last executing test programs: 7m23.557745177s ago: executing program 3 (id=49619): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) 7m23.557625212s ago: executing program 3 (id=49620): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) 7m23.492391205s ago: executing program 3 (id=49621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7m23.491740024s ago: executing program 3 (id=49623): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10001, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 7m23.38651463s ago: executing program 3 (id=49627): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x29, 0x0, &(0x7f0000000200)="8b500200cd864231b996623c8df2e03839b8dfb0d7865c6fefe39ea389c7aa220de978dcab53458657"}) 7m22.757944128s ago: executing program 3 (id=49646): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) 7m22.671024203s ago: executing program 32 (id=49646): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) 531.605164ms ago: executing program 0 (id=58647): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 393.897521ms ago: executing program 0 (id=58654): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) 392.190879ms ago: executing program 0 (id=58658): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, 0x0, 0x0) 389.341919ms ago: executing program 0 (id=58661): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) 333.690444ms ago: executing program 0 (id=58664): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 333.058134ms ago: executing program 0 (id=58667): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$ttynull(0xffffffffffffff9c, 0x0, 0x2002, 0x0) 199.89875ms ago: executing program 2 (id=58677): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) 133.313747ms ago: executing program 4 (id=58679): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$ttynull(0xffffffffffffff9c, 0x0, 0x2002, 0x0) 132.635938ms ago: executing program 1 (id=58680): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) syz_clone3(&(0x7f00000005c0)={0x11c103200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 132.40353ms ago: executing program 1 (id=58681): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 128.995616ms ago: executing program 2 (id=58682): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) 128.257463ms ago: executing program 4 (id=58683): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) 70.015829ms ago: executing program 1 (id=58684): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r2 = socket(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) 68.161045ms ago: executing program 4 (id=58685): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) 67.545039ms ago: executing program 2 (id=58686): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40), 0x0, 0x40040) socketpair$unix(0x1, 0x2, 0x0, 0x0) 67.330562ms ago: executing program 1 (id=58687): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 67.049528ms ago: executing program 4 (id=58688): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 66.935914ms ago: executing program 2 (id=58689): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(0x0, 0x0) 22.701667ms ago: executing program 1 (id=58690): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 22.451146ms ago: executing program 2 (id=58691): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) 21.843448ms ago: executing program 4 (id=58692): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 17.666175ms ago: executing program 1 (id=58693): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(0x0) 5.854363ms ago: executing program 4 (id=58694): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) 0s ago: executing program 2 (id=58695): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r3 = socket(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) kernel console output (not intermixed with test programs): 234648][ T3753] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.247358][ T3753] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.275667][ T93] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.279096][ T93] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.373521][T32288] netlink: 112 bytes leftover after parsing attributes in process `syz.1.53432'. [ 2258.735426][T32307] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2258.789499][T32314] syzkaller0: entered promiscuous mode [ 2258.791840][T32314] syzkaller0: entered allmulticast mode [ 2260.235726][ T40] audit: type=1400 audit(2004195453.468:622): avc: denied { getopt } for pid=32333 comm="syz.4.53452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2260.243660][ T40] audit: type=1400 audit(2004195453.468:623): avc: denied { write } for pid=32334 comm="syz.2.53453" lport=55401 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2260.321201][ T40] audit: type=1400 audit(2004195453.543:624): avc: denied { map } for pid=32345 comm="syz.2.53459" path="socket:[767627]" dev="sockfs" ino=767627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2260.331269][ T40] audit: type=1400 audit(2004195453.543:625): avc: denied { read accept } for pid=32345 comm="syz.2.53459" path="socket:[767627]" dev="sockfs" ino=767627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2260.467240][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2260.500766][T32363] netlink: 76 bytes leftover after parsing attributes in process `syz.0.53465'. [ 2260.588391][T32375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53472'. [ 2260.641597][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2260.645905][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2260.722237][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2260.726506][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2260.808002][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2260.867003][T32407] netlink: 76 bytes leftover after parsing attributes in process `syz.1.53486'. [ 2260.893328][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2260.897171][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2260.978088][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2261.211156][T32433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.53493'. [ 2261.815695][T32449] netlink: 'syz.0.53500': attribute type 29 has an invalid length. [ 2261.820300][T32449] netlink: 'syz.0.53500': attribute type 29 has an invalid length. [ 2261.963028][ T40] audit: type=1400 audit(2004195455.082:626): avc: denied { ioctl } for pid=32461 comm="syz.4.53506" path="ipc:[4026533153]" dev="nsfs" ino=4026533153 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2262.157810][T32483] syzkaller0: entered promiscuous mode [ 2262.159988][T32483] syzkaller0: entered allmulticast mode [ 2262.926239][T32487] pimreg: entered allmulticast mode [ 2262.931191][T32487] pimreg: left allmulticast mode [ 2262.959320][T32489] netlink: 'syz.0.53516': attribute type 4 has an invalid length. [ 2262.964971][T32489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32489 comm=syz.0.53516 [ 2262.990433][T32496] Cannot find set identified by id 3 to match [ 2262.993565][T32496] netlink: 'syz.2.53515': attribute type 33 has an invalid length. [ 2262.996803][T32496] netlink: 152 bytes leftover after parsing attributes in process `syz.2.53515'. [ 2263.007713][T32496] mac80211_hwsim hwsim179 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2263.050379][T32500] IPVS: length: 35 != 24 [ 2263.123153][T32505] tipc: Enabling of bearer rejected, failed to enable media [ 2263.126220][T32505] syzkaller0: entered promiscuous mode [ 2263.128027][T32505] syzkaller0: entered allmulticast mode [ 2263.175567][T32520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.53528'. [ 2263.285055][ T40] audit: type=1400 audit(2004195456.330:627): avc: denied { connect } for pid=32532 comm="syz.2.53533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2264.108204][ T40] audit: type=1400 audit(2004195457.100:628): avc: denied { create } for pid=32541 comm="syz.1.53536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2264.117088][ T40] audit: type=1400 audit(2004195457.100:629): avc: denied { write } for pid=32541 comm="syz.1.53536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2264.268632][T32551] netlink: 32 bytes leftover after parsing attributes in process `syz.4.53540'. [ 2264.467365][T32563] netlink: 'syz.0.53546': attribute type 10 has an invalid length. [ 2264.477206][T32563] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2264.659444][T32577] netlink: 'syz.4.53553': attribute type 46 has an invalid length. [ 2264.662714][T32577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.53553'. [ 2264.967598][T32599] netlink: 68 bytes leftover after parsing attributes in process `syz.0.53562'. [ 2265.606723][T32663] tipc: Enabled bearer , priority 0 [ 2265.610203][T32663] syzkaller0: entered promiscuous mode [ 2265.612617][T32663] syzkaller0: entered allmulticast mode [ 2265.619149][T32663] tipc: Resetting bearer [ 2265.629610][T32661] tipc: Resetting bearer [ 2265.647141][T32661] tipc: Disabling bearer [ 2265.678250][T32671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.53596'. [ 2265.884998][T32692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53605'. [ 2265.961956][T32696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52457 sclass=netlink_route_socket pid=32696 comm=syz.4.53607 [ 2265.969759][T32696] x_tables: ip_tables: osf match: only valid for protocol 6 [ 2265.976447][ T40] audit: type=1400 audit(2004195458.855:630): avc: denied { create } for pid=32695 comm="syz.4.53607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2266.099249][T32709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53612'. [ 2266.387886][T32723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2266.402517][T32723] bond_slave_0: entered promiscuous mode [ 2266.405099][T32723] bond_slave_1: entered promiscuous mode [ 2266.407909][T32723] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2266.413538][T32723] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 2266.492919][T32732] bridge_slave_0: left allmulticast mode [ 2266.494796][T32732] bridge_slave_0: left promiscuous mode [ 2266.497170][T32732] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.503472][T32732] bridge_slave_1: left allmulticast mode [ 2266.505901][T32732] bridge_slave_1: left promiscuous mode [ 2266.509266][T32732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.522587][T32732] bond0: (slave bond_slave_0): Releasing backup interface [ 2266.574465][T32732] bond0: (slave bond_slave_1): Releasing backup interface [ 2266.620153][T32732] team0: Port device team_slave_0 removed [ 2266.626851][T32732] team0: Port device team_slave_1 removed [ 2266.629980][T32732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2266.632910][T32732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2266.638482][T32732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2266.640917][T32732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2266.644370][T32732] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2266.701733][T32739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53625'. [ 2267.001710][T32753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.53632'. [ 2267.047949][T32757] netlink: 76 bytes leftover after parsing attributes in process `syz.2.53634'. [ 2267.191200][T32763] mac80211_hwsim hwsim183 syzkaller0: entered promiscuous mode [ 2267.194254][T32763] mac80211_hwsim hwsim183 syzkaller0: entered allmulticast mode [ 2267.269542][ T40] audit: type=1400 audit(2004195460.065:631): avc: denied { create } for pid=302 comm="syz.1.53641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2267.278279][ T40] audit: type=1400 audit(2004195460.065:632): avc: denied { write } for pid=302 comm="syz.1.53641" path="socket:[769182]" dev="sockfs" ino=769182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2267.455884][ T312] tipc: Enabled bearer , priority 0 [ 2267.458432][ T312] syzkaller0: entered promiscuous mode [ 2267.460248][ T312] syzkaller0: entered allmulticast mode [ 2267.466190][ T312] tipc: Resetting bearer [ 2267.469012][ T311] tipc: Resetting bearer [ 2267.480081][ T311] tipc: Disabling bearer [ 2267.559975][ T320] syzkaller0: entered promiscuous mode [ 2267.562216][ T320] syzkaller0: entered allmulticast mode [ 2268.576927][ T386] __nla_validate_parse: 2 callbacks suppressed [ 2268.576947][ T386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53680'. [ 2268.583389][ T386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53680'. [ 2268.596868][T23439] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2268.596896][ T386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53680'. [ 2268.600669][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2268.603409][ T386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53680'. [ 2268.607199][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2268.607236][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2268.865445][ T394] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.955160][ T40] audit: type=1400 audit(2004195461.642:633): avc: denied { getopt } for pid=404 comm="syz.2.53688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2268.971993][ T394] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2269.007859][ T40] audit: type=1400 audit(2004195461.698:634): avc: denied { write } for pid=409 comm="syz.4.53692" path="socket:[768872]" dev="sockfs" ino=768872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2269.092899][ T394] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2269.156327][ T394] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2269.315401][ T425] syzkaller0: entered promiscuous mode [ 2269.317384][ T425] syzkaller0: entered allmulticast mode [ 2269.360681][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.370873][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.379694][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.387459][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.551363][ T455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=455 comm=syz.2.53713 [ 2269.701408][ T465] tipc: Enabled bearer , priority 10 [ 2270.000954][ T485] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2270.136071][ T492] netlink: 76 bytes leftover after parsing attributes in process `syz.1.53730'. [ 2270.142659][ T492] mac80211_hwsim hwsim183 syzkaller0: left promiscuous mode [ 2270.144847][ T492] mac80211_hwsim hwsim183 syzkaller0: left allmulticast mode [ 2270.187337][ T495] mac80211_hwsim hwsim183 syzkaller0: entered promiscuous mode [ 2270.189983][ T495] mac80211_hwsim hwsim183 syzkaller0: entered allmulticast mode [ 2270.508197][ T509] xt_hashlimit: size too large, truncated to 1048576 [ 2271.200954][ T558] tipc: Enabled bearer , priority 0 [ 2271.204313][ T558] syzkaller0: entered promiscuous mode [ 2271.207134][ T558] syzkaller0: entered allmulticast mode [ 2271.224632][ T558] tipc: Resetting bearer [ 2271.232874][ T555] tipc: Resetting bearer [ 2271.245694][ T555] tipc: Disabling bearer [ 2271.408788][ T574] tipc: Started in network mode [ 2271.410381][ T574] tipc: Node identity ac14142f, cluster identity 4711 [ 2271.412587][ T574] tipc: New replicast peer: 0.0.0.0 [ 2271.414721][ T574] tipc: Enabled bearer , priority 10 [ 2271.417836][ T574] tipc: New replicast peer: 172.30.1.2 [ 2271.855088][ T603] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input54 [ 2271.866248][ T40] audit: type=1400 audit(2004195464.373:635): avc: denied { read } for pid=5331 comm="acpid" name="mouse2" dev="devtmpfs" ino=3889 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2271.875963][ T40] audit: type=1400 audit(2004195464.373:636): avc: denied { open } for pid=5331 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3889 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2271.885766][ T40] audit: type=1400 audit(2004195464.373:637): avc: denied { ioctl } for pid=5331 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3889 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2272.104841][ T613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53783'. [ 2272.108330][ T613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53783'. [ 2272.276380][ T624] netlink: 52 bytes leftover after parsing attributes in process `syz.4.53789'. [ 2272.506950][T14737] tipc: Node number set to 2886997039 [ 2273.140307][ T645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input55 [ 2273.423937][ T658] netlink: 5992 bytes leftover after parsing attributes in process `syz.1.53803'. [ 2274.131152][ T694] syzkaller0: entered promiscuous mode [ 2274.133449][ T694] syzkaller0: entered allmulticast mode [ 2274.261400][ T700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53821'. [ 2274.363994][ T703] tipc: Enabled bearer , priority 0 [ 2274.367543][ T703] syzkaller0: entered promiscuous mode [ 2274.369844][ T703] syzkaller0: entered allmulticast mode [ 2274.388734][ T703] tipc: Resetting bearer [ 2274.393819][ T702] tipc: Resetting bearer [ 2274.406488][ T702] tipc: Disabling bearer [ 2274.689779][ T719] syzkaller0: entered promiscuous mode [ 2274.692352][ T719] syzkaller0: entered allmulticast mode [ 2274.789073][ T723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.53828'. [ 2274.943260][ T729] tipc: Enabled bearer , priority 0 [ 2275.072912][ T40] audit: type=1400 audit(2004195467.385:638): avc: denied { connect } for pid=745 comm="syz.0.53840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2275.103521][ T750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53842'. [ 2275.107558][ T750] netlink: 84 bytes leftover after parsing attributes in process `syz.0.53842'. [ 2275.268116][ T755] tipc: Enabling of bearer rejected, already enabled [ 2275.359065][ T767] syzkaller0: entered promiscuous mode [ 2275.361380][ T767] syzkaller0: entered allmulticast mode [ 2275.531105][ T776] tipc: Enabling of bearer rejected, already enabled [ 2275.746354][ T790] syzkaller0: entered promiscuous mode [ 2275.748982][ T790] syzkaller0: entered allmulticast mode [ 2275.933851][ T794] netlink: 'syz.4.53861': attribute type 2 has an invalid length. [ 2275.989642][ T795] netlink: 'syz.4.53861': attribute type 2 has an invalid length. [ 2276.754798][T17465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2276.770054][T17465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2276.778743][T17465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2276.793115][T17465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2276.796746][T17465] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2277.146189][ T794] !: entered promiscuous mode [ 2277.148514][ T795] !: left promiscuous mode [ 2277.165958][T27084] syz_tun (unregistering): left promiscuous mode [ 2277.170271][ T816] tipc: Enabling of bearer rejected, already enabled [ 2277.245180][ T40] audit: type=1400 audit(2004195469.422:639): avc: denied { bind } for pid=824 comm="syz.1.53871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2277.272483][ T828] Set syz1 is full, maxelem 65536 reached [ 2277.484941][ T813] chnl_net:caif_netlink_parms(): no params data found [ 2277.559650][ T813] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.561929][ T813] bridge0: port 1(bridge_slave_0) entered disabled state [ 2277.564207][ T813] bridge_slave_0: entered allmulticast mode [ 2277.566981][ T813] bridge_slave_0: entered promiscuous mode [ 2277.570982][ T813] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.573200][ T813] bridge0: port 2(bridge_slave_1) entered disabled state [ 2277.575389][ T813] bridge_slave_1: entered allmulticast mode [ 2277.578139][ T813] bridge_slave_1: entered promiscuous mode [ 2277.610145][ T813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2277.615087][ T813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2277.659980][ T813] team0: Port device team_slave_0 added [ 2277.664728][ T813] team0: Port device team_slave_1 added [ 2277.698643][ T813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2277.700847][ T813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2277.710366][ T813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2277.714680][ T813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2277.716956][ T813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2277.725777][ T813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2277.777189][ T813] hsr_slave_0: entered promiscuous mode [ 2277.779563][ T813] hsr_slave_1: entered promiscuous mode [ 2277.782195][ T813] debugfs: 'hsr0' already exists in 'hsr' [ 2277.784541][ T813] Cannot create hsr debugfs directory [ 2277.906249][ T872] tipc: Enabling of bearer rejected, already enabled [ 2277.980350][ T813] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.130886][ T813] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.201899][ T813] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.298326][ T813] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.368958][ T40] audit: type=1400 audit(2004195470.483:640): avc: denied { ioctl } for pid=890 comm="syz.4.53896" path="socket:[771879]" dev="sockfs" ino=771879 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2278.527615][ T813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2278.532238][ T813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2278.536278][ T813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2278.550440][ T813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2278.574775][ T40] audit: type=1400 audit(2004195470.680:641): avc: denied { getopt } for pid=890 comm="syz.4.53896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2278.577173][ T891] netlink: 256 bytes leftover after parsing attributes in process `syz.4.53896'. [ 2278.595997][ T903] tipc: Enabled bearer , priority 0 [ 2278.604955][ T903] syzkaller0: entered promiscuous mode [ 2278.607256][ T903] syzkaller0: entered allmulticast mode [ 2278.623492][ T902] tipc: Resetting bearer [ 2278.632957][ T902] tipc: Disabling bearer [ 2278.652634][ T813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2278.661762][ T813] 8021q: adding VLAN 0 to HW filter on device team0 [ 2278.667222][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.669538][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2278.675386][T23439] bridge0: port 2(bridge_slave_1) entered blocking state [ 2278.677769][T23439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2278.824904][ T813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2278.854718][ T813] veth0_vlan: entered promiscuous mode [ 2278.864401][ T813] veth1_vlan: entered promiscuous mode [ 2278.887615][ T813] veth0_macvtap: entered promiscuous mode [ 2278.894474][ T813] veth1_macvtap: entered promiscuous mode [ 2278.909827][ T813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2278.912907][ T926] netlink: 272 bytes leftover after parsing attributes in process `syz.4.53906'. [ 2278.921978][ T813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2278.930411][ T3753] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.935787][ T3753] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.941238][ T3753] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.944885][ T3753] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.951849][ T930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53907'. [ 2279.019273][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2279.023406][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2279.069355][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2279.074560][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2279.176865][ T942] tipc: Started in network mode [ 2279.178936][ T942] tipc: Node identity ce64ad756d7b, cluster identity 4711 [ 2279.182007][ T942] tipc: Enabled bearer , priority 0 [ 2279.190452][ T942] tipc: Resetting bearer [ 2279.200109][ T941] tipc: Disabling bearer [ 2279.308343][ T949] syzkaller0: entered promiscuous mode [ 2279.310758][ T949] syzkaller0: entered allmulticast mode [ 2280.905859][ T1013] tipc: Enabled bearer , priority 0 [ 2280.908807][ T1013] syzkaller0: entered promiscuous mode [ 2280.911143][ T1013] syzkaller0: entered allmulticast mode [ 2280.917458][ T1013] tipc: Resetting bearer [ 2280.920184][ T1012] tipc: Resetting bearer [ 2280.930860][ T1012] tipc: Disabling bearer [ 2281.341821][ T1044] netlink: 'syz.1.53953': attribute type 11 has an invalid length. [ 2281.345084][ T1044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.53953'. [ 2281.554693][ T1066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53961'. [ 2281.557515][ T1067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.53962'. [ 2281.653020][ T40] audit: type=1400 audit(2004195473.570:642): avc: denied { name_bind } for pid=1076 comm="syz.1.53966" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2281.760615][ T1095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.53972'. [ 2282.103682][ T1131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53983'. [ 2282.198727][ T1141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53986'. [ 2282.270693][ T1144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1144 comm=syz.1.53987 [ 2282.687874][ T1162] netlink: 'syz.1.53994': attribute type 2 has an invalid length. [ 2284.258397][ T1259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54031'. [ 2284.262891][ T1256] netlink: 'syz.0.54030': attribute type 10 has an invalid length. [ 2284.262913][ T1256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.54030'. [ 2284.526349][ T1283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.54042'. [ 2284.649752][ T1294] netlink: 64 bytes leftover after parsing attributes in process `syz.1.54046'. [ 2286.324102][ T1391] tipc: Enabled bearer , priority 0 [ 2286.327523][ T1391] syzkaller0: entered promiscuous mode [ 2286.329677][ T1391] syzkaller0: entered allmulticast mode [ 2286.348293][ T1391] tipc: Resetting bearer [ 2286.351921][ T1390] tipc: Resetting bearer [ 2286.363306][ T1390] tipc: Disabling bearer [ 2286.456056][ T1402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2286.593175][ T1414] team0: No ports can be present during mode change [ 2286.765278][ T1430] __nla_validate_parse: 3 callbacks suppressed [ 2286.765292][ T1430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54103'. [ 2287.672145][ T40] audit: type=1400 audit(2004195479.220:643): avc: denied { getopt } for pid=1475 comm="syz.2.54123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2288.432337][ T1499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54133'. [ 2288.464055][ T1504] netlink: 68 bytes leftover after parsing attributes in process `syz.0.54135'. [ 2288.522060][ T1507] syzkaller0: entered promiscuous mode [ 2288.524288][ T1507] syzkaller0: entered allmulticast mode [ 2288.540543][ T1507] tipc: Enabled bearer , priority 0 [ 2288.548262][ T1506] tipc: Resetting bearer [ 2288.558470][ T1506] tipc: Disabling bearer [ 2288.622653][ T1512] netlink: 'syz.1.54138': attribute type 25 has an invalid length. [ 2288.923138][ T1527] bond0: (slave rose0): Enslaving as an active interface with an up link [ 2289.039513][ T1532] SET target dimension over the limit! [ 2289.892777][ T1543] netlink: 'syz.1.54147': attribute type 1 has an invalid length. [ 2289.896188][ T1543] netlink: 'syz.1.54147': attribute type 1 has an invalid length. [ 2289.898950][ T1543] netlink: 15890 bytes leftover after parsing attributes in process `syz.1.54147'. [ 2289.904176][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54147'. [ 2290.130250][ T1551] tipc: Enabling of bearer rejected, already enabled [ 2290.222919][ T1557] netlink: 68 bytes leftover after parsing attributes in process `syz.1.54153'. [ 2290.374487][ T1561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54155'. [ 2290.378190][ T1561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54155'. [ 2290.503778][ T1572] tipc: Enabling of bearer rejected, already enabled [ 2290.591264][ T40] audit: type=1400 audit(2004195481.960:644): avc: denied { setopt } for pid=1582 comm="syz.0.54166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2290.626653][ T1585] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input56 [ 2290.884359][ T1602] netlink: 'syz.2.54174': attribute type 10 has an invalid length. [ 2290.957470][ T1614] xt_hashlimit: size too large, truncated to 1048576 [ 2291.119866][ T1621] tipc: Enabled bearer , priority 10 [ 2291.558584][ T1647] sit0: entered promiscuous mode [ 2291.564764][ T1647] netlink: 1 bytes leftover after parsing attributes in process `syz.2.54192'. [ 2292.063833][ T1679] syzkaller0: entered promiscuous mode [ 2292.065669][ T1679] syzkaller0: entered allmulticast mode [ 2292.314626][T27826] tipc: Node number set to 2736762229 [ 2292.584899][ T1701] syzkaller0: entered promiscuous mode [ 2292.587095][ T1701] syzkaller0: entered allmulticast mode [ 2292.764355][ T1717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54223'. [ 2292.888199][ T1741] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2292.963618][ T1752] tipc: Enabling of bearer rejected, already enabled [ 2293.193675][ T1777] tipc: Enabled bearer , priority 0 [ 2293.196420][ T1777] syzkaller0: entered promiscuous mode [ 2293.198149][ T1777] syzkaller0: entered allmulticast mode [ 2293.209596][ T1777] tipc: Resetting bearer [ 2293.213633][ T1775] tipc: Resetting bearer [ 2293.224002][ T1775] tipc: Disabling bearer [ 2293.657153][T24699] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 2293.689554][ T6022] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 2293.756805][ T1802] tipc: Enabled bearer , priority 0 [ 2293.759887][ T1802] syzkaller0: entered promiscuous mode [ 2293.761771][ T1802] syzkaller0: entered allmulticast mode [ 2293.780159][ T1802] tipc: Resetting bearer [ 2293.783865][ T1801] tipc: Resetting bearer [ 2293.794382][ T1801] tipc: Disabling bearer [ 2293.829842][T24699] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2293.834207][T24699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2293.838823][T24699] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2293.845302][T24699] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2293.849769][T24699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2293.854141][T24699] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2293.861106][T24699] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2293.865671][T24699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2293.870581][T24699] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2293.875754][ T6022] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2293.878752][ T6022] usb 7-1: can't read configurations, error -61 [ 2293.884445][T24699] usb 6-1: string descriptor 0 read error: -22 [ 2293.887126][T24699] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2293.890580][T24699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2293.896900][T24699] adutux 6-1:168.0: interrupt endpoints not found [ 2294.030061][ T6022] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 2294.114195][T15504] usb 6-1: USB disconnect, device number 84 [ 2294.192421][ T6022] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2294.195028][ T6022] usb 7-1: can't read configurations, error -61 [ 2294.197679][ T6022] usb usb7-port1: attempt power cycle [ 2294.562895][ T6022] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 2294.588566][ T6022] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2294.591616][ T6022] usb 7-1: can't read configurations, error -61 [ 2294.733321][ T6022] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 2294.757049][ T6022] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2294.760254][ T6022] usb 7-1: can't read configurations, error -61 [ 2294.762581][ T6022] usb usb7-port1: unable to enumerate USB device [ 2294.885764][ T1837] tipc: Enabling of bearer rejected, already enabled [ 2295.867595][ T1863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54290'. [ 2295.907896][ T1866] tipc: Enabled bearer , priority 0 [ 2295.910671][ T1866] syzkaller0: entered promiscuous mode [ 2295.912494][ T1866] syzkaller0: entered allmulticast mode [ 2295.924719][ T1866] tipc: Resetting bearer [ 2295.928199][ T1864] tipc: Resetting bearer [ 2295.936910][ T1864] tipc: Disabling bearer [ 2296.700461][ T1884] syzkaller0: entered promiscuous mode [ 2296.702787][ T1884] syzkaller0: entered allmulticast mode [ 2296.710204][ T1884] tipc: Enabled bearer , priority 0 [ 2296.714357][ T1883] tipc: Resetting bearer [ 2296.728347][ T1883] tipc: Disabling bearer [ 2296.855898][ T1888] tipc: Enabled bearer , priority 0 [ 2296.858534][ T1888] syzkaller0: entered promiscuous mode [ 2296.860474][ T1888] syzkaller0: entered allmulticast mode [ 2296.872895][ T1888] tipc: Resetting bearer [ 2296.878907][ T1887] tipc: Resetting bearer [ 2296.889075][ T1887] tipc: Disabling bearer [ 2297.152787][ T1907] syzkaller0: entered promiscuous mode [ 2297.154610][ T1907] syzkaller0: entered allmulticast mode [ 2297.158506][ T1907] tipc: Enabled bearer , priority 0 [ 2297.161558][ T1906] tipc: Resetting bearer [ 2297.172195][ T1906] tipc: Disabling bearer [ 2297.375857][T17465] Bluetooth: hci1: command 0x0406 tx timeout [ 2297.809983][ T1926] syzkaller0: entered promiscuous mode [ 2297.811821][ T1926] syzkaller0: entered allmulticast mode [ 2297.816986][ T1926] tipc: Enabled bearer , priority 0 [ 2297.821331][ T1925] tipc: Resetting bearer [ 2297.837903][ T1925] tipc: Disabling bearer [ 2299.321687][ T1973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54341'. [ 2299.327323][ T1973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54341'. [ 2299.943808][ T6022] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 2300.117348][ T6022] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 2300.120638][ T6022] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2300.125773][ T6022] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2300.132101][ T6022] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 2300.135697][ T6022] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2300.139849][ T6022] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2300.146166][ T6022] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 2300.150028][ T6022] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2300.154238][ T6022] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2300.162798][ T6022] usb 9-1: string descriptor 0 read error: -22 [ 2300.165498][ T6022] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2300.169378][ T6022] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2300.178514][ T6022] adutux 9-1:168.0: interrupt endpoints not found [ 2300.394817][ T6022] usb 9-1: USB disconnect, device number 22 [ 2300.526227][ T2003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54357'. [ 2300.531731][ T2003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54357'. [ 2300.726281][ T2016] netlink: 68 bytes leftover after parsing attributes in process `syz.1.54354'. [ 2301.640200][ T2033] tipc: Enabled bearer , priority 0 [ 2301.642868][ T2033] syzkaller0: entered promiscuous mode [ 2301.645129][ T2033] syzkaller0: entered allmulticast mode [ 2301.666680][ T2033] tipc: Resetting bearer [ 2301.670965][ T2032] tipc: Resetting bearer [ 2301.684961][ T2032] tipc: Disabling bearer [ 2301.720950][ T2043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54371'. [ 2301.725163][ T2043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54371'. [ 2301.859357][ T2051] tipc: Enabled bearer , priority 0 [ 2301.872907][ T2050] tipc: Disabling bearer [ 2302.044901][ T2071] tipc: Enabled bearer , priority 0 [ 2302.047549][ T2071] syzkaller0: entered promiscuous mode [ 2302.049608][ T2071] syzkaller0: entered allmulticast mode [ 2302.065852][ T2071] tipc: Resetting bearer [ 2302.069991][ T2070] tipc: Resetting bearer [ 2302.083266][ T2070] tipc: Disabling bearer [ 2302.858405][ T2102] tipc: Enabled bearer , priority 0 [ 2302.861393][ T2102] syzkaller0: entered promiscuous mode [ 2302.863553][ T2102] syzkaller0: entered allmulticast mode [ 2302.877260][ T2102] tipc: Resetting bearer [ 2302.881190][ T2101] tipc: Resetting bearer [ 2302.889712][ T2107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54397'. [ 2302.894115][ T2101] tipc: Disabling bearer [ 2302.894682][ T2107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54397'. [ 2303.253303][ T2140] netlink: 68 bytes leftover after parsing attributes in process `syz.0.54413'. [ 2303.257176][ T2142] tipc: Enabled bearer , priority 0 [ 2303.261168][ T2142] syzkaller0: entered promiscuous mode [ 2303.263566][ T2142] syzkaller0: entered allmulticast mode [ 2303.289133][ T2142] tipc: Resetting bearer [ 2303.295856][ T2139] tipc: Resetting bearer [ 2303.307342][ T2139] tipc: Disabling bearer [ 2303.621242][ T2166] tipc: Enabled bearer , priority 0 [ 2303.636125][ T2165] tipc: Disabling bearer [ 2304.152748][ T6022] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 2304.314085][ T6022] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 2304.316590][ T6022] usb 7-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 2304.319521][ T6022] usb 7-1: config 0 has no interface number 0 [ 2304.321233][ T6022] usb 7-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 2304.324389][ T6022] usb 7-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 2304.328074][ T6022] usb 7-1: config 0 interface 49 has no altsetting 0 [ 2304.331800][ T6022] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2304.334481][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2304.337375][ T6022] usb 7-1: Product: syz [ 2304.338581][ T6022] usb 7-1: Manufacturer: syz [ 2304.339880][ T6022] usb 7-1: SerialNumber: syz [ 2304.342498][ T6022] usb 7-1: config 0 descriptor?? [ 2304.566858][ T6022] usb 7-1: USB disconnect, device number 107 [ 2304.579462][T30438] udevd[30438]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.49/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2304.636684][ T2195] tipc: Enabled bearer , priority 0 [ 2304.639209][ T2195] syzkaller0: entered promiscuous mode [ 2304.641005][ T2195] syzkaller0: entered allmulticast mode [ 2304.652179][ T2195] tipc: Resetting bearer [ 2304.656628][ T2194] tipc: Resetting bearer [ 2304.665653][ T2194] tipc: Disabling bearer [ 2305.069394][ T2207] __nla_validate_parse: 3 callbacks suppressed [ 2305.069406][ T2207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54442'. [ 2305.074938][ T2207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54442'. [ 2305.250493][ T2221] tipc: Enabled bearer , priority 0 [ 2305.262859][ T2220] tipc: Disabling bearer [ 2305.348859][ T2225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54451'. [ 2305.352211][ T2225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54451'. [ 2305.644565][T17514] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 2305.828021][T17514] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 2305.831370][T17514] usb 7-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 2305.835532][T17514] usb 7-1: config 0 has no interface number 0 [ 2305.838157][T17514] usb 7-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 2305.842676][T17514] usb 7-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 2305.848330][T17514] usb 7-1: config 0 interface 49 has no altsetting 0 [ 2305.853442][T17514] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2305.857428][T17514] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2305.861129][T17514] usb 7-1: Product: syz [ 2305.862984][T17514] usb 7-1: Manufacturer: syz [ 2305.865014][T17514] usb 7-1: SerialNumber: syz [ 2305.870261][T17514] usb 7-1: config 0 descriptor?? [ 2306.101854][T17514] usb 7-1: USB disconnect, device number 108 [ 2306.203428][ T2257] netlink: 68 bytes leftover after parsing attributes in process `syz.0.54465'. [ 2307.269221][ T2290] netlink: 68 bytes leftover after parsing attributes in process `syz.0.54480'. [ 2307.593184][ T2308] netlink: 'syz.1.54488': attribute type 25 has an invalid length. [ 2307.615944][T24699] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 2307.750886][ T2314] netlink: 68 bytes leftover after parsing attributes in process `syz.2.54491'. [ 2307.778414][T24699] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2307.781082][T24699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2307.784449][T24699] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2307.790925][T24699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2307.795522][T24699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2307.811735][T24699] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2307.814762][T24699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2307.821091][T24699] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2307.824441][T24699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2307.828542][T24699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2307.834174][T24699] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2307.836573][T24699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2307.841377][ T2322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54495'. [ 2307.841387][T24699] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2307.845585][ T2322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54495'. [ 2307.849269][T24699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2307.857469][T24699] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2307.937248][ T2331] netlink: 'syz.2.54499': attribute type 25 has an invalid length. [ 2308.152188][T17465] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2308.155650][T17465] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2308.158748][T17465] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2308.163119][T17465] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2308.166377][T17465] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2308.333322][T29246] syz_tun (unregistering): left promiscuous mode [ 2308.397145][ T2335] chnl_net:caif_netlink_parms(): no params data found [ 2308.476673][ T2335] bridge0: port 1(bridge_slave_0) entered blocking state [ 2308.479114][ T2335] bridge0: port 1(bridge_slave_0) entered disabled state [ 2308.481221][ T2335] bridge_slave_0: entered allmulticast mode [ 2308.483984][ T2335] bridge_slave_0: entered promiscuous mode [ 2308.487169][ T2335] bridge0: port 2(bridge_slave_1) entered blocking state [ 2308.489548][ T2335] bridge0: port 2(bridge_slave_1) entered disabled state [ 2308.491988][ T2335] bridge_slave_1: entered allmulticast mode [ 2308.494773][ T2335] bridge_slave_1: entered promiscuous mode [ 2308.547793][ T2335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2308.897617][ T2335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2308.948659][ T1185] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2308.952981][ T1185] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.977342][ T2335] team0: Port device team_slave_0 added [ 2308.981549][ T2335] team0: Port device team_slave_1 added [ 2309.020578][ T1185] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2309.023953][ T1185] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.033226][ T2335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2309.036209][ T2335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2309.047124][ T2335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2309.052930][ T2335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2309.059528][ T2335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2309.069090][ T2335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2309.124584][ T1185] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2309.127837][ T1185] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.136414][ T2335] hsr_slave_0: entered promiscuous mode [ 2309.140783][ T2335] hsr_slave_1: entered promiscuous mode [ 2309.143540][ T2335] debugfs: 'hsr0' already exists in 'hsr' [ 2309.145328][ T2335] Cannot create hsr debugfs directory [ 2309.210342][ T1185] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2309.214365][ T1185] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2309.553593][ T1185] bridge_slave_1: left allmulticast mode [ 2309.556032][ T1185] bridge_slave_1: left promiscuous mode [ 2309.558543][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 2309.563513][ T1185] bridge_slave_0: left allmulticast mode [ 2309.565386][ T1185] bridge_slave_0: left promiscuous mode [ 2309.567047][ T2362] netlink: 60 bytes leftover after parsing attributes in process `syz.1.54509'. [ 2309.568010][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 2309.577206][ T1185] tipc: Resetting bearer [ 2309.726607][ T1185] bond_slave_0: left promiscuous mode [ 2309.728530][ T1185] bond_slave_1: left promiscuous mode [ 2309.764019][ T1185] ip6gretap0 (unregistering): left promiscuous mode [ 2309.829417][ T1185] gretap0 (unregistering): left promiscuous mode [ 2309.847152][ T1185] tipc: Disabling bearer [ 2310.109155][ T1185] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 2310.113800][ T1185] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 2310.147333][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2310.186507][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2310.217411][ T1185] bond0 (unregistering): Released all slaves [ 2310.314639][ T1185] bond1 (unregistering): Released all slaves [ 2310.421165][T17465] Bluetooth: hci2: command tx timeout [ 2310.431169][ T1185] tipc: Disabling bearer [ 2310.432995][ T1185] tipc: Left network mode [ 2310.565775][T24699] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2310.568870][T24699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.576365][T24699] usb 5-1: can't set config #168, error -71 [ 2310.598141][T24699] usb 5-1: USB disconnect, device number 98 [ 2310.777056][ T2397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.54521'. [ 2310.964155][ T2335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2310.970982][ T2335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2310.986164][ T2335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2310.993009][ T2335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2311.010646][ T1185] hsr_slave_0: left promiscuous mode [ 2311.012835][ T1185] hsr_slave_1: left promiscuous mode [ 2311.017873][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2311.021342][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2311.025654][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2311.028827][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2311.074331][ T1185] veth1_macvtap: left promiscuous mode [ 2311.076729][ T1185] veth0_macvtap: left promiscuous mode [ 2311.079352][ T1185] veth1_vlan: left promiscuous mode [ 2311.081642][ T1185] veth0_vlan: left promiscuous mode [ 2311.865374][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 2311.969137][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 2312.645081][T17465] Bluetooth: hci2: command tx timeout [ 2312.667207][ T2441] netlink: 68 bytes leftover after parsing attributes in process `syz.1.54531'. [ 2312.667332][ T2335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2312.693416][ T2335] 8021q: adding VLAN 0 to HW filter on device team0 [ 2312.704328][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 2312.706648][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2312.719424][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 2312.722488][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2312.845366][ T2335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2312.856783][ T2452] tipc: Enabling of bearer rejected, failed to enable media [ 2312.980638][ T2335] veth0_vlan: entered promiscuous mode [ 2312.985486][ T2335] veth1_vlan: entered promiscuous mode [ 2313.001726][ T2335] veth0_macvtap: entered promiscuous mode [ 2313.005431][ T2335] veth1_macvtap: entered promiscuous mode [ 2313.014056][ T2335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2313.020103][ T2335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2313.033988][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.038916][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.072165][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.090389][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.153974][ T3753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.159657][ T3753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.188795][ T3753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.192982][ T3753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.577301][ T2498] tipc: Enabling of bearer rejected, failed to enable media [ 2314.286265][T15504] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 2314.448438][T15504] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2314.450981][T15504] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2314.454248][T15504] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2314.458595][T15504] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2314.462039][T15504] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2314.466247][T15504] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2314.469962][T15504] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2314.473328][T15504] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2314.476950][T15504] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2314.481099][T15504] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2314.485322][T15504] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2314.487621][T15504] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2314.491621][T15504] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2314.495209][T15504] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2314.498656][T15504] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2314.861534][T17465] Bluetooth: hci2: command tx timeout [ 2315.346973][ T2590] tipc: Started in network mode [ 2315.349078][ T2590] tipc: Node identity 8adb31e22c93, cluster identity 4711 [ 2315.353017][ T2590] tipc: Enabled bearer , priority 0 [ 2315.367369][ T2588] tipc: Disabling bearer [ 2317.067239][T17465] Bluetooth: hci2: command tx timeout [ 2317.222957][T15504] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2317.228334][T15504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.238593][T15504] usb 5-1: can't set config #168, error -71 [ 2317.242749][T15504] usb 5-1: USB disconnect, device number 99 [ 2317.305597][ T40] audit: type=1400 audit(2004195507.027:645): avc: denied { firmware_load } for pid=2630 comm="syz.0.54598" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 2317.678362][ T2662] netlink: 'syz.4.54610': attribute type 25 has an invalid length. [ 2317.782524][T20522] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2317.786793][T20522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2317.789732][T20522] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2317.792746][T20522] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2317.796123][T20522] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2317.851462][T28569] syz_tun (unregistering): left promiscuous mode [ 2318.024149][ T2663] chnl_net:caif_netlink_parms(): no params data found [ 2318.072642][ T2688] netlink: 'syz.4.54618': attribute type 25 has an invalid length. [ 2318.106501][ T2663] bridge0: port 1(bridge_slave_0) entered blocking state [ 2318.108850][ T2663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.111362][ T2663] bridge_slave_0: entered allmulticast mode [ 2318.114033][ T2663] bridge_slave_0: entered promiscuous mode [ 2318.118057][ T2663] bridge0: port 2(bridge_slave_1) entered blocking state [ 2318.120921][ T2663] bridge0: port 2(bridge_slave_1) entered disabled state [ 2318.124577][ T2663] bridge_slave_1: entered allmulticast mode [ 2318.127498][ T2663] bridge_slave_1: entered promiscuous mode [ 2318.167192][ T2663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2318.174479][ T2663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2318.212465][ T2663] team0: Port device team_slave_0 added [ 2318.215862][ T2663] team0: Port device team_slave_1 added [ 2318.255392][ T2663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2318.257806][ T2663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2318.265983][ T2663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2318.271523][ T2663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2318.274479][ T2663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2318.285208][ T2663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2318.337002][ T2663] hsr_slave_0: entered promiscuous mode [ 2318.340364][ T2663] hsr_slave_1: entered promiscuous mode [ 2318.343433][ T2663] debugfs: 'hsr0' already exists in 'hsr' [ 2318.345510][ T2663] Cannot create hsr debugfs directory [ 2318.416284][ T2699] tipc: Enabling of bearer rejected, already enabled [ 2318.513966][ T2663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.614114][ T2663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.702202][ T2663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.804948][ T2663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.905247][ T2732] tipc: Enabling of bearer rejected, already enabled [ 2319.093041][ T2663] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2319.099141][ T2663] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2319.107192][ T2663] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2319.113392][ T2663] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2319.165375][ T2663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2319.190961][ T2663] 8021q: adding VLAN 0 to HW filter on device team0 [ 2319.196734][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 2319.199120][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2319.207529][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 2319.209826][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2319.355199][ T2663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2319.387622][ T2663] veth0_vlan: entered promiscuous mode [ 2319.394048][ T2663] veth1_vlan: entered promiscuous mode [ 2319.431420][ T2663] veth0_macvtap: entered promiscuous mode [ 2319.436956][ T2663] veth1_macvtap: entered promiscuous mode [ 2319.448811][ T2663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2319.457290][ T2663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2319.464152][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.470291][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.483080][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.488241][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.539406][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2319.541822][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2319.566033][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2319.568423][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2319.976606][T20522] Bluetooth: hci4: command tx timeout [ 2320.359776][T16559] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 2320.552588][T16559] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2320.556835][T16559] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2320.562750][T16559] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2320.565328][T16559] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2320.567611][T16559] usb 9-1: Product: syz [ 2320.568800][T16559] usb 9-1: Manufacturer: syz [ 2320.570120][T16559] usb 9-1: SerialNumber: syz [ 2320.574568][T16559] usb 9-1: config 0 descriptor?? [ 2320.592997][T16559] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2320.609095][ T2623] udevd[2623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2320.639090][ T2814] netlink: 'syz.2.54661': attribute type 25 has an invalid length. [ 2320.795346][T24699] usb 9-1: USB disconnect, device number 23 [ 2321.094853][ T6022] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 2321.256336][ T6022] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2321.259411][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2321.263818][ T6022] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2321.269746][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2321.274216][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2321.280312][ T6022] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2321.283430][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2321.288052][ T6022] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2321.292916][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2321.297686][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2321.303916][ T6022] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2321.306937][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2321.311416][ T6022] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2321.316169][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2321.320915][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2321.856750][ T2852] syzkaller0: entered promiscuous mode [ 2321.858773][ T2852] syzkaller0: entered allmulticast mode [ 2321.866513][ T2852] tipc: Enabled bearer , priority 0 [ 2321.870840][ T2848] tipc: Resetting bearer [ 2321.882624][ T2848] tipc: Disabling bearer [ 2322.181935][T20522] Bluetooth: hci4: command tx timeout [ 2322.450882][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2322.522798][T27826] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 2322.693122][T27826] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2322.697263][T27826] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2322.701913][T27826] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2322.705554][T27826] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2322.708604][T27826] usb 7-1: Product: syz [ 2322.710218][T27826] usb 7-1: Manufacturer: syz [ 2322.711972][T27826] usb 7-1: SerialNumber: syz [ 2322.717009][T27826] usb 7-1: config 0 descriptor?? [ 2322.731780][T27826] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2322.751836][ T2623] udevd[2623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2322.940773][ T7438] usb 7-1: USB disconnect, device number 109 [ 2323.852854][ T2933] syzkaller0: entered promiscuous mode [ 2323.854830][ T2933] syzkaller0: entered allmulticast mode [ 2323.860339][ T2933] tipc: Started in network mode [ 2323.862323][ T2933] tipc: Node identity b6604188f2c4, cluster identity 4711 [ 2323.865320][ T2933] tipc: Enabled bearer , priority 0 [ 2323.868972][ T2932] tipc: Resetting bearer [ 2323.884304][ T2932] tipc: Disabling bearer [ 2324.055258][ T6022] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2324.064076][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.071970][ T6022] usb 6-1: can't set config #168, error -71 [ 2324.077388][ T6022] usb 6-1: USB disconnect, device number 85 [ 2324.398666][T20522] Bluetooth: hci4: command tx timeout [ 2324.557857][ T6022] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 2324.742116][ T6022] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2324.745493][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2324.750862][ T6022] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2324.755775][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2324.760106][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2324.768176][ T6022] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2324.773012][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2324.777373][ T6022] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2324.783124][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2324.787816][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2324.792592][ T6022] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2324.795012][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2324.799169][ T6022] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2324.804236][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2324.808897][ T6022] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2324.815709][ T6022] usb 6-1: string descriptor 0 read error: -22 [ 2324.818591][ T6022] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2324.822347][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.833375][ T6022] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2325.047047][ T6022] usb 6-1: USB disconnect, device number 86 [ 2325.189138][ T2980] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2325.191818][ T2980] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2325.296745][ T2980] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2325.299969][ T2980] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2325.301912][ T2980] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2325.305815][ T2980] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2325.309836][ T2980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2325.311943][ T2980] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2325.315025][ T2980] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2326.529882][T20522] Bluetooth: hci3: command 0x0c1a tx timeout [ 2326.752899][T16559] usb 7-1: new low-speed USB device number 110 using dummy_hcd [ 2326.925939][T16559] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2326.929101][T16559] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2326.933738][T16559] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2326.939879][T16559] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2326.944378][T16559] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2326.950934][T16559] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2326.953942][T16559] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2326.962822][T16559] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2326.967898][T16559] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2326.972330][T16559] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2326.978811][T16559] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2326.981825][T16559] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2326.986120][T16559] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2326.992025][T16559] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2326.996463][T16559] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2327.004012][T16559] usb 7-1: string descriptor 0 read error: -22 [ 2327.006742][T16559] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2327.011359][T16559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.027217][T16559] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2327.233318][T16559] usb 7-1: USB disconnect, device number 110 [ 2327.466786][T20522] Bluetooth: hci2: command 0x0c1a tx timeout [ 2327.469013][T20522] Bluetooth: hci4: command 0x0c1a tx timeout [ 2328.880167][ T3193] netlink: 'syz.2.54816': attribute type 25 has an invalid length. [ 2328.974172][ T3148] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2328.976301][ T3148] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2328.978500][ T3148] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2329.153022][ T3211] netlink: 'syz.0.54830': attribute type 25 has an invalid length. [ 2329.917144][ T3203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2329.919865][ T3203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2329.922958][ T3203] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2331.302998][T17465] Bluetooth: hci3: command 0x0c1a tx timeout [ 2331.646561][ T3335] netlink: 44 bytes leftover after parsing attributes in process `syz.4.54879'. [ 2331.649453][ T3335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54879'. [ 2331.652300][ T3335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54879'. [ 2332.070267][T17465] Bluetooth: hci4: command 0x0c1a tx timeout [ 2332.072321][T17465] Bluetooth: hci2: command 0x0c1a tx timeout [ 2333.519558][T20522] Bluetooth: hci3: command 0x0c1a tx timeout [ 2333.643115][ T3497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54957'. [ 2334.286497][T20522] Bluetooth: hci2: command 0x0c1a tx timeout [ 2334.287151][T17465] Bluetooth: hci4: command 0x0c1a tx timeout [ 2334.592396][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54978'. [ 2334.850007][ T3568] syzkaller0: entered promiscuous mode [ 2334.854250][ T3568] syzkaller0: entered allmulticast mode [ 2334.904741][ T3568] tipc: Enabled bearer , priority 0 [ 2334.920401][ T3565] tipc: Resetting bearer [ 2334.942723][ T3565] tipc: Disabling bearer [ 2334.952941][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54989'. [ 2334.958255][ T3574] netlink: 68 bytes leftover after parsing attributes in process `syz.2.54987'. [ 2335.334745][ T3608] netlink: 68 bytes leftover after parsing attributes in process `syz.0.55002'. [ 2336.001036][ T3595] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2336.004432][ T3595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2336.006633][ T3595] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2337.138929][ T3663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2337.142003][ T3663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2337.144598][ T3663] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2337.521206][ T3718] overlayfs: failed to resolve './file2': -2 [ 2337.690474][ T3734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55052'. [ 2338.224071][ T3764] syzkaller0: entered promiscuous mode [ 2338.226412][ T3764] syzkaller0: entered allmulticast mode [ 2338.391963][ T40] audit: type=1400 audit(2004195526.820:646): avc: denied { unmount } for pid=2663 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2338.436097][ T3773] overlayfs: failed to resolve './file2': -2 [ 2338.463210][T20522] Bluetooth: hci3: command 0x0c1a tx timeout [ 2339.315623][T20522] Bluetooth: hci4: command 0x0c1a tx timeout [ 2339.315658][T17465] Bluetooth: hci2: command 0x0c1a tx timeout [ 2340.259206][ T40] audit: type=1400 audit(2004195528.566:647): avc: denied { associate } for pid=3822 comm="syz.0.55089" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2340.437280][ T3843] netlink: 80 bytes leftover after parsing attributes in process `syz.0.55099'. [ 2341.754071][ T3909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55129'. [ 2342.110309][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55139'. [ 2342.844784][ T3977] overlayfs: missing 'lowerdir' [ 2342.919641][ T3984] syzkaller0: entered promiscuous mode [ 2342.921429][ T3984] syzkaller0: entered allmulticast mode [ 2343.088044][ T3994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55156'. [ 2343.168693][ T4009] overlayfs: missing 'lowerdir' [ 2343.315834][ T4033] overlayfs: missing 'lowerdir' [ 2343.608898][ T40] audit: type=1400 audit(2004195531.710:648): avc: denied { shutdown } for pid=4054 comm="syz.4.55196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2344.012490][ T4084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.55209'. [ 2344.098817][ T4094] syzkaller0: entered promiscuous mode [ 2344.101835][ T4094] syzkaller0: entered allmulticast mode [ 2344.331155][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55220'. [ 2344.383145][ T4114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55222'. [ 2344.540807][ T4123] syzkaller0: entered promiscuous mode [ 2344.542939][ T4123] syzkaller0: entered allmulticast mode [ 2345.008168][ T4149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55239'. [ 2345.088294][ T4155] overlayfs: missing 'lowerdir' [ 2345.815637][ T4180] overlayfs: missing 'lowerdir' [ 2345.935172][ T4190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55257'. [ 2346.169217][ T4202] overlayfs: missing 'lowerdir' [ 2346.382768][ T4211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.55266'. [ 2346.548370][ T4221] overlayfs: missing 'workdir' [ 2346.667065][ T4229] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2346.669842][ T4229] overlayfs: missing 'lowerdir' [ 2347.261053][ T4237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.55278'. [ 2349.154811][ T4303] syzkaller0: entered promiscuous mode [ 2349.156538][ T4303] syzkaller0: entered allmulticast mode [ 2349.275815][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55312'. [ 2350.427129][ T4417] syzkaller0: entered promiscuous mode [ 2350.429676][ T4417] syzkaller0: entered allmulticast mode [ 2350.467427][ T4424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55364'. [ 2350.633796][ T40] audit: type=1400 audit(2004195538.307:649): avc: denied { unmount } for pid=2335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2350.716919][ T4455] syzkaller0: entered promiscuous mode [ 2350.719326][ T4455] syzkaller0: entered allmulticast mode [ 2352.569419][ T4503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2352.571675][ T4503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2352.573737][ T4503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2352.931001][ T4582] syzkaller0: entered promiscuous mode [ 2352.940901][ T4582] syzkaller0: entered allmulticast mode [ 2353.001277][ T4582] tipc: Enabling of bearer rejected, failed to enable media [ 2353.189724][ T4605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.55448'. [ 2353.240528][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55452'. [ 2353.715685][ T4710] syzkaller0: entered promiscuous mode [ 2353.717528][ T4710] syzkaller0: entered allmulticast mode [ 2353.732889][ T4710] tipc: Enabling of bearer rejected, failed to enable media [ 2353.977668][T17465] Bluetooth: hci3: command 0x0c1a tx timeout [ 2354.744646][T17465] Bluetooth: hci4: command 0x0c1a tx timeout [ 2354.747272][T17465] Bluetooth: hci2: command 0x0c1a tx timeout [ 2355.193263][ T62] gretap0: left allmulticast mode [ 2355.194905][ T62] gretap0: left promiscuous mode [ 2355.196589][ T62] bridge0: port 3(gretap0) entered disabled state [ 2355.213867][ T62] bridge_slave_1: left allmulticast mode [ 2355.215755][ T62] bridge_slave_1: left promiscuous mode [ 2355.218164][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 2355.222931][ T62] bridge_slave_0: left allmulticast mode [ 2355.234778][ T62] bridge_slave_0: left promiscuous mode [ 2355.236587][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 2355.278564][ T62] ip6gretap0 (unregistering): left promiscuous mode [ 2355.580539][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2355.631098][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2355.683029][ T62] bond0 (unregistering): Released all slaves [ 2355.752693][ T62] tipc: Disabling bearer [ 2355.754534][ T62] tipc: Left network mode [ 2355.810290][ T4845] syzkaller0: entered promiscuous mode [ 2355.812104][ T4845] syzkaller0: entered allmulticast mode [ 2356.278579][ T4872] syzkaller0: entered promiscuous mode [ 2356.280986][ T4872] syzkaller0: entered allmulticast mode [ 2356.372393][ T62] hsr_slave_0: left promiscuous mode [ 2356.375089][ T62] hsr_slave_1: left promiscuous mode [ 2356.377193][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2356.379944][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2357.157536][ T62] team0 (unregistering): Port device team_slave_1 removed [ 2357.240105][ T62] team0 (unregistering): Port device team_slave_0 removed [ 2357.732316][T17465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2357.736184][T17465] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2357.740339][T17465] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2357.753479][T17465] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2357.757647][T17465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2357.908260][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55580'. [ 2357.921260][ T4907] syzkaller0: entered promiscuous mode [ 2357.923529][ T4907] syzkaller0: entered allmulticast mode [ 2358.222125][ T4918] chnl_net:caif_netlink_parms(): no params data found [ 2358.228421][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55601'. [ 2358.449649][ T4918] bridge0: port 1(bridge_slave_0) entered blocking state [ 2358.454025][ T4918] bridge0: port 1(bridge_slave_0) entered disabled state [ 2358.457135][ T4918] bridge_slave_0: entered allmulticast mode [ 2358.471035][ T4918] bridge_slave_0: entered promiscuous mode [ 2358.485566][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state [ 2358.488554][ T4918] bridge0: port 2(bridge_slave_1) entered disabled state [ 2358.491633][ T4918] bridge_slave_1: entered allmulticast mode [ 2358.506473][ T4918] bridge_slave_1: entered promiscuous mode [ 2358.594295][ T4918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2358.601411][ T4918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2358.690430][ T4918] team0: Port device team_slave_0 added [ 2358.695627][ T4918] team0: Port device team_slave_1 added [ 2358.765150][ T4918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2358.768112][ T4918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2358.779408][ T4918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2358.816738][ T4959] syzkaller0: entered promiscuous mode [ 2358.819051][ T4959] syzkaller0: entered allmulticast mode [ 2358.826895][ T4918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2358.829764][ T4918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2358.842572][ T4918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2358.978376][ T4918] hsr_slave_0: entered promiscuous mode [ 2358.981841][ T4918] hsr_slave_1: entered promiscuous mode [ 2358.984823][ T4918] debugfs: 'hsr0' already exists in 'hsr' [ 2358.996284][ T4918] Cannot create hsr debugfs directory [ 2359.166395][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55611'. [ 2359.253459][ T4918] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.405765][ T4918] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.428221][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55622'. [ 2359.502534][ T4918] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.619980][ T4918] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2359.877772][ T4918] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2359.905353][ T4918] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2359.909951][ T4918] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2359.928955][ T4918] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2359.944574][T20522] Bluetooth: hci1: command tx timeout [ 2360.018816][ T4918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2360.031441][ T4918] 8021q: adding VLAN 0 to HW filter on device team0 [ 2360.060075][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2360.062352][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2360.072266][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.075020][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2360.316693][ T4918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2360.352588][ T4918] veth0_vlan: entered promiscuous mode [ 2360.358084][ T4918] veth1_vlan: entered promiscuous mode [ 2360.377671][ T4918] veth0_macvtap: entered promiscuous mode [ 2360.392385][ T4918] veth1_macvtap: entered promiscuous mode [ 2360.434309][ T4918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2360.442261][ T4918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2360.466794][T23439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.500702][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.504211][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.507711][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.663389][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2360.666311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2360.708609][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2360.712015][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2361.160972][ T5073] syzkaller0: entered promiscuous mode [ 2361.162888][ T5073] syzkaller0: entered allmulticast mode [ 2362.160987][T20522] Bluetooth: hci1: command tx timeout [ 2362.627012][ T5117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2362.635406][ T5117] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2362.644673][ T5117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2362.649438][ T5117] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2362.661756][ T5117] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2363.674115][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55717'. [ 2363.862121][ T5205] syzkaller0: entered promiscuous mode [ 2363.863952][ T5205] syzkaller0: entered allmulticast mode [ 2364.045061][T20522] Bluetooth: hci2: command 0x0c1a tx timeout [ 2364.061083][ T5219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55726'. [ 2364.298372][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55738'. [ 2364.505099][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55749'. [ 2364.620117][ T5285] syzkaller0: entered promiscuous mode [ 2364.624778][ T5285] syzkaller0: entered allmulticast mode [ 2364.656117][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55762'. [ 2364.803454][T17465] Bluetooth: hci1: command 0x0419 tx timeout [ 2364.806031][T17465] Bluetooth: hci4: command 0x0c1a tx timeout [ 2364.853041][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55775'. [ 2366.073957][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55806'. [ 2367.030854][T17465] Bluetooth: hci1: command 0x0419 tx timeout [ 2369.236080][T17465] Bluetooth: hci1: command 0x0419 tx timeout [ 2369.579932][ T5512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2369.581959][ T5512] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2369.583921][ T5512] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2370.337298][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55917'. [ 2371.026174][T17465] Bluetooth: hci2: command 0x0c1a tx timeout [ 2371.804043][T17465] Bluetooth: hci1: command 0x0419 tx timeout [ 2371.813928][T17465] Bluetooth: hci4: command 0x0c1a tx timeout [ 2372.179558][ T5685] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2372.181931][ T5685] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2372.184049][ T5685] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2372.475850][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55966'. [ 2373.583675][T17465] Bluetooth: hci2: command 0x0c1a tx timeout [ 2374.353980][T17465] Bluetooth: hci1: command 0x0419 tx timeout [ 2374.354025][T20522] Bluetooth: hci4: command 0x0c1a tx timeout [ 2376.112925][ T5904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2376.115629][ T5904] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2376.118339][ T5904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2377.590367][T20522] Bluetooth: hci2: command 0x0c1a tx timeout [ 2378.271774][T20522] Bluetooth: hci4: command 0x0c1a tx timeout [ 2378.274003][T20522] Bluetooth: hci1: command 0x0419 tx timeout [ 2378.613943][ T40] audit: type=1400 audit(2004195564.557:650): avc: denied { recv } for pid=6125 comm="syz.4.56139" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2379.485424][ T6197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=6197 comm=syz.0.56168 [ 2379.490066][ T6197] netlink: 72 bytes leftover after parsing attributes in process `syz.0.56168'. [ 2383.296756][ T6335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2383.299626][ T6335] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2383.303272][ T6335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2383.751969][ T6400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6400 comm=syz.4.56263 [ 2385.432189][T20522] Bluetooth: hci4: command 0x0c1a tx timeout [ 2385.480076][ T6473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2385.482705][ T6473] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2385.486234][ T6473] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2386.344826][T17465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2386.350179][T17465] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2386.353440][T17465] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2386.357150][T17465] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2386.359836][T17465] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2386.705898][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 2386.796059][T20522] Bluetooth: hci2: command 0x0c1a tx timeout [ 2386.868875][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 2386.872096][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 2386.875262][ T6550] bridge_slave_0: entered allmulticast mode [ 2386.879702][ T6550] bridge_slave_0: entered promiscuous mode [ 2386.905460][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 2386.908358][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 2386.910723][ T6550] bridge_slave_1: entered allmulticast mode [ 2386.914337][ T6550] bridge_slave_1: entered promiscuous mode [ 2387.069566][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2387.083321][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2387.490781][ T6550] team0: Port device team_slave_0 added [ 2387.515209][ T3753] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2387.526019][ T6550] team0: Port device team_slave_1 added [ 2387.560926][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2387.563324][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2387.571176][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2387.576707][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2387.578897][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2387.587275][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2387.626791][ T6550] hsr_slave_0: entered promiscuous mode [ 2387.629181][ T6550] hsr_slave_1: entered promiscuous mode [ 2387.631380][ T6550] debugfs: 'hsr0' already exists in 'hsr' [ 2387.633260][ T6550] Cannot create hsr debugfs directory [ 2387.649158][T17465] Bluetooth: hci4: command 0x0c1a tx timeout [ 2387.651535][T20522] Bluetooth: hci1: command 0x0419 tx timeout [ 2387.657106][ T3753] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2387.788376][ T3753] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2387.907838][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2387.947933][ T3753] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2388.206050][ T3753] bridge_slave_1: left allmulticast mode [ 2388.207843][ T3753] bridge_slave_1: left promiscuous mode [ 2388.209703][ T3753] bridge0: port 2(bridge_slave_1) entered disabled state [ 2388.213882][ T3753] bridge_slave_0: left allmulticast mode [ 2388.215698][ T3753] bridge_slave_0: left promiscuous mode [ 2388.217543][ T3753] bridge0: port 1(bridge_slave_0) entered disabled state [ 2388.599964][T20522] Bluetooth: hci3: command tx timeout [ 2388.659429][ T3753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2388.739159][ T3753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2388.801141][ T3753] bond0 (unregistering): Released all slaves [ 2388.917200][ T3753] tipc: Disabling bearer [ 2388.918879][ T3753] tipc: Left network mode [ 2388.939973][ T6637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=6637 comm=syz.4.56369 [ 2388.944058][ T6637] netlink: 72 bytes leftover after parsing attributes in process `syz.4.56369'. [ 2389.593655][ T6550] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2389.612538][ T6550] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2389.622293][ T6550] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2389.629169][ T6550] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2389.678710][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2389.696834][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 2389.705092][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 2389.708129][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2389.727501][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 2389.730548][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2389.748437][ T3753] hsr_slave_0: left promiscuous mode [ 2389.750895][ T3753] hsr_slave_1: left promiscuous mode [ 2389.752962][ T3753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2389.755305][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2389.768787][ T3753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2389.771608][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2389.799591][ T3753] veth1_macvtap: left promiscuous mode [ 2389.801447][ T3753] veth0_macvtap: left promiscuous mode [ 2389.803251][ T3753] veth1_vlan: left promiscuous mode [ 2389.804941][ T3753] veth0_vlan: left promiscuous mode [ 2390.581212][ T3753] team0 (unregistering): Port device team_slave_1 removed [ 2390.676703][ T3753] team0 (unregistering): Port device team_slave_0 removed [ 2390.813129][T20522] Bluetooth: hci3: command tx timeout [ 2391.411722][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2391.439456][ T6550] veth0_vlan: entered promiscuous mode [ 2391.445536][ T6550] veth1_vlan: entered promiscuous mode [ 2391.476777][ T6550] veth0_macvtap: entered promiscuous mode [ 2391.483806][ T6550] veth1_macvtap: entered promiscuous mode [ 2391.488261][ T6730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.56400'. [ 2391.492028][ T6730] netlink: 32 bytes leftover after parsing attributes in process `syz.4.56400'. [ 2391.494451][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2391.505484][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2391.515014][T13875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2391.519215][T13875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2391.522306][T13875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2391.526341][T13875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2391.615317][T13875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2391.617712][T13875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2391.643991][T13875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2391.646693][T13875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2391.809796][ T6749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=6749 comm=syz.0.56408 [ 2391.814392][ T6749] netlink: 72 bytes leftover after parsing attributes in process `syz.0.56408'. [ 2392.990111][ T6821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=6821 comm=syz.2.56442 [ 2392.995773][ T6821] netlink: 72 bytes leftover after parsing attributes in process `syz.2.56442'. [ 2393.029591][T20522] Bluetooth: hci3: command tx timeout [ 2393.775636][T24699] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2393.805558][T16559] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2393.936815][T24699] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2393.940133][T24699] usb 9-1: config 0 has no interfaces? [ 2393.943496][T24699] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2393.946809][T24699] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.949656][T24699] usb 9-1: Product: syz [ 2393.951448][T24699] usb 9-1: Manufacturer: syz [ 2393.953390][T24699] usb 9-1: SerialNumber: syz [ 2393.958987][T24699] usb 9-1: config 0 descriptor?? [ 2393.990351][T16559] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2393.994612][T16559] usb 7-1: config 0 has no interfaces? [ 2394.001080][T16559] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2394.004929][T16559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.008241][T16559] usb 7-1: Product: syz [ 2394.011208][T16559] usb 7-1: Manufacturer: syz [ 2394.013235][T16559] usb 7-1: SerialNumber: syz [ 2394.017335][T16559] usb 7-1: config 0 descriptor?? [ 2394.179261][T24699] usb 9-1: USB disconnect, device number 24 [ 2394.237070][T16559] usb 7-1: USB disconnect, device number 111 [ 2395.235148][T20522] Bluetooth: hci3: command tx timeout [ 2397.131049][ T7130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7130 comm=syz.0.56592 [ 2397.137637][ T7130] netlink: 72 bytes leftover after parsing attributes in process `syz.0.56592'. [ 2397.442953][ T7147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7147 comm=syz.1.56602 [ 2397.452556][ T7147] netlink: 72 bytes leftover after parsing attributes in process `syz.1.56602'. [ 2398.370562][ T7149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2398.372613][ T7149] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2398.374787][ T7149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2398.377088][ T7149] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2398.379484][ T7149] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2398.388170][ T7149] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2399.499872][ T7235] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2399.501869][ T7235] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2399.503783][ T7235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2399.505703][ T7235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2400.076394][ T7258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2400.080942][ T7258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2400.088606][ T7258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2400.096582][ T7258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2400.099344][ T7258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2400.584500][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.600164][ T7290] chnl_net:caif_netlink_parms(): no params data found [ 2400.696122][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.706694][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 2400.709713][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 2400.713594][ T7290] bridge_slave_0: entered allmulticast mode [ 2400.717285][ T7290] bridge_slave_0: entered promiscuous mode [ 2400.720996][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 2400.724047][ T7290] bridge0: port 2(bridge_slave_1) entered disabled state [ 2400.727010][ T7290] bridge_slave_1: entered allmulticast mode [ 2400.730005][ T7290] bridge_slave_1: entered promiscuous mode [ 2400.780777][ T7290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2400.785233][ T7290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2400.801018][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.836584][ T7290] team0: Port device team_slave_0 added [ 2400.840248][ T7290] team0: Port device team_slave_1 added [ 2400.887680][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.893988][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2400.895979][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2400.903134][ T7290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2400.909205][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2400.911299][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2400.918972][ T7290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2400.971050][ T7290] hsr_slave_0: entered promiscuous mode [ 2400.973161][ T7290] hsr_slave_1: entered promiscuous mode [ 2400.975343][ T7290] debugfs: 'hsr0' already exists in 'hsr' [ 2400.976963][ T7290] Cannot create hsr debugfs directory [ 2401.099575][ T12] bridge_slave_1: left allmulticast mode [ 2401.101207][ T12] bridge_slave_1: left promiscuous mode [ 2401.102913][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2401.108072][ T12] bridge_slave_0: left allmulticast mode [ 2401.109883][ T12] bridge_slave_0: left promiscuous mode [ 2401.111871][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2401.537951][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2401.578335][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2401.624627][ T12] bond0 (unregistering): Released all slaves [ 2401.707235][ T12] tipc: Left network mode [ 2401.724623][ T7258] Bluetooth: hci3: command 0x0c1a tx timeout [ 2401.726791][ T7258] Bluetooth: hci1: command 0x0419 tx timeout [ 2401.728740][ T7258] Bluetooth: hci4: command 0x0c1a tx timeout [ 2401.923946][ T7433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7433 comm=syz.2.56729 [ 2401.929808][ T7433] netlink: 72 bytes leftover after parsing attributes in process `syz.2.56729'. [ 2402.310945][ T7402] Bluetooth: hci0: command tx timeout [ 2402.332922][ T7290] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2402.350477][ T7290] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2402.366599][ T7290] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2402.377008][ T12] hsr_slave_0: left promiscuous mode [ 2402.381789][ T12] hsr_slave_1: left promiscuous mode [ 2402.383930][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2402.399716][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2402.402959][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2402.405548][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2402.441485][ T12] veth1_macvtap: left promiscuous mode [ 2402.443282][ T12] veth0_macvtap: left promiscuous mode [ 2402.445175][ T12] veth1_vlan: left promiscuous mode [ 2402.447096][ T12] veth0_vlan: left promiscuous mode [ 2403.212324][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2403.299719][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2403.819155][ T7509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7509 comm=syz.0.56760 [ 2403.825351][ T7509] netlink: 72 bytes leftover after parsing attributes in process `syz.0.56760'. [ 2403.929968][ T7402] Bluetooth: hci3: command 0x0c1a tx timeout [ 2404.017271][ T7290] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2404.061711][ T7290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2404.078359][ T7290] 8021q: adding VLAN 0 to HW filter on device team0 [ 2404.095539][T23439] bridge0: port 1(bridge_slave_0) entered blocking state [ 2404.098506][T23439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2404.124206][T23439] bridge0: port 2(bridge_slave_1) entered blocking state [ 2404.127226][T23439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2404.294709][ T7290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2404.432688][ T7290] veth0_vlan: entered promiscuous mode [ 2404.438830][ T7290] veth1_vlan: entered promiscuous mode [ 2404.508321][ T7290] veth0_macvtap: entered promiscuous mode [ 2404.518071][ T7290] veth1_macvtap: entered promiscuous mode [ 2404.526613][ T7402] Bluetooth: hci0: command tx timeout [ 2404.530322][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2404.536519][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2404.543257][ T3753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.547029][ T3753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.550811][ T3753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.556547][ T3753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.620961][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2404.628085][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2404.648297][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2404.651392][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2404.757554][ T7549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7549 comm=syz.4.56773 [ 2404.762918][ T7549] netlink: 72 bytes leftover after parsing attributes in process `syz.4.56773'. [ 2404.957781][ T7571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7571 comm=syz.1.56784 [ 2404.961926][ T7571] netlink: 72 bytes leftover after parsing attributes in process `syz.1.56784'. [ 2405.151452][ T7599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7599 comm=syz.2.56795 [ 2405.158118][ T7599] netlink: 72 bytes leftover after parsing attributes in process `syz.2.56795'. [ 2406.146267][ T7402] Bluetooth: hci3: command 0x0c1a tx timeout [ 2406.743118][ T7402] Bluetooth: hci0: command tx timeout [ 2408.066550][ T7832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7832 comm=syz.1.56909 [ 2408.070795][ T7832] netlink: 72 bytes leftover after parsing attributes in process `syz.1.56909'. [ 2408.959259][ T7402] Bluetooth: hci0: command tx timeout [ 2409.215020][T16559] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2409.398581][T16559] usb 5-1: config 0 has no interfaces? [ 2409.402667][T16559] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2409.406540][T16559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.410838][T16559] usb 5-1: Product: syz [ 2409.412578][T16559] usb 5-1: Manufacturer: syz [ 2409.414480][T16559] usb 5-1: SerialNumber: syz [ 2409.418677][T16559] usb 5-1: config 0 descriptor?? [ 2409.638781][T16559] usb 5-1: USB disconnect, device number 100 [ 2411.007653][ T7999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7999 comm=syz.0.56986 [ 2411.012874][ T7999] netlink: 72 bytes leftover after parsing attributes in process `syz.0.56986'. [ 2412.559639][T20522] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2412.564845][T20522] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2412.568453][T20522] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2412.572946][T20522] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2412.576298][T20522] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2412.816263][ T8083] chnl_net:caif_netlink_parms(): no params data found [ 2412.981765][ T8083] bridge0: port 1(bridge_slave_0) entered blocking state [ 2412.984259][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state [ 2412.987811][ T8083] bridge_slave_0: entered allmulticast mode [ 2412.991093][ T8083] bridge_slave_0: entered promiscuous mode [ 2412.994312][ T8083] bridge0: port 2(bridge_slave_1) entered blocking state [ 2412.997196][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 2413.001150][ T8083] bridge_slave_1: entered allmulticast mode [ 2413.003814][ T8083] bridge_slave_1: entered promiscuous mode [ 2413.035811][ T8083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2413.041890][ T8083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2413.077767][ T8083] team0: Port device team_slave_0 added [ 2413.081570][ T8083] team0: Port device team_slave_1 added [ 2413.116253][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2413.118883][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2413.127859][ T8083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2413.132692][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2413.134975][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2413.143556][ T8083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2413.185924][ T8083] hsr_slave_0: entered promiscuous mode [ 2413.188348][ T8083] hsr_slave_1: entered promiscuous mode [ 2413.191924][ T8083] debugfs: 'hsr0' already exists in 'hsr' [ 2413.193712][ T8083] Cannot create hsr debugfs directory [ 2413.550593][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.701300][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.766646][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.845642][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2414.143225][ T62] bridge_slave_1: left allmulticast mode [ 2414.145042][ T62] bridge_slave_1: left promiscuous mode [ 2414.146899][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 2414.154368][ T62] bridge_slave_0: left allmulticast mode [ 2414.156361][ T62] bridge_slave_0: left promiscuous mode [ 2414.158188][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 2414.550994][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2414.587342][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2414.671911][ T62] bond0 (unregistering): Released all slaves [ 2414.748960][ T62] tipc: Left network mode [ 2414.755888][ T7402] Bluetooth: hci2: command tx timeout [ 2415.423582][ T8083] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2415.452405][ T62] hsr_slave_0: left promiscuous mode [ 2415.462896][ T62] hsr_slave_1: left promiscuous mode [ 2415.473674][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2415.475914][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2415.484807][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2415.487151][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2415.552305][ T62] veth1_macvtap: left promiscuous mode [ 2415.554077][ T62] veth0_macvtap: left promiscuous mode [ 2415.561148][ T62] veth1_vlan: left promiscuous mode [ 2415.562901][ T62] veth0_vlan: left promiscuous mode [ 2416.392067][ T62] team0 (unregistering): Port device team_slave_1 removed [ 2416.474302][ T62] team0 (unregistering): Port device team_slave_0 removed [ 2416.983437][ T7402] Bluetooth: hci2: command tx timeout [ 2417.171019][ T8083] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2417.175335][ T8083] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2417.180623][ T8218] netlink: 188 bytes leftover after parsing attributes in process `syz.4.57079'. [ 2417.183829][ T8083] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2417.230014][ T8083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2417.240548][ T8083] 8021q: adding VLAN 0 to HW filter on device team0 [ 2417.245350][T23439] bridge0: port 1(bridge_slave_0) entered blocking state [ 2417.247580][T23439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2417.254538][T23439] bridge0: port 2(bridge_slave_1) entered blocking state [ 2417.256714][T23439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2417.396051][ T8083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2417.425069][ T8083] veth0_vlan: entered promiscuous mode [ 2417.440136][ T8083] veth1_vlan: entered promiscuous mode [ 2417.456463][ T8083] veth0_macvtap: entered promiscuous mode [ 2417.460205][ T8083] veth1_macvtap: entered promiscuous mode [ 2417.477039][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2417.483157][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2417.489373][ T3753] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.492196][ T3753] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.501125][ T3753] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.504345][ T3753] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.582851][ T3753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2417.585284][ T3753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2417.605936][ T3753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2417.608359][ T3753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2417.727218][ T8289] netlink: 188 bytes leftover after parsing attributes in process `syz.2.57108'. [ 2417.853577][ T8310] netlink: 188 bytes leftover after parsing attributes in process `syz.0.57117'. [ 2418.075625][ T40] audit: type=1800 audit(2004195601.599:651): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.57129" name="cpuacct.usage_percpu" dev="overlay" ino=70 res=0 errno=0 [ 2418.388460][ T8359] netlink: 188 bytes leftover after parsing attributes in process `syz.1.57141'. [ 2418.853428][ T40] audit: type=1800 audit(2004195602.322:652): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.57162" name="cpuacct.usage_percpu" dev="overlay" ino=2474 res=0 errno=0 [ 2419.188513][ T7402] Bluetooth: hci2: command tx timeout [ 2419.703306][ T8443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8443 comm=syz.0.57173 [ 2420.075455][ T8463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8463 comm=syz.1.57193 [ 2420.299489][ T8483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8483 comm=syz.0.57205 [ 2420.556870][ T8505] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2421.214424][ T8544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8544 comm=syz.1.57234 [ 2421.416411][ T7402] Bluetooth: hci2: command tx timeout [ 2421.623872][ T8566] netlink: 188 bytes leftover after parsing attributes in process `syz.0.57244'. [ 2422.360698][ T8626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8626 comm=syz.1.57275 [ 2425.071694][ T8780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8780 comm=syz.0.57353 [ 2425.260832][ T8810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8810 comm=syz.0.57366 [ 2425.430813][ T8834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8834 comm=syz.1.57378 [ 2425.435523][ T8834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8834 comm=syz.1.57378 [ 2426.142130][ T8887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8887 comm=syz.2.57404 [ 2426.146201][ T8887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8887 comm=syz.2.57404 [ 2426.590408][ T8923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8923 comm=syz.2.57421 [ 2426.599755][ T8923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8923 comm=syz.2.57421 [ 2426.760466][ T8941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8941 comm=syz.2.57431 [ 2426.766847][ T8941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pid=8941 comm=syz.2.57431 [ 2427.707998][ T9000] netlink: 72 bytes leftover after parsing attributes in process `syz.1.57461'. [ 2442.284089][ T9965] binder: Bad value for 'max' [ 2442.402471][ T9989] binder: Bad value for 'max' [ 2442.512614][T10010] binder: Bad value for 'max' [ 2443.222069][T20522] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2443.226817][T20522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2443.230316][T20522] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2443.232892][T20522] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2443.235444][T20522] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2443.417525][T10111] chnl_net:caif_netlink_parms(): no params data found [ 2443.777471][ T93] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2443.818655][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 2443.820933][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 2443.823361][T10111] bridge_slave_0: entered allmulticast mode [ 2443.828801][T10111] bridge_slave_0: entered promiscuous mode [ 2443.832986][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 2443.835734][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 2443.838136][T10111] bridge_slave_1: entered allmulticast mode [ 2443.840722][T10111] bridge_slave_1: entered promiscuous mode [ 2443.891454][ T93] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2443.901752][T10111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2443.908097][T10111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2443.948151][T10111] team0: Port device team_slave_0 added [ 2443.951706][T10111] team0: Port device team_slave_1 added [ 2444.007539][ T93] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2444.013085][T10111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2444.015267][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2444.024853][T10111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2444.029465][T10111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2444.031592][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2444.042438][T10111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2444.084094][T10111] hsr_slave_0: entered promiscuous mode [ 2444.086403][T10111] hsr_slave_1: entered promiscuous mode [ 2444.088502][T10111] debugfs: 'hsr0' already exists in 'hsr' [ 2444.090984][T10111] Cannot create hsr debugfs directory [ 2444.107133][ T93] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2444.327986][ T93] bridge_slave_1: left allmulticast mode [ 2444.329839][ T93] bridge_slave_1: left promiscuous mode [ 2444.331682][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 2444.336634][ T93] bridge_slave_0: left allmulticast mode [ 2444.338424][ T93] bridge_slave_0: left promiscuous mode [ 2444.340265][ T93] bridge0: port 1(bridge_slave_0) entered disabled state [ 2444.786027][ T93] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2444.831979][ T93] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2444.979794][ T93] bond0 (unregistering): Released all slaves [ 2445.443346][T20522] Bluetooth: hci4: command tx timeout [ 2445.787816][ T93] hsr_slave_0: left promiscuous mode [ 2445.790880][ T93] hsr_slave_1: left promiscuous mode [ 2445.793517][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2445.802761][ T93] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2445.806312][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2445.808631][ T93] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2445.856662][ T93] veth1_macvtap: left promiscuous mode [ 2445.858514][ T93] veth0_macvtap: left promiscuous mode [ 2445.860381][ T93] veth1_vlan: left promiscuous mode [ 2445.862058][ T93] veth0_vlan: left promiscuous mode [ 2446.649535][ T93] team0 (unregistering): Port device team_slave_1 removed [ 2446.749128][ T93] team0 (unregistering): Port device team_slave_0 removed [ 2447.650510][T10111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2447.655099][T10111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2447.661723][T10111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2447.669227][T10111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2447.670605][T20522] Bluetooth: hci4: command tx timeout [ 2447.738416][T10111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2447.755232][T10111] 8021q: adding VLAN 0 to HW filter on device team0 [ 2447.765664][T13875] bridge0: port 1(bridge_slave_0) entered blocking state [ 2447.767968][T13875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2447.782853][T13875] bridge0: port 2(bridge_slave_1) entered blocking state [ 2447.785805][T13875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2447.940312][T10111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2447.966497][T10111] veth0_vlan: entered promiscuous mode [ 2447.976399][T10111] veth1_vlan: entered promiscuous mode [ 2447.992441][T10111] veth0_macvtap: entered promiscuous mode [ 2447.996369][T10111] veth1_macvtap: entered promiscuous mode [ 2448.005225][T10111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2448.015809][T10111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2448.024241][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2448.027053][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2448.029771][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2448.046357][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2448.088263][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2448.091438][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2448.114734][T13875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2448.117247][T13875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2449.878614][T20522] Bluetooth: hci4: command tx timeout [ 2451.390192][T10859] tmpfs: Bad value for 'size' [ 2452.092282][T20522] Bluetooth: hci4: command tx timeout [ 2453.375971][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2453.757237][T11091] tmpfs: Bad value for 'size' [ 2454.589369][T11175] tmpfs: Bad value for 'huge' [ 2454.621446][T11179] tmpfs: Bad value for 'size' [ 2455.118597][T11211] tmpfs: Bad value for 'size' [ 2455.277822][T11237] tmpfs: Bad value for 'size' [ 2457.174210][T11351] binder: Bad value for 'max' [ 2458.282207][T11447] tmpfs: Bad value for 'size' [ 2458.691623][ T7402] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2458.695723][ T7402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2458.701140][ T7402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2458.703898][ T7402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2458.706438][ T7402] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2458.829183][ C2] ------------[ cut here ]------------ [ 2458.831161][ C2] ODEBUG: free active (active state 0) object: ffff88802d3f3490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 2458.835583][ C2] WARNING: CPU: 2 PID: 0 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 2458.838742][ C2] Modules linked in: [ 2458.840745][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 2458.844780][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2458.848453][ C2] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 2458.850924][ C2] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 81 f0 8b 4c 89 e6 48 c7 c7 a0 75 f0 8b e8 7f b3 ce fc 90 <0f> 0b 90 90 58 83 05 96 d7 d5 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 2458.858820][ C2] RSP: 0018:ffffc90000648a18 EFLAGS: 00010282 [ 2458.861285][ C2] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 [ 2458.864515][ C2] RDX: ffff88801dea4900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 2458.867769][ C2] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2458.871184][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf07c40 [ 2458.874530][ C2] R13: ffffffff8b9021a0 R14: ffffffff8a4d9d70 R15: ffffc90000648b18 [ 2458.877808][ C2] FS: 0000000000000000(0000) GS:ffff8880d6c06000(0000) knlGS:0000000000000000 [ 2458.881578][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2458.884228][ C2] CR2: 00007f3c75be7dac CR3: 0000000033220000 CR4: 0000000000352ef0 [ 2458.887387][ C2] Call Trace: [ 2458.888670][ C2] [ 2458.889890][ C2] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2458.892191][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2458.894518][ C2] debug_check_no_obj_freed+0x4b7/0x600 [ 2458.896567][ C2] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2458.898537][ C2] kfree+0x291/0x6d0 [ 2458.899785][ C2] ? rose_timer_expiry+0x53f/0x630 [ 2458.901412][ C2] ? rose_timer_expiry+0x53f/0x630 [ 2458.903024][ C2] rose_timer_expiry+0x53f/0x630 [ 2458.904593][ C2] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2458.906453][ C2] call_timer_fn+0x19a/0x620 [ 2458.908356][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 2458.910330][ C2] ? rcu_is_watching+0x12/0xc0 [ 2458.912066][ C2] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2458.913888][ C2] __run_timers+0x6ef/0x960 [ 2458.915320][ C2] ? __pfx___run_timers+0x10/0x10 [ 2458.917261][ C2] run_timer_base+0x114/0x190 [ 2458.918855][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 2458.920485][ C2] ? rcu_is_watching+0x12/0xc0 [ 2458.922065][ C2] run_timer_softirq+0x1a/0x40 [ 2458.923627][ C2] handle_softirqs+0x219/0x8e0 [ 2458.925155][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 2458.926884][ C2] __irq_exit_rcu+0x109/0x170 [ 2458.928393][ C2] irq_exit_rcu+0x9/0x30 [ 2458.929758][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2458.931513][ C2] [ 2458.932438][ C2] [ 2458.933453][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2458.935342][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2458.937225][ C2] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 84 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2458.943128][ C2] RSP: 0018:ffffc90000187de8 EFLAGS: 00000286 [ 2458.945134][ C2] RAX: 0000000000e52203 RBX: 0000000000000002 RCX: ffffffff8b60a2a9 [ 2458.947669][ C2] RDX: 0000000000000000 RSI: ffffffff8da2b882 RDI: ffffffff8bf07040 [ 2458.950104][ C2] RBP: ffffed1003bd4920 R08: 0000000000000001 R09: ffffed100d4c6655 [ 2458.952480][ C2] R10: ffff88806a6332ab R11: 0000000000000001 R12: 0000000000000002 [ 2458.954974][ C2] R13: ffff88801dea4900 R14: ffffffff90820ed0 R15: 0000000000000000 [ 2458.957439][ C2] ? ct_kernel_exit+0x139/0x190 [ 2458.958968][ C2] default_idle+0x13/0x20 [ 2458.960339][ C2] default_idle_call+0x6c/0xb0 [ 2458.961864][ C2] do_idle+0x38d/0x500 [ 2458.963160][ C2] ? __pfx_do_idle+0x10/0x10 [ 2458.964663][ C2] ? trace_sched_exit_tp+0x2f/0x120 [ 2458.966484][ C2] cpu_startup_entry+0x4f/0x60 [ 2458.968271][ C2] start_secondary+0x21d/0x2b0 [ 2458.970283][ C2] ? __pfx_start_secondary+0x10/0x10 [ 2458.972500][ C2] common_startup_64+0x13e/0x148 [ 2458.974617][ C2] [ 2458.976005][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2458.978790][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 2458.981545][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2458.984856][ C2] Call Trace: [ 2458.985941][ C2] [ 2458.986904][ C2] dump_stack_lvl+0x3d/0x1f0 [ 2458.988352][ C2] vpanic+0x640/0x6f0 [ 2458.989682][ C2] ? debug_print_object+0x1a2/0x2b0 [ 2458.991308][ C2] panic+0xca/0xd0 [ 2458.992494][ C2] ? __pfx_panic+0x10/0x10 [ 2458.993921][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 2458.995520][ C2] check_panic_on_warn+0xab/0xb0 [ 2458.997422][ C2] __warn+0xf6/0x3c0 [ 2458.998741][ C2] ? debug_print_object+0x1a2/0x2b0 [ 2459.000370][ C2] report_bug+0x3c3/0x580 [ 2459.001736][ C2] ? debug_print_object+0x1a2/0x2b0 [ 2459.003359][ C2] handle_bug+0x184/0x210 [ 2459.004710][ C2] exc_invalid_op+0x17/0x50 [ 2459.006205][ C2] asm_exc_invalid_op+0x1a/0x20 [ 2459.008221][ C2] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 2459.010633][ C2] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 81 f0 8b 4c 89 e6 48 c7 c7 a0 75 f0 8b e8 7f b3 ce fc 90 <0f> 0b 90 90 58 83 05 96 d7 d5 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 2459.018045][ C2] RSP: 0018:ffffc90000648a18 EFLAGS: 00010282 [ 2459.020013][ C2] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 [ 2459.023234][ C2] RDX: ffff88801dea4900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 2459.026330][ C2] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2459.029401][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf07c40 [ 2459.031871][ C2] R13: ffffffff8b9021a0 R14: ffffffff8a4d9d70 R15: ffffc90000648b18 [ 2459.034329][ C2] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2459.036100][ C2] ? __warn_printk+0x198/0x350 [ 2459.037754][ C2] ? __warn_printk+0x1a5/0x350 [ 2459.039210][ C2] ? debug_print_object+0x1a1/0x2b0 [ 2459.040767][ C2] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2459.042433][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2459.044220][ C2] debug_check_no_obj_freed+0x4b7/0x600 [ 2459.045910][ C2] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2459.047908][ C2] kfree+0x291/0x6d0 [ 2459.049564][ C2] ? rose_timer_expiry+0x53f/0x630 [ 2459.051333][ C2] ? rose_timer_expiry+0x53f/0x630 [ 2459.052893][ C2] rose_timer_expiry+0x53f/0x630 [ 2459.054427][ C2] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2459.056161][ C2] call_timer_fn+0x19a/0x620 [ 2459.057887][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 2459.059558][ C2] ? rcu_is_watching+0x12/0xc0 [ 2459.061176][ C2] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2459.063000][ C2] __run_timers+0x6ef/0x960 [ 2459.064433][ C2] ? __pfx___run_timers+0x10/0x10 [ 2459.066076][ C2] run_timer_base+0x114/0x190 [ 2459.067578][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 2459.069241][ C2] ? rcu_is_watching+0x12/0xc0 [ 2459.070735][ C2] run_timer_softirq+0x1a/0x40 [ 2459.072221][ C2] handle_softirqs+0x219/0x8e0 [ 2459.073708][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 2459.075341][ C2] __irq_exit_rcu+0x109/0x170 [ 2459.076866][ C2] irq_exit_rcu+0x9/0x30 [ 2459.078234][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2459.079971][ C2] [ 2459.080900][ C2] [ 2459.081805][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2459.083613][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2459.085356][ C2] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 84 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2459.091417][ C2] RSP: 0018:ffffc90000187de8 EFLAGS: 00000286 [ 2459.093369][ C2] RAX: 0000000000e52203 RBX: 0000000000000002 RCX: ffffffff8b60a2a9 [ 2459.095861][ C2] RDX: 0000000000000000 RSI: ffffffff8da2b882 RDI: ffffffff8bf07040 [ 2459.098571][ C2] RBP: ffffed1003bd4920 R08: 0000000000000001 R09: ffffed100d4c6655 [ 2459.100982][ C2] R10: ffff88806a6332ab R11: 0000000000000001 R12: 0000000000000002 [ 2459.103318][ C2] R13: ffff88801dea4900 R14: ffffffff90820ed0 R15: 0000000000000000 [ 2459.105813][ C2] ? ct_kernel_exit+0x139/0x190 [ 2459.107362][ C2] default_idle+0x13/0x20 [ 2459.109059][ C2] default_idle_call+0x6c/0xb0 [ 2459.111111][ C2] do_idle+0x38d/0x500 [ 2459.112757][ C2] ? __pfx_do_idle+0x10/0x10 [ 2459.114760][ C2] ? trace_sched_exit_tp+0x2f/0x120 [ 2459.116889][ C2] cpu_startup_entry+0x4f/0x60 [ 2459.118852][ C2] start_secondary+0x21d/0x2b0 [ 2459.120893][ C2] ? __pfx_start_secondary+0x10/0x10 [ 2459.123081][ C2] common_startup_64+0x13e/0x148 [ 2459.124977][ C2] [ 2459.126537][ C2] Kernel Offset: disabled [ 2459.128298][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:20:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000100000 RBX=ffff888106241440 RCX=0000000000000014 RDX=ffff88802c578000 RSI=ffffffff8632609a RDI=0000000000000005 RBP=0000000000000014 RSP=ffffc90003b77070 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000014 R11=0000000000000001 R12=ffffc9000013d138 R13=ffff88810624149c R14=ffff888106241448 R15=0000000000000000 RIP=ffffffff863260a7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5e0794a300 ffffffff 00c00000 GS =0000 ffff8880d6a06000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005605405e9f40 CR3=0000000029962000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=12c68a4a5dd734df 568f87ad9256ab27 12c68a4a5dd734df 568f87ad9256ab27 12c68a4a5dd734df 568f87ad9256ab27 12c68a4a5dd734df 568f87ad9256ab27 ZMM18=c4b0f8c8222bcf11 b162057f0062fb44 c4b0f8c8222bcf11 b162057f0062fb44 c4b0f8c8222bcf11 b162057f0062fb44 c4b0f8c8222bcf11 b162057f0062fb44 ZMM19=860b010000000000 0000000000000004 860b010000000000 0000000000000003 860b010000000000 0000000000000002 860b010000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060070f00c800410 10000fffffffffff ff040680041a0800 0a0157b404100006 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0030fffffffffff ff0406a00308c080 80881000069003df 632020c1c59903e1 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22c41ec00ff06f46 f2fa0a4eae0fdee2 0f4066c86e19ef41 c4d100ca4a080003 ZMM24=38e2dd7b38e2dd7b 38e2dd7b38e2dd7b 38e2dd7b38e2dd7b 38e2dd7b38e2dd7b 38e2dd7b38e2dd7b 38e2dd7b38e2dd7b 38e2dd7b38e2dd7b 38e2dd7b38e2dd7b ZMM25=58edb73158edb731 58edb73158edb731 58edb73158edb731 58edb73158edb731 58edb73158edb731 58edb73158edb731 58edb73158edb731 58edb73158edb731 ZMM26=a665ec2fa665ec2f a665ec2fa665ec2f a665ec2fa665ec2f a665ec2fa665ec2f a665ec2fa665ec2f a665ec2fa665ec2f a665ec2fa665ec2f a665ec2fa665ec2f ZMM27=ae12d229ae12d229 ae12d229ae12d229 ae12d229ae12d229 ae12d229ae12d229 ae12d229ae12d229 ae12d229ae12d229 ae12d229ae12d229 ae12d229ae12d229 ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7f1001007f100100 7f1001007f100100 7f1001007f100100 7f1001007f100100 7f1001007f100100 7f1001007f100100 7f1001007f100100 7f1001007f100100 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff8b616826 RDX=1ffff92000cd0000 RSI=ffffffff8bf06fc0 RDI=ffff88803823c920 RBP=ffffc900066875d0 RSP=ffffc90006687418 R8 =0000000000000000 R9 =fffffbfff21041da R10=ffffffff90820ed7 R11=0000000000000001 R12=0000000000000001 R13=ffffc90006680000 R14=ffff88806a53a380 R15=dffffc0000000000 RIP=ffffffff8b616900 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555f41f500 ffffffff 00c00000 GS =0000 ffff8880d6b06000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f99f2b156c0 CR3=00000000480bb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5ad58150 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99f1e13050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99f1e1305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99f1e13057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99f1e1306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99f1e130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99f1e131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852963d5 RDI=ffffffff9adda780 RBP=ffffffff9adda740 RSP=ffffc90000648380 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9adda740 R15=ffffffff85296370 RIP=ffffffff852963ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c06000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3c75be7dac CR3=0000000033220000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080000010 Opmask01=0000000000021d1f Opmask02=00000000ffff1fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2700000010 000000003de00ec6 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9a46c8f8 00007ffe9a46c930 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000649 00007f275208c38d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2700000010 00007ffe9a46c930 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9a46c928 00007ffe9a46c960 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2751f20025 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9a46c960 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f72726520636269 6c67206c61746146 000000706d74752f 6e75722f7261762f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3031747600006574 756c610000000072 2d20612d20746e75 6f6d752f6e69622f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1312575500004657 564f420000000051 0e03420e03574d56 4c4e560c4d4a410c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572202c74696e69 73797320666f2065 6e6f203d3d202020 206e6f6974636120 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000002 RBX=0000000000000001 RCX=ffffffff820bc2fe RDX=ffff888021fe4900 RSI=00000000000000ff RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900041bf668 R8 =0000000000000005 R9 =00000000000000ff R10=0000000000000001 R11=0000000000000001 R12=0000000000000008 R13=ffffea0000ca9af0 R14=00007f3c74e00000 R15=dffffc0000000000 RIP=ffffffff81bce28c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555741e5500 ffffffff 00c00000 GS =0000 ffff8880d6d06000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3c767156c0 CR3=000000003890a000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000002 DR2=0000000000000081 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1e748990 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c75a13050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c75a1305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c75a13057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c75a1306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c75a130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c75a131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000