last executing test programs: 2.889847133s ago: executing program 1 (id=3830): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) 2.730627029s ago: executing program 2 (id=3832): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)=0x9, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000140), 0x12) 2.538511663s ago: executing program 1 (id=3835): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xca}, @l2cap_cid_signaling={{0xc6}, [@l2cap_conf_req={{0x4, 0x35, 0x1e}, {0x5, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x40}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x4, 0x0, 0x3f, 0x800}}, @l2cap_conf_mtu={0x1, 0x2, 0x19e8}, @l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_conf_req={{0x4, 0x20, 0x30}, {0x9, 0x7, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0xb5, 0x8, 0x5, 0xfffa}}, @l2cap_conf_efs={0x6, 0x10, {0xfc, 0x2, 0x8d7, 0x81, 0x3, 0xe348}}, @l2cap_conf_flushto={0x2, 0x2, 0xff}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x3, 0x0, 0x6, 0x1, 0x800}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x7}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x2}}, @l2cap_disconn_req={{0x6, 0x40, 0x4}, {0x1ff, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x6, 0x7, 0x3, 0x7ff}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x8, 0x9, 0x8000, 0xfff9}}, @l2cap_conn_req={{0x2, 0x80, 0x4}, {0x3, 0x5}}, @l2cap_conf_req={{0x4, 0x39, 0x30}, {0x401, 0x4, [@l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0x8, 0x7f, 0x49c, 0x6}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x0, 0x8439, 0x1, 0x4, 0x7fff}}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0x80, 0x4}, {0x5, 0x6}}]}}, 0xcf) r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x7fffffffffffffff, 0x0, 0x3}, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)) fchdir(0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000400)=ANY=[@ANYBLOB="68000000000000000000000000000000000000005100008008000000e00000012d00daef8c50255300008b3aa15b4c0b7f6c0a33ca71611b3a3cdaeea9ac742b33a2feeb8ae65780966931197738b42fc2548a000000c22d06aa76fb04769234a2e944a2a68b677be814380000005e7cc81bb676d98fe8cb187d19926966cf85c7c35f227e9f7d4123a0c37367e9dc3760b4a211d3885f9169b3032ef9e6097658cd74fc71d8186dbae1d1a21218a91036b358a9852798f3bb38e7d35577655e6b42c1af17ea74c5948807233f4cad884507c31db7ca07adb4254951bbf2269601eaf79275d9638d53d546ae54dc6ce6aec12de87ddc038b37"], 0x68}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20008001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = dup(r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 2.510556888s ago: executing program 2 (id=3837): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6}, @TCA_CT_LABELS={0x14, 0x7, "3c69a0a7123acbf35d628196cc1da7c2"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7235f1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a49bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e0808"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@cgroup=r6, r5, 0x2f, 0x0, 0x4, @prog_fd}, 0x20) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4e4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x41, 0x6, "1af222accd4fef379f4a09c9efd515c0b99cb78d21b02aa551ba7faddac180095a181b41b3655fd4b0309d05cd48da37e8125a41c311d4ad113e025768"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x24004810}, 0x4000000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2.287486322s ago: executing program 0 (id=3839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x54}}, 0x0) 2.189906898s ago: executing program 0 (id=3840): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000140), 0x4) 2.020652673s ago: executing program 0 (id=3842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.871225734s ago: executing program 0 (id=3843): syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11}}}}}, 0x0) 1.740726494s ago: executing program 0 (id=3844): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x8) 1.74033314s ago: executing program 3 (id=3845): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) 1.40984427s ago: executing program 2 (id=3846): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) times(0x0) 1.39020658s ago: executing program 3 (id=3847): r0 = syz_socket_connect_nvme_tcp() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x88, 0x13, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0xfffffd73}, 0x10) listen(0xffffffffffffffff, 0x3ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000400)={r4, &(0x7f0000000340), &(0x7f00000000c0)=""/79}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)=""/202, 0xca) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0), 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.388510111s ago: executing program 1 (id=3848): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c3000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='rpcgss_need_reencode\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0xbb) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000000c0)=0x8f) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_deladdr={0x38, 0x15, 0x20, 0x70bd29, 0x25dfdbfb, {0xa, 0x10, 0x50, 0xc8, r9}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x800}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x20c}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 687.115209ms ago: executing program 1 (id=3849): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x54}}, 0x0) 634.359883ms ago: executing program 3 (id=3850): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000140), 0x4) 550.84595ms ago: executing program 0 (id=3851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000001840)=""/4083, 0xff3}], 0x1) pread64(r3, &(0x7f0000000000)=""/16, 0x10, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000002a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r9, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 504.216535ms ago: executing program 3 (id=3852): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f0000429000/0x3000)=nil, 0x0, 0x0}) 499.576161ms ago: executing program 1 (id=3853): syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11}}}}}, 0x0) 305.12731ms ago: executing program 1 (id=3854): unshare(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x20000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) faccessat2(r4, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) umount2(0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8}, @NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) dup3(r1, r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r7, 0x0, 0x0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r8, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r8, &(0x7f0000000240), 0x0}, 0x20) 304.744231ms ago: executing program 2 (id=3855): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\x1b\x00m\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000300)={r3, 0x0, 0x0, 0x4000}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x6005}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 141.126145ms ago: executing program 2 (id=3856): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) 91.093364ms ago: executing program 3 (id=3857): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a1) 17.269233ms ago: executing program 2 (id=3858): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c3000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='rpcgss_need_reencode\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0xbb) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000000c0)=0x8f) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_deladdr={0x38, 0x15, 0x20, 0x70bd29, 0x25dfdbfb, {0xa, 0x10, 0x50, 0xc8, r9}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x800}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x20c}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 0s ago: executing program 3 (id=3859): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303170002090500000002000020d3"]) kernel console output (not intermixed with test programs): ed blocking state [ 352.452959][ T827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.536282][ T825] usb 5-1: USB disconnect, device number 19 [ 353.163557][T13141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.441867][T13141] veth0_vlan: entered promiscuous mode [ 353.456804][T13141] veth1_vlan: entered promiscuous mode [ 353.522569][T13141] veth0_macvtap: entered promiscuous mode [ 353.573314][T13141] veth1_macvtap: entered promiscuous mode [ 353.657075][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.689515][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.708569][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.722192][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.728975][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.750182][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.780015][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.789836][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.800658][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.809666][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.819121][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.826524][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.831282][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.842231][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.856811][T13141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.885228][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.900206][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.916245][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.943444][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.960690][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.968615][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.974556][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.978860][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.016172][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.024742][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.040789][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.045439][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.067688][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.101668][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.113007][T13141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.154377][T13141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.159035][T13141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.205827][T13141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.210993][T13141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.437970][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.453168][ T40] audit: type=1326 audit(1720316440.179:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13317 comm="syz.3.3064" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ce7575bd9 code=0x0 [ 354.461260][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.560480][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.564035][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.801331][ T40] audit: type=1400 audit(1720316440.529:958): avc: denied { ioctl } for pid=13317 comm="syz.3.3064" path="socket:[55712]" dev="sockfs" ino=55712 ioctlcmd=0x4b6a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 354.910439][ T40] audit: type=1400 audit(1720316440.629:959): avc: denied { getopt } for pid=13326 comm="syz.1.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 355.240582][ T5210] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 355.442031][ T5210] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 355.476176][ T5210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.487313][ T5210] usb 6-1: config 0 descriptor?? [ 355.761700][T13327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.766073][T13327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.874882][ T5210] usb 6-1: string descriptor 0 read error: -71 [ 355.886112][ T40] audit: type=1400 audit(1720316441.609:960): avc: denied { append } for pid=13339 comm="syz.0.3069" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 355.891378][ T5210] gs_usb 6-1:0.0: Couldn't send data format (err=-71) [ 355.898631][ T5210] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 355.911957][ T5210] usb 6-1: USB disconnect, device number 10 [ 358.085973][ T40] audit: type=1400 audit(1720316443.809:961): avc: denied { read } for pid=13378 comm="syz.1.3080" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 358.096691][ T40] audit: type=1400 audit(1720316443.809:962): avc: denied { open } for pid=13378 comm="syz.1.3080" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 358.121272][ T40] audit: type=1400 audit(1720316443.809:963): avc: denied { ioctl } for pid=13378 comm="syz.1.3080" path="/dev/usbmon0" dev="devtmpfs" ino=721 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 358.387312][ T40] audit: type=1400 audit(1720316444.109:964): avc: denied { setopt } for pid=13390 comm="syz.1.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 358.492058][ T40] audit: type=1400 audit(1720316444.209:965): avc: denied { create } for pid=13394 comm="syz.1.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 358.525369][ T40] audit: type=1400 audit(1720316444.229:966): avc: denied { write } for pid=13394 comm="syz.1.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 359.540674][T13417] netlink: 'syz.0.3097': attribute type 10 has an invalid length. [ 359.544124][T13417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3097'. [ 361.150252][ T64] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 361.156489][ T64] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 361.161282][ T64] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 361.167075][ T64] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 361.170784][ T64] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 361.174165][ T64] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 361.225709][T13450] lo speed is unknown, defaulting to 1000 [ 361.769356][T13450] chnl_net:caif_netlink_parms(): no params data found [ 362.132570][T13468] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 362.135450][T13468] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 362.140253][T13468] vhci_hcd vhci_hcd.0: Device attached [ 362.144303][ T40] audit: type=1400 audit(1720316447.869:967): avc: denied { connect } for pid=13467 comm="syz.0.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 362.144912][T13469] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 1 [ 362.163108][ T83] vhci_hcd: stop threads [ 362.165049][ T83] vhci_hcd: release socket [ 362.167223][ T83] vhci_hcd: disconnect device [ 362.196223][T13450] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.199797][T13450] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.203245][T13450] bridge_slave_0: entered allmulticast mode [ 362.207261][T13450] bridge_slave_0: entered promiscuous mode [ 362.212625][T13450] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.216035][T13450] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.219993][T13450] bridge_slave_1: entered allmulticast mode [ 362.225067][T13450] bridge_slave_1: entered promiscuous mode [ 362.326557][T13450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.335055][T13450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.445191][T13450] team0: Port device team_slave_0 added [ 362.449441][T13450] team0: Port device team_slave_1 added [ 362.554332][T13450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.564556][T13450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.577090][T13450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.584615][T13450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.587957][T13450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.606735][T13450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.855687][T13450] hsr_slave_0: entered promiscuous mode [ 362.956812][T13450] hsr_slave_1: entered promiscuous mode [ 363.005788][T13450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.010569][T13450] Cannot create hsr debugfs directory [ 363.012933][T13479] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 363.016526][T13479] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 363.096525][ T40] audit: type=1326 audit(1720316448.819:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.0.3117" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x0 [ 363.210900][ T5214] Bluetooth: hci8: command tx timeout [ 363.573268][ T40] audit: type=1400 audit(1720316449.299:969): avc: denied { watch_mount } for pid=13484 comm="syz.3.3118" path="/29/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 363.624812][T13450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.662494][ T40] audit: type=1400 audit(1720316449.389:970): avc: denied { unmount } for pid=12900 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 363.826885][T13450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.927832][T13450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.042335][T13489] netlink: 'syz.0.3120': attribute type 10 has an invalid length. [ 364.046798][T13489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3120'. [ 364.074645][T13450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.243433][ T40] audit: type=1326 audit(1720316449.949:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.3123" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 364.269178][ T40] audit: type=1326 audit(1720316449.959:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.3123" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 364.308596][ T40] audit: type=1326 audit(1720316449.959:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.3123" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 364.340244][ T40] audit: type=1326 audit(1720316449.969:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.3123" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 364.416187][ T40] audit: type=1326 audit(1720316449.969:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.3123" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 364.450660][ T40] audit: type=1326 audit(1720316449.969:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.0.3123" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 364.538758][T13450] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 364.591205][T13450] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.614334][T13450] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.634537][T13450] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.843138][T13450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.875755][T13450] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.910835][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.914710][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.951946][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.955209][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.301912][ T5214] Bluetooth: hci8: command tx timeout [ 365.476077][T13450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.582485][T13450] veth0_vlan: entered promiscuous mode [ 365.633326][T13450] veth1_vlan: entered promiscuous mode [ 365.718760][T13450] veth0_macvtap: entered promiscuous mode [ 365.735024][T13450] veth1_macvtap: entered promiscuous mode [ 365.762557][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.774994][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.779554][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.810435][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.814712][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.819243][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.824155][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.850130][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.862287][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.867038][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.882580][T13516] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 365.890457][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.894848][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.898925][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.920438][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.925114][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.940646][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.953032][T13450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.972409][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.977004][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.982738][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.987412][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.001077][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.005734][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.012309][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.017069][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.040437][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.045029][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.050813][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.055311][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.059532][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.105331][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.110800][T13450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.115577][T13450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.132670][T13450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.170756][T13450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.174014][T13450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.177588][T13450] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.182629][T13450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.396865][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.399705][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.471302][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.483056][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.835471][T13522] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 366.838440][T13522] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 366.860476][T13522] vhci_hcd vhci_hcd.0: Device attached [ 366.897460][T13525] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 1 [ 366.927588][ T1092] vhci_hcd: stop threads [ 366.930391][ T1092] vhci_hcd: release socket [ 366.932610][ T1092] vhci_hcd: disconnect device [ 366.942894][T13529] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 366.946072][T13529] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 367.372699][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 367.372719][ T40] audit: type=1400 audit(1720316453.099:988): avc: denied { getopt } for pid=13533 comm="syz.2.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 367.390406][ T40] audit: type=1400 audit(1720316453.099:989): avc: denied { map } for pid=13533 comm="syz.2.3133" path="/dev/binderfs/binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 368.967263][ T40] audit: type=1400 audit(1720316454.679:990): avc: denied { ioctl } for pid=13549 comm="syz.3.3139" path="socket:[57358]" dev="sockfs" ino=57358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 368.980520][ T5214] Bluetooth: hci8: command tx timeout [ 369.004650][ T40] audit: type=1326 audit(1720316454.729:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.0.3140" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x0 [ 369.441645][T13560] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.444336][T13560] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.649632][T13562] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3143'. [ 370.105818][ T40] audit: type=1400 audit(1720316455.829:992): avc: denied { read } for pid=13567 comm="syz.0.3146" name="nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 370.140408][ T40] audit: type=1400 audit(1720316455.829:993): avc: denied { open } for pid=13567 comm="syz.0.3146" path="/dev/nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 370.337177][T13575] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 371.130434][ T64] Bluetooth: hci4: command 0x0406 tx timeout [ 372.309712][T13598] lo speed is unknown, defaulting to 1000 [ 372.387022][ T64] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 372.400549][ T64] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 372.407549][ T64] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 372.417815][ T64] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 372.422933][ T64] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 372.426626][ T64] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 372.957325][T13600] lo speed is unknown, defaulting to 1000 [ 373.601985][T13600] chnl_net:caif_netlink_parms(): no params data found [ 374.126718][T13600] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.130018][T13600] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.210984][T13600] bridge_slave_0: entered allmulticast mode [ 374.215212][T13600] bridge_slave_0: entered promiscuous mode [ 374.243509][T13600] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.250268][T13600] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.258582][T13600] bridge_slave_1: entered allmulticast mode [ 374.264424][T13600] bridge_slave_1: entered promiscuous mode [ 374.445485][T13600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.491249][ T64] Bluetooth: hci9: command tx timeout [ 374.494132][T13600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.675064][T13600] team0: Port device team_slave_0 added [ 374.698752][T13600] team0: Port device team_slave_1 added [ 374.821362][ T64] Bluetooth: hci7: command tx timeout [ 374.933116][ T64] Bluetooth: hci2: unexpected event 0x30 length: 56 > 3 [ 374.935685][T13600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.942261][T13600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.976858][T13600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.011999][T13600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.015101][T13600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.044060][T13600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.202473][T13600] hsr_slave_0: entered promiscuous mode [ 375.207656][T13600] hsr_slave_1: entered promiscuous mode [ 375.214196][T13600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.221150][T13600] Cannot create hsr debugfs directory [ 375.289460][ T40] audit: type=1400 audit(1720316460.999:994): avc: denied { setopt } for pid=13623 comm="syz.2.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.862481][T13600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.922826][ T40] audit: type=1400 audit(1720316461.649:995): avc: denied { mounton } for pid=13632 comm="syz.3.3166" path="/38/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 375.971469][ T40] audit: type=1400 audit(1720316461.699:996): avc: denied { unmount } for pid=12900 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 376.004953][T13600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.106616][T13600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.152059][T13638] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3167'. [ 376.213828][T13600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.220506][ T40] audit: type=1400 audit(1720316461.929:997): avc: denied { getopt } for pid=13639 comm="syz.2.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 376.479978][T13600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 376.503532][T13600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.509440][T13600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.514736][T13600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.570823][ T64] Bluetooth: hci9: command tx timeout [ 376.576271][T13647] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 376.579240][T13647] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.594938][T13647] vhci_hcd vhci_hcd.0: Device attached [ 376.627693][T13648] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 1 [ 376.633453][ T11] vhci_hcd: stop threads [ 376.635481][ T11] vhci_hcd: release socket [ 376.637565][ T11] vhci_hcd: disconnect device [ 376.713254][T13600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.799224][T13600] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.875682][ T825] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.878958][ T825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.974287][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.977592][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.054214][T13600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.149553][ T62] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 377.330238][T13600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.406583][T13600] veth0_vlan: entered promiscuous mode [ 377.427112][T13600] veth1_vlan: entered promiscuous mode [ 377.460774][T13682] syzkaller1: entered promiscuous mode [ 377.470968][T13682] syzkaller1: entered allmulticast mode [ 377.526827][T13600] veth0_macvtap: entered promiscuous mode [ 377.542622][T13600] veth1_macvtap: entered promiscuous mode [ 377.582484][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.586940][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.600942][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.607495][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.615484][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.625480][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.633354][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.640731][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.647283][ T40] audit: type=1326 audit(1720316463.369:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.3184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce7575bd9 code=0x7ffc0000 [ 377.650209][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.670726][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.672755][ T40] audit: type=1326 audit(1720316463.369:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.3184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce7575bd9 code=0x7ffc0000 [ 377.675018][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.700589][ T40] audit: type=1326 audit(1720316463.419:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.3184" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ce7575bd9 code=0x7ffc0000 [ 377.707077][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.722195][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.729477][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.739311][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.740533][ T40] audit: type=1326 audit(1720316463.419:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.3184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce7575bd9 code=0x7ffc0000 [ 377.748869][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.763027][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.767895][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.770442][ T40] audit: type=1326 audit(1720316463.419:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.3184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ce7575bd9 code=0x7ffc0000 [ 377.791910][T13600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.795220][ T40] audit: type=1326 audit(1720316463.429:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.3.3184" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ce7575bd9 code=0x7ffc0000 [ 377.818557][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.830827][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.834893][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.839629][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.847857][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.852579][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.857024][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.871470][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.874870][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.879588][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.894700][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.899338][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.907022][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.920506][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.924896][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.929537][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.937042][T13600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.940775][T13600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.945785][T13600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.963917][T13600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.967603][T13600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.971771][T13600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.975244][T13600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.068903][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.072579][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.092811][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.096058][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.286080][ T64] Bluetooth: hci8: unexpected event 0x30 length: 56 > 3 [ 378.311409][ T39] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 378.652272][ T64] Bluetooth: hci9: command tx timeout [ 379.059856][ T1101] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 379.318099][T13746] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3209'. [ 379.331286][T13736] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 379.357502][T13736] syzkaller0: entered promiscuous mode [ 379.363575][T13736] syzkaller0: entered allmulticast mode [ 379.601822][ T64] Bluetooth: hci8: unexpected event 0x30 length: 56 > 3 [ 380.730782][ T64] Bluetooth: hci9: command tx timeout [ 384.418134][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.420962][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.792306][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 384.930520][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 384.930541][ T40] audit: type=1400 audit(1720316470.649:1028): avc: denied { connect } for pid=13773 comm="syz.2.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 385.330072][ T40] audit: type=1400 audit(1720316470.999:1029): avc: denied { write } for pid=13786 comm="syz.2.3227" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 385.470741][ T40] audit: type=1400 audit(1720316471.009:1030): avc: denied { remount } for pid=13786 comm="syz.2.3227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 385.614575][ T5214] Bluetooth: hci7: Ignoring HCI_Connection_Complete for existing connection [ 385.667016][T13794] infiniband syz0: set active [ 385.697957][T13794] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 385.712066][ T826] lo speed is unknown, defaulting to 1000 [ 386.684785][ T40] audit: type=1400 audit(1720316472.409:1031): avc: denied { audit_write } for pid=13819 comm="syz.2.3239" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 386.696413][ T40] audit: type=1107 audit(1720316472.419:1032): pid=13819 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='n' [ 387.470392][ T5219] Bluetooth: hci9: command 0x0405 tx timeout [ 387.705963][ T40] audit: type=1400 audit(1720316473.429:1033): avc: denied { map } for pid=13837 comm="syz.0.3244" path="socket:[59607]" dev="sockfs" ino=59607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 388.029212][T13847] bpf: Bad value for 'mode' [ 388.197514][T13849] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 388.200535][T13849] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 388.264993][T13849] vhci_hcd vhci_hcd.0: Device attached [ 388.334926][T13850] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 388.350470][ T1181] vhci_hcd: stop threads [ 388.360564][ T1181] vhci_hcd: release socket [ 388.362704][ T1181] vhci_hcd: disconnect device [ 390.271371][T13901] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 390.274429][T13901] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 390.304087][T13901] vhci_hcd vhci_hcd.0: Device attached [ 390.322852][T13902] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 390.326578][ T1101] vhci_hcd: stop threads [ 390.328487][ T1101] vhci_hcd: release socket [ 390.331496][ T1101] vhci_hcd: disconnect device [ 390.510456][ T40] audit: type=1326 audit(1720316476.209:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.0.3267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7fc00000 [ 390.985272][ T40] audit: type=1326 audit(1720316476.709:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.0.3267" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd9bb75bd9 code=0x7fc00000 [ 391.010528][ T40] audit: type=1326 audit(1720316476.709:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.0.3267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7fc00000 [ 391.040464][ T40] audit: type=1326 audit(1720316476.709:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.0.3267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7fc00000 [ 391.072899][ T40] audit: type=1326 audit(1720316476.709:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.0.3267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7fc00000 [ 391.120390][ T40] audit: type=1326 audit(1720316476.709:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.0.3267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7fc00000 [ 391.129066][ T40] audit: type=1326 audit(1720316476.709:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.0.3267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7fc00000 [ 391.164012][ T40] audit: type=1326 audit(1720316476.709:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.0.3267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7fc00000 [ 391.190499][ T40] audit: type=1326 audit(1720316476.709:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.0.3267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7fc00000 [ 391.218167][ T40] audit: type=1326 audit(1720316476.709:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.0.3267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7fc00000 [ 391.347490][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3274'. [ 391.608723][T13926] usb usb8: usbfs: process 13926 (syz.0.3277) did not claim interface 0 before use [ 393.244087][T13969] bpf: Bad value for 'mode' [ 393.647047][T13978] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3298'. [ 395.242121][ T64] Bluetooth: hci9: unexpected event 0x30 length: 56 > 3 [ 396.220277][T14023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3316'. [ 396.226192][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 396.226206][ T40] audit: type=1400 audit(1720316481.949:1052): avc: denied { bind } for pid=14020 comm="syz.1.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 396.273311][ T40] audit: type=1400 audit(1720316481.999:1053): avc: denied { write } for pid=14020 comm="syz.1.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 396.736672][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 396.965689][T14038] netlink: 'syz.1.3322': attribute type 4 has an invalid length. [ 397.014967][ T40] audit: type=1400 audit(1720316482.739:1054): avc: denied { name_bind } for pid=14036 comm="syz.1.3322" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 397.111187][ T5219] Bluetooth: hci7: unexpected event 0x30 length: 56 > 3 [ 397.218416][ T40] audit: type=1400 audit(1720316482.939:1055): avc: denied { nlmsg_write } for pid=14036 comm="syz.1.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 397.501816][T14052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3328'. [ 397.507712][ T40] audit: type=1400 audit(1720316483.229:1056): avc: denied { write } for pid=14053 comm="syz.0.3329" name="ppp" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 397.660515][ T40] audit: type=1326 audit(1720316483.379:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.2.3330" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa178975bd9 code=0x0 [ 398.427087][T14080] syz.3.3338: attempt to access beyond end of device [ 398.427087][T14080] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 398.461455][T14080] syz.3.3338: attempt to access beyond end of device [ 398.461455][T14080] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 398.947345][T14098] vivid-000: ================= START STATUS ================= [ 398.964913][T14098] vivid-000: Test Pattern: 75% Colorbar [ 398.967847][T14098] vivid-000: Fill Percentage of Frame: 100 [ 398.992629][T14098] vivid-000: Horizontal Movement: No Movement [ 399.013065][T14098] vivid-000: Vertical Movement: No Movement [ 399.038532][T14098] vivid-000: OSD Text Mode: All [ 399.064131][T14098] vivid-000: Show Border: false [ 399.071856][T14098] vivid-000: Show Square: false [ 399.078793][T14098] vivid-000: Sensor Flipped Horizontally: false [ 399.094620][T14098] vivid-000: Sensor Flipped Vertically: false [ 399.102188][T14098] vivid-000: Insert SAV Code in Image: false [ 399.112177][T14098] vivid-000: Insert EAV Code in Image: false [ 399.117973][T14098] vivid-000: Insert Video Guard Band: false [ 399.126557][T14098] vivid-000: Reduced Framerate: false [ 399.134798][T14098] vivid-000: Enable Capture Cropping: true grabbed [ 399.144351][T14098] vivid-000: Enable Capture Composing: true grabbed [ 399.152054][T14098] vivid-000: Enable Capture Scaler: true grabbed [ 399.187747][T14098] vivid-000: Timestamp Source: End of Frame [ 399.193952][T14098] vivid-000: Colorspace: sRGB [ 399.198368][T14098] vivid-000: Transfer Function: Default [ 399.204168][T14098] vivid-000: Y'CbCr Encoding: Default [ 399.223221][T14098] vivid-000: HSV Encoding: Hue 0-179 [ 399.230845][T14098] vivid-000: Quantization: Default [ 399.236607][T14098] vivid-000: Apply Alpha To Red Only: false [ 399.243302][T14098] vivid-000: Standard Aspect Ratio: 4x3 [ 399.248395][T14098] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 399.260568][T14098] vivid-000: DV Timings: 640x480p59 inactive [ 399.263332][T14098] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 399.282689][T14098] vivid-000: Maximum EDID Blocks: 2 [ 399.285067][T14098] vivid-000: Limited RGB Range (16-235): false [ 399.316022][T14098] vivid-000: Rx RGB Quantization Range: Automatic [ 399.318915][T14098] vivid-000: Power Present: 0x00000001 [ 399.330432][T14098] tpg source WxH: 320x180 (Y'CbCr) [ 399.353196][T14098] tpg field: 1 [ 399.354653][T14098] tpg crop: 320x180@0x0 [ 399.356347][T14098] tpg compose: 320x180@0x0 [ 399.370838][T14098] tpg colorspace: 8 [ 399.372230][T14098] tpg transfer function: 0/2 [ 399.374063][T14098] tpg Y'CbCr encoding: 0/1 [ 399.375828][T14098] tpg quantization: 0/2 [ 399.377456][T14098] tpg RGB range: 0/2 [ 399.468823][T14098] vivid-000: ================== END STATUS ================== [ 399.668252][T14108] netlink: 'syz.2.3349': attribute type 10 has an invalid length. [ 399.879826][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 400.499538][T14121] syz.2.3354: attempt to access beyond end of device [ 400.499538][T14121] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 400.540709][T14121] syz.2.3354: attempt to access beyond end of device [ 400.540709][T14121] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 400.733172][ T40] audit: type=1400 audit(1720316486.459:1058): avc: denied { watch } for pid=14126 comm="syz.0.3357" path="/326" dev="tmpfs" ino=1768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 400.760537][ T40] audit: type=1400 audit(1720316486.469:1059): avc: denied { watch_sb } for pid=14126 comm="syz.0.3357" path="/326" dev="tmpfs" ino=1768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 400.988463][ T5219] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 400.988495][ T5219] Bluetooth: unknown link type 5 [ 400.992718][ T5219] Bluetooth: hci2: connection err: -111 [ 401.107927][T14137] netlink: 'syz.3.3360': attribute type 10 has an invalid length. [ 401.389888][ T40] audit: type=1400 audit(1720316487.109:1060): avc: denied { map } for pid=14140 comm="syz.3.3363" path="/dev/hpet" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 401.761810][T14141] netlink: 212872 bytes leftover after parsing attributes in process `syz.3.3363'. [ 401.792513][T14141] openvswitch: netlink: ufid size 60 bytes exceeds the range (1, 16) [ 401.796325][T14141] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 401.830432][ T40] audit: type=1400 audit(1720316487.539:1061): avc: denied { setopt } for pid=14140 comm="syz.3.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 401.851088][ T40] audit: type=1400 audit(1720316487.549:1062): avc: denied { connect } for pid=14140 comm="syz.3.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 402.016899][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 403.355600][T14171] netlink: 212872 bytes leftover after parsing attributes in process `syz.2.3375'. [ 403.359287][T14171] openvswitch: netlink: ufid size 60 bytes exceeds the range (1, 16) [ 403.380519][T14171] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 403.882444][T14190] block nbd2: shutting down sockets [ 403.950449][ T40] audit: type=1400 audit(1720316489.669:1063): avc: denied { create } for pid=14180 comm="syz.0.3378" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 404.037678][ T40] audit: type=1400 audit(1720316489.759:1064): avc: denied { write } for pid=14180 comm="syz.0.3378" name="file0" dev="tmpfs" ino=1805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 404.073451][ T40] audit: type=1400 audit(1720316489.759:1065): avc: denied { open } for pid=14180 comm="syz.0.3378" path="/332/file0" dev="tmpfs" ino=1805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 404.223640][T14199] netlink: 1304 bytes leftover after parsing attributes in process `syz.3.3383'. [ 404.814615][T14206] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 404.954972][T14206] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 405.061610][T14211] netlink: 'syz.2.3390': attribute type 10 has an invalid length. [ 405.104811][ T40] audit: type=1400 audit(1720316490.829:1066): avc: denied { bind } for pid=14212 comm="syz.0.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 405.127886][ T40] audit: type=1400 audit(1720316490.829:1067): avc: denied { name_bind } for pid=14212 comm="syz.0.3392" src=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 405.147134][ T40] audit: type=1400 audit(1720316490.829:1068): avc: denied { node_bind } for pid=14212 comm="syz.0.3392" src=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 405.173619][ T40] audit: type=1400 audit(1720316490.859:1069): avc: denied { ioctl } for pid=14212 comm="syz.0.3392" path="socket:[59993]" dev="sockfs" ino=59993 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 405.506996][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3396'. [ 405.631623][T14227] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 405.684240][T14227] bridge0: port 3(bond1) entered blocking state [ 405.703524][T14227] bridge0: port 3(bond1) entered disabled state [ 405.706801][T14227] bond1: entered allmulticast mode [ 405.709248][T14227] bridge1: entered allmulticast mode [ 405.714565][T14227] bond1: entered promiscuous mode [ 405.716944][T14227] bridge1: entered promiscuous mode [ 405.880519][ T5219] Bluetooth: hci8: unexpected event 0x04 length: 11 > 10 [ 405.880555][ T5219] Bluetooth: unknown link type 5 [ 405.887242][ T5219] Bluetooth: hci8: connection err: -111 [ 406.067921][T14235] netlink: 212872 bytes leftover after parsing attributes in process `syz.3.3401'. [ 406.072817][T14235] openvswitch: netlink: ufid size 60 bytes exceeds the range (1, 16) [ 406.076632][T14235] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 409.040417][ T40] audit: type=1400 audit(1720316494.759:1070): avc: denied { read } for pid=14249 comm="syz.0.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 409.123235][T14252] lo speed is unknown, defaulting to 1000 [ 409.151433][T14258] netlink: 'syz.2.3405': attribute type 4 has an invalid length. [ 409.243619][ T40] audit: type=1400 audit(1720316494.969:1071): avc: denied { lock } for pid=14251 comm="syz.2.3405" path="socket:[60045]" dev="sockfs" ino=60045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 409.290616][T14261] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 409.290616][T14261] The task syz.1.3410 (14261) triggered the difference, watch for misbehavior. [ 409.769579][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 410.055605][T14280] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.3415'. [ 410.546280][T14286] netlink: 'syz.3.3420': attribute type 17 has an invalid length. [ 410.841304][T14289] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 410.859814][T14289] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 410.891373][ T2686] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 411.037128][T14294] netlink: 212872 bytes leftover after parsing attributes in process `syz.0.3424'. [ 411.050628][T14294] openvswitch: netlink: ufid size 60 bytes exceeds the range (1, 16) [ 411.055611][T14294] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 411.072263][ T2686] usb 7-1: Using ep0 maxpacket: 8 [ 411.076712][ T2686] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 411.080282][ T2686] usb 7-1: config 179 has no interface number 0 [ 411.083243][ T2686] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 411.123374][ T2686] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 411.129560][ T2686] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 411.137699][ T2686] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 411.175250][ T2686] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 411.240601][ T2686] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.314131][T14290] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 411.488503][T14307] netlink: 'syz.0.3429': attribute type 17 has an invalid length. [ 411.694019][ T72] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input21 [ 411.716745][ T40] audit: type=1400 audit(1720316497.439:1072): avc: denied { read } for pid=4679 comm="acpid" name="js0" dev="devtmpfs" ino=2641 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.733533][ T40] audit: type=1400 audit(1720316497.439:1073): avc: denied { open } for pid=4679 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2641 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.745070][ T40] audit: type=1400 audit(1720316497.439:1074): avc: denied { ioctl } for pid=4679 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2641 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.862323][ T35] usb 7-1: USB disconnect, device number 13 [ 411.862399][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 411.872414][ T35] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 412.075872][ T5219] Bluetooth: hci9: unexpected event 0x04 length: 11 > 10 [ 412.075906][ T5219] Bluetooth: unknown link type 5 [ 412.081846][ T5219] Bluetooth: hci9: connection err: -111 [ 412.579932][T14333] netlink: 'syz.2.3438': attribute type 11 has an invalid length. [ 412.589685][T14333] netlink: 211132 bytes leftover after parsing attributes in process `syz.2.3438'. [ 412.620623][T14335] netlink: 'syz.0.3439': attribute type 17 has an invalid length. [ 413.620481][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 413.718711][ T5219] Bluetooth: hci7: unexpected event 0x04 length: 11 > 10 [ 413.718747][ T5219] Bluetooth: unknown link type 5 [ 413.726558][ T5219] Bluetooth: hci7: connection err: -111 [ 413.800422][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 413.805828][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 413.811235][ T10] usb 5-1: config 179 has no interface number 0 [ 413.813688][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 413.830759][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 413.835915][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 413.846074][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 413.856753][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 413.866652][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.868644][ T40] audit: type=1400 audit(1720316499.589:1075): avc: denied { bind } for pid=14368 comm="syz.2.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 413.890208][T14358] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 414.150750][ T5277] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input22 [ 414.332403][ T2686] usb 5-1: USB disconnect, device number 20 [ 414.332428][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 414.338645][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 414.351164][ T2686] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 414.380638][ T5249] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 414.600507][ T5249] usb 6-1: Using ep0 maxpacket: 32 [ 414.624166][ T5249] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 414.628111][ T5249] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.650370][ T5249] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 414.670436][ T5249] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 414.675039][ T5249] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 414.686346][ T5249] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.690553][ T5249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.694130][ T5249] usb 6-1: Product: syz [ 414.695963][ T5249] usb 6-1: Manufacturer: syz [ 414.717124][ T5249] usb 6-1: SerialNumber: syz [ 414.978409][ T40] audit: type=1326 audit(1720316500.699:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.3461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 415.022288][ T40] audit: type=1326 audit(1720316500.699:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.3461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 415.037519][ T40] audit: type=1326 audit(1720316500.739:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.3461" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 415.050534][ T5249] usb 6-1: 0:2 : does not exist [ 415.059644][ T40] audit: type=1326 audit(1720316500.739:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.3461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 415.073400][ T40] audit: type=1326 audit(1720316500.739:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.3461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 415.100459][ T40] audit: type=1326 audit(1720316500.749:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.3461" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 415.111927][ T5249] usb 6-1: USB disconnect, device number 11 [ 415.116847][ T40] audit: type=1326 audit(1720316500.749:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.3461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 415.131327][ T40] audit: type=1326 audit(1720316500.749:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.3461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 415.153089][ T40] audit: type=1326 audit(1720316500.759:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.3461" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 415.204578][ T40] audit: type=1326 audit(1720316500.759:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.3461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9bb75bd9 code=0x7ffc0000 [ 415.458144][T13813] udevd[13813]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.380409][T14433] ptrace attach of "/syz-executor exec"[12900] was attempted by "/syz-executor exec"[14433] [ 418.028501][T14446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.123052][T14448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.377662][T14444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.589046][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.680864][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'. [ 420.020554][T14485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3497'. [ 420.125410][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 420.234711][T14493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.310467][T14498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.417025][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 420.417041][ T40] audit: type=1400 audit(1720316506.139:1183): avc: denied { watch watch_reads } for pid=14496 comm="syz.0.3503" path="/359/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 420.446243][T14493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.678432][T14535] netlink: 'syz.2.3517': attribute type 1 has an invalid length. [ 421.691672][T14535] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3517'. [ 421.695507][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3517'. [ 421.718689][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'. [ 421.999149][ T40] audit: type=1400 audit(1720316507.709:1184): avc: denied { append } for pid=14540 comm="syz.1.3520" name="virtual_nci" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.188287][ C3] vkms_vblank_simulate: vblank timer overrun [ 422.191822][T14549] input: syz1 as /devices/virtual/input/input24 [ 422.330719][ T64] Bluetooth: hci6: command 0x0406 tx timeout [ 423.113864][T14570] netlink: 'syz.0.3530': attribute type 4 has an invalid length. [ 423.141982][T14570] infiniband syz0: set down [ 423.146159][ T35] lo speed is unknown, defaulting to 1000 [ 423.160805][ T35] lo speed is unknown, defaulting to 1000 [ 423.172617][T14570] netlink: 'syz.0.3530': attribute type 4 has an invalid length. [ 423.192450][T14570] infiniband syz0: set active [ 423.200478][ T5249] lo speed is unknown, defaulting to 1000 [ 423.203056][ T5249] lo speed is unknown, defaulting to 1000 [ 423.670796][T14603] netlink: 'syz.0.3544': attribute type 4 has an invalid length. [ 423.710181][T14603] infiniband syz0: set down [ 423.732742][ T72] lo speed is unknown, defaulting to 1000 [ 423.732744][T14608] netlink: 'syz.0.3544': attribute type 4 has an invalid length. [ 423.749179][T14608] infiniband syz0: set active [ 423.754769][ T72] lo speed is unknown, defaulting to 1000 [ 423.759220][ T35] lo speed is unknown, defaulting to 1000 [ 424.649359][T14629] lo speed is unknown, defaulting to 1000 [ 424.878009][T14637] netlink: 'syz.1.3557': attribute type 4 has an invalid length. [ 424.987861][T14639] netlink: 'syz.1.3557': attribute type 4 has an invalid length. [ 425.720511][ T56] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 425.903608][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.908555][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.920676][ T56] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 425.927822][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.952206][ T56] usb 6-1: config 0 descriptor?? [ 426.491936][ T56] usbhid 6-1:0.0: can't add hid device: -71 [ 426.494600][ T56] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 426.502256][ T56] usb 6-1: USB disconnect, device number 12 [ 427.330175][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'. [ 427.897891][ T5219] Bluetooth: hci9: unexpected event 0x04 length: 11 > 10 [ 427.897913][ T5219] Bluetooth: unknown link type 5 [ 427.903914][ T5219] Bluetooth: hci9: connection err: -111 [ 428.639248][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3574'. [ 428.817069][ T40] audit: type=1400 audit(1720316514.539:1185): avc: denied { write } for pid=14690 comm="syz.0.3575" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 429.171341][ T40] audit: type=1326 audit(1720316514.889:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.0.3582" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd9bb75bd9 code=0x0 [ 429.476992][T14712] lo speed is unknown, defaulting to 1000 [ 430.193889][ T5219] Bluetooth: hci7: unexpected event 0x04 length: 11 > 10 [ 430.193919][ T5219] Bluetooth: unknown link type 5 [ 430.200262][ T5219] Bluetooth: hci7: connection err: -111 [ 430.201735][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3587'. [ 431.985894][ T40] audit: type=1400 audit(1720316517.709:1187): avc: denied { sqpoll } for pid=14766 comm="syz.0.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 432.228261][T14772] lo speed is unknown, defaulting to 1000 [ 432.232840][T14780] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3608'. [ 432.236954][T14780] netlink: 'syz.0.3608': attribute type 1 has an invalid length. [ 432.286516][ T40] audit: type=1400 audit(1720316518.009:1188): avc: denied { read } for pid=14773 comm="syz.2.3607" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 432.310500][ T40] audit: type=1400 audit(1720316518.009:1189): avc: denied { open } for pid=14773 comm="syz.2.3607" path="/112/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 432.322790][ T40] audit: type=1400 audit(1720316518.029:1190): avc: denied { setopt } for pid=14783 comm="syz.0.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 432.341244][T14782] block device autoloading is deprecated and will be removed. [ 432.470925][ T40] audit: type=1400 audit(1720316518.159:1191): avc: denied { ioctl } for pid=14773 comm="syz.2.3607" path="/112/file0/file0" dev="fuse" ino=0 ioctlcmd=0x915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 432.790542][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3614'. [ 432.797394][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3614'. [ 433.311191][ T40] audit: type=1400 audit(1720316519.039:1192): avc: denied { read } for pid=14811 comm="syz.2.3622" name="file0" dev="tmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 433.469466][T14814] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3623'. [ 433.492331][T14814] netlink: 'syz.2.3623': attribute type 1 has an invalid length. [ 434.201876][ T40] audit: type=1400 audit(1720316519.929:1193): avc: denied { create } for pid=14826 comm="syz.2.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 434.230448][ T40] audit: type=1400 audit(1720316519.929:1194): avc: denied { setopt } for pid=14824 comm="syz.3.3627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.230617][T14827] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.239140][ T40] audit: type=1400 audit(1720316519.959:1195): avc: denied { write } for pid=14826 comm="syz.2.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 434.968982][T14848] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.051042][ T40] audit: type=1326 audit(1720316520.769:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14850 comm="syz.0.3640" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd9bb75bd9 code=0x0 [ 435.082167][ T40] audit: type=1326 audit(1720316520.809:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.3.3632" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ce7575bd9 code=0x0 [ 435.966587][T14866] ieee802154 phy0 wpan0: encryption failed: -22 [ 436.403840][ T5219] Bluetooth: hci9: unexpected event 0x04 length: 11 > 10 [ 436.403875][ T5219] Bluetooth: unknown link type 5 [ 436.410060][ T5219] Bluetooth: hci9: connection err: -111 [ 439.307668][T14897] binder: BINDER_SET_CONTEXT_MGR already set [ 439.331935][T14897] binder: 14896:14897 ioctl 4018620d 20000040 returned -16 [ 439.375759][T14897] binder: 14896:14897 ioctl c0306201 20002300 returned -14 [ 442.148188][ T5219] Bluetooth: hci9: unexpected event 0x04 length: 11 > 10 [ 442.148220][ T5219] Bluetooth: unknown link type 5 [ 442.156065][ T5219] Bluetooth: hci9: connection err: -111 [ 445.094984][ T64] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 445.106713][ T64] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 445.114718][ T64] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 445.120111][ T64] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 445.126926][ T64] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 445.131962][ T64] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 445.893575][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.896123][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.242214][ T5219] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 446.291779][ T5219] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 446.344239][ T5219] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 446.348105][ T5219] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 446.354270][ T5219] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 446.360194][ T5219] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 446.809639][ T5219] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 446.819610][ T5219] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 446.836418][ T5219] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 446.886027][ T5219] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 446.938191][ T5219] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 446.953662][ T5219] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 446.974295][T14930] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 447.225482][ T64] Bluetooth: hci10: command tx timeout [ 447.989770][ T5219] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 448.033064][ T5219] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 448.061206][ T5219] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 448.119869][ T5219] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 448.140854][ T5219] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 448.147325][ T5219] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 448.179831][T14933] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 448.497675][ T64] Bluetooth: hci11: command tx timeout [ 449.062148][ T5219] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 449.080770][ T5219] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 449.086043][ T5219] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 449.105640][ T5219] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 449.109903][ T5219] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 449.114151][ T5219] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 449.133208][T14936] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 449.320478][ T64] Bluetooth: hci10: command tx timeout [ 450.248047][ T5219] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 450.255225][ T5219] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 450.273503][ T5219] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 450.278894][ T5219] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 450.285208][ T5219] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 450.288867][ T5219] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 450.580852][ T5219] Bluetooth: hci11: command tx timeout [ 451.389811][ T5219] Bluetooth: hci10: command tx timeout [ 452.410519][ T5219] Bluetooth: hci12: command tx timeout [ 452.593480][T14874] sch_fq: defrate 4294967292 ignored. [ 452.661606][ T5219] Bluetooth: hci11: command tx timeout [ 452.797742][T14927] lo speed is unknown, defaulting to 1000 [ 452.985394][T14924] lo speed is unknown, defaulting to 1000 [ 453.021480][T14944] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3675'. [ 453.450488][ T5219] Bluetooth: hci10: command tx timeout [ 453.493348][T14939] lo speed is unknown, defaulting to 1000 [ 453.822151][T14927] chnl_net:caif_netlink_parms(): no params data found [ 454.004849][ T83] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.302544][ T83] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.490555][ T5219] Bluetooth: hci12: command tx timeout [ 454.532502][ T83] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.741513][ T5219] Bluetooth: hci11: command tx timeout [ 454.866202][ T83] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.097966][T14924] chnl_net:caif_netlink_parms(): no params data found [ 455.270579][T14927] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.274253][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.277792][T14927] bridge_slave_0: entered allmulticast mode [ 455.351543][T14927] bridge_slave_0: entered promiscuous mode [ 455.527853][T14927] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.540766][T14927] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.550987][T14927] bridge_slave_1: entered allmulticast mode [ 455.555060][T14927] bridge_slave_1: entered promiscuous mode [ 455.959151][T14927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.039547][T14927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.260584][ T83] bridge_slave_1: left allmulticast mode [ 456.262662][ T83] bridge_slave_1: left promiscuous mode [ 456.280970][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.311828][ T83] bridge_slave_0: left allmulticast mode [ 456.314323][ T83] bridge_slave_0: left promiscuous mode [ 456.316966][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.570465][ T5219] Bluetooth: hci12: command tx timeout [ 457.750087][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.792948][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.804436][ T83] bond0 (unregistering): Released all slaves [ 457.983543][T14927] team0: Port device team_slave_0 added [ 458.393900][T14927] team0: Port device team_slave_1 added [ 458.623519][T14924] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.626978][T14924] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.630881][T14924] bridge_slave_0: entered allmulticast mode [ 458.635057][T14924] bridge_slave_0: entered promiscuous mode [ 458.651722][ T5219] Bluetooth: hci12: command tx timeout [ 458.946586][T14924] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.949772][T14924] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.961143][T14924] bridge_slave_1: entered allmulticast mode [ 458.990405][T14924] bridge_slave_1: entered promiscuous mode [ 459.186623][T14927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.189980][T14927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.242000][T14927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.579273][T14924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.588019][T14927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.620414][T14927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.640709][T14927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.815791][T14939] chnl_net:caif_netlink_parms(): no params data found [ 459.992594][T14924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.413185][T14927] hsr_slave_0: entered promiscuous mode [ 460.442506][T14927] hsr_slave_1: entered promiscuous mode [ 460.540558][T14927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.543987][T14927] Cannot create hsr debugfs directory [ 460.620686][T14924] team0: Port device team_slave_0 added [ 460.651096][T14924] team0: Port device team_slave_1 added [ 461.130397][ T83] hsr_slave_0: left promiscuous mode [ 461.134961][ T83] hsr_slave_1: left promiscuous mode [ 461.153054][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.156703][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.171265][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.175275][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.401858][ T83] veth1_macvtap: left promiscuous mode [ 461.404891][ T83] veth0_macvtap: left promiscuous mode [ 461.407361][ T83] veth1_vlan: left promiscuous mode [ 461.410177][ T83] : left promiscuous mode [ 461.767292][ T83] infiniband syz0: set down [ 463.269593][ T40] audit: type=1400 audit(1720316548.989:1198): avc: denied { ioctl } for pid=14990 comm="syz.1.3680" path="socket:[63455]" dev="sockfs" ino=63455 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 466.651911][ T83] team0 (unregistering): Port device team_slave_1 removed [ 467.010964][ T83] team0 (unregistering): Port device team_slave_0 removed [ 468.416883][ T5219] Bluetooth: hci5: command 0x0406 tx timeout [ 469.943045][ T39] smc: removing ib device syz0 [ 470.602496][ T827] lo speed is unknown, defaulting to 1000 [ 470.681470][T14924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.684688][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.790614][T14924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.811660][T14924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.814900][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.841074][T14924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.485241][T14939] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.488544][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.510628][T14939] bridge_slave_0: entered allmulticast mode [ 471.526574][T14939] bridge_slave_0: entered promiscuous mode [ 471.583146][T14939] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.586590][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.589872][T14939] bridge_slave_1: entered allmulticast mode [ 471.631786][T14939] bridge_slave_1: entered promiscuous mode [ 473.134722][T14939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.171679][T14939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.346260][T14924] hsr_slave_0: entered promiscuous mode [ 473.442757][T14924] hsr_slave_1: entered promiscuous mode [ 473.462702][T14924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.470688][T14924] Cannot create hsr debugfs directory [ 474.184893][T14939] team0: Port device team_slave_0 added [ 474.574003][T14927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.634460][T14939] team0: Port device team_slave_1 added [ 475.075198][T14927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.129589][T14939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.142997][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.186506][T14939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.214881][T14939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.218333][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.291811][T14939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.435076][T14927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.814515][T14927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.865550][T14939] hsr_slave_0: entered promiscuous mode [ 475.869487][T14939] hsr_slave_1: entered promiscuous mode [ 475.874108][T14939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.878000][T14939] Cannot create hsr debugfs directory [ 476.299275][ T83] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.645733][ T83] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.988687][ T83] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.050924][ T40] audit: type=1400 audit(1720316562.759:1199): avc: denied { sys_chroot } for pid=15024 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 477.062615][ T40] audit: type=1400 audit(1720316562.759:1200): avc: denied { setgid } for pid=15024 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 477.073671][ T40] audit: type=1400 audit(1720316562.759:1201): avc: denied { setrlimit } for pid=15024 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 477.253095][ T83] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.280447][T14927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.327964][T14927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.366168][T14927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.413871][T14927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.843301][ T83] bridge_slave_1: left allmulticast mode [ 477.845977][ T83] bridge_slave_1: left promiscuous mode [ 477.848887][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.882475][ T83] bridge_slave_0: left allmulticast mode [ 477.885158][ T83] bridge_slave_0: left promiscuous mode [ 477.888050][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.146176][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.154995][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.184200][ T83] bond0 (unregistering): Released all slaves [ 479.543458][T14927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.597144][T14927] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.644380][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.648013][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.866142][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.869590][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.672622][ T83] hsr_slave_0: left promiscuous mode [ 480.678635][ T83] hsr_slave_1: left promiscuous mode [ 480.683373][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.686973][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.701722][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.705009][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.815810][ T83] veth1_macvtap: left promiscuous mode [ 480.821132][ T83] veth0_macvtap: left promiscuous mode [ 480.840565][ T83] veth1_vlan: left promiscuous mode [ 480.844951][ T83] veth0_vlan: left promiscuous mode [ 481.865065][ T40] audit: type=1400 audit(1720316567.589:1202): avc: denied { bind } for pid=15044 comm="syz.1.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 483.925515][ T83] team0 (unregistering): Port device team_slave_1 removed [ 484.351256][ T83] team0 (unregistering): Port device team_slave_0 removed [ 488.462978][T15056] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 488.587570][T14927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.870440][T14939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 488.889889][T14939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 488.898264][T14939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 488.967870][T14939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 489.096264][T14927] veth0_vlan: entered promiscuous mode [ 489.143728][T14927] veth1_vlan: entered promiscuous mode [ 489.323331][T15069] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 489.371405][T14927] veth0_macvtap: entered promiscuous mode [ 489.405147][T14924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.433806][T14924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.454021][T14924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.503597][T14924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.550599][T14927] veth1_macvtap: entered promiscuous mode [ 489.669440][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.690524][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.707099][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.712559][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.716919][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.721986][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.726738][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.770411][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.775349][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.780114][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.785252][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.801052][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.804758][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.814115][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.818808][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.840669][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.871490][T14927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.902257][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.907593][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.920427][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.925352][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.931403][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.935306][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.939718][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.970926][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.990466][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.996554][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.050399][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.069028][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.069059][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.069076][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.069100][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.069112][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.089782][T14927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.231186][T14927] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.236482][T14927] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.261633][T14927] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.270934][T14927] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.639229][T14939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.797070][T14939] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.927733][T14924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.947089][T15087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3689'. [ 490.982441][ T40] audit: type=1400 audit(1720316576.709:1203): avc: denied { accept } for pid=15082 comm="syz.1.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 491.027734][ T824] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.031331][ T824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.080650][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.083910][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.129748][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.133128][ T824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.197704][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.215226][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.243229][T14924] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.271874][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.275057][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.331730][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.335146][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.826325][T14939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.952729][T14939] veth0_vlan: entered promiscuous mode [ 491.977190][T14939] veth1_vlan: entered promiscuous mode [ 492.019472][T14939] veth0_macvtap: entered promiscuous mode [ 492.037698][T14939] veth1_macvtap: entered promiscuous mode [ 492.118643][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.130757][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.138628][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.147878][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.169909][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.178264][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.187607][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.200271][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.205170][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.210117][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.221041][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.233200][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.242589][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.248385][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.266748][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.284970][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.297006][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.303931][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.316687][T14939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.364593][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.376472][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.389233][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.403220][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.409701][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.430150][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.443716][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.465693][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.473029][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.478057][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.484196][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.489034][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.494241][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.500411][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.506197][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.512098][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.516702][T14939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.522358][T14939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.533379][T14939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.587921][T14939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.592988][T14939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.600503][T14939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.605556][T14939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.697152][T14924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.045491][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.049649][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.195518][T15127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3694'. [ 493.283286][T14924] veth0_vlan: entered promiscuous mode [ 493.296612][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.300712][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.346910][T14924] veth1_vlan: entered promiscuous mode [ 493.513316][T14924] veth0_macvtap: entered promiscuous mode [ 493.543928][T14924] veth1_macvtap: entered promiscuous mode [ 493.619611][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.625914][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.631032][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.650933][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.659559][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.664994][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.669476][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.680658][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.690541][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.695323][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.699786][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.735343][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.755921][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.755941][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.755958][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.756013][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.756037][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.756049][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.756203][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.756217][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.759022][T14924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.774341][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.831263][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.831289][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.831305][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.831415][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.831702][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.831721][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.831855][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.831875][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.832081][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.832102][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.832491][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.832510][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.832524][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.832793][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.832809][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.832994][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.833009][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.833186][T14924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.833201][T14924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.851452][T14924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.864985][T14924] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.865024][T14924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.865050][T14924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.865075][T14924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.910602][ T5210] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 494.135062][ T5210] usb 6-1: Using ep0 maxpacket: 16 [ 494.149928][ T5210] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.149962][ T5210] usb 6-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 494.149986][ T5210] usb 6-1: config 0 interface 0 has no altsetting 0 [ 494.161650][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.167865][ T5210] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 494.210445][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.240862][ T5210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.392809][ T5210] usb 6-1: Product: syz [ 494.394026][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.394804][ T5210] usb 6-1: Manufacturer: syz [ 494.394822][ T5210] usb 6-1: SerialNumber: syz [ 494.410911][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.419699][ T5210] usb 6-1: config 0 descriptor?? [ 494.451700][ T5210] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input26 [ 495.208274][ T40] audit: type=1400 audit(1720316580.929:1204): avc: denied { mount } for pid=15151 comm="syz.0.3696" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 495.273774][T15153] Unknown uid [ 495.279231][ T40] audit: type=1400 audit(1720316580.999:1205): avc: denied { remount } for pid=15151 comm="syz.0.3696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 495.395966][ T40] audit: type=1400 audit(1720316581.119:1206): avc: denied { unmount } for pid=14939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 496.218532][ T826] usb 6-1: USB disconnect, device number 13 [ 499.147811][ T64] Bluetooth: hci9: command 0x0405 tx timeout [ 500.728407][ T40] audit: type=1400 audit(1720316586.439:1207): avc: denied { view } for pid=15233 comm="syz.0.3718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 500.785258][ T5219] Bluetooth: hci12: link tx timeout [ 500.788216][ T5219] Bluetooth: hci12: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.819408][ T64] Bluetooth: hci12: link tx timeout [ 500.823961][ T64] Bluetooth: hci12: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.827482][ T64] Bluetooth: hci12: link tx timeout [ 500.830243][ T64] Bluetooth: hci12: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.018649][ T40] audit: type=1400 audit(1720316586.739:1208): avc: denied { call } for pid=15239 comm="syz.3.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 501.171623][ T40] audit: type=1400 audit(1720316586.899:1209): avc: denied { shutdown } for pid=15242 comm="syz.2.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 502.850055][T15275] netlink: 'syz.0.3735': attribute type 11 has an invalid length. [ 502.870937][T15275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3735'. [ 502.891821][ T5219] Bluetooth: hci12: command 0x0406 tx timeout [ 503.146634][ T40] audit: type=1400 audit(1720316588.869:1210): avc: denied { write } for pid=15283 comm="syz.0.3738" name="file0" dev="9p" ino=37622000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 503.172878][ T40] audit: type=1400 audit(1720316588.899:1211): avc: denied { open } for pid=15283 comm="syz.0.3738" path="/22/file0/file0" dev="9p" ino=37622000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 503.500496][ T40] audit: type=1400 audit(1720316589.219:1212): avc: denied { setopt } for pid=15288 comm="syz.0.3740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 503.515376][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 503.532031][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 503.537801][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 503.543069][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 503.546959][ T64] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 503.550157][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 504.000584][T15307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3745'. [ 504.001337][T15289] chnl_net:caif_netlink_parms(): no params data found [ 504.400728][ T40] audit: type=1326 audit(1720316590.079:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15315 comm="syz.2.3748" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba2a775bd9 code=0x0 [ 504.430471][ T2686] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 504.504644][T15289] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.508620][T15289] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.520672][T15289] bridge_slave_0: entered allmulticast mode [ 504.532896][T15289] bridge_slave_0: entered promiscuous mode [ 504.549279][T15289] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.557279][T15289] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.560992][T15289] bridge_slave_1: entered allmulticast mode [ 504.565110][T15289] bridge_slave_1: entered promiscuous mode [ 504.640551][ T2686] usb 5-1: Using ep0 maxpacket: 16 [ 504.645117][ T2686] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.651653][ T2686] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 504.670664][ T2686] usb 5-1: config 0 interface 0 has no altsetting 0 [ 504.676325][ T2686] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 504.681124][ T2686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.684638][ T2686] usb 5-1: Product: syz [ 504.686484][ T2686] usb 5-1: Manufacturer: syz [ 504.688526][ T2686] usb 5-1: SerialNumber: syz [ 504.746058][ T2686] usb 5-1: config 0 descriptor?? [ 504.774379][T15289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.782630][ T2686] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input27 [ 504.789989][T15289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.033663][T15307] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.047876][T15307] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.106739][T15289] team0: Port device team_slave_0 added [ 505.142895][T15289] team0: Port device team_slave_1 added [ 505.482448][T15289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.488131][T15289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.511124][T15289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.530944][T15289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.548692][T15289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.569814][T15289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.610909][ T5219] Bluetooth: hci2: command tx timeout [ 505.719880][ T824] usb 5-1: USB disconnect, device number 21 [ 505.828807][ T40] audit: type=1400 audit(1720316591.549:1214): avc: denied { shutdown } for pid=15325 comm="syz.2.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 505.880713][ T40] audit: type=1400 audit(1720316591.549:1215): avc: denied { read } for pid=15325 comm="syz.2.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 505.977843][T15289] hsr_slave_0: entered promiscuous mode [ 506.021790][T15289] hsr_slave_1: entered promiscuous mode [ 506.043051][T15289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.047265][T15289] Cannot create hsr debugfs directory [ 506.930237][T15289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.284284][T15289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.305686][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.308863][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.690470][ T5219] Bluetooth: hci2: command tx timeout [ 507.713623][T15289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.033861][T15289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.341977][T15357] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 508.417158][T15289] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 508.439609][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3761'. [ 508.529570][T15289] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 508.611993][T15289] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 508.728557][T15289] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 509.027146][T15289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.087289][T15289] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.132269][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.150481][ T5249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.193126][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.196840][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.330185][T15374] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3769'. [ 509.738365][T15289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.778119][ T5219] Bluetooth: hci2: command tx timeout [ 509.857053][T15289] veth0_vlan: entered promiscuous mode [ 509.888181][T15289] veth1_vlan: entered promiscuous mode [ 510.059465][T15390] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 510.104928][T15289] veth0_macvtap: entered promiscuous mode [ 510.131429][T15289] veth1_macvtap: entered promiscuous mode [ 510.203120][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.207391][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.256525][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.261251][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.265698][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.270118][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.274539][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.280736][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.284967][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.291122][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.303798][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.313901][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.320912][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.325178][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.329358][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.342108][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.346460][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.352430][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.356488][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.362204][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.367002][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.379886][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.418290][T15289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.462852][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.467285][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.480405][ T5249] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 510.490673][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.496520][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.500854][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.512493][T15399] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3777'. [ 510.516429][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.540793][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.561228][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.566882][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.605090][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.630726][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.640850][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.647156][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.680995][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.684555][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.688184][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.694074][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.700025][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.702670][ T5249] usb 7-1: Using ep0 maxpacket: 8 [ 510.739071][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.748424][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.752439][ T5249] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.758414][ T5249] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 510.760477][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.762709][ T5249] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 510.770414][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.781719][ T5249] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.832107][T15289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.873872][T15289] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.878015][T15289] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.901561][T15289] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.907642][T15289] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.967614][ T5249] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 510.972486][ T5249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.704852][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.731641][ T5249] usb 7-1: GET_CAPABILITIES returned 0 [ 511.734134][ T5249] usbtmc 7-1:16.0: can't read capabilities [ 511.739146][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.744226][ T5249] usb 7-1: USB disconnect, device number 14 [ 511.850552][ T5219] Bluetooth: hci2: command tx timeout [ 511.935343][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.939128][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.952957][ T40] audit: type=1400 audit(1720316597.679:1216): avc: denied { ioctl } for pid=15413 comm="syz.0.3782" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x64b7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 511.967552][ T40] audit: type=1400 audit(1720316597.689:1217): avc: denied { accept } for pid=15413 comm="syz.0.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 512.211896][T15420] vivid-000: disconnect [ 512.267126][T15422] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3785'. [ 512.281644][T15417] vivid-000: reconnect [ 513.730724][T15450] vivid-004: disconnect [ 513.871923][T15446] vivid-004: reconnect [ 513.965651][ T40] audit: type=1326 audit(1720316599.689:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.1.3796" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa76e975bd9 code=0x0 [ 514.181725][T15457] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 514.195302][T15457] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 514.199093][T15457] vhci_hcd vhci_hcd.0: Device attached [ 514.541525][ T5249] usb 16-1: SetAddress Request (2) to port 0 [ 514.552259][ T5249] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 514.663400][T15471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.820679][T15460] vhci_hcd: connection reset by peer [ 514.834680][ T83] vhci_hcd: stop threads [ 514.836831][ T83] vhci_hcd: release socket [ 514.860408][ T83] vhci_hcd: disconnect device [ 515.257032][T15483] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3806'. [ 515.266032][T15483] unsupported nlmsg_type 40 [ 515.503689][T15493] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 515.896457][T15507] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3816'. [ 516.531138][T15527] netlink: 'syz.2.3822': attribute type 2 has an invalid length. [ 516.538228][T15527] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3822'. [ 516.545764][T15528] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 517.076760][ T40] audit: type=1400 audit(1720316602.799:1219): avc: denied { read } for pid=15523 comm="syz.3.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 517.697450][T15549] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 517.810828][ T40] audit: type=1400 audit(1720316603.529:1220): avc: denied { bind } for pid=15546 comm="syz.2.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 518.000040][ T40] audit: type=1400 audit(1720316603.709:1221): avc: denied { map } for pid=15557 comm="syz.1.3835" path="/proc/31/wchan" dev="proc" ino=68012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 518.069426][ T40] audit: type=1400 audit(1720316603.709:1222): avc: denied { execute } for pid=15557 comm="syz.1.3835" path="/proc/31/wchan" dev="proc" ino=68012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 518.242544][T15567] netlink: 'syz.2.3837': attribute type 2 has an invalid length. [ 518.248989][T15567] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3837'. [ 518.410672][T15571] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3842'. [ 519.411483][T15584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.611011][ T5249] usb 16-1: device descriptor read/8, error -110 [ 520.061637][ T5249] usb usb16-port1: attempt power cycle [ 520.420969][ T64] BUG: workqueue leaked atomic, lock or RCU: kworker/u33:0[64] [ 520.420969][ T64] preempt=0x00000000 lock=0->1 RCU=0->0 workfn=hci_rx_work [ 520.445777][ T64] 1 lock held by kworker/u33:0/64: [ 520.447869][ T64] #0: ffff88802487c518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f2/0x8ea0 [ 520.451958][ T64] CPU: 0 PID: 64 Comm: kworker/u33:0 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 520.457788][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 520.463062][ T64] Workqueue: hci2 hci_rx_work [ 520.464883][ T64] Call Trace: [ 520.466162][ T64] [ 520.467298][ T64] dump_stack_lvl+0x16c/0x1f0 [ 520.469100][ T64] process_one_work+0x11ea/0x1b40 [ 520.471089][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 520.473162][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 520.475292][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 520.477716][ T64] ? __pfx_process_one_work+0x10/0x10 [ 520.480092][ T64] ? assign_work+0x1a0/0x250 [ 520.482211][ T64] worker_thread+0x6c8/0xf30 [ 520.484380][ T64] ? __pfx_worker_thread+0x10/0x10 [ 520.486637][ T64] kthread+0x2c1/0x3a0 [ 520.488590][ T64] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.490971][ T64] ? __pfx_kthread+0x10/0x10 [ 520.492931][ T64] ret_from_fork+0x45/0x80 [ 520.495022][ T64] ? __pfx_kthread+0x10/0x10 [ 520.497164][ T64] ret_from_fork_asm+0x1a/0x30 [ 520.499474][ T64] SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 520.524934][ T40] audit: type=1400 audit(1720316606.249:1223): avc: denied { write } for pid=5190 comm="syz-executor" path="pipe:[3563]" dev="pipefs" ino=3563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 520.685113][T15618] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 520.761504][ T64] [ 520.762658][ T64] ====================================================== [ 520.765604][ T64] WARNING: possible circular locking dependency detected [ 520.768465][ T64] 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 Not tainted [ 520.771721][ T64] ------------------------------------------------------ [ 520.789661][ T64] kworker/u33:0/64 is trying to acquire lock: [ 520.792492][ T64] ffff888039472148 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 520.797062][ T64] [ 520.797062][ T64] but task is already holding lock: [ 520.800609][ T64] ffff88802487c518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f2/0x8ea0 [ 520.837102][ T64] [ 520.837102][ T64] which lock already depends on the new lock. [ 520.837102][ T64] [ 520.841675][ T64] [ 520.841675][ T64] the existing dependency chain (in reverse order) is: [ 520.845981][ T64] [ 520.845981][ T64] -> #1 (&chan->lock/1){+.+.}-{3:3}: [ 520.849828][ T64] lock_release+0x33e/0x6c0 [ 520.852104][ T64] process_one_work+0xa96/0x1b40 [ 520.854515][ T64] worker_thread+0x6c8/0xf30 [ 520.856813][ T64] kthread+0x2c1/0x3a0 [ 520.859039][ T64] ret_from_fork+0x45/0x80 [ 520.872537][ T64] ret_from_fork_asm+0x1a/0x30 [ 520.874916][ T64] [ 520.874916][ T64] -> #0 ((wq_completion)hci2#2){+.+.}-{0:0}: [ 520.879002][ T64] __lock_acquire+0x2478/0x3b30 [ 520.882257][ T64] lock_acquire+0x1b1/0x560 [ 520.884510][ T64] process_one_work+0x12a6/0x1b40 [ 520.886946][ T64] worker_thread+0x6c8/0xf30 [ 520.889138][ T64] kthread+0x2c1/0x3a0 [ 520.891342][ T64] ret_from_fork+0x45/0x80 [ 520.893716][ T64] ret_from_fork_asm+0x1a/0x30 [ 520.899382][ T64] [ 520.899382][ T64] other info that might help us debug this: [ 520.899382][ T64] [ 520.904202][ T64] Possible unsafe locking scenario: [ 520.904202][ T64] [ 520.907562][ T64] CPU0 CPU1 [ 520.910084][ T64] ---- ---- [ 520.912572][ T64] lock(&chan->lock/1); [ 520.914484][ T64] lock((wq_completion)hci2#2); [ 520.917807][ T64] lock(&chan->lock/1); [ 520.920888][ T64] lock((wq_completion)hci2#2); [ 520.923066][ T64] [ 520.923066][ T64] *** DEADLOCK *** [ 520.923066][ T64] [ 520.927447][ T64] 1 lock held by kworker/u33:0/64: [ 520.930340][ T64] #0: ffff88802487c518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f2/0x8ea0 [ 520.935072][ T64] [ 520.935072][ T64] stack backtrace: [ 520.938472][ T64] CPU: 2 PID: 64 Comm: kworker/u33:0 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 520.944283][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 520.949504][ T64] Workqueue: hci2 hci_conn_timeout [ 520.951834][ T64] Call Trace: [ 520.953421][ T64] [ 520.954853][ T64] dump_stack_lvl+0x116/0x1f0 [ 520.957276][ T64] check_noncircular+0x31a/0x400 [ 520.960175][ T64] ? __pfx_check_noncircular+0x10/0x10 [ 520.963058][ T64] ? lockdep_lock+0xc6/0x200 [ 520.965259][ T64] ? __pfx_lockdep_lock+0x10/0x10 [ 520.968413][ T64] __lock_acquire+0x2478/0x3b30 [ 520.970881][ T64] ? __pfx___lock_acquire+0x10/0x10 [ 520.973423][ T64] ? __pfx_mark_lock+0x10/0x10 [ 520.975912][ T64] ? find_held_lock+0x2d/0x110 [ 520.978372][ T64] lock_acquire+0x1b1/0x560 [ 520.980570][ T64] ? process_one_work+0x1277/0x1b40 [ 520.983505][ T64] ? __pfx_lock_acquire+0x10/0x10 [ 520.987162][ T64] ? __pfx_lock_release+0x10/0x10 [ 520.990048][ T64] ? mark_held_locks+0x9f/0xe0 [ 520.992833][ T64] ? process_one_work+0x1277/0x1b40 [ 520.995625][ T64] process_one_work+0x12a6/0x1b40 [ 520.998043][ T64] ? process_one_work+0x1277/0x1b40 [ 521.000640][ T64] ? __pfx_lock_acquire+0x10/0x10 [ 521.002939][ T64] ? __pfx_process_one_work+0x10/0x10 [ 521.005724][ T64] ? assign_work+0x1a0/0x250 [ 521.008336][ T64] worker_thread+0x6c8/0xf30 [ 521.010829][ T64] ? __pfx_worker_thread+0x10/0x10 [ 521.013231][ T64] kthread+0x2c1/0x3a0 [ 521.015258][ T64] ? _raw_spin_unlock_irq+0x23/0x50 [ 521.018203][ T64] ? __pfx_kthread+0x10/0x10 [ 521.020390][ T64] ret_from_fork+0x45/0x80 [ 521.022819][ T64] ? __pfx_kthread+0x10/0x10 [ 521.025304][ T64] ret_from_fork_asm+0x1a/0x30 [ 521.027592][ T64] [ 521.033832][ T64] BUG: workqueue leaked atomic, lock or RCU: kworker/u33:0[64] [ 521.033832][ T64] preempt=0x00000000 lock=1->0 RCU=0->0 workfn=hci_conn_timeout [ 521.043649][ T64] INFO: lockdep is turned off. [ 521.045849][ T64] CPU: 2 PID: 64 Comm: kworker/u33:0 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 521.050596][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 521.056100][ T64] Workqueue: hci2 hci_conn_timeout [ 521.058640][ T64] Call Trace: [ 521.060145][ T64] [ 521.061471][ T64] dump_stack_lvl+0x16c/0x1f0 [ 521.063622][ T64] process_one_work+0x11ea/0x1b40 [ 521.065938][ T64] ? __pfx_hci_conn_timeout+0x10/0x10 [ 521.068643][ T64] ? __pfx_hci_conn_timeout+0x10/0x10 [ 521.072007][ T64] ? __pfx_hci_conn_timeout+0x10/0x10 [ 521.075157][ T64] ? __pfx_process_one_work+0x10/0x10 [ 521.077730][ T64] ? assign_work+0x1a0/0x250 [ 521.079877][ T64] worker_thread+0x6c8/0xf30 [ 521.082504][ T64] ? __pfx_worker_thread+0x10/0x10 [ 521.084930][ T64] kthread+0x2c1/0x3a0 [ 521.086833][ T64] ? _raw_spin_unlock_irq+0x23/0x50 [ 521.089243][ T64] ? __pfx_kthread+0x10/0x10 [ 521.091431][ T64] ret_from_fork+0x45/0x80 [ 521.093725][ T64] ? __pfx_kthread+0x10/0x10 [ 521.095718][ T64] ret_from_fork_asm+0x1a/0x30 [ 521.097994][ T64] [ 521.300748][ T5249] usb usb16-port1: unable to enumerate USB device [ 522.608045][ T1092] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.687473][ T1092] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.918254][ T1092] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.103823][ T1092] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.323202][ T1092] bridge_slave_1: left allmulticast mode [ 523.327271][ T1092] bridge_slave_1: left promiscuous mode [ 523.329959][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.377102][ T1092] bridge_slave_0: left allmulticast mode [ 523.476404][ T1092] bridge_slave_0: left promiscuous mode [ 523.479085][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.017821][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.025236][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.082043][ T1092] bond0 (unregistering): Released all slaves [ 524.893040][ T1092] hsr_slave_0: left promiscuous mode [ 524.897121][ T1092] hsr_slave_1: left promiscuous mode [ 524.904987][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.908427][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.961800][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.965147][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.972583][ T1092] veth1_macvtap: left promiscuous mode [ 524.975629][ T1092] veth0_macvtap: left promiscuous mode [ 524.978359][ T1092] veth1_vlan: left promiscuous mode [ 525.000744][ T1092] veth0_vlan: left promiscuous mode [ 526.304406][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 526.452729][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 527.760042][ T1092] bond1: left allmulticast mode [ 527.770505][ T1092] bridge1: left allmulticast mode [ 527.773252][ T1092] bond1: left promiscuous mode [ 527.775907][ T1092] bridge1: left promiscuous mode [ 527.778909][ T1092] bridge0: port 3(bond1) entered disabled state [ 527.793552][ T1092] bridge_slave_1: left allmulticast mode [ 527.796347][ T1092] bridge_slave_1: left promiscuous mode [ 527.801663][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.808275][ T1092] bridge_slave_0: left allmulticast mode [ 527.811095][ T1092] bridge_slave_0: left promiscuous mode [ 527.813773][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.114554][ T1092] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 528.251010][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.280620][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.304118][ T1092] bond0 (unregistering): Released all slaves [ 528.316139][ T1092] bond1 (unregistering): Released all slaves [ 529.201167][ T1092] hsr_slave_0: left promiscuous mode [ 529.204594][ T1092] hsr_slave_1: left promiscuous mode [ 529.210707][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.213759][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.219492][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.225484][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.281411][ T1092] veth1_macvtap: left promiscuous mode [ 529.284271][ T1092] veth0_macvtap: left promiscuous mode [ 529.286924][ T1092] veth1_vlan: left promiscuous mode [ 529.289398][ T1092] veth0_vlan: left promiscuous mode [ 530.081034][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 530.302625][ T1092] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 01:43:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fd2cc5 RDI=ffffffff94dd71a0 RBP=ffffffff94dd7160 RSP=ffffc90000d17880 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000015 R12=0000000000000000 R13=0000000000000078 R14=ffffffff84fd2c60 R15=0000000000000000 RIP=ffffffff84fd2cef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f594e97ffa8 CR3=00000000410ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8159bbe7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f594dbe4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f594dbe4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f594dbe432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f594dbe4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f594dbe43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f594dbe44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f594dcd4488 00007f594dcd4480 00007f594dcd4478 00007f594dcd4450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f594e83d100 00007f594dcd4440 00007f594dcd4458 00007f594dcd44a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f594dcd4498 00007f594dcd4490 00007f594dcd4488 00007f594dcd4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000778677 RBX=0000000000000001 RCX=ffffffff8ae767b9 RDX=0000000000000000 RSI=ffffffff8b2caf00 RDI=ffffffff8b8ff680 RBP=ffffed1002fd6910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d626fdd R10=ffff88806b137eeb R11=0000000000000000 R12=0000000000000001 R13=ffff888017eb4880 R14=ffffffff8fe43850 R15=0000000000000000 RIP=ffffffff8ae77baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000201d2000 CR3=0000000020a6e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=374594626b7638e0 11bd962e430a1007 374594626b7638e0 11bd962e430a1007 374594626b7638e0 11bd962e430a1007 374594626b7638e0 11bd962e430a1007 ZMM18=a8c58b2862c8d4c0 b8af52d23c274097 a8c58b2862c8d4c0 b8af52d23c274097 a8c58b2862c8d4c0 b8af52d23c274097 a8c58b2862c8d4c0 b8af52d23c274097 ZMM19=fd1a000000000000 000000000000007a fd1a000000000000 0000000000000079 fd1a000000000000 0000000000000078 fd1a000000000000 0000000000000077 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=11bd962e11bd962e 11bd962e11bd962e 11bd962e11bd962e 11bd962e11bd962e 11bd962e11bd962e 11bd962e11bd962e 11bd962e11bd962e 11bd962e11bd962e ZMM22=6b7638e06b7638e0 6b7638e06b7638e0 6b7638e06b7638e0 6b7638e06b7638e0 6b7638e06b7638e0 6b7638e06b7638e0 6b7638e06b7638e0 6b7638e06b7638e0 ZMM23=3745946237459462 3745946237459462 3745946237459462 3745946237459462 3745946237459462 3745946237459462 3745946237459462 3745946237459462 ZMM24=3c2740973c274097 3c2740973c274097 3c2740973c274097 3c2740973c274097 3c2740973c274097 3c2740973c274097 3c2740973c274097 3c2740973c274097 ZMM25=b8af52d2b8af52d2 b8af52d2b8af52d2 b8af52d2b8af52d2 b8af52d2b8af52d2 b8af52d2b8af52d2 b8af52d2b8af52d2 b8af52d2b8af52d2 b8af52d2b8af52d2 ZMM26=62c8d4c062c8d4c0 62c8d4c062c8d4c0 62c8d4c062c8d4c0 62c8d4c062c8d4c0 62c8d4c062c8d4c0 62c8d4c062c8d4c0 62c8d4c062c8d4c0 62c8d4c062c8d4c0 ZMM27=a8c58b28a8c58b28 a8c58b28a8c58b28 a8c58b28a8c58b28 a8c58b28a8c58b28 a8c58b28a8c58b28 a8c58b28a8c58b28 a8c58b28a8c58b28 a8c58b28a8c58b28 ZMM28=000000800000007f 0000007e0000007d 0000007c0000007b 0000007a00000079 0000007800000077 0000007600000075 0000007400000073 0000007200000071 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fd1a0000fd1a0000 fd1a0000fd1a0000 fd1a0000fd1a0000 fd1a0000fd1a0000 fd1a0000fd1a0000 fd1a0000fd1a0000 fd1a0000fd1a0000 fd1a0000fd1a0000 info registers vcpu 2 CPU#2 RAX=ffffffff942f32d8 RBX=ffff888023545388 RCX=1ffffffff285e667 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff942f3338 RBP=ffffc90004087970 RSP=ffffc90004087830 R8 =0000000000000000 R9 =fffffbfff284ca85 R10=ffffffff9426542f R11=0000000000000001 R12=ffff888023544880 R13=0000000000000100 R14=0000000000000008 R15=1ffff92000810f0c RIP=ffffffff816b7c44 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 00007f7999c656c0 000fffff 00000000 GS =0000 ffff88806b200000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f405ff8 CR3=0000000052b3e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000014 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8130933d ffffffff81309313 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff81309313 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81309313 ffffffff81309313 ffffffff813092eb ffffffff813092eb ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76f63d100 00007fa76ead4440 00007fa700040008 000c00000010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76ead4498 00007fa76ead4490 00007fa76ead4488 00007fa76ead4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000036623d RBX=0000000000000003 RCX=ffffffff8ae767b9 RDX=0000000000000000 RSI=ffffffff8b2caf00 RDI=ffffffff8b8ff680 RBP=ffffed1002fd9488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d666fdd R10=ffff88806b337eeb R11=0000000000000000 R12=0000000000000003 R13=ffff888017eca440 R14=ffffffff8fe43850 R15=0000000000000000 RIP=ffffffff8ae77baf RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa76f7b0fa8 CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0b3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e9e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76ead4488 00007fa76ead4480 00007fa76ead4478 00007fa76ead4450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76f63d100 00007fa76ead4440 00007fa76ead4458 00007fa76ead44a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76ead4498 00007fa76ead4490 00007fa76ead4488 00007fa76ead4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000