last executing test programs: 3.032573925s ago: executing program 2 (id=1016): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) chdir(&(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000000000000000000000000000105da73a24000000000000000"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc000, 0x32c35da333035bdf) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300fc00000000000000000000000000000014000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c000180140003002001000000000000000200000000"], 0xa0}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001700)={0x2020}, 0x2020) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) inotify_init1(0x80000) 2.500910168s ago: executing program 3 (id=1024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 2.499307175s ago: executing program 3 (id=1026): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.442415944s ago: executing program 3 (id=1027): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)={'hsr0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r0, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r0], 0x20}}, 0x0) 2.442090328s ago: executing program 3 (id=1028): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x3, @value=0x140000000000}) 2.388293863s ago: executing program 3 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000cab000)=0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0x0, 0x110018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000004c0)={0x80}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0xd}, {0x3, [{0xc9, 0x8}, {0xc8, 0xb}, {0xc9, 0xce5}]}}}, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x1000000, 0x0) fanotify_init(0x40, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.14118228s ago: executing program 2 (id=1035): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x5, r2, 0x1, 0x2}, 0x14) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x6c00, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.392558439s ago: executing program 3 (id=1038): r0 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_setup(0x487c, &(0x7f0000000380)={0x0, 0x1360, 0x0, 0xffffffff, 0x29c}) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362fc0"], 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x3, @value=0x140000000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ptrace$poke(0x5, r2, &(0x7f0000000100), 0x21) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580)={0x41}, 0xe) recvmmsg(r3, &(0x7f00000007c0), 0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) 1.232788046s ago: executing program 2 (id=1041): socket$packet(0x11, 0x2, 0x300) setreuid(0x0, 0xee00) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='veth1_to_hsr\x00') 1.062184437s ago: executing program 1 (id=1045): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000001740)="3ce2de4d8d", 0x5, 0x805, 0x0, 0x0) 1.061998456s ago: executing program 2 (id=1046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 1.011806967s ago: executing program 2 (id=1049): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) 979.598983ms ago: executing program 0 (id=1050): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) 978.142439ms ago: executing program 1 (id=1051): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, 0x0) 912.50217ms ago: executing program 0 (id=1052): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 912.2203ms ago: executing program 2 (id=1053): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@mcast1={0x0}, 0x0, r0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0425bd7000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="040013000a000600ffffffffffff000006001200000000000600b500c902000008001400", @ANYRES32], 0x50}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x29, 0xb6, 0x45, 0x40, 0x8086, 0xb03, 0x3a45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x2}]}, @cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xbe0}, [@dmm={0x7}, @network_terminal={0x7}]}]}}]}}]}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 911.941233ms ago: executing program 0 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x4008000) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 911.778016ms ago: executing program 0 (id=1055): socket$packet(0x11, 0x2, 0x300) setreuid(0x0, 0xee00) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='veth1_to_hsr\x00') 592.854956ms ago: executing program 0 (id=1056): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xa) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xa0000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 592.600245ms ago: executing program 0 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x141601) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r6, &(0x7f00000001c0)="d2", 0x1) r7 = syz_open_dev$vim2m(0x0, 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x47, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"}) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)=0x24b1cd8b) 52.561167ms ago: executing program 1 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 52.209208ms ago: executing program 1 (id=1059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) 368.75µs ago: executing program 1 (id=1060): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) 0s ago: executing program 1 (id=1061): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x9, @multicast, 'macvlan0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) ioctl$PPPIOCCONNECT(r3, 0x40047435, &(0x7f00000002c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000001cc0), 0x400000000000026, 0x0) kernel console output (not intermixed with test programs): t(1727475622.822:321): avc: denied { open } for pid=6963 comm="syz.2.435" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.629994][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.635951][ T39] audit: type=1400 audit(1727475622.822:322): avc: denied { ioctl } for pid=6963 comm="syz.2.435" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.656654][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.658684][ T6488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.664117][ T6855] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.699630][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.701650][ T6488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.731853][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.734068][ T6491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.787321][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.818029][ T6858] veth0_vlan: entered promiscuous mode [ 343.824971][ T6858] veth1_vlan: entered promiscuous mode [ 343.836781][ T6858] veth0_macvtap: entered promiscuous mode [ 343.844774][ T6858] veth1_macvtap: entered promiscuous mode [ 343.859809][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.862600][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.870914][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.891532][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.894511][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.898087][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.902674][ T6858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.905148][ T6858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.907872][ T6858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.910432][ T6858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.922761][ T6882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.948415][ T6491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.953504][ T6491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.955777][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.980280][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.982503][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.990032][ T6882] veth0_vlan: entered promiscuous mode [ 343.996732][ T6882] veth1_vlan: entered promiscuous mode [ 344.016746][ T6882] veth0_macvtap: entered promiscuous mode [ 344.021078][ T6855] veth0_vlan: entered promiscuous mode [ 344.039246][ T6882] veth1_macvtap: entered promiscuous mode [ 344.051188][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.054142][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.057421][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.060700][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.070941][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.076038][ T6855] veth1_vlan: entered promiscuous mode [ 344.083547][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.086486][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.090338][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.093474][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.097279][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.102015][ T6882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.104412][ T6882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.106893][ T6882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.110042][ T6882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.166814][ T6982] Scaler: ================= START STATUS ================= [ 344.169630][ T6982] Scaler: ================== END STATUS ================== [ 344.214618][ T6488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.216848][ T6488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.250207][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.252731][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.310567][ T39] audit: type=1400 audit(1727475623.512:323): avc: denied { write } for pid=6985 comm="syz.0.407" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.346629][ T6855] veth0_macvtap: entered promiscuous mode [ 344.351610][ T6855] veth1_macvtap: entered promiscuous mode [ 344.363140][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.366526][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.370275][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.373313][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.375909][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.379801][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.383855][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.403776][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.406837][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.415525][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.419238][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.422166][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.425384][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.430088][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.442014][ T6855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.444627][ T6855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.447384][ T6855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.451656][ T6855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.550921][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 344.578419][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.582158][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.615355][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.617840][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.700001][ T8] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 344.704319][ T8] usb 5-1: config 0 has no interfaces? [ 344.707855][ T8] usb 5-1: config 0 has no interfaces? [ 344.716323][ T8] usb 5-1: config 0 has no interfaces? [ 344.721075][ T8] usb 5-1: config 0 has no interfaces? [ 344.725889][ T8] usb 5-1: config 0 has no interfaces? [ 344.730082][ T8] usb 5-1: config 0 has no interfaces? [ 344.735958][ T8] usb 5-1: config 0 has no interfaces? [ 344.743571][ T8] usb 5-1: config 0 has no interfaces? [ 344.747419][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.750372][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.752767][ T8] usb 5-1: Product: syz [ 344.756863][ T8] usb 5-1: Manufacturer: syz [ 344.758343][ T8] usb 5-1: SerialNumber: syz [ 344.761906][ T8] usb 5-1: config 0 descriptor?? [ 344.948784][ T5490] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 344.978680][ T8] usb 5-1: USB disconnect, device number 6 [ 345.095308][ T6492] bridge_slave_1: left allmulticast mode [ 345.102386][ T6492] bridge_slave_1: left promiscuous mode [ 345.105363][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.110460][ T6492] bridge_slave_0: left allmulticast mode [ 345.112161][ T6492] bridge_slave_0: left promiscuous mode [ 345.113844][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.119553][ T6492] bridge_slave_1: left allmulticast mode [ 345.119790][ T5490] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.124109][ T6492] bridge_slave_1: left promiscuous mode [ 345.124158][ T5490] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.126088][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.128987][ T5490] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.133144][ T5490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.136242][ T6492] bridge_slave_0: left allmulticast mode [ 345.138118][ T6492] bridge_slave_0: left promiscuous mode [ 345.138968][ T5490] usb 6-1: config 0 descriptor?? [ 345.141266][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.445611][ T6492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.458022][ T6492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.463304][ T6492] bond0 (unregistering): Released all slaves [ 345.472149][ T6492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.483328][ T6492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.493377][ T6492] bond0 (unregistering): Released all slaves [ 345.588262][ T5490] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 345.594704][ T5490] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 345.643291][ T5490] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 345.671839][ T6492] hsr_slave_0: left promiscuous mode [ 345.673863][ T6492] hsr_slave_1: left promiscuous mode [ 345.676342][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.679842][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.689073][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 345.699878][ T6492] hsr_slave_0: left promiscuous mode [ 345.713883][ T6492] hsr_slave_1: left promiscuous mode [ 345.716830][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.720284][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.795657][ T39] audit: type=1400 audit(1727475624.992:324): avc: denied { write } for pid=7003 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 345.817730][ T39] audit: type=1400 audit(1727475625.012:325): avc: denied { setopt } for pid=7003 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 345.838703][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.844169][ T39] audit: type=1400 audit(1727475625.042:326): avc: denied { connect } for pid=7003 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 345.849095][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.853586][ T39] audit: type=1400 audit(1727475625.052:327): avc: denied { create } for pid=7005 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 345.863620][ T35] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 345.872965][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.876985][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.879904][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.882821][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.885128][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.888000][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.889178][ T39] audit: type=1400 audit(1727475625.092:328): avc: denied { bind } for pid=7005 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 345.919559][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.921880][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.924671][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.927169][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.929611][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.932644][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.939692][ T7007] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 345.940255][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.941889][ T7007] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 345.944187][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.949219][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.952898][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.955114][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.957746][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.960712][ T7007] vhci_hcd vhci_hcd.0: Device attached [ 345.962183][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.967865][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.970730][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.973367][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.975766][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.982797][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.991781][ T7007] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 345.993540][ T7007] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 345.993540][ T35] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 345.993557][ T35] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 345.995534][ T7007] vhci_hcd vhci_hcd.0: Device attached [ 345.997744][ T35] usb 5-1: Product: syz [ 346.004269][ T35] usb 5-1: Manufacturer: syz [ 346.005595][ T7007] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 346.007364][ T7007] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.008698][ T6492] team0 (unregistering): Port device team_slave_1 removed [ 346.010144][ T7007] vhci_hcd vhci_hcd.0: Device attached [ 346.017296][ T35] usb 5-1: SerialNumber: syz [ 346.019714][ T35] usb 5-1: config 0 descriptor?? [ 346.021073][ T7007] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 346.022870][ T7007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 346.025571][ T7007] vhci_hcd vhci_hcd.0: Device attached [ 346.044754][ T39] audit: type=1400 audit(1727475625.242:329): avc: denied { bind } for pid=7003 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 346.061056][ T35] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 346.078009][ T6492] team0 (unregistering): Port device team_slave_0 removed [ 346.143575][ T5490] vhci_hcd: vhci_device speed not set [ 346.212550][ T5490] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 346.277214][ T7017] vhci_hcd: connection closed [ 346.279110][ T7015] vhci_hcd: connection closed [ 346.279900][ T6495] vhci_hcd: stop threads [ 346.281146][ T7013] vhci_hcd: connection closed [ 346.281975][ T7009] vhci_hcd: connection reset by peer [ 346.286605][ T6495] vhci_hcd: release socket [ 346.290190][ T6495] vhci_hcd: disconnect device [ 346.293317][ T6495] vhci_hcd: stop threads [ 346.294531][ T6495] vhci_hcd: release socket [ 346.296095][ T6495] vhci_hcd: disconnect device [ 346.297626][ T6495] vhci_hcd: stop threads [ 346.298903][ T6495] vhci_hcd: release socket [ 346.300244][ T6495] vhci_hcd: disconnect device [ 346.302682][ T6495] vhci_hcd: stop threads [ 346.304629][ T6495] vhci_hcd: release socket [ 346.306307][ T6495] vhci_hcd: disconnect device [ 346.446816][ T9] usb 5-1: USB disconnect, device number 7 [ 346.455341][ T9] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 346.498626][ T6492] team0 (unregistering): Port device team_slave_1 removed [ 346.537143][ T6492] team0 (unregistering): Port device team_slave_0 removed [ 346.645430][ T4785] Bluetooth: min 3 > max 0 [ 347.833355][ T4763] usb 6-1: USB disconnect, device number 3 [ 348.521544][ T7071] syzkaller1: entered promiscuous mode [ 348.528354][ T7071] syzkaller1: entered allmulticast mode [ 348.579977][ T7080] netlink: 'syz.0.456': attribute type 21 has an invalid length. [ 348.582004][ T7080] netlink: 128 bytes leftover after parsing attributes in process `syz.0.456'. [ 348.584420][ T7080] netlink: 'syz.0.456': attribute type 4 has an invalid length. [ 348.598623][ T7080] netlink: 'syz.0.456': attribute type 5 has an invalid length. [ 348.600804][ T7080] netlink: 3 bytes leftover after parsing attributes in process `syz.0.456'. [ 348.698658][ T4785] Bluetooth: hci2: command tx timeout [ 348.812748][ T7087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.458'. [ 349.979824][ T4785] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 349.983535][ T4785] Bluetooth: hci3: Injecting HCI hardware error event [ 349.987325][ T4785] Bluetooth: hci3: hardware error 0x00 [ 350.061770][ T7103] ======================================================= [ 350.061770][ T7103] WARNING: The mand mount option has been deprecated and [ 350.061770][ T7103] and is ignored by this kernel. Remove the mand [ 350.061770][ T7103] option from the mount to silence this warning. [ 350.061770][ T7103] ======================================================= [ 350.121420][ T39] audit: type=1400 audit(1727475629.282:330): avc: denied { mount } for pid=7099 comm="syz.3.463" name="/" dev="ramfs" ino=22063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 350.881307][ T39] audit: type=1400 audit(1727475630.082:331): avc: denied { unmount } for pid=6858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 351.045447][ T39] audit: type=1400 audit(1727475630.242:332): avc: denied { read } for pid=7121 comm="syz.1.469" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 351.055297][ T39] audit: type=1400 audit(1727475630.242:333): avc: denied { open } for pid=7121 comm="syz.1.469" path="/4/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 351.065763][ T7127] block device autoloading is deprecated and will be removed. [ 351.164663][ T39] audit: type=1400 audit(1727475630.362:334): avc: denied { ioctl } for pid=7121 comm="syz.1.469" path="/4/file0/file0" dev="fuse" ino=0 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 351.212905][ T7127] md: superblock version 788529152 not known [ 351.217547][ T7127] md: couldn't set array info. -22 [ 351.319016][ T30] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 351.328734][ T5490] vhci_hcd: vhci_device speed not set [ 351.482771][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.486843][ T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 351.489718][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 351.492729][ T30] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 351.495245][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.501269][ T7128] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.504422][ T30] hub 8-1:1.0: bad descriptor, ignoring hub [ 351.506214][ T30] hub 8-1:1.0: probe with driver hub failed with error -5 [ 351.509283][ T30] cdc_wdm 8-1:1.0: skipping garbage [ 351.510927][ T30] cdc_wdm 8-1:1.0: skipping garbage [ 351.514739][ T30] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 351.516482][ T30] cdc_wdm 8-1:1.0: Unknown control protocol [ 351.793035][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 351.794938][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 351.797510][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 351.799469][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 351.802207][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 351.804038][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 351.812787][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 351.814529][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 351.819525][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 351.821610][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 351.824946][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 351.826848][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 351.829157][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 351.830988][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 351.832835][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 351.834633][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 351.836410][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 351.838675][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 351.840442][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 351.842266][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 351.861936][ T39] audit: type=1400 audit(1727475631.052:335): avc: denied { search } for pid=4817 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.058774][ T4785] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 352.958425][ T39] audit: type=1400 audit(1727475632.152:336): avc: denied { execute_no_trans } for pid=7161 comm="syz.1.478" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 352.984450][ T982] usb 8-1: USB disconnect, device number 13 [ 353.088570][ T39] audit: type=1400 audit(1727475632.282:337): avc: denied { mounton } for pid=7165 comm="syz.1.479" path="/proc/29/task" dev="proc" ino=22109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 353.094902][ T39] audit: type=1400 audit(1727475632.292:338): avc: denied { write } for pid=7165 comm="syz.1.479" name="unix" dev="proc" ino=4026535287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 353.246348][ T39] audit: type=1400 audit(1727475632.442:339): avc: denied { map } for pid=7169 comm="syz.2.481" path="socket:[21442]" dev="sockfs" ino=21442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 353.715330][ T7180] overlayfs: failed to clone lowerpath [ 354.880862][ T6998] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 355.226456][ T6998] usb 8-1: Using ep0 maxpacket: 32 [ 355.332100][ T6998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.371058][ T6998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.376921][ T6998] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 355.460727][ T6998] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 355.494386][ T6998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.503615][ T6998] usb 8-1: config 0 descriptor?? [ 355.936528][ T7219] Scaler: ================= START STATUS ================= [ 355.939030][ T7219] Scaler: ================== END STATUS ================== [ 355.997018][ T6998] hid (null): unknown global tag 0xe [ 355.998460][ T6998] hid (null): unknown global tag 0xe [ 356.000780][ T6998] hid (null): unknown global tag 0xd [ 356.002277][ T6998] hid (null): unknown global tag 0xe [ 356.011737][ T6998] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0011/input/input7 [ 356.069820][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 356.069832][ T39] audit: type=1400 audit(1727475635.272:346): avc: denied { create } for pid=7210 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 356.080854][ T39] audit: type=1400 audit(1727475635.282:347): avc: denied { write } for pid=7210 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 356.094526][ T39] audit: type=1400 audit(1727475635.292:348): avc: denied { nlmsg_read } for pid=7210 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 356.132454][ T6998] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0011/input/input8 [ 356.199954][ T6998] kye 0003:0458:5011.0011: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 356.712427][ T7226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.505'. [ 356.994809][ T7235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.499'. [ 357.257000][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.501'. [ 357.378887][ T30] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 357.530716][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.533685][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.537107][ T30] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.539590][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.544190][ T30] usb 7-1: config 0 descriptor?? [ 357.977812][ T30] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 357.980994][ T30] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 357.998211][ T30] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 358.150538][ T30] usb 8-1: USB disconnect, device number 14 [ 358.232064][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.242331][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.313182][ T7260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.509'. [ 358.937586][ T7289] Scaler: ================= START STATUS ================= [ 358.940524][ T7289] Scaler: ================== END STATUS ================== [ 359.344012][ T7296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.519'. [ 359.439103][ T7298] syzkaller1: entered promiscuous mode [ 359.440993][ T7298] syzkaller1: entered allmulticast mode [ 360.143930][ T7317] binder: BINDER_SET_CONTEXT_MGR already set [ 360.146305][ T7317] binder: 7315:7317 ioctl 4018620d 200001c0 returned -16 [ 360.155087][ T8] usb 7-1: USB disconnect, device number 7 [ 360.549021][ T7332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.529'. [ 361.104689][ T7355] binder: BINDER_SET_CONTEXT_MGR already set [ 361.108639][ T7355] binder: 7349:7355 ioctl 4018620d 200001c0 returned -16 [ 361.959033][ T7366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'. [ 362.168734][ T6998] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 362.350000][ T6998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.353105][ T6998] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.356476][ T6998] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.359064][ T6998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.372414][ T6998] usb 8-1: config 0 descriptor?? [ 362.873747][ T6998] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 362.876899][ T6998] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 362.896209][ T6998] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 363.134429][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.159245][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.221298][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.551'. [ 364.771516][ T1785] usb 8-1: USB disconnect, device number 15 [ 366.186939][ T7437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.561'. [ 366.282479][ T7439] netlink: 'syz.3.562': attribute type 21 has an invalid length. [ 366.289241][ T7439] netlink: 128 bytes leftover after parsing attributes in process `syz.3.562'. [ 366.292488][ T7439] netlink: 'syz.3.562': attribute type 4 has an invalid length. [ 366.294636][ T7439] netlink: 'syz.3.562': attribute type 5 has an invalid length. [ 366.301848][ T7439] netlink: 3 bytes leftover after parsing attributes in process `syz.3.562'. [ 367.901370][ T7465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.571'. [ 368.312133][ T7477] netlink: 'syz.3.574': attribute type 21 has an invalid length. [ 368.314293][ T7477] netlink: 128 bytes leftover after parsing attributes in process `syz.3.574'. [ 368.316665][ T7477] netlink: 'syz.3.574': attribute type 4 has an invalid length. [ 368.328657][ T7477] netlink: 'syz.3.574': attribute type 5 has an invalid length. [ 368.330781][ T7477] netlink: 3 bytes leftover after parsing attributes in process `syz.3.574'. [ 368.619657][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 368.768922][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 368.784618][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.795657][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.805432][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 368.814962][ T35] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 368.819350][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.849066][ T35] usb 6-1: config 0 descriptor?? [ 369.306114][ T35] hid (null): unknown global tag 0xe [ 369.307736][ T35] hid (null): unknown global tag 0xe [ 369.310044][ T35] hid (null): unknown global tag 0xd [ 369.311865][ T35] hid (null): unknown global tag 0xe [ 369.330044][ T35] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0014/input/input9 [ 369.429036][ T35] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0014/input/input10 [ 369.457299][ T35] kye 0003:0458:5011.0014: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 369.899810][ T7504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.584'. [ 370.364764][ T7515] netlink: 'syz.3.586': attribute type 21 has an invalid length. [ 370.366883][ T7515] netlink: 128 bytes leftover after parsing attributes in process `syz.3.586'. [ 370.379383][ T7515] netlink: 'syz.3.586': attribute type 4 has an invalid length. [ 370.382094][ T7515] netlink: 'syz.3.586': attribute type 5 has an invalid length. [ 370.385197][ T7515] netlink: 3 bytes leftover after parsing attributes in process `syz.3.586'. [ 370.500444][ T5369] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 371.546398][ T7531] syzkaller1: entered promiscuous mode [ 371.547900][ T7531] syzkaller1: entered allmulticast mode [ 371.673042][ T7535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.593'. [ 372.034263][ T7548] input: syz0 as /devices/virtual/input/input11 [ 372.386123][ T7553] Scaler: ================= START STATUS ================= [ 372.388391][ T7553] Scaler: ================== END STATUS ================== [ 372.554985][ T8] usb 6-1: USB disconnect, device number 4 [ 373.016381][ T7565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.603'. [ 373.213893][ T7562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.602'. [ 373.428628][ T1785] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 373.578675][ T1785] usb 5-1: Using ep0 maxpacket: 32 [ 373.581440][ T1785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.586958][ T1785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.590216][ T1785] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 373.594558][ T1785] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 373.597202][ T1785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.608266][ T1785] usb 5-1: config 0 descriptor?? [ 374.020553][ T1785] hid (null): unknown global tag 0xe [ 374.022046][ T1785] hid (null): unknown global tag 0xe [ 374.023549][ T1785] hid (null): unknown global tag 0xd [ 374.025011][ T1785] hid (null): unknown global tag 0xe [ 374.030845][ T1785] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0015/input/input12 [ 374.249706][ T1785] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0015/input/input13 [ 374.307101][ T1785] kye 0003:0458:5011.0015: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 376.012347][ T7611] input: syz0 as /devices/virtual/input/input14 [ 376.268320][ T30] usb 5-1: USB disconnect, device number 8 [ 376.509744][ T7617] md: superblock version 788529152 not known [ 376.511431][ T7617] md: couldn't set array info. -22 [ 377.807464][ T7644] Scaler: ================= START STATUS ================= [ 377.809927][ T7644] Scaler: ================== END STATUS ================== [ 378.465805][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.468728][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.804039][ T7659] binder: BINDER_SET_CONTEXT_MGR already set [ 378.805721][ T7659] binder: 7657:7659 ioctl 4018620d 200001c0 returned -16 [ 379.232118][ T7665] Scaler: ================= START STATUS ================= [ 379.234490][ T7665] Scaler: ================== END STATUS ================== [ 379.533177][ T7672] binder: BINDER_SET_CONTEXT_MGR already set [ 379.535032][ T7672] binder: 7668:7672 ioctl 4018620d 200001c0 returned -16 [ 380.247027][ T7677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.634'. [ 380.297674][ T7683] Scaler: ================= START STATUS ================= [ 380.300044][ T7683] Scaler: ================== END STATUS ================== [ 381.163661][ T7693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.640'. [ 381.178725][ T5382] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 381.332089][ T5382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.335417][ T5382] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.338981][ T5382] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.341587][ T5382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.345688][ T5382] usb 6-1: config 0 descriptor?? [ 381.759741][ T5382] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 381.761964][ T5382] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 381.765036][ T5382] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 382.032607][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.036388][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.184048][ T7720] Scaler: ================= START STATUS ================= [ 382.186312][ T7720] Scaler: ================== END STATUS ================== [ 383.828683][ T5453] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 383.913514][ T4763] usb 6-1: USB disconnect, device number 5 [ 383.999137][ T7741] netlink: 'syz.1.651': attribute type 21 has an invalid length. [ 384.001546][ T7741] netlink: 128 bytes leftover after parsing attributes in process `syz.1.651'. [ 384.004121][ T7741] netlink: 'syz.1.651': attribute type 4 has an invalid length. [ 384.004537][ T5453] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.006222][ T7741] netlink: 'syz.1.651': attribute type 5 has an invalid length. [ 384.008961][ T5453] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 384.008993][ T5453] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 384.009015][ T5453] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 384.012326][ T7741] netlink: 3 bytes leftover after parsing attributes in process `syz.1.651'. [ 384.013969][ T5453] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.061164][ T7739] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 384.109783][ T5453] hub 7-1:1.0: bad descriptor, ignoring hub [ 384.111780][ T5453] hub 7-1:1.0: probe with driver hub failed with error -5 [ 384.114542][ T5453] cdc_wdm 7-1:1.0: skipping garbage [ 384.116116][ T5453] cdc_wdm 7-1:1.0: skipping garbage [ 384.125735][ T5453] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 384.127558][ T5453] cdc_wdm 7-1:1.0: Unknown control protocol [ 385.716045][ T5453] usb 7-1: USB disconnect, device number 8 [ 388.790797][ T7811] binder: BINDER_SET_CONTEXT_MGR already set [ 388.796071][ T7811] binder: 7792:7811 ioctl 4018620d 200001c0 returned -16 [ 391.158734][ T5382] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 391.365565][ T5382] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.369152][ T5382] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.376401][ T5382] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.385199][ T5382] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.485456][ T5382] usb 8-1: config 0 descriptor?? [ 391.952511][ T5382] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 391.955421][ T5382] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 392.042859][ T5382] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 392.288256][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.295375][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.334271][ T7850] binder_alloc: 7847: binder_alloc_buf, no vma [ 393.655292][ T7866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.687'. [ 394.246278][ T55] usb 8-1: USB disconnect, device number 16 [ 399.728924][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.743174][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.747031][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 399.752392][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 399.754833][ T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 399.757455][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 400.887605][ T7895] chnl_net:caif_netlink_parms(): no params data found [ 401.822743][ T65] Bluetooth: hci0: command tx timeout [ 402.370637][ T6492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.900175][ T65] Bluetooth: hci0: command tx timeout [ 405.985314][ T65] Bluetooth: hci0: command tx timeout [ 408.060265][ T65] Bluetooth: hci0: command tx timeout [ 418.298664][ T4785] Bluetooth: hci2: command 0x0406 tx timeout [ 418.677641][ T6492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.822309][ T5346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.826141][ T5346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.828885][ T5346] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.836892][ T5346] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.842444][ T5346] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 418.844491][ T5346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.906391][ T5346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 418.910859][ T5346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 418.913424][ T5346] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 418.915801][ T5346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 418.936701][ T5346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 418.943395][ T5346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.178999][ T6492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.920354][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 419.923671][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 419.926961][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.930656][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.934269][ T65] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 419.936676][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.018765][ T4785] Bluetooth: hci3: command tx timeout [ 421.020905][ T4785] Bluetooth: hci1: command tx timeout [ 421.982814][ T65] Bluetooth: hci2: command tx timeout [ 423.098748][ T65] Bluetooth: hci1: command tx timeout [ 423.100384][ T65] Bluetooth: hci3: command tx timeout [ 424.058703][ T4785] Bluetooth: hci2: command tx timeout [ 425.178702][ T4785] Bluetooth: hci3: command tx timeout [ 425.180279][ T4785] Bluetooth: hci1: command tx timeout [ 426.141013][ T4785] Bluetooth: hci2: command tx timeout [ 427.258716][ T4785] Bluetooth: hci1: command tx timeout [ 427.260301][ T65] Bluetooth: hci3: command tx timeout [ 428.218756][ T65] Bluetooth: hci2: command tx timeout [ 439.949216][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.951438][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.634719][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.636569][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.638388][ T7895] bridge_slave_0: entered allmulticast mode [ 454.641065][ T7895] bridge_slave_0: entered promiscuous mode [ 459.212966][ T4785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 459.218026][ T4785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 459.226636][ T4785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 459.231455][ T4785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 459.234610][ T4785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 459.237516][ T4785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 461.260811][ T65] Bluetooth: hci4: command tx timeout [ 462.236220][ T6492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.338727][ T65] Bluetooth: hci4: command tx timeout [ 465.418811][ T65] Bluetooth: hci4: command tx timeout [ 467.498643][ T65] Bluetooth: hci4: command tx timeout [ 469.777679][ T4785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.786916][ T4785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.798720][ T4785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.814430][ T4785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.830903][ T4785] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 469.840762][ T4785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 471.898746][ T4785] Bluetooth: hci5: command tx timeout [ 473.978740][ T4785] Bluetooth: hci5: command tx timeout [ 476.058721][ T4785] Bluetooth: hci5: command tx timeout [ 478.138682][ T4785] Bluetooth: hci5: command tx timeout [ 479.805301][ T65] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 479.815287][ T65] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 479.831128][ T65] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 479.843730][ T65] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 479.897684][ T65] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 479.942692][ T65] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 480.444491][ T65] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 480.451128][ T65] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 480.454894][ T65] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 480.459314][ T65] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 480.462109][ T65] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 480.464157][ T65] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 481.979499][ T65] Bluetooth: hci6: command tx timeout [ 482.538689][ T65] Bluetooth: hci7: command tx timeout [ 484.058638][ T65] Bluetooth: hci6: command tx timeout [ 484.618695][ T65] Bluetooth: hci7: command tx timeout [ 486.138826][ T65] Bluetooth: hci6: command tx timeout [ 486.698824][ T65] Bluetooth: hci7: command tx timeout [ 488.221936][ T65] Bluetooth: hci6: command tx timeout [ 488.778784][ T65] Bluetooth: hci7: command tx timeout [ 501.340386][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.342067][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.002732][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.008630][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.010715][ T7895] bridge_slave_1: entered allmulticast mode [ 504.084751][ T7895] bridge_slave_1: entered promiscuous mode [ 505.163827][ T6492] bridge_slave_1: left allmulticast mode [ 505.165928][ T6492] bridge_slave_1: left promiscuous mode [ 505.168230][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.177534][ T6492] bridge_slave_0: left allmulticast mode [ 505.179253][ T6492] bridge_slave_0: left promiscuous mode [ 505.180879][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.899100][ T4785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 519.911083][ T4785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 519.921206][ T4785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 519.954824][ T4785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 519.966146][ T4785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 519.971252][ T4785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 521.978785][ T65] Bluetooth: hci1: command tx timeout [ 524.058761][ T65] Bluetooth: hci1: command tx timeout [ 526.138839][ T65] Bluetooth: hci1: command tx timeout [ 528.218753][ T65] Bluetooth: hci1: command tx timeout [ 530.403400][ T4785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 530.409919][ T4785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 530.421569][ T4785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 530.441566][ T4785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 530.455350][ T4785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 530.576871][ T4785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.618726][ T4785] Bluetooth: hci2: command tx timeout [ 534.698855][ T4785] Bluetooth: hci2: command tx timeout [ 536.778808][ T4785] Bluetooth: hci2: command tx timeout [ 538.861028][ T4785] Bluetooth: hci2: command tx timeout [ 540.919934][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 540.941388][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 540.949671][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 540.970302][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 541.007587][ T65] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 541.014940][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 541.492933][ T4785] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 541.496050][ T4785] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 541.502252][ T4785] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 541.506001][ T4785] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 541.508469][ T4785] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 541.511298][ T4785] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 543.098789][ T65] Bluetooth: hci3: command tx timeout [ 543.578773][ T65] Bluetooth: hci8: command tx timeout [ 545.178744][ T65] Bluetooth: hci3: command tx timeout [ 545.660088][ T65] Bluetooth: hci8: command tx timeout [ 547.258711][ T65] Bluetooth: hci3: command tx timeout [ 547.738748][ T65] Bluetooth: hci8: command tx timeout [ 549.338777][ T65] Bluetooth: hci3: command tx timeout [ 549.822316][ T65] Bluetooth: hci8: command tx timeout [ 562.780201][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.782597][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.865053][ T6492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.893511][ T6492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.913223][ T6492] bond0 (unregistering): Released all slaves [ 578.945160][ T7962] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 579.702927][ T6492] hsr_slave_0: left promiscuous mode [ 579.706832][ T6492] hsr_slave_1: left promiscuous mode [ 579.710169][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.712561][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.716089][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.718127][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.734524][ T6492] veth1_macvtap: left promiscuous mode [ 579.736072][ T6492] veth0_macvtap: left promiscuous mode [ 579.737748][ T6492] veth1_vlan: left promiscuous mode [ 579.740642][ T6492] veth0_vlan: left promiscuous mode [ 579.905853][ T4785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 579.909473][ T4785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 579.911850][ T4785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 579.914782][ T4785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 579.917974][ T4785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 579.921153][ T4785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 580.425984][ T6492] team0 (unregistering): Port device team_slave_1 removed [ 580.501925][ T6492] team0 (unregistering): Port device team_slave_0 removed [ 580.981306][ T7985] chnl_net:caif_netlink_parms(): no params data found [ 581.002303][ T7990] chnl_net:caif_netlink_parms(): no params data found [ 581.022584][ T7996] chnl_net:caif_netlink_parms(): no params data found [ 581.106347][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.108281][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.111054][ T7985] bridge_slave_0: entered allmulticast mode [ 581.113104][ T7985] bridge_slave_0: entered promiscuous mode [ 581.145413][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.147297][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.149518][ T7985] bridge_slave_1: entered allmulticast mode [ 581.151625][ T7985] bridge_slave_1: entered promiscuous mode [ 581.226452][ T7985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.241050][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.243226][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.245299][ T7996] bridge_slave_0: entered allmulticast mode [ 581.247520][ T7996] bridge_slave_0: entered promiscuous mode [ 581.251853][ T7985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.255579][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.257406][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.260278][ T7990] bridge_slave_0: entered allmulticast mode [ 581.262240][ T7990] bridge_slave_0: entered promiscuous mode [ 581.264772][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.266543][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.268398][ T7990] bridge_slave_1: entered allmulticast mode [ 581.270921][ T7990] bridge_slave_1: entered promiscuous mode [ 581.273188][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.275347][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.277387][ T7996] bridge_slave_1: entered allmulticast mode [ 581.279752][ T7996] bridge_slave_1: entered promiscuous mode [ 581.355227][ T7985] team0: Port device team_slave_0 added [ 581.359315][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.366342][ T7996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.398442][ T7985] team0: Port device team_slave_1 added [ 581.408963][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.456451][ T7996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.480800][ T7990] team0: Port device team_slave_0 added [ 581.495552][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.497445][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.504685][ T7985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.510155][ T7990] team0: Port device team_slave_1 added [ 581.513708][ T7996] team0: Port device team_slave_0 added [ 581.519958][ T7996] team0: Port device team_slave_1 added [ 581.530716][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.532478][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.539771][ T7985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.557823][ T8020] chnl_net:caif_netlink_parms(): no params data found [ 581.571916][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.573754][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.583275][ T7996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.596606][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.598446][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.605314][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.611171][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.613095][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.620083][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.631921][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.633753][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.640670][ T7996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.716163][ T7990] hsr_slave_0: entered promiscuous mode [ 581.718742][ T7990] hsr_slave_1: entered promiscuous mode [ 581.732988][ T7985] hsr_slave_0: entered promiscuous mode [ 581.734954][ T7985] hsr_slave_1: entered promiscuous mode [ 581.736746][ T7985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.740297][ T7985] Cannot create hsr debugfs directory [ 581.749845][ T7996] hsr_slave_0: entered promiscuous mode [ 581.752110][ T7996] hsr_slave_1: entered promiscuous mode [ 581.754293][ T7996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.756254][ T7996] Cannot create hsr debugfs directory [ 581.860415][ T6492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.870163][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.872517][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.874888][ T8020] bridge_slave_0: entered allmulticast mode [ 581.877563][ T8020] bridge_slave_0: entered promiscuous mode [ 581.882912][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.885637][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.888403][ T8020] bridge_slave_1: entered allmulticast mode [ 581.891942][ T8020] bridge_slave_1: entered promiscuous mode [ 581.915559][ T8020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.947471][ T8020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.979265][ T6492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.988701][ T65] Bluetooth: hci0: command tx timeout [ 582.013614][ T8020] team0: Port device team_slave_0 added [ 582.019331][ T8020] team0: Port device team_slave_1 added [ 582.039551][ T7990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.089519][ T6492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.165632][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.167451][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.174381][ T8020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.194958][ T7990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.204351][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.206178][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.213838][ T8020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.234350][ T6492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.255377][ T7990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.276398][ T8020] hsr_slave_0: entered promiscuous mode [ 582.278310][ T8020] hsr_slave_1: entered promiscuous mode [ 582.280813][ T8020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.282757][ T8020] Cannot create hsr debugfs directory [ 582.361844][ T7990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.442100][ T6492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.528318][ T6492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.581483][ T6492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.659006][ T6492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.764312][ T6492] bridge_slave_1: left allmulticast mode [ 582.765798][ T6492] bridge_slave_1: left promiscuous mode [ 582.767304][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.770942][ T6492] bridge_slave_0: left allmulticast mode [ 582.772464][ T6492] bridge_slave_0: left promiscuous mode [ 582.774941][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.778902][ T6492] bridge_slave_1: left allmulticast mode [ 582.780322][ T6492] bridge_slave_1: left promiscuous mode [ 582.781791][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.785704][ T6492] bridge_slave_0: left allmulticast mode [ 582.787182][ T6492] bridge_slave_0: left promiscuous mode [ 582.788903][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.792144][ T6492] bridge_slave_1: left allmulticast mode [ 582.793575][ T6492] bridge_slave_1: left promiscuous mode [ 582.795058][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.798047][ T6492] bridge_slave_0: left allmulticast mode [ 582.800097][ T6492] bridge_slave_0: left promiscuous mode [ 582.801533][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.806743][ T6492] bridge_slave_1: left allmulticast mode [ 582.808234][ T6492] bridge_slave_1: left promiscuous mode [ 582.810331][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.813170][ T6492] bridge_slave_0: left allmulticast mode [ 582.814653][ T6492] bridge_slave_0: left promiscuous mode [ 582.816150][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.654426][ T6492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.667402][ T6492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.671899][ T6492] bond0 (unregistering): Released all slaves [ 583.676054][ T6492] bond0 (unregistering): Released all slaves [ 583.762945][ T6492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.768453][ T6492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.773502][ T6492] bond0 (unregistering): Released all slaves [ 583.849812][ T6492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.853586][ T6492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.857095][ T6492] bond0 (unregistering): Released all slaves [ 584.058648][ T65] Bluetooth: hci0: command tx timeout [ 584.290228][ T7985] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 584.306786][ T7985] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 584.310231][ T7985] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 584.313303][ T7985] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 584.381827][ T7985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.388880][ T7985] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.393623][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.395518][ T6495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.400188][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.402098][ T6495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.515485][ T7985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.559713][ T7985] veth0_vlan: entered promiscuous mode [ 584.566769][ T7985] veth1_vlan: entered promiscuous mode [ 584.605044][ T7985] veth0_macvtap: entered promiscuous mode [ 584.608448][ T7985] veth1_macvtap: entered promiscuous mode [ 584.616678][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.619982][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.622405][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.625025][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.627730][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.630502][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.633829][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.640831][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.643456][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.645878][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.649172][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.651617][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.654171][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.658162][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.685039][ T7985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.688084][ T7985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.691251][ T7985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.694047][ T7985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.745630][ T6491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.748761][ T6491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.776251][ T6491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.778355][ T6491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.803665][ T7996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 584.814225][ T7996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 584.871656][ T7996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.878156][ T7996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.894372][ T6492] hsr_slave_0: left promiscuous mode [ 584.896453][ T6492] hsr_slave_1: left promiscuous mode [ 584.900036][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.901976][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.904308][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.906343][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.915323][ T6492] hsr_slave_0: left promiscuous mode [ 584.918319][ T6492] hsr_slave_1: left promiscuous mode [ 584.924909][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.927622][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.931175][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.933944][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.944296][ T6492] hsr_slave_0: left promiscuous mode [ 584.956603][ T6492] hsr_slave_1: left promiscuous mode [ 584.962539][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.965055][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.973523][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.975549][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.034805][ T6492] veth1_macvtap: left promiscuous mode [ 585.036292][ T6492] veth0_macvtap: left promiscuous mode [ 585.037847][ T6492] veth1_vlan: left promiscuous mode [ 585.040098][ T6492] veth0_vlan: left promiscuous mode [ 585.044457][ T6492] veth1_macvtap: left promiscuous mode [ 585.045963][ T6492] veth0_macvtap: left promiscuous mode [ 585.047589][ T6492] veth1_vlan: left promiscuous mode [ 585.049173][ T6492] veth0_vlan: left promiscuous mode [ 585.052481][ T6492] veth1_macvtap: left promiscuous mode [ 585.054102][ T6492] veth0_macvtap: left promiscuous mode [ 585.055682][ T6492] veth1_vlan: left promiscuous mode [ 585.057243][ T6492] veth0_vlan: left promiscuous mode [ 585.749439][ T8125] binder_alloc: 8123: binder_alloc_buf, no vma [ 585.888690][ T6492] team0 (unregistering): Port device team_slave_1 removed [ 585.987436][ T6492] team0 (unregistering): Port device team_slave_0 removed [ 586.148601][ T65] Bluetooth: hci0: command tx timeout [ 586.866967][ T8131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.710'. [ 587.165532][ T6492] team0 (unregistering): Port device team_slave_1 removed [ 587.243779][ T6492] team0 (unregistering): Port device team_slave_0 removed [ 588.135193][ T39] audit: type=1400 audit(1727475867.332:349): avc: denied { read } for pid=8138 comm="syz.3.713" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 588.141426][ T39] audit: type=1400 audit(1727475867.332:350): avc: denied { open } for pid=8138 comm="syz.3.713" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 588.218713][ T65] Bluetooth: hci0: command tx timeout [ 588.332469][ T39] audit: type=1400 audit(1727475867.532:351): avc: denied { map } for pid=8138 comm="syz.3.713" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 588.386830][ T6492] team0 (unregistering): Port device team_slave_1 removed [ 588.458801][ T6492] team0 (unregistering): Port device team_slave_0 removed [ 589.036089][ T39] audit: type=1400 audit(1727475868.232:352): avc: denied { setrlimit } for pid=8144 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 589.089268][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.100854][ T7996] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.105894][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.107889][ T6494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.120937][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.123045][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.332336][ T7996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.369604][ T7996] veth0_vlan: entered promiscuous mode [ 589.374962][ T7996] veth1_vlan: entered promiscuous mode [ 589.390988][ T7996] veth0_macvtap: entered promiscuous mode [ 589.394226][ T7996] veth1_macvtap: entered promiscuous mode [ 589.405688][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.408448][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.412007][ T7996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.423770][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.426534][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.430103][ T7996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.436518][ T7996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.446408][ T7996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.448945][ T7996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.451261][ T7996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.475917][ T7990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.480372][ T7990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 589.484509][ T7990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 589.487711][ T7990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 589.492781][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.714'. [ 589.551674][ T8020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 589.556661][ T8020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 589.564420][ T8020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 589.573338][ T8020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 589.603832][ T6494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.606823][ T6494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.671131][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.673238][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.674401][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.710066][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.716297][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.718200][ T6494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.723744][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.726167][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.743517][ T8020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.759721][ T8020] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.772884][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.774776][ T6494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.789728][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.791685][ T6495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.817464][ T8020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 589.823000][ T8020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.929422][ T8207] Scaler: ================= START STATUS ================= [ 589.931007][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.933310][ T8207] Scaler: ================== END STATUS ================== [ 589.943574][ T8020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.043909][ T8020] veth0_vlan: entered promiscuous mode [ 590.051951][ T7990] veth0_vlan: entered promiscuous mode [ 590.056481][ T8020] veth1_vlan: entered promiscuous mode [ 590.079565][ T7990] veth1_vlan: entered promiscuous mode [ 590.119377][ T7990] veth0_macvtap: entered promiscuous mode [ 590.134067][ T7990] veth1_macvtap: entered promiscuous mode [ 590.145170][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.149352][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.152945][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.156777][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.163135][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.177986][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.182347][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.186013][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.190850][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.197237][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.211065][ T8020] veth0_macvtap: entered promiscuous mode [ 590.225773][ T7990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.228821][ T7990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.231322][ T7990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.233739][ T7990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.245697][ T8020] veth1_macvtap: entered promiscuous mode [ 590.600308][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.604134][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.606880][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.625247][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.630306][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.633104][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.647009][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.680695][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.683449][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.685955][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.690858][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.693427][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.696154][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.701501][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.716598][ T8020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.720378][ T8020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.722678][ T8020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.724959][ T8020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.789962][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.792097][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.873753][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.875881][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.932358][ T6495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.934480][ T6495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.956395][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.959585][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.120735][ T8252] Scaler: ================= START STATUS ================= [ 591.122717][ T8252] Scaler: ================== END STATUS ================== [ 592.424631][ T39] audit: type=1400 audit(1727475871.622:353): avc: denied { append } for pid=8269 comm="syz.3.724" name="event2" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 592.678690][ T4763] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 592.828866][ T4763] usb 8-1: Using ep0 maxpacket: 8 [ 592.841866][ T4763] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 592.850679][ T4763] usb 8-1: config 179 has no interface number 0 [ 592.858012][ T4763] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 592.872671][ T4763] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 592.881844][ T4763] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 592.898570][ T4763] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 592.901264][ T4763] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 592.904705][ T4763] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 592.904720][ T4763] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.918896][ T8272] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 592.925194][ T4763] xpad 8-1:179.65: probe with driver xpad failed with error -5 [ 593.156298][ T39] audit: type=1400 audit(1727475872.352:354): avc: denied { shutdown } for pid=8269 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 593.162345][ T30] usb 8-1: USB disconnect, device number 17 [ 593.203782][ T8283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.729'. [ 593.324549][ T8285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.730'. [ 593.468016][ T8287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.731'. [ 593.823213][ T39] audit: type=1400 audit(1727475873.022:355): avc: denied { read } for pid=8297 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 593.833239][ T8298] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 593.838203][ T39] audit: type=1400 audit(1727475873.032:356): avc: denied { read write } for pid=8297 comm="syz.3.734" name="uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 593.851074][ T8298] batman_adv: batadv0: Adding interface: team0 [ 593.852828][ T8298] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.862488][ T39] audit: type=1400 audit(1727475873.032:357): avc: denied { open } for pid=8297 comm="syz.3.734" path="/dev/uhid" dev="devtmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 593.868678][ T8298] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 593.873845][ T39] audit: type=1400 audit(1727475873.072:358): avc: denied { write } for pid=4817 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.882576][ T8298] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 593.885088][ T39] audit: type=1400 audit(1727475873.072:359): avc: denied { remove_name } for pid=4817 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.885382][ T8298] netlink: 2 bytes leftover after parsing attributes in process `syz.3.734'. [ 593.891821][ T39] audit: type=1400 audit(1727475873.072:360): avc: denied { add_name } for pid=4817 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.894736][ T8298] team0: entered promiscuous mode [ 593.902435][ T8298] team_slave_0: entered promiscuous mode [ 593.904514][ T39] audit: type=1400 audit(1727475873.072:361): avc: denied { create } for pid=8297 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 593.904542][ T8298] team_slave_1: entered promiscuous mode [ 593.909672][ T39] audit: type=1400 audit(1727475873.082:362): avc: denied { bind } for pid=8297 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 593.912821][ T8298] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.920716][ T8298] batman_adv: batadv0: Interface activated: team0 [ 593.922799][ T8298] batman_adv: batadv0: Interface deactivated: team0 [ 593.924880][ T8298] batman_adv: batadv0: Removing interface: team0 [ 593.928334][ T8298] bridge0: port 3(team0) entered blocking state [ 593.930213][ T8298] bridge0: port 3(team0) entered disabled state [ 593.932012][ T8298] team0: entered allmulticast mode [ 593.933449][ T8298] team_slave_0: entered allmulticast mode [ 593.935029][ T8298] team_slave_1: entered allmulticast mode [ 593.937514][ T8298] bridge0: port 3(team0) entered blocking state [ 593.939559][ T8298] bridge0: port 3(team0) entered forwarding state [ 593.990072][ T8301] warning: `syz.3.736' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 594.024150][ T39] audit: type=1400 audit(1727475873.222:363): avc: denied { create } for pid=8304 comm="syz.3.737" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 594.028262][ T8305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 594.155207][ T8314] fuse: Bad value for 'group_id' [ 594.156728][ T8314] fuse: Bad value for 'group_id' [ 595.400193][ T8335] mkiss: ax0: crc mode is auto. [ 596.364840][ T8345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.747'. [ 596.584275][ T8349] Invalid ELF header type: 0 != 1 [ 596.957924][ T8355] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 596.966304][ T8355] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 597.953581][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'. [ 598.334702][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 598.334714][ T39] audit: type=1400 audit(1727475877.532:386): avc: denied { connect } for pid=8375 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 598.562516][ T4785] Bluetooth: hci2: unexpected event 0x05 length: 12 > 4 [ 598.630658][ T8382] Scaler: ================= START STATUS ================= [ 598.634495][ T8382] Scaler: ================== END STATUS ================== [ 598.867191][ T8385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.428164][ T39] audit: type=1400 audit(1727475878.622:387): avc: denied { append } for pid=8389 comm="syz.0.760" name="userio" dev="devtmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 599.495620][ T39] audit: type=1400 audit(1727475878.692:388): avc: denied { unmount } for pid=8020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 599.788684][ T5382] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 599.940558][ T5382] usb 6-1: config 0 has no interfaces? [ 599.944725][ T5382] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 599.947972][ T5382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.950845][ T5382] usb 6-1: Product: syz [ 599.952301][ T5382] usb 6-1: Manufacturer: syz [ 599.953997][ T5382] usb 6-1: SerialNumber: syz [ 599.958641][ T5382] usb 6-1: config 0 descriptor?? [ 600.176894][ T5382] usb 6-1: USB disconnect, device number 6 [ 600.378722][ T4785] Bluetooth: hci0: command 0x0405 tx timeout [ 601.387563][ T39] audit: type=1400 audit(1727475880.582:389): avc: denied { execute } for pid=8403 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 601.399914][ T39] audit: type=1400 audit(1727475880.592:390): avc: denied { execute_no_trans } for pid=8403 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 601.445803][ T39] audit: type=1400 audit(1727475880.642:391): avc: denied { ioctl } for pid=8406 comm="syz.3.767" path="socket:[31136]" dev="sockfs" ino=31136 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 601.485792][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.486063][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 601.489162][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 601.494198][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 601.522018][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 601.524516][ T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 601.526535][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.791842][ T8407] syz.3.767 (8407) used greatest stack depth: 21072 bytes left [ 601.792805][ T8408] chnl_net:caif_netlink_parms(): no params data found [ 601.823388][ T39] audit: type=1400 audit(1727475881.022:392): avc: denied { bind } for pid=8421 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 601.841308][ T39] audit: type=1400 audit(1727475881.032:393): avc: denied { name_bind } for pid=8421 comm="syz.3.770" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 601.869045][ T39] audit: type=1400 audit(1727475881.032:394): avc: denied { node_bind } for pid=8421 comm="syz.3.770" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 602.084738][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.086880][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.089787][ T8408] bridge_slave_0: entered allmulticast mode [ 602.092535][ T8408] bridge_slave_0: entered promiscuous mode [ 602.095122][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.097069][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.099059][ T8408] bridge_slave_1: entered allmulticast mode [ 602.101061][ T8408] bridge_slave_1: entered promiscuous mode [ 602.130812][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.134789][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.156203][ T39] audit: type=1400 audit(1727475881.352:395): avc: denied { bind } for pid=8431 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 602.179331][ T8408] team0: Port device team_slave_0 added [ 602.185482][ T8408] team0: Port device team_slave_1 added [ 602.226689][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.228686][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.235770][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.239814][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.241957][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.251095][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.285948][ T8408] hsr_slave_0: entered promiscuous mode [ 602.290447][ T8408] hsr_slave_1: entered promiscuous mode [ 602.295913][ T8408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.304227][ T8408] Cannot create hsr debugfs directory [ 602.421452][ T8408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.504753][ T8408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.608805][ T8408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.716326][ T8408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.844736][ T8443] fuse: Bad value for 'fd' [ 603.159774][ T8408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 603.165106][ T8408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 603.179505][ T8408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 603.183416][ T8408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 603.219718][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.228326][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.235975][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.237901][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.258227][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.260240][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.583660][ T65] Bluetooth: hci1: command tx timeout [ 603.640771][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.688562][ T8408] veth0_vlan: entered promiscuous mode [ 603.729737][ T8408] veth1_vlan: entered promiscuous mode [ 603.752584][ T8408] veth0_macvtap: entered promiscuous mode [ 603.755938][ T8408] veth1_macvtap: entered promiscuous mode [ 603.779708][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.782454][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.784989][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.788204][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.809500][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.812963][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.816157][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.828868][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.833388][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.856603][ T8461] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 603.864682][ T8461] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 603.930689][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.934097][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.937269][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.948613][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.952985][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.955935][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.968564][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.971503][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.974992][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.992740][ T8408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.995071][ T8408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.997303][ T8408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.008654][ T8408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.046428][ T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.048617][ T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.065104][ T207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.067506][ T207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.100255][ T8468] netlink: 'syz.0.781': attribute type 10 has an invalid length. [ 604.108343][ T8468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.112276][ T8468] team0: Port device batadv0 added [ 604.118806][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 604.118818][ T39] audit: type=1400 audit(1727475883.302:397): avc: denied { bind } for pid=8467 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 604.200491][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 604.239833][ T8474] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 604.260547][ T39] audit: type=1400 audit(1727475883.462:398): avc: denied { setopt } for pid=8471 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 604.265818][ T39] audit: type=1400 audit(1727475883.462:399): avc: denied { write } for pid=8471 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 604.594644][ T39] audit: type=1400 audit(1727475883.792:400): avc: denied { setopt } for pid=8475 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 604.626094][ T8479] syz.3.783 (8479): drop_caches: 2 [ 605.029782][ T39] audit: type=1400 audit(1727475884.222:401): avc: denied { append } for pid=8480 comm="syz.1.784" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 605.089279][ T39] audit: type=1400 audit(1727475884.292:402): avc: denied { read write } for pid=8480 comm="syz.1.784" name="mice" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 605.097280][ T39] audit: type=1400 audit(1727475884.292:403): avc: denied { open } for pid=8480 comm="syz.1.784" path="/dev/input/mice" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 605.388808][ T39] audit: type=1400 audit(1727475884.582:404): avc: denied { setopt } for pid=8490 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 605.395068][ T8491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 605.698777][ T65] Bluetooth: hci1: command 0x041b tx timeout [ 605.803380][ T55] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 605.842165][ T39] audit: type=1400 audit(1727475885.042:405): avc: denied { name_bind } for pid=8495 comm="syz.3.790" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 605.847587][ T39] audit: type=1400 audit(1727475885.042:406): avc: denied { read } for pid=8495 comm="syz.3.790" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 605.990608][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.993618][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.996155][ T55] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 605.998730][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.001902][ T55] usb 7-1: config 0 descriptor?? [ 606.401756][ T8507] tipc: Failed to remove unknown binding: 66,1,1/0:753365618/753365620 [ 606.404694][ T8507] tipc: Failed to remove unknown binding: 66,1,1/0:753365618/753365620 [ 606.464701][ T8505] bond_slave_0: entered promiscuous mode [ 606.466582][ T8505] bond_slave_1: entered promiscuous mode [ 606.468112][ T8505] vlan2: entered promiscuous mode [ 606.469755][ T8505] bond0: entered promiscuous mode [ 606.474630][ T8505] bond0: left promiscuous mode [ 606.476455][ T8505] bond_slave_0: left promiscuous mode [ 606.478191][ T8505] bond_slave_1: left promiscuous mode [ 607.385166][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 607.748659][ T4785] Bluetooth: hci1: command 0x041b tx timeout [ 607.873556][ T8540] cgroup: No subsys list or none specified [ 608.384333][ T55] usbhid 7-1:0.0: can't add hid device: -71 [ 608.388881][ T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 608.434469][ T55] usb 7-1: USB disconnect, device number 9 [ 609.235372][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 609.235386][ T39] audit: type=1400 audit(1727475888.432:419): avc: denied { append } for pid=8562 comm="syz.3.806" name="rtc0" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 609.819299][ T4785] Bluetooth: hci1: command 0x041b tx timeout [ 610.243068][ T39] audit: type=1400 audit(1727475889.442:420): avc: denied { ioctl } for pid=8587 comm="syz.0.811" path="socket:[30308]" dev="sockfs" ino=30308 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 610.442212][ T8592] dccp_close: ABORT with 132 bytes unread [ 610.443636][ T39] audit: type=1400 audit(1727475889.622:421): avc: denied { setopt } for pid=8592 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 610.450162][ T39] audit: type=1400 audit(1727475889.632:422): avc: denied { accept } for pid=8592 comm="syz.3.813" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 610.525838][ T39] audit: type=1400 audit(1727475889.632:423): avc: denied { write } for pid=8592 comm="syz.3.813" laddr=::ffff:172.20.20.0 lport=20000 faddr=::ffff:172.20.20.10 fport=32992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 610.788847][ T30] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 610.803048][ T39] audit: type=1400 audit(1727475890.002:424): avc: denied { unmount } for pid=8408 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 611.009071][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 611.022568][ T30] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 611.047227][ T30] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 611.050679][ T30] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 611.052987][ T30] usb 8-1: Product: syz [ 611.054180][ T30] usb 8-1: Manufacturer: syz [ 611.055507][ T30] usb 8-1: SerialNumber: syz [ 611.063026][ T30] usb 8-1: config 0 descriptor?? [ 611.065124][ T8596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 611.390806][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.393902][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.401842][ T39] audit: type=1400 audit(1727475890.602:425): avc: denied { read } for pid=8595 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 611.403494][ T55] usb 8-1: USB disconnect, device number 18 [ 611.908726][ T4785] Bluetooth: hci1: command 0x041b tx timeout [ 613.070843][ T8633] syz_tun: entered promiscuous mode [ 613.073330][ T8633] batadv_slave_0: entered promiscuous mode [ 613.079417][ T8633] hsr1: entered allmulticast mode [ 613.080817][ T8633] syz_tun: entered allmulticast mode [ 613.082275][ T8633] batadv_slave_0: entered allmulticast mode [ 613.100025][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 613.257185][ T8645] misc userio: Invalid payload size [ 613.261570][ T8645] misc userio: No port type given on /dev/userio [ 613.277723][ T39] audit: type=1400 audit(1727475892.472:426): avc: denied { audit_write } for pid=8636 comm="syz.2.826" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 613.285335][ T39] audit: type=1400 audit(1727475892.482:427): avc: denied { connect } for pid=8636 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 613.293055][ T39] audit: type=1400 audit(1727475892.482:428): avc: denied { setopt } for pid=8636 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 613.777654][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 614.025903][ T8653] hsr0: entered promiscuous mode [ 614.031579][ T8653] hsr_slave_0: left promiscuous mode [ 614.036428][ T8653] hsr_slave_1: left promiscuous mode [ 614.087463][ T8653] hsr0 (unregistering): left promiscuous mode [ 614.579022][ T6962] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 614.760061][ T6962] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 614.762337][ T6962] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 614.765924][ T6962] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 614.768588][ T6962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.772107][ T6962] usb 5-1: config 0 descriptor?? [ 614.777244][ T6962] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 614.983240][ T6998] usb 5-1: USB disconnect, device number 9 [ 615.069270][ T39] audit: type=1400 audit(1727475894.272:429): avc: denied { create } for pid=8667 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 615.808662][ T6962] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 616.001540][ T6962] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 616.005450][ T6962] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 616.009903][ T6962] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 616.017962][ T6962] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 616.021597][ T6962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.029164][ T8681] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 616.051896][ T6962] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 616.079754][ T8684] dccp_close: ABORT with 132 bytes unread [ 616.167675][ T8692] misc userio: Invalid payload size [ 616.169677][ T8692] misc userio: No port type given on /dev/userio [ 616.281144][ T39] audit: type=1400 audit(1727475895.482:430): avc: denied { read } for pid=8680 comm="syz.0.839" laddr=::1 lport=34077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 616.296221][ T39] audit: type=1400 audit(1727475895.492:431): avc: denied { ioctl } for pid=8680 comm="syz.0.839" path="socket:[31495]" dev="sockfs" ino=31495 ioctlcmd=0x4dff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 616.296989][ T5369] usb 5-1: USB disconnect, device number 10 [ 616.368766][ T828] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 616.518626][ T828] usb 7-1: Using ep0 maxpacket: 32 [ 616.522287][ T828] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 616.527632][ T828] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 616.530169][ T828] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 616.532446][ T828] usb 7-1: Product: syz [ 616.533628][ T828] usb 7-1: Manufacturer: syz [ 616.534874][ T828] usb 7-1: SerialNumber: syz [ 616.540045][ T828] usb 7-1: config 0 descriptor?? [ 616.542154][ T8691] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 616.830514][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.838739][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.845226][ T6962] usb 7-1: USB disconnect, device number 10 [ 618.249182][ T8722] cgroup: No subsys list or none specified [ 618.980087][ T8738] misc userio: Invalid payload size [ 618.982134][ T8738] misc userio: No port type given on /dev/userio [ 619.070345][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 620.843615][ T6998] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 620.875993][ T8758] netlink: 'syz.3.864': attribute type 10 has an invalid length. [ 620.888409][ T8756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 620.892768][ T8758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.895347][ T8758] batadv0: entered promiscuous mode [ 620.900664][ T8758] batadv0: entered allmulticast mode [ 620.902395][ T8758] team0: Port device batadv0 added [ 620.928804][ T79] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 620.931478][ T79] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 620.998655][ T6998] usb 6-1: Using ep0 maxpacket: 32 [ 621.007388][ T6998] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 621.013138][ T6998] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 621.015510][ T6998] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 621.017697][ T6998] usb 6-1: Product: syz [ 621.019528][ T6998] usb 6-1: Manufacturer: syz [ 621.020892][ T6998] usb 6-1: SerialNumber: syz [ 621.024196][ T6998] usb 6-1: config 0 descriptor?? [ 621.026048][ T8750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 621.286972][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.294560][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.311321][ T6962] usb 6-1: USB disconnect, device number 7 [ 623.641311][ T8805] hsr0: entered promiscuous mode [ 623.645685][ T8805] hsr_slave_0: left promiscuous mode [ 623.649029][ T8805] hsr_slave_1: left promiscuous mode [ 623.670872][ T8805] hsr0 (unregistering): left promiscuous mode [ 623.739246][ T8811] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 623.752306][ T8811] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 624.223424][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.225206][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.596857][ T8839] netlink: 'syz.3.891': attribute type 10 has an invalid length. [ 626.598817][ T8840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 626.654807][ T8848] hsr0: entered promiscuous mode [ 626.657688][ T8848] hsr_slave_0: left promiscuous mode [ 626.664141][ T8848] hsr_slave_1: left promiscuous mode [ 626.684144][ T8848] hsr0 (unregistering): left promiscuous mode [ 626.898599][ T55] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 627.051365][ T55] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.055261][ T55] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 627.059521][ T55] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 627.064482][ T55] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 627.070428][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.078054][ T8846] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.083032][ T55] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.676694][ T8865] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.901'. [ 627.680806][ T8864] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.901'. [ 627.746491][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 627.778614][ T55] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 627.805695][ T982] usb 8-1: USB disconnect, device number 19 [ 627.838418][ T8870] netlink: 'syz.2.904': attribute type 10 has an invalid length. [ 627.854880][ T8870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.858673][ T8870] team0: Port device batadv0 added [ 627.959752][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.962738][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.965956][ T55] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 627.968391][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.972027][ T55] usb 6-1: config 0 descriptor?? [ 628.184806][ T39] audit: type=1326 audit(1727475907.382:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.1.900" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39cdf7df39 code=0x0 [ 628.296149][ T8884] bond_slave_0: entered promiscuous mode [ 628.298236][ T8884] bond_slave_1: entered promiscuous mode [ 628.301029][ T8884] vlan2: entered promiscuous mode [ 628.302833][ T8884] bond0: entered promiscuous mode [ 628.306988][ T8884] bond0: left promiscuous mode [ 628.309244][ T8884] bond_slave_0: left promiscuous mode [ 628.311213][ T8884] bond_slave_1: left promiscuous mode [ 628.531001][ T8888] syz_tun: entered promiscuous mode [ 628.535856][ T8888] batadv_slave_0: entered promiscuous mode [ 628.539229][ T8888] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 628.541470][ T8888] Cannot create hsr debugfs directory [ 628.543192][ T8888] hsr1: entered allmulticast mode [ 628.544604][ T8888] syz_tun: entered allmulticast mode [ 628.546113][ T8888] batadv_slave_0: entered allmulticast mode [ 628.561712][ T8890] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 630.544099][ T55] usbhid 6-1:0.0: can't add hid device: -71 [ 630.545858][ T55] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 630.550451][ T55] usb 6-1: USB disconnect, device number 8 [ 630.554830][ T8904] hsr_slave_0: left promiscuous mode [ 630.563809][ T8904] hsr_slave_1: left promiscuous mode [ 630.584371][ T8905] netlink: 'syz.3.914': attribute type 10 has an invalid length. [ 630.747152][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 630.918767][ T55] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 630.976228][ T39] audit: type=1400 audit(1727475910.172:433): avc: denied { write } for pid=8923 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 631.085828][ T55] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 631.090325][ T55] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 631.094393][ T55] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 631.098009][ T55] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 631.103911][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.112285][ T8911] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 631.118298][ T55] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 631.264535][ T8929] netlink: 'syz.0.926': attribute type 10 has an invalid length. [ 631.410726][ T6998] usb 6-1: USB disconnect, device number 9 [ 631.946172][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 632.040515][ T39] audit: type=1400 audit(1727475911.202:434): avc: denied { listen } for pid=8943 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 632.222201][ T39] audit: type=1400 audit(1727475911.422:435): avc: denied { ioctl } for pid=8956 comm="syz.0.936" path="socket:[32758]" dev="sockfs" ino=32758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 632.428672][ T8957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.936'. [ 633.538740][ T55] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 633.688627][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 633.702310][ T55] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.724214][ T55] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 633.727823][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.733416][ T39] audit: type=1400 audit(1727475912.932:436): avc: denied { ioctl } for pid=8988 comm="syz.0.946" path="/dev/sg0" dev="devtmpfs" ino=705 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 633.743545][ T55] usb 6-1: Product: syz [ 633.745367][ T55] usb 6-1: Manufacturer: syz [ 633.747309][ T55] usb 6-1: SerialNumber: syz [ 633.824183][ T55] usb 6-1: config 0 descriptor?? [ 633.827915][ T55] cdc_ether 6-1:0.0: probe with driver cdc_ether failed with error -22 [ 633.833191][ T55] usb 6-1: unsupported MDLM descriptors [ 633.991185][ T39] audit: type=1326 audit(1727475913.192:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.3.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ed7df39 code=0x7ffc0000 [ 634.002203][ T39] audit: type=1326 audit(1727475913.192:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.3.948" exe="/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fb91ed7df39 code=0x7ffc0000 [ 634.011053][ T39] audit: type=1326 audit(1727475913.192:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.3.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ed7df39 code=0x7ffc0000 [ 634.022911][ T39] audit: type=1326 audit(1727475913.202:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.3.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ed7df39 code=0x7ffc0000 [ 634.031942][ T39] audit: type=1326 audit(1727475913.202:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.3.948" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb91ed7df39 code=0x7ffc0000 [ 634.043935][ T39] audit: type=1326 audit(1727475913.212:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.3.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ed7df39 code=0x7ffc0000 [ 634.052099][ T39] audit: type=1326 audit(1727475913.212:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.3.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ed7df39 code=0x7ffc0000 [ 634.063576][ T39] audit: type=1326 audit(1727475913.212:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.3.948" exe="/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fb91ed7df39 code=0x7ffc0000 [ 634.073192][ T55] usb 6-1: USB disconnect, device number 10 [ 634.082942][ T39] audit: type=1326 audit(1727475913.212:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.3.948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91ed7df39 code=0x7ffc0000 [ 636.092429][ T9040] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 636.120957][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 636.176659][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 636.193446][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 636.221185][ T9055] fuse: Bad value for 'fd' [ 636.730739][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 637.164861][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 637.581201][ T9099] binder: 9098:9099 ioctl c0306201 0 returned -14 [ 637.587876][ T9099] binder: 9098:9099 ioctl c0306201 20000480 returned -22 [ 638.558555][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 638.978816][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 638.982045][ T39] audit: type=1400 audit(1727475918.092:452): avc: denied { write } for pid=9148 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 639.252464][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'. [ 639.255755][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'. [ 639.267234][ T39] audit: type=1400 audit(1727475918.462:453): avc: denied { write } for pid=9169 comm="syz.2.1016" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 639.276726][ T39] audit: type=1400 audit(1727475918.462:454): avc: denied { open } for pid=9169 comm="syz.2.1016" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 639.285716][ T39] audit: type=1400 audit(1727475918.462:455): avc: denied { ioctl } for pid=9169 comm="syz.2.1016" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 639.534503][ T9180] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 639.542452][ T9180] overlayfs: missing 'lowerdir' [ 639.629867][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 639.661654][ T9190] binder: 9189:9190 ioctl c0306201 0 returned -14 [ 640.554601][ T9219] binder: 9216:9219 ioctl c0306201 0 returned -14 [ 640.585526][ T9221] netlink: 'syz.2.1035': attribute type 10 has an invalid length. [ 641.155003][ T39] audit: type=1400 audit(1727475920.332:456): avc: denied { map } for pid=9241 comm="syz.0.1044" path="socket:[35965]" dev="sockfs" ino=35965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 641.161283][ T39] audit: type=1400 audit(1727475920.332:457): avc: denied { read } for pid=9241 comm="syz.0.1044" path="socket:[35965]" dev="sockfs" ino=35965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 641.328561][ T5369] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 641.401685][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'. [ 641.509893][ T5369] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 641.512754][ T5369] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 641.515614][ T5369] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 641.518216][ T5369] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 641.520590][ T5369] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.531756][ T9238] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 641.540116][ T5369] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.710872][ T6998] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 641.964824][ T6998] usb 7-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=3a.45 [ 641.967509][ T6998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.970099][ T6998] usb 7-1: Product: syz [ 641.971433][ T6998] usb 7-1: Manufacturer: syz [ 641.972885][ T6998] usb 7-1: SerialNumber: syz [ 641.976019][ T5369] usb 8-1: USB disconnect, device number 20 [ 642.025367][ T6998] usb 7-1: config 0 descriptor?? [ 642.062988][ T6998] usb 7-1: Found UVC 0.00 device syz (8086:0b03) [ 642.076138][ T6998] usb 7-1: No valid video chain found. [ 642.192420][ T39] audit: type=1400 audit(1727475921.392:458): avc: denied { create } for pid=9282 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 642.197434][ T39] audit: type=1400 audit(1727475921.392:459): avc: denied { connect } for pid=9282 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 642.200350][ C2] [ 642.204826][ T39] audit: type=1400 audit(1727475921.392:460): avc: denied { ioctl } for pid=9282 comm="syz.1.1061" path="socket:[34159]" dev="sockfs" ino=34159 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 642.204844][ C2] ================================ [ 642.204849][ C2] WARNING: inconsistent lock state [ 642.204854][ C2] 6.11.0-syzkaller-11624-ge477dba5442c #0 Not tainted [ 642.213596][ T39] audit: type=1400 audit(1727475921.392:461): avc: denied { write } for pid=9282 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 642.214772][ C2] -------------------------------- [ 642.214779][ C2] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 642.214784][ C2] syz.1.1061/9283 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 642.214795][ C2] ffff88802934b1e0 (&pch->downl){+.?.}-{2:2}, at: ppp_input+0x104/0xbb0 [ 642.233354][ C2] {SOFTIRQ-ON-W} state was registered at: [ 642.234894][ C2] lock_acquire+0x1b1/0x560 [ 642.236130][ C2] _raw_spin_lock+0x2e/0x40 [ 642.237401][ C2] ppp_input+0x104/0xbb0 [ 642.238579][ C2] pppoe_rcv_core+0x22c/0x320 [ 642.239837][ C2] __release_sock+0x35f/0x400 [ 642.241066][ C2] release_sock+0x5a/0x220 [ 642.242320][ C2] pppoe_sendmsg+0x5e6/0x770 [ 642.243546][ C2] ____sys_sendmsg+0xaaf/0xc90 [ 642.244813][ C2] ___sys_sendmsg+0x135/0x1e0 [ 642.246203][ C2] __sys_sendmmsg+0x1a1/0x450 [ 642.247560][ C2] __x64_sys_sendmmsg+0x9c/0x100 [ 642.248951][ C2] do_syscall_64+0xcd/0x250 [ 642.250215][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.251913][ C2] irq event stamp: 2526 [ 642.253062][ C2] hardirqs last enabled at (2526): [] __local_bh_enable_ip+0xa4/0x120 [ 642.255623][ C2] hardirqs last disabled at (2525): [] __local_bh_enable_ip+0xcd/0x120 [ 642.258283][ C2] softirqs last enabled at (2494): [] pppoe_sendmsg+0x5e6/0x770 [ 642.260680][ C2] softirqs last disabled at (2499): [] irq_exit_rcu+0xbb/0x120 [ 642.263295][ C2] [ 642.263295][ C2] other info that might help us debug this: [ 642.265412][ C2] Possible unsafe locking scenario: [ 642.265412][ C2] [ 642.267425][ C2] CPU0 [ 642.268324][ C2] ---- [ 642.269589][ C2] lock(&pch->downl); [ 642.271013][ C2] [ 642.271925][ C2] lock(&pch->downl); [ 642.273041][ C2] [ 642.273041][ C2] *** DEADLOCK *** [ 642.273041][ C2] [ 642.275311][ C2] 6 locks held by syz.1.1061/9283: [ 642.276672][ C2] #0: ffff888028968198 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x35/0x6a0 [ 642.279399][ C2] #1: ffffffff8e1b7f80 (rcu_read_lock){....}-{1:2}, at: count_memcg_events_mm.constprop.0+0x3a/0x340 [ 642.282291][ C2] #2: ffffffff8e1b7f80 (rcu_read_lock){....}-{1:2}, at: process_backlog+0x3f1/0x15f0 [ 642.284758][ C2] #3: ffff8880245f31d8 (slock-AF_PPPOX){+.-.}-{2:2}, at: __sk_receive_skb+0x1dd/0x890 [ 642.287308][ C2] #4: ffff8880245f3258 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppoe_rcv+0x7b2/0xa70 [ 642.289852][ C2] #5: ffffffff8e1b7f80 (rcu_read_lock){....}-{1:2}, at: ppp_input+0x70/0xbb0 [ 642.292278][ C2] [ 642.292278][ C2] stack backtrace: [ 642.293876][ C2] CPU: 2 UID: 0 PID: 9283 Comm: syz.1.1061 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 642.296563][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 642.299792][ C2] Call Trace: [ 642.300777][ C2] [ 642.301544][ C2] dump_stack_lvl+0x116/0x1f0 [ 642.302905][ C2] print_usage_bug.part.0+0x3a2/0x560 [ 642.304399][ C2] ? __pfx_mark_lock+0x10/0x10 [ 642.305697][ C2] mark_lock+0x92d/0xc60 [ 642.306870][ C2] ? mark_lock+0xb5/0xc60 [ 642.308074][ C2] ? arch_stack_walk+0xa7/0x100 [ 642.309400][ C2] ? __pfx_mark_lock+0x10/0x10 [ 642.310715][ C2] ? __pfx_mark_lock+0x10/0x10 [ 642.312142][ C2] ? hlock_class+0x4e/0x130 [ 642.313389][ C2] ? mark_lock+0xb5/0xc60 [ 642.314604][ C2] ? __pfx_mark_lock+0x10/0x10 [ 642.315879][ C2] ? __lock_acquire+0xbdd/0x3ce0 [ 642.317197][ C2] __lock_acquire+0x11e1/0x3ce0 [ 642.318563][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 642.320248][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 642.321863][ C2] ? find_free_extent+0x621b/0x6870 [ 642.323491][ C2] lock_acquire+0x1b1/0x560 [ 642.324902][ C2] ? ppp_input+0x104/0xbb0 [ 642.326305][ C2] ? __pfx_lock_acquire+0x10/0x10 [ 642.327870][ C2] ? __pfx_lock_acquire+0x10/0x10 [ 642.329432][ C2] ? lock_acquire+0x1b1/0x560 [ 642.330916][ C2] ? __pfx_lock_acquire+0x10/0x10 [ 642.332490][ C2] _raw_spin_lock+0x2e/0x40 [ 642.333917][ C2] ? ppp_input+0x104/0xbb0 [ 642.335319][ C2] ppp_input+0x104/0xbb0 [ 642.336640][ C2] pppoe_rcv_core+0x22c/0x320 [ 642.338077][ C2] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 642.339689][ C2] __sk_receive_skb+0x7aa/0x890 [ 642.341207][ C2] pppoe_rcv+0x7b2/0xa70 [ 642.342843][ C2] ? __pfx_pppoe_rcv+0x10/0x10 [ 642.344460][ C2] __netif_receive_skb_one_core+0x1b1/0x1e0 [ 642.346547][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 642.348856][ C2] ? process_backlog+0x3f1/0x15f0 [ 642.350471][ C2] ? __pfx_lock_release+0x10/0x10 [ 642.352054][ C2] ? mark_held_locks+0x9f/0xe0 [ 642.353775][ C2] ? process_backlog+0x3f1/0x15f0 [ 642.355414][ C2] __netif_receive_skb+0x1d/0x160 [ 642.356970][ C2] process_backlog+0x443/0x15f0 [ 642.358494][ C2] __napi_poll.constprop.0+0xb7/0x550 [ 642.360148][ C2] net_rx_action+0xa92/0x1010 [ 642.361619][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 642.363213][ C2] ? __pfx_mark_lock+0x10/0x10 [ 642.364824][ C2] ? __print_lock_name+0x210/0x260 [ 642.366491][ C2] ? net_tx_action+0x7dd/0xd00 [ 642.368047][ C2] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 642.369828][ C2] ? mark_held_locks+0x9f/0xe0 [ 642.371380][ C2] handle_softirqs+0x213/0x8f0 [ 642.372892][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 642.374568][ C2] irq_exit_rcu+0xbb/0x120 [ 642.376089][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 642.377859][ C2] [ 642.378805][ C2] [ 642.379742][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 642.381621][ C2] RIP: 0010:lock_acquire+0x1f2/0x560 [ 642.383416][ C2] Code: c1 05 da 80 98 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 642.389639][ C2] RSP: 0018:ffffc9000d91f738 EFLAGS: 00000206 [ 642.391535][ C2] RAX: dffffc0000000000 RBX: 1ffff92001b23ee9 RCX: 0000000000000001 [ 642.394071][ C2] RDX: 0000000000000001 RSI: ffffffff8b6ccf40 RDI: ffffffff8bd196e0 [ 642.396501][ C2] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dc2b88 [ 642.398928][ C2] R10: ffffffff96e15c47 R11: 0000000000000000 R12: 0000000000000000 [ 642.401346][ C2] R13: 0000000000000000 R14: ffffffff8e1b7f80 R15: 0000000000000000 [ 642.404146][ C2] ? __pfx_lock_acquire+0x10/0x10 [ 642.405865][ C2] count_memcg_events_mm.constprop.0+0x40/0x340 [ 642.408084][ C2] ? count_memcg_events_mm.constprop.0+0x3a/0x340 [ 642.410167][ C2] handle_mm_fault+0x5cc/0xaa0 [ 642.411669][ C2] do_user_addr_fault+0x7a3/0x13f0 [ 642.413272][ C2] exc_page_fault+0x5c/0xc0 [ 642.414703][ C2] asm_exc_page_fault+0x26/0x30 [ 642.416239][ C2] RIP: 0010:_copy_from_user+0xc1/0xf0 [ 642.417896][ C2] Code: 89 df e8 e2 65 fe fc 4d 85 f6 75 9e e8 28 64 fe fc 0f ae e8 89 ee 4c 89 ef e8 2b dc 5f fd 0f 01 cb 48 89 e9 4c 89 ef 48 89 de a4 0f 1f 00 48 89 cb 0f 01 ca e9 73 ff ff ff e8 fa 63 fe fc 48 [ 642.424098][ C2] RSP: 0018:ffffc9000d91f9e8 EFLAGS: 00050246 [ 642.425976][ C2] RAX: 0000000000000001 RBX: 0000000020002000 RCX: 0000000000000038 [ 642.428431][ C2] RDX: fffff52001b23f4e RSI: 0000000020002000 RDI: ffffc9000d91fa38 [ 642.430878][ C2] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff52001b23f4d [ 642.433323][ C2] R10: ffffc9000d91fa6f R11: 0000000000000000 R12: 0000000020002038 [ 642.436134][ C2] R13: ffffc9000d91fa38 R14: 0000000000000000 R15: ffffc9000d91fa38 [ 642.438716][ C2] ? _copy_from_user+0xb5/0xf0 [ 642.440235][ C2] copy_msghdr_from_user+0x99/0x160 [ 642.441872][ C2] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 642.443716][ C2] ? __lock_acquire+0x163e/0x3ce0 [ 642.445379][ C2] ___sys_sendmsg+0xff/0x1e0 [ 642.446925][ C2] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.448610][ C2] ? preempt_schedule_thunk+0x1a/0x30 [ 642.450339][ C2] ? __pfx___might_resched+0x10/0x10 [ 642.451998][ C2] ? __might_fault+0xe3/0x190 [ 642.453483][ C2] __sys_sendmmsg+0x1a1/0x450 [ 642.455027][ C2] ? __pfx___sys_sendmmsg+0x10/0x10 [ 642.456734][ C2] ? __pfx_do_futex+0x10/0x10 [ 642.458209][ C2] ? xfd_validate_state+0x5d/0x180 [ 642.460066][ C2] __x64_sys_sendmmsg+0x9c/0x100 [ 642.461610][ C2] ? lockdep_hardirqs_on+0x7c/0x110 [ 642.463511][ C2] do_syscall_64+0xcd/0x250 [ 642.464934][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.466797][ C2] RIP: 0033:0x7f39cdf7df39 [ 642.468468][ C2] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.474692][ C2] RSP: 002b:00007f39ced14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 642.477352][ C2] RAX: ffffffffffffffda RBX: 00007f39ce135f80 RCX: 00007f39cdf7df39 [ 642.480220][ C2] RDX: 0400000000000026 RSI: 0000000020001cc0 RDI: 0000000000000004 [ 642.482660][ C2] RBP: 00007f39cdff0216 R08: 0000000000000000 R09: 0000000000000000 [ 642.485206][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.487873][ C2] R13: 0000000000000000 R14: 00007f39ce135f80 R15: 00007ffda032e718 [ 642.490392][ C2] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 642.558961][ T5382] usb 7-1: USB disconnect, device number 11 [ 642.772638][ T7985] syz_tun (unregistering): left promiscuous mode [ 642.962540][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.998142][ T9261] syz_tun (unregistering): left promiscuous mode [ 643.042220][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.202947][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.263547][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.329596][ T11] bridge_slave_1: left allmulticast mode [ 643.331479][ T11] bridge_slave_1: left promiscuous mode [ 643.333471][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.336740][ T11] bridge_slave_0: left allmulticast mode [ 643.338662][ T11] bridge_slave_0: left promiscuous mode [ 643.340824][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.483362][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.488280][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.492825][ T11] bond0 (unregistering): Released all slaves [ 643.865285][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.868135][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.872276][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.874988][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.878669][ T11] veth1_macvtap: left promiscuous mode [ 643.880290][ T11] veth0_macvtap: left promiscuous mode [ 643.881869][ T11] veth1_vlan: left promiscuous mode [ 643.883889][ T11] veth0_vlan: left promiscuous mode [ 644.067552][ T11] team0 (unregistering): Port device team_slave_1 removed [ 644.134655][ T11] team0 (unregistering): Port device team_slave_0 removed [ 644.363075][ T11] team0 (unregistering): Port device batadv0 removed [ 644.391409][ T39] audit: type=1400 audit(1727475923.592:462): avc: denied { sys_chroot } for pid=9311 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 644.400092][ T39] audit: type=1400 audit(1727475923.592:463): avc: denied { setgid } for pid=9311 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 644.943928][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.012950][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.094044][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.203557][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.374047][ T11] bridge_slave_1: left allmulticast mode [ 645.376195][ T11] bridge_slave_1: left promiscuous mode [ 645.379177][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.382994][ T11] bridge_slave_0: left allmulticast mode [ 645.385050][ T11] bridge_slave_0: left promiscuous mode [ 645.387145][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.553284][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.558085][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.562733][ T11] bond0 (unregistering): Released all slaves [ 645.894706][ T11] batadv_slave_0: left promiscuous mode [ 645.899415][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.902246][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.905424][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.907929][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.913181][ T11] veth1_macvtap: left promiscuous mode [ 645.915288][ T11] veth0_macvtap: left promiscuous mode [ 645.917361][ T11] veth1_vlan: left promiscuous mode [ 645.919425][ T11] veth0_vlan: left promiscuous mode [ 646.167648][ T11] team0 (unregistering): Port device team_slave_1 removed [ 646.210170][ T11] team0 (unregistering): Port device team_slave_0 removed [ 646.410679][ T11] team0 (unregistering): Port device batadv0 removed [ 651.739212][ T57] kworker/1:1 (57) used greatest stack depth: 20816 bytes left VM DIAGNOSIS: 22:25:21 Registers: info registers vcpu 0 CPU#0 RAX=00000000008933dc RBX=0000000000000000 RCX=ffffffff8b1fea99 RDX=ffffed100d4c7026 RSI=ffffffff8bd19660 RDI=ffffffff8163f01c RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=ffff88801c6aa000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f1588 R15=0000000000000000 RIP=ffffffff8b1ffe7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007febc9abea08 CR3=000000005106e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda032eab0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff103a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff1047 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff1041 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff1055 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff10db ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff11b9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000083e174 RBX=0000000000000001 RCX=ffffffff8b1fea99 RDX=ffffed100d4e7026 RSI=ffffffff8bd19660 RDI=ffffffff8163f01c RBP=ffffed1003b58910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dac4880 R14=ffffffff905f1588 R15=0000000000000000 RIP=ffffffff8b1ffe7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f39ce137a8c CR3=000000003002e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff103a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff1047 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff1041 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff1055 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff10db ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff11b9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ce10a488 00007f39ce10a480 00007f39ce10a478 00007f39ce10a450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cec6d100 00007f39ce10a440 00007f39ce10a458 00007f39ce10a4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ce10a498 00007f39ce10a490 00007f39ce10a488 00007f39ce10a480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85098265 RDI=ffffffff9aad2b80 RBP=ffffffff9aad2b40 RSP=ffffc90000858148 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000069647561 R12=0000000000000000 R13=0000000000000020 R14=ffffffff85098200 R15=0000000000000000 RIP=ffffffff8509828f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f39ced146c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020002000 CR3=00000000541f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff103a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff1047 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff1041 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff1055 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff10db ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cdff11b9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ce10a488 00007f39ce10a480 00007f39ce10a478 00007f39ce10a450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39cec6d100 00007f39ce10a440 00007f39ce10a458 00007f39ce10a4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39ce10a498 00007f39ce10a490 00007f39ce10a488 00007f39ce10a480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000007282c4 RBX=0000000000000003 RCX=ffffffff8b1fea99 RDX=ffffed100d527026 RSI=ffffffff8bd19660 RDI=ffffffff8163f01c RBP=ffffed1003b5b488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000001 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f1588 R15=0000000000000000 RIP=ffffffff8b1ffe7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056102548f000 CR3=0000000030e92000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=c2283d6cc2283d6c c2283d6cc2283d6c c2283d6cc2283d6c c2283d6cc2283d6c c2283d6cc2283d6c c2283d6cc2283d6c c2283d6cc2283d6c c2283d6cc2283d6c ZMM22=4ddc3a394ddc3a39 4ddc3a394ddc3a39 4ddc3a394ddc3a39 4ddc3a394ddc3a39 4ddc3a394ddc3a39 4ddc3a394ddc3a39 4ddc3a394ddc3a39 4ddc3a394ddc3a39 ZMM23=19c0b78f19c0b78f 19c0b78f19c0b78f 19c0b78f19c0b78f 19c0b78f19c0b78f 19c0b78f19c0b78f 19c0b78f19c0b78f 19c0b78f19c0b78f 19c0b78f19c0b78f ZMM24=8b1389a98b1389a9 8b1389a98b1389a9 8b1389a98b1389a9 8b1389a98b1389a9 8b1389a98b1389a9 8b1389a98b1389a9 8b1389a98b1389a9 8b1389a98b1389a9 ZMM25=60a3aed660a3aed6 60a3aed660a3aed6 60a3aed660a3aed6 60a3aed660a3aed6 60a3aed660a3aed6 60a3aed660a3aed6 60a3aed660a3aed6 60a3aed660a3aed6 ZMM26=05496a0705496a07 05496a0705496a07 05496a0705496a07 05496a0705496a07 05496a0705496a07 05496a0705496a07 05496a0705496a07 05496a0705496a07 ZMM27=ea8a8807ea8a8807 ea8a8807ea8a8807 ea8a8807ea8a8807 ea8a8807ea8a8807 ea8a8807ea8a8807 ea8a8807ea8a8807 ea8a8807ea8a8807 ea8a8807ea8a8807 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000