pid=12835 comm="syz.1.2695" name="nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 319.201655][ T39] audit: type=1400 audit(1720854867.103:809): avc: denied { write } for pid=12835 comm="syz.1.2695" name="nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 319.521424][T12845] lo: entered allmulticast mode [ 319.538551][ T1405] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 319.592542][T12845] lo: left allmulticast mode [ 319.633539][T12849] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2701'. [ 319.637125][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'. [ 319.654490][ T35] vhci_hcd: vhci_device speed not set [ 319.735341][ T1405] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 319.739956][ T1405] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.745672][ T1405] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 319.755805][ T1405] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.761601][ T1405] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 319.765115][ T1405] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 319.768392][ T1405] usb 6-1: Product: syz [ 319.770002][ T1405] usb 6-1: Manufacturer: syz [ 319.777375][ T1405] cdc_wdm 6-1:1.0: skipping garbage [ 319.786457][ T1405] cdc_wdm 6-1:1.0: skipping garbage [ 319.791015][ T1405] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 319.794053][ T1405] cdc_wdm 6-1:1.0: Unknown control protocol [ 319.821123][T12856] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 319.949812][T12858] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 320.073531][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 320.076852][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 320.080232][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 320.084195][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 320.087658][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 320.090644][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 320.093303][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 320.095773][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 320.098378][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 320.101176][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 320.103829][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 320.106532][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 320.109131][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 320.111882][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 320.114718][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 320.117636][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 320.120313][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 320.123124][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 320.125824][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 320.128637][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 320.131897][ T1405] usb 6-1: USB disconnect, device number 13 [ 320.135006][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 320.827149][ T39] audit: type=1400 audit(1720854868.733:810): avc: denied { mounton } for pid=12866 comm="syz.3.2706" path="/167/file1/file0" dev="autofs" ino=57960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 320.839401][ T39] audit: type=1400 audit(1720854868.753:811): avc: denied { mounton } for pid=12866 comm="syz.3.2706" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 320.916222][ T39] audit: type=1326 audit(1720854868.823:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.1.2709" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd730175bd9 code=0x0 [ 321.172209][T12874] lo: entered allmulticast mode [ 321.216521][T12874] lo: left allmulticast mode [ 321.426039][ T39] audit: type=1400 audit(1720854869.332:813): avc: denied { ioctl } for pid=12877 comm="syz.2.2712" path="/dev/nullb0" dev="devtmpfs" ino=691 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 321.916492][ T4635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.926005][ T4635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.931600][ T4635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.939552][ T4635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.947230][ T4635] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 321.953440][ T4635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.152563][T12884] chnl_net:caif_netlink_parms(): no params data found [ 322.209482][ T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 322.318115][T12884] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.323816][T12884] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.327950][T12884] bridge_slave_0: entered allmulticast mode [ 322.332306][T12884] bridge_slave_0: entered promiscuous mode [ 322.337523][T12884] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.341006][T12884] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.344165][T12884] bridge_slave_1: entered allmulticast mode [ 322.347626][T12884] bridge_slave_1: entered promiscuous mode [ 322.391522][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 322.395444][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.400478][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 322.404398][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.412941][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 322.416953][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 322.421146][ T8] usb 6-1: Product: syz [ 322.423064][ T8] usb 6-1: Manufacturer: syz [ 322.440175][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 322.442628][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 322.448316][ T8] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 322.456607][ T8] cdc_wdm 6-1:1.0: Unknown control protocol [ 322.460710][T12884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.467701][T12884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.552439][T12884] team0: Port device team_slave_0 added [ 322.558852][T12884] team0: Port device team_slave_1 added [ 322.635399][T12884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.638576][T12884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.644720][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 322.650793][T12884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.658558][ T5235] usb 6-1: USB disconnect, device number 14 [ 322.661759][T12884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.664914][T12884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.685266][T12884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.782627][T12884] hsr_slave_0: entered promiscuous mode [ 322.789214][T12884] hsr_slave_1: entered promiscuous mode [ 322.809569][T12884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.812654][T12884] Cannot create hsr debugfs directory [ 322.840652][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.844741][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.116300][T12884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.221385][T12884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.350455][T12884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.468959][T12884] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.660777][T12884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.668432][T12884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.676720][T12884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.696141][T12884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.784993][T12884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.798845][T12884] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.811196][ T7496] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.814374][ T7496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.831464][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.834695][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.868910][T12884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.877585][T12884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.041659][ T4635] Bluetooth: hci5: command tx timeout [ 324.054373][T12884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.105303][T12884] veth0_vlan: entered promiscuous mode [ 324.114710][T12884] veth1_vlan: entered promiscuous mode [ 324.148343][T12884] veth0_macvtap: entered promiscuous mode [ 324.155646][T12884] veth1_macvtap: entered promiscuous mode [ 324.169987][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.174623][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.178347][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.203565][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.207583][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.212491][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.216609][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.236743][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.254485][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.259258][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.264574][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.268820][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.273175][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.277741][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.282706][T12884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.299856][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.318047][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.332846][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.338895][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.344258][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.348792][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.354124][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.372942][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.377662][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.382394][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.399736][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.404265][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.408360][T12884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.413078][T12884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.418896][T12884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.428745][T12884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.433128][T12884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.436802][T12884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.440461][T12884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.513953][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.517731][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.546254][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.552483][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.819671][ T39] audit: type=1400 audit(1720854872.721:814): avc: denied { listen } for pid=12923 comm="syz.0.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 324.833475][ T39] audit: type=1400 audit(1720854872.741:815): avc: denied { accept } for pid=12923 comm="syz.0.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 325.328834][ T39] audit: type=1400 audit(1720854873.230:816): avc: denied { ioctl } for pid=12927 comm="syz.0.2727" path="/dev/nvram" dev="devtmpfs" ino=633 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 325.830543][T12938] netlink: 'syz.2.2731': attribute type 6 has an invalid length. [ 326.022396][T12940] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2732'. [ 326.135209][ T4635] Bluetooth: hci5: command tx timeout [ 326.807547][T12948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.915617][T12948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.043864][T12948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.121761][T12948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.257448][T12948] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.274003][T12948] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.285144][T12948] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.299717][T12948] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.400152][T12961] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 327.406190][T12961] syzkaller0: entered promiscuous mode [ 327.408597][T12961] syzkaller0: entered allmulticast mode [ 327.444105][ T39] audit: type=1400 audit(1720854875.349:817): avc: denied { ioctl } for pid=12958 comm="syz.0.2740" path="socket:[57094]" dev="sockfs" ino=57094 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 328.053272][ T39] audit: type=1400 audit(1720854875.959:818): avc: denied { bind } for pid=12982 comm="syz.2.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 328.308945][ T39] audit: type=1326 audit(1720854876.209:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.2.2754" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ff8d75bd9 code=0x0 [ 329.654336][ T39] audit: type=1400 audit(1720854877.548:820): avc: denied { setopt } for pid=13026 comm="syz.0.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 330.053085][ T5209] Bluetooth: hci0: command 0x0406 tx timeout [ 330.353757][ T39] audit: type=1400 audit(1720854878.258:821): avc: denied { ioctl } for pid=13056 comm="syz.2.2783" path="socket:[59263]" dev="sockfs" ino=59263 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 330.475080][T13063] syzkaller1: entered promiscuous mode [ 330.477775][T13063] syzkaller1: entered allmulticast mode [ 331.086168][ T5209] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 331.108733][ T5209] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 331.112659][ T5209] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 331.139060][ T5209] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 331.159955][ T5209] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 331.165392][ T5209] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 331.430532][ T1094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.579081][T13086] syz.2.2795 (13086): /proc/13085/oom_adj is deprecated, please use /proc/13085/oom_score_adj instead. [ 331.603533][ T1094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.767153][ T1094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.803193][T13077] chnl_net:caif_netlink_parms(): no params data found [ 331.911497][ T1094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.076443][T13077] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.079993][T13077] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.088434][T13077] bridge_slave_0: entered allmulticast mode [ 332.092842][T13077] bridge_slave_0: entered promiscuous mode [ 332.102173][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.105800][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.109118][T13077] bridge_slave_1: entered allmulticast mode [ 332.113201][T13077] bridge_slave_1: entered promiscuous mode [ 332.235509][ T9916] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 332.299514][T13104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.342057][T13077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.364633][ T4635] Bluetooth: hci5: command tx timeout [ 332.366894][T13077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.419517][ T9916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.424331][ T9916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.428663][ T9916] usb 7-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 332.456364][ T9916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.462628][ T9916] usb 7-1: config 0 descriptor?? [ 332.486281][ T9916] usbhid 7-1:0.0: can't add hid device: -22 [ 332.488430][ T9916] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 332.541499][T13104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.606602][ T1094] bridge_slave_1: left allmulticast mode [ 332.608859][ T1094] bridge_slave_1: left promiscuous mode [ 332.611209][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.619731][ T1094] bridge_slave_0: left allmulticast mode [ 332.622344][ T1094] bridge_slave_0: left promiscuous mode [ 332.625286][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.852294][ T10] usb 7-1: USB disconnect, device number 21 [ 333.234835][ T4635] Bluetooth: hci6: command tx timeout [ 333.332613][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.357816][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.410420][ T1094] bond0 (unregistering): Released all slaves [ 333.440313][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2802'. [ 333.473311][T13077] team0: Port device team_slave_0 added [ 333.482029][T13077] team0: Port device team_slave_1 added [ 333.558605][T13104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.564719][ T4635] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 333.793061][T13104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.806184][T13077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.809031][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.824135][T13077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.864051][T13077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.866715][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.880078][T13077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.938196][ T5209] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.948180][ T5209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.952388][ T5209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.957961][ T5209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.963778][ T5209] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.971684][ T5209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.056898][T13116] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2805'. [ 334.132471][T13077] hsr_slave_0: entered promiscuous mode [ 334.136945][T13077] hsr_slave_1: entered promiscuous mode [ 334.149229][T13077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.152511][T13077] Cannot create hsr debugfs directory [ 334.319343][ T1094] hsr_slave_0: left promiscuous mode [ 334.325468][ T1094] hsr_slave_1: left promiscuous mode [ 334.330932][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.334926][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.339308][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.343357][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.370586][ T39] audit: type=1400 audit(1720854882.276:822): avc: denied { setopt } for pid=13126 comm="syz.2.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 334.414789][ T1094] veth1_macvtap: left promiscuous mode [ 334.419269][ T1094] veth0_macvtap: left promiscuous mode [ 334.424609][ T1094] veth1_vlan: left promiscuous mode [ 334.428499][ T1094] veth0_vlan: left allmulticast mode [ 334.432856][ T1094] veth0_vlan: left promiscuous mode [ 334.679754][T13131] Process accounting resumed [ 334.722122][T13132] usb usb8: usbfs: process 13132 (syz.2.2810) did not claim interface 0 before use [ 335.317543][ T4635] Bluetooth: hci6: command tx timeout [ 335.556019][ T4635] Bluetooth: hci2: command tx timeout [ 336.052523][ T4635] Bluetooth: hci3: command tx timeout [ 336.067626][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 336.224472][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 337.326329][T13104] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.380323][T13104] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.401563][ T4635] Bluetooth: hci6: command tx timeout [ 337.463025][T13104] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.484444][T13104] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.864763][T13141] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2813'. [ 337.932737][T13117] chnl_net:caif_netlink_parms(): no params data found [ 338.118611][ T4635] Bluetooth: hci3: command tx timeout [ 338.228387][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.232521][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.236004][T13117] bridge_slave_0: entered allmulticast mode [ 338.240281][T13117] bridge_slave_0: entered promiscuous mode [ 338.361984][T13117] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.365321][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.369939][T13117] bridge_slave_1: entered allmulticast mode [ 338.374103][T13117] bridge_slave_1: entered promiscuous mode [ 338.463292][ T1094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.544249][T13117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.550924][ T39] audit: type=1400 audit(1720854886.454:823): avc: denied { listen } for pid=13163 comm="syz.0.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.591503][ T1094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.603921][T13117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.713150][T13117] team0: Port device team_slave_0 added [ 338.739130][ T1094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.754260][T13117] team0: Port device team_slave_1 added [ 338.896498][ T1094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.912113][T13117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.914588][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.925827][T13117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.937705][T13117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.940709][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.952946][T13117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.974532][T13077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 338.988914][T13077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.038061][T13077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.079116][T13077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.121456][T13117] hsr_slave_0: entered promiscuous mode [ 339.125871][T13117] hsr_slave_1: entered promiscuous mode [ 339.147861][T13117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.153297][T13117] Cannot create hsr debugfs directory [ 339.395940][ T1094] bridge_slave_1: left allmulticast mode [ 339.398636][ T1094] bridge_slave_1: left promiscuous mode [ 339.400963][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.459781][ T1094] bridge_slave_0: left allmulticast mode [ 339.462199][ T1094] bridge_slave_0: left promiscuous mode [ 339.464748][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.488507][ T4635] Bluetooth: hci6: command tx timeout [ 339.954601][ T39] audit: type=1400 audit(1720854887.843:824): avc: denied { create } for pid=13195 comm="syz.2.2833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 339.968118][ T39] audit: type=1400 audit(1720854887.843:825): avc: denied { read } for pid=13195 comm="syz.2.2833" dev="sockfs" ino=61570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 339.988653][ T39] audit: type=1400 audit(1720854887.843:826): avc: denied { getattr } for pid=13195 comm="syz.2.2833" name="UDPv6" dev="sockfs" ino=61570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 340.008148][ T39] audit: type=1400 audit(1720854887.873:827): avc: denied { create } for pid=13195 comm="syz.2.2833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 340.021297][ T39] audit: type=1400 audit(1720854887.873:828): avc: denied { setopt } for pid=13195 comm="syz.2.2833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 340.033960][ T39] audit: type=1400 audit(1720854887.873:829): avc: denied { write } for pid=13195 comm="syz.2.2833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 340.046216][ T39] audit: type=1400 audit(1720854887.873:830): avc: denied { create } for pid=13195 comm="syz.2.2833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=socket permissive=1 [ 340.054025][ T39] audit: type=1400 audit(1720854887.903:831): avc: denied { create } for pid=13195 comm="syz.2.2833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 340.062377][ T39] audit: type=1400 audit(1720854887.903:832): avc: denied { bind } for pid=13195 comm="syz.2.2833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 340.199168][ T4635] Bluetooth: hci3: command tx timeout [ 340.202923][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.215538][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.233128][ T1094] bond0 (unregistering): Released all slaves [ 340.367666][ T1094] tipc: Left network mode [ 340.413745][T13077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.431712][T13077] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.468244][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.472797][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.490705][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.493636][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.940530][ T1094] hsr_slave_0: left promiscuous mode [ 340.944486][ T1094] hsr_slave_1: left promiscuous mode [ 340.947831][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.953018][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.962431][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.968697][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.033774][ T1094] veth1_macvtap: left promiscuous mode [ 341.036155][ T1094] veth0_macvtap: left promiscuous mode [ 341.039492][ T1094] veth1_vlan: left promiscuous mode [ 341.042518][ T1094] veth0_vlan: left promiscuous mode [ 341.436539][ T5209] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.443859][ T5209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.447589][ T5209] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.476165][ T5209] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.519086][ T5209] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.537643][ T5209] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.289245][ T5209] Bluetooth: hci3: command tx timeout [ 342.640372][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 342.772107][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 343.642382][ T5209] Bluetooth: hci7: command tx timeout [ 344.223350][T13077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.429484][T13117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.438777][T13117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.485159][T13117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.506121][T13077] veth0_vlan: entered promiscuous mode [ 344.523932][T13117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.538858][T13223] chnl_net:caif_netlink_parms(): no params data found [ 344.552281][T13077] veth1_vlan: entered promiscuous mode [ 344.839618][ T1094] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.866270][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.869222][T13223] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.880707][T13223] bridge_slave_0: entered allmulticast mode [ 344.884576][T13223] bridge_slave_0: entered promiscuous mode [ 344.889608][T13223] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.898322][T13223] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.901326][T13223] bridge_slave_1: entered allmulticast mode [ 344.905087][T13223] bridge_slave_1: entered promiscuous mode [ 345.022997][ T1094] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.053890][T13223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.068048][T13223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.136195][T13077] veth0_macvtap: entered promiscuous mode [ 345.145630][T13077] veth1_macvtap: entered promiscuous mode [ 345.205578][T13223] team0: Port device team_slave_0 added [ 345.218787][ T1094] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.258416][T13223] team0: Port device team_slave_1 added [ 345.388245][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.408757][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.431640][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.445381][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.453981][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.464505][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.469862][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.481116][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.492948][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.499631][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.505620][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.513298][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.519970][T13077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.546338][ T1094] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.562175][T13223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.565268][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.586680][T13223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.609611][T13223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.614282][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.627691][T13223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.648780][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.659823][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.673465][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.678866][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.684917][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.689955][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.700409][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.712936][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.718446][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.726509][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.730342][T13077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.730955][ T5209] Bluetooth: hci7: command tx timeout [ 345.735439][T13077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.747016][T13077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.865589][T13117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.891546][T13077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.895021][T13077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.898163][T13077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.909061][T13077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.928327][T13223] hsr_slave_0: entered promiscuous mode [ 345.936763][T13223] hsr_slave_1: entered promiscuous mode [ 345.939546][T13223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.944162][T13223] Cannot create hsr debugfs directory [ 346.010070][T13117] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.143076][ T1094] bridge_slave_1: left allmulticast mode [ 346.145515][ T1094] bridge_slave_1: left promiscuous mode [ 346.148124][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.155238][ T1094] bridge_slave_0: left allmulticast mode [ 346.163533][ T1094] bridge_slave_0: left promiscuous mode [ 346.166570][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.665450][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.673158][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.693354][ T1094] bond0 (unregistering): Released all slaves [ 346.758377][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.761478][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.815178][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.818273][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.927288][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.930845][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.182520][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.185575][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.553989][ T1094] hsr_slave_0: left promiscuous mode [ 347.562196][ T1094] hsr_slave_1: left promiscuous mode [ 347.595518][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.610341][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.616625][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.620913][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.653381][T13259] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 347.673046][ T1094] veth1_macvtap: left promiscuous mode [ 347.677105][ T1094] veth0_macvtap: left promiscuous mode [ 347.680209][ T1094] veth1_vlan: left promiscuous mode [ 347.683236][ T1094] veth0_vlan: left promiscuous mode [ 347.814169][ T5209] Bluetooth: hci7: command tx timeout [ 349.375981][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 349.513149][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 349.888331][ T5209] Bluetooth: hci7: command tx timeout [ 350.756192][T13117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.826034][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 350.826049][ T39] audit: type=1400 audit(1720854898.698:840): avc: denied { execmem } for pid=13267 comm="syz.2.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 350.852110][T13117] veth0_vlan: entered promiscuous mode [ 350.855975][ T39] audit: type=1400 audit(1720854898.708:841): avc: denied { execute } for pid=13267 comm="syz.2.2854" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=3035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 350.862798][T13117] veth1_vlan: entered promiscuous mode [ 351.017653][T13223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.036867][T13223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.064544][T13223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.079420][T13223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.111350][T13117] veth0_macvtap: entered promiscuous mode [ 351.160052][T13117] veth1_macvtap: entered promiscuous mode [ 351.225364][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.229405][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.235701][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.239843][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.243545][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.249889][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.254165][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.262695][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.266646][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.270451][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.274276][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.278419][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.284452][T13117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.292469][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.302693][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.309167][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.315257][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.320280][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.326352][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.334261][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.338646][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.342674][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.347740][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.352244][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.356747][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.362414][T13117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.387552][T13117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.391376][T13117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.396705][T13117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.401971][T13117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.528308][T13223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.548915][T13301] can0: slcan on ptm0. [ 351.591176][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.604950][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.622109][T13223] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.638868][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.642115][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.646792][T13299] can0 (unregistered): slcan off ptm0. [ 351.661460][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.664648][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.694926][T12076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.698192][T12076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.899925][T13223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.916605][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 351.961839][T13223] veth0_vlan: entered promiscuous mode [ 351.979479][T13223] veth1_vlan: entered promiscuous mode [ 352.011960][T13223] veth0_macvtap: entered promiscuous mode [ 352.019099][T13223] veth1_macvtap: entered promiscuous mode [ 352.042706][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.043398][T13322] input: syz0 as /devices/virtual/input/input32 [ 352.048791][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.048811][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.048823][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.048834][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.048846][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.048857][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.048868][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.048881][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.048892][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.048903][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.048934][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.048946][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.048957][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.050686][T13223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.075787][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.102270][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2877'. [ 352.109432][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.130057][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2877'. [ 352.133572][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.157418][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.161860][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.168246][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.173423][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.179719][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.185139][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.190222][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.195132][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.200538][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.206010][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.210968][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.219734][T13223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.228953][T13223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.232594][T13223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.237941][T13223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.242444][T13223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.539277][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.557720][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.655455][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.658621][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.714569][T13347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2885'. [ 352.842604][T13354] input: syz0 as /devices/virtual/input/input33 [ 352.962182][T13353] netfs: Couldn't get user pages (rc=-14) [ 353.177562][T13359] netem: change failed [ 353.472794][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2892'. [ 353.819974][T13377] can0: slcan on ptm0. [ 353.966178][T13376] can0 (unregistered): slcan off ptm0. [ 354.077751][T13383] netem: change failed [ 354.378961][ T39] audit: type=1400 audit(1720854902.276:842): avc: denied { shutdown } for pid=13398 comm="syz.2.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 354.684933][ C3] ================================================================== [ 354.688531][ C3] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2dd6/0x3b30 [ 354.693784][ C3] Read of size 8 at addr ffff88801e0d7c18 by task syz-executor/13117 [ 354.712654][ C3] [ 354.713946][ C3] CPU: 3 PID: 13117 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 354.718510][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 354.722154][ C3] Call Trace: [ 354.723404][ C3] [ 354.725906][ C3] dump_stack_lvl+0x116/0x1f0 [ 354.727662][ C3] print_report+0xc3/0x620 [ 354.729978][ C3] ? __virt_addr_valid+0x5e/0x590 [ 354.732191][ C3] ? __phys_addr+0xc6/0x150 [ 354.734330][ C3] kasan_report+0xd9/0x110 [ 354.736517][ C3] ? __lock_acquire+0x2dd6/0x3b30 [ 354.738599][ C3] ? __lock_acquire+0x2dd6/0x3b30 [ 354.740624][ C3] __lock_acquire+0x2dd6/0x3b30 [ 354.742659][ C3] ? try_to_wake_up+0x5d7/0x13e0 [ 354.744743][ C3] ? __pfx_lock_release+0x10/0x10 [ 354.746986][ C3] ? rcu_is_watching+0x12/0xc0 [ 354.748867][ C3] ? __smp_call_single_queue+0x174/0x1e0 [ 354.750965][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 354.752675][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 354.754621][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 354.757121][ C3] lock_acquire+0x1b1/0x560 [ 354.758855][ C3] ? p9_req_put+0xca/0x250 [ 354.760537][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 354.762281][ C3] ? __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 354.765456][ C3] ? select_task_rq_fair+0x360/0x44b0 [ 354.767786][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 354.770094][ C3] ? .slowpath+0x9/0x18 [ 354.771931][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 354.774035][ C3] ? p9_req_put+0xca/0x250 [ 354.776611][ C3] p9_req_put+0xca/0x250 [ 354.778573][ C3] req_done+0x1e7/0x2f0 [ 354.780266][ C3] ? __pfx_req_done+0x10/0x10 [ 354.782237][ C3] ? __pfx_req_done+0x10/0x10 [ 354.784047][ C3] vring_interrupt+0x31b/0x400 [ 354.786201][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 354.788233][ C3] __handle_irq_event_percpu+0x229/0x7c0 [ 354.790404][ C3] handle_irq_event+0xab/0x1e0 [ 354.792548][ C3] handle_edge_irq+0x263/0xd10 [ 354.795610][ C3] __common_interrupt+0xdf/0x250 [ 354.797591][ C3] common_interrupt+0xab/0xd0 [ 354.799605][ C3] [ 354.800721][ C3] [ 354.801951][ C3] asm_common_interrupt+0x26/0x40 [ 354.803935][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 354.807014][ C3] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 d4 f3 75 7e 65 8b 05 d5 f3 75 7e a9 00 01 [ 354.815456][ C3] RSP: 0018:ffffc90003e5f700 EFLAGS: 00000202 [ 354.817842][ C3] RAX: 0000000000000000 RBX: ffffc90003e5f788 RCX: ffffffff813cdcf2 [ 354.820939][ C3] RDX: ffff88802bc3a440 RSI: 0000000000000000 RDI: 0000000000000001 [ 354.823869][ C3] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 354.826406][ C3] R10: 0000000000000002 R11: 0000000000000001 R12: ffffffff907f5870 [ 354.828954][ C3] R13: ffffffff907f5875 R14: 0000000000000002 R15: ffffc90003e5f7bd [ 354.831341][ C3] ? unwind_next_frame+0x5f2/0x23a0 [ 354.833156][ C3] unwind_next_frame+0x600/0x23a0 [ 354.836060][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 354.838056][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 354.840085][ C3] arch_stack_walk+0x100/0x170 [ 354.842331][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 354.844776][ C3] ? tomoyo_encode2+0x100/0x3e0 [ 354.846621][ C3] stack_trace_save+0x95/0xd0 [ 354.848496][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 354.850522][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 354.852657][ C3] ? tomoyo_realpath_from_path+0xb9/0x720 [ 354.854846][ C3] kasan_save_stack+0x33/0x60 [ 354.856466][ C3] ? kasan_save_stack+0x33/0x60 [ 354.858451][ C3] ? kasan_save_track+0x14/0x30 [ 354.860274][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 354.862876][ C3] kasan_save_track+0x14/0x30 [ 354.864759][ C3] __kasan_kmalloc+0xaa/0xb0 [ 354.866561][ C3] __kmalloc_noprof+0x1ec/0x410 [ 354.868445][ C3] ? d_absolute_path+0x137/0x1b0 [ 354.870422][ C3] tomoyo_encode2+0x100/0x3e0 [ 354.872269][ C3] tomoyo_encode+0x29/0x50 [ 354.874098][ C3] tomoyo_realpath_from_path+0x19d/0x720 [ 354.876324][ C3] tomoyo_path_number_perm+0x245/0x590 [ 354.878491][ C3] ? tomoyo_path_number_perm+0x232/0x590 [ 354.880561][ C3] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 354.883014][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 354.885081][ C3] ? putname+0x12e/0x170 [ 354.886979][ C3] ? __x64_sys_openat+0x175/0x210 [ 354.889213][ C3] security_file_ioctl+0x75/0xc0 [ 354.891165][ C3] __x64_sys_ioctl+0xbb/0x220 [ 354.892861][ C3] do_syscall_64+0xcd/0x250 [ 354.894521][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.896985][ C3] RIP: 0033:0x7f51b25757db [ 354.898829][ C3] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 354.906259][ C3] RSP: 002b:00007ffdde50fb80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.910354][ C3] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f51b25757db [ 354.913049][ C3] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 354.917055][ C3] RBP: 00007ffdde50fc2c R08: 0000000000000000 R09: 00007ffdde50f927 [ 354.921665][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdde50fca0 [ 354.925680][ C3] R13: 0000000000000bb8 R14: 00000000000568a7 R15: 0000000000056888 [ 354.929225][ C3] [ 354.930437][ C3] [ 354.931642][ C3] Allocated by task 13421: [ 354.933055][ C3] kasan_save_stack+0x33/0x60 [ 354.934781][ C3] kasan_save_track+0x14/0x30 [ 354.936446][ C3] __kasan_kmalloc+0xaa/0xb0 [ 354.938363][ C3] p9_client_create+0xcf/0x1210 [ 354.940395][ C3] v9fs_session_init+0x1f8/0x1a80 [ 354.942384][ C3] v9fs_mount+0xc6/0xaa0 [ 354.944077][ C3] legacy_get_tree+0x109/0x220 [ 354.945993][ C3] vfs_get_tree+0x8f/0x380 [ 354.947748][ C3] path_mount+0x14e6/0x1f20 [ 354.949600][ C3] __x64_sys_mount+0x297/0x320 [ 354.951459][ C3] do_syscall_64+0xcd/0x250 [ 354.953086][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.955295][ C3] [ 354.956024][ C3] Freed by task 13421: [ 354.957420][ C3] kasan_save_stack+0x33/0x60 [ 354.959049][ C3] kasan_save_track+0x14/0x30 [ 354.960751][ C3] kasan_save_free_info+0x3b/0x60 [ 354.962675][ C3] poison_slab_object+0xf7/0x160 [ 354.964594][ C3] __kasan_slab_free+0x32/0x50 [ 354.966579][ C3] kfree+0x12a/0x3b0 [ 354.968095][ C3] p9_client_create+0xaaa/0x1210 [ 354.970027][ C3] v9fs_session_init+0x1f8/0x1a80 [ 354.971884][ C3] v9fs_mount+0xc6/0xaa0 [ 354.973856][ C3] legacy_get_tree+0x109/0x220 [ 354.976066][ C3] vfs_get_tree+0x8f/0x380 [ 354.977946][ C3] path_mount+0x14e6/0x1f20 [ 354.979627][ C3] __x64_sys_mount+0x297/0x320 [ 354.981337][ C3] do_syscall_64+0xcd/0x250 [ 354.983064][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.985147][ C3] [ 354.986339][ C3] The buggy address belongs to the object at ffff88801e0d7c00 [ 354.986339][ C3] which belongs to the cache kmalloc-512 of size 512 [ 354.991141][ C3] The buggy address is located 24 bytes inside of [ 354.991141][ C3] freed 512-byte region [ffff88801e0d7c00, ffff88801e0d7e00) [ 354.995711][ C3] [ 354.996488][ C3] The buggy address belongs to the physical page: [ 354.998877][ C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e0d4 [ 355.002090][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 355.005127][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 355.007613][ C3] page_type: 0xffffefff(slab) [ 355.009123][ C3] raw: 00fff00000000040 ffff888015442c80 ffffea00015d7e00 dead000000000002 [ 355.011867][ C3] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 355.014650][ C3] head: 00fff00000000040 ffff888015442c80 ffffea00015d7e00 dead000000000002 [ 355.017855][ C3] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 355.021214][ C3] head: 00fff00000000002 ffffea0000783501 ffffffffffffffff 0000000000000000 [ 355.024482][ C3] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 355.027768][ C3] page dumped because: kasan: bad access detected [ 355.030222][ C3] page_owner tracks the page as allocated [ 355.032389][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11, tgid 11 (kworker/u32:0), ts 60339341807, free_ts 60337410312 [ 355.040738][ C3] post_alloc_hook+0x2d1/0x350 [ 355.042699][ C3] get_page_from_freelist+0x1353/0x2e50 [ 355.044909][ C3] __alloc_pages_noprof+0x22b/0x2460 [ 355.046955][ C3] alloc_slab_page+0x56/0x110 [ 355.048908][ C3] new_slab+0x84/0x260 [ 355.052246][ C3] ___slab_alloc+0xdac/0x1870 [ 355.053866][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 355.055676][ C3] kmalloc_trace_noprof+0x2b4/0x300 [ 355.057449][ C3] __ipv6_dev_mc_inc+0x2b7/0xc50 [ 355.058975][ C3] addrconf_dad_work+0x232/0x1500 [ 355.060433][ C3] process_one_work+0x9c5/0x1b40 [ 355.061880][ C3] worker_thread+0x6c8/0xf30 [ 355.063222][ C3] kthread+0x2c1/0x3a0 [ 355.064414][ C3] ret_from_fork+0x45/0x80 [ 355.066202][ C3] ret_from_fork_asm+0x1a/0x30 [ 355.068098][ C3] page last free pid 5196 tgid 5196 stack trace: [ 355.070575][ C3] free_unref_page+0x64a/0xe40 [ 355.072334][ C3] rcu_core+0x828/0x16b0 [ 355.073801][ C3] handle_softirqs+0x216/0x8f0 [ 355.075389][ C3] irq_exit_rcu+0xbb/0x120 [ 355.076778][ C3] sysvec_apic_timer_interrupt+0x95/0xb0 [ 355.078990][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.081075][ C3] [ 355.082207][ C3] Memory state around the buggy address: [ 355.084172][ C3] ffff88801e0d7b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 355.087127][ C3] ffff88801e0d7b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 355.090591][ C3] >ffff88801e0d7c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.093475][ C3] ^ [ 355.095220][ C3] ffff88801e0d7c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.098286][ C3] ffff88801e0d7d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.101124][ C3] ================================================================== [ 355.104018][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 355.106420][ C3] CPU: 3 PID: 13117 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 355.111523][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.115928][ C3] Call Trace: [ 355.117333][ C3] [ 355.118447][ C3] dump_stack_lvl+0x3d/0x1f0 [ 355.120505][ C3] panic+0x6f5/0x7a0 [ 355.122050][ C3] ? __pfx_panic+0x10/0x10 [ 355.123788][ C3] ? rcu_is_watching+0x12/0xc0 [ 355.125733][ C3] ? __pfx_lock_release+0x10/0x10 [ 355.127696][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 355.129795][ C3] check_panic_on_warn+0xab/0xb0 [ 355.131998][ C3] end_report+0x117/0x180 [ 355.133696][ C3] kasan_report+0xe9/0x110 [ 355.135438][ C3] ? __lock_acquire+0x2dd6/0x3b30 [ 355.137297][ C3] ? __lock_acquire+0x2dd6/0x3b30 [ 355.139212][ C3] __lock_acquire+0x2dd6/0x3b30 [ 355.141126][ C3] ? try_to_wake_up+0x5d7/0x13e0 [ 355.143505][ C3] ? __pfx_lock_release+0x10/0x10 [ 355.145511][ C3] ? rcu_is_watching+0x12/0xc0 [ 355.147377][ C3] ? __smp_call_single_queue+0x174/0x1e0 [ 355.149630][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 355.151663][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 355.153687][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 355.155993][ C3] lock_acquire+0x1b1/0x560 [ 355.157854][ C3] ? p9_req_put+0xca/0x250 [ 355.159795][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 355.161921][ C3] ? __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 355.165346][ C3] ? select_task_rq_fair+0x360/0x44b0 [ 355.167478][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 355.170013][ C3] ? .slowpath+0x9/0x18 [ 355.171908][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 355.174088][ C3] ? p9_req_put+0xca/0x250 [ 355.175890][ C3] p9_req_put+0xca/0x250 [ 355.177576][ C3] req_done+0x1e7/0x2f0 [ 355.179229][ C3] ? __pfx_req_done+0x10/0x10 [ 355.181170][ C3] ? __pfx_req_done+0x10/0x10 [ 355.183049][ C3] vring_interrupt+0x31b/0x400 [ 355.184961][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 355.187023][ C3] __handle_irq_event_percpu+0x229/0x7c0 [ 355.189285][ C3] handle_irq_event+0xab/0x1e0 [ 355.191286][ C3] handle_edge_irq+0x263/0xd10 [ 355.193218][ C3] __common_interrupt+0xdf/0x250 [ 355.195154][ C3] common_interrupt+0xab/0xd0 [ 355.197160][ C3] [ 355.198459][ C3] [ 355.199670][ C3] asm_common_interrupt+0x26/0x40 [ 355.201652][ C3] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 355.204534][ C3] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 d4 f3 75 7e 65 8b 05 d5 f3 75 7e a9 00 01 [ 355.212802][ C3] RSP: 0018:ffffc90003e5f700 EFLAGS: 00000202 [ 355.214830][ C3] RAX: 0000000000000000 RBX: ffffc90003e5f788 RCX: ffffffff813cdcf2 [ 355.218232][ C3] RDX: ffff88802bc3a440 RSI: 0000000000000000 RDI: 0000000000000001 [ 355.221962][ C3] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 355.225029][ C3] R10: 0000000000000002 R11: 0000000000000001 R12: ffffffff907f5870 [ 355.228103][ C3] R13: ffffffff907f5875 R14: 0000000000000002 R15: ffffc90003e5f7bd [ 355.231176][ C3] ? unwind_next_frame+0x5f2/0x23a0 [ 355.233209][ C3] unwind_next_frame+0x600/0x23a0 [ 355.235170][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 355.236878][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 355.239167][ C3] arch_stack_walk+0x100/0x170 [ 355.241027][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 355.243290][ C3] ? tomoyo_encode2+0x100/0x3e0 [ 355.245361][ C3] stack_trace_save+0x95/0xd0 [ 355.247190][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 355.249291][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 355.251307][ C3] ? tomoyo_realpath_from_path+0xb9/0x720 [ 355.254006][ C3] kasan_save_stack+0x33/0x60 [ 355.255919][ C3] ? kasan_save_stack+0x33/0x60 [ 355.257837][ C3] ? kasan_save_track+0x14/0x30 [ 355.259729][ C3] ? __kasan_kmalloc+0xaa/0xb0 [ 355.261612][ C3] kasan_save_track+0x14/0x30 [ 355.263495][ C3] __kasan_kmalloc+0xaa/0xb0 [ 355.265272][ C3] __kmalloc_noprof+0x1ec/0x410 [ 355.267155][ C3] ? d_absolute_path+0x137/0x1b0 [ 355.269074][ C3] tomoyo_encode2+0x100/0x3e0 [ 355.270830][ C3] tomoyo_encode+0x29/0x50 [ 355.272328][ C3] tomoyo_realpath_from_path+0x19d/0x720 [ 355.274251][ C3] tomoyo_path_number_perm+0x245/0x590 [ 355.276424][ C3] ? tomoyo_path_number_perm+0x232/0x590 [ 355.278645][ C3] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 355.280987][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 355.283256][ C3] ? putname+0x12e/0x170 [ 355.284905][ C3] ? __x64_sys_openat+0x175/0x210 [ 355.286723][ C3] security_file_ioctl+0x75/0xc0 [ 355.288542][ C3] __x64_sys_ioctl+0xbb/0x220 [ 355.291494][ C3] do_syscall_64+0xcd/0x250 [ 355.293251][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.295595][ C3] RIP: 0033:0x7f51b25757db [ 355.297325][ C3] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 355.305250][ C3] RSP: 002b:00007ffdde50fb80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.308579][ C3] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f51b25757db [ 355.312817][ C3] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 355.316322][ C3] RBP: 00007ffdde50fc2c R08: 0000000000000000 R09: 00007ffdde50f927 [ 355.320123][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdde50fca0 [ 355.323319][ C3] R13: 0000000000000bb8 R14: 00000000000568a7 R15: 0000000000056888 [ 355.326621][ C3] [ 355.329502][ C3] Kernel Offset: disabled [ 355.331202][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:15:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88806b344900 RCX=ffffffff8181acfb RDX=ffff888017e92440 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc900000e7900 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed100d668921 R13=0000000000000001 R14=ffff88806b344908 R15=ffff88806b03fd80 RIP=ffffffff818de020 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff88806b000000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558fa27808 CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdde50fbe0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000d82127f0f4 RBX=ffff88806b1283c0 RCX=00000000000006e0 RDX=00000000000000d8 RSI=ffff88806b1283c0 RDI=0000000000123780 RBP=0000000000123780 RSP=ffffc900008b0ec0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000001 R12=0000000000000000 R13=0000000000000019 R14=0000000000000000 R15=000000528f7167d0 RIP=ffffffff813a4e15 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe888a7e6c0 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055abfcee58e8 CR3=000000004f4f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99d55e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99d55e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99d55e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99d55e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99d55e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99d55e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000008557bb12b ff30137147105e72 762735b57bcc8e9e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99d623d100 00007f99d56d4440 00007f99d56d0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99d56d4498 00007f99d56d4490 00007f99d56d4488 00007f99d56d4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=000000000000067b RCX=ffffffff816ae80e RDX=fffffbfff284d872 RSI=0000000000000008 RDI=ffffffff9426c388 RBP=ffffc90003397738 RSP=ffffc900033975f0 R8 =0000000000000000 R9 =fffffbfff284d871 R10=ffffffff9426c38f R11=0000000000000001 R12=ffff88805a6f4880 R13=0000000000000004 R14=0000000000000002 R15=1ffff92000672ec6 RIP=ffffffff816ae816 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f99d63566c0 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002046a030 CR3=000000003f34a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0b3 ffffffff8100a0cf ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0cf ffffffff8100a0b3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0b3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff8de4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff8de4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff8de432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff8de4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff8de43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff8de44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff8ed4488 00007f9ff8ed4480 00007f9ff8ed4478 00007f9ff8ed4450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff9a3d100 00007f9ff8ed4440 00007f9f00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ff8ed4498 00007f9ff8ed4490 00007f9ff8ed4488 00007f9ff8ed4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fda1c5 RDI=ffffffff94dde1e0 RBP=ffffffff94dde1a0 RSP=ffffc90000908590 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=502033203a555043 R12=0000000000000000 R13=0000000000000039 R14=ffffffff84fda160 R15=0000000000000000 RIP=ffffffff84fda1ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558fa27500 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558fa425c8 CR3=000000005d0d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdde50fbe0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f51b25e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000