last executing test programs: 3.488228519s ago: executing program 1 (id=1946): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x8, 0x1, 0x80000000}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0xa, @sliced={0x80, [0x3, 0x3, 0x2, 0xa, 0x0, 0x2, 0xffff, 0xa, 0x6f, 0xfd10, 0xfffe, 0x6, 0x1, 0x8aa, 0x4, 0xea, 0x400, 0x8, 0x6f, 0xa6b1, 0x9, 0x4, 0x1, 0x4, 0x6, 0x0, 0x4, 0x4, 0x6, 0x6, 0x9, 0x8, 0x9, 0x2, 0x1, 0x3, 0x8, 0x4, 0x5, 0x15c2, 0x58, 0x5, 0xd5b1, 0x9, 0x0, 0x6, 0x6, 0x5], 0xfffffffe}}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000001c0)) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) ioctl$sock_ifreq(r3, 0x8918, &(0x7f00000002c0)={'ip6_vti0\x00', @ifru_flags=0x8000}) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x8, 0x8}, {0x0, 0x1174, 0x3ff, 0xf5e}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x63}, {0x7, [{@none, 0x6, 0x0, "2245e6", 0x3}, {@none, 0x80, 0x1, "d6651d", 0x5, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x3a, "acfee7", 0xbdcd, 0x7}, {@none, 0x1, 0x8, "d51d42", 0x9, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x81, "85b8b3", 0xfff1, 0x4}, {@none, 0x0, 0x1, "e1e843", 0xb, 0x10}, {@any, 0x6, 0x1, "050b65", 0x2, 0xd}]}}}, 0x66) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000003c0)={0x3, "d700741b95a7426269585750e5455626b28082d56588c7056b9154dd63568cb4", 0x2, 0x0, 0x4, 0x10003, 0x43, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000440)={0x0, 0x1, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000004c0)={"54b6916b639ad012f1c0f995ca687f9fe7768d8907ab52b32c7071e236b18d11", r5}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000500)={0x0, 0xb9, "3c99f945b43c1e977c2f56111d6ae10f1aee0cb6209f3d639bef7175811c694c8277d57f3fb3b3a34822451302dd6dd833dec47c0baa3d1046aecbd58ec58800477d1682566c6272403719d2159a74077b23d6e1474e1c40e95b8b38c09a3a16ceb4e5c068956383e8e483ee941a4d1fa2744a51b4246b268b26b8020203fa5f527107c38c0f540cd955414fff1ebedbce0e8cf9ffd9a3c84db30522f2d0fe97b964cc339a1e10bcb2e05b920ebfd069ad9055990677ba4ad3"}, &(0x7f0000000600)=0xc1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000640)={r7, @in={{0x2, 0x4e20, @multicast1}}, 0x3ff, 0x5}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000740)={0x7, 0x70, {}, {0xee00}, 0x7fff, 0x9}) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000780)={{{@in=@empty, @in=@local, 0x4e23, 0x800, 0x4e21, 0x965, 0x2, 0x180, 0x80, 0x3b, r8, r9}, {0x2, 0xb8f, 0x4, 0x7, 0x7fffffff, 0x84, 0xe33}, {0x0, 0xffffffffffffffff, 0x7, 0x9}, 0x7, 0x0, 0x2, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0xff}, 0x0, @in6=@local, 0x0, 0x3, 0x0, 0x6f, 0xfcc, 0x0, 0x1000}}, 0xe8) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000880)) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f00000008c0)=""/188) write$snddsp(r5, &(0x7f0000000980)="7ae4e6bb034707b177aff902275202558e2f105d546fc7be782f7b40c4ebac14ed04705d5691990614968b8bfd5eb0285c9f4a0bd61237052d1efdc6d649dd1c0c13820f28ea70842e5c9c4453d01561880e6675d67cec40361aea2db503c561f60362bf23884a9e89caa5293d7b4bbfb6221755d1", 0x75) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f0000000a00)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000a80)=0x7, 0x4) sendmsg$inet(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000ac0)="ef982bde69b415146e34de9d1644f7e3a2cff53ebf94b53b39b106d0999550c21fcfe702b05be428105ee3daa6bcb0ed666d4ba69f163431b30dad2c959f59fe618fa0dd067456d65492ca9bf47dbcba3db50e2a5da76ce85098254c48a2244e92d88fd027a8d5a5af4b60a284eae42263083bcfe177a312d58e82e9fdf429b5500d3d1c5381606de110ef44f2c0450f7d385282509288280983628ef741e5f1271f668465994456652f42360030", 0xae}, {&(0x7f0000000b80)="015dba707d6e52fdd51b40a58654bee502c5256c8da40c4445ed7f4fc614140668a08faaa34aee0e52028842fe17df184ef8718ac48fd599b1edf7e3f188f7db159017a676e9465db07f", 0x4a}, {&(0x7f0000000c00)="b2088c857536f52af4308d7ae01a44acccad01411dac3cab27d417df93f7039e485ddd3c3b586aede4057953a267654d68376b1808d7fafa5444a6737cd7ed55559d67cbea6c58f5e067ec250517edf9ba158fc75989eeb11571300a38ff1be1b7e064e94751c03f536a99dd42772b886095682859ccffd7153f654baeeb917febbef610807a539cba6543947697f4cf89be7f0d290ced9b88cda3e58fc0670afeba8e3e25bed2bd07030df03e65d6fef35ca120228dd768eed285758d97a5c7eed15cc64122a61c925c566d3371d13e8d6954", 0xd3}, {&(0x7f0000000d00)="841db500ac8e50c39187cb4233032e76d987bf570191612a72b282453bb5934c41a02518e40027c374d031bf11c643461a6cd8e04ac06fa2c4c6723cd332aeb2b140eaab52a5d0b148e78042050d95a532944dec0522137e20bd3326181a26a5da54f70164436694a19dca89d319333399f0db0608ef0934e90fc0a16a3cc2754ddab5572bfd3104f76aa8a9adbaa5c33d04c583a60ea74f4313c45ab0592706e5757a8d1ba0addc0c7b4b7f64502b0927e4ff259e482655a7416c522b41b6209088cd", 0xc3}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="4eceea4d20ea30804471dc606d80833d24c53c6f9d6983653ea6579b333d8608fa4d863530f14935ad0e9e1de51712818aea52d99896", 0x36}, {&(0x7f0000000e80)="2f67ebd8573065faf3de76928ce144e48a97119cd34384d796497a85857f0862b0c9da631f596b57a4a965a139f8e585f78a48273627f3cdfd7cc06e80b3c489bed5b5650014291884", 0x49}, {&(0x7f0000000f00)="571b3f554d2ef03f241f775dfc86aba59d3f497c825b3f07aa557c389c4b75118cb16a692a91b3523b4a852a94a59f6331d9aa823739b7872b86079c184d26df72b7a0420b42d20b1775b0c418aaeacb67e16e64d8dc623906aaed8c71a296ebb291f4c97bf3e0be07132975b3b6986c2726047c28a6991a1f13aafdded31d15ae0f1670f0ba947809ae06f1635db2a7a9d9e295b6a2e7986d", 0x99}, {&(0x7f0000000fc0)="052925b6ee29c2b9a94035ddab680f688fb6ae8efcf0214aec73e9ccd1a8926d48e0625a12e9be54ae72fc62704bffefb973eba09e7a7cccb12e7ca05c3a4e82912587a043583d1065beb918c9f6575fb445ca872f1160d4587c00d5bedcefe29e5942029126d057e51443e8d6d253b682d9c7cc5cdc38f556f9bd4003b6a7439f2f8ad91c76c708d384eca1311c08ff7ed800085dcd5290820f91db15af1ab6e9a56be3aa4b45836281fa2629f04d79d8eb7fd59223f78aed5de7a2bc605d30071eb780719976bc51ddfe75b7276820b389bcbd918de6eccbe0364753a9b0f3ff86d0cba0c017e0823096a34e09226b9e490fdf", 0xf4}], 0x9}, 0x8004) ioctl$BLKDISCARDZEROES(r5, 0x127c, &(0x7f00000011c0)) writev(r6, &(0x7f00000015c0)=[{&(0x7f0000001200)="f406da9824d420708bbb0f2178eafebf7322197aa2718cc22164bc6ea799ced90793d5d11fbeeea9119bfd249a5f13bf00c2f123a996e36700f2f79fd1f1a4e5e976bbd164be6e72756217e84066d93478f2d8242a70ffbed0ed9a183bcd4794f86c54aea0c1c38c68969184878e3d8c1ab5105925d878d2aee70cfa9d74aca9e37a3a004253491aca36c803097c1733a914ec966ed5035818e6fa3b5309d2d01785d7f0d17945b9de9d0cc234bd5ab6b2c454bfba16f91891e4a8cb345f046c289a486efbf7117d7f327291d8d345999ee902a54a434e1a3ab8c12955a53bb8c42882962a3ef40e", 0xe8}, {&(0x7f0000001300)="3c2dc5305885dd7f39d94bb5847b95b639d53d21cce5a036deb29e1b302683e8f6e32d961181602e009ca1fdc709a5db22cb75c9d2dc89d1289112614757996d6a7498fd2c8cae3cafb3b5749090aa099a8a8f643de4b7b11be5623f239dde9d5faf3a805b947773acf2afabe25b4133c07aaeafba97d204c2e37e1e72bb325de6182a86ba80980ace2a6d72f10908f3cbd20a1f6214baf96896353e368bc7b10351fc28f1736ba94b6116abc61b9ff5a4f2eb1b7175aba51367c5ba189b00bccd8f098bab98e3e1b328c7d03e761f", 0xcf}, {&(0x7f0000001400)="775d8a418ce0cb86c3e97d053215c5d334dddc6d31f816c08b79200f5b4721ab8fbcea0481944eeacda6cf1460e2b276cf7d27389abaa58eb42b52f63ce330995dcc4e10054e18af969c9383f14ddda1f6f0ab88a232c3c59e6afb676dd691a6d72c1de24c00ef177d", 0x69}, {&(0x7f0000001480)="acf3e445371312e2bb13cc125cda7c001d166e8323330e44e419238c5bced1411f92ba4ab4dd19c0317586ba22a9040380995543092374616e109781131f369e6b63acaa786d23ddb04da733704140d777a10580e6048e4e566a2a8d19", 0x5d}, {&(0x7f0000001500)="062d8d2ae5c9202505dda2fe799d3f29826682f4f6e111682f3c0d09d08921293288350bcc1f93634ed0cf8366848b053619f89ad69e8417ed918275ec5438d507a32852a704773f51e505a3fe959865112cb23980ddc056a7323b6a0aa64357d75e509ec3c266fff1180223ee26beb50f9c35bb499f95ac108b8c1fd36e09ef02ff18edf4147e1264c5092ea9", 0x8d}], 0x5) fsync(r2) 3.426255721s ago: executing program 1 (id=1948): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x85, 0x3f, 0xd2, 0x20, 0x403, 0xfd49, 0x2965, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x80, 0xf8, [{{0x9, 0x4, 0x10, 0x85, 0x0, 0x2c, 0xc3, 0x97, 0xf4}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x42, 0xf3, 0xa0, 0x20, 0x77b, 0x2226, 0x4cbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x1, 0x40, 0x8, [{{0x9, 0x4, 0xd7, 0x3, 0x0, 0xe5, 0x77, 0xbe, 0x5}}]}}]}}, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x42, 0xf3, 0xa0, 0x20, 0x77b, 0x2226, 0x4cbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x1, 0x40, 0x8, [{{0x9, 0x4, 0xd7, 0x3, 0x0, 0xe5, 0x77, 0xbe, 0x5}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) (async) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x8, 0x10, 0x40, 0x9}, {0x9, 0x5, 0x4, 0x2, 0x40, 0x5, 0x14}, {0x9, 0x5, 0x7, 0x3, 0x8, 0x6, 0xf9, 0x3}}}}}}]}}, 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000f40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000002740)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xcc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x24, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x1, 0xfd, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x7c8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf9, 0x2, 0x1}}}}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000002f80)={{0x12, 0x1, 0x300, 0x51, 0x1c, 0x38, 0xdf, 0x413c, 0x8133, 0x452, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x20, 0x8, [{{0x9, 0x4, 0x8d, 0x3, 0x0, 0xbd, 0x37, 0x30, 0xcd}}]}}]}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000003dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.607309827s ago: executing program 1 (id=1964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000018fec000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000) (async, rerun: 32) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000070900010073797a30"], 0x34}}, 0x0) (rerun: 32) 2.605312181s ago: executing program 1 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000000000680600fe8000000000000000000000000000aafe8000000000000000000000000000aa4e244001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x97, 0x1, 0x0, 0xc, 0xe, 0x3ff}, &(0x7f0000000040)=0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB="f0b124849089f21c6936bd6cdedf4b51291225e6658d9ee4f35169892397c11fa97dd0184deb2a40b6c0fb425e9692abb394400ad485b1a91298b1f348b12b04581283b57651a9165007d83dba1c60663c9e03ab3bfc82b7b03f210e444eb44016f8cd6adef0c49003dd09891078e83682690a8d7d9b4273ca6bb91031b158730a032bd0f768abe3b44d99465ca4", @ANYRES32, @ANYRESOCT=r0, @ANYBLOB="485a0b80b1159e850a148465cf5b7e3d6728df9c0da0c71d2ac9cd1c8034d7feae914b2f48718f73385247d79f189ba2d4e49896e74ee029154eed607eeac5b444ebb0d578943baeee604e4675a8d306d5d33a5cda1aca2db4c7853cf1e17c4f6ee2bd04422fccc81c0c6c701f84d23b72ed658ae5e09fcb767a04a5248d", @ANYRES64=r0, @ANYRES16=0x0, @ANYRES32=r0]) 2.547145369s ago: executing program 1 (id=1968): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c400714"], 0xf) 2.117194538s ago: executing program 2 (id=1985): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000100a000084"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x64, r2}, 0x38) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x10014}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x82, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dad], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x7035]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="10d40000b1eb502a200012800b00010067656e65766500001000028004000e"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2.105443438s ago: executing program 2 (id=1987): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40012004, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000140)='oom_adj\x00') sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="4d61b8fbb9d7f39aff91f960843ed614c9e6a4c91abfe344809f7bf9797465d0d0"], 0x1c}, 0x1, 0x0, 0x0, 0x24000899}, 0x40000800) 1.725577796s ago: executing program 1 (id=1994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8932, &(0x7f0000000180)={'wlan1\x00', @ifru_ivalue=0x50000000}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0xcb4, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x168, 0x111, 0x0, 0x1, {0x164, 0x5, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x119}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x237}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1be}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8000}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9}, @NL80211_ATTR_PEER_MEASUREMENTS={0xb28, 0x111, 0x0, 0x1, {0xb24, 0x5, 0x0, 0x1, [{0x1e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1ac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xef53}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x96}]}]}]}]}, {0x3ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1bc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc000}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe027}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa237}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f8}]}]}, {0x38c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xac}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x39c2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x619}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}]}, 0xcb4}, 0x1, 0x0, 0x0, 0x20044080}, 0x8050) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="d93b0c511042df4f3a"], 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x107) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(r4) ioctl$EVIOCGMASK(r6, 0x80015b1a, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000340), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='yeah', 0x4) shutdown(r0, 0x1) 1.277272342s ago: executing program 2 (id=2007): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f00000031c0)={0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000005c0)={0x55440404ea2383c0, 0x0, @ioapic={0xdddd1000, 0x2, 0x2b, 0x6, 0x0, [{0xc, 0x2, 0x5, '\x00', 0x8}, {0x5, 0x7, 0xfd, '\x00', 0x80}, {0x0, 0x7, 0xe7, '\x00', 0x3}, {0x0, 0xb, 0x4, '\x00', 0x3}, {0x17, 0x9, 0x6}, {0x5, 0x7f, 0xb, '\x00', 0xf8}, {0xf, 0x9, 0x3a, '\x00', 0x3}, {0x81, 0x0, 0x9, '\x00', 0x1}, {0xb, 0x13, 0x80, '\x00', 0x7}, {0x0, 0x1, 0x1}, {0xff, 0x0, 0x6, '\x00', 0xff}, {0x6e, 0x6, 0x5, '\x00', 0x6}, {0x8, 0xfa, 0x4, '\x00', 0xf7}, {0x1, 0x3, 0xea, '\x00', 0x7}, {0x14, 0x6, 0x4, '\x00', 0x50}, {0x4, 0x6, 0x2}, {0x2, 0x5, 0x80, '\x00', 0x6}, {0x5, 0x80, 0x8, '\x00', 0xa}, {0x8, 0xfe, 0x3}, {0x4, 0x48, 0x3, '\x00', 0x5}, {0x9, 0x2, 0x40}, {0x9, 0x1, 0xe1, '\x00', 0x3}, {0xb, 0x7, 0xfc, '\x00', 0x3}, {0x7, 0x2, 0x2, '\x00', 0x4}]}}) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0x344e, &(0x7f0000000080)={0x0, 0xc9ab, 0x0, 0x0, 0x400}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r6, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xffa6}], 0x1}, 0xa6}], 0x1, 0x4008440) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r11, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xfffefffd}}], 0x18}, 0x4000000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYRES64=r7, @ANYRES32=r10, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES8=r11], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r5, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x598, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x400000000000247, 0x0) 677.437082ms ago: executing program 3 (id=2009): sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) (async) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x78, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x1, 0x0, 0x2f}, @fda={0x66646185, 0x1, 0x1, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}, 0x40}, @free_buffer={0x40086303, r3}, @exit_looper, @clear_death, @dead_binder_done], 0x22, 0x0, &(0x7f00000002c0)="c4f690075601841a07be1c92ea75129956a821e2dc75b5e56909639b264b126d7581"}) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x48) 367.3662ms ago: executing program 2 (id=2015): socket(0x2, 0x80805, 0x0) memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c400714"], 0xf) 236.177311ms ago: executing program 0 (id=2019): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x365802, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980914, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x90) r4 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x7, @raw_data="2c7f31d8935cf4dea6b4a0de58af6e06c589506b3401894ab8883f5b4036ea162d94a197f1d855d22be29708174674a7666a33365ae8a955cf55f64314b0c34f2c72cc63dab061c70e24214b76e78853e2ebe1751bb83cf5067c6d4c5debf45c0106f5c170958032ba0ef03be5a7bee6bf339f8d30195745b424b0f410a7f29a220f136a2c5016d7954c65822b63d1d6c52f5e7d106b4dbea6b80a473aa4ce03b151fd7af7cc44ed3e93169925c21e1434d1f25c502f73efaef4c4f9a8ed7900"}) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r4, 0x81000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x15) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) 235.323023ms ago: executing program 0 (id=2020): mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='nfs\x00', 0x1218081, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 177.462842ms ago: executing program 0 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="281b0400000400001c0012800b000100697036746e6c00000c00028006000f0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4054) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="281b0400000400001c0012800b000100697036746e6c00000c00028006000f0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4054) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) socket(0x10, 0x3, 0x0) (async) write(r5, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) (async) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x0, 0x0}, 0x10) (async) 176.921798ms ago: executing program 3 (id=2022): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x2, 0x6, 0x3, 0x2, 0xfffffffffffffffc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @alu={0x4, 0x1, 0x0, 0xb, 0xb, 0x80}, @jmp={0x5, 0x0, 0xc, 0x2, 0xa, 0xfffffffffffffffe, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) 176.096522ms ago: executing program 0 (id=2023): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="030000000400000000000000"], 0x50) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0xf, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x2}]}}]}, 0x44}}, 0x4000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 113.735005ms ago: executing program 0 (id=2024): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000180)=0xdb) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ac, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 113.329286ms ago: executing program 3 (id=2025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x8601, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000400)={"d1ed88d88b10628c307a56000000000016a8e4c9357e8a5200008100", r3, 0xffffffffffffffff}) close_range(r1, r2, 0x0) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000380)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000370400000084fb82e942e58ef700", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100626f6e64000000002c00028005001d00000000000500010004000000050015"], 0x5c}}, 0x0) 104.432114ms ago: executing program 3 (id=2026): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000080)={0x2, 0xd3, 0x4, 0x4, 0xe, 0x3, @msf={0x8, 0x7b, 0x1}, @msf={0xe, 0x9, 0xb}}) 102.452998ms ago: executing program 0 (id=2027): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f040, 0xa60}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x20000800) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x1c, 0x0, @opaque="06ff16af31c0d4c48955313d9126e3f43567e582"}}}}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r5 = socket(0x5, 0x2, 0xfffffffe) accept(r5, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f040, 0xa60}) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0x1) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x20000800) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x1c, 0x0, @opaque="06ff16af31c0d4c48955313d9126e3f43567e582"}}}}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) (async) socket(0x5, 0x2, 0xfffffffe) (async) accept(r5, 0x0, 0x0) (async) 101.616824ms ago: executing program 3 (id=2028): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000001c140000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 0s ago: executing program 3 (id=2029): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000cc0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000b00)={0x1d, r3}, 0x18) (async) connect$can_j1939(r2, &(0x7f0000000b00)={0x1d, r3}, 0x18) recvmmsg(r2, &(0x7f0000004380), 0x0, 0x2000, 0x0) (async) recvmmsg(r2, &(0x7f0000004380), 0x0, 0x2000, 0x0) sendmmsg$sock(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="f61a26d10be4f75d7d", 0x9}], 0x1}}], 0x1, 0xc0d2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1409, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x24008850) ioctl$TIOCSBRK(r4, 0x5427) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004", @ANYRES32=r2, @ANYRES32=r5, @ANYRES64=r2, @ANYRESOCT=r2], 0x60}, 0x1, 0x0, 0x0, 0x36e231d453fc9115}, 0x5) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004", @ANYRES32=r2, @ANYRES32=r5, @ANYRES64=r2, @ANYRESOCT=r2], 0x60}, 0x1, 0x0, 0x0, 0x36e231d453fc9115}, 0x5) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000000)=0xe1df) kernel console output (not intermixed with test programs): [ 44.124152][ T40] audit: type=1400 audit(1761676001.154:59): avc: denied { write } for pid=5889 comm="sh" path="pipe:[2796]" dev="pipefs" ino=2796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.134431][ T40] audit: type=1400 audit(1761676001.154:60): avc: denied { rlimitinh } for pid=5889 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.143368][ T40] audit: type=1400 audit(1761676001.154:61): avc: denied { siginh } for pid=5889 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:37840' (ED25519) to the list of known hosts. [ 45.186923][ T40] audit: type=1400 audit(1761676002.224:62): avc: denied { name_bind } for pid=5910 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.210496][ T40] audit: type=1400 audit(1761676002.244:63): avc: denied { write } for pid=5911 comm="sh" path="pipe:[2819]" dev="pipefs" ino=2819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.229229][ T40] audit: type=1400 audit(1761676002.264:64): avc: denied { execute } for pid=5911 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.238130][ T40] audit: type=1400 audit(1761676002.264:65): avc: denied { execute_no_trans } for pid=5911 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.176236][ T40] audit: type=1400 audit(1761676004.214:66): avc: denied { mounton } for pid=5911 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.188459][ T5911] cgroup: Unknown subsys name 'net' [ 47.315651][ T5911] cgroup: Unknown subsys name 'cpuset' [ 47.321424][ T5911] cgroup: Unknown subsys name 'rlimit' [ 47.577359][ T5919] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.237921][ T5911] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.533700][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.533709][ T40] audit: type=1400 audit(1761676008.574:80): avc: denied { execmem } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.732235][ T40] audit: type=1400 audit(1761676008.774:81): avc: denied { create } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.738336][ T40] audit: type=1400 audit(1761676008.774:82): avc: denied { read write } for pid=5928 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.746163][ T40] audit: type=1400 audit(1761676008.774:83): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.753439][ T40] audit: type=1400 audit(1761676008.784:84): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="socket:[5966]" dev="sockfs" ino=5966 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.782108][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.784818][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.787762][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.790142][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.793639][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.796632][ T5937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.799206][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.802064][ T5937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.802263][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.807871][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.808399][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.811365][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.815788][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.818953][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.819358][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.823073][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.823932][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.825845][ T5293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.826503][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.826508][ T5293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.828271][ T40] audit: type=1400 audit(1761676008.864:85): avc: denied { read } for pid=5928 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.844744][ T40] audit: type=1400 audit(1761676008.864:86): avc: denied { open } for pid=5928 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.854051][ T40] audit: type=1400 audit(1761676008.864:87): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.044452][ T40] audit: type=1400 audit(1761676009.084:88): avc: denied { module_request } for pid=5928 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.090468][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 52.095732][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 52.131096][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 52.150863][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 52.234608][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.237380][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.239688][ T5928] bridge_slave_0: entered allmulticast mode [ 52.242605][ T5928] bridge_slave_0: entered promiscuous mode [ 52.269927][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.272213][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.274537][ T5928] bridge_slave_1: entered allmulticast mode [ 52.277098][ T5928] bridge_slave_1: entered promiscuous mode [ 52.374094][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.376466][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.378721][ T5929] bridge_slave_0: entered allmulticast mode [ 52.381284][ T5929] bridge_slave_0: entered promiscuous mode [ 52.388156][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.392254][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.394510][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.396757][ T5942] bridge_slave_0: entered allmulticast mode [ 52.399304][ T5942] bridge_slave_0: entered promiscuous mode [ 52.402902][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.405140][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.407373][ T5942] bridge_slave_1: entered allmulticast mode [ 52.409887][ T5942] bridge_slave_1: entered promiscuous mode [ 52.453149][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.455375][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.457606][ T5929] bridge_slave_1: entered allmulticast mode [ 52.460145][ T5929] bridge_slave_1: entered promiscuous mode [ 52.464829][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.480850][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.483190][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.485428][ T5931] bridge_slave_0: entered allmulticast mode [ 52.487976][ T5931] bridge_slave_0: entered promiscuous mode [ 52.533915][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.538323][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.541252][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.543557][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.545793][ T5931] bridge_slave_1: entered allmulticast mode [ 52.548366][ T5931] bridge_slave_1: entered promiscuous mode [ 52.553938][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.636371][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.641820][ T5928] team0: Port device team_slave_0 added [ 52.668943][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.679916][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.714196][ T5928] team0: Port device team_slave_1 added [ 52.718508][ T5942] team0: Port device team_slave_0 added [ 52.737017][ T5929] team0: Port device team_slave_0 added [ 52.755281][ T5942] team0: Port device team_slave_1 added [ 52.772764][ T5929] team0: Port device team_slave_1 added [ 52.806981][ T5931] team0: Port device team_slave_0 added [ 52.822762][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.825452][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.836195][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.865570][ T5931] team0: Port device team_slave_1 added [ 52.882285][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.885267][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.897142][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.901804][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.904649][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.915443][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.944134][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.946335][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.954303][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.964001][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.966207][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.974187][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.978150][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.980356][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.988443][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.008336][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.010661][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.019541][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.024407][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.026692][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.035421][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.101143][ T5942] hsr_slave_0: entered promiscuous mode [ 53.103477][ T5942] hsr_slave_1: entered promiscuous mode [ 53.164193][ T5928] hsr_slave_0: entered promiscuous mode [ 53.166440][ T5928] hsr_slave_1: entered promiscuous mode [ 53.168471][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 53.170362][ T5928] Cannot create hsr debugfs directory [ 53.201201][ T5931] hsr_slave_0: entered promiscuous mode [ 53.205606][ T5931] hsr_slave_1: entered promiscuous mode [ 53.207891][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 53.209771][ T5931] Cannot create hsr debugfs directory [ 53.215493][ T5929] hsr_slave_0: entered promiscuous mode [ 53.217770][ T5929] hsr_slave_1: entered promiscuous mode [ 53.219800][ T5929] debugfs: 'hsr0' already exists in 'hsr' [ 53.221749][ T5929] Cannot create hsr debugfs directory [ 53.572018][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.579340][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.585649][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.594949][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.624117][ T5929] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.629369][ T5929] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.650276][ T5929] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.654887][ T5929] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.687837][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.692836][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.696898][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.702556][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.737140][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.755812][ T5931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.768666][ T5931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.774640][ T5931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.783469][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.786536][ T5931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.810865][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.813273][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.819361][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.822406][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.835508][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.843210][ T5944] Bluetooth: hci1: command tx timeout [ 53.843496][ T5945] Bluetooth: hci3: command tx timeout [ 53.843509][ T5939] Bluetooth: hci0: command tx timeout [ 53.843923][ T5933] Bluetooth: hci2: command tx timeout [ 53.891341][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.902290][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.911849][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.914126][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.921181][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.923549][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.931994][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.935570][ T40] audit: type=1400 audit(1761676010.974:89): avc: denied { sys_module } for pid=5942 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.943180][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.946617][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.948854][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.959008][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.961288][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.983054][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.991277][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.993667][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.007125][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.009474][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.049221][ T5931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.052615][ T5931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.068722][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.095651][ T5942] veth0_vlan: entered promiscuous mode [ 54.100579][ T5942] veth1_vlan: entered promiscuous mode [ 54.119626][ T5942] veth0_macvtap: entered promiscuous mode [ 54.124233][ T5942] veth1_macvtap: entered promiscuous mode [ 54.137577][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.144612][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.148623][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.165450][ T1148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.168300][ T1148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.175862][ T1148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.182365][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.189098][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.214291][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.245924][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.248489][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.253433][ T5929] veth0_vlan: entered promiscuous mode [ 54.266731][ T5928] veth0_vlan: entered promiscuous mode [ 54.273228][ T5929] veth1_vlan: entered promiscuous mode [ 54.285405][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.287843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.290855][ T5931] veth0_vlan: entered promiscuous mode [ 54.293678][ T5928] veth1_vlan: entered promiscuous mode [ 54.306515][ T5931] veth1_vlan: entered promiscuous mode [ 54.310298][ T5929] veth0_macvtap: entered promiscuous mode [ 54.317481][ T5929] veth1_macvtap: entered promiscuous mode [ 54.328848][ T5942] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.342290][ T5931] veth0_macvtap: entered promiscuous mode [ 54.346190][ T5928] veth0_macvtap: entered promiscuous mode [ 54.350241][ T5931] veth1_macvtap: entered promiscuous mode [ 54.354411][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.357370][ T5928] veth1_macvtap: entered promiscuous mode [ 54.369404][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.384448][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.387008][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.390802][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.398650][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.403188][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.406042][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.413593][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.416954][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.429442][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.435638][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.438973][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.442471][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.455237][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.457991][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.467589][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.470698][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.477637][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.480419][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.505322][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.507774][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.516188][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.518630][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.536198][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.538797][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.550462][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.555608][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.570038][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.573769][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.581773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 54.680829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 54.711482][ T6029] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 54.851795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.872814][ T1331] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.961983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.981753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.042472][ T1331] usb 8-1: Using ep0 maxpacket: 16 [ 55.069832][ T1331] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 55.073424][ T1331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.076144][ T1331] usb 8-1: Product: syz [ 55.077714][ T1331] usb 8-1: Manufacturer: syz [ 55.079800][ T1331] usb 8-1: SerialNumber: syz [ 55.192863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.286659][ T1331] r8152-cfgselector 8-1: Unknown version 0x0000 [ 55.289246][ T1331] r8152-cfgselector 8-1: config 0 descriptor?? [ 55.295406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.361694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 55.391671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 55.397529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 55.922048][ T5945] Bluetooth: hci0: command tx timeout [ 55.928069][ T5944] Bluetooth: hci2: command tx timeout [ 55.936253][ T5933] Bluetooth: hci1: command tx timeout [ 55.936390][ T5944] Bluetooth: hci3: command tx timeout [ 56.575350][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 56.575415][ T40] audit: type=1400 audit(1761676013.614:136): avc: denied { read write } for pid=6043 comm="syz.1.11" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.596616][ T40] audit: type=1400 audit(1761676013.614:137): avc: denied { open } for pid=6043 comm="syz.1.11" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.600050][ T6044] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 56.605891][ T40] audit: type=1400 audit(1761676013.614:138): avc: denied { ioctl } for pid=6043 comm="syz.1.11" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.738686][ T40] audit: type=1400 audit(1761676013.774:139): avc: denied { name_bind } for pid=6047 comm="syz.1.12" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.748111][ T40] audit: type=1400 audit(1761676013.774:140): avc: denied { node_bind } for pid=6047 comm="syz.1.12" saddr=::ffff:172.20.20.13 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.758981][ T40] audit: type=1400 audit(1761676013.794:141): avc: denied { append } for pid=6036 comm="syz.0.8" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.919918][ T55] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.105264][ T1331] r8152-cfgselector 8-1: Unknown version 0x0000 [ 57.113967][ T1331] r8152-cfgselector 8-1: bad CDC descriptors [ 57.132922][ T1331] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 57.701785][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 57.704581][ T55] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 57.711591][ T55] usb 7-1: config 179 has no interface number 0 [ 57.713633][ T55] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 57.717012][ T55] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 57.720909][ T55] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 57.725111][ T55] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 57.728632][ T55] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 57.733772][ T55] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 57.736571][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.742866][ T6042] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 57.820970][ T40] audit: type=1400 audit(1761676014.854:142): avc: denied { create } for pid=6060 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.821613][ T6061] Bluetooth: MGMT ver 1.23 [ 57.831264][ T40] audit: type=1400 audit(1761676014.854:143): avc: denied { bind } for pid=6060 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.837921][ T40] audit: type=1400 audit(1761676014.854:144): avc: denied { write } for pid=6060 comm="syz.0.17" path="socket:[9041]" dev="sockfs" ino=9041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.846203][ T40] audit: type=1400 audit(1761676014.874:145): avc: denied { create } for pid=6060 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.963455][ T55] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input5 [ 58.007342][ T5944] Bluetooth: hci2: command tx timeout [ 58.010057][ T5944] Bluetooth: hci1: command tx timeout [ 58.012607][ T5944] Bluetooth: hci3: command tx timeout [ 59.010685][ T6031] usb 7-1: USB disconnect, device number 2 [ 59.010725][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 59.015180][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 59.692670][ T61] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.869109][ T61] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 59.873033][ T61] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 59.876656][ T61] usb 6-1: config 220 has no interface number 2 [ 59.878747][ T61] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 59.883139][ T61] usb 6-1: config 220 interface 0 has no altsetting 0 [ 59.885238][ T61] usb 6-1: config 220 interface 76 has no altsetting 0 [ 59.887466][ T61] usb 6-1: config 220 interface 1 has no altsetting 0 [ 59.892919][ T61] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 59.895770][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.898253][ T61] usb 6-1: Product: syz [ 59.899571][ T61] usb 6-1: Manufacturer: syz [ 60.049280][ T61] usb 6-1: SerialNumber: syz [ 60.091824][ T5933] Bluetooth: hci3: command tx timeout [ 60.091984][ T5944] Bluetooth: hci1: command tx timeout [ 60.092214][ T5945] Bluetooth: hci2: command tx timeout [ 60.267116][ T61] usb 6-1: selecting invalid altsetting 0 [ 60.269830][ T61] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 60.272392][ T61] uvcvideo 6-1:220.0: No valid video chain found. [ 60.277108][ T61] usb 6-1: selecting invalid altsetting 0 [ 60.278895][ T61] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 60.285550][ T61] usb 6-1: USB disconnect, device number 2 [ 60.848772][ T6154] warning: `syz.1.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.881920][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 61.881932][ T40] audit: type=1400 audit(1761676018.844:249): avc: denied { mount } for pid=6173 comm="syz.0.58" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.442608][ T40] audit: type=1400 audit(1761676019.464:250): avc: denied { getopt } for pid=6178 comm="syz.2.59" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.545382][ T40] audit: type=1400 audit(1761676019.584:251): avc: denied { ioctl } for pid=6186 comm="syz.0.62" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.626033][ T6188] ptrace attach of "/syz-executor exec"[5929] was attempted by " \x09 ¢ã9OÇRù\x1b)\x09\x09K÷\x0dÐ8çÿÆåS›–9áõœÞ&Ƶ×K\x07Š^Ã4å®\x09Œéîpwªš†~ˆ3Iué÷4ƒ¶È/¦xÊÿÙùÛ*xiØXde&ø‰¯C¦`€W\x22†R$IßFlc+5p$?˜œÎ8ôeäa\x0c !ÖS¥R ‚·¥ Žùñºéy\x09PpAØ`B\x0cVd²y!±MÁÛˆ’ý2Э{ÉF5›­ïô°_`ΠÚw¨ € ¾£|àÐÔª /’(8«J]Bš [ 62.763650][ T6031] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 63.163104][ T40] audit: type=1400 audit(1761676020.194:252): avc: denied { getopt } for pid=6190 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.204826][ T40] audit: type=1400 audit(1761676020.244:253): avc: denied { setopt } for pid=6192 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.703776][ T6031] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.706978][ T6031] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 63.710531][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.721781][ T6031] hub 6-1:4.0: bad descriptor, ignoring hub [ 63.728771][ T6031] hub 6-1:4.0: probe with driver hub failed with error -5 [ 63.738891][ T6031] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 63.837533][ T40] audit: type=1400 audit(1761676020.874:254): avc: denied { read write } for pid=6199 comm="syz.3.67" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.843858][ T1469] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 63.845333][ T40] audit: type=1400 audit(1761676020.874:255): avc: denied { open } for pid=6199 comm="syz.3.67" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.847688][ T1469] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 63.857291][ T1469] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 63.860402][ T1469] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 63.863548][ T1469] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 63.866438][ T1469] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 63.869490][ T1469] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 63.874592][ T1469] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 63.877593][ T1469] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 63.880258][ T1469] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 63.886018][ T1469] hid-generic 0003:0004:0000.0002: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 63.894714][ T6200] capability: warning: `syz.3.67' uses deprecated v2 capabilities in a way that may be insecure [ 63.910198][ T40] audit: type=1400 audit(1761676020.944:256): avc: denied { execute } for pid=6199 comm="syz.3.67" path="/17/cpuacct.usage_percpu" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.919469][ T6201] fido_id[6201]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.948987][ T40] audit: type=1400 audit(1761676020.984:257): avc: denied { ioctl } for pid=6202 comm="syz.3.68" path="socket:[9734]" dev="sockfs" ino=9734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.031816][ T6031] usb 6-1: USB disconnect, device number 3 [ 64.077405][ T40] audit: type=1400 audit(1761676021.114:258): avc: denied { sqpoll } for pid=6207 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.794904][ T6220] binder: 6218:6220 ioctl 4018620d 0 returned -22 [ 68.570275][ T6283] tap0: tun_chr_ioctl cmd 35108 [ 68.761626][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 68.761641][ T40] audit: type=1400 audit(1761676025.794:266): avc: granted { setsecparam } for pid=6284 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 68.952082][ T6297] loop2: detected capacity change from 0 to 7 [ 68.957104][ T5942] Dev loop2: unable to read RDB block 7 [ 68.958920][ T5942] loop2: unable to read partition table [ 68.960816][ T5942] loop2: partition table beyond EOD, truncated [ 69.076879][ T6297] Dev loop2: unable to read RDB block 7 [ 69.079898][ T6297] loop2: unable to read partition table [ 69.084809][ T6297] loop2: partition table beyond EOD, truncated [ 69.088048][ T6297] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 69.468841][ T40] audit: type=1400 audit(1761676026.504:267): avc: denied { mount } for pid=6303 comm="syz.0.102" name="/" dev="ramfs" ino=11151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.043043][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 71.184330][ T40] audit: type=1400 audit(1761676028.224:268): avc: denied { watch } for pid=6328 comm="syz.1.110" path=2F6D656D66643A2D263A7B2DAA5D7B202864656C6574656429 dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.216150][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.221705][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.384750][ T40] audit: type=1400 audit(1761676028.414:269): avc: denied { create } for pid=6332 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 71.401649][ T40] audit: type=1400 audit(1761676028.424:270): avc: denied { bind } for pid=6332 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 71.691416][ T6351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.694053][ T6351] IPv6: NLM_F_CREATE should be set when creating new route [ 71.730832][ T40] audit: type=1400 audit(1761676028.764:271): avc: denied { write } for pid=6353 comm="syz.3.122" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.740505][ T40] audit: type=1400 audit(1761676028.774:272): avc: denied { map } for pid=6353 comm="syz.3.122" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.137174][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'. [ 73.408105][ T40] audit: type=1400 audit(1761676030.444:273): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.469703][ T40] audit: type=1400 audit(1761676030.494:274): avc: denied { create } for pid=6377 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.476630][ T40] audit: type=1400 audit(1761676030.494:275): avc: denied { ioctl } for pid=6377 comm="syz.0.129" path="socket:[9975]" dev="sockfs" ino=9975 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.489127][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 73.508593][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 73.961933][ T1031] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 74.120828][ T1031] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.126758][ T1031] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 74.132147][ T1031] usb 7-1: config 0 interface 0 has no altsetting 0 [ 74.136522][ T1031] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 74.145477][ T1031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.174063][ T1031] usb 7-1: config 0 descriptor?? [ 74.809555][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 74.810387][ T40] audit: type=1404 audit(1761676031.844:277): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 74.826007][ T1031] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -71 [ 74.850177][ T1031] usb 7-1: USB disconnect, device number 3 [ 75.345845][ T40] audit: type=1400 audit(1761676032.384:278): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.359834][ T40] audit: type=1400 audit(1761676032.394:279): avc: denied { create } for pid=6415 comm="syz.2.145" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 75.372501][ T40] audit: type=1400 audit(1761676032.414:280): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.386563][ T40] audit: type=1400 audit(1761676032.424:281): avc: denied { read } for pid=6417 comm="syz.2.146" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 75.391198][ T6418] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 75.412494][ T40] audit: type=1400 audit(1761676032.454:282): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.425309][ T40] audit: type=1400 audit(1761676032.464:283): avc: denied { map_create } for pid=6419 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.436533][ T40] audit: type=1400 audit(1761676032.474:284): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.449335][ T40] audit: type=1400 audit(1761676032.484:285): avc: denied { prog_load } for pid=6421 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.466477][ T40] audit: type=1400 audit(1761676032.504:286): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.950937][ T6523] netlink: 'syz.2.189': attribute type 4 has an invalid length. [ 77.955946][ T6523] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.189'. [ 78.496479][ T6560] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 78.753382][ T6583] capability: warning: `syz.0.213' uses 32-bit capabilities (legacy support in use) [ 80.002458][ T40] kauditd_printk_skb: 211 callbacks suppressed [ 80.002472][ T40] audit: type=1400 audit(1761676037.044:498): avc: denied { prog_load } for pid=6617 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.044033][ T40] audit: type=1400 audit(1761676037.084:499): avc: denied { create } for pid=6617 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 80.052247][ T40] audit: type=1400 audit(1761676037.084:500): avc: denied { create } for pid=6617 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 80.128193][ T40] audit: type=1400 audit(1761676037.164:501): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.163420][ T40] audit: type=1400 audit(1761676037.204:502): avc: denied { name_bind } for pid=6622 comm="syz.3.227" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 80.192447][ T40] audit: type=1400 audit(1761676037.234:503): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.255247][ T40] audit: type=1400 audit(1761676037.294:504): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.284861][ T40] audit: type=1400 audit(1761676037.324:505): avc: denied { map_create } for pid=6626 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.305420][ T40] audit: type=1400 audit(1761676037.324:506): avc: denied { prog_load } for pid=6626 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.321187][ T40] audit: type=1400 audit(1761676037.324:507): avc: denied { prog_load } for pid=6626 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.345581][ T6629] pim6reg1: entered promiscuous mode [ 80.350251][ T6629] pim6reg1: entered allmulticast mode [ 81.472998][ T29] cfg80211: failed to load regulatory.db [ 85.031339][ T40] kauditd_printk_skb: 172 callbacks suppressed [ 85.031356][ T40] audit: type=1400 audit(1761676298.058:680): avc: denied { read write } for pid=6787 comm="syz.2.294" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 85.043456][ T40] audit: type=1400 audit(1761676298.068:681): avc: denied { allowed } for pid=6789 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 85.070281][ T40] audit: type=1400 audit(1761676298.098:682): avc: denied { map_create } for pid=6785 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.082622][ T40] audit: type=1400 audit(1761676298.098:683): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.092267][ T40] audit: type=1400 audit(1761676298.108:684): avc: denied { prog_load } for pid=6785 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.099527][ T40] audit: type=1400 audit(1761676298.118:685): avc: denied { bpf } for pid=6785 comm="syz.0.293" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 85.265644][ T40] audit: type=1400 audit(1761676298.298:686): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.294878][ T40] audit: type=1400 audit(1761676298.328:687): avc: denied { create } for pid=6796 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 85.334684][ T40] audit: type=1400 audit(1761676298.368:688): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.384928][ T40] audit: type=1400 audit(1761676298.418:689): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.004066][ T6843] syz.3.315 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.231644][ T6845] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6845 comm=syz.1.317 [ 89.574576][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'. [ 90.101801][ T40] kauditd_printk_skb: 169 callbacks suppressed [ 90.101817][ T40] audit: type=1400 audit(1761676303.118:859): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.311676][ T40] audit: type=1400 audit(1761676303.338:860): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.361469][ T40] audit: type=1400 audit(1761676303.388:861): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.382593][ T40] audit: type=1400 audit(1761676303.408:862): avc: denied { execmem } for pid=6945 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 90.388365][ T40] audit: type=1400 audit(1761676303.408:863): avc: denied { execmem } for pid=6947 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 90.402241][ T40] audit: type=1400 audit(1761676303.408:864): avc: denied { prog_load } for pid=6947 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.420984][ T40] audit: type=1400 audit(1761676303.408:865): avc: denied { prog_load } for pid=6947 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.446379][ T40] audit: type=1400 audit(1761676303.408:866): avc: denied { prog_load } for pid=6947 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.461951][ T40] audit: type=1400 audit(1761676303.418:867): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.484233][ T40] audit: type=1400 audit(1761676303.438:868): avc: denied { read } for pid=6949 comm="syz.3.363" dev="nsfs" ino=4026533088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 90.498841][ T6952] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 92.024713][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 92.032182][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 92.035107][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 92.037988][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 94.488353][ T7066] trusted_key: encrypted_key: master key parameter 'Ï' is invalid [ 94.810571][ T5944] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 95.244525][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 95.244539][ T40] audit: type=1400 audit(1761676308.278:1025): avc: denied { prog_load } for pid=7090 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.254787][ T40] audit: type=1400 audit(1761676308.278:1026): avc: denied { execmem } for pid=7090 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 95.261352][ T40] audit: type=1400 audit(1761676308.278:1027): avc: denied { map_create } for pid=7090 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.269268][ T40] audit: type=1400 audit(1761676308.278:1028): avc: denied { read } for pid=7090 comm="syz.0.417" dev="nsfs" ino=4026532898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 95.269421][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 95.277633][ T40] audit: type=1400 audit(1761676308.298:1029): avc: denied { map_create } for pid=7092 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.286342][ T40] audit: type=1400 audit(1761676308.298:1030): avc: denied { prog_load } for pid=7092 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.321181][ T40] audit: type=1400 audit(1761676308.348:1031): avc: denied { create } for pid=7094 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.327459][ T40] audit: type=1400 audit(1761676308.358:1032): avc: denied { prog_load } for pid=7094 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.343180][ T40] audit: type=1400 audit(1761676308.378:1033): avc: denied { create } for pid=7096 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.351351][ T40] audit: type=1400 audit(1761676308.378:1034): avc: denied { prog_load } for pid=7096 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 98.469759][ T7271] Zero length message leads to an empty skb [ 99.167632][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 100.267489][ T40] kauditd_printk_skb: 246 callbacks suppressed [ 100.267506][ T40] audit: type=1326 audit(1761676313.298:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.2.513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 100.280132][ T40] audit: type=1326 audit(1761676313.298:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.2.513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 100.290111][ T40] audit: type=1326 audit(1761676313.298:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.2.513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 100.313319][ T40] audit: type=1326 audit(1761676313.298:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.2.513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 100.333488][ T40] audit: type=1326 audit(1761676313.298:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.2.513" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 100.351645][ T40] audit: type=1400 audit(1761676313.338:1286): avc: denied { create } for pid=7312 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 100.361704][ T40] audit: type=1400 audit(1761676313.338:1287): avc: denied { write } for pid=7312 comm="syz.0.514" name="ptype" dev="proc" ino=4026532908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 100.373192][ T40] audit: type=1326 audit(1761676313.348:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.2.513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 100.380565][ T40] audit: type=1326 audit(1761676313.348:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.2.513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 100.387800][ T40] audit: type=1326 audit(1761676313.348:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.2.513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 100.866600][ T7318] netlink: 'syz.0.516': attribute type 3 has an invalid length. [ 100.869140][ T7318] netlink: 3 bytes leftover after parsing attributes in process `syz.0.516'. [ 101.809792][ T7375] netlink: 'syz.3.542': attribute type 4 has an invalid length. [ 102.078379][ T7398] netlink: 'syz.1.552': attribute type 4 has an invalid length. [ 102.926949][ T7419] netlink: 'syz.3.561': attribute type 4 has an invalid length. [ 103.266241][ T7435] futex_wake_op: syz.2.568 tries to shift op by -1; fix this program [ 103.482940][ T7447] netlink: 'syz.0.571': attribute type 4 has an invalid length. [ 104.483444][ T7469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.578'. [ 105.006159][ T7478] netlink: 'syz.2.581': attribute type 4 has an invalid length. [ 105.304857][ T40] kauditd_printk_skb: 230 callbacks suppressed [ 105.304874][ T40] audit: type=1400 audit(1761676318.338:1521): avc: denied { read } for pid=7496 comm="syz.0.590" dev="nsfs" ino=4026532898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 105.322907][ T40] audit: type=1400 audit(1761676318.338:1522): avc: denied { map_create } for pid=7495 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.328677][ T40] audit: type=1400 audit(1761676318.338:1523): avc: denied { prog_load } for pid=7495 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.335520][ T40] audit: type=1400 audit(1761676318.338:1524): avc: denied { prog_load } for pid=7495 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.341308][ T40] audit: type=1326 audit(1761676318.338:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 105.348240][ T40] audit: type=1326 audit(1761676318.338:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 105.355522][ T40] audit: type=1326 audit(1761676318.338:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.589" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 105.362593][ T40] audit: type=1326 audit(1761676318.338:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 105.369510][ T40] audit: type=1326 audit(1761676318.338:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 105.376300][ T40] audit: type=1326 audit(1761676318.338:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.589" exe="/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8a78d8efc9 code=0x7ffc0000 [ 107.250200][ T7544] xt_TPROXY: Can be used only with -p tcp or -p udp [ 110.321317][ T40] kauditd_printk_skb: 202 callbacks suppressed [ 110.321329][ T40] audit: type=1400 audit(1761676323.348:1733): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.330876][ T40] audit: type=1400 audit(1761676323.348:1734): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.351608][ T40] audit: type=1400 audit(1761676323.368:1735): avc: denied { prog_load } for pid=7646 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.366908][ T40] audit: type=1400 audit(1761676323.398:1736): avc: denied { map_create } for pid=7648 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.381609][ T40] audit: type=1400 audit(1761676323.398:1737): avc: denied { prog_load } for pid=7648 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.412066][ T40] audit: type=1400 audit(1761676323.448:1738): avc: denied { create } for pid=7647 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 110.418777][ T40] audit: type=1400 audit(1761676323.448:1739): avc: denied { create } for pid=7652 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 110.419110][ T40] audit: type=1400 audit(1761676323.448:1740): avc: denied { execmem } for pid=7652 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 110.481708][ T40] audit: type=1400 audit(1761676323.508:1741): avc: denied { read } for pid=7652 comm="syz.0.654" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 110.489413][ T40] audit: type=1400 audit(1761676323.508:1742): avc: denied { name_bind } for pid=7652 comm="syz.0.654" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 113.622949][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 113.625221][ T5944] Bluetooth: Wrong link type (-22) [ 113.627765][ T5944] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 113.630537][ T5944] Bluetooth: Wrong link type (-22) [ 115.343960][ T40] kauditd_printk_skb: 194 callbacks suppressed [ 115.343977][ T40] audit: type=1400 audit(1761676328.378:1937): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.400291][ T40] audit: type=1400 audit(1761676328.428:1938): avc: denied { read } for pid=7819 comm="syz.3.725" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 115.443745][ T40] audit: type=1400 audit(1761676328.478:1939): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.475279][ T40] audit: type=1400 audit(1761676328.488:1940): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.492439][ T40] audit: type=1400 audit(1761676328.518:1941): avc: denied { create } for pid=7821 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 115.512952][ T40] audit: type=1400 audit(1761676328.548:1942): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.533453][ T40] audit: type=1400 audit(1761676328.568:1943): avc: denied { create } for pid=7824 comm="syz.2.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 115.539679][ T40] audit: type=1400 audit(1761676328.568:1944): avc: denied { prog_load } for pid=7825 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.561652][ T40] audit: type=1400 audit(1761676328.578:1945): avc: denied { create } for pid=7823 comm="syz.1.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 115.591665][ T40] audit: type=1400 audit(1761676328.608:1946): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 118.244550][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.252929][ T7895] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 119.070252][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 120.388464][ T40] kauditd_printk_skb: 133 callbacks suppressed [ 120.388531][ T40] audit: type=1400 audit(1761676333.418:2080): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.471412][ T40] audit: type=1400 audit(1761676333.498:2081): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.491620][ T40] audit: type=1400 audit(1761676333.518:2082): avc: denied { create } for pid=7936 comm="syz.2.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 120.533027][ T40] audit: type=1400 audit(1761676333.568:2083): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.561892][ T40] audit: type=1400 audit(1761676333.598:2084): avc: denied { watch watch_reads } for pid=7938 comm="syz.1.775" path="/dev/urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=0 [ 120.583685][ T40] audit: type=1400 audit(1761676333.608:2085): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.623983][ T40] audit: type=1400 audit(1761676333.658:2086): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.632857][ T40] audit: type=1400 audit(1761676333.658:2087): avc: denied { prog_load } for pid=7942 comm="syz.1.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.692068][ T40] audit: type=1400 audit(1761676333.728:2088): avc: denied { read } for pid=7944 comm="syz.2.778" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 120.701622][ T40] audit: type=1400 audit(1761676333.728:2089): avc: denied { execmem } for pid=7944 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 126.251313][ T40] kauditd_printk_skb: 162 callbacks suppressed [ 126.251330][ T40] audit: type=1400 audit(1761676339.278:2252): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.274055][ T40] audit: type=1400 audit(1761676339.288:2253): avc: denied { read } for pid=8103 comm="syz.2.843" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 126.283676][ T40] audit: type=1400 audit(1761676339.298:2254): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.293848][ T40] audit: type=1400 audit(1761676339.298:2255): avc: denied { read } for pid=8107 comm="syz.3.841" dev="nsfs" ino=4026533088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 126.322303][ T40] audit: type=1400 audit(1761676339.308:2256): avc: denied { map_create } for pid=8105 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.330262][ T40] audit: type=1400 audit(1761676339.308:2257): avc: denied { read write } for pid=8109 comm="syz.0.849" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 126.339932][ T40] audit: type=1400 audit(1761676339.318:2258): avc: denied { prog_load } for pid=8107 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.358257][ T40] audit: type=1400 audit(1761676339.328:2259): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.368793][ T40] audit: type=1400 audit(1761676339.338:2260): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.389259][ T40] audit: type=1326 audit(1761676339.348:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.2.844" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a78d8efc9 code=0x0 [ 127.254623][ T8203] trusted_key: encrypted_key: key user:syz not found [ 127.359405][ T8225] mmap: syz.0.896 (8225) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.483036][ T8243] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 127.648467][ T8261] netlink: 9 bytes leftover after parsing attributes in process `syz.0.909'. [ 127.651316][ T8261] 0·: renamed from hsr0 (while UP) [ 127.655226][ T8261] 0·: entered allmulticast mode [ 127.656784][ T8261] hsr_slave_0: entered allmulticast mode [ 127.658524][ T8261] hsr_slave_1: entered allmulticast mode [ 127.660951][ T8261] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 128.214184][ T8321] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 128.299195][ T8333] netlink: 72 bytes leftover after parsing attributes in process `syz.0.938'. [ 128.316751][ T8339] futex_wake_op: syz.1.940 tries to shift op by 32; fix this program [ 128.463590][ T8361] ptrace attach of "/syz-executor exec"[5928] was attempted by ""[8361] [ 128.859214][ T8389] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 129.088701][ T8423] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 129.125371][ T8428] xt_ecn: cannot match TCP bits for non-tcp packets [ 129.646570][ T5933] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 129.865279][ T8515] xt_TPROXY: Can be used only with -p tcp or -p udp [ 129.877746][ T8511] netlink: 'syz.1.1002': attribute type 3 has an invalid length. [ 130.078618][ T8553] netlink: 'syz.2.1018': attribute type 21 has an invalid length. [ 130.337019][ T5933] Bluetooth: hci3: Malformed LE Event: 0x0b [ 130.395028][ T8574] vxlan0: entered promiscuous mode [ 130.396709][ T8574] vxlan0: entered allmulticast mode [ 130.398664][ T83] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.399948][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'. [ 130.401237][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.407891][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.425062][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.697591][ T8594] vlan2: entered promiscuous mode [ 130.699788][ T8594] bridge0: entered promiscuous mode [ 130.707067][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 131.231745][ T5933] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 131.254109][ T40] kauditd_printk_skb: 1008 callbacks suppressed [ 131.254121][ T40] audit: type=1400 audit(1761676344.288:3270): avc: denied { create } for pid=8638 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 131.276825][ T40] audit: type=1400 audit(1761676344.308:3271): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.289012][ T40] audit: type=1400 audit(1761676344.318:3272): avc: denied { create } for pid=8641 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 131.295926][ T40] audit: type=1400 audit(1761676344.318:3273): avc: denied { prog_load } for pid=8641 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.301832][ T40] audit: type=1400 audit(1761676344.318:3274): avc: denied { map_create } for pid=8641 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.307666][ T40] audit: type=1400 audit(1761676344.318:3275): avc: denied { prog_load } for pid=8641 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.313386][ T40] audit: type=1400 audit(1761676344.318:3276): avc: denied { prog_load } for pid=8641 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.319316][ T40] audit: type=1400 audit(1761676344.318:3277): avc: denied { map_create } for pid=8641 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.325286][ T40] audit: type=1400 audit(1761676344.328:3278): avc: denied { map_create } for pid=8641 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.330967][ T40] audit: type=1400 audit(1761676344.328:3279): avc: denied { prog_load } for pid=8641 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.486751][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1060'. [ 131.490737][ T8662] bridge: RTM_NEWNEIGH with invalid ether address [ 131.573502][ T8674] sp0: Synchronizing with TNC [ 131.573729][ T8676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1066'. [ 131.597789][ T8672] [U] è [ 131.644474][ T5933] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 131.827161][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 131.849409][ T5933] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 132.357808][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'. [ 132.409644][ T8759] bridge0: entered promiscuous mode [ 132.413201][ T8759] macsec1: entered promiscuous mode [ 132.496502][ T8774] [U] zÍ»´iœùÊý®Ò[27| [ 132.498030][ T8774] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 132.502677][ T8774] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 132.506291][ T8774] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 132.518847][ T8774] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 132.521024][ T8774] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 132.524184][ T8774] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 132.526844][ T8774] [U] ‰ϼcEv‹û @ý [ 132.528103][ T8774] [U] aÆ„% [ 132.529230][ T8774] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 132.535311][ T8774] [U] éf1Ïp±3 [ 132.536412][ T8774] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 132.537937][ T8774] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 132.540601][ T8771] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n [ 132.617973][ T8790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1105'. [ 132.644135][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.646167][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.654739][ T8800] vlan0: entered promiscuous mode [ 132.661176][ T8800] team0: Port device vlan0 added [ 133.222357][ T8836] veth1_to_batadv: mtu less than device minimum [ 133.238320][ T8839] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 133.260577][ T8839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.274669][ T8839] vlan2: entered allmulticast mode [ 133.277049][ T8839] veth1: entered allmulticast mode [ 133.283453][ T8839] bond1: (slave vlan2): making interface the new active one [ 133.288167][ T8839] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 133.599655][ T5933] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 133.649833][ T8880] tap0: tun_chr_ioctl cmd 1074025675 [ 133.651723][ T8880] tap0: persist disabled [ 133.655693][ T8879] tap0: tun_chr_ioctl cmd 1074025673 [ 133.747077][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 134.068955][ T8890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1146'. [ 134.526048][ T8899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8899 comm=syz.2.1149 [ 134.530865][ T8900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8900 comm=syz.2.1149 [ 134.615687][ T8917] F2FS-fs: Conflicting test_dummy_encryption options [ 134.639869][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 134.643449][ T1127] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 134.644357][ T8920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1155'. [ 134.646615][ T1127] sr 2:0:0:0: [sr0] tag#23 Sense Key : Illegal Request [current] [ 134.652608][ T1127] sr 2:0:0:0: [sr0] tag#23 Add. Sense: Invalid command operation code [ 134.655582][ T1127] sr 2:0:0:0: [sr0] tag#23 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 134.658543][ T1127] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 134.668744][ T1127] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 134.880674][ T8946] xt_TCPMSS: Only works on TCP SYN packets [ 134.972874][ T8952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1167'. [ 135.680453][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 135.683413][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 135.775307][ T8999] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 136.261600][ T40] kauditd_printk_skb: 34744 callbacks suppressed [ 136.261611][ T40] audit: type=1400 audit(1761676349.288:37292): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 136.269026][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.270162][ T40] audit: type=1400 audit(1761676349.298:37293): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 136.272333][ T5644] audit: audit_lost=245 audit_rate_limit=0 audit_backlog_limit=64 [ 136.278780][ T40] audit: type=1400 audit(1761676349.298:37294): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 136.281236][ T5644] audit: backlog limit exceeded [ 136.288036][ T40] audit: type=1400 audit(1761676349.298:37295): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 136.289462][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.290953][ T5942] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.290967][ T5942] audit: audit_lost=246 audit_rate_limit=0 audit_backlog_limit=64 [ 136.316162][ T9025] netlink: 'syz.2.1190': attribute type 16 has an invalid length. [ 136.319605][ T9025] netlink: 'syz.2.1190': attribute type 2 has an invalid length. [ 136.323684][ T9025] netlink: 64086 bytes leftover after parsing attributes in process `syz.2.1190'. [ 136.694236][ T9051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.711876][ T9051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.730185][ T9051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.750683][ T9051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.772452][ T9051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.788560][ T9051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.798151][ T9051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.816859][ T9051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.830788][ T9051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.907156][ T9059] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 137.130907][ T9068] trusted_key: encrypted_key: master key parameter is missing [ 137.137478][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'. [ 137.160632][ T9072] [U] [ 137.161566][ T9072] [U] [ 137.162445][ T9072] [U] [ 137.163374][ T9072] [U] [ 137.165349][ T9072] [U] [ 137.166290][ T9072] [U] [ 137.167412][ T9072] [U] [ 137.168487][ T9072] [U] [ 137.169698][ T9072] [U] [ 137.170730][ T9072] [U] [ 137.171653][ T9072] [U] [ 137.172526][ T9072] [U] [ 137.173774][ T9072] [U] [ 137.174653][ T9072] [U] [ 137.175524][ T9072] [U] [ 137.176411][ T9072] [U] [ 137.178571][ T9072] [U] [ 137.296325][ T9088] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9088 comm=syz.1.1216 [ 137.637930][ T9106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9106 comm=syz.1.1224 [ 137.643174][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 138.019411][ T9145] syzkaller0: entered promiscuous mode [ 138.021177][ T9145] syzkaller0: entered allmulticast mode [ 138.928296][ T9188] netlink: 'syz.1.1253': attribute type 11 has an invalid length. [ 138.928760][ T9188] __nla_validate_parse: 4 callbacks suppressed [ 138.928771][ T9188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1253'. [ 139.740358][ T9203] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 139.948669][ T9225] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.166286][ T9246] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 140.169221][ T9246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.177052][ T9246] vhci_hcd vhci_hcd.0: Device attached [ 140.178603][ T9253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1275'. [ 140.181842][ T9250] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 140.212654][ T1281] vhci_hcd: stop threads [ 140.212668][ T1281] vhci_hcd: release socket [ 140.212680][ T1281] vhci_hcd: disconnect device [ 140.646272][ T9284] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 140.650663][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1288'. [ 141.025245][ T5933] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 141.057143][ T9325] IPv6: sit1: Disabled Multicast RS [ 141.058077][ T9325] sit1: entered allmulticast mode [ 141.272365][ T40] kauditd_printk_skb: 43360 callbacks suppressed [ 141.272381][ T40] audit: type=1400 audit(1761676355.314:79726): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.280682][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 141.282374][ T40] audit: type=1400 audit(1761676355.314:79727): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.284261][ T5644] audit: audit_lost=557 audit_rate_limit=0 audit_backlog_limit=64 [ 141.292437][ T40] audit: type=1400 audit(1761676355.314:79728): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.294880][ T5644] audit: backlog limit exceeded [ 141.303217][ T40] audit: type=1400 audit(1761676355.314:79729): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.304701][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 141.309505][ T9345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 141.309523][ T9345] audit: audit_lost=558 audit_rate_limit=0 audit_backlog_limit=64 [ 141.380239][ T9350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1312'. [ 141.380631][ T9350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1312'. [ 141.661772][ T5933] Bluetooth: hci2: SCO packet for unknown connection handle 128 [ 142.021007][ T9393] x_tables: duplicate underflow at hook 1 [ 142.427907][ T9443] netlink: 'syz.1.1345': attribute type 16 has an invalid length. [ 142.430338][ T9443] netlink: 'syz.1.1345': attribute type 2 has an invalid length. [ 142.432833][ T9443] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.1345'. [ 142.436870][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 142.439609][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 142.479327][ T9451] netlink: 'syz.2.1348': attribute type 4 has an invalid length. [ 142.483381][ T9451] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1348'. [ 142.799027][ T9504] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 142.803490][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1368'. [ 142.818013][ T9507] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 142.910634][ T9526] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 142.912731][ T9526] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.920919][ T9526] vhci_hcd vhci_hcd.0: Device attached [ 142.926560][ T9526] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 142.929022][ T9526] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 142.932105][ T9526] vhci_hcd vhci_hcd.0: Device attached [ 142.935907][ T9533] vhci_hcd: connection closed [ 142.936571][ T9527] vhci_hcd: connection closed [ 142.937738][ T6040] vhci_hcd: stop threads [ 142.943662][ T6040] vhci_hcd: release socket [ 142.945223][ T6040] vhci_hcd: disconnect device [ 142.946847][ T6040] vhci_hcd: stop threads [ 142.948295][ T6040] vhci_hcd: release socket [ 142.949792][ T6040] vhci_hcd: disconnect device [ 143.042023][ T5933] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 143.045975][ T5933] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 143.362042][ T6040] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.364866][ T6040] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.391768][ T6018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.471727][ T6018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.635743][ T5933] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 143.638844][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 143.638859][ T5933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.638868][ T5933] Workqueue: hci3 hci_rx_work [ 143.638887][ T5933] Call Trace: [ 143.638891][ T5933] [ 143.638895][ T5933] dump_stack_lvl+0x16c/0x1f0 [ 143.638912][ T5933] sysfs_warn_dup+0x7f/0xa0 [ 143.638927][ T5933] sysfs_create_dir_ns+0x24b/0x2b0 [ 143.638940][ T5933] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 143.638953][ T5933] ? find_held_lock+0x2b/0x80 [ 143.638970][ T5933] ? do_raw_spin_unlock+0x172/0x230 [ 143.638984][ T5933] kobject_add_internal+0x2c4/0x9b0 [ 143.638996][ T5933] kobject_add+0x16e/0x240 [ 143.639006][ T5933] ? __pfx_kobject_add+0x10/0x10 [ 143.639017][ T5933] ? do_raw_spin_unlock+0x172/0x230 [ 143.639029][ T5933] ? kobject_put+0xab/0x5a0 [ 143.639043][ T5933] device_add+0x288/0x1aa0 [ 143.639056][ T5933] ? __pfx_dev_set_name+0x10/0x10 [ 143.639069][ T5933] ? __pfx_device_add+0x10/0x10 [ 143.639081][ T5933] ? mgmt_send_event_skb+0x2fb/0x460 [ 143.639099][ T5933] hci_conn_add_sysfs+0x17e/0x230 [ 143.639115][ T5933] le_conn_complete_evt+0x1260/0x2150 [ 143.639133][ T5933] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 143.639146][ T5933] ? hci_event_packet+0x459/0x11c0 [ 143.639163][ T5933] hci_le_conn_complete_evt+0x23c/0x370 [ 143.639180][ T5933] hci_le_meta_evt+0x357/0x5e0 [ 143.639195][ T5933] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 143.639210][ T5933] hci_event_packet+0x685/0x11c0 [ 143.639224][ T5933] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 143.639239][ T5933] ? __pfx_hci_event_packet+0x10/0x10 [ 143.639254][ T5933] ? kcov_remote_start+0x3c9/0x6d0 [ 143.639267][ T5933] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.639285][ T5933] hci_rx_work+0x2c5/0x16b0 [ 143.639299][ T5933] ? rcu_is_watching+0x12/0xc0 [ 143.639315][ T5933] process_one_work+0x9cf/0x1b70 [ 143.639331][ T5933] ? __pfx_process_one_work+0x10/0x10 [ 143.639345][ T5933] ? assign_work+0x1a0/0x250 [ 143.639356][ T5933] worker_thread+0x6c8/0xf10 [ 143.639373][ T5933] ? __pfx_worker_thread+0x10/0x10 [ 143.639383][ T5933] kthread+0x3c5/0x780 [ 143.639394][ T5933] ? __pfx_kthread+0x10/0x10 [ 143.639404][ T5933] ? rcu_is_watching+0x12/0xc0 [ 143.639416][ T5933] ? __pfx_kthread+0x10/0x10 [ 143.639433][ T5933] ret_from_fork+0x675/0x7d0 [ 143.639443][ T5933] ? __pfx_kthread+0x10/0x10 [ 143.639453][ T5933] ret_from_fork_asm+0x1a/0x30 [ 143.639476][ T5933] [ 143.639490][ T5933] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 143.711739][ T6018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.713229][ T5933] Bluetooth: hci3: failed to register connection device [ 143.967487][ T9597] __nla_validate_parse: 2 callbacks suppressed [ 143.967506][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 144.050812][ T5933] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 144.054874][ T5933] Bluetooth: Wrong link type (-22) [ 144.110762][ T9626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1409'. [ 144.111394][ T9625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9625 comm=syz.1.1408 [ 144.228034][ T9638] ip_vti0: Master is either lo or non-ether device [ 144.230515][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 144.248723][ T9638] veth3: entered promiscuous mode [ 144.250351][ T9638] veth3: entered allmulticast mode [ 144.279553][ T9638] veth5: entered promiscuous mode [ 144.281928][ T9638] veth5: entered allmulticast mode [ 144.312990][ T9644] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 144.316936][ T9644] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 144.632782][ T5933] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 144.664477][ T9698] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 144.666641][ T9698] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.669861][ T9698] vhci_hcd vhci_hcd.0: Device attached [ 144.672748][ T9702] usbip_core: unknown command [ 144.674324][ T9702] vhci_hcd: unknown pdu 0 [ 144.675698][ T9702] usbip_core: unknown command [ 144.682405][ T6040] vhci_hcd: stop threads [ 144.684290][ T6040] vhci_hcd: release socket [ 144.685882][ T6040] vhci_hcd: disconnect device [ 144.873337][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 144.876565][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 144.879600][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 144.885035][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 144.888802][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 144.892788][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 144.898498][ T9732] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 144.901806][ T9732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9732 comm=syz.3.1450 [ 144.947581][ T9736] bond4: ARP target 4.0.0.0 is already present [ 144.949648][ T9736] bond4: option arp_ip_target: invalid value (4) [ 144.952940][ T9736] bond4 (unregistering): Released all slaves [ 145.010754][ T9740] netlink: 'syz.2.1454': attribute type 1 has an invalid length. [ 145.026860][ T9740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.046181][ T9740] bond3: (slave ip6erspan0): making interface the new active one [ 145.053198][ T9740] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 145.173705][ T9755] can0: slcan on ttyS3. [ 145.253647][ T9754] can0 (unregistered): slcan off ttyS3. [ 145.328116][ T9770] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 145.409041][ T9776] 8021q: VLANs not supported on ipvlan0 [ 145.462473][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 145.734232][ T9823] sit0: entered promiscuous mode [ 145.737912][ T9823] netlink: 'syz.3.1487': attribute type 1 has an invalid length. [ 145.948512][ T9853] netlink: 'syz.0.1498': attribute type 2 has an invalid length. [ 145.951094][ T9853] net_ratelimit: 56 callbacks suppressed [ 145.951102][ T9853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.957597][ T9854] netlink: 'syz.0.1498': attribute type 2 has an invalid length. [ 145.960010][ T9854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.992827][ T9857] netlink: 'syz.0.1499': attribute type 9 has an invalid length. [ 146.133190][ T9863] macsec1: entered promiscuous mode [ 146.135410][ T9863] macsec1: entered allmulticast mode [ 146.281667][ T40] kauditd_printk_skb: 42901 callbacks suppressed [ 146.281682][ T40] audit: type=1400 audit(1761676360.324:121767): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.287703][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.293304][ T40] audit: type=1400 audit(1761676360.324:121768): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.294913][ T5644] audit: audit_lost=847 audit_rate_limit=0 audit_backlog_limit=64 [ 146.294924][ T5644] audit: backlog limit exceeded [ 146.295090][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.303637][ T40] audit: type=1400 audit(1761676360.324:121769): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.305444][ T5644] audit: audit_lost=848 audit_rate_limit=0 audit_backlog_limit=64 [ 146.305454][ T5644] audit: backlog limit exceeded [ 146.305624][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.381181][ T9872] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 146.600312][ T9872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9872 comm=syz.2.1505 [ 146.812453][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.815532][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.831854][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.834384][ T9894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.837741][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.840599][ T9894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.845455][ T9894] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 147.228101][ T9922] team0: Port device vlan0 removed [ 147.291671][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.642586][ T9948] macsec0: entered promiscuous mode [ 147.644416][ T9948] macsec0: entered allmulticast mode [ 147.646088][ T9948] veth1_macvtap: entered allmulticast mode [ 148.045562][ T9975] validate_nla: 2 callbacks suppressed [ 148.045578][ T9975] netlink: 'syz.2.1539': attribute type 63 has an invalid length. [ 148.240081][ T9977] netlink: 'syz.1.1540': attribute type 1 has an invalid length. [ 148.251066][ T9977] bond1: entered promiscuous mode [ 148.254614][ T9977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.267551][ T9977] bond1: (slave bridge4): making interface the new active one [ 148.270092][ T9977] bridge4: entered promiscuous mode [ 148.274026][ T9977] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 148.339707][ T9988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.627282][T10037] netlink: 'syz.1.1559': attribute type 17 has an invalid length. [ 148.630700][T10037] macvtap0: entered allmulticast mode [ 148.633880][T10037] veth0_macvtap: entered allmulticast mode [ 148.636972][T10037] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 149.090605][ T5933] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 149.908184][T10094] __nla_validate_parse: 11 callbacks suppressed [ 149.908200][T10094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1578'. [ 149.917392][T10093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1578'. [ 149.923996][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 150.030976][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 150.034923][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1583'. [ 150.110937][T10114] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1586'. [ 150.286990][T10136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=10136 comm=syz.3.1594 [ 150.836640][T10172] netlink: 'syz.0.1606': attribute type 1 has an invalid length. [ 150.842157][T10175] netlink: 'syz.3.1605': attribute type 2 has an invalid length. [ 150.845854][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 150.864275][T10172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.867977][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1605'. [ 150.878250][T10172] bond1: (slave batadv1): Opening slave failed [ 150.886116][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1605'. [ 150.970361][T10184] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.049057][T10193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1614'. [ 151.221924][ T5933] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 151.291727][ T40] kauditd_printk_skb: 40453 callbacks suppressed [ 151.291739][ T40] audit: type=1400 audit(1761676365.324:160802): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 151.301843][ T40] audit: type=1400 audit(1761676365.334:160803): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 151.303804][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.308315][ T40] audit: type=1400 audit(1761676365.334:160804): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 151.311049][ T5644] audit: audit_lost=1323 audit_rate_limit=0 audit_backlog_limit=64 [ 151.311313][T10236] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.311322][T10236] audit: audit_lost=1324 audit_rate_limit=0 audit_backlog_limit=64 [ 151.311330][T10236] audit: backlog limit exceeded [ 151.311337][T10236] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.311343][T10236] audit: audit_lost=1325 audit_rate_limit=0 audit_backlog_limit=64 [ 151.712541][T10269] xt_nat: multiple ranges no longer supported [ 151.938205][T10296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10296 comm=syz.1.1650 [ 152.031941][T10305] Cannot find add_set index 0 as target [ 152.147021][T10313] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 152.356202][T10328] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 152.582870][T10364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=10364 comm=syz.0.1679 [ 152.635812][T10373] --map-set only usable from mangle table [ 152.641149][T10373] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 152.687392][T10381] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=10381 comm=syz.3.1685 [ 152.877608][T10406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.066617][T10419] sp0: Synchronizing with TNC [ 153.121658][ T5933] Bluetooth: hci1: command tx timeout [ 153.178554][T10424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2350 sclass=netlink_route_socket pid=10424 comm=syz.1.1699 [ 153.274525][T10431] IPv6: Can't replace route, no match found [ 154.105525][ T6018] libceph: connect (1)[c::]:6789 error -101 [ 154.109260][ T6018] libceph: mon0 (1)[c::]:6789 connect error [ 154.136978][ T6018] libceph: connect (1)[b::]:6789 error -101 [ 154.139802][ T6018] libceph: mon0 (1)[b::]:6789 connect error [ 154.372838][ T6018] libceph: connect (1)[c::]:6789 error -101 [ 154.375602][ T6018] libceph: mon0 (1)[c::]:6789 connect error [ 154.403114][ T6018] libceph: connect (1)[b::]:6789 error -101 [ 154.405826][ T6018] libceph: mon0 (1)[b::]:6789 connect error [ 154.587624][T10467] IPv6: Can't replace route, no match found [ 154.592174][T10469] IPv6: Can't replace route, no match found [ 154.811385][T10488] bond4: Invalid ad_actor_system MAC address. [ 154.813413][T10488] bond4: option ad_actor_system: invalid value (255) [ 154.819875][T10488] bond4 (unregistering): Released all slaves [ 154.881864][ T6018] libceph: connect (1)[c::]:6789 error -101 [ 154.883909][ T6018] libceph: mon0 (1)[c::]:6789 connect error [ 154.909560][T10447] ceph: No mds server is up or the cluster is laggy [ 154.912598][ T6018] libceph: connect (1)[b::]:6789 error -101 [ 154.915042][ T6018] libceph: mon0 (1)[b::]:6789 connect error [ 154.917524][T10450] ceph: No mds server is up or the cluster is laggy [ 155.058497][T10505] __nla_validate_parse: 5 callbacks suppressed [ 155.058511][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'. [ 155.180465][T10498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1722'. [ 155.266033][T10527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1731'. [ 155.691655][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.821273][T10554] netlink: 'syz.3.1738': attribute type 1 has an invalid length. [ 155.840195][T10554] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.859666][T10554] bond5: (slave geneve2): making interface the new active one [ 155.872640][T10554] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 155.931135][T10570] netlink: 'syz.3.1745': attribute type 13 has an invalid length. [ 156.023431][T10570] netlink: 'syz.3.1745': attribute type 13 has an invalid length. [ 156.301887][ T40] kauditd_printk_skb: 41306 callbacks suppressed [ 156.301899][ T40] audit: type=1400 audit(1761676370.344:200423): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.310494][ T40] audit: type=1400 audit(1761676370.344:200424): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.315053][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 156.317241][ T40] audit: type=1400 audit(1761676370.344:200425): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.319914][ T5644] audit: audit_lost=1888 audit_rate_limit=0 audit_backlog_limit=64 [ 156.326509][ T40] audit: type=1400 audit(1761676370.344:200426): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.326534][ T40] audit: type=1400 audit(1761676370.344:200427): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.326554][ T40] audit: type=1400 audit(1761676370.344:200428): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.326574][ T40] audit: type=1400 audit(1761676370.344:200429): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.326593][ T40] audit: type=1400 audit(1761676370.344:200430): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.743455][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'. [ 156.874515][T10639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1769'. [ 157.350157][T10689] netlink: 'syz.0.1790': attribute type 10 has an invalid length. [ 157.365580][T10689] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 157.533770][T10706] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 157.838154][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 157.966475][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 158.059734][ T5933] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 158.123052][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 158.125984][T10780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1819'. [ 158.598567][T10793] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 158.916211][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1833'. [ 159.022653][T10837] xfrm1: entered allmulticast mode [ 160.065109][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1855'. [ 160.073834][T10895] netlink: 'syz.3.1856': attribute type 7 has an invalid length. [ 160.077011][T10895] netlink: 'syz.3.1856': attribute type 8 has an invalid length. [ 160.080816][T10895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10895 comm=syz.3.1856 [ 160.352197][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 160.454146][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 160.755246][T10990] ªªªªªª: renamed from wg2 (while UP) [ 160.977134][T11033] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 161.212827][T11057] netlink: 'syz.3.1912': attribute type 10 has an invalid length. [ 161.220908][T11057] team0: Port device dummy0 added [ 161.312212][ T40] kauditd_printk_skb: 44456 callbacks suppressed [ 161.312224][ T40] audit: type=1400 audit(1761676375.354:244271): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 161.317819][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.321430][ T40] audit: type=1400 audit(1761676375.354:244272): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 161.323431][ T5644] audit: audit_lost=2094 audit_rate_limit=0 audit_backlog_limit=64 [ 161.323441][ T5644] audit: backlog limit exceeded [ 161.323578][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.335444][ T40] audit: type=1400 audit(1761676375.354:244273): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 161.336259][ T5644] audit: audit_lost=2095 audit_rate_limit=0 audit_backlog_limit=64 [ 161.342706][ T40] audit: type=1400 audit(1761676375.354:244274): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 161.345220][ T5644] audit: backlog limit exceeded [ 161.956002][T11075] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.1919'. [ 162.254187][T11107] netlink: 'syz.3.1929': attribute type 9 has an invalid length. [ 162.259933][T11107] netlink: 'syz.3.1929': attribute type 7 has an invalid length. [ 162.264069][T11107] netlink: 'syz.3.1929': attribute type 8 has an invalid length. [ 162.426610][T11133] bridge6: entered allmulticast mode [ 162.469137][T11138] macsec1: entered promiscuous mode [ 162.470989][T11138] macsec1: entered allmulticast mode [ 162.481507][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 162.488376][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 162.491812][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 162.494997][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 162.498066][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 162.708375][T11159] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1948'. [ 162.827051][T11159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.832536][T11159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.836667][T11159] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 162.839589][T11159] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.841850][T11159] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.846421][T11159] bond0 (unregistering): Released all slaves [ 163.003843][T11173] netlink: 'syz.2.1954': attribute type 11 has an invalid length. [ 163.010088][T11173] netlink: 'syz.2.1954': attribute type 11 has an invalid length. [ 163.148798][T11177] team0 (unregistering): Port device team_slave_0 removed [ 163.156243][T11177] team0 (unregistering): Port device team_slave_1 removed [ 163.528795][T11201] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 163.546332][T11205] netlink: 'syz.2.1967': attribute type 1 has an invalid length. [ 163.864706][T11237] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 163.951890][T11248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11248 comm=syz.3.1984 [ 164.278513][T11275] netlink: 'syz.0.1992': attribute type 1 has an invalid length. [ 164.295886][T11275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.320542][T11275] bond2: (slave veth3): Enslaving as an active interface with a down link [ 164.329709][T11275] bond2: (slave dummy0): making interface the new active one [ 164.333847][T11275] dummy0: entered promiscuous mode [ 164.336355][T11275] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 164.339913][T11275] netlink: 'syz.0.1992': attribute type 10 has an invalid length. [ 164.344798][T11275] bond2: (slave dummy0): Releasing active interface [ 164.426580][T11283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11283 comm=syz.1.1994 [ 164.449308][T11287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11287 comm=syz.0.1995 [ 164.449381][T11285] netlink: 'syz.0.1995': attribute type 13 has an invalid length. [ 164.458214][T11286] veth0_macvtap: left promiscuous mode [ 164.460210][T11286] macvtap0: entered promiscuous mode [ 164.462588][T11286] macvtap0: entered allmulticast mode [ 164.530477][T11292] bond6: option arp_missed_max: invalid value (0) [ 164.532677][T11292] bond6: option arp_missed_max: allowed values 1 - 255 [ 164.535823][T11292] bond6 (unregistering): Released all slaves [ 165.570925][T11333] EXT4-fs: Conflicting test_dummy_encryption options [ 165.900513][ T5933] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 165.988270][T11366] __nla_validate_parse: 10 callbacks suppressed [ 165.988281][T11366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2025'. [ 166.055604][T11375] netlink: 393 bytes leftover after parsing attributes in process `syz.3.2028'. [ 166.090895][T11377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=11377 comm=syz.3.2029 [ 166.098793][T11379] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2027'. [ 166.106202][T11379] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 166.331756][ T40] kauditd_printk_skb: 39823 callbacks suppressed [ 166.331767][ T40] audit: type=1400 audit(1761676380.354:283867): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.340275][ T40] audit: type=1400 audit(1761676380.354:283868): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.352043][ T40] audit: type=1400 audit(1761676380.354:283869): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.355053][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.358609][ T40] audit: type=1400 audit(1761676380.354:283870): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.363532][ T5644] audit: audit_lost=2173 audit_rate_limit=0 audit_backlog_limit=64 [ 166.367114][ T40] audit: type=1400 audit(1761676380.354:283871): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.369309][ T5644] audit: backlog limit exceeded [ 166.377092][ T40] audit: type=1400 audit(1761676380.354:283872): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 166.378116][ T5644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 166.794168][ T83] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.868125][ T83] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.946928][ T83] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.046272][ T83] bond0: (slave netdevsim0): Releasing backup interface [ 167.052012][ T83] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.169232][ T83] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.173323][ T83] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.246107][ T83] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.249289][ T83] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.353727][ T83] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.357964][ T83] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.458844][ T83] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.463354][ T83] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.590552][ T83] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.767045][ T83] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.855856][ T83] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.953918][ T83] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.083494][ T83] bridge_slave_1: left allmulticast mode [ 168.085835][ T83] bridge_slave_1: left promiscuous mode [ 168.088739][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.093367][ T83] bridge_slave_0: left allmulticast mode [ 168.095138][ T83] bridge_slave_0: left promiscuous mode [ 168.096965][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.107254][ T83] bridge_slave_1: left allmulticast mode [ 168.109063][ T83] bridge_slave_1: left promiscuous mode [ 168.110860][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.114905][ T83] bridge_slave_0: left allmulticast mode [ 168.116675][ T83] bridge_slave_0: left promiscuous mode [ 168.118437][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.127911][ T83] bridge_slave_1: left allmulticast mode [ 168.129690][ T83] bridge_slave_1: left promiscuous mode [ 168.131448][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.134984][ T83] bridge_slave_0: left allmulticast mode [ 168.136821][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.971315][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.976563][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.980042][ T83] bond0 (unregistering): Released all slaves [ 169.028762][ T83] bond1 (unregistering): Released all slaves [ 169.086931][ T83] bond2 (unregistering): (slave veth3): Releasing active interface [ 169.091703][ T83] bond2 (unregistering): Released all slaves [ 169.142069][ T10] ================================================================== [ 169.144609][ T10] BUG: KASAN: slab-use-after-free in __mutex_lock+0xe87/0x1060 [ 169.146972][ T10] Read of size 8 at addr ffff88802a98db20 by task kworker/0:1/10 [ 169.150214][ T10] [ 169.151688][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 169.151703][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.151710][ T10] Workqueue: events l2cap_chan_timeout [ 169.151728][ T10] Call Trace: [ 169.151733][ T10] [ 169.151737][ T10] dump_stack_lvl+0x116/0x1f0 [ 169.151753][ T10] print_report+0xcd/0x630 [ 169.151764][ T10] ? __virt_addr_valid+0x81/0x610 [ 169.151778][ T10] ? __phys_addr+0xe8/0x180 [ 169.151791][ T10] ? __mutex_lock+0xe87/0x1060 [ 169.151800][ T10] kasan_report+0xe0/0x110 [ 169.151811][ T10] ? __mutex_lock+0xe87/0x1060 [ 169.151821][ T10] ? l2cap_chan_timeout+0x6d/0x310 [ 169.151833][ T10] __mutex_lock+0xe87/0x1060 [ 169.151842][ T10] ? l2cap_chan_timeout+0x6d/0x310 [ 169.151857][ T10] ? __pfx___mutex_lock+0x10/0x10 [ 169.151866][ T10] ? debug_object_deactivate+0x1ec/0x3a0 [ 169.151884][ T10] ? l2cap_chan_timeout+0x6d/0x310 [ 169.151897][ T10] l2cap_chan_timeout+0x6d/0x310 [ 169.151910][ T10] process_one_work+0x9cf/0x1b70 [ 169.151929][ T10] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 169.151945][ T10] ? __pfx_process_one_work+0x10/0x10 [ 169.151974][ T10] ? assign_work+0x1a0/0x250 [ 169.151984][ T10] worker_thread+0x6c8/0xf10 [ 169.151996][ T10] ? __kthread_parkme+0x19e/0x250 [ 169.152011][ T10] ? __pfx_worker_thread+0x10/0x10 [ 169.152021][ T10] kthread+0x3c5/0x780 [ 169.152031][ T10] ? __pfx_kthread+0x10/0x10 [ 169.152040][ T10] ? rcu_is_watching+0x12/0xc0 [ 169.152054][ T10] ? __pfx_kthread+0x10/0x10 [ 169.152063][ T10] ret_from_fork+0x675/0x7d0 [ 169.152072][ T10] ? __pfx_kthread+0x10/0x10 [ 169.152081][ T10] ret_from_fork_asm+0x1a/0x30 [ 169.152097][ T10] [ 169.152101][ T10] [ 169.207160][ T10] Allocated by task 8379: [ 169.209015][ T10] kasan_save_stack+0x33/0x60 [ 169.210988][ T10] kasan_save_track+0x14/0x30 [ 169.212931][ T10] __kasan_kmalloc+0xaa/0xb0 [ 169.214731][ T10] l2cap_conn_add.part.0+0x60/0xa60 [ 169.216385][ T10] l2cap_chan_connect+0x15e5/0x2020 [ 169.218013][ T10] lowpan_control_write+0x3c9/0x740 [ 169.219669][ T10] full_proxy_write+0x131/0x1a0 [ 169.221230][ T10] vfs_write+0x2a0/0x11d0 [ 169.222618][ T10] ksys_write+0x12a/0x250 [ 169.224071][ T10] do_syscall_64+0xcd/0xfa0 [ 169.225514][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.227363][ T10] [ 169.228145][ T10] Freed by task 11346: [ 169.229452][ T10] kasan_save_stack+0x33/0x60 [ 169.230927][ T10] kasan_save_track+0x14/0x30 [ 169.232515][ T10] __kasan_save_free_info+0x3b/0x60 [ 169.234143][ T10] __kasan_slab_free+0x5f/0x80 [ 169.235642][ T10] kfree+0x2b8/0x6d0 [ 169.236888][ T10] l2cap_conn_del+0x59c/0x730 [ 169.238362][ T10] l2cap_disconn_cfm+0x96/0xd0 [ 169.239898][ T10] hci_conn_hash_flush+0x10e/0x260 [ 169.241532][ T10] hci_dev_close_sync+0x602/0x11d0 [ 169.243340][ T10] hci_dev_do_close+0x2e/0x90 [ 169.244847][ T10] hci_unregister_dev+0x227/0x640 [ 169.246428][ T10] vhci_release+0x17d/0x230 [ 169.247851][ T10] __fput+0x402/0xb70 [ 169.249157][ T10] task_work_run+0x150/0x240 [ 169.250612][ T10] do_exit+0x86f/0x2bf0 [ 169.251985][ T10] do_group_exit+0xd3/0x2a0 [ 169.253422][ T10] get_signal+0x2671/0x26d0 [ 169.254856][ T10] arch_do_signal_or_restart+0x8f/0x7c0 [ 169.256597][ T10] exit_to_user_mode_loop+0x85/0x130 [ 169.258257][ T10] do_syscall_64+0x426/0xfa0 [ 169.259753][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.261605][ T10] [ 169.262372][ T10] The buggy address belongs to the object at ffff88802a98d800 [ 169.262372][ T10] which belongs to the cache kmalloc-1k of size 1024 [ 169.266628][ T10] The buggy address is located 800 bytes inside of [ 169.266628][ T10] freed 1024-byte region [ffff88802a98d800, ffff88802a98dc00) [ 169.270901][ T10] [ 169.271714][ T10] The buggy address belongs to the physical page: [ 169.273720][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a98d000 pfn:0x2a988 [ 169.276833][ T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 169.279448][ T10] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 169.282077][ T10] page_type: f5(slab) [ 169.283337][ T10] raw: 00fff00000000240 ffff88801b442dc0 ffffea0000ae6e10 ffffea0000ad0c10 [ 169.286013][ T10] raw: ffff88802a98d000 0000000000100009 00000000f5000000 0000000000000000 [ 169.288669][ T10] head: 00fff00000000240 ffff88801b442dc0 ffffea0000ae6e10 ffffea0000ad0c10 [ 169.291390][ T10] head: ffff88802a98d000 0000000000100009 00000000f5000000 0000000000000000 [ 169.294107][ T10] head: 00fff00000000003 ffffea0000aa6201 00000000ffffffff 00000000ffffffff [ 169.296767][ T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 169.299365][ T10] page dumped because: kasan: bad access detected [ 169.301373][ T10] page_owner tracks the page as allocated [ 169.303183][ T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1281, tgid 1281 (kworker/u32:9), ts 56627925886, free_ts 56616566458 [ 169.309053][ T10] post_alloc_hook+0x1c0/0x230 [ 169.310582][ T10] get_page_from_freelist+0x10a3/0x3a30 [ 169.312368][ T10] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 169.314307][ T10] alloc_pages_mpol+0x1fb/0x550 [ 169.315846][ T10] new_slab+0x24a/0x360 [ 169.317186][ T10] ___slab_alloc+0xdae/0x1a60 [ 169.318682][ T10] __slab_alloc.constprop.0+0x63/0x110 [ 169.320447][ T10] __kmalloc_noprof+0x501/0x880 [ 169.322001][ T10] ___neigh_create+0x14e6/0x28c0 [ 169.323588][ T10] ip6_finish_output2+0x11aa/0x1cf0 [ 169.325230][ T10] __ip6_finish_output+0x3cd/0x1010 [ 169.326831][ T10] ip6_output+0x253/0x710 [ 169.328205][ T10] ndisc_send_skb+0xa85/0x1f50 [ 169.329728][ T10] ndisc_send_rs+0x129/0x670 [ 169.331193][ T10] addrconf_dad_completed+0x49d/0x10d0 [ 169.332969][ T10] addrconf_dad_work+0x855/0x14e0 [ 169.334623][ T10] page last free pid 104 tgid 104 stack trace: [ 169.336538][ T10] __free_frozen_pages+0x7df/0x1160 [ 169.338139][ T10] __put_partials+0x130/0x170 [ 169.339593][ T10] qlist_free_all+0x4d/0x120 [ 169.341049][ T10] kasan_quarantine_reduce+0x195/0x1e0 [ 169.342748][ T10] __kasan_slab_alloc+0x69/0x90 [ 169.344313][ T10] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 169.346173][ T10] __alloc_skb+0x2b2/0x380 [ 169.347602][ T10] mld_newpack.isra.0+0x18e/0xa20 [ 169.349204][ T10] add_grhead+0x299/0x340 [ 169.350562][ T10] add_grec+0x11b5/0x1720 [ 169.351983][ T10] mld_send_initial_cr+0x151/0x320 [ 169.353606][ T10] ipv6_mc_dad_complete+0xa7/0x1d0 [ 169.355215][ T10] addrconf_dad_completed+0xd8a/0x10d0 [ 169.356928][ T10] addrconf_dad_work+0x855/0x14e0 [ 169.358419][ T10] process_one_work+0x9cf/0x1b70 [ 169.359925][ T10] worker_thread+0x6c8/0xf10 [ 169.361393][ T10] [ 169.362165][ T10] Memory state around the buggy address: [ 169.363881][ T10] ffff88802a98da00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.366321][ T10] ffff88802a98da80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.368731][ T10] >ffff88802a98db00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.371142][ T10] ^ [ 169.372790][ T10] ffff88802a98db80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.375249][ T10] ffff88802a98dc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 169.377647][ T10] ================================================================== [ 169.380398][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.382737][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 169.386126][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.389464][ T10] Workqueue: events l2cap_chan_timeout [ 169.391137][ T10] Call Trace: [ 169.392242][ T10] [ 169.393176][ T10] dump_stack_lvl+0x3d/0x1f0 [ 169.394609][ T10] vpanic+0x640/0x6f0 [ 169.395853][ T10] panic+0xca/0xd0 [ 169.397043][ T10] ? __pfx_panic+0x10/0x10 [ 169.398423][ T10] ? check_panic_on_warn+0x1f/0xb0 [ 169.400047][ T10] check_panic_on_warn+0xab/0xb0 [ 169.401525][ T10] end_report+0x107/0x170 [ 169.402881][ T10] kasan_report+0xee/0x110 [ 169.404298][ T10] ? __mutex_lock+0xe87/0x1060 [ 169.405823][ T10] ? l2cap_chan_timeout+0x6d/0x310 [ 169.407439][ T10] __mutex_lock+0xe87/0x1060 [ 169.408919][ T10] ? l2cap_chan_timeout+0x6d/0x310 [ 169.410578][ T10] ? __pfx___mutex_lock+0x10/0x10 [ 169.412209][ T10] ? debug_object_deactivate+0x1ec/0x3a0 [ 169.413879][ T10] ? l2cap_chan_timeout+0x6d/0x310 [ 169.415420][ T10] l2cap_chan_timeout+0x6d/0x310 [ 169.416994][ T10] process_one_work+0x9cf/0x1b70 [ 169.418549][ T10] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 169.420371][ T10] ? __pfx_process_one_work+0x10/0x10 [ 169.422065][ T10] ? assign_work+0x1a0/0x250 [ 169.423533][ T10] worker_thread+0x6c8/0xf10 [ 169.425022][ T10] ? __kthread_parkme+0x19e/0x250 [ 169.426613][ T10] ? __pfx_worker_thread+0x10/0x10 [ 169.428236][ T10] kthread+0x3c5/0x780 [ 169.429560][ T10] ? __pfx_kthread+0x10/0x10 [ 169.431027][ T10] ? rcu_is_watching+0x12/0xc0 [ 169.432583][ T10] ? __pfx_kthread+0x10/0x10 [ 169.434043][ T10] ret_from_fork+0x675/0x7d0 [ 169.435506][ T10] ? __pfx_kthread+0x10/0x10 [ 169.436985][ T10] ret_from_fork_asm+0x1a/0x30 [ 169.438467][ T10] [ 169.440096][ T10] Kernel Offset: disabled [ 169.441461][ T10] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:28:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85295155 RDI=ffffffff9add6740 RBP=ffffffff9add6700 RSP=ffffc900000d7520 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9add6700 R15=ffffffff852950f0 RIP=ffffffff8529517f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561719e08620 CR3=0000000032b61000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=0000000010000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562d1d093600 0000562d1d093600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa1ab8bb0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726e75282032646e 6f62205d33385420 20205b5d33303731 39302e3936312020 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2074656b636f735f 746e657665755f74 63656a626f6b5f6b 6e696c74656e3d73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616c637420745f 63706368643a725f 6d65747379733a75 5f6d65747379733d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747865746e6f6374 20745f6370636864 3a725f6d65747379 733a755f6d657473 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79733d747865746e 6f63732022646370 636864223d6d6d6f 6320343436353d64 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a53b580 RCX=ffffffff81b11623 RDX=ffff88801d6fc900 RSI=ffffffff81b115fd RDI=0000000000000005 RBP=ffffc90000157cf8 RSP=ffffc90000157ba0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c79e5e R12=1ffff9200002af7c R13=0000000000000002 R14=0000000000000001 R15=ffffed100d4a76b1 RIP=ffffffff81b115ff RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdd7f3dbaf CR3=00000000218d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffffd0 Opmask01=0000000000020003 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561719e73f10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561719c30ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130323a33696368 2f336963682f6874 6f6f7465756c622f 6c6175747269762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056127896e10f 0000000000000041 000000000062642e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772c30362c41352c 39352c38352c3135 2c303566736c6d2c 31312c30312c352c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 342c332c322c312c 3061722c4533312c 4433312c4333312c 4233312c4133312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3733312c3633312c 3433312c3333312c 3133312c3033316b 2c35312c332c312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30652d4245453165 3141323070424132 317633303030623a 7475706e693d5341 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffffff8be76e26 RCX=ffffffff8b5cbd49 RDX=ffff8880246dc900 RSI=0000000000000025 RDI=0000000000000001 RBP=ffffc90003e87360 RSP=ffffc90003e872b8 R8 =0000000000000001 R9 =0000000000000025 R10=0000000000000073 R11=0000000000000001 R12=0000000000000073 R13=ffffffff8be76e20 R14=ffffc90003e873e0 R15=dffffc0000000000 RIP=ffffffff81bd0552 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f96ba69c740 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561719ee8950 CR3=0000000039433000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000000 Opmask01=0000000000000001 Opmask02=00000000ffff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656369766564204c 4c554e2064657669 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563dc462f770 0000563dc46b5970 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563dc4632b40 0000563dc4632bf0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e006563697665 64204c4c554e2064 6576696563657220 3a7665647562696c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 404b0040464c5340 41054c4c554e0541 40534c4046405705 1f53404150474c49 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000800000c1f 00000c1fffffffff ffffffff00060014 f59a53cdc9e3b57c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 00000c2700000c27 ffffffffffffffff 00060014cd3239ed ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc8eb79d00000000 000080fe00010014 00000008fd80400a 91118c7169010ae5 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 00000c1f00000c1f ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014f59a53cd c9e3b57c00000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 363620613620380a 0a36656961203720 0a31206520636564 0064646120706900 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002f08df RBX=0000000000000003 RCX=ffffffff8b6052a9 RDX=0000000000000000 RSI=ffffffff8da2a259 RDI=ffffffff8bf06e40 RBP=ffffed1003bd3000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801de98000 R14=ffffffff9081f6d0 R15=0000000000000000 RIP=ffffffff8b603d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561719f10ae8 CR3=0000000032b61000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=0000000010000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2fc23fdca9a69924 fdd549f924d0f59b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 95a804a378275715 9f58fd4a1e1766f6 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3dc791fe7a30f03 f20a55281f1ca15a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3c21a4cc36eed38 d25c1449f705f40b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee9f849b7f5a7f7b a326d73654006d6c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ac9b916c96e717f 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f45e55beb8b6c06 536e419e8cd0ced2 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b93d395100000000 41eb104516eb5612 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f4435d2a1154e06 37884ac1580cdfbb ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a07733fdecbe757e 770d0ed4fd438761 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726e75282032646e 6f62205d33385420 20205b5d33303731 39302e3936312020 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2074656b636f735f 746e657665755f74 63656a626f6b5f6b 6e696c74656e3d73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616c637420745f 63706368643a725f 6d65747379733a75 5f6d65747379733d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747865746e6f6374 20745f6370636864 3a725f6d65747379 733a755f6d657473 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79733d747865746e 6f63732022646370 636864223d6d6d6f 6320343436353d64 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000