last executing test programs: 1.060296297s ago: executing program 1 (id=954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.060039701s ago: executing program 1 (id=956): unshare(0x2040400) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x22000400) fsmount(r0, 0x0, 0x0) 1.002397467s ago: executing program 1 (id=957): mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='rxrpc_client\x00', r1, 0x0, 0x3}, 0x18) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 729.172535ms ago: executing program 0 (id=969): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 680.354656ms ago: executing program 0 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2}, 0x48) semget(0x3, 0x0, 0x145) 680.225501ms ago: executing program 0 (id=972): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x10, 0x0, {0xa, 0x4e20, 0x0, @loopback, 0x5}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 610.274994ms ago: executing program 0 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1, 0x0, 0x3}, 0x18) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r5, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x94) 610.035623ms ago: executing program 0 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000080), 0x0) 550.110469ms ago: executing program 0 (id=978): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x72}, {0x3}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 250.6131ms ago: executing program 2 (id=986): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 250.163904ms ago: executing program 2 (id=988): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) set_mempolicy(0x0, 0x0, 0x6) socket(0x10, 0x3, 0x0) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x8000, r2, 'id0\x00'}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 177.826571ms ago: executing program 3 (id=990): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 177.446713ms ago: executing program 2 (id=991): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="1cf800", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x3, 0x7, 0x2c, 0x66, 0x0, 0x9, 0x1, 0x0, @remote, @remote, {[@rr={0x7, 0x3, 0x6}]}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x10229, 0x7, 0x6}}}}}, 0x0) 177.245027ms ago: executing program 3 (id=992): syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x1, 0xa, 0x4, 0x68, 0x8001, 0x2, 0x2, 0x1ff, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) 120.120161ms ago: executing program 1 (id=993): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3fb, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 119.855554ms ago: executing program 3 (id=994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1, 0x0, 0x3}, 0x18) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r6, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r3}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x94) 119.720004ms ago: executing program 3 (id=995): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="c40000001900010000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000004e2400000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000000004e0000008080000000000000000000000000000000e3ffffffffffffff00000000000000000300f70000000000feffffffffffff010000000000000000ff"], 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 49.158667ms ago: executing program 1 (id=996): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x154}}, 0x8044) epoll_create1(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x3260, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x21e}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000bc0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000ac0)=[{0x2a, 0x0, [0x8, 0xe3, 0x3d9, 0x2, 0xd3b5, 0x3, 0x9, 0x8, 0x6, 0x743, 0x64e, 0x14000000, 0x8, 0x0, 0xfffffffd, 0x9]}, {0x10, 0x0, [0x9, 0x978, 0x8, 0x81, 0xfffffbff, 0xdcd, 0xd73, 0x3, 0x3, 0x6, 0xb, 0xd, 0xffffc733, 0x44, 0xe77, 0x8]}, {0x14, 0x0, [0x968e, 0x4, 0x2f, 0x4100, 0x2, 0x8f, 0x1, 0x0, 0x1, 0x2, 0x1, 0x80000000, 0x5, 0x70d1, 0x1, 0x9]}], 0xffffffffffffffff, 0x1, 0x1, 0xd8}}, 0x20) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e725f626c6f636b733d332c6ebe05000000000000191b2fef20213d6d2c001398d0bda43addf80d30bb7af7de8a0dd861e73f9e68ea8cf388fddf4c3b32714bad33d01129117317b0649d8fb52d552a5cbe1cd308e4c17f9d7765ea7f92db7f0c0744de690bbf2bdecc6f3d74a65a280ed72547e0d47a8612a741067cef1f46b7ecc8b7586010da7320d4da52a4bbec213ee76c896a5cd6b7102b5eccc746717b3559e2"]) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r4 = dup(r3) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="980000000102010400000000000000000a00000004000180440003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000c000000000000000000000000000000000006000340000000003c0002800c00028004000100000000002c0001801400030000000000000000000000000000000001140004"], 0x98}}, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x20, 0xc, 0x2, 0x241, 0x0, 0x10003, 0x0}) 49.005648ms ago: executing program 2 (id=997): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 48.840936ms ago: executing program 3 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x8001}, 0x18) getrandom(0x0, 0x0, 0x0) 48.432296ms ago: executing program 2 (id=999): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) 221.98µs ago: executing program 3 (id=1000): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) set_mempolicy(0x0, 0x0, 0x6) socket(0x10, 0x3, 0x0) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x8000, r2, 'id0\x00'}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 87.417µs ago: executing program 1 (id=1001): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 2 (id=1002): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x716, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/159, 0x9f}, 0x9}], 0x1, 0x10140, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62985' (ED25519) to the list of known hosts. [ 39.035660][ T40] audit: type=1400 audit(1752559110.174:62): avc: denied { name_bind } for pid=5865 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.057862][ T40] audit: type=1400 audit(1752559110.194:63): avc: denied { write } for pid=5866 comm="sh" path="pipe:[5773]" dev="pipefs" ino=5773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.070267][ T40] audit: type=1400 audit(1752559110.204:64): avc: denied { execute } for pid=5866 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.076879][ T40] audit: type=1400 audit(1752559110.204:65): avc: denied { execute_no_trans } for pid=5866 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.125162][ T40] audit: type=1400 audit(1752559112.264:66): avc: denied { mounton } for pid=5866 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.127561][ T5866] cgroup: Unknown subsys name 'net' [ 41.278028][ T5866] cgroup: Unknown subsys name 'cpuset' [ 41.283771][ T5866] cgroup: Unknown subsys name 'rlimit' [ 41.491188][ T5911] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.188264][ T5866] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.214688][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.214698][ T40] audit: type=1400 audit(1752559116.344:80): avc: denied { execmem } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.412894][ T40] audit: type=1400 audit(1752559116.544:81): avc: denied { create } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.421331][ T40] audit: type=1400 audit(1752559116.544:82): avc: denied { read write } for pid=5950 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.428460][ T40] audit: type=1400 audit(1752559116.544:83): avc: denied { read write } for pid=5951 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.435509][ T40] audit: type=1400 audit(1752559116.544:84): avc: denied { open } for pid=5950 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.442484][ T40] audit: type=1400 audit(1752559116.544:85): avc: denied { open } for pid=5951 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.449516][ T40] audit: type=1400 audit(1752559116.554:86): avc: denied { ioctl } for pid=5951 comm="syz-executor" path="socket:[2681]" dev="sockfs" ino=2681 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.450520][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.460051][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.462602][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.465251][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.467721][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.473693][ T5965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.475955][ T5966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.476986][ T5967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.477561][ T40] audit: type=1400 audit(1752559116.614:87): avc: denied { read } for pid=5951 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.477588][ T40] audit: type=1400 audit(1752559116.614:88): avc: denied { open } for pid=5951 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.477609][ T40] audit: type=1400 audit(1752559116.614:89): avc: denied { mounton } for pid=5951 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.479647][ T5965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.487627][ T5967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.487879][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.488248][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.494414][ T5965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.501539][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.502492][ T5967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.502967][ T5967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.503269][ T5967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.506880][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.509749][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.511334][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.661480][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 45.800465][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 45.855090][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.857337][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.859656][ T5951] bridge_slave_0: entered allmulticast mode [ 45.862518][ T5951] bridge_slave_0: entered promiscuous mode [ 45.866502][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 45.885713][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.888027][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.890254][ T5951] bridge_slave_1: entered allmulticast mode [ 45.892906][ T5951] bridge_slave_1: entered promiscuous mode [ 45.901139][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 45.940717][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.967092][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.033821][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.036484][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.038640][ T5959] bridge_slave_0: entered allmulticast mode [ 46.041154][ T5959] bridge_slave_0: entered promiscuous mode [ 46.075996][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.078133][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.080359][ T5959] bridge_slave_1: entered allmulticast mode [ 46.082861][ T5959] bridge_slave_1: entered promiscuous mode [ 46.102646][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.105055][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.107356][ T5950] bridge_slave_0: entered allmulticast mode [ 46.109883][ T5950] bridge_slave_0: entered promiscuous mode [ 46.114451][ T5951] team0: Port device team_slave_0 added [ 46.117917][ T5951] team0: Port device team_slave_1 added [ 46.157283][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.159609][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.161785][ T5950] bridge_slave_1: entered allmulticast mode [ 46.164609][ T5950] bridge_slave_1: entered promiscuous mode [ 46.195560][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.238243][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.240336][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.248203][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.253105][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.256205][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.258389][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.260561][ T5954] bridge_slave_0: entered allmulticast mode [ 46.263067][ T5954] bridge_slave_0: entered promiscuous mode [ 46.268021][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.271300][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.273798][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.282481][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.314804][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.317008][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.319179][ T5954] bridge_slave_1: entered allmulticast mode [ 46.321700][ T5954] bridge_slave_1: entered promiscuous mode [ 46.339864][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.394531][ T5959] team0: Port device team_slave_0 added [ 46.411951][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.417297][ T5950] team0: Port device team_slave_0 added [ 46.421101][ T5959] team0: Port device team_slave_1 added [ 46.440725][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.444541][ T5950] team0: Port device team_slave_1 added [ 46.535924][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.538147][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.547760][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.555739][ T5951] hsr_slave_0: entered promiscuous mode [ 46.558021][ T5951] hsr_slave_1: entered promiscuous mode [ 46.562307][ T5954] team0: Port device team_slave_0 added [ 46.566728][ T5954] team0: Port device team_slave_1 added [ 46.582041][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.584297][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.591787][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.613060][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.615540][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.623124][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.627872][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.630028][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.639077][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.716756][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.719277][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.728641][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.755300][ T5959] hsr_slave_0: entered promiscuous mode [ 46.757523][ T5959] hsr_slave_1: entered promiscuous mode [ 46.759529][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.761997][ T5959] Cannot create hsr debugfs directory [ 46.764553][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.766934][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.775047][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.899474][ T5954] hsr_slave_0: entered promiscuous mode [ 46.901700][ T5954] hsr_slave_1: entered promiscuous mode [ 46.903696][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.906103][ T5954] Cannot create hsr debugfs directory [ 46.939299][ T5950] hsr_slave_0: entered promiscuous mode [ 46.941937][ T5950] hsr_slave_1: entered promiscuous mode [ 46.943901][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.946631][ T5950] Cannot create hsr debugfs directory [ 47.237484][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.244359][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.248694][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.260750][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.297931][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.302956][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.309353][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.313206][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.363490][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.369864][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.379496][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.385176][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.443415][ T5954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.450194][ T5954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.464648][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.466983][ T5954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.473720][ T5954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.508599][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.518850][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.521739][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.531796][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.535990][ T5956] Bluetooth: hci3: command tx timeout [ 47.535995][ T63] Bluetooth: hci0: command tx timeout [ 47.536009][ T5960] Bluetooth: hci1: command tx timeout [ 47.536034][ T5964] Bluetooth: hci2: command tx timeout [ 47.538132][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.546075][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.571796][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.582111][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.584459][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.596481][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.598725][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.604157][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.625049][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.648750][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.651539][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.660123][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.665551][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.667763][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.683992][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.697921][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.700169][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.713729][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.715930][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.740874][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.774190][ T5951] veth0_vlan: entered promiscuous mode [ 47.780043][ T5951] veth1_vlan: entered promiscuous mode [ 47.792643][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.803579][ T5951] veth0_macvtap: entered promiscuous mode [ 47.810563][ T5951] veth1_macvtap: entered promiscuous mode [ 47.826698][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.834213][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.838954][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.841639][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.844557][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.847147][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.851788][ T5950] veth0_vlan: entered promiscuous mode [ 47.858378][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.871763][ T5950] veth1_vlan: entered promiscuous mode [ 47.883717][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.928679][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.931992][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.935384][ T5950] veth0_macvtap: entered promiscuous mode [ 47.951482][ T5959] veth0_vlan: entered promiscuous mode [ 47.959344][ T5950] veth1_macvtap: entered promiscuous mode [ 47.961736][ T5954] veth0_vlan: entered promiscuous mode [ 47.970629][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.971646][ T5959] veth1_vlan: entered promiscuous mode [ 47.973067][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.981496][ T5954] veth1_vlan: entered promiscuous mode [ 47.985482][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.995959][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.009556][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.012925][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.018205][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.021561][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.030239][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.043600][ T5954] veth0_macvtap: entered promiscuous mode [ 48.055681][ T5954] veth1_macvtap: entered promiscuous mode [ 48.063904][ T5959] veth0_macvtap: entered promiscuous mode [ 48.077285][ T5959] veth1_macvtap: entered promiscuous mode [ 48.085865][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.086830][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.088294][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.106903][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.114429][ T6041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5'. [ 48.117152][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'. [ 48.120373][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.125813][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.128287][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.130474][ T6041] netlink: 'syz.1.5': attribute type 10 has an invalid length. [ 48.134360][ T5954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.137201][ T5954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.139891][ T5954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.142583][ T5954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.147670][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.151911][ T6041] bridge0: port 3(team0) entered blocking state [ 48.153963][ T6041] bridge0: port 3(team0) entered disabled state [ 48.156330][ T6041] team0: entered allmulticast mode [ 48.157953][ T6041] team_slave_0: entered allmulticast mode [ 48.159733][ T6041] team_slave_1: entered allmulticast mode [ 48.162511][ T6041] team0: entered promiscuous mode [ 48.164106][ T6041] team_slave_0: entered promiscuous mode [ 48.166364][ T6041] team_slave_1: entered promiscuous mode [ 48.168741][ T6041] bridge0: port 3(team0) entered blocking state [ 48.170866][ T6041] bridge0: port 3(team0) entered forwarding state [ 48.175533][ T5959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.178242][ T5959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.180967][ T5959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.183636][ T5959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.206183][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.214687][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 48.226069][ T6043] team0: left allmulticast mode [ 48.227614][ T6043] team_slave_0: left allmulticast mode [ 48.229325][ T6043] team_slave_1: left allmulticast mode [ 48.231621][ T6043] team0: left promiscuous mode [ 48.233159][ T6043] team_slave_0: left promiscuous mode [ 48.236269][ T6043] team_slave_1: left promiscuous mode [ 48.238351][ T6043] bridge0: port 3(team0) entered disabled state [ 48.241876][ T6043] bridge_slave_1: left allmulticast mode [ 48.243677][ T6043] bridge_slave_1: left promiscuous mode [ 48.245992][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.249810][ T6043] bridge_slave_0: left allmulticast mode [ 48.251590][ T6043] bridge_slave_0: left promiscuous mode [ 48.253482][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.302905][ T6046] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 48.341044][ T1202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.343504][ T1202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.371096][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.373563][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.380261][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.383500][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.390082][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.393322][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.470465][ T6055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7'. [ 48.684301][ T5999] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.844331][ T5999] usb 5-1: Using ep0 maxpacket: 8 [ 48.847791][ T5999] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 48.850289][ T5999] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 48.853688][ T5999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 48.857803][ T5999] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 48.861235][ T5999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 48.864556][ T5999] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.869559][ T5999] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 48.872339][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.082280][ T5999] usb 5-1: GET_CAPABILITIES returned 0 [ 49.084177][ T5999] usbtmc 5-1:16.0: can't read capabilities [ 49.285745][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 49.288881][ C2] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 49.292760][ T6052] usbtmc 5-1:16.0: Unable to send data, error -71 [ 49.307793][ T6052] syz.0.1: attempt to access beyond end of device [ 49.307793][ T6052] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 49.311792][ T6052] SQUASHFS error: Failed to read block 0x0: -5 [ 49.313851][ T6052] unable to read squashfs_super_block [ 49.321794][ T29] usb 5-1: USB disconnect, device number 2 [ 49.430758][ T6074] all: renamed from lo (while UP) [ 49.517135][ T6076] netlink: 'syz.3.15': attribute type 4 has an invalid length. [ 49.602482][ T6079] netlink: 'syz.3.15': attribute type 4 has an invalid length. [ 49.614521][ T63] Bluetooth: hci3: command tx timeout [ 49.614581][ T5956] Bluetooth: hci1: command tx timeout [ 49.615392][ T5964] Bluetooth: hci2: command tx timeout [ 49.624374][ T5956] Bluetooth: hci0: command tx timeout [ 50.343113][ T40] kauditd_printk_skb: 215 callbacks suppressed [ 50.343123][ T40] audit: type=1400 audit(1752559121.474:305): avc: denied { create } for pid=6105 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.352510][ T40] audit: type=1400 audit(1752559121.484:306): avc: denied { write } for pid=6105 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.359090][ T40] audit: type=1400 audit(1752559121.484:307): avc: denied { nlmsg_write } for pid=6105 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.391140][ T40] audit: type=1400 audit(1752559121.524:308): avc: denied { read write } for pid=6066 comm="syz.2.12" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.399672][ T40] audit: type=1400 audit(1752559121.524:309): avc: denied { open } for pid=6066 comm="syz.2.12" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.409698][ T40] audit: type=1400 audit(1752559121.534:310): avc: denied { mounton } for pid=6066 comm="syz.2.12" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.421620][ T40] audit: type=1400 audit(1752559121.554:311): avc: denied { bind } for pid=6110 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.428014][ T40] audit: type=1400 audit(1752559121.554:312): avc: denied { name_bind } for pid=6110 comm="syz.3.29" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.434738][ T40] audit: type=1400 audit(1752559121.554:313): avc: denied { node_bind } for pid=6110 comm="syz.3.29" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 50.571925][ T40] audit: type=1400 audit(1752559121.704:314): avc: denied { create } for pid=6066 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.902596][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 50.905761][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.931234][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.008458][ T5999] IPVS: starting estimator thread 0... [ 51.104499][ T6125] IPVS: using max 43 ests per chain, 103200 per kthread [ 51.289958][ T72] cfg80211: failed to load regulatory.db [ 51.694662][ T5956] Bluetooth: hci2: command tx timeout [ 51.694770][ T5964] Bluetooth: hci0: command tx timeout [ 51.694845][ T5960] Bluetooth: hci1: command tx timeout [ 51.695376][ T63] Bluetooth: hci3: command tx timeout [ 51.747617][ T6156] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 52.102723][ T837] Process accounting resumed [ 52.569276][ T6214] process 'syz.0.71' launched './file1' with NULL argv: empty string added [ 52.580086][ T6212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.797193][ T6226] netlink: 3 bytes leftover after parsing attributes in process `syz.0.77'. [ 52.800686][ T6226] 0X: renamed from caif0 [ 52.805750][ T6226] 0X: entered allmulticast mode [ 52.813025][ T6226] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 52.822825][ T6226] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 52.881774][ T6239] Zero length message leads to an empty skb [ 53.084544][ T6267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6267 comm=syz.3.95 [ 53.106304][ T6265] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.96' sets config #0 [ 53.270659][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 53.377853][ T6294] Invalid ELF header magic: != ELF [ 53.415687][ T6311] 9pnet_fd: Insufficient options for proto=fd [ 53.462246][ T6319] netlink: 340 bytes leftover after parsing attributes in process `syz.3.121'. [ 53.465906][ T6319] netlink: 48 bytes leftover after parsing attributes in process `syz.3.121'. [ 53.507593][ T6325] veth2: entered allmulticast mode [ 53.651076][ T6331] syz.0.120 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.794290][ T5964] Bluetooth: hci0: command tx timeout [ 53.794421][ T5960] Bluetooth: hci3: command tx timeout [ 53.798265][ T5956] Bluetooth: hci1: command tx timeout [ 53.800633][ T63] Bluetooth: hci2: command tx timeout [ 53.862714][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 54.581091][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 54.782089][ T6390] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 54.977824][ T6427] netlink: 100 bytes leftover after parsing attributes in process `syz.0.164'. [ 55.028974][ T6434] Driver unsupported XDP return value 0 on prog (id 105) dev N/A, expect packet loss! [ 55.061910][ T6443] netlink: 'syz.2.171': attribute type 13 has an invalid length. [ 55.104069][ T6444] netlink: 128 bytes leftover after parsing attributes in process `syz.1.170'. [ 55.107338][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.107870][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.170844][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.178373][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.227395][ T6443] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.230085][ T6443] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.232707][ T6443] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.235452][ T6443] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.406173][ T40] kauditd_printk_skb: 569 callbacks suppressed [ 55.406185][ T40] audit: type=1400 audit(1752559126.544:884): avc: denied { name_bind } for pid=6462 comm="syz.3.178" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.414997][ T40] audit: type=1400 audit(1752559126.544:885): avc: denied { node_bind } for pid=6462 comm="syz.3.178" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 55.491604][ T40] audit: type=1400 audit(1752559126.624:886): avc: denied { create } for pid=6466 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.588437][ T40] audit: type=1400 audit(1752559126.724:887): avc: denied { bind } for pid=6466 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.591171][ T6467] rdma_op ffff888035cf71f0 conn xmit_rdma 0000000000000000 [ 55.595110][ T40] audit: type=1400 audit(1752559126.724:888): avc: denied { write } for pid=6466 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.622469][ T40] audit: type=1326 audit(1752559126.754:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.182" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7161f8e929 code=0x7ffc0000 [ 55.629589][ T40] audit: type=1326 audit(1752559126.754:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.182" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7161f8e929 code=0x7ffc0000 [ 55.636970][ T40] audit: type=1326 audit(1752559126.754:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.182" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7161f8e929 code=0x7ffc0000 [ 55.644031][ T40] audit: type=1326 audit(1752559126.754:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.182" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7161f8e929 code=0x7ffc0000 [ 55.652690][ T40] audit: type=1326 audit(1752559126.754:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.182" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7161f8e929 code=0x7ffc0000 [ 55.818327][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 55.878644][ T6500] SELinux: policydb version 0 does not match my version range 15-34 [ 55.881409][ T6500] SELinux: failed to load policy [ 56.003653][ T6517] SET target dimension over the limit! [ 56.026675][ T6521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.205'. [ 56.029674][ T6521] netem: unknown loss type 12 [ 56.031695][ T6521] netem: change failed [ 56.102872][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 56.206715][ T6541] netlink: 'syz.1.214': attribute type 10 has an invalid length. [ 56.211193][ T6541] team0: Device dummy0 is up. Set it down before adding it as a team port [ 56.301222][ T6552] netlink: 'syz.1.218': attribute type 3 has an invalid length. [ 56.491504][ T6566] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 56.579637][ T6572] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.585287][ T6572] Cannot find map_set index 0 as target [ 57.520204][ T6609] syz.1.242: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 57.526049][ T6609] CPU: 1 UID: 0 PID: 6609 Comm: syz.1.242 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 57.526074][ T6609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.526084][ T6609] Call Trace: [ 57.526091][ T6609] [ 57.526098][ T6609] dump_stack_lvl+0x16c/0x1f0 [ 57.526129][ T6609] warn_alloc+0x248/0x3a0 [ 57.526154][ T6609] ? __pfx_warn_alloc+0x10/0x10 [ 57.526176][ T6609] ? stack_depot_save_flags+0x354/0xa40 [ 57.526226][ T6609] ? kasan_save_stack+0x42/0x60 [ 57.526246][ T6609] ? kasan_save_stack+0x33/0x60 [ 57.526265][ T6609] ? kasan_save_track+0x14/0x30 [ 57.526284][ T6609] ? xskq_create+0x52/0x1d0 [ 57.526302][ T6609] ? xsk_setsockopt+0x640/0x840 [ 57.526319][ T6609] ? do_sock_setsockopt+0x224/0x470 [ 57.526351][ T6609] ? xskq_create+0xfb/0x1d0 [ 57.526374][ T6609] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 57.526404][ T6609] ? xskq_create+0xfb/0x1d0 [ 57.526427][ T6609] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 57.526454][ T6609] ? xskq_create+0xfb/0x1d0 [ 57.526475][ T6609] vmalloc_user_noprof+0x9e/0xe0 [ 57.526493][ T6609] ? xskq_create+0xfb/0x1d0 [ 57.526513][ T6609] xskq_create+0xfb/0x1d0 [ 57.526536][ T6609] xsk_setsockopt+0x640/0x840 [ 57.526556][ T6609] ? __pfx_xsk_setsockopt+0x10/0x10 [ 57.526575][ T6609] ? __lock_acquire+0x622/0x1c90 [ 57.526598][ T6609] ? selinux_socket_setsockopt+0x6a/0x80 [ 57.526620][ T6609] ? __pfx_xsk_setsockopt+0x10/0x10 [ 57.526639][ T6609] do_sock_setsockopt+0x224/0x470 [ 57.526666][ T6609] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 57.526709][ T6609] __sys_setsockopt+0x1a0/0x230 [ 57.526738][ T6609] __x64_sys_setsockopt+0xbd/0x160 [ 57.526759][ T6609] ? do_syscall_64+0x91/0x4c0 [ 57.526783][ T6609] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.526814][ T6609] do_syscall_64+0xcd/0x4c0 [ 57.526842][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.526861][ T6609] RIP: 0033:0x7fc78198e929 [ 57.526877][ T6609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.526894][ T6609] RSP: 002b:00007fc782802038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.526911][ T6609] RAX: ffffffffffffffda RBX: 00007fc781bb5fa0 RCX: 00007fc78198e929 [ 57.526922][ T6609] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 57.526932][ T6609] RBP: 00007fc781a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 57.526942][ T6609] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.526953][ T6609] R13: 0000000000000000 R14: 00007fc781bb5fa0 R15: 00007fff7a728338 [ 57.526977][ T6609] [ 57.527004][ T6609] Mem-Info: [ 57.612641][ T6609] active_anon:11351 inactive_anon:0 isolated_anon:0 [ 57.612641][ T6609] active_file:639 inactive_file:50819 isolated_file:0 [ 57.612641][ T6609] unevictable:1768 dirty:1747 writeback:0 [ 57.612641][ T6609] slab_reclaimable:11268 slab_unreclaimable:85018 [ 57.612641][ T6609] mapped:27371 shmem:5269 pagetables:1215 [ 57.612641][ T6609] sec_pagetables:304 bounce:0 [ 57.612641][ T6609] kernel_misc_reclaimable:0 [ 57.612641][ T6609] free:432431 free_pcp:25799 free_cma:0 [ 57.627208][ T6609] Node 0 active_anon:45404kB inactive_anon:0kB active_file:2556kB inactive_file:203076kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:109360kB dirty:6988kB writeback:0kB shmem:17540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:4660kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB [ 57.638129][ T6609] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 57.648608][ T6609] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 57.658100][ T6609] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 57.660006][ T6609] Node 0 DMA32 free:119680kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45528kB inactive_anon:0kB active_file:2556kB inactive_file:203076kB unevictable:3536kB writepending:6988kB present:2080628kB managed:1264184kB mlocked:0kB bounce:0kB free_pcp:71268kB local_pcp:25276kB free_cma:0kB [ 57.670426][ T6609] lowmem_reserve[]: 0 0 0 0 0 [ 57.672450][ T6609] Node 1 Normal free:1594684kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:32176kB local_pcp:14408kB free_cma:0kB [ 57.681944][ T6609] lowmem_reserve[]: 0 0 0 0 0 [ 57.683598][ T6609] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 57.687603][ T6609] Node 0 DMA32: 72*4kB (UE) 418*8kB (UE) 211*16kB (UME) 359*32kB (UME) 91*64kB (UME) 78*128kB (UME) 25*256kB (UM) 16*512kB (UME) 19*1024kB (UME) 7*2048kB (UM) 9*4096kB (M) = 119552kB [ 57.693399][ T6609] Node 1 Normal: 77*4kB (UME) 43*8kB (UME) 41*16kB (UME) 21*32kB (UME) 16*64kB (UME) 9*128kB (UME) 5*256kB (U) 6*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 386*4096kB (UM) = 1594684kB [ 57.699803][ T6609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.702877][ T6609] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.705897][ T6609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.708802][ T6609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 57.711884][ T6609] 56723 total pagecache pages [ 57.713369][ T6609] 0 pages in swap cache [ 57.714868][ T6609] Free swap = 124996kB [ 57.716169][ T6609] Total swap = 124996kB [ 57.717490][ T6609] 1048443 pages RAM [ 57.718694][ T6609] 0 pages HighMem/MovableOnly [ 57.720163][ T6609] 283068 pages reserved [ 57.721825][ T6609] 0 pages cma reserved [ 57.789235][ T6621] veth1: entered promiscuous mode [ 57.795411][ T6621] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 57.842338][ T6623] 9pnet_fd: Insufficient options for proto=fd [ 57.865735][ T6627] tipc: Started in network mode [ 57.867392][ T6627] tipc: Node identity e6610cb7fc9f, cluster identity 4711 [ 57.869686][ T6627] tipc: Enabled bearer , priority 0 [ 57.875543][ T6626] tipc: Disabling bearer [ 58.685759][ T6644] __nla_validate_parse: 1 callbacks suppressed [ 58.685775][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 58.691818][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 58.760225][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 59.762290][ T6688] 9pnet: Could not find request transport: t [ 60.064330][ T61] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 60.124038][ T6714] xt_hashlimit: size too large, truncated to 1048576 [ 60.177165][ T6717] : renamed from vxcan1 (while UP) [ 60.214346][ T61] usb 7-1: device descriptor read/64, error -71 [ 60.454321][ T61] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 60.594310][ T61] usb 7-1: device descriptor read/64, error -71 [ 60.707174][ T61] usb usb7-port1: attempt power cycle [ 60.828450][ T40] kauditd_printk_skb: 186 callbacks suppressed [ 60.828461][ T40] audit: type=1400 audit(1752559131.964:1080): avc: denied { read write } for pid=5954 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.839282][ T40] audit: type=1400 audit(1752559131.964:1081): avc: denied { open } for pid=5954 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.848790][ T40] audit: type=1400 audit(1752559131.964:1082): avc: denied { ioctl } for pid=5954 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.856706][ T40] audit: type=1400 audit(1752559131.974:1083): avc: denied { prog_load } for pid=6725 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.862512][ T40] audit: type=1400 audit(1752559131.974:1084): avc: denied { bpf } for pid=6725 comm="syz.3.289" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.869011][ T40] audit: type=1400 audit(1752559131.974:1085): avc: denied { perfmon } for pid=6725 comm="syz.3.289" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.876183][ T40] audit: type=1400 audit(1752559131.974:1086): avc: denied { prog_run } for pid=6725 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.882046][ T40] audit: type=1400 audit(1752559131.984:1087): avc: denied { create } for pid=6725 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.888989][ T40] audit: type=1400 audit(1752559131.984:1088): avc: denied { setopt } for pid=6725 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.895451][ T40] audit: type=1400 audit(1752559131.984:1089): avc: denied { write } for pid=6725 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.897822][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 61.044341][ T61] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 61.072092][ T61] usb 7-1: device descriptor read/8, error -71 [ 61.096850][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.099583][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.101844][ T60] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 61.107259][ T60] hid-generic 0003:0004:0000.0002: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 61.142999][ T6740] fido_id[6740]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.287017][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.289611][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.315813][ T61] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 61.335526][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.342566][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.354684][ T61] usb 7-1: device descriptor read/8, error -71 [ 61.374439][ T6756] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.377193][ T6756] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.384054][ T6756] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.387190][ T6756] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.467321][ T61] usb usb7-port1: unable to enumerate USB device [ 61.495389][ T6770] Falling back ldisc for ttyS3. [ 62.454825][ T6798] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 62.534506][ T5955] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 62.664890][ T5955] usb 7-1: device descriptor read/64, error -71 [ 62.700900][ T6827] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6827 comm=syz.3.328 [ 62.857185][ T6846] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.218497][ T6879] infiniband syz2: set down [ 63.220888][ T6879] infiniband syz2: added veth0_to_bond [ 63.252890][ T6879] RDS/IB: syz2: added [ 63.256923][ T6879] smc: adding ib device syz2 with port count 1 [ 63.258936][ T6879] smc: ib device syz2 port 1 has pnetid [ 63.388621][ T6896] netlink: 'syz.3.359': attribute type 6 has an invalid length. [ 63.815164][ T6923] netlink: 'syz.1.370': attribute type 21 has an invalid length. [ 63.817967][ T6923] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 63.820395][ T6923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.370'. [ 63.897355][ T6930] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 63.899503][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.902800][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 63.907678][ T6933] vhci_hcd: connection closed [ 63.909125][ T59] vhci_hcd: stop threads [ 63.912605][ T59] vhci_hcd: release socket [ 63.914058][ T59] vhci_hcd: disconnect device [ 64.369589][ T6965] rdma_op ffff8880337c29f0 conn xmit_rdma 0000000000000000 [ 64.437446][ T6972] netlink: 96 bytes leftover after parsing attributes in process `syz.3.390'. [ 64.472262][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 64.475186][ T6975] openvswitch: netlink: Flow key attr not present in new flow. [ 64.502610][ T6978] xt_hashlimit: size too large, truncated to 1048576 [ 64.716387][ T6999] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 64.735055][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 65.583836][ T7002] syz.3.403 (7002) used greatest stack depth: 19784 bytes left [ 65.614036][ T7059] mmap: syz.1.425 (7059) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.885163][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 65.915736][ T40] kauditd_printk_skb: 291 callbacks suppressed [ 65.915751][ T40] audit: type=1400 audit(1752559137.054:1381): avc: denied { create } for pid=7090 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.923843][ T40] audit: type=1400 audit(1752559137.054:1382): avc: denied { connect } for pid=7090 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.038019][ T40] audit: type=1400 audit(1752559137.174:1383): avc: denied { bind } for pid=7096 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.045141][ T40] audit: type=1400 audit(1752559137.184:1384): avc: denied { listen } for pid=7096 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.051235][ T40] audit: type=1400 audit(1752559137.184:1385): avc: denied { read } for pid=7096 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.253123][ T40] audit: type=1400 audit(1752559137.384:1386): avc: denied { setopt } for pid=7104 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.260021][ T40] audit: type=1400 audit(1752559137.394:1387): avc: denied { ioctl } for pid=7104 comm="syz.0.442" path="socket:[11239]" dev="sockfs" ino=11239 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.268492][ T40] audit: type=1400 audit(1752559137.394:1388): avc: denied { write } for pid=7104 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.291880][ T40] audit: type=1326 audit(1752559137.424:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.0.443" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645898e929 code=0x7ffc0000 [ 66.299515][ T40] audit: type=1326 audit(1752559137.434:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.0.443" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645898e929 code=0x7ffc0000 [ 66.615636][ T7126] team0 (unregistering): Port device team_slave_0 removed [ 66.619032][ T7126] team0 (unregistering): Port device team_slave_1 removed [ 66.729870][ T7136] SELinux: ebitmap: truncated map [ 66.734947][ T7136] SELinux: failed to load policy [ 66.741551][ T7138] hub 9-0:1.0: USB hub found [ 66.743249][ T7138] hub 9-0:1.0: 1 port detected [ 66.829982][ T7148] serio: Serial port ptm0 [ 68.056951][ T7185] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 68.307763][ T7211] syzkaller1: entered promiscuous mode [ 68.309515][ T7211] syzkaller1: entered allmulticast mode [ 68.379528][ T7217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7217 comm=syz.2.494 [ 68.401075][ T7217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7217 comm=syz.2.494 [ 68.531365][ T7228] tipc: Invalid UDP bearer configuration [ 68.531391][ T7228] tipc: Enabling of bearer rejected, failed to enable media [ 68.642249][ T7237] tipc: Started in network mode [ 68.643798][ T7237] tipc: Node identity 4, cluster identity 4711 [ 68.645778][ T7237] tipc: Node number set to 4 [ 68.811351][ T7247] netlink: 96 bytes leftover after parsing attributes in process `syz.2.507'. [ 68.828860][ T7249] netlink: 87 bytes leftover after parsing attributes in process `syz.0.508'. [ 68.864542][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 69.206614][ T7278] ALSA: seq fatal error: cannot create timer (-19) [ 69.230619][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 69.432004][ T7301] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7301 comm=syz.3.531 [ 69.828801][ T7348] netlink: 60 bytes leftover after parsing attributes in process `syz.2.552'. [ 70.065198][ T7368] vlan1: entered promiscuous mode [ 70.067047][ T7368] vlan1: entered allmulticast mode [ 70.068721][ T7368] veth0_vlan: entered allmulticast mode [ 70.712325][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 70.716285][ T7383] openvswitch: netlink: Flow key attr not present in new flow. [ 71.146115][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 71.204277][ T40] kauditd_printk_skb: 225 callbacks suppressed [ 71.204288][ T40] audit: type=1326 audit(1752559142.334:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f04d8e929 code=0x7ffc0000 [ 71.213414][ T40] audit: type=1326 audit(1752559142.334:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f04d8e929 code=0x7ffc0000 [ 71.220317][ T40] audit: type=1326 audit(1752559142.334:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f04d8e929 code=0x7ffc0000 [ 71.227409][ T40] audit: type=1326 audit(1752559142.334:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f04d8e929 code=0x7ffc0000 [ 71.234407][ T40] audit: type=1326 audit(1752559142.334:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f04d8e929 code=0x7ffc0000 [ 71.241477][ T40] audit: type=1326 audit(1752559142.334:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f04d8e929 code=0x7ffc0000 [ 71.248413][ T40] audit: type=1326 audit(1752559142.334:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f04d8e929 code=0x7ffc0000 [ 71.255388][ T40] audit: type=1326 audit(1752559142.334:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f04d8e929 code=0x7ffc0000 [ 71.262279][ T40] audit: type=1326 audit(1752559142.334:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f04d8e929 code=0x7ffc0000 [ 71.269254][ T40] audit: type=1326 audit(1752559142.344:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.2.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f04d8e929 code=0x7ffc0000 [ 71.297446][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.299454][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.428888][ T7416] netlink: 220 bytes leftover after parsing attributes in process `syz.1.582'. [ 71.431705][ T7416] ksmbd: Unknown IPC event: 0, ignore. [ 71.644690][ T29] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 71.647861][ T29] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 71.650887][ T29] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 71.655918][ T29] hid-generic 0003:0004:0000.0003: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 71.700444][ T7443] fido_id[7443]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.852059][ T7454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.599'. [ 71.855927][ T7454] openvswitch: netlink: Flow actions attr not present in new flow. [ 71.862802][ T7454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.599'. [ 71.870824][ T7454] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.881689][ T7454] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 71.924612][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.605'. [ 72.117422][ T7485] unsupported nla_type 65024 [ 72.261497][ T7499] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 72.264561][ T7499] SELinux: failed to load policy [ 72.461575][ T7512] 9pnet: Could not find request transport: rd [ 72.698532][ T7525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7525 comm=syz.3.632 [ 72.827894][ T7535] netlink: 'syz.3.637': attribute type 21 has an invalid length. [ 72.970152][ T7555] program syz.1.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.091652][ T7576] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 73.363845][ T7618] pim6reg: entered allmulticast mode [ 73.368105][ T7618] pim6reg: left allmulticast mode [ 74.096067][ T7730] __nla_validate_parse: 7 callbacks suppressed [ 74.096080][ T7730] netlink: 80 bytes leftover after parsing attributes in process `syz.1.674'. [ 74.610929][ T7755] loop9: detected capacity change from 0 to 7 [ 74.615026][ T7755] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.617664][ T7755] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.620130][ T7755] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.622563][ T7755] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.626625][ T7755] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.629314][ T7755] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.631801][ T7755] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.634350][ T7755] ldm_validate_partition_table(): Disk read failed. [ 74.636431][ T7755] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.638839][ T7755] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.641586][ T7755] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.644081][ T7755] Dev loop9: unable to read RDB block 0 [ 74.646142][ T7755] loop9: unable to read partition table [ 74.648026][ T7755] loop9: partition table beyond EOD, truncated [ 74.650117][ T7755] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 74.650117][ T7755] ) failed (rc=-5) [ 74.657230][ T7755] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 74.682379][ T7761] netlink: 'syz.2.686': attribute type 10 has an invalid length. [ 74.687908][ T7761] macvlan1: entered allmulticast mode [ 74.690266][ T7761] veth1_vlan: entered allmulticast mode [ 74.701348][ T7761] team0: Port device macvlan1 added [ 74.847059][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 74.907413][ T7773] hsr_slave_0 (unregistering): left promiscuous mode [ 74.930128][ T7778] pim6reg: entered allmulticast mode [ 74.931121][ T7778] pim6reg: left allmulticast mode [ 75.660779][ T7794] hub 6-0:1.0: USB hub found [ 75.662342][ T7794] hub 6-0:1.0: 1 port detected [ 76.119648][ T7814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7814 comm=syz.0.708 [ 76.240260][ T40] kauditd_printk_skb: 209 callbacks suppressed [ 76.240270][ T40] audit: type=1400 audit(1752559147.374:1835): avc: denied { append } for pid=7826 comm="syz.2.714" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.249095][ T40] audit: type=1400 audit(1752559147.374:1836): avc: denied { open } for pid=7826 comm="syz.2.714" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.251079][ T7827] program syz.2.714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.260269][ T40] audit: type=1400 audit(1752559147.394:1837): avc: denied { mounton } for pid=7828 comm="syz.3.715" path="/195" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.260290][ T7829] nfs4: Bad value for 'source' [ 76.286069][ T7831] capability: warning: `syz.2.716' uses 32-bit capabilities (legacy support in use) [ 76.290655][ T40] audit: type=1400 audit(1752559147.424:1838): avc: denied { read } for pid=7830 comm="syz.2.716" dev="nsfs" ino=4026533323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.298985][ T40] audit: type=1400 audit(1752559147.424:1839): avc: denied { open } for pid=7830 comm="syz.2.716" path="net:[4026533323]" dev="nsfs" ino=4026533323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.305715][ T40] audit: type=1400 audit(1752559147.424:1840): avc: denied { create } for pid=7830 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.312194][ T40] audit: type=1326 audit(1752559147.444:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.3.717" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7161f8e929 code=0x7ffc0000 [ 76.320164][ T40] audit: type=1326 audit(1752559147.454:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.3.717" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7161f8e929 code=0x7ffc0000 [ 76.327256][ T40] audit: type=1400 audit(1752559147.464:1843): avc: denied { execute } for pid=7834 comm="syz.2.718" path="/184/cpu.stat" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.334790][ T40] audit: type=1326 audit(1752559147.474:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.3.717" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7161f8e929 code=0x7ffc0000 [ 76.712484][ T7863] netem: change failed [ 77.049476][ T7869] netlink: 96 bytes leftover after parsing attributes in process `syz.1.729'. [ 77.229494][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 77.232210][ T7902] openvswitch: netlink: Flow key attr not present in new flow. [ 77.481990][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.753'. [ 77.485409][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.753'. [ 77.545868][ T7928] netlink: 76 bytes leftover after parsing attributes in process `syz.1.755'. [ 78.809283][ T7968] random: crng reseeded on system resumption [ 78.884911][ T7978] netlink: 'syz.1.774': attribute type 10 has an invalid length. [ 79.038795][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 79.043249][ T8000] hsr_slave_1: left promiscuous mode [ 79.167729][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.788'. [ 79.170626][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 79.180978][ T8010] netlink: 'syz.1.788': attribute type 10 has an invalid length. [ 79.184053][ T8010] bridge0: port 1(team0) entered blocking state [ 79.186687][ T8010] bridge0: port 1(team0) entered disabled state [ 79.189241][ T8010] team0: entered allmulticast mode [ 79.190910][ T8010] team_slave_0: entered allmulticast mode [ 79.193086][ T8010] team_slave_1: entered allmulticast mode [ 79.197978][ T8010] team_slave_0: entered promiscuous mode [ 79.199894][ T8010] team_slave_1: entered promiscuous mode [ 79.203998][ T8010] bridge0: port 1(team0) entered blocking state [ 79.205990][ T8010] bridge0: port 1(team0) entered forwarding state [ 79.264407][ T8025] netlink: 48 bytes leftover after parsing attributes in process `syz.0.795'. [ 79.350160][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.804'. [ 79.352903][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 79.409822][ T8054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.809'. [ 79.505064][ T8069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.815'. [ 79.507780][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 79.735712][ T8083] netlink: 224 bytes leftover after parsing attributes in process `syz.2.822'. [ 79.738499][ T8083] ksmbd: Unknown IPC event: 3, ignore. [ 80.253563][ T8094] netlink: 5 bytes leftover after parsing attributes in process `syz.3.826'. [ 80.257825][ T8094] 0{X: renamed from gretap0 (while UP) [ 80.261035][ T8094] 0{X: entered allmulticast mode [ 80.263087][ T8094] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 80.620622][ T8118] netlink: 'syz.1.836': attribute type 10 has an invalid length. [ 81.317482][ T40] kauditd_printk_skb: 276 callbacks suppressed [ 81.317493][ T40] audit: type=1400 audit(1752559152.454:2121): avc: denied { setopt } for pid=8134 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.434461][ T8143] netlink: 'syz.3.846': attribute type 10 has an invalid length. [ 81.436964][ T8143] bridge0: port 3(team0) entered blocking state [ 81.439017][ T8143] bridge0: port 3(team0) entered disabled state [ 81.441146][ T8143] team0: entered allmulticast mode [ 81.442835][ T8143] team_slave_0: entered allmulticast mode [ 81.445297][ T8143] team_slave_1: entered allmulticast mode [ 81.448655][ T8143] team0: entered promiscuous mode [ 81.450274][ T8143] team_slave_0: entered promiscuous mode [ 81.452235][ T8143] team_slave_1: entered promiscuous mode [ 81.454449][ T8143] bridge0: port 3(team0) entered blocking state [ 81.456666][ T8143] bridge0: port 3(team0) entered forwarding state [ 81.511501][ T40] audit: type=1400 audit(1752559152.644:2122): avc: denied { ioctl } for pid=8144 comm="syz.3.847" path="socket:[15168]" dev="sockfs" ino=15168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.605362][ T40] audit: type=1400 audit(1752559152.744:2123): avc: denied { create } for pid=8152 comm="syz.3.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.665557][ T8161] netlink: 'syz.3.853': attribute type 1 has an invalid length. [ 81.665630][ T8162] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 81.671369][ T8161] netlink: 'syz.3.853': attribute type 2 has an invalid length. [ 81.772117][ T40] audit: type=1400 audit(1752559152.904:2124): avc: denied { write } for pid=8177 comm="syz.0.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.797961][ T40] audit: type=1326 audit(1752559152.934:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.0.865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645898e929 code=0x7ffc0000 [ 81.805249][ T40] audit: type=1326 audit(1752559152.934:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.0.865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645898e929 code=0x7ffc0000 [ 81.813266][ T40] audit: type=1326 audit(1752559152.934:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.0.865" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f645898e929 code=0x7ffc0000 [ 81.822843][ T40] audit: type=1326 audit(1752559152.934:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.0.865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645898e929 code=0x7ffc0000 [ 81.830350][ T40] audit: type=1326 audit(1752559152.934:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.0.865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645898e929 code=0x7ffc0000 [ 81.839285][ T40] audit: type=1326 audit(1752559152.934:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.0.865" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f645898e929 code=0x7ffc0000 [ 82.445512][ T8232] syzkaller0: entered promiscuous mode [ 82.447266][ T8232] syzkaller0: entered allmulticast mode [ 83.810072][ T8335] netlink: 'syz.1.928': attribute type 10 has an invalid length. [ 83.897050][ T8345] capability: warning: `syz.2.932' uses deprecated v2 capabilities in a way that may be insecure [ 84.066266][ T8350] 0X: renamed from caif0 [ 84.069263][ T8350] 0X: entered allmulticast mode [ 84.071015][ T8350] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 84.082629][ T8350] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 84.179695][ T8365] __nla_validate_parse: 8 callbacks suppressed [ 84.179704][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.941'. [ 84.460026][ T8390] netlink: 'syz.2.951': attribute type 21 has an invalid length. [ 84.462556][ T8390] netlink: 156 bytes leftover after parsing attributes in process `syz.2.951'. [ 84.649418][ T8405] netlink: 'syz.1.957': attribute type 3 has an invalid length. [ 84.681463][ T8407] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 84.730140][ T8411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.961'. [ 84.814027][ T8422] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 84.817731][ T8422] bridge0: port 3(team0) entered blocking state [ 84.820567][ T8422] bridge0: port 3(team0) entered disabled state [ 84.823406][ T8422] team0: entered allmulticast mode [ 84.827793][ T8422] team_slave_0: entered allmulticast mode [ 84.830414][ T8422] team_slave_1: entered allmulticast mode [ 84.834767][ T8422] team0: entered promiscuous mode [ 84.836999][ T8422] team_slave_0: entered promiscuous mode [ 84.839430][ T8422] team_slave_1: entered promiscuous mode [ 84.841479][ T8422] macvlan1: entered promiscuous mode [ 85.046827][ T8450] netlink: 'syz.2.979': attribute type 10 has an invalid length. [ 85.083682][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 85.231178][ T8468] SELinux: failed to load policy [ 85.475665][ T8509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8509 comm=syz.1.993 [ 85.507262][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'. [ 85.512145][ T8513] netlink: 104 bytes leftover after parsing attributes in process `syz.3.995'. [ 85.535476][ T8519] tmpfs: Unknown parameter 'n' [ 85.568017][ T8519] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 85.606492][ T8531] bridge0: entered promiscuous mode [ 85.608338][ T8531] team0: entered promiscuous mode [ 85.610391][ T8531] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 85.613305][ T8531] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8531, name: syz.1.1001 [ 85.618130][ T8531] preempt_count: 201, expected: 0 [ 85.619737][ T8531] RCU nest depth: 0, expected: 0 [ 85.621296][ T8531] 3 locks held by syz.1.1001/8531: [ 85.622911][ T8531] #0: ffffffff90a9c5a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 85.625980][ T8531] #1: ffffffff90362ee8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 85.628768][ T8531] #2: ffff88802c68c368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x6f/0x110 [ 85.631952][ T8531] Preemption disabled at: [ 85.631958][ T8531] [] dev_uc_add+0x63/0x110 [ 85.635244][ T8531] CPU: 3 UID: 0 PID: 8531 Comm: syz.1.1001 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 85.635260][ T8531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.635266][ T8531] Call Trace: [ 85.635271][ T8531] [ 85.635275][ T8531] dump_stack_lvl+0x16c/0x1f0 [ 85.635293][ T8531] __might_resched+0x3c0/0x5e0 [ 85.635309][ T8531] ? __pfx___might_resched+0x10/0x10 [ 85.635330][ T8531] __mutex_lock+0x106/0xb90 [ 85.635348][ T8531] ? team_change_rx_flags+0x39/0x220 [ 85.635363][ T8531] ? __pfx___mutex_lock+0x10/0x10 [ 85.635377][ T8531] ? __dev_change_flags+0x55d/0x720 [ 85.635391][ T8531] ? rtnl_configure_link+0xfe/0x280 [ 85.635404][ T8531] ? rtnl_newlink+0xcd9/0x2000 [ 85.635421][ T8531] ? __pfx_netdev_info+0x10/0x10 [ 85.635440][ T8531] ? team_change_rx_flags+0x39/0x220 [ 85.635454][ T8531] team_change_rx_flags+0x39/0x220 [ 85.635469][ T8531] ? __pfx_team_change_rx_flags+0x10/0x10 [ 85.635484][ T8531] __dev_set_promiscuity+0x214/0x590 [ 85.635501][ T8531] netif_set_promiscuity+0x52/0x150 [ 85.635516][ T8531] dev_set_promiscuity+0xb2/0x260 [ 85.635533][ T8531] br_manage_promisc+0x2ce/0x4f0 [ 85.635552][ T8531] br_dev_change_rx_flags+0x3b/0x50 [ 85.635563][ T8531] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 85.635574][ T8531] __dev_set_promiscuity+0x214/0x590 [ 85.635587][ T8531] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.635602][ T8531] __dev_set_rx_mode+0x205/0x2e0 [ 85.635617][ T8531] dev_uc_add+0xee/0x110 [ 85.635628][ T8531] macsec_dev_open+0xce/0x540 [ 85.635643][ T8531] ? __pfx_macsec_dev_open+0x10/0x10 [ 85.635655][ T8531] ? vxlan_netdevice_event+0x11f/0x370 [ 85.635672][ T8531] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 85.635684][ T8531] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 85.635700][ T8531] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.635713][ T8531] ? ip6_route_dev_notify+0xe4/0x750 [ 85.635729][ T8531] ? ndisc_netdev_event+0xa1/0x560 [ 85.635742][ T8531] ? notifier_call_chain+0x369/0x410 [ 85.635757][ T8531] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 85.635776][ T8531] ? __pfx_macsec_dev_open+0x10/0x10 [ 85.635790][ T8531] __dev_open+0x2e7/0x7d0 [ 85.635804][ T8531] ? __pfx___dev_open+0x10/0x10 [ 85.635821][ T8531] __dev_change_flags+0x55d/0x720 [ 85.635837][ T8531] ? __pfx___dev_change_flags+0x10/0x10 [ 85.635851][ T8531] ? alloc_netdev_mqs+0xe7e/0x1570 [ 85.635869][ T8531] rtnl_configure_link+0xfe/0x280 [ 85.635883][ T8531] rtnl_newlink+0xcd9/0x2000 [ 85.635903][ T8531] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.635917][ T8531] ? find_held_lock+0x2b/0x80 [ 85.635931][ T8531] ? avc_has_perm_noaudit+0x117/0x3b0 [ 85.635944][ T8531] ? avc_has_perm_noaudit+0x149/0x3b0 [ 85.635966][ T8531] ? find_held_lock+0x2b/0x80 [ 85.635979][ T8531] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.635994][ T8531] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.636008][ T8531] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 85.636023][ T8531] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.636038][ T8531] rtnetlink_rcv_msg+0x95e/0xe90 [ 85.636055][ T8531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 85.636074][ T8531] ? ref_tracker_free+0x37c/0x830 [ 85.636092][ T8531] netlink_rcv_skb+0x155/0x420 [ 85.636103][ T8531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 85.636119][ T8531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.636135][ T8531] ? netlink_deliver_tap+0x1ae/0xd30 [ 85.636154][ T8531] netlink_unicast+0x58d/0x850 [ 85.636166][ T8531] ? __pfx_netlink_unicast+0x10/0x10 [ 85.636180][ T8531] netlink_sendmsg+0x8d1/0xdd0 [ 85.636193][ T8531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.636208][ T8531] ____sys_sendmsg+0xa98/0xc70 [ 85.636220][ T8531] ? copy_msghdr_from_user+0x10a/0x160 [ 85.636234][ T8531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.636247][ T8531] ? __pfx_futex_wake_mark+0x10/0x10 [ 85.636261][ T8531] ___sys_sendmsg+0x134/0x1d0 [ 85.636277][ T8531] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.636290][ T8531] ? __lock_acquire+0x622/0x1c90 [ 85.636320][ T8531] __sys_sendmsg+0x16d/0x220 [ 85.636336][ T8531] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.636351][ T8531] ? __x64_sys_futex+0x1e0/0x4c0 [ 85.636376][ T8531] do_syscall_64+0xcd/0x4c0 [ 85.636393][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.636405][ T8531] RIP: 0033:0x7fc78198e929 [ 85.636414][ T8531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.636424][ T8531] RSP: 002b:00007fc782802038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.636434][ T8531] RAX: ffffffffffffffda RBX: 00007fc781bb5fa0 RCX: 00007fc78198e929 [ 85.636441][ T8531] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 85.636447][ T8531] RBP: 00007fc781a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 85.636452][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.636458][ T8531] R13: 0000000000000000 R14: 00007fc781bb5fa0 R15: 00007fff7a728338 [ 85.636472][ T8531] [ 85.636477][ T8531] [ 85.788347][ T8531] ============================= [ 85.790073][ T8531] [ BUG: Invalid wait context ] [ 85.791609][ T8531] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Tainted: G W [ 85.794210][ T8531] ----------------------------- [ 85.795835][ T8531] syz.1.1001/8531 is trying to lock: [ 85.797470][ T8531] ffff88802a51ce00 (team->team_lock_key){+.+.}-{4:4}, at: team_change_rx_flags+0x39/0x220 [ 85.800490][ T8531] other info that might help us debug this: [ 85.802351][ T8531] context-{5:5} [ 85.803450][ T8531] 3 locks held by syz.1.1001/8531: [ 85.805035][ T8531] #0: ffffffff90a9c5a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 85.808002][ T8531] #1: ffffffff90362ee8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 85.810814][ T8531] #2: ffff88802c68c368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x6f/0x110 [ 85.814126][ T8531] stack backtrace: [ 85.815317][ T8531] CPU: 3 UID: 0 PID: 8531 Comm: syz.1.1001 Tainted: G W 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 85.815334][ T8531] Tainted: [W]=WARN [ 85.815337][ T8531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.815343][ T8531] Call Trace: [ 85.815348][ T8531] [ 85.815353][ T8531] dump_stack_lvl+0x116/0x1f0 [ 85.815370][ T8531] __lock_acquire+0xa12/0x1c90 [ 85.815382][ T8531] ? dev_uc_add+0x63/0x110 [ 85.815393][ T8531] ? mark_held_locks+0x49/0x80 [ 85.815403][ T8531] lock_acquire+0x179/0x350 [ 85.815412][ T8531] ? team_change_rx_flags+0x39/0x220 [ 85.815428][ T8531] ? __pfx___might_resched+0x10/0x10 [ 85.815443][ T8531] __mutex_lock+0x199/0xb90 [ 85.815458][ T8531] ? team_change_rx_flags+0x39/0x220 [ 85.815472][ T8531] ? team_change_rx_flags+0x39/0x220 [ 85.815487][ T8531] ? __pfx___mutex_lock+0x10/0x10 [ 85.815501][ T8531] ? __dev_change_flags+0x55d/0x720 [ 85.815514][ T8531] ? rtnl_configure_link+0xfe/0x280 [ 85.815525][ T8531] ? rtnl_newlink+0xcd9/0x2000 [ 85.815541][ T8531] ? __pfx_netdev_info+0x10/0x10 [ 85.815558][ T8531] ? team_change_rx_flags+0x39/0x220 [ 85.815572][ T8531] team_change_rx_flags+0x39/0x220 [ 85.815587][ T8531] ? __pfx_team_change_rx_flags+0x10/0x10 [ 85.815601][ T8531] __dev_set_promiscuity+0x214/0x590 [ 85.815617][ T8531] netif_set_promiscuity+0x52/0x150 [ 85.815631][ T8531] dev_set_promiscuity+0xb2/0x260 [ 85.815648][ T8531] br_manage_promisc+0x2ce/0x4f0 [ 85.815665][ T8531] br_dev_change_rx_flags+0x3b/0x50 [ 85.815676][ T8531] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 85.815686][ T8531] __dev_set_promiscuity+0x214/0x590 [ 85.815700][ T8531] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.815713][ T8531] __dev_set_rx_mode+0x205/0x2e0 [ 85.815727][ T8531] dev_uc_add+0xee/0x110 [ 85.815738][ T8531] macsec_dev_open+0xce/0x540 [ 85.815751][ T8531] ? __pfx_macsec_dev_open+0x10/0x10 [ 85.815763][ T8531] ? vxlan_netdevice_event+0x11f/0x370 [ 85.815779][ T8531] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 85.815791][ T8531] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 85.815807][ T8531] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.815819][ T8531] ? ip6_route_dev_notify+0xe4/0x750 [ 85.815836][ T8531] ? ndisc_netdev_event+0xa1/0x560 [ 85.815848][ T8531] ? notifier_call_chain+0x369/0x410 [ 85.815863][ T8531] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 85.815881][ T8531] ? __pfx_macsec_dev_open+0x10/0x10 [ 85.815894][ T8531] __dev_open+0x2e7/0x7d0 [ 85.815907][ T8531] ? __pfx___dev_open+0x10/0x10 [ 85.815922][ T8531] __dev_change_flags+0x55d/0x720 [ 85.815937][ T8531] ? __pfx___dev_change_flags+0x10/0x10 [ 85.815951][ T8531] ? alloc_netdev_mqs+0xe7e/0x1570 [ 85.815968][ T8531] rtnl_configure_link+0xfe/0x280 [ 85.815981][ T8531] rtnl_newlink+0xcd9/0x2000 [ 85.815998][ T8531] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.816013][ T8531] ? find_held_lock+0x2b/0x80 [ 85.816026][ T8531] ? avc_has_perm_noaudit+0x117/0x3b0 [ 85.816039][ T8531] ? avc_has_perm_noaudit+0x149/0x3b0 [ 85.816054][ T8531] ? find_held_lock+0x2b/0x80 [ 85.816067][ T8531] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.816082][ T8531] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.816096][ T8531] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 85.816111][ T8531] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.816126][ T8531] rtnetlink_rcv_msg+0x95e/0xe90 [ 85.816142][ T8531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 85.816160][ T8531] ? ref_tracker_free+0x37c/0x830 [ 85.816175][ T8531] netlink_rcv_skb+0x155/0x420 [ 85.816186][ T8531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 85.816202][ T8531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.816214][ T8531] ? netlink_deliver_tap+0x1ae/0xd30 [ 85.816231][ T8531] netlink_unicast+0x58d/0x850 [ 85.816242][ T8531] ? __pfx_netlink_unicast+0x10/0x10 [ 85.816253][ T8531] netlink_sendmsg+0x8d1/0xdd0 [ 85.816264][ T8531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.816276][ T8531] ____sys_sendmsg+0xa98/0xc70 [ 85.816287][ T8531] ? copy_msghdr_from_user+0x10a/0x160 [ 85.816301][ T8531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.816316][ T8531] ? __pfx_futex_wake_mark+0x10/0x10 [ 85.816328][ T8531] ___sys_sendmsg+0x134/0x1d0 [ 85.816343][ T8531] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.816356][ T8531] ? __lock_acquire+0x622/0x1c90 [ 85.816373][ T8531] __sys_sendmsg+0x16d/0x220 [ 85.816388][ T8531] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.816401][ T8531] ? __x64_sys_futex+0x1e0/0x4c0 [ 85.816421][ T8531] do_syscall_64+0xcd/0x4c0 [ 85.816437][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.816448][ T8531] RIP: 0033:0x7fc78198e929 [ 85.816457][ T8531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.816467][ T8531] RSP: 002b:00007fc782802038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.816477][ T8531] RAX: ffffffffffffffda RBX: 00007fc781bb5fa0 RCX: 00007fc78198e929 [ 85.816484][ T8531] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 85.816490][ T8531] RBP: 00007fc781a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 85.816496][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.816502][ T8531] R13: 0000000000000000 R14: 00007fc781bb5fa0 R15: 00007fff7a728338 [ 85.816512][ T8531] [ 85.974076][ T8531] bridge0: port 2(macsec1) entered blocking state [ 85.978655][ T8531] bridge0: port 2(macsec1) entered disabled state [ 85.980828][ T8531] macsec1: entered allmulticast mode [ 85.982484][ T8531] bridge0: entered allmulticast mode [ 85.986446][ T8531] macsec1: left allmulticast mode [ 85.988038][ T8531] bridge0: left allmulticast mode [ 85.990089][ T8531] bridge0: left promiscuous mode [ 85.991747][ T8531] team0: left promiscuous mode VM DIAGNOSIS: 05:59:16 Registers: info registers vcpu 0 CPU#0 RAX=ffffe8fefc87d030 RBX=ffffed100d5070f0 RCX=ffffe8fefc87d038 RDX=1ffffd1fdf90fa07 RSI=0000000000000003 RDI=ffff888056ded268 RBP=0000000000000003 RSP=ffffc9000394fa40 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000008 R11=0000000000000001 R12=ffffe8fefc87d030 R13=0000000000000000 R14=dffffc0000000000 R15=ffff88806a838780 RIP=ffffffff81bbf280 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555770c7500 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f716217f2d8 CR3=00000000507a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555565846730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555658545c6 00005555658542f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556585a402 0000555565858f80 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00dca1fff80a624b b808278003278004 0290031008000288 032208000280030c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000012bd00 000007000002b7ff fffff80000010700 0000000000a1bf21 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff04200300080010 030fffffffffffff 0400030c10000180 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1208007003000800 600302be10005003 5f80044003001000 30030fffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 0408858010000210 0000040100000008 060a015696120800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7003000800600302 be100050035f8004 400300100030030f ffffffffffff0420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080010030fff ffffffffff040003 0c10000180040100 00000806060101c0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0404000188030104 000184033e040001 8003081000028004 4a08000208000100 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030010b080840066 030401e080808400 6403080400600300 63657363616d01ff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffea0000ea9580 RCX=ffffffff81f371db RDX=0000000000000000 RSI=ffffffff8c158ee0 RDI=ffffffff8df40da8 RBP=ffffc900037ffbe0 RSP=ffffc900037ffa68 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88802c27d080 R13=0000000000000000 R14=0000000000000001 R15=1ffff920006fff7f RIP=ffffffff8b8b4360 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555555795500 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5f04d62640 CR3=000000002b6e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5573b510 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f04e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f04e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f04e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f04e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f04e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f04e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888013bd0070 RCX=ffffffff822e85fb RDX=ffff888062f88000 RSI=ffffffff822e85b7 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90006cc79e0 R8 =0000000000000007 R9 =0000000000000005 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bbf2c1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f45bbc07260 CR3=0000000013bfe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000e30 0000000000001000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f45bbc15310 00007f45bbbdf000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc90005e46868 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc7828026c0 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c2b23dd CR3=0000000057290000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555658545c6 00005555658542f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556584ef48 000055556584ed20 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101c00404000188 030104000184033e 0400018003081000 0280044a08000208 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff04200300080010 030fffffffffffff 0400030c10000180 0401000000080606 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1208007003000800 600302be10005003 5f80044003001000 30030fffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 0408858010000210 0000040100000008 060a015696120800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7003000800600302 be100050035f8004 400300100030030f ffffffffffff0420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080010030fff ffffffffff040003 0c10000180040100 00000806060101c0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0404000188030104 000184033e040001 8003081000028004 4a08000208000100 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030010b080840066 030401e080808400 6403080400600300 63657363616d01ff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000