Warning: Permanently added '[localhost]:5956' (ECDSA) to the list of known hosts. [ 53.948722][ T40] audit: type=1400 audit(1653798391.016:75): avc: denied { execute } for pid=3598 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 53.948799][ T40] audit: type=1400 audit(1653798391.016:76): avc: denied { execute_no_trans } for pid=3598 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/05/29 04:26:31 fuzzer started 2022/05/29 04:26:31 dialing manager at localhost:38823 [ 55.085938][ T40] audit: type=1400 audit(1653798392.156:77): avc: denied { mounton } for pid=3651 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.088990][ T40] audit: type=1400 audit(1653798392.156:78): avc: denied { mount } for pid=3651 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.097663][ T3651] cgroup: Unknown subsys name 'net' [ 55.103412][ T40] audit: type=1400 audit(1653798392.166:79): avc: denied { unmount } for pid=3651 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.302043][ T3651] cgroup: Unknown subsys name 'rlimit' [ 55.446510][ T40] audit: type=1400 audit(1653798392.516:80): avc: denied { mounton } for pid=3651 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2022/05/29 04:26:32 syscalls: 3733 2022/05/29 04:26:32 code coverage: enabled 2022/05/29 04:26:32 comparison tracing: enabled 2022/05/29 04:26:32 extra coverage: enabled 2022/05/29 04:26:32 delay kcov mmap: enabled 2022/05/29 04:26:32 setuid sandbox: enabled 2022/05/29 04:26:32 namespace sandbox: enabled 2022/05/29 04:26:32 Android sandbox: enabled 2022/05/29 04:26:32 fault injection: enabled 2022/05/29 04:26:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/05/29 04:26:32 net packet injection: enabled 2022/05/29 04:26:32 net device setup: enabled 2022/05/29 04:26:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/05/29 04:26:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/05/29 04:26:32 USB emulation: enabled 2022/05/29 04:26:32 hci packet injection: enabled 2022/05/29 04:26:32 wifi device emulation: enabled 2022/05/29 04:26:32 802.15.4 emulation: enabled 2022/05/29 04:26:32 fetching corpus: 0, signal 0/2000 (executing program) [ 55.447795][ T40] audit: type=1400 audit(1653798392.516:81): avc: denied { mount } for pid=3651 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.486198][ T40] audit: type=1400 audit(1653798392.526:82): avc: denied { setattr } for pid=3651 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2022/05/29 04:26:32 fetching corpus: 50, signal 34175/37928 (executing program) 2022/05/29 04:26:33 fetching corpus: 100, signal 57088/62472 (executing program) 2022/05/29 04:26:33 fetching corpus: 150, signal 70118/77151 (executing program) 2022/05/29 04:26:33 fetching corpus: 200, signal 78851/87494 (executing program) 2022/05/29 04:26:33 fetching corpus: 250, signal 87000/97236 (executing program) 2022/05/29 04:26:33 fetching corpus: 300, signal 93772/105559 (executing program) 2022/05/29 04:26:34 fetching corpus: 350, signal 104439/117624 (executing program) 2022/05/29 04:26:34 fetching corpus: 400, signal 112350/126916 (executing program) 2022/05/29 04:26:34 fetching corpus: 450, signal 121126/137016 (executing program) 2022/05/29 04:26:34 fetching corpus: 500, signal 126415/143694 (executing program) 2022/05/29 04:26:34 fetching corpus: 550, signal 131047/149704 (executing program) 2022/05/29 04:26:35 fetching corpus: 600, signal 137644/157553 (executing program) 2022/05/29 04:26:35 fetching corpus: 650, signal 143996/165094 (executing program) 2022/05/29 04:26:35 fetching corpus: 700, signal 147869/170290 (executing program) 2022/05/29 04:26:35 fetching corpus: 750, signal 152583/176257 (executing program) 2022/05/29 04:26:35 fetching corpus: 800, signal 157214/182122 (executing program) 2022/05/29 04:26:35 fetching corpus: 850, signal 160776/186938 (executing program) 2022/05/29 04:26:36 fetching corpus: 900, signal 163798/191195 (executing program) 2022/05/29 04:26:36 fetching corpus: 950, signal 166880/195478 (executing program) 2022/05/29 04:26:36 fetching corpus: 1000, signal 170615/200409 (executing program) 2022/05/29 04:26:36 fetching corpus: 1050, signal 173817/204823 (executing program) 2022/05/29 04:26:36 fetching corpus: 1100, signal 177211/209365 (executing program) 2022/05/29 04:26:37 fetching corpus: 1150, signal 180605/213851 (executing program) 2022/05/29 04:26:37 fetching corpus: 1200, signal 183344/217729 (executing program) 2022/05/29 04:26:37 fetching corpus: 1250, signal 186061/221569 (executing program) 2022/05/29 04:26:37 fetching corpus: 1300, signal 188345/224999 (executing program) 2022/05/29 04:26:37 fetching corpus: 1350, signal 190178/227998 (executing program) 2022/05/29 04:26:38 fetching corpus: 1400, signal 193255/232169 (executing program) 2022/05/29 04:26:38 fetching corpus: 1450, signal 195434/235453 (executing program) 2022/05/29 04:26:38 fetching corpus: 1500, signal 197729/238842 (executing program) 2022/05/29 04:26:38 fetching corpus: 1550, signal 199953/242185 (executing program) 2022/05/29 04:26:38 fetching corpus: 1600, signal 202016/245333 (executing program) 2022/05/29 04:26:39 fetching corpus: 1650, signal 204309/248687 (executing program) 2022/05/29 04:26:39 fetching corpus: 1700, signal 206252/251755 (executing program) 2022/05/29 04:26:39 fetching corpus: 1750, signal 208670/255188 (executing program) 2022/05/29 04:26:39 fetching corpus: 1800, signal 211112/258624 (executing program) 2022/05/29 04:26:39 fetching corpus: 1850, signal 212782/261362 (executing program) 2022/05/29 04:26:40 fetching corpus: 1900, signal 215299/264866 (executing program) 2022/05/29 04:26:40 fetching corpus: 1950, signal 217149/267769 (executing program) 2022/05/29 04:26:40 fetching corpus: 2000, signal 220789/272223 (executing program) 2022/05/29 04:26:40 fetching corpus: 2050, signal 223250/275617 (executing program) 2022/05/29 04:26:40 fetching corpus: 2100, signal 225084/278448 (executing program) 2022/05/29 04:26:41 fetching corpus: 2150, signal 226912/281195 (executing program) 2022/05/29 04:26:41 fetching corpus: 2200, signal 229272/284408 (executing program) 2022/05/29 04:26:41 fetching corpus: 2250, signal 231339/287379 (executing program) 2022/05/29 04:26:41 fetching corpus: 2300, signal 232876/289919 (executing program) 2022/05/29 04:26:41 fetching corpus: 2350, signal 235451/293306 (executing program) 2022/05/29 04:26:41 fetching corpus: 2400, signal 237069/295865 (executing program) 2022/05/29 04:26:42 fetching corpus: 2450, signal 239008/298639 (executing program) 2022/05/29 04:26:42 fetching corpus: 2500, signal 240303/300886 (executing program) 2022/05/29 04:26:42 fetching corpus: 2550, signal 241976/303439 (executing program) 2022/05/29 04:26:42 fetching corpus: 2600, signal 243990/306280 (executing program) 2022/05/29 04:26:42 fetching corpus: 2650, signal 246018/309056 (executing program) 2022/05/29 04:26:43 fetching corpus: 2700, signal 247997/311826 (executing program) 2022/05/29 04:26:43 fetching corpus: 2750, signal 249584/314287 (executing program) 2022/05/29 04:26:43 fetching corpus: 2800, signal 250949/316544 (executing program) 2022/05/29 04:26:43 fetching corpus: 2850, signal 253288/319559 (executing program) 2022/05/29 04:26:43 fetching corpus: 2900, signal 254685/321827 (executing program) 2022/05/29 04:26:44 fetching corpus: 2950, signal 257640/325304 (executing program) 2022/05/29 04:26:44 fetching corpus: 3000, signal 258981/327475 (executing program) 2022/05/29 04:26:44 fetching corpus: 3050, signal 260256/329627 (executing program) 2022/05/29 04:26:44 fetching corpus: 3100, signal 261823/331976 (executing program) 2022/05/29 04:26:44 fetching corpus: 3150, signal 263644/334528 (executing program) 2022/05/29 04:26:45 fetching corpus: 3200, signal 264946/336699 (executing program) 2022/05/29 04:26:45 fetching corpus: 3250, signal 266281/338813 (executing program) 2022/05/29 04:26:45 fetching corpus: 3300, signal 267916/341193 (executing program) 2022/05/29 04:26:45 fetching corpus: 3350, signal 269946/343848 (executing program) 2022/05/29 04:26:46 fetching corpus: 3400, signal 271886/346419 (executing program) 2022/05/29 04:26:46 fetching corpus: 3450, signal 272790/348234 (executing program) 2022/05/29 04:26:46 fetching corpus: 3500, signal 274500/350594 (executing program) 2022/05/29 04:26:46 fetching corpus: 3550, signal 276135/352901 (executing program) 2022/05/29 04:26:46 fetching corpus: 3600, signal 277532/355008 (executing program) 2022/05/29 04:26:47 fetching corpus: 3650, signal 279225/357278 (executing program) 2022/05/29 04:26:47 fetching corpus: 3700, signal 281192/359872 (executing program) 2022/05/29 04:26:47 fetching corpus: 3750, signal 282391/361743 (executing program) 2022/05/29 04:26:47 fetching corpus: 3800, signal 283465/363595 (executing program) 2022/05/29 04:26:47 fetching corpus: 3850, signal 284351/365326 (executing program) 2022/05/29 04:26:48 fetching corpus: 3900, signal 285315/367103 (executing program) 2022/05/29 04:26:48 fetching corpus: 3950, signal 286507/369033 (executing program) 2022/05/29 04:26:48 fetching corpus: 4000, signal 288482/371536 (executing program) 2022/05/29 04:26:48 fetching corpus: 4050, signal 289952/373620 (executing program) 2022/05/29 04:26:48 fetching corpus: 4100, signal 291262/375597 (executing program) 2022/05/29 04:26:49 fetching corpus: 4150, signal 292407/377448 (executing program) 2022/05/29 04:26:49 fetching corpus: 4200, signal 293293/379074 (executing program) 2022/05/29 04:26:49 fetching corpus: 4250, signal 294711/381118 (executing program) 2022/05/29 04:26:49 fetching corpus: 4300, signal 295730/382843 (executing program) 2022/05/29 04:26:49 fetching corpus: 4350, signal 297186/384860 (executing program) 2022/05/29 04:26:50 fetching corpus: 4400, signal 298231/386640 (executing program) 2022/05/29 04:26:50 fetching corpus: 4450, signal 299632/388647 (executing program) 2022/05/29 04:26:50 fetching corpus: 4500, signal 300946/390552 (executing program) 2022/05/29 04:26:50 fetching corpus: 4550, signal 302215/392401 (executing program) 2022/05/29 04:26:50 fetching corpus: 4600, signal 303691/394411 (executing program) 2022/05/29 04:26:51 fetching corpus: 4650, signal 305611/396741 (executing program) 2022/05/29 04:26:51 fetching corpus: 4700, signal 307023/398663 (executing program) 2022/05/29 04:26:51 fetching corpus: 4750, signal 307923/400270 (executing program) 2022/05/29 04:26:51 fetching corpus: 4800, signal 309854/402522 (executing program) 2022/05/29 04:26:52 fetching corpus: 4850, signal 311054/404246 (executing program) 2022/05/29 04:26:52 fetching corpus: 4900, signal 312185/405973 (executing program) 2022/05/29 04:26:52 fetching corpus: 4950, signal 312801/407280 (executing program) 2022/05/29 04:26:52 fetching corpus: 5000, signal 313891/408948 (executing program) 2022/05/29 04:26:52 fetching corpus: 5050, signal 315237/410745 (executing program) 2022/05/29 04:26:53 fetching corpus: 5100, signal 316030/412234 (executing program) 2022/05/29 04:26:53 fetching corpus: 5150, signal 317192/413964 (executing program) 2022/05/29 04:26:53 fetching corpus: 5200, signal 318243/415567 (executing program) 2022/05/29 04:26:53 fetching corpus: 5250, signal 319245/417168 (executing program) 2022/05/29 04:26:53 fetching corpus: 5300, signal 320517/418930 (executing program) 2022/05/29 04:26:54 fetching corpus: 5350, signal 321504/420491 (executing program) 2022/05/29 04:26:54 fetching corpus: 5400, signal 323005/422386 (executing program) 2022/05/29 04:26:54 fetching corpus: 5450, signal 324131/424030 (executing program) 2022/05/29 04:26:54 fetching corpus: 5500, signal 325213/425617 (executing program) 2022/05/29 04:26:54 fetching corpus: 5550, signal 326237/427161 (executing program) [ 77.994661][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.995001][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 2022/05/29 04:26:55 fetching corpus: 5600, signal 327645/428946 (executing program) 2022/05/29 04:26:55 fetching corpus: 5650, signal 328523/430361 (executing program) 2022/05/29 04:26:55 fetching corpus: 5700, signal 329554/431872 (executing program) 2022/05/29 04:26:56 fetching corpus: 5750, signal 330517/433333 (executing program) 2022/05/29 04:26:56 fetching corpus: 5800, signal 331836/434982 (executing program) 2022/05/29 04:26:56 fetching corpus: 5850, signal 332780/436457 (executing program) 2022/05/29 04:26:56 fetching corpus: 5900, signal 334062/438072 (executing program) 2022/05/29 04:26:56 fetching corpus: 5950, signal 334995/439503 (executing program) 2022/05/29 04:26:57 fetching corpus: 6000, signal 335702/440810 (executing program) 2022/05/29 04:26:57 fetching corpus: 6050, signal 336495/442135 (executing program) 2022/05/29 04:26:57 fetching corpus: 6100, signal 337671/443655 (executing program) 2022/05/29 04:26:57 fetching corpus: 6150, signal 338561/445059 (executing program) 2022/05/29 04:26:57 fetching corpus: 6200, signal 339195/446285 (executing program) 2022/05/29 04:26:58 fetching corpus: 6250, signal 339846/447511 (executing program) 2022/05/29 04:26:58 fetching corpus: 6300, signal 340541/448761 (executing program) 2022/05/29 04:26:58 fetching corpus: 6350, signal 341246/450036 (executing program) 2022/05/29 04:26:58 fetching corpus: 6400, signal 342469/451576 (executing program) 2022/05/29 04:26:58 fetching corpus: 6450, signal 343570/453057 (executing program) 2022/05/29 04:26:58 fetching corpus: 6500, signal 344646/454489 (executing program) 2022/05/29 04:26:58 fetching corpus: 6550, signal 345467/455772 (executing program) 2022/05/29 04:26:59 fetching corpus: 6600, signal 346589/457277 (executing program) 2022/05/29 04:26:59 fetching corpus: 6650, signal 347179/458448 (executing program) 2022/05/29 04:26:59 fetching corpus: 6700, signal 347770/459600 (executing program) 2022/05/29 04:26:59 fetching corpus: 6750, signal 349180/461186 (executing program) 2022/05/29 04:26:59 fetching corpus: 6800, signal 350292/462581 (executing program) 2022/05/29 04:26:59 fetching corpus: 6850, signal 350851/463718 (executing program) 2022/05/29 04:27:00 fetching corpus: 6900, signal 351606/464935 (executing program) 2022/05/29 04:27:00 fetching corpus: 6950, signal 352548/466200 (executing program) 2022/05/29 04:27:00 fetching corpus: 7000, signal 353311/467403 (executing program) 2022/05/29 04:27:00 fetching corpus: 7050, signal 353975/468546 (executing program) 2022/05/29 04:27:00 fetching corpus: 7100, signal 355097/469970 (executing program) 2022/05/29 04:27:01 fetching corpus: 7150, signal 356153/471311 (executing program) 2022/05/29 04:27:01 fetching corpus: 7200, signal 357462/472754 (executing program) 2022/05/29 04:27:01 fetching corpus: 7250, signal 358109/473877 (executing program) 2022/05/29 04:27:01 fetching corpus: 7300, signal 358961/475106 (executing program) 2022/05/29 04:27:01 fetching corpus: 7350, signal 359848/476364 (executing program) 2022/05/29 04:27:01 fetching corpus: 7400, signal 360581/477544 (executing program) 2022/05/29 04:27:02 fetching corpus: 7450, signal 361280/478655 (executing program) 2022/05/29 04:27:02 fetching corpus: 7500, signal 362030/479794 (executing program) 2022/05/29 04:27:02 fetching corpus: 7550, signal 362787/480914 (executing program) 2022/05/29 04:27:02 fetching corpus: 7600, signal 363630/482094 (executing program) 2022/05/29 04:27:02 fetching corpus: 7650, signal 364426/483245 (executing program) 2022/05/29 04:27:03 fetching corpus: 7700, signal 365307/484417 (executing program) 2022/05/29 04:27:03 fetching corpus: 7750, signal 365968/485497 (executing program) 2022/05/29 04:27:03 fetching corpus: 7800, signal 366783/486645 (executing program) 2022/05/29 04:27:03 fetching corpus: 7850, signal 367567/487736 (executing program) 2022/05/29 04:27:03 fetching corpus: 7900, signal 368460/488928 (executing program) 2022/05/29 04:27:03 fetching corpus: 7950, signal 369599/490178 (executing program) 2022/05/29 04:27:04 fetching corpus: 8000, signal 370144/491178 (executing program) 2022/05/29 04:27:04 fetching corpus: 8050, signal 370838/492283 (executing program) 2022/05/29 04:27:04 fetching corpus: 8100, signal 371483/493301 (executing program) 2022/05/29 04:27:04 fetching corpus: 8150, signal 372116/494362 (executing program) 2022/05/29 04:27:04 fetching corpus: 8200, signal 372667/495334 (executing program) 2022/05/29 04:27:04 fetching corpus: 8250, signal 373285/496345 (executing program) 2022/05/29 04:27:05 fetching corpus: 8300, signal 374191/497484 (executing program) 2022/05/29 04:27:05 fetching corpus: 8350, signal 374898/498533 (executing program) [ 88.236846][ T25] cfg80211: failed to load regulatory.db 2022/05/29 04:27:05 fetching corpus: 8400, signal 375561/499576 (executing program) 2022/05/29 04:27:05 fetching corpus: 8450, signal 376349/500652 (executing program) 2022/05/29 04:27:05 fetching corpus: 8500, signal 376985/501679 (executing program) 2022/05/29 04:27:05 fetching corpus: 8550, signal 377943/502810 (executing program) 2022/05/29 04:27:06 fetching corpus: 8600, signal 378917/503961 (executing program) 2022/05/29 04:27:06 fetching corpus: 8650, signal 379546/504909 (executing program) 2022/05/29 04:27:06 fetching corpus: 8700, signal 380063/505830 (executing program) 2022/05/29 04:27:06 fetching corpus: 8750, signal 380546/506784 (executing program) 2022/05/29 04:27:06 fetching corpus: 8800, signal 381206/507761 (executing program) 2022/05/29 04:27:06 fetching corpus: 8850, signal 381798/508703 (executing program) 2022/05/29 04:27:07 fetching corpus: 8900, signal 382717/509773 (executing program) 2022/05/29 04:27:07 fetching corpus: 8950, signal 383120/510655 (executing program) 2022/05/29 04:27:07 fetching corpus: 9000, signal 383615/511621 (executing program) 2022/05/29 04:27:07 fetching corpus: 9050, signal 384271/512553 (executing program) 2022/05/29 04:27:08 fetching corpus: 9100, signal 385000/513523 (executing program) 2022/05/29 04:27:08 fetching corpus: 9150, signal 385701/514467 (executing program) 2022/05/29 04:27:08 fetching corpus: 9200, signal 386353/515425 (executing program) 2022/05/29 04:27:08 fetching corpus: 9250, signal 387052/516405 (executing program) 2022/05/29 04:27:08 fetching corpus: 9300, signal 387662/517304 (executing program) 2022/05/29 04:27:08 fetching corpus: 9350, signal 388204/518200 (executing program) 2022/05/29 04:27:09 fetching corpus: 9400, signal 388876/519075 (executing program) 2022/05/29 04:27:09 fetching corpus: 9450, signal 389503/520044 (executing program) 2022/05/29 04:27:09 fetching corpus: 9500, signal 390119/520972 (executing program) 2022/05/29 04:27:09 fetching corpus: 9550, signal 390808/521918 (executing program) 2022/05/29 04:27:09 fetching corpus: 9600, signal 391434/522831 (executing program) 2022/05/29 04:27:10 fetching corpus: 9650, signal 392214/523784 (executing program) 2022/05/29 04:27:10 fetching corpus: 9700, signal 392923/524679 (executing program) 2022/05/29 04:27:10 fetching corpus: 9750, signal 393548/525575 (executing program) 2022/05/29 04:27:10 fetching corpus: 9800, signal 394224/526506 (executing program) 2022/05/29 04:27:10 fetching corpus: 9850, signal 394636/527317 (executing program) 2022/05/29 04:27:10 fetching corpus: 9900, signal 395277/528224 (executing program) 2022/05/29 04:27:11 fetching corpus: 9950, signal 395960/529133 (executing program) 2022/05/29 04:27:11 fetching corpus: 10000, signal 396732/530026 (executing program) 2022/05/29 04:27:11 fetching corpus: 10050, signal 397241/530846 (executing program) 2022/05/29 04:27:11 fetching corpus: 10100, signal 397896/531696 (executing program) 2022/05/29 04:27:11 fetching corpus: 10150, signal 398568/532591 (executing program) 2022/05/29 04:27:12 fetching corpus: 10200, signal 399115/533444 (executing program) 2022/05/29 04:27:12 fetching corpus: 10250, signal 399822/534300 (executing program) 2022/05/29 04:27:12 fetching corpus: 10300, signal 400497/535171 (executing program) 2022/05/29 04:27:12 fetching corpus: 10350, signal 400964/536023 (executing program) 2022/05/29 04:27:12 fetching corpus: 10400, signal 401454/536812 (executing program) 2022/05/29 04:27:13 fetching corpus: 10450, signal 401915/537624 (executing program) 2022/05/29 04:27:13 fetching corpus: 10500, signal 402554/538468 (executing program) 2022/05/29 04:27:13 fetching corpus: 10550, signal 403185/539317 (executing program) 2022/05/29 04:27:13 fetching corpus: 10600, signal 403675/540088 (executing program) 2022/05/29 04:27:13 fetching corpus: 10650, signal 404396/540915 (executing program) 2022/05/29 04:27:13 fetching corpus: 10700, signal 404987/541698 (executing program) 2022/05/29 04:27:14 fetching corpus: 10750, signal 405741/542488 (executing program) 2022/05/29 04:27:14 fetching corpus: 10800, signal 406554/543346 (executing program) 2022/05/29 04:27:14 fetching corpus: 10850, signal 407031/544080 (executing program) 2022/05/29 04:27:14 fetching corpus: 10900, signal 407687/544881 (executing program) 2022/05/29 04:27:15 fetching corpus: 10950, signal 408221/545655 (executing program) 2022/05/29 04:27:15 fetching corpus: 11000, signal 408818/546420 (executing program) 2022/05/29 04:27:15 fetching corpus: 11050, signal 409338/547197 (executing program) 2022/05/29 04:27:15 fetching corpus: 11100, signal 409861/547977 (executing program) 2022/05/29 04:27:15 fetching corpus: 11150, signal 410451/548737 (executing program) 2022/05/29 04:27:16 fetching corpus: 11200, signal 411080/549492 (executing program) 2022/05/29 04:27:16 fetching corpus: 11250, signal 411585/550185 (executing program) 2022/05/29 04:27:16 fetching corpus: 11300, signal 412105/550932 (executing program) 2022/05/29 04:27:16 fetching corpus: 11350, signal 412629/551680 (executing program) 2022/05/29 04:27:16 fetching corpus: 11400, signal 413197/552387 (executing program) 2022/05/29 04:27:17 fetching corpus: 11450, signal 413516/553071 (executing program) 2022/05/29 04:27:17 fetching corpus: 11500, signal 413971/553800 (executing program) 2022/05/29 04:27:17 fetching corpus: 11550, signal 414461/554518 (executing program) 2022/05/29 04:27:17 fetching corpus: 11600, signal 414931/555243 (executing program) 2022/05/29 04:27:18 fetching corpus: 11650, signal 415377/555956 (executing program) 2022/05/29 04:27:18 fetching corpus: 11700, signal 415797/556615 (executing program) 2022/05/29 04:27:18 fetching corpus: 11750, signal 416233/557286 (executing program) 2022/05/29 04:27:18 fetching corpus: 11800, signal 416675/557940 (executing program) 2022/05/29 04:27:18 fetching corpus: 11850, signal 417148/558632 (executing program) 2022/05/29 04:27:19 fetching corpus: 11900, signal 417665/559307 (executing program) 2022/05/29 04:27:19 fetching corpus: 11950, signal 418096/559954 (executing program) 2022/05/29 04:27:19 fetching corpus: 12000, signal 418802/560688 (executing program) 2022/05/29 04:27:19 fetching corpus: 12050, signal 419450/561395 (executing program) 2022/05/29 04:27:20 fetching corpus: 12100, signal 419912/562056 (executing program) 2022/05/29 04:27:20 fetching corpus: 12150, signal 420332/562741 (executing program) 2022/05/29 04:27:20 fetching corpus: 12200, signal 420781/563419 (executing program) 2022/05/29 04:27:20 fetching corpus: 12250, signal 421274/564082 (executing program) 2022/05/29 04:27:20 fetching corpus: 12300, signal 421757/564806 (executing program) 2022/05/29 04:27:20 fetching corpus: 12350, signal 422460/565497 (executing program) 2022/05/29 04:27:21 fetching corpus: 12400, signal 422989/566170 (executing program) 2022/05/29 04:27:21 fetching corpus: 12450, signal 423670/566892 (executing program) 2022/05/29 04:27:21 fetching corpus: 12500, signal 424321/567520 (executing program) 2022/05/29 04:27:21 fetching corpus: 12550, signal 424899/568156 (executing program) 2022/05/29 04:27:22 fetching corpus: 12600, signal 425517/568843 (executing program) 2022/05/29 04:27:22 fetching corpus: 12650, signal 426498/569550 (executing program) 2022/05/29 04:27:22 fetching corpus: 12700, signal 426967/570183 (executing program) 2022/05/29 04:27:22 fetching corpus: 12750, signal 427397/570815 (executing program) 2022/05/29 04:27:22 fetching corpus: 12800, signal 427869/571445 (executing program) 2022/05/29 04:27:23 fetching corpus: 12850, signal 429504/572249 (executing program) 2022/05/29 04:27:23 fetching corpus: 12900, signal 429986/572870 (executing program) 2022/05/29 04:27:23 fetching corpus: 12950, signal 430567/573481 (executing program) 2022/05/29 04:27:23 fetching corpus: 13000, signal 430987/574086 (executing program) 2022/05/29 04:27:23 fetching corpus: 13050, signal 431487/574692 (executing program) 2022/05/29 04:27:24 fetching corpus: 13100, signal 431976/575317 (executing program) 2022/05/29 04:27:24 fetching corpus: 13150, signal 432505/575901 (executing program) 2022/05/29 04:27:24 fetching corpus: 13200, signal 432890/576511 (executing program) 2022/05/29 04:27:24 fetching corpus: 13250, signal 433609/577101 (executing program) 2022/05/29 04:27:24 fetching corpus: 13300, signal 434042/577659 (executing program) 2022/05/29 04:27:25 fetching corpus: 13350, signal 434458/578258 (executing program) 2022/05/29 04:27:25 fetching corpus: 13400, signal 434872/578818 (executing program) 2022/05/29 04:27:25 fetching corpus: 13450, signal 435361/579431 (executing program) 2022/05/29 04:27:25 fetching corpus: 13500, signal 435742/580009 (executing program) 2022/05/29 04:27:25 fetching corpus: 13550, signal 436210/580573 (executing program) 2022/05/29 04:27:26 fetching corpus: 13600, signal 436792/581142 (executing program) 2022/05/29 04:27:26 fetching corpus: 13650, signal 437257/581749 (executing program) 2022/05/29 04:27:26 fetching corpus: 13700, signal 437915/582312 (executing program) 2022/05/29 04:27:26 fetching corpus: 13750, signal 438522/582885 (executing program) 2022/05/29 04:27:26 fetching corpus: 13800, signal 438897/583402 (executing program) 2022/05/29 04:27:27 fetching corpus: 13850, signal 439328/583948 (executing program) 2022/05/29 04:27:27 fetching corpus: 13900, signal 439672/584485 (executing program) 2022/05/29 04:27:27 fetching corpus: 13950, signal 440052/585033 (executing program) 2022/05/29 04:27:27 fetching corpus: 14000, signal 440370/585551 (executing program) 2022/05/29 04:27:27 fetching corpus: 14050, signal 440772/586080 (executing program) 2022/05/29 04:27:28 fetching corpus: 14100, signal 441328/586573 (executing program) 2022/05/29 04:27:28 fetching corpus: 14150, signal 441910/587103 (executing program) 2022/05/29 04:27:28 fetching corpus: 14199, signal 443444/587652 (executing program) 2022/05/29 04:27:28 fetching corpus: 14249, signal 443914/588160 (executing program) 2022/05/29 04:27:29 fetching corpus: 14299, signal 444339/588659 (executing program) 2022/05/29 04:27:29 fetching corpus: 14349, signal 444805/589197 (executing program) 2022/05/29 04:27:29 fetching corpus: 14399, signal 445189/589699 (executing program) 2022/05/29 04:27:29 fetching corpus: 14449, signal 445548/590239 (executing program) 2022/05/29 04:27:29 fetching corpus: 14499, signal 446023/590759 (executing program) 2022/05/29 04:27:30 fetching corpus: 14549, signal 446577/591260 (executing program) 2022/05/29 04:27:30 fetching corpus: 14598, signal 447048/591716 (executing program) 2022/05/29 04:27:30 fetching corpus: 14648, signal 447632/592237 (executing program) 2022/05/29 04:27:30 fetching corpus: 14698, signal 447982/592711 (executing program) 2022/05/29 04:27:30 fetching corpus: 14748, signal 448474/593252 (executing program) 2022/05/29 04:27:31 fetching corpus: 14798, signal 449491/593690 (executing program) 2022/05/29 04:27:31 fetching corpus: 14848, signal 449887/593690 (executing program) 2022/05/29 04:27:31 fetching corpus: 14898, signal 450228/593690 (executing program) 2022/05/29 04:27:31 fetching corpus: 14948, signal 450621/593690 (executing program) 2022/05/29 04:27:32 fetching corpus: 14998, signal 451049/593690 (executing program) 2022/05/29 04:27:32 fetching corpus: 15048, signal 451498/593690 (executing program) 2022/05/29 04:27:32 fetching corpus: 15098, signal 451846/593690 (executing program) 2022/05/29 04:27:32 fetching corpus: 15148, signal 452261/593694 (executing program) 2022/05/29 04:27:32 fetching corpus: 15198, signal 452924/593694 (executing program) 2022/05/29 04:27:32 fetching corpus: 15248, signal 453273/593694 (executing program) 2022/05/29 04:27:33 fetching corpus: 15298, signal 453631/593694 (executing program) 2022/05/29 04:27:33 fetching corpus: 15348, signal 453966/593694 (executing program) 2022/05/29 04:27:33 fetching corpus: 15398, signal 454342/593694 (executing program) 2022/05/29 04:27:33 fetching corpus: 15448, signal 454751/593694 (executing program) 2022/05/29 04:27:33 fetching corpus: 15498, signal 455477/593695 (executing program) 2022/05/29 04:27:34 fetching corpus: 15548, signal 455790/593697 (executing program) 2022/05/29 04:27:34 fetching corpus: 15598, signal 456146/593697 (executing program) 2022/05/29 04:27:34 fetching corpus: 15648, signal 456666/593697 (executing program) 2022/05/29 04:27:34 fetching corpus: 15698, signal 457234/593697 (executing program) 2022/05/29 04:27:35 fetching corpus: 15748, signal 457616/593698 (executing program) 2022/05/29 04:27:35 fetching corpus: 15798, signal 457983/593698 (executing program) 2022/05/29 04:27:35 fetching corpus: 15848, signal 458493/593700 (executing program) 2022/05/29 04:27:35 fetching corpus: 15898, signal 459047/593700 (executing program) 2022/05/29 04:27:35 fetching corpus: 15948, signal 459461/593700 (executing program) 2022/05/29 04:27:35 fetching corpus: 15998, signal 459752/593700 (executing program) 2022/05/29 04:27:36 fetching corpus: 16048, signal 460079/593700 (executing program) 2022/05/29 04:27:36 fetching corpus: 16098, signal 460452/593700 (executing program) 2022/05/29 04:27:36 fetching corpus: 16148, signal 460814/593700 (executing program) 2022/05/29 04:27:36 fetching corpus: 16198, signal 461160/593700 (executing program) 2022/05/29 04:27:36 fetching corpus: 16248, signal 461533/593700 (executing program) 2022/05/29 04:27:36 fetching corpus: 16298, signal 461996/593700 (executing program) 2022/05/29 04:27:37 fetching corpus: 16348, signal 462507/593700 (executing program) 2022/05/29 04:27:37 fetching corpus: 16398, signal 462791/593700 (executing program) 2022/05/29 04:27:37 fetching corpus: 16448, signal 463231/593700 (executing program) 2022/05/29 04:27:37 fetching corpus: 16498, signal 463606/593700 (executing program) 2022/05/29 04:27:37 fetching corpus: 16548, signal 464007/593700 (executing program) 2022/05/29 04:27:38 fetching corpus: 16598, signal 464585/593700 (executing program) 2022/05/29 04:27:38 fetching corpus: 16648, signal 464937/593700 (executing program) 2022/05/29 04:27:38 fetching corpus: 16698, signal 465443/593700 (executing program) 2022/05/29 04:27:38 fetching corpus: 16748, signal 465654/593700 (executing program) 2022/05/29 04:27:38 fetching corpus: 16798, signal 465905/593700 (executing program) 2022/05/29 04:27:39 fetching corpus: 16848, signal 466471/593703 (executing program) 2022/05/29 04:27:39 fetching corpus: 16898, signal 466934/593703 (executing program) 2022/05/29 04:27:39 fetching corpus: 16948, signal 467234/593703 (executing program) 2022/05/29 04:27:39 fetching corpus: 16998, signal 467813/593703 (executing program) 2022/05/29 04:27:39 fetching corpus: 17048, signal 468691/593703 (executing program) 2022/05/29 04:27:40 fetching corpus: 17098, signal 469155/593703 (executing program) 2022/05/29 04:27:40 fetching corpus: 17148, signal 469487/593703 (executing program) 2022/05/29 04:27:40 fetching corpus: 17198, signal 469818/593703 (executing program) 2022/05/29 04:27:40 fetching corpus: 17248, signal 470225/593703 (executing program) 2022/05/29 04:27:40 fetching corpus: 17298, signal 470563/593705 (executing program) 2022/05/29 04:27:41 fetching corpus: 17348, signal 470862/593705 (executing program) 2022/05/29 04:27:41 fetching corpus: 17398, signal 471391/593705 (executing program) 2022/05/29 04:27:41 fetching corpus: 17448, signal 471835/593705 (executing program) 2022/05/29 04:27:41 fetching corpus: 17498, signal 472128/593705 (executing program) 2022/05/29 04:27:41 fetching corpus: 17548, signal 472477/593705 (executing program) 2022/05/29 04:27:42 fetching corpus: 17598, signal 472836/593705 (executing program) 2022/05/29 04:27:42 fetching corpus: 17648, signal 473217/593705 (executing program) 2022/05/29 04:27:42 fetching corpus: 17698, signal 473490/593705 (executing program) 2022/05/29 04:27:42 fetching corpus: 17748, signal 473905/593725 (executing program) 2022/05/29 04:27:42 fetching corpus: 17798, signal 474257/593725 (executing program) 2022/05/29 04:27:42 fetching corpus: 17848, signal 474612/593725 (executing program) 2022/05/29 04:27:43 fetching corpus: 17898, signal 474965/593733 (executing program) 2022/05/29 04:27:43 fetching corpus: 17948, signal 475232/593733 (executing program) 2022/05/29 04:27:43 fetching corpus: 17998, signal 475598/593733 (executing program) 2022/05/29 04:27:43 fetching corpus: 18048, signal 475802/593733 (executing program) 2022/05/29 04:27:43 fetching corpus: 18098, signal 476270/593733 (executing program) 2022/05/29 04:27:44 fetching corpus: 18148, signal 476741/593733 (executing program) 2022/05/29 04:27:44 fetching corpus: 18198, signal 477435/593733 (executing program) 2022/05/29 04:27:44 fetching corpus: 18248, signal 477765/593733 (executing program) 2022/05/29 04:27:44 fetching corpus: 18298, signal 478144/593738 (executing program) 2022/05/29 04:27:44 fetching corpus: 18348, signal 478562/593738 (executing program) 2022/05/29 04:27:45 fetching corpus: 18398, signal 478990/593738 (executing program) 2022/05/29 04:27:45 fetching corpus: 18448, signal 479317/593738 (executing program) 2022/05/29 04:27:45 fetching corpus: 18498, signal 479724/593738 (executing program) 2022/05/29 04:27:45 fetching corpus: 18548, signal 480026/593738 (executing program) 2022/05/29 04:27:45 fetching corpus: 18598, signal 480482/593738 (executing program) 2022/05/29 04:27:46 fetching corpus: 18648, signal 480901/593738 (executing program) 2022/05/29 04:27:46 fetching corpus: 18698, signal 481512/593738 (executing program) 2022/05/29 04:27:46 fetching corpus: 18748, signal 481879/593738 (executing program) 2022/05/29 04:27:46 fetching corpus: 18798, signal 482217/593738 (executing program) 2022/05/29 04:27:46 fetching corpus: 18848, signal 482571/593738 (executing program) 2022/05/29 04:27:47 fetching corpus: 18898, signal 483000/593738 (executing program) 2022/05/29 04:27:47 fetching corpus: 18948, signal 483296/593738 (executing program) 2022/05/29 04:27:47 fetching corpus: 18998, signal 483802/593738 (executing program) 2022/05/29 04:27:47 fetching corpus: 19048, signal 484136/593738 (executing program) 2022/05/29 04:27:47 fetching corpus: 19098, signal 484397/593738 (executing program) 2022/05/29 04:27:48 fetching corpus: 19148, signal 484776/593738 (executing program) 2022/05/29 04:27:48 fetching corpus: 19198, signal 485123/593738 (executing program) 2022/05/29 04:27:48 fetching corpus: 19248, signal 485423/593739 (executing program) 2022/05/29 04:27:48 fetching corpus: 19298, signal 485730/593739 (executing program) 2022/05/29 04:27:48 fetching corpus: 19348, signal 486000/593739 (executing program) 2022/05/29 04:27:49 fetching corpus: 19398, signal 486421/593745 (executing program) 2022/05/29 04:27:49 fetching corpus: 19448, signal 486669/593745 (executing program) 2022/05/29 04:27:49 fetching corpus: 19498, signal 487014/593745 (executing program) 2022/05/29 04:27:49 fetching corpus: 19548, signal 487306/593745 (executing program) 2022/05/29 04:27:50 fetching corpus: 19598, signal 487717/593745 (executing program) 2022/05/29 04:27:50 fetching corpus: 19648, signal 488082/593745 (executing program) 2022/05/29 04:27:50 fetching corpus: 19698, signal 488403/593745 (executing program) 2022/05/29 04:27:50 fetching corpus: 19748, signal 488743/593748 (executing program) 2022/05/29 04:27:50 fetching corpus: 19798, signal 489006/593748 (executing program) 2022/05/29 04:27:51 fetching corpus: 19848, signal 489241/593748 (executing program) 2022/05/29 04:27:51 fetching corpus: 19898, signal 489489/593748 (executing program) 2022/05/29 04:27:51 fetching corpus: 19948, signal 489726/593748 (executing program) 2022/05/29 04:27:51 fetching corpus: 19998, signal 490204/593748 (executing program) 2022/05/29 04:27:51 fetching corpus: 20048, signal 491984/593748 (executing program) 2022/05/29 04:27:51 fetching corpus: 20098, signal 492287/593748 (executing program) 2022/05/29 04:27:52 fetching corpus: 20148, signal 492567/593748 (executing program) 2022/05/29 04:27:52 fetching corpus: 20198, signal 492873/593748 (executing program) 2022/05/29 04:27:52 fetching corpus: 20248, signal 493182/593748 (executing program) 2022/05/29 04:27:52 fetching corpus: 20298, signal 493464/593748 (executing program) 2022/05/29 04:27:52 fetching corpus: 20348, signal 494000/593748 (executing program) 2022/05/29 04:27:53 fetching corpus: 20398, signal 494386/593748 (executing program) 2022/05/29 04:27:53 fetching corpus: 20448, signal 494649/593748 (executing program) 2022/05/29 04:27:53 fetching corpus: 20498, signal 494886/593748 (executing program) 2022/05/29 04:27:53 fetching corpus: 20548, signal 495112/593748 (executing program) 2022/05/29 04:27:53 fetching corpus: 20598, signal 495532/593748 (executing program) 2022/05/29 04:27:53 fetching corpus: 20648, signal 495752/593748 (executing program) 2022/05/29 04:27:54 fetching corpus: 20698, signal 496080/593748 (executing program) 2022/05/29 04:27:54 fetching corpus: 20748, signal 496428/593748 (executing program) 2022/05/29 04:27:54 fetching corpus: 20798, signal 496791/593748 (executing program) 2022/05/29 04:27:54 fetching corpus: 20848, signal 497049/593748 (executing program) 2022/05/29 04:27:54 fetching corpus: 20898, signal 497378/593748 (executing program) 2022/05/29 04:27:55 fetching corpus: 20948, signal 497687/593748 (executing program) 2022/05/29 04:27:55 fetching corpus: 20998, signal 498058/593748 (executing program) 2022/05/29 04:27:55 fetching corpus: 21048, signal 498557/593748 (executing program) 2022/05/29 04:27:55 fetching corpus: 21098, signal 498865/593748 (executing program) 2022/05/29 04:27:55 fetching corpus: 21148, signal 499142/593748 (executing program) 2022/05/29 04:27:55 fetching corpus: 21198, signal 499413/593748 (executing program) 2022/05/29 04:27:56 fetching corpus: 21248, signal 499674/593748 (executing program) 2022/05/29 04:27:56 fetching corpus: 21298, signal 499910/593748 (executing program) 2022/05/29 04:27:56 fetching corpus: 21348, signal 500164/593748 (executing program) [ 139.416597][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.416673][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 2022/05/29 04:27:56 fetching corpus: 21398, signal 500493/593748 (executing program) 2022/05/29 04:27:56 fetching corpus: 21448, signal 501105/593748 (executing program) 2022/05/29 04:27:56 fetching corpus: 21498, signal 501341/593748 (executing program) 2022/05/29 04:27:56 fetching corpus: 21548, signal 501566/593748 (executing program) 2022/05/29 04:27:57 fetching corpus: 21598, signal 501903/593748 (executing program) 2022/05/29 04:27:57 fetching corpus: 21648, signal 502204/593748 (executing program) 2022/05/29 04:27:57 fetching corpus: 21698, signal 502516/593751 (executing program) 2022/05/29 04:27:57 fetching corpus: 21748, signal 502807/593751 (executing program) 2022/05/29 04:27:57 fetching corpus: 21798, signal 503091/593751 (executing program) 2022/05/29 04:27:58 fetching corpus: 21848, signal 503512/593751 (executing program) 2022/05/29 04:27:58 fetching corpus: 21898, signal 503950/593751 (executing program) 2022/05/29 04:27:58 fetching corpus: 21948, signal 504225/593751 (executing program) 2022/05/29 04:27:58 fetching corpus: 21998, signal 504474/593751 (executing program) 2022/05/29 04:27:58 fetching corpus: 22048, signal 504808/593751 (executing program) 2022/05/29 04:27:58 fetching corpus: 22098, signal 505135/593751 (executing program) 2022/05/29 04:27:59 fetching corpus: 22148, signal 505476/593751 (executing program) 2022/05/29 04:27:59 fetching corpus: 22198, signal 505698/593751 (executing program) 2022/05/29 04:27:59 fetching corpus: 22248, signal 505981/593751 (executing program) 2022/05/29 04:27:59 fetching corpus: 22298, signal 506235/593756 (executing program) 2022/05/29 04:27:59 fetching corpus: 22348, signal 506595/593756 (executing program) 2022/05/29 04:27:59 fetching corpus: 22398, signal 506904/593756 (executing program) 2022/05/29 04:28:00 fetching corpus: 22448, signal 507178/593756 (executing program) 2022/05/29 04:28:00 fetching corpus: 22498, signal 507592/593757 (executing program) 2022/05/29 04:28:00 fetching corpus: 22548, signal 508187/593757 (executing program) 2022/05/29 04:28:00 fetching corpus: 22598, signal 508394/593757 (executing program) 2022/05/29 04:28:00 fetching corpus: 22648, signal 508782/593757 (executing program) 2022/05/29 04:28:00 fetching corpus: 22698, signal 509079/593757 (executing program) 2022/05/29 04:28:01 fetching corpus: 22748, signal 509381/593757 (executing program) 2022/05/29 04:28:01 fetching corpus: 22798, signal 509717/593757 (executing program) 2022/05/29 04:28:01 fetching corpus: 22848, signal 510033/593757 (executing program) 2022/05/29 04:28:01 fetching corpus: 22898, signal 510367/593757 (executing program) 2022/05/29 04:28:01 fetching corpus: 22948, signal 510620/593757 (executing program) 2022/05/29 04:28:02 fetching corpus: 22998, signal 510959/593757 (executing program) 2022/05/29 04:28:02 fetching corpus: 23048, signal 511318/593757 (executing program) 2022/05/29 04:28:02 fetching corpus: 23098, signal 511582/593757 (executing program) 2022/05/29 04:28:02 fetching corpus: 23148, signal 511877/593757 (executing program) 2022/05/29 04:28:02 fetching corpus: 23198, signal 512320/593758 (executing program) 2022/05/29 04:28:02 fetching corpus: 23248, signal 512619/593758 (executing program) 2022/05/29 04:28:03 fetching corpus: 23298, signal 512880/593758 (executing program) 2022/05/29 04:28:03 fetching corpus: 23348, signal 513098/593758 (executing program) 2022/05/29 04:28:03 fetching corpus: 23398, signal 513407/593758 (executing program) 2022/05/29 04:28:03 fetching corpus: 23448, signal 513747/593758 (executing program) 2022/05/29 04:28:03 fetching corpus: 23498, signal 514599/593758 (executing program) 2022/05/29 04:28:03 fetching corpus: 23548, signal 514777/593771 (executing program) 2022/05/29 04:28:04 fetching corpus: 23598, signal 515165/593771 (executing program) 2022/05/29 04:28:04 fetching corpus: 23648, signal 515469/593771 (executing program) 2022/05/29 04:28:04 fetching corpus: 23698, signal 515702/593771 (executing program) 2022/05/29 04:28:04 fetching corpus: 23748, signal 515993/593775 (executing program) 2022/05/29 04:28:04 fetching corpus: 23798, signal 516377/593775 (executing program) 2022/05/29 04:28:05 fetching corpus: 23848, signal 516672/593775 (executing program) 2022/05/29 04:28:05 fetching corpus: 23898, signal 516929/593775 (executing program) 2022/05/29 04:28:05 fetching corpus: 23948, signal 517160/593775 (executing program) 2022/05/29 04:28:05 fetching corpus: 23998, signal 517540/593775 (executing program) 2022/05/29 04:28:05 fetching corpus: 24048, signal 517777/593776 (executing program) 2022/05/29 04:28:05 fetching corpus: 24098, signal 517984/593776 (executing program) 2022/05/29 04:28:06 fetching corpus: 24148, signal 518250/593776 (executing program) 2022/05/29 04:28:06 fetching corpus: 24198, signal 518506/593776 (executing program) 2022/05/29 04:28:06 fetching corpus: 24248, signal 518970/593776 (executing program) 2022/05/29 04:28:06 fetching corpus: 24298, signal 519322/593776 (executing program) 2022/05/29 04:28:06 fetching corpus: 24348, signal 519623/593776 (executing program) 2022/05/29 04:28:07 fetching corpus: 24398, signal 519961/593788 (executing program) 2022/05/29 04:28:07 fetching corpus: 24448, signal 520155/593790 (executing program) 2022/05/29 04:28:07 fetching corpus: 24498, signal 520416/593790 (executing program) 2022/05/29 04:28:07 fetching corpus: 24548, signal 520695/593790 (executing program) 2022/05/29 04:28:07 fetching corpus: 24598, signal 520990/593791 (executing program) 2022/05/29 04:28:07 fetching corpus: 24648, signal 521339/593791 (executing program) 2022/05/29 04:28:07 fetching corpus: 24698, signal 521510/593791 (executing program) 2022/05/29 04:28:08 fetching corpus: 24748, signal 525894/593791 (executing program) 2022/05/29 04:28:08 fetching corpus: 24798, signal 526247/593791 (executing program) 2022/05/29 04:28:08 fetching corpus: 24848, signal 526586/593791 (executing program) 2022/05/29 04:28:08 fetching corpus: 24898, signal 526830/593793 (executing program) 2022/05/29 04:28:08 fetching corpus: 24948, signal 527144/593793 (executing program) 2022/05/29 04:28:08 fetching corpus: 24998, signal 527434/593793 (executing program) 2022/05/29 04:28:09 fetching corpus: 25048, signal 527696/593793 (executing program) 2022/05/29 04:28:09 fetching corpus: 25098, signal 527909/593793 (executing program) 2022/05/29 04:28:09 fetching corpus: 25148, signal 528208/593793 (executing program) 2022/05/29 04:28:09 fetching corpus: 25198, signal 528488/593793 (executing program) 2022/05/29 04:28:09 fetching corpus: 25248, signal 528777/593793 (executing program) 2022/05/29 04:28:09 fetching corpus: 25298, signal 529088/593793 (executing program) 2022/05/29 04:28:10 fetching corpus: 25348, signal 529470/593796 (executing program) 2022/05/29 04:28:10 fetching corpus: 25398, signal 529749/593796 (executing program) 2022/05/29 04:28:10 fetching corpus: 25448, signal 530117/593796 (executing program) 2022/05/29 04:28:10 fetching corpus: 25498, signal 530332/593796 (executing program) 2022/05/29 04:28:10 fetching corpus: 25548, signal 530627/593797 (executing program) 2022/05/29 04:28:11 fetching corpus: 25598, signal 530978/593797 (executing program) 2022/05/29 04:28:11 fetching corpus: 25648, signal 531283/593797 (executing program) 2022/05/29 04:28:11 fetching corpus: 25698, signal 531600/593797 (executing program) 2022/05/29 04:28:11 fetching corpus: 25748, signal 531932/593797 (executing program) 2022/05/29 04:28:11 fetching corpus: 25798, signal 532170/593797 (executing program) 2022/05/29 04:28:12 fetching corpus: 25848, signal 532531/593797 (executing program) 2022/05/29 04:28:12 fetching corpus: 25898, signal 532817/593797 (executing program) 2022/05/29 04:28:12 fetching corpus: 25948, signal 533004/593797 (executing program) 2022/05/29 04:28:12 fetching corpus: 25998, signal 533288/593797 (executing program) 2022/05/29 04:28:12 fetching corpus: 26048, signal 533498/593797 (executing program) 2022/05/29 04:28:12 fetching corpus: 26098, signal 533803/593797 (executing program) 2022/05/29 04:28:13 fetching corpus: 26148, signal 534169/593797 (executing program) 2022/05/29 04:28:13 fetching corpus: 26198, signal 534646/593802 (executing program) 2022/05/29 04:28:13 fetching corpus: 26248, signal 534896/593803 (executing program) 2022/05/29 04:28:13 fetching corpus: 26298, signal 535155/593803 (executing program) 2022/05/29 04:28:13 fetching corpus: 26348, signal 535758/593803 (executing program) 2022/05/29 04:28:14 fetching corpus: 26398, signal 535967/593803 (executing program) 2022/05/29 04:28:14 fetching corpus: 26448, signal 536248/593803 (executing program) 2022/05/29 04:28:14 fetching corpus: 26498, signal 536512/593803 (executing program) 2022/05/29 04:28:14 fetching corpus: 26548, signal 536720/593804 (executing program) 2022/05/29 04:28:14 fetching corpus: 26598, signal 536925/593804 (executing program) 2022/05/29 04:28:14 fetching corpus: 26648, signal 537139/593804 (executing program) 2022/05/29 04:28:15 fetching corpus: 26698, signal 537325/593804 (executing program) 2022/05/29 04:28:15 fetching corpus: 26748, signal 537533/593804 (executing program) 2022/05/29 04:28:15 fetching corpus: 26798, signal 537799/593804 (executing program) 2022/05/29 04:28:15 fetching corpus: 26848, signal 538166/593805 (executing program) 2022/05/29 04:28:15 fetching corpus: 26898, signal 539674/593805 (executing program) 2022/05/29 04:28:16 fetching corpus: 26948, signal 539950/593805 (executing program) 2022/05/29 04:28:16 fetching corpus: 26998, signal 540185/593807 (executing program) 2022/05/29 04:28:16 fetching corpus: 27048, signal 540461/593808 (executing program) 2022/05/29 04:28:16 fetching corpus: 27098, signal 540692/593808 (executing program) 2022/05/29 04:28:16 fetching corpus: 27148, signal 540946/593808 (executing program) 2022/05/29 04:28:16 fetching corpus: 27198, signal 541227/593808 (executing program) 2022/05/29 04:28:16 fetching corpus: 27248, signal 541549/593808 (executing program) 2022/05/29 04:28:17 fetching corpus: 27298, signal 541997/593808 (executing program) 2022/05/29 04:28:17 fetching corpus: 27348, signal 542192/593808 (executing program) 2022/05/29 04:28:17 fetching corpus: 27398, signal 542410/593808 (executing program) 2022/05/29 04:28:17 fetching corpus: 27448, signal 542644/593808 (executing program) 2022/05/29 04:28:17 fetching corpus: 27498, signal 542821/593808 (executing program) 2022/05/29 04:28:17 fetching corpus: 27548, signal 543035/593810 (executing program) 2022/05/29 04:28:18 fetching corpus: 27598, signal 543352/593810 (executing program) 2022/05/29 04:28:18 fetching corpus: 27648, signal 543628/593810 (executing program) 2022/05/29 04:28:18 fetching corpus: 27698, signal 543848/593810 (executing program) 2022/05/29 04:28:18 fetching corpus: 27748, signal 544159/593810 (executing program) 2022/05/29 04:28:18 fetching corpus: 27798, signal 544454/593810 (executing program) 2022/05/29 04:28:19 fetching corpus: 27848, signal 544724/593812 (executing program) 2022/05/29 04:28:19 fetching corpus: 27898, signal 545010/593812 (executing program) 2022/05/29 04:28:19 fetching corpus: 27948, signal 545247/593812 (executing program) 2022/05/29 04:28:19 fetching corpus: 27998, signal 545502/593812 (executing program) 2022/05/29 04:28:19 fetching corpus: 28048, signal 545700/593813 (executing program) 2022/05/29 04:28:20 fetching corpus: 28098, signal 546226/593813 (executing program) 2022/05/29 04:28:20 fetching corpus: 28148, signal 546469/593813 (executing program) 2022/05/29 04:28:20 fetching corpus: 28198, signal 546730/593813 (executing program) 2022/05/29 04:28:20 fetching corpus: 28248, signal 546915/593813 (executing program) 2022/05/29 04:28:20 fetching corpus: 28298, signal 547170/593813 (executing program) 2022/05/29 04:28:20 fetching corpus: 28348, signal 547486/593815 (executing program) 2022/05/29 04:28:21 fetching corpus: 28398, signal 547654/593815 (executing program) 2022/05/29 04:28:21 fetching corpus: 28448, signal 547886/593815 (executing program) 2022/05/29 04:28:21 fetching corpus: 28498, signal 548072/593815 (executing program) 2022/05/29 04:28:21 fetching corpus: 28548, signal 548316/593815 (executing program) 2022/05/29 04:28:21 fetching corpus: 28598, signal 548665/593815 (executing program) 2022/05/29 04:28:21 fetching corpus: 28648, signal 548904/593815 (executing program) 2022/05/29 04:28:21 fetching corpus: 28698, signal 549071/593815 (executing program) 2022/05/29 04:28:21 fetching corpus: 28748, signal 549227/593818 (executing program) 2022/05/29 04:28:22 fetching corpus: 28798, signal 549543/593818 (executing program) 2022/05/29 04:28:22 fetching corpus: 28848, signal 549833/593818 (executing program) 2022/05/29 04:28:22 fetching corpus: 28898, signal 550158/593818 (executing program) 2022/05/29 04:28:22 fetching corpus: 28948, signal 550483/593818 (executing program) 2022/05/29 04:28:22 fetching corpus: 28998, signal 550867/593824 (executing program) 2022/05/29 04:28:23 fetching corpus: 29048, signal 551048/593824 (executing program) 2022/05/29 04:28:23 fetching corpus: 29098, signal 551231/593824 (executing program) 2022/05/29 04:28:23 fetching corpus: 29148, signal 551429/593824 (executing program) 2022/05/29 04:28:23 fetching corpus: 29198, signal 551622/593824 (executing program) 2022/05/29 04:28:23 fetching corpus: 29248, signal 551827/593824 (executing program) 2022/05/29 04:28:23 fetching corpus: 29298, signal 551962/593824 (executing program) 2022/05/29 04:28:24 fetching corpus: 29348, signal 552284/593824 (executing program) 2022/05/29 04:28:24 fetching corpus: 29398, signal 552591/593824 (executing program) 2022/05/29 04:28:24 fetching corpus: 29448, signal 552854/593824 (executing program) 2022/05/29 04:28:24 fetching corpus: 29498, signal 553112/593824 (executing program) 2022/05/29 04:28:24 fetching corpus: 29548, signal 553370/593824 (executing program) 2022/05/29 04:28:25 fetching corpus: 29598, signal 553626/593826 (executing program) 2022/05/29 04:28:25 fetching corpus: 29648, signal 553896/593830 (executing program) 2022/05/29 04:28:25 fetching corpus: 29698, signal 554272/593830 (executing program) 2022/05/29 04:28:25 fetching corpus: 29748, signal 554547/593830 (executing program) 2022/05/29 04:28:25 fetching corpus: 29798, signal 554773/593830 (executing program) 2022/05/29 04:28:26 fetching corpus: 29848, signal 554991/593830 (executing program) 2022/05/29 04:28:26 fetching corpus: 29898, signal 555175/593830 (executing program) 2022/05/29 04:28:26 fetching corpus: 29948, signal 555379/593830 (executing program) 2022/05/29 04:28:26 fetching corpus: 29998, signal 555625/593830 (executing program) 2022/05/29 04:28:26 fetching corpus: 30048, signal 555998/593830 (executing program) 2022/05/29 04:28:26 fetching corpus: 30098, signal 556324/593830 (executing program) 2022/05/29 04:28:27 fetching corpus: 30148, signal 556535/593830 (executing program) 2022/05/29 04:28:27 fetching corpus: 30198, signal 557015/593831 (executing program) 2022/05/29 04:28:27 fetching corpus: 30248, signal 557246/593831 (executing program) 2022/05/29 04:28:27 fetching corpus: 30298, signal 557518/593831 (executing program) 2022/05/29 04:28:27 fetching corpus: 30348, signal 557780/593831 (executing program) 2022/05/29 04:28:28 fetching corpus: 30398, signal 557970/593831 (executing program) 2022/05/29 04:28:28 fetching corpus: 30448, signal 558153/593831 (executing program) 2022/05/29 04:28:28 fetching corpus: 30498, signal 558369/593831 (executing program) 2022/05/29 04:28:28 fetching corpus: 30548, signal 558983/593831 (executing program) 2022/05/29 04:28:28 fetching corpus: 30598, signal 559195/593833 (executing program) 2022/05/29 04:28:29 fetching corpus: 30648, signal 559404/593833 (executing program) 2022/05/29 04:28:29 fetching corpus: 30698, signal 559846/593833 (executing program) 2022/05/29 04:28:29 fetching corpus: 30748, signal 560085/593834 (executing program) 2022/05/29 04:28:29 fetching corpus: 30798, signal 560357/593846 (executing program) 2022/05/29 04:28:30 fetching corpus: 30848, signal 560566/593846 (executing program) 2022/05/29 04:28:30 fetching corpus: 30898, signal 560723/593846 (executing program) 2022/05/29 04:28:30 fetching corpus: 30948, signal 560994/593846 (executing program) 2022/05/29 04:28:30 fetching corpus: 30998, signal 561220/593846 (executing program) 2022/05/29 04:28:30 fetching corpus: 31048, signal 561500/593846 (executing program) 2022/05/29 04:28:31 fetching corpus: 31098, signal 561761/593848 (executing program) 2022/05/29 04:28:31 fetching corpus: 31148, signal 562182/593848 (executing program) 2022/05/29 04:28:31 fetching corpus: 31198, signal 562541/593848 (executing program) 2022/05/29 04:28:31 fetching corpus: 31248, signal 562698/593849 (executing program) 2022/05/29 04:28:31 fetching corpus: 31298, signal 562846/593849 (executing program) 2022/05/29 04:28:32 fetching corpus: 31348, signal 563059/593855 (executing program) 2022/05/29 04:28:32 fetching corpus: 31398, signal 563329/593855 (executing program) 2022/05/29 04:28:32 fetching corpus: 31448, signal 563721/593855 (executing program) 2022/05/29 04:28:32 fetching corpus: 31498, signal 563941/593855 (executing program) 2022/05/29 04:28:32 fetching corpus: 31548, signal 564146/593855 (executing program) 2022/05/29 04:28:33 fetching corpus: 31598, signal 565701/593855 (executing program) 2022/05/29 04:28:33 fetching corpus: 31648, signal 565980/593855 (executing program) 2022/05/29 04:28:33 fetching corpus: 31698, signal 566259/593855 (executing program) 2022/05/29 04:28:33 fetching corpus: 31748, signal 566566/593855 (executing program) 2022/05/29 04:28:33 fetching corpus: 31798, signal 566719/593855 (executing program) 2022/05/29 04:28:33 fetching corpus: 31848, signal 567083/593855 (executing program) 2022/05/29 04:28:34 fetching corpus: 31898, signal 567318/593855 (executing program) 2022/05/29 04:28:34 fetching corpus: 31948, signal 567592/593855 (executing program) 2022/05/29 04:28:34 fetching corpus: 31998, signal 567770/593855 (executing program) 2022/05/29 04:28:34 fetching corpus: 32048, signal 567984/593855 (executing program) 2022/05/29 04:28:35 fetching corpus: 32098, signal 568169/593857 (executing program) 2022/05/29 04:28:35 fetching corpus: 32148, signal 568392/593859 (executing program) 2022/05/29 04:28:35 fetching corpus: 32198, signal 568619/593859 (executing program) 2022/05/29 04:28:35 fetching corpus: 32248, signal 568843/593859 (executing program) 2022/05/29 04:28:35 fetching corpus: 32298, signal 569046/593859 (executing program) 2022/05/29 04:28:35 fetching corpus: 32348, signal 569251/593859 (executing program) 2022/05/29 04:28:35 fetching corpus: 32398, signal 569448/593859 (executing program) 2022/05/29 04:28:36 fetching corpus: 32448, signal 569685/593879 (executing program) 2022/05/29 04:28:36 fetching corpus: 32498, signal 569912/593879 (executing program) 2022/05/29 04:28:36 fetching corpus: 32548, signal 570103/593879 (executing program) 2022/05/29 04:28:36 fetching corpus: 32598, signal 570335/593879 (executing program) 2022/05/29 04:28:36 fetching corpus: 32648, signal 570525/593879 (executing program) 2022/05/29 04:28:37 fetching corpus: 32698, signal 570702/593879 (executing program) 2022/05/29 04:28:37 fetching corpus: 32748, signal 570906/593879 (executing program) 2022/05/29 04:28:37 fetching corpus: 32798, signal 572179/593882 (executing program) 2022/05/29 04:28:37 fetching corpus: 32848, signal 572349/593882 (executing program) 2022/05/29 04:28:37 fetching corpus: 32898, signal 572584/593882 (executing program) 2022/05/29 04:28:37 fetching corpus: 32948, signal 572766/593882 (executing program) 2022/05/29 04:28:37 fetching corpus: 32998, signal 573019/593882 (executing program) 2022/05/29 04:28:38 fetching corpus: 33048, signal 573160/593882 (executing program) 2022/05/29 04:28:38 fetching corpus: 33098, signal 573427/593882 (executing program) 2022/05/29 04:28:38 fetching corpus: 33148, signal 573711/593882 (executing program) 2022/05/29 04:28:38 fetching corpus: 33198, signal 573977/593882 (executing program) 2022/05/29 04:28:38 fetching corpus: 33248, signal 574160/593882 (executing program) 2022/05/29 04:28:38 fetching corpus: 33298, signal 574305/593882 (executing program) 2022/05/29 04:28:39 fetching corpus: 33348, signal 574668/593885 (executing program) 2022/05/29 04:28:39 fetching corpus: 33398, signal 574906/593885 (executing program) 2022/05/29 04:28:39 fetching corpus: 33448, signal 575101/593885 (executing program) 2022/05/29 04:28:39 fetching corpus: 33498, signal 575310/593885 (executing program) 2022/05/29 04:28:40 fetching corpus: 33548, signal 575587/593885 (executing program) 2022/05/29 04:28:40 fetching corpus: 33598, signal 575819/593885 (executing program) 2022/05/29 04:28:40 fetching corpus: 33648, signal 576052/593885 (executing program) 2022/05/29 04:28:40 fetching corpus: 33698, signal 576265/593885 (executing program) 2022/05/29 04:28:40 fetching corpus: 33748, signal 576489/593885 (executing program) 2022/05/29 04:28:40 fetching corpus: 33798, signal 576680/593885 (executing program) 2022/05/29 04:28:41 fetching corpus: 33848, signal 577144/593885 (executing program) 2022/05/29 04:28:41 fetching corpus: 33898, signal 577398/593885 (executing program) 2022/05/29 04:28:41 fetching corpus: 33948, signal 577736/593885 (executing program) 2022/05/29 04:28:41 fetching corpus: 33998, signal 578019/593885 (executing program) 2022/05/29 04:28:41 fetching corpus: 34048, signal 578334/593885 (executing program) 2022/05/29 04:28:41 fetching corpus: 34098, signal 578500/593885 (executing program) 2022/05/29 04:28:42 fetching corpus: 34148, signal 578755/593885 (executing program) 2022/05/29 04:28:42 fetching corpus: 34159, signal 578787/593885 (executing program) 2022/05/29 04:28:42 fetching corpus: 34160, signal 578789/593885 (executing program) 2022/05/29 04:28:42 fetching corpus: 34160, signal 578789/593885 (executing program) 2022/05/29 04:28:45 starting 4 fuzzer processes 04:28:45 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) lseek(r0, 0x0, 0x0) 04:28:45 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000240)='./file0\x00') 04:28:45 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 04:28:45 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000740)={&(0x7f0000000040)=@in6={0x18}, 0xc, 0x0}, 0x9) [ 188.647886][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 188.647940][ T40] audit: type=1400 audit(1653798525.716:86): avc: denied { execmem } for pid=3698 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 188.875750][ T40] audit: type=1400 audit(1653798525.946:87): avc: denied { mounton } for pid=3702 comm="syz-executor.1" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 188.877940][ T40] audit: type=1400 audit(1653798525.946:88): avc: denied { mount } for pid=3702 comm="syz-executor.1" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 188.879496][ T40] audit: type=1400 audit(1653798525.946:89): avc: denied { create } for pid=3702 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.880865][ T40] audit: type=1400 audit(1653798525.946:90): avc: denied { read write } for pid=3702 comm="syz-executor.1" name="vhci" dev="devtmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 188.882180][ T40] audit: type=1400 audit(1653798525.956:91): avc: denied { open } for pid=3702 comm="syz-executor.1" path="/dev/vhci" dev="devtmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 189.906932][ T40] audit: type=1400 audit(1653798526.976:92): avc: denied { ioctl } for pid=3702 comm="syz-executor.1" path="socket:[29452]" dev="sockfs" ino=29452 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.910029][ T3706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.912172][ T3706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.912918][ T3706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.913854][ T3706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.914318][ T3706] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.914565][ T3706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.926709][ T40] audit: type=1400 audit(1653798526.996:93): avc: denied { read } for pid=3702 comm="syz-executor.1" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 189.926739][ T40] audit: type=1400 audit(1653798526.996:94): avc: denied { open } for pid=3702 comm="syz-executor.1" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 189.928018][ T40] audit: type=1400 audit(1653798526.996:95): avc: denied { mounton } for pid=3702 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 189.983502][ T3711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.984505][ T3711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.984810][ T3711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.985260][ T3711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.985543][ T3711] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.985682][ T3711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.988507][ T3708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.990362][ T3708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.992070][ T3708] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.993377][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.993687][ T63] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 189.993905][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.075861][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.076579][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.076925][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.077718][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.078095][ T63] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.078247][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.294869][ T3704] chnl_net:caif_netlink_parms(): no params data found [ 190.406550][ T3702] chnl_net:caif_netlink_parms(): no params data found [ 190.579392][ T3705] chnl_net:caif_netlink_parms(): no params data found [ 190.695672][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.695723][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.697039][ T3704] device bridge_slave_0 entered promiscuous mode [ 190.758620][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.758667][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.759527][ T3704] device bridge_slave_1 entered promiscuous mode [ 190.857201][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.857238][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.858124][ T3702] device bridge_slave_0 entered promiscuous mode [ 190.860111][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.860145][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.860993][ T3702] device bridge_slave_1 entered promiscuous mode [ 190.865675][ T3703] chnl_net:caif_netlink_parms(): no params data found [ 190.878563][ T3704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.970808][ T3704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.973374][ T3702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.973535][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.973571][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.974518][ T3705] device bridge_slave_0 entered promiscuous mode [ 191.029213][ T3702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.056258][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.056304][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.057378][ T3705] device bridge_slave_1 entered promiscuous mode [ 191.170480][ T3702] team0: Port device team_slave_0 added [ 191.174373][ T3705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.178724][ T3704] team0: Port device team_slave_0 added [ 191.182754][ T3704] team0: Port device team_slave_1 added [ 191.193558][ T3702] team0: Port device team_slave_1 added [ 191.225359][ T3705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.405920][ T3702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.405961][ T3702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.405977][ T3702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.407539][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.407669][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.408619][ T3703] device bridge_slave_0 entered promiscuous mode [ 191.483645][ T3705] team0: Port device team_slave_0 added [ 191.484406][ T3704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.484416][ T3704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.484432][ T3704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.485879][ T3702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.485893][ T3702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.485917][ T3702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.489086][ T3705] team0: Port device team_slave_1 added [ 191.489578][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.489731][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.490848][ T3703] device bridge_slave_1 entered promiscuous mode [ 191.623750][ T3704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.623765][ T3704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.623804][ T3704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.725242][ T3703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.726943][ T3705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.726978][ T3705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.727013][ T3705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.729998][ T3703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.818516][ T3702] device hsr_slave_0 entered promiscuous mode [ 191.819398][ T3702] device hsr_slave_1 entered promiscuous mode [ 191.822085][ T3705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.822095][ T3705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.822111][ T3705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.906346][ T3704] device hsr_slave_0 entered promiscuous mode [ 191.907582][ T3704] device hsr_slave_1 entered promiscuous mode [ 191.908207][ T3704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.908449][ T3704] Cannot create hsr debugfs directory [ 191.973727][ T6] Bluetooth: hci0: command 0x0409 tx timeout [ 192.004256][ T3703] team0: Port device team_slave_0 added [ 192.032594][ T3703] team0: Port device team_slave_1 added [ 192.051811][ T6] Bluetooth: hci1: command 0x0409 tx timeout [ 192.056114][ T35] Bluetooth: hci2: command 0x0409 tx timeout [ 192.118040][ T3705] device hsr_slave_0 entered promiscuous mode [ 192.118931][ T3705] device hsr_slave_1 entered promiscuous mode [ 192.119568][ T3705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.119785][ T3705] Cannot create hsr debugfs directory [ 192.135392][ T6] Bluetooth: hci3: command 0x0409 tx timeout [ 192.188717][ T3703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.188728][ T3703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.188742][ T3703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.206012][ T3703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.206024][ T3703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.206039][ T3703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.453342][ T3703] device hsr_slave_0 entered promiscuous mode [ 192.454630][ T3703] device hsr_slave_1 entered promiscuous mode [ 192.455269][ T3703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.455286][ T3703] Cannot create hsr debugfs directory [ 192.675164][ T3702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.684904][ T3702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.701186][ T3702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.717140][ T3702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.768154][ T3705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.771860][ T3705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.796389][ T3705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.802106][ T3705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.904428][ T3704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.909250][ T3704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.923314][ T3704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.934111][ T3704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.996670][ T3702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.003104][ T3703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.018442][ T3703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.020836][ T3703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.032548][ T3703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.052202][ T3702] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.086811][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.088424][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.089455][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.090012][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.090709][ T1967] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.090777][ T1967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.092038][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.092622][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.092939][ T1967] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.092975][ T1967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.093244][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.093929][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.094545][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.095257][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.095751][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.096335][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.096845][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.097266][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.098040][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.099036][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.111912][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.122867][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.123348][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.158895][ T3705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.183516][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.183749][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.183883][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.184699][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.198561][ T3705] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.207728][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.208443][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.208863][ T2670] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.208899][ T2670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.219851][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.220449][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.220855][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.221227][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.221440][ T3740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.224881][ T3702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.247268][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.268018][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.283707][ T3704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.288100][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.289422][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.299651][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.317991][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.319430][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.320301][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.320768][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.335498][ T3703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.341090][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.342315][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.342771][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.343302][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.345873][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.353398][ T3704] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.360204][ T3703] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.371382][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.371977][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.372490][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.373013][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.373367][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.373403][ T3737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.373843][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.374579][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.375216][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.375290][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.375854][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.393338][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.394538][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.395592][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.396348][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.396966][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.397021][ T3737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.397688][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.398426][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.398973][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.399028][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.407197][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.426189][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.428012][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.429191][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.429392][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.429627][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.431170][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.437173][ T3705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.455462][ T3703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.455482][ T3703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.463398][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.464731][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.466341][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.466955][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.467623][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.468093][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.468609][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.469930][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.470343][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.470748][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.474615][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.476408][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.476936][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.489408][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.490291][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.499061][ T3704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.500040][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.502006][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.502698][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.525279][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.525410][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.530368][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.530533][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.539425][ T3703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.548120][ T3704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.564742][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.565614][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.614751][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.615653][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.617010][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.617778][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 04:28:51 executing program 1: syz_clone3(&(0x7f0000000340)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 193.629816][ T3702] device veth0_vlan entered promiscuous mode [ 193.638954][ T3702] device veth1_vlan entered promiscuous mode [ 193.669645][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.670500][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 04:28:51 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x8292, 0x0) close(r0) [ 193.671292][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.672207][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.678894][ T3702] device veth0_macvtap entered promiscuous mode [ 193.686988][ T3702] device veth1_macvtap entered promiscuous mode [ 193.701961][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 04:28:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x7}) [ 193.702868][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.703566][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.704304][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.747649][ T3702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.751972][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.753451][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.754428][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 04:28:51 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 193.755240][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.756711][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.757471][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.763197][ T3702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.766362][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.767189][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.767980][ T3705] device veth0_vlan entered promiscuous mode [ 193.777390][ T3702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.777477][ T3702] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.777508][ T3702] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.777540][ T3702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.783864][ T3705] device veth1_vlan entered promiscuous mode [ 193.873254][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.873846][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.874376][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.874889][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.875614][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.876231][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 04:28:51 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 04:28:51 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) 04:28:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 04:28:51 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) [ 193.876662][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.877251][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.889856][ T3705] device veth0_macvtap entered promiscuous mode [ 193.924256][ T3703] device veth0_vlan entered promiscuous mode 04:28:51 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 04:28:51 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, 0x0) 04:28:51 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@l], 0x8) [ 193.932158][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.933025][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.933940][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.936686][ T3705] device veth1_macvtap entered promiscuous mode 04:28:51 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) 04:28:51 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) [ 193.937836][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.938599][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 04:28:51 executing program 1: openat$autofs(0xffffffffffffff9c, 0x0, 0x424001, 0x0) [ 193.939243][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.965051][ T3703] device veth1_vlan entered promiscuous mode [ 193.974221][ T3704] device veth0_vlan entered promiscuous mode 04:28:52 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) 04:28:52 executing program 1: socketpair(0x1e, 0x0, 0x6, &(0x7f0000000080)) [ 194.007943][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 04:28:52 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980), &(0x7f0000000a00)={&(0x7f00000009c0)={[0xfffffffffffffff8]}, 0x8}) 04:28:52 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc0189436, 0x0) [ 194.008647][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.009190][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.018441][ T3730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 04:28:52 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) [ 194.018482][ T3730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.041644][ T3704] device veth1_vlan entered promiscuous mode [ 194.043947][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.044685][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.045291][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 04:28:52 executing program 0: ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) 04:28:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) 04:28:52 executing program 2: r0 = fsopen(&(0x7f00000005c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000600)='*%-\'#/\x00', 0x0, 0xffffffffffffffff) 04:28:52 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x24102, 0x0) [ 194.046024][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 04:28:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{}, {0x3}}) [ 194.055601][ T3705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 04:28:52 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0x4020940d, 0x0) 04:28:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380), 0x8) 04:28:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'vlan0\x00', 0x400}) [ 194.055621][ T3705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.057322][ T3705] batman_adv: batadv0: Interface activated: batadv_slave_0 04:28:52 executing program 0: futex(&(0x7f00000000c0), 0xd, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 04:28:52 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x149003, 0x0) [ 194.062989][ T3743] Bluetooth: hci0: command 0x041b tx timeout [ 194.068599][ T3718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 04:28:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}, 0x45c) [ 194.068616][ T3718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.090998][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.093169][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.094362][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.095352][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 04:28:52 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x109801) 04:28:52 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) fsmount(r0, 0x0, 0x0) [ 194.096248][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 04:28:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$input_event(r0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x5, 0x200) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 04:28:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00'}, 0x45c) [ 194.104691][ T3705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 04:28:52 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$sequencer(r0, 0x0, 0x0) 04:28:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$input_event(r0, &(0x7f0000000040)={{0x0, 0x2710}}, 0x18) [ 194.104705][ T3705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 04:28:52 executing program 3: rt_sigaction(0x8, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000580)) [ 194.106075][ T3705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.110147][ T40] kauditd_printk_skb: 2 callbacks suppressed 04:28:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200), &(0x7f0000000240)=0x18) [ 194.110165][ T40] audit: type=1400 audit(1653798531.176:98): avc: denied { mounton } for pid=3702 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 04:28:52 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 04:28:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) [ 194.112505][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.113232][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.116928][ T40] audit: type=1400 audit(1653798531.186:99): avc: denied { mount } for pid=3702 comm="syz-executor.1" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 194.119170][ T3705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.119195][ T3705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.119214][ T3705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.119233][ T3705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.154468][ T3737] Bluetooth: hci2: command 0x041b tx timeout [ 194.154745][ T3743] Bluetooth: hci1: command 0x041b tx timeout [ 194.155448][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.156262][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.163667][ T3703] device veth0_macvtap entered promiscuous mode [ 194.167071][ T3703] device veth1_macvtap entered promiscuous mode [ 194.171520][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.172124][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.172554][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.196550][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.200412][ T3704] device veth0_macvtap entered promiscuous mode [ 194.204848][ T3704] device veth1_macvtap entered promiscuous mode [ 194.212222][ T3737] Bluetooth: hci3: command 0x041b tx timeout [ 194.218218][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.218233][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.218243][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.218250][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.219571][ T3704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.224460][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.224476][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.224484][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.224492][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.226442][ T3704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.230781][ T3704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.230831][ T3704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.230862][ T3704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.230892][ T3704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.257111][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.257136][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.257144][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.257178][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.257188][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.257200][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.259384][ T3703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.265526][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.266633][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.267862][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.268639][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.269482][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.272911][ T40] audit: type=1400 audit(1653798531.346:100): avc: denied { read write } for pid=3702 comm="syz-executor.1" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.274229][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.274567][ T40] audit: type=1400 audit(1653798531.346:101): avc: denied { open } for pid=3702 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.274984][ T40] audit: type=1400 audit(1653798531.346:102): avc: denied { ioctl } for pid=3702 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.274995][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.275768][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.339058][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.339080][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.339088][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.339101][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.339109][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.339123][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.340793][ T3703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.345850][ T3703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.345876][ T3703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.345895][ T3703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.345914][ T3703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.368916][ T3730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.368933][ T3730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.379529][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.381693][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.382565][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.475092][ T3730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.475113][ T3730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.499901][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.555633][ T3730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.555647][ T3730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.562506][ T175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.593077][ T40] audit: type=1400 audit(1653798531.666:103): avc: denied { read } for pid=3779 comm="syz-executor.1" name="autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 194.593134][ T40] audit: type=1400 audit(1653798531.666:104): avc: denied { open } for pid=3779 comm="syz-executor.1" path="/dev/autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 194.595978][ T3730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.595995][ T3730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.598117][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.600427][ T40] audit: type=1400 audit(1653798531.666:105): avc: denied { ioctl } for pid=3779 comm="syz-executor.1" path="/dev/autofs" dev="devtmpfs" ino=103 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 194.676055][ T3730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.676069][ T3730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.676647][ T3734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.676664][ T3734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.679619][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.680373][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.809157][ T40] audit: type=1400 audit(1653798531.876:106): avc: denied { bpf } for pid=3788 comm="syz-executor.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.809204][ T40] audit: type=1400 audit(1653798531.876:107): avc: denied { map_create } for pid=3788 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.522813][ T3741] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 196.112650][ T3741] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.112679][ T3741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.112696][ T3741] usb 7-1: Product: syz [ 196.112712][ T3741] usb 7-1: Manufacturer: syz [ 196.112726][ T3741] usb 7-1: SerialNumber: syz [ 196.132076][ T175] Bluetooth: hci0: command 0x040f tx timeout [ 196.176252][ T3741] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 196.213025][ T175] Bluetooth: hci1: command 0x040f tx timeout [ 196.213129][ T175] Bluetooth: hci2: command 0x040f tx timeout [ 196.293139][ T3747] Bluetooth: hci3: command 0x040f tx timeout [ 196.861917][ T3741] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 197.070282][ T3740] usb 7-1: USB disconnect, device number 2 04:28:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 04:28:54 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x48) 04:28:54 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 04:28:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000300)={0xd, 0x7, {0x0, 0x4, 0x1, {0x5, 0x1}, {0x3f, 0x4}, @cond=[{0x6, 0x8, 0x8, 0x4df8, 0x0, 0x584}, {0x101, 0x1, 0x6, 0x8, 0x1f, 0x4}]}, {0x54, 0x8, 0x1, {0x1, 0x3}, {0x2744, 0x3ff}, @ramp={0x0, 0x2, {0x7, 0x4, 0x0, 0x9}}}}) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x5, 0x200) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x490400, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x0, 0xd}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x40, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x2f16, 0x400800) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 04:28:54 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x48) 04:28:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) 04:28:54 executing program 2: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x139e4b44c9ea4cec) 04:28:54 executing program 2: syz_io_uring_setup(0x3b3, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x424b, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:28:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) 04:28:54 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) [ 197.891683][ T3741] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 197.892315][ T3741] ath9k_htc: Failed to initialize the device [ 197.892405][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 197.894903][ T3740] usb 7-1: ath9k_htc: USB layer deinitialized [ 198.212032][ T3744] Bluetooth: hci0: command 0x0419 tx timeout [ 198.293876][ T3738] Bluetooth: hci1: command 0x0419 tx timeout [ 198.301759][ T3774] Bluetooth: hci2: command 0x0419 tx timeout [ 198.373233][ T3774] Bluetooth: hci3: command 0x0419 tx timeout [ 198.471740][ T30] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.471772][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.471789][ T30] usb 6-1: Product: syz [ 198.471803][ T30] usb 6-1: Manufacturer: syz [ 198.471816][ T30] usb 6-1: SerialNumber: syz [ 198.515445][ T30] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 199.092076][ T30] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 199.304679][ T3092] usb 6-1: USB disconnect, device number 2 04:28:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xfff}, 0x8) 04:28:56 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0x401c5820, 0x0) 04:28:56 executing program 3: io_uring_setup(0x66e1, &(0x7f00000005c0)={0x0, 0x0, 0x2}) 04:28:56 executing program 2: syz_io_uring_setup(0x3b3, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x424b, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:28:56 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 04:28:56 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0xa8, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x2, 0x1, 0x9f, 0x0, 0xd9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b5c16daf"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x20000000, 0x401, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0xc4af, 0x2}, [@mdlm_detail={0x8, 0x24, 0x13, 0x1, "c9a18738"}, @country_functional={0x10, 0x24, 0x7, 0x0, 0x1, [0x3, 0xffff, 0x8, 0x1, 0x2]}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x1f, 0x5}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x4, [0x496, 0x2, 0x0, 0x4, 0xfff9, 0x3]}, @acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf9, 0x80}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1, 0x20, 0x9, 0x10, 0x3}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x7, [{0x6, &(0x7f00000001c0)=@string={0x6, 0x3, "0e58e3c1"}}, {0x8e, &(0x7f0000000200)=@string={0x8e, 0x3, "ba7b95247a09c44ad80fecebe59ecfc5f49c739ca03ac6c3fb66c5aa96d9bd0e83551f0487a69ee1b88ed1d32dd8301087b5d12dc8e787b60da3555690eaab0854ffbc2c4169115e37eb07c2f6b6ba08e06bca4766b1ace3dc5196785f7fad86c0e9ff34833af43523ac5842dd272285a9ea1fa83982060dd215376710d381fbfd398cbecc33a044d9b461e8"}}, {0x5d, &(0x7f00000002c0)=@string={0x5d, 0x3, "71232d2b387cef8176f4ff636f240ee74dc4fdc8b8290d68a58ae589f99a031ec6b5d2044de644ce3d6004d7d43972762bd4b76614adb3edf3b3a8fdfd5175fce58ef9c2b2926754337b5ddff2d216162a8926e05e4212b835e383"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x424}}, {0xb5, &(0x7f0000000380)=@string={0xb5, 0x3, "985e107faca06fd8a7648dee62dfb2c28ebfcbf584c70bc56cf9f98820bbbd34889e69ea97e47978b37c9970c0d10556564f184ced0a0eca1efe4cc7ec962ea7ee84df52e8d50ac21b6746dcd51de1bd802c23a1f876b6c707bd156d6bd4f64efb63992c3bfc3e7753338853c1a563c35ae6074d95582190dcb7b8d65525689a34281cc83bf1f5bd00b8bbb4625f03248d45280552bac2962c0e150234440c5744f88a45500410f884e24247e331878d63c3c6"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x445}}, {0x9f, &(0x7f0000000480)=@string={0x9f, 0x3, "25a5905a7e51d20eedfce98b54c6d1e48b261071237266c6bfc2a87fd4c385002af06151109832b17b769b332316ceb3b5093380914d5f6abf49e6fcc961f0aef360cc5e01855c1e636a8b9b8dd6f507be479fdea82fd4b189a3e23c7fb3f3e051e5d1eb057418f718c34e071cd1b343ac637dda6b6d9e2e325542c1495671eade112639fa85734f370bdba1fb83ff444562e73255ab4a267baa70e84f"}}]}) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f00000000c0)=0xde) [ 199.859041][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 199.859062][ T40] audit: type=1400 audit(1653798536.926:137): avc: denied { sqpoll } for pid=3884 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 04:28:56 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f0000001200), 0x105880, 0x0) 04:28:56 executing program 3: ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000000)={0x0, @broadcast}) socketpair(0x15, 0x0, 0x0, &(0x7f0000000280)) 04:28:56 executing program 1: syz_io_uring_setup(0x3b3, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:28:57 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000040d) 04:28:57 executing program 3: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x11, &(0x7f0000000000)) [ 199.926397][ T40] audit: type=1400 audit(1653798536.996:138): avc: denied { create } for pid=3896 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.942712][ T40] audit: type=1400 audit(1653798537.006:139): avc: denied { append } for pid=3113 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 04:28:57 executing program 3: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x407, 0x0) 04:28:57 executing program 1: rt_sigqueueinfo(0x0, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x3}) [ 199.942749][ T40] audit: type=1400 audit(1653798537.006:140): avc: denied { open } for pid=3113 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.942770][ T40] audit: type=1400 audit(1653798537.006:141): avc: denied { getattr } for pid=3113 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.132072][ T30] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 200.132195][ T30] ath9k_htc: Failed to initialize the device [ 200.134416][ T3092] usb 6-1: ath9k_htc: USB layer deinitialized [ 200.141723][ T3738] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 200.631799][ T3738] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.631845][ T3738] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.631865][ T3738] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 200.631880][ T3738] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 200.811697][ T3738] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.811728][ T3738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.811748][ T3738] usb 7-1: Product: ⍱⬭簸臯揿⑯쑍죽⦸栍誥觥髹ḃ뗆Ӓ칄怽휄㧔癲퐫暷괔돳ﶨ函ﱵ軥싹銲呧笳틲ᘖ褪䉞렒 [ 200.811838][ T3738] usb 7-1: Manufacturer: 箺⒕ॺ䫄࿘黥엏鳴鱳㪠쏆曻꫅ຽ喃Пꚇ躸폑ူ떇ⷑ뚇ꌍ噕ࢫｔⲼ楁帑숇뛶ࢺ毠䟊녦凜碖罟蚭㓿㪃㗴갣䉘⟝蔢ꠟ船ആᗒ朷판ﮁ㧽뺌㏌䒠듙 [ 200.811866][ T3738] usb 7-1: SerialNumber: Ф [ 200.869695][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.869748][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.141960][ T3738] cdc_ncm 7-1:1.0: bind() failure [ 201.152538][ T3738] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 201.152571][ T3738] cdc_ncm 7-1:1.1: bind() failure [ 201.165587][ T3738] usb 7-1: USB disconnect, device number 3 04:28:58 executing program 2: r0 = epoll_create(0x1) splice(r0, &(0x7f0000000040), r0, 0x0, 0xe5, 0x0) 04:28:58 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f0000001200), 0x105880, 0x0) 04:28:58 executing program 1: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000005e00), 0xffffffffffffffff) 04:28:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x200800) fcntl$getown(r0, 0x9) 04:28:58 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f0000001200), 0x105880, 0x0) 04:28:58 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x230400, 0x0) syz_open_dev$vim2m(&(0x7f0000002840), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 04:28:58 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) 04:28:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}]}, 0x3c}}, 0x0) 04:28:58 executing program 2: io_uring_setup(0x77c5, &(0x7f0000000000)={0x0, 0x1f79, 0x8}) 04:28:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x0) [ 201.645703][ T40] audit: type=1400 audit(1653798538.716:142): avc: denied { read write } for pid=3921 comm="syz-executor.2" name="video0" dev="devtmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 04:28:58 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f0000001200), 0x105880, 0x0) [ 201.645925][ T40] audit: type=1400 audit(1653798538.716:143): avc: denied { open } for pid=3921 comm="syz-executor.2" path="/dev/video0" dev="devtmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 04:28:58 executing program 3: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x6) 04:28:58 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 04:28:58 executing program 0: openat$ttynull(0xffffffffffffff9c, 0x0, 0x105880, 0x0) [ 201.650240][ T40] audit: type=1400 audit(1653798538.716:144): avc: denied { create } for pid=3919 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 04:28:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14}, 0x14}}, 0x0) 04:28:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(r0, 0x0, 0x0, 0x0) 04:28:58 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) 04:28:58 executing program 0: openat$ttynull(0xffffffffffffff9c, 0x0, 0x105880, 0x0) 04:28:58 executing program 2: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 04:28:58 executing program 0: openat$ttynull(0xffffffffffffff9c, 0x0, 0x105880, 0x0) 04:28:58 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 04:28:58 executing program 2: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x8, 0x0) [ 201.787091][ T40] audit: type=1400 audit(1653798538.856:145): avc: denied { read } for pid=3943 comm="syz-executor.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 04:28:58 executing program 1: r0 = getpid() kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 04:28:58 executing program 3: process_vm_readv(0x0, &(0x7f0000001940)=[{&(0x7f00000015c0)=""/97, 0x61}], 0x1, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x2, 0x0) 04:28:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003480)={0x18, 0x2, &(0x7f00000022c0)=@raw=[@cb_func], &(0x7f0000002340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:28:58 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 04:28:58 executing program 3: socket(0x22, 0x0, 0x401) [ 201.787122][ T40] audit: type=1400 audit(1653798538.856:146): avc: denied { open } for pid=3943 comm="syz-executor.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 04:28:58 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) 04:28:58 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 04:28:58 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip6_tables_names\x00') 04:28:58 executing program 2: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x6, &(0x7f0000000000)) 04:28:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14}, 0x14}}, 0x0) 04:28:58 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 04:28:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002d80)={&(0x7f0000002cc0), 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14}, 0x14}}, 0x0) 04:28:59 executing program 3: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x3, 0x0) 04:28:59 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') 04:28:59 executing program 3: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000001080)) 04:28:59 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 04:28:59 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x18a01, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000c80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) 04:28:59 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 04:28:59 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x230400, 0x0) 04:28:59 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, '\x00', @p_u32=0x0}}) 04:28:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) 04:28:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:28:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 04:28:59 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) 04:28:59 executing program 2: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x409, 0x0) 04:28:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 04:28:59 executing program 0: io_uring_setup(0x3d30, &(0x7f0000000040)) io_uring_setup(0x1b5, &(0x7f00000002c0)) 04:28:59 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 04:28:59 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x6d, 0x6a, 0x49, 0x20, 0x47d, 0x5002, 0x15e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdf, 0x9d, 0x1d}}]}}]}}, 0x0) 04:28:59 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) 04:28:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchown(r0, 0xee01, 0x0) 04:28:59 executing program 3: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 04:28:59 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) syz_open_dev$vim2m(&(0x7f0000002840), 0x1, 0x2) 04:28:59 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/dev_mcast\x00') 04:28:59 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, 0x0) 04:28:59 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/uts\x00') [ 202.132693][ T4026] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 202.351566][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 202.611840][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 202.891757][ T25] usb 6-1: New USB device found, idVendor=047d, idProduct=5002, bcdDevice=15.e1 [ 202.891829][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.891851][ T25] usb 6-1: Product: syz [ 202.891866][ T25] usb 6-1: Manufacturer: syz [ 202.891881][ T25] usb 6-1: SerialNumber: syz [ 202.896592][ T25] usb 6-1: config 0 descriptor?? [ 202.935218][ T25] gspca_main: se401-2.14.0 probing 047d:5002 04:29:00 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) 04:29:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000100)) 04:29:00 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r0) 04:29:00 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) fchown(r0, 0xee01, 0xee01) 04:29:00 executing program 2: socket(0x1d, 0xa, 0x4) 04:29:00 executing program 0: syz_open_dev$vim2m(&(0x7f0000001440), 0xffffffffffffa79f, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 04:29:00 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) fchown(r0, 0x0, 0x0) 04:29:00 executing program 0: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x24, &(0x7f0000000000)) 04:29:00 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') exit(0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/247, 0xf7}], 0x1, 0x3ff, 0x0) 04:29:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}}, 0x0) 04:29:00 executing program 0: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x24, &(0x7f0000000000)) 04:29:00 executing program 3: memfd_create(&(0x7f0000000040)='\x00', 0x3) 04:29:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003480)={0x18, 0x1, &(0x7f00000022c0)=@raw=[@call], &(0x7f0000002340)='GPL\x00', 0x0, 0x1000, &(0x7f0000002380)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 203.739578][ T4039] can: request_module (can-proto-4) failed. 04:29:00 executing program 0: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x24, &(0x7f0000000000)) 04:29:00 executing program 3: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x26, &(0x7f0000000000)) 04:29:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) [ 203.976216][ T25] gspca_se401: read req failed req 0x06 error -19 [ 203.985382][ T25] usb 6-1: USB disconnect, device number 3 04:29:01 executing program 0: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x24, &(0x7f0000000000)) 04:29:01 executing program 3: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x402, &(0x7f0000000000)) 04:29:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:01 executing program 0: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x24, &(0x7f0000000000)) 04:29:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000840)={[{@nodots}]}) [ 204.586072][ T4066] Bluetooth: hci5: Frame reassembly failed (-84) 04:29:01 executing program 0: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x24, &(0x7f0000000000)) [ 204.606018][ T4070] FAT-fs (loop3): bogus number of reserved sectors 04:29:01 executing program 0: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x24, &(0x7f0000000000)) [ 204.606052][ T4070] FAT-fs (loop3): Can't find a valid FAT filesystem [ 205.892015][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 205.893869][ T30] Bluetooth: hci4: command tx timeout 04:29:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:03 executing program 0: r0 = epoll_create(0x0) fcntl$F_SET_RW_HINT(r0, 0x24, &(0x7f0000000000)) [ 206.613945][ T3744] Bluetooth: hci5: command 0x1003 tx timeout [ 206.614663][ T3706] Bluetooth: hci5: Opcode 0x1003 failed: -110 04:29:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, 0x0, 0x38) 04:29:03 executing program 0: r0 = epoll_create(0x0) fcntl$F_SET_RW_HINT(r0, 0x24, &(0x7f0000000000)) 04:29:03 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="58c6a472d2f7") 04:29:03 executing program 0: r0 = epoll_create(0x0) fcntl$F_SET_RW_HINT(r0, 0x24, &(0x7f0000000000)) 04:29:03 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="58c6a472d2f7") [ 206.703375][ T4088] Bluetooth: hci5: Frame reassembly failed (-84) [ 207.971812][ T3744] Bluetooth: hci4: command 0x1003 tx timeout [ 207.973820][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 04:29:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:05 executing program 0: epoll_create(0x1) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x24, &(0x7f0000000000)) [ 208.771990][ T3706] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 208.773562][ T3744] Bluetooth: hci5: command tx timeout 04:29:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:05 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="58c6a472d2f7") 04:29:05 executing program 0: epoll_create(0x1) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x24, &(0x7f0000000000)) 04:29:05 executing program 0: epoll_create(0x1) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x24, &(0x7f0000000000)) [ 208.823030][ T4101] Bluetooth: hci5: Frame reassembly failed (-84) 04:29:05 executing program 0: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x24, 0x0) 04:29:05 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="58c6a472d2f7") [ 210.131712][ T35] Bluetooth: hci4: command 0x1003 tx timeout [ 210.132460][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 04:29:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:07 executing program 0: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x24, 0x0) [ 210.852627][ T3706] Bluetooth: hci5: Opcode 0x1003 failed: -110 04:29:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:07 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, 0x0) 04:29:07 executing program 0: r0 = epoll_create(0x1) fcntl$F_SET_RW_HINT(r0, 0x24, 0x0) [ 210.906164][ T227] Bluetooth: hci5: Frame reassembly failed (-84) 04:29:07 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r0, 0x0, 0xfe13) 04:29:08 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 210.907660][ T4124] Bluetooth: hci5: Frame reassembly failed (-84) 04:29:08 executing program 0: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x2000000) [ 212.221817][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 212.222432][ T3092] Bluetooth: hci4: command tx timeout 04:29:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:09 executing program 0: syz_mount_image$f2fs(&(0x7f0000001980), &(0x7f00000019c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) [ 212.931869][ T3706] Bluetooth: hci5: Opcode 0x1003 failed: -110 04:29:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 3: syz_clone(0x44008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x58000000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) 04:29:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000440)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 04:29:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) [ 213.029959][ T40] kauditd_printk_skb: 7 callbacks suppressed 04:29:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) [ 213.029978][ T40] audit: type=1400 audit(1653798550.096:154): avc: denied { bind } for pid=4138 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 04:29:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) [ 213.089979][ T40] audit: type=1400 audit(1653798550.156:155): avc: denied { sys_admin } for pid=4136 comm="syz-executor.3" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 04:29:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 3: syz_clone(0x44008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x58000000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) 04:29:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:10 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 3: syz_clone(0x44008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x58000000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) 04:29:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:10 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:10 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:10 executing program 3: r0 = openat$misdntimer(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) 04:29:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 3: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 3: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 3: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 3: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 3: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 3: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0xfffffffffffffffd) 04:29:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 3: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0xfffffffffffffffd) [ 214.689072][ T227] Bluetooth: hci4: Frame reassembly failed (-84) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) [ 214.689236][ T4317] Bluetooth: hci4: Frame reassembly failed (-84) 04:29:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x4, 0x3, &(0x7f0000001380)=@framed, &(0x7f0000001280)='GPL\x00', 0x5, 0xb7, &(0x7f0000001400)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:29:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) [ 214.831049][ T40] audit: type=1400 audit(1653798551.896:156): avc: denied { prog_run } for pid=4329 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.691568][ T35] Bluetooth: hci4: command 0x1003 tx timeout 04:29:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 04:29:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x4, 0x3, &(0x7f0000001380)=@framed, &(0x7f0000001280)='GPL\x00', 0x5, 0xb7, &(0x7f0000001400)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 216.691777][ T3706] Bluetooth: hci4: Opcode 0x1003 failed: -110 04:29:13 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) dup2(r1, r0) [ 216.749142][ T3711] Bluetooth: hci5: sending frame failed (-49) 04:29:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz0\x00'}, 0x45c) [ 216.750005][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 216.750700][ T4343] Bluetooth: hci5: Frame reassembly failed (-84) [ 216.779924][ T40] audit: type=1400 audit(1653798553.846:157): avc: denied { connect } for pid=4346 comm="syz-executor.3" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 04:29:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1261, 0x0) 04:29:13 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001580)={'syz0\x00'}, 0x45c) [ 216.780804][ T40] audit: type=1400 audit(1653798553.846:158): avc: denied { write } for pid=4346 comm="syz-executor.3" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 04:29:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 04:29:13 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000000)="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", 0x2b0, &(0x7f0000001000), 0x0, &(0x7f00000011c0)="e2b5febbbd5ff3f59010ed04ad5d11f8e692783ab7b612b8aa") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2e) ptrace$peeksig(0x13, r0, 0x0, &(0x7f0000000040)) [ 216.909607][ T4356] Bluetooth: hci5: Frame reassembly failed (-84) [ 218.781909][ T3706] Bluetooth: hci4: Opcode 0x1003 failed: -110 04:29:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 04:29:15 executing program 3: unshare(0x20000400) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) 04:29:15 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001580)={'syz0\x00'}, 0x45c) 04:29:15 executing program 3: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) setxattr$incfs_metadata(&(0x7f00000020c0)='./file0\x00', &(0x7f00000021c0), 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 04:29:15 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001580)={'syz0\x00'}, 0x45c) [ 218.848373][ T3711] Bluetooth: hci4: sending frame failed (-49) [ 218.849720][ T3706] Bluetooth: hci4: Opcode 0x1003 failed: -49 04:29:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) [ 218.857852][ T40] audit: type=1400 audit(1653798555.926:159): avc: denied { read write } for pid=4364 comm="syz-executor.3" name="fuse" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 218.858093][ T40] audit: type=1400 audit(1653798555.926:160): avc: denied { open } for pid=4364 comm="syz-executor.3" path="/dev/fuse" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 218.940574][ T40] audit: type=1400 audit(1653798556.006:161): avc: denied { unmount } for pid=4364 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 218.948545][ T4335] Bluetooth: hci5: command 0x1003 tx timeout 04:29:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 04:29:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 04:29:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) [ 218.948764][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 04:29:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 04:29:16 executing program 3: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) setxattr$incfs_metadata(&(0x7f00000020c0)='./file0\x00', &(0x7f00000021c0), 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 04:29:16 executing program 0: mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) setxattr$incfs_metadata(&(0x7f00000020c0)='./file0\x00', &(0x7f00000021c0), 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 04:29:16 executing program 0: keyctl$dh_compute(0xb, 0x0, 0x0, 0x0, 0x0) 04:29:16 executing program 3: add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000240)='|', 0x1, 0xfffffffffffffffe) [ 221.011435][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 221.012752][ T6] Bluetooth: hci4: command tx timeout [ 221.091971][ T3738] Bluetooth: hci5: command 0x1003 tx timeout 04:29:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 04:29:18 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)='&') syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r0) 04:29:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0x1, &(0x7f0000000500)="a07174e925b86741315dfa3e0cf880a0b91b77bf8c4f42b8aefb20df652229df5121a08665226fb19c7a599f58e82bda772dfc4c3988a85933c72444a3d55fa21d8916b8", &(0x7f0000000580)=@udp=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5451, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x4, 0x1ff, {{0xd, 0x4, 0x3, 0x7, 0x34, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x1f, 0xd2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1, @broadcast, @loopback, @local]}]}}}}}) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000480)={@initdev}, &(0x7f00000004c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000100)=@raw=[@ldst={0x2, 0x0, 0x6, 0x1, 0x1, 0x4, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @generic={0x7, 0x5, 0x4, 0x3f, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x10000, 0xff, &(0x7f0000000180)=""/255, 0x41000, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x2, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r3, r4]}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)="be2acda564539d4437ef6f68d19c6e866757588f82e0178ca505875c49c1c32e6922e16d62b904b498eea1c32155234c22c396ab32571c76772fe6c6c495", &(0x7f0000000080)=@udp=r1}, 0x20) 04:29:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) [ 221.092117][ T3706] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 221.131763][ T40] audit: type=1400 audit(1653798558.206:162): avc: denied { ioctl } for pid=4389 comm="syz-executor.3" path="socket:[34256]" dev="sockfs" ino=34256 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 04:29:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89b0, &(0x7f0000000000)={'vxcan1\x00'}) 04:29:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0x0, "1a3caa2bd9db9eda6b6211048794bc718fafdd"}) 04:29:18 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec1f00001320000012fffffff60000000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2011ffc}], 0x8402, &(0x7f0000011100)) [ 221.186517][ T40] audit: type=1400 audit(1653798558.256:163): avc: denied { setopt } for pid=4389 comm="syz-executor.3" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 04:29:18 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) [ 221.186768][ T40] audit: type=1400 audit(1653798558.256:164): avc: denied { getopt } for pid=4389 comm="syz-executor.3" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.227290][ T4408] loop0: detected capacity change from 0 to 131359 [ 221.260671][ T40] audit: type=1400 audit(1653798558.326:165): avc: denied { node_bind } for pid=4410 comm="syz-executor.3" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 221.296210][ T4408] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 221.296268][ T4408] REISERFS (device loop0): found reiserfs format "3.5" with standard journal [ 221.296609][ T4408] REISERFS (device loop0): using ordered data mode [ 221.296621][ T4408] reiserfs: using flush barriers [ 221.368327][ T4408] REISERFS warning (device loop0): sh-458 journal_init_dev: cannot init journal device unknown-block(0,246): -6 [ 221.368418][ T4408] REISERFS warning (device loop0): sh-462 journal_init: unable to initialize journal device [ 223.171515][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 223.171869][ T3736] ================================================================== [ 223.171880][ T3736] BUG: KASAN: use-after-free in hci_cmd_timeout+0x239/0x250 [ 223.172385][ T3736] Read of size 8 at addr ffff88802072bf58 by task kworker/0:3/3736 [ 223.172402][ T3736] [ 223.172431][ T3736] CPU: 0 PID: 3736 Comm: kworker/0:3 Not tainted 5.18.0-syzkaller-11080-g664a393a2663 #0 [ 223.172455][ T3736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 223.172484][ T3736] Workqueue: events hci_cmd_timeout [ 223.172518][ T3736] Call Trace: [ 223.172637][ T3736] [ 223.172645][ T3736] dump_stack_lvl+0xcd/0x134 [ 223.172941][ T3736] print_address_description.constprop.0.cold+0xeb/0x467 [ 223.173041][ T3736] ? hci_cmd_timeout+0x239/0x250 [ 223.173066][ T3736] kasan_report.cold+0xf4/0x1c6 [ 223.173087][ T3736] ? hci_cmd_timeout+0x239/0x250 [ 223.173112][ T3736] hci_cmd_timeout+0x239/0x250 [ 223.173136][ T3736] process_one_work+0x996/0x1610 [ 223.173367][ T3736] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 223.173390][ T3736] ? rwlock_bug.part.0+0x90/0x90 [ 223.173476][ T3736] ? _raw_spin_lock_irq+0x41/0x50 [ 223.173683][ T3736] worker_thread+0x665/0x1080 [ 223.173704][ T3736] ? __kthread_parkme+0x15f/0x220 [ 223.173727][ T3736] ? process_one_work+0x1610/0x1610 [ 223.173750][ T3736] kthread+0x2e9/0x3a0 [ 223.173769][ T3736] ? kthread_complete_and_exit+0x40/0x40 [ 223.173791][ T3736] ret_from_fork+0x1f/0x30 [ 223.173877][ T3736] [ 223.173884][ T3736] [ 223.173887][ T3736] Allocated by task 3711: [ 223.173956][ T3736] kasan_save_stack+0x1e/0x40 [ 223.174139][ T3736] __kasan_slab_alloc+0x85/0xb0 [ 223.174168][ T3736] kmem_cache_alloc+0x265/0x560 [ 223.174189][ T3736] skb_clone+0x170/0x3c0 [ 223.174345][ T3736] hci_cmd_work+0x191/0x3c0 [ 223.174365][ T3736] process_one_work+0x996/0x1610 [ 223.174382][ T3736] worker_thread+0x665/0x1080 [ 223.174399][ T3736] kthread+0x2e9/0x3a0 [ 223.174416][ T3736] ret_from_fork+0x1f/0x30 [ 223.174437][ T3736] [ 223.174440][ T3736] Freed by task 63: [ 223.174449][ T3736] kasan_save_stack+0x1e/0x40 [ 223.174469][ T3736] kasan_set_track+0x21/0x30 [ 223.174488][ T3736] kasan_set_free_info+0x20/0x30 [ 223.174546][ T3736] ____kasan_slab_free+0x13d/0x180 [ 223.174568][ T3736] kmem_cache_free.part.0+0xa9/0x240 [ 223.174606][ T3736] kfree_skbmem+0xef/0x1b0 [ 223.174630][ T3736] kfree_skb_reason+0x85/0x110 [ 223.174646][ T3736] hci_dev_open_sync+0xb8c/0x2160 [ 223.174705][ T3736] hci_dev_do_open+0x32/0x70 [ 223.174724][ T3736] hci_power_on+0x133/0x630 [ 223.174746][ T3736] process_one_work+0x996/0x1610 [ 223.174766][ T3736] worker_thread+0x665/0x1080 [ 223.174785][ T3736] kthread+0x2e9/0x3a0 [ 223.174801][ T3736] ret_from_fork+0x1f/0x30 [ 223.174821][ T3736] [ 223.174824][ T3736] The buggy address belongs to the object at ffff88802072be80 [ 223.174824][ T3736] which belongs to the cache skbuff_head_cache of size 240 [ 223.174839][ T3736] The buggy address is located 216 bytes inside of [ 223.174839][ T3736] 240-byte region [ffff88802072be80, ffff88802072bf70) [ 223.174857][ T3736] [ 223.174860][ T3736] The buggy address belongs to the physical page: [ 223.174878][ T3736] page:ffffea000081cac0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2072b [ 223.174928][ T3736] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 223.175003][ T3736] raw: 00fff00000000200 ffffea00004fc608 ffffea00005557c8 ffff8880402b3700 [ 223.175041][ T3736] raw: 0000000000000000 ffff88802072b0c0 000000010000000c 0000000000000000 [ 223.175052][ T3736] page dumped because: kasan: bad access detected [ 223.175089][ T3736] page_owner tracks the page as allocated [ 223.175110][ T3736] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 19607104071, free_ts 19198657052 [ 223.175191][ T3736] get_page_from_freelist+0x1290/0x3b70 [ 223.175220][ T3736] __alloc_pages+0x1c7/0x510 [ 223.175236][ T3736] cache_grow_begin+0x75/0x350 [ 223.175253][ T3736] cache_alloc_refill+0x27f/0x380 [ 223.175271][ T3736] kmem_cache_alloc_node+0x503/0x590 [ 223.175292][ T3736] __alloc_skb+0x215/0x340 [ 223.175315][ T3736] alloc_uevent_skb+0x7b/0x210 [ 223.175510][ T3736] kobject_uevent_env+0x1128/0x1660 [ 223.175535][ T3736] net_rx_queue_update_kobjects+0xe9/0x510 [ 223.175594][ T3736] netdev_register_kobject+0x275/0x400 [ 223.175615][ T3736] register_netdevice+0xd9d/0x15b0 [ 223.175659][ T3736] register_netdev+0x2d/0x50 [ 223.175700][ T3736] rose_proto_init+0x317/0x66a [ 223.176042][ T3736] do_one_initcall+0x103/0x650 [ 223.176066][ T3736] kernel_init_freeable+0x6b1/0x73a [ 223.176193][ T3736] kernel_init+0x1a/0x1d0 [ 223.176272][ T3736] page last free stack trace: [ 223.176291][ T3736] free_pcp_prepare+0x549/0xd20 [ 223.176325][ T3736] free_unref_page+0x19/0x6a0 [ 223.176343][ T3736] __vunmap+0x85d/0xd30 [ 223.176363][ T3736] free_work+0x58/0x70 [ 223.176382][ T3736] process_one_work+0x996/0x1610 [ 223.176402][ T3736] worker_thread+0x665/0x1080 [ 223.176419][ T3736] kthread+0x2e9/0x3a0 [ 223.176437][ T3736] ret_from_fork+0x1f/0x30 [ 223.176459][ T3736] [ 223.176474][ T3736] Memory state around the buggy address: [ 223.176483][ T3736] ffff88802072be00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 223.176497][ T3736] ffff88802072be80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.176510][ T3736] >ffff88802072bf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 223.176519][ T3736] ^ [ 223.176528][ T3736] ffff88802072bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.176541][ T3736] ffff88802072c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.176550][ T3736] ================================================================== [ 223.176804][ T3706] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 223.189425][ T3736] Kernel panic - not syncing: panic_on_warn set ... [ 223.189443][ T3736] CPU: 0 PID: 3736 Comm: kworker/0:3 Not tainted 5.18.0-syzkaller-11080-g664a393a2663 #0 [ 223.189468][ T3736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 223.189481][ T3736] Workqueue: events hci_cmd_timeout [ 223.189512][ T3736] Call Trace: [ 223.189519][ T3736] [ 223.189528][ T3736] dump_stack_lvl+0xcd/0x134 [ 223.189551][ T3736] panic+0x2d7/0x636 [ 223.189691][ T3736] ? panic_print_sys_info.part.0+0x10b/0x10b [ 223.189714][ T3736] ? preempt_schedule_common+0x59/0xc0 [ 223.189739][ T3736] ? hci_cmd_timeout+0x239/0x250 [ 223.189761][ T3736] ? preempt_schedule_thunk+0x16/0x18 [ 223.189787][ T3736] ? hci_cmd_timeout+0x239/0x250 [ 223.189808][ T3736] end_report.part.0+0x3f/0x7c [ 223.189829][ T3736] kasan_report.cold+0x93/0x1c6 [ 223.189847][ T3736] ? hci_cmd_timeout+0x239/0x250 [ 223.189870][ T3736] hci_cmd_timeout+0x239/0x250 [ 223.189893][ T3736] process_one_work+0x996/0x1610 [ 223.189915][ T3736] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 223.189938][ T3736] ? rwlock_bug.part.0+0x90/0x90 [ 223.189963][ T3736] ? _raw_spin_lock_irq+0x41/0x50 [ 223.189983][ T3736] worker_thread+0x665/0x1080 [ 223.190004][ T3736] ? __kthread_parkme+0x15f/0x220 [ 223.963116][ T3736] ? process_one_work+0x1610/0x1610 [ 223.970478][ T3736] kthread+0x2e9/0x3a0 [ 223.975163][ T3736] ? kthread_complete_and_exit+0x40/0x40 [ 223.981741][ T3736] ret_from_fork+0x1f/0x30 [ 223.987531][ T3736] [ 223.992134][ T3736] Kernel Offset: disabled [ 223.997298][ T3736] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:29:20 Registers: info registers vcpu 0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff845fd0a1 RDI=ffffffff908d4b80 RBP=ffffffff908d4b40 RSP=ffffc9000317f5a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000066 R14=ffffffff908d4b40 R15=dffffc0000000000 RIP=ffffffff845fd0cb RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc17af3669 CR3=0000000072e53000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff920000e7f60 RCX=0000000000000000 RDX=ffff8880119dc000 RSI=ffffffff816f2275 RDI=0000000000000005 RBP=ffffc9000073fbe8 RSP=ffffc9000073fae0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000008 R12=ffff88802cb3b040 R13=0000000000000002 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff816f2277 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff88802cb00000 000fffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f672875c300 CR3=0000000018989000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000ff000000000000000000000000 XMM02=00ff000000000000000000000000ff00 XMM03=5b5d3533353537312e33323220205b20 XMM04=00000000000000000000000000000000 XMM05=ffffffffffffffffffffffffffffffff XMM06=00000000000000000000000000000000 XMM07=7c4f495f5046475f5f28306330323432 XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000003 RBX=00000000ffffffff RCX=0000000000000001 RDX=0000000000000004 RSI=ffffc900032bfe98 RDI=0000000000000001 RBP=ffffc900032b8000 RSP=ffffc900032bf978 R8 =ffffffff8e4533ee R9 =ffffc900032bfa2c R10=fffff52000657f4a R11=ffffc900032bfec0 R12=ffffc900032bfa2d R13=ffffc900032bf9f8 R14=ffffc900032bfe98 R15=ffffffff8e4533f2 RIP=ffffffff8151077f RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa12e4ec800 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa12e7c6e3c CR3=00000000732b2000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff0000000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=00000000000000000403010201008881 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005647c381a14000005647c38112c0 XMM06=000000000000000b0000000000000000 XMM07=00000000000000000000000000000000 XMM08=74732064676f6c6b006e3a63000a0920 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000001 RBX=1ffff920005c5f6e RCX=ffffffff815d8478 RDX=0000000000000001 RSI=ffffffff8a282d20 RDI=ffffffff8a282d60 RBP=0000000000000001 RSP=ffffc90002e2fb28 R8 =0000000000000000 R9 =ffffffff8dbafb57 R10=fffffbfff1b75f6a R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=ffff8880400b2f18 R15=0000000000000000 RIP=ffffffff8975fd32 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9a0df6b840 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa12e7123e0 CR3=0000000020e65000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ff000000000000ff00000000000000 XMM02=00000000000000000000000000000000 XMM03=0000000000ff0000000000ff00000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=65726168732f6372732f2e2e2f2e2e00 XMM09=00000000000000000000000000000000 XMM10=20202000002020202020202020202020 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000