last executing test programs: 40.209179767s ago: executing program 2 (id=246): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 39.357480504s ago: executing program 0 (id=256): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0xa, @output={0x1000, 0x0, {0xfff, 0x8}, 0x6, 0x26}}) r1 = io_uring_setup(0x1fe3, &(0x7f00000001c0)={0x0, 0x3aaf, 0x800, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x38d000, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) 33.519499558s ago: executing program 2 (id=246): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 32.673869026s ago: executing program 0 (id=256): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0xa, @output={0x1000, 0x0, {0xfff, 0x8}, 0x6, 0x26}}) r1 = io_uring_setup(0x1fe3, &(0x7f00000001c0)={0x0, 0x3aaf, 0x800, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x38d000, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) 25.518615147s ago: executing program 2 (id=246): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 24.451830869s ago: executing program 0 (id=256): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0xa, @output={0x1000, 0x0, {0xfff, 0x8}, 0x6, 0x26}}) r1 = io_uring_setup(0x1fe3, &(0x7f00000001c0)={0x0, 0x3aaf, 0x800, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x38d000, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) 18.028963668s ago: executing program 2 (id=246): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 15.859433779s ago: executing program 0 (id=256): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0xa, @output={0x1000, 0x0, {0xfff, 0x8}, 0x6, 0x26}}) r1 = io_uring_setup(0x1fe3, &(0x7f00000001c0)={0x0, 0x3aaf, 0x800, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x38d000, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) 10.459202032s ago: executing program 2 (id=246): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 9.50633568s ago: executing program 0 (id=256): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0xa, @output={0x1000, 0x0, {0xfff, 0x8}, 0x6, 0x26}}) r1 = io_uring_setup(0x1fe3, &(0x7f00000001c0)={0x0, 0x3aaf, 0x800, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x38d000, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) 4.890062529s ago: executing program 1 (id=702): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/4096, 0x1000) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001000)=""/166, 0xa6) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000010c0), 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001100)=""/185, 0xb9) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000011c0)=0xc, 0x4) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001200)=""/215, 0xd7) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001300)=""/180, 0xb4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000013c0)=""/235, 0xeb) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000014c0)={@loopback, @broadcast, 0x1, "69de66047b31b02573dc59980f14e8e5b0080861f6699f10048aa0b6896c2776", 0x8, 0x1, 0x7, 0x2}, 0x3c) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001500)=""/193, 0xc1) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001600)=""/56, 0x38) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001640)=""/69, 0x45) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000016c0)=""/128, 0x80) syz_emit_ethernet(0x56, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="05be47a11602", @void, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x17, 0x2, 0x0, 0x0, "61a7211c57c75227c295fa58900d8fea31075806a21259065550c765367cd6165cb3e0e5bd47a7d79c1a01f1e263ec38ba2cee922717c30681e1fa82af6cd1e9"}}}}, &(0x7f00000017c0)={0x1, 0x3, [0xfffffffb, 0xa90, 0x982, 0x2c2]}) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001800)=""/165, 0xa5) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000018c0)=""/81, 0x51) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001940)=""/2, 0x2) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001980)=""/162, 0xa2) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001a40)=""/4096, 0x1000) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002a40)=""/101, 0x65) (async) r1 = gettid() syz_open_procfs$pagemap(r1, &(0x7f0000002ac0)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002b00), 0x80000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002b40)=""/167, 0xa7) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002c00)=""/56, 0x38) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002c40)=""/35, 0x23) (async) tgkill(r1, r1, 0x1b) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002c80), 0x0) 4.298056321s ago: executing program 1 (id=703): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x7f, 0x0, 0x2, 0x0, "90337f00ff7f000000000000ff1eff00"}) (async, rerun: 64) r3 = dup(r2) (rerun: 64) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x4f0, 0xffffffff, 0x308, 0x230, 0x230, 0xffffffff, 0xffffffff, 0x420, 0x420, 0x420, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 'wg0\x00', 'syz_tun\x00', {0xff}, {}, 0x3a, 0x7, 0x2, 0x2}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x5, 0x7], 0x1, 0x4, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @mcast1, @empty, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @mcast1, @remote, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1], 0xd}}, @common=@mh={{0x28}, {"3df7", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0x0, 0xff000000, 0xffffff00], [0xffffff00, 0xffffff00, 0xff], 'pim6reg0\x00', 'netpci0\x00', {0xff}, {0xff}, 0xc, 0x2, 0x0, 0x50}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8, 0x3, 0x1}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x1, 0x0, [0x2, 0x3, 0x5, 0x6, 0x7, 0x0, 0x6, 0x8000, 0x6, 0x4, 0x1, 0x7, 0x40, 0x98e4, 0x5, 0xd7], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r4, 0x0, 0x20000000}, 0x20) (async, rerun: 64) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) (rerun: 64) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, 0x0, &(0x7f0000000180)) (async, rerun: 64) read$dsp(r0, &(0x7f0000000200)=""/222, 0xde) (rerun: 64) 4.293174675s ago: executing program 3 (id=704): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r1 = socket(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001380)=ANY=[@ANYBLOB="120000007d000000080000000200000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000c6f6001c000000000000007305bb72d48b4e19da9e290000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r2, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r2, &(0x7f0000000340)='=]', &(0x7f0000001d40)=@tcp6=r1, 0x1}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000100)={{0x0, 0x1, 0x2, 0x3, 0x1, 0x4, 0x1, 0xfeae, 0x7, 0x1000, 0x9, 0x3, 0x1, 0x4, 0xd}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000380)={{r3, 0x3, 0x200, 0x1, 0xffffffffffffff53, 0x8, 0xfffffffffffffffa, 0x8, 0xfffffffe, 0x6, 0x2, 0x32, 0x2, 0x400, 0x800}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x3, 0x8, 0x22, @local, @dev={0xfe, 0x80, '\x00', 0x34}, 0x40, 0x80, 0x7, 0x9}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r6, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x98, 0x0, &(0x7f0000001540)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x191f00, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x2, 0x1, 0xeeef0000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$VHOST_GET_FEATURES(r10, 0x8008af00, &(0x7f0000000200)) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x200000000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) 4.169768539s ago: executing program 3 (id=705): ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20000000}, &(0x7f0000000100)=0x108) socket$packet(0x11, 0x3, 0x300) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x101, 0xd2, 0xe, 0x6, 0x9, @multicast}, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000e"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000600), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x800, {{0x2, 0x4e20, @multicast1}}}, 0x88) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="000086dd000311000400000000006e6ad9ba00442f0100000000000000000000ffffac1414bbff020000000000000000000000000001"], 0x7a) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xf, &(0x7f0000000300)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x71}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2506, 0x0, 0x0, 0x0, 0x7e90}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x45, &(0x7f0000000380)=""/69, 0x41100, 0x1b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0x200, 0x40}, 0x10, r8, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000440)=[{0x2, 0x5, 0x1, 0x2}, {0x1, 0x4, 0xb, 0xa}, {0x1, 0x3, 0xc, 0x5}, {0x5, 0x4, 0x8, 0x3}, {0x1, 0x3, 0x5, 0x4}, {0x4, 0x3, 0x1, 0xa}, {0x4, 0x5, 0xc, 0x4}], 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f00000005c0)) 3.979900593s ago: executing program 3 (id=706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @udp={0x1, 0x6, "c3caf9", 0x9c, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, @mcast2, {[], {0x4e23, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "da877fc65e02fa3562785ec5566fd73fd74ecd49beb850a1f2efcc2e2884a470", "3fccf5d50e7eb26bb3028d745a29ed9c6871ef203bcbde3759353bbf57d259b7e3331273205964fe43269d3ee2fef3e5", "be9453cee34d0b6c92eca4b3b868e9e7f057f3e99a797f5f530d9c5e", {"3636ab22a794fca34b5ccc63b917c5f9", "baf3588bbede256d9f49b48b9437d1fb"}}}}}}}}}, 0xd6) 3.849668088s ago: executing program 3 (id=707): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/uevent_seqnum', 0x55efdac838469fb4, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000890000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x591182, 0x0) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "20af3dcfeda6fc42", "b9aaf9e179aa9bcd72e1de81da496b33", "0bdc1572", "c2d02de1d76cf10e"}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYBLOB="741759ee903137593b463ddc49bd23869bd2c8a41b10ee50eb94e7a47980ccfdbca99a8108148097115272dac89aea88af2a99d29360f7246211f38838919335b7cba55b1c6e788e3dca14b32e58853b92e76711c3221dc252eb8888e833c52a0af342da54748276dfed6b0495b9171675e448ce8d5951a59e7c433326e3e6ee964ff53802cf069ba533fbd0074ef837c70c8683a211036de8bc453f37a1a7211e71d21f4244ad49fe0ab485fe718467ba71e92d89689df65d5913c879", @ANYBLOB="2b84000020ad01002c0012800b00010062726964676500001c0002800c00200004000000000000000c0021"], 0x4c}}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, &(0x7f0000000140)={0x6, 0x5}) 3.818376991s ago: executing program 2 (id=246): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.916814679s ago: executing program 0 (id=256): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0xa, @output={0x1000, 0x0, {0xfff, 0x8}, 0x6, 0x26}}) r1 = io_uring_setup(0x1fe3, &(0x7f00000001c0)={0x0, 0x3aaf, 0x800, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x38d000, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) 1.612437036s ago: executing program 1 (id=708): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 1.565835854s ago: executing program 3 (id=709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140c, 0x31b4363caaba38a7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x20}}, 0x4000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x4004743c, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0x4a1, 0x5, 0xfffffffffffffffe, 0x4000004, 0x2, 0x0, 0xefffffffffffffff, 0x59, 0x0, 0x0, 0x0, 0x0, 0x403, 0x8a4, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.565319066s ago: executing program 1 (id=710): r0 = io_uring_setup(0x5aed, &(0x7f0000005100)={0x0, 0x0, 0x2000}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000005500)={0x3, 0x0, 0x0, &(0x7f0000005480)=[{0x0}, {0x0}, {&(0x7f0000005380)=""/255, 0xff}], &(0x7f00000054c0)=[0x0, 0x0, 0x5]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000007cc0)={0x2, 0x0, &(0x7f0000007c40)=[{0x0}], 0x0, 0x1}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x6}, 0xe) listen(r3, 0x9) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000003c0)) accept4$vsock_stream(r4, 0x0, 0x0, 0x800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000200)="5e64cac35d9e82964642f969b05e85aa1f899363b71a3682987c3c4cd498bb624184d948d2dc2ffc11723c68255276edfdc11ba5284d6cae742b96f6afbe3ecb78f802", &(0x7f0000000280)=@udp6=r4, 0x1}, 0x20) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0xc0ed0000, 0x0) 626.408808ms ago: executing program 1 (id=711): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2, {}, {}, @raw32={[0x1000000]}}, {0x0, 0x0, 0x1, 0x0, @time, {}, {0x0, 0xfc}, @ext={0x0, 0x0}}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysfs$1(0x64, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x212001, 0x0) socket$inet(0x2, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) memfd_create(0x0, 0x3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000003240)={{}, 0x0, 0xe, @unused=[0xf1, 0x0, 0x80000001, 0x7], @name="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"}) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000980)) 568.284539ms ago: executing program 1 (id=712): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, r2, 0xfffffffe, 0x80000001, 0xb, 0x1fd, 0x1}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x43201) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000001a40)={0x9c, "895cd46771f00301c14a639506f24c672ecfd2bd105079c5774eaee02ce08f61bd32758aa48d8b91deae8e868458c5a16302efd3ffd7000b8e05c2821ee0eb19"}) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000040)={0xa, {0x5, 0x7, 0x3}}, 0xa) 0s ago: executing program 3 (id=713): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x1}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r1, &(0x7f0000001480)=""/4096, 0x1000) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x1}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) read(r1, &(0x7f0000001480)=""/4096, 0x1000) (async) kernel console output (not intermixed with test programs): shift: 0) [ 104.902236][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.931705][ T8095] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.482'. [ 104.934320][ T8095] openvswitch: netlink: Actions may not be safe on all matching packets [ 104.970997][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 104.971011][ T39] audit: type=1400 audit(1735059216.077:630): avc: denied { write } for pid=8093 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.016983][ T45] bridge_slave_1: left allmulticast mode [ 105.020055][ T45] bridge_slave_1: left promiscuous mode [ 105.023728][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.031713][ T45] bridge_slave_0: left allmulticast mode [ 105.032481][ T39] audit: type=1400 audit(1735059216.137:631): avc: denied { getopt } for pid=8097 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.033351][ T45] bridge_slave_0: left promiscuous mode [ 105.033436][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.045061][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.051763][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.055737][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.060241][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.063566][ T5954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.065952][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.357013][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.363012][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.372434][ T45] bond0 (unregistering): Released all slaves [ 105.382613][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 105.398673][ T8105] vcan0: entered allmulticast mode [ 105.470923][ T8119] cgroup: Unknown subsys name 'cpuset' [ 105.512476][ T8119] 8021q: adding VLAN 0 to HW filter on device bond4 [ 105.514997][ T8119] bond0: (slave bond4): Enslaving as an active interface with an up link [ 105.523857][ T8099] chnl_net:caif_netlink_parms(): no params data found [ 105.558502][ T39] audit: type=1400 audit(1735059216.667:632): avc: denied { ioctl } for pid=8126 comm="syz.1.488" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.637414][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.639598][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.641708][ T8099] bridge_slave_0: entered allmulticast mode [ 105.648502][ T8099] bridge_slave_0: entered promiscuous mode [ 105.654194][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.656303][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.658547][ T8099] bridge_slave_1: entered allmulticast mode [ 105.661174][ T8099] bridge_slave_1: entered promiscuous mode [ 105.725558][ T8099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.750482][ T45] hsr_slave_0: left promiscuous mode [ 105.752482][ T45] hsr_slave_1: left promiscuous mode [ 105.754473][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.756690][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.769043][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.771197][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.798114][ T45] veth1_macvtap: left promiscuous mode [ 105.801364][ T45] veth0_macvtap: left promiscuous mode [ 105.803422][ T45] veth1_vlan: left promiscuous mode [ 105.804995][ T45] veth0_vlan: left promiscuous mode [ 105.868037][ T8140] netlink: 68 bytes leftover after parsing attributes in process `syz.1.491'. [ 106.068604][ T5952] Bluetooth: hci0: command tx timeout [ 106.436164][ T8155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.496'. [ 106.449719][ T45] team0 (unregistering): Port device team_slave_1 removed [ 106.525546][ T45] team0 (unregistering): Port device team_slave_0 removed [ 106.706603][ T5952] Bluetooth: hci1: Malformed Event: 0x2f [ 107.008635][ T8099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.018660][ T8152] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 107.065381][ T8099] team0: Port device team_slave_0 added [ 107.068469][ T8163] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 107.085780][ T8099] team0: Port device team_slave_1 added [ 107.109449][ T5952] Bluetooth: hci3: command tx timeout [ 107.122591][ T8099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.125055][ T8099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.132694][ T8099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.147152][ T8099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.152843][ T8099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.162158][ T8099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.203345][ T8078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.215485][ T8078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.232189][ T8099] hsr_slave_0: entered promiscuous mode [ 107.240051][ T8099] hsr_slave_1: entered promiscuous mode [ 107.243336][ T8078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.246793][ T8078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.282422][ T8188] overlayfs: failed to resolve './file1': -2 [ 107.337828][ T8099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.363106][ T8078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.379769][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.397404][ T8078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.404699][ T8078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.408825][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.410914][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.414075][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.416165][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.434077][ T8099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.469437][ T8207] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 107.517177][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.530408][ T8099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.550103][ T8078] veth0_vlan: entered promiscuous mode [ 107.554419][ T8078] veth1_vlan: entered promiscuous mode [ 107.565252][ T8078] veth0_macvtap: entered promiscuous mode [ 107.568438][ T8078] veth1_macvtap: entered promiscuous mode [ 107.575022][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.578094][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.582325][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.587555][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.591560][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.594827][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.610596][ T8099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.620556][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 107.623129][ T8078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.626491][ T8078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.630261][ T8078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.633597][ T8078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.645309][ T39] audit: type=1400 audit(1735059218.747:633): avc: denied { setopt } for pid=8219 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.659756][ T8220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 107.684665][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.686972][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.697018][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.699630][ T45] bridge_slave_1: left allmulticast mode [ 107.701413][ T45] bridge_slave_1: left promiscuous mode [ 107.703117][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.703544][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.708075][ T45] bridge_slave_0: left allmulticast mode [ 107.710062][ T45] bridge_slave_0: left promiscuous mode [ 107.711813][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.957508][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.961963][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.965474][ T45] bond0 (unregistering): Released all slaves [ 108.018576][ T8099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.040203][ T8099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.048752][ T8099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.053819][ T8099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.114139][ T8099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.122131][ T8099] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.126398][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.128645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.133048][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.135143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.236839][ T8099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.252465][ T8099] veth0_vlan: entered promiscuous mode [ 108.256410][ T8099] veth1_vlan: entered promiscuous mode [ 108.267655][ T8099] veth0_macvtap: entered promiscuous mode [ 108.270737][ T8099] veth1_macvtap: entered promiscuous mode [ 108.276925][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.280219][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.282911][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.285829][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.289209][ T8099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.301584][ T45] hsr_slave_0: left promiscuous mode [ 108.303667][ T45] hsr_slave_1: left promiscuous mode [ 108.306154][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.308280][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.312543][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.314662][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.332990][ T45] veth1_macvtap: left promiscuous mode [ 108.334616][ T45] veth0_macvtap: left promiscuous mode [ 108.336600][ T45] veth1_vlan: left promiscuous mode [ 108.338996][ T45] veth0_vlan: left promiscuous mode [ 108.472103][ T8242] netlink: 'syz.3.518': attribute type 11 has an invalid length. [ 108.738752][ T6056] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 108.910288][ T6056] usb 8-1: too many configurations: 30, using maximum allowed: 8 [ 108.937251][ T45] team0 (unregistering): Port device team_slave_1 removed [ 108.941049][ T6056] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 108.943587][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.945900][ T6056] usb 8-1: Product: syz [ 108.947072][ T6056] usb 8-1: Manufacturer: syz [ 108.953277][ T6056] usb 8-1: SerialNumber: syz [ 108.960150][ T6056] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 109.035880][ T45] team0 (unregistering): Port device team_slave_0 removed [ 109.041333][ T5984] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 109.198538][ T5952] Bluetooth: hci3: command tx timeout [ 109.445179][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.450151][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.522397][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.525605][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.529383][ T8099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.531945][ T8238] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 109.534631][ T8237] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 109.539305][ T8099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.542636][ T8099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.545887][ T8099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.551212][ T8099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.597904][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.602324][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.611385][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.613671][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.649692][ T57] usb 8-1: USB disconnect, device number 16 [ 109.653044][ C3] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 109.838509][ T63] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 109.990839][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.993972][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.996718][ T63] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.000950][ T63] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.003468][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.009138][ T63] usb 6-1: config 0 descriptor?? [ 110.107441][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.308929][ T5984] usb 8-1: Service connection timeout for: 256 [ 110.311257][ T5984] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 110.315686][ T5984] ath9k_htc: Failed to initialize the device [ 110.317782][ T57] usb 8-1: ath9k_htc: USB layer deinitialized [ 110.416312][ T8251] befs: (nullb0): invalid magic header [ 110.420543][ T63] usbhid 6-1:0.0: can't add hid device: -71 [ 110.422347][ T63] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 110.425321][ T63] usb 6-1: USB disconnect, device number 12 [ 110.870204][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.873024][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.876808][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.881036][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.883922][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.886632][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.967718][ T8253] chnl_net:caif_netlink_parms(): no params data found [ 111.014636][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.062903][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.065094][ T8253] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.067220][ T8253] bridge_slave_0: entered allmulticast mode [ 111.070385][ T8253] bridge_slave_0: entered promiscuous mode [ 111.074408][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.077335][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.081513][ T8253] bridge_slave_1: entered allmulticast mode [ 111.084816][ T8253] bridge_slave_1: entered promiscuous mode [ 111.106871][ T8253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.110846][ T8253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.142267][ T8253] team0: Port device team_slave_0 added [ 111.146002][ T8253] team0: Port device team_slave_1 added [ 111.167910][ T8253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.170270][ T8253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.177781][ T8253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.183417][ T8253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.186142][ T8253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.194299][ T8253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.233381][ T8253] hsr_slave_0: entered promiscuous mode [ 111.236260][ T8253] hsr_slave_1: entered promiscuous mode [ 111.238725][ T8253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.241537][ T8253] Cannot create hsr debugfs directory [ 111.431312][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.486841][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.582906][ T39] audit: type=1400 audit(1735059222.687:634): avc: denied { read write } for pid=8263 comm="syz.1.523" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 111.592481][ T39] audit: type=1400 audit(1735059222.687:635): avc: denied { open } for pid=8263 comm="syz.1.523" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 111.617287][ T45] bridge_slave_1: left allmulticast mode [ 111.619241][ T45] bridge_slave_1: left promiscuous mode [ 111.621156][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.630462][ T45] bridge_slave_0: left allmulticast mode [ 111.632121][ T45] bridge_slave_0: left promiscuous mode [ 111.633763][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.702049][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.709906][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.714013][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.719725][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.722281][ T5954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 111.728478][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.767655][ T8275] binder: 8274:8275 ioctl c0306201 200003c0 returned -22 [ 111.870772][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.875757][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.879243][ T45] bond0 (unregistering): Released all slaves [ 111.936886][ T8278] raw_sendmsg: syz.3.526 forgot to set AF_INET. Fix it! [ 111.937040][ T39] audit: type=1400 audit(1735059223.037:636): avc: denied { getopt } for pid=8279 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 111.983561][ T8280] netlink: 'syz.1.527': attribute type 10 has an invalid length. [ 112.105031][ T8269] chnl_net:caif_netlink_parms(): no params data found [ 112.153564][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.156343][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.159428][ T8269] bridge_slave_0: entered allmulticast mode [ 112.162149][ T8269] bridge_slave_0: entered promiscuous mode [ 112.172644][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.174714][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.176781][ T8269] bridge_slave_1: entered allmulticast mode [ 112.186693][ T8269] bridge_slave_1: entered promiscuous mode [ 112.254888][ T8269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.262032][ T8269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.291506][ T45] hsr_slave_0: left promiscuous mode [ 112.293518][ T45] hsr_slave_1: left promiscuous mode [ 112.295499][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.297649][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.302315][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.304493][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.322934][ T45] veth1_macvtap: left promiscuous mode [ 112.324649][ T45] veth0_macvtap: left promiscuous mode [ 112.326306][ T45] veth1_vlan: left promiscuous mode [ 112.327860][ T45] veth0_vlan: left promiscuous mode [ 112.900626][ T45] team0 (unregistering): Port device team_slave_1 removed [ 112.951490][ T5954] Bluetooth: hci0: command tx timeout [ 112.976720][ T45] team0 (unregistering): Port device team_slave_0 removed [ 112.989320][ T8308] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 113.001298][ T39] audit: type=1400 audit(1735059224.097:637): avc: denied { relabelto } for pid=8306 comm="syz.1.530" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 113.009265][ T39] audit: type=1400 audit(1735059224.107:638): avc: denied { associate } for pid=8306 comm="syz.1.530" name="cgroup.procs" dev="cgroup" ino=120 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 113.461523][ T8269] team0: Port device team_slave_0 added [ 113.466699][ T8269] team0: Port device team_slave_1 added [ 113.514484][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.517084][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.531049][ T8269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.535118][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.537129][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.546767][ T8269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.562643][ T8315] ptm ptm49: ldisc open failed (-12), clearing slot 49 [ 113.613428][ T8269] hsr_slave_0: entered promiscuous mode [ 113.616136][ T8269] hsr_slave_1: entered promiscuous mode [ 113.618284][ T8269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.622533][ T8269] Cannot create hsr debugfs directory [ 113.624662][ T8323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.534'. [ 113.627442][ T8253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.639492][ T8253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.643006][ T8253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.654963][ T8253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.735729][ T8253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.754626][ T8269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.759286][ T5954] Bluetooth: hci3: command tx timeout [ 113.772575][ T8253] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.776382][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.778532][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.784928][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.786994][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.799687][ T39] audit: type=1400 audit(1735059224.907:639): avc: denied { map } for pid=8325 comm="syz.1.535" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.818981][ T6119] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 113.883320][ T8269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.893379][ T8253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.908218][ T8253] veth0_vlan: entered promiscuous mode [ 113.912662][ T8253] veth1_vlan: entered promiscuous mode [ 113.922920][ T8253] veth0_macvtap: entered promiscuous mode [ 113.927016][ T8253] veth1_macvtap: entered promiscuous mode [ 113.934361][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.937414][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.942184][ T8253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.946652][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.949967][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.953318][ T8253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.957572][ T8253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.960448][ T8253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.962837][ T8253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.965288][ T8253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.980129][ T6119] usb 8-1: Using ep0 maxpacket: 16 [ 113.985295][ T6119] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.990859][ T6119] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 113.994336][ T6119] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.000185][ T6119] usb 8-1: config 0 descriptor?? [ 114.008862][ T8269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.017102][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.021293][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.031255][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.033598][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.122565][ T8269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.229738][ T45] bridge_slave_1: left allmulticast mode [ 114.231411][ T45] bridge_slave_1: left promiscuous mode [ 114.233101][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.238221][ T45] bridge_slave_0: left allmulticast mode [ 114.240242][ T45] bridge_slave_0: left promiscuous mode [ 114.242158][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.301414][ T39] audit: type=1400 audit(1735059225.397:640): avc: denied { create } for pid=8342 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.310988][ T39] audit: type=1400 audit(1735059225.407:641): avc: denied { accept } for pid=8342 comm="syz.1.537" lport=43077 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.322280][ T39] audit: type=1400 audit(1735059225.407:642): avc: denied { setopt } for pid=8342 comm="syz.1.537" lport=43077 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 114.332037][ T39] audit: type=1400 audit(1735059225.407:643): avc: denied { getopt } for pid=8342 comm="syz.1.537" lport=43077 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 114.528716][ T6119] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 114.530903][ T6119] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 114.536627][ T6119] hid-steam 0003:28DE:1102.0003: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 114.549102][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.553288][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.556907][ T45] bond0 (unregistering): Released all slaves [ 114.587617][ T8269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.593964][ T8269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.597139][ T8269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.600418][ T8269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.612362][ T6119] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' connected [ 114.621578][ T6119] input: Steam Controller as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:28DE:1102.0003/input/input14 [ 114.641960][ T6119] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 114.644682][ T6119] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 114.646654][ T8269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.652368][ T6119] hid-steam 0003:28DE:1102.0004: hidraw1: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 114.652493][ T8269] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.705653][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.707682][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.718121][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.721014][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.840088][ T8269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.858960][ T8269] veth0_vlan: entered promiscuous mode [ 114.863754][ T8269] veth1_vlan: entered promiscuous mode [ 114.880340][ T8269] veth0_macvtap: entered promiscuous mode [ 114.883980][ T8269] veth1_macvtap: entered promiscuous mode [ 114.891217][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.894257][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.897259][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.901243][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.905745][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.917096][ T45] hsr_slave_0: left promiscuous mode [ 114.919586][ T45] hsr_slave_1: left promiscuous mode [ 114.921680][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.923843][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.926433][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.928696][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.959807][ T45] veth1_macvtap: left promiscuous mode [ 114.961486][ T45] veth0_macvtap: left promiscuous mode [ 114.963136][ T45] veth1_vlan: left promiscuous mode [ 114.964722][ T45] veth0_vlan: left promiscuous mode [ 115.291823][ T8358] x_tables: duplicate underflow at hook 1 [ 115.354456][ T8361] netlink: 36 bytes leftover after parsing attributes in process `syz.1.541'. [ 115.591106][ T45] team0 (unregistering): Port device team_slave_1 removed [ 115.658973][ T45] team0 (unregistering): Port device team_slave_0 removed [ 115.828577][ T5954] Bluetooth: hci3: command tx timeout [ 116.134618][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.137821][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.141284][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.146061][ T8269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.148702][ T8269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.151141][ T8269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.153809][ T8269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.203650][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.206705][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.223474][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.231904][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.382884][ T8378] netlink: 576 bytes leftover after parsing attributes in process `syz.3.546'. [ 116.437094][ T8381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=8381 comm=syz.3.547 [ 116.437552][ T8382] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 116.455140][ T8382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.496843][ T8388] netlink: 80 bytes leftover after parsing attributes in process `syz.3.549'. [ 116.667069][ T8393] netlink: 'syz.3.551': attribute type 11 has an invalid length. [ 116.716759][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.553927][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.557906][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.561473][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.564409][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.566835][ T5952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.569205][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.647346][ T8396] chnl_net:caif_netlink_parms(): no params data found [ 117.695423][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.697563][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.700502][ T8396] bridge_slave_0: entered allmulticast mode [ 117.702591][ T8396] bridge_slave_0: entered promiscuous mode [ 117.705202][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.707272][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.710100][ T8396] bridge_slave_1: entered allmulticast mode [ 117.712282][ T8396] bridge_slave_1: entered promiscuous mode [ 117.731259][ T8396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.734980][ T8396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.757747][ T8396] team0: Port device team_slave_0 added [ 117.761376][ T8396] team0: Port device team_slave_1 added [ 117.788742][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.791430][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.800016][ T8396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.803885][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.805872][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.813219][ T8396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.840362][ T8396] hsr_slave_0: entered promiscuous mode [ 117.842805][ T8396] hsr_slave_1: entered promiscuous mode [ 118.129959][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.203471][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.304933][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.392920][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 118.449886][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.458916][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.461520][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.468890][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.474517][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.477273][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.500344][ T45] bridge_slave_1: left allmulticast mode [ 118.502553][ T45] bridge_slave_1: left promiscuous mode [ 118.504767][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.511678][ T45] bridge_slave_0: left allmulticast mode [ 118.513338][ T45] bridge_slave_0: left promiscuous mode [ 118.515011][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.543726][ T8426] xt_hashlimit: size too large, truncated to 1048576 [ 118.732472][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 118.732484][ T39] audit: type=1400 audit(1735059229.837:650): avc: denied { map } for pid=8432 comm="syz.3.560" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 118.740916][ T39] audit: type=1400 audit(1735059229.837:651): avc: denied { execute } for pid=8432 comm="syz.3.560" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 118.806147][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.811031][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.814784][ T45] bond0 (unregistering): Released all slaves [ 118.856328][ T8436] ntfs3(sr0): Primary boot signature is not NTFS. [ 118.859950][ T8436] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 118.915473][ T8445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.562'. [ 118.917935][ T8445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.562'. [ 118.920972][ T8445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.562'. [ 118.928299][ T8445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.562'. [ 119.005909][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 119.176688][ T45] hsr_slave_0: left promiscuous mode [ 119.184066][ T45] hsr_slave_1: left promiscuous mode [ 119.186291][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.188849][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.191481][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.193949][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.237992][ T45] veth1_macvtap: left promiscuous mode [ 119.241500][ T45] veth0_macvtap: left promiscuous mode [ 119.243576][ T45] veth1_vlan: left promiscuous mode [ 119.245249][ T45] veth0_vlan: left promiscuous mode [ 119.590953][ T5952] Bluetooth: hci0: command tx timeout [ 119.774515][ T8472] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 119.782212][ T8472] CIFS mount error: No usable UNC path provided in device string! [ 119.782212][ T8472] [ 119.789743][ T8472] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 119.907234][ T45] team0 (unregistering): Port device team_slave_1 removed [ 119.985293][ T45] team0 (unregistering): Port device team_slave_0 removed [ 119.995287][ T8478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8478 comm=syz.1.568 [ 120.552133][ T5952] Bluetooth: hci3: command tx timeout [ 120.587861][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.590132][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.592229][ T8414] bridge_slave_0: entered allmulticast mode [ 120.594536][ T8414] bridge_slave_0: entered promiscuous mode [ 120.597158][ T8463] netlink: 44 bytes leftover after parsing attributes in process `syz.3.563'. [ 120.613455][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.615541][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.617614][ T8414] bridge_slave_1: entered allmulticast mode [ 120.623694][ T8414] bridge_slave_1: entered promiscuous mode [ 120.652879][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.667620][ T39] audit: type=1400 audit(1735059231.767:652): avc: denied { remount } for pid=8481 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 120.678126][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.683734][ T39] audit: type=1400 audit(1735059231.787:653): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 120.721640][ T8484] No such timeout policy "syz0" [ 121.554887][ T8414] team0: Port device team_slave_0 added [ 121.564605][ T8414] team0: Port device team_slave_1 added [ 121.587657][ T8396] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.621360][ T8396] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.625672][ T8396] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.633997][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.636557][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.646924][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.651687][ T8396] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.656878][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.659003][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.666269][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.678626][ T5952] Bluetooth: hci0: command tx timeout [ 121.689789][ T8496] block nbd1: server does not support multiple connections per device. [ 121.692782][ T8495] block nbd1: shutting down sockets [ 121.704675][ T39] audit: type=1800 audit(1735059232.807:654): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.574" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 121.743879][ T39] audit: type=1400 audit(1735059232.847:655): avc: denied { connect } for pid=8508 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 121.752430][ T8414] hsr_slave_0: entered promiscuous mode [ 121.754510][ T8414] hsr_slave_1: entered promiscuous mode [ 121.757397][ T8414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.758947][ T8513] 9pnet_fd: Insufficient options for proto=fd [ 121.760553][ T8414] Cannot create hsr debugfs directory [ 121.762232][ T39] audit: type=1400 audit(1735059232.867:656): avc: denied { read append } for pid=8511 comm="syz.1.576" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.813236][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.816560][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.834594][ T8396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.838594][ T39] audit: type=1400 audit(1735059232.937:657): avc: denied { read } for pid=8514 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.844023][ T39] audit: type=1400 audit(1735059232.937:658): avc: denied { read } for pid=8514 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.853649][ T8414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.873421][ T8396] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.877980][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.880044][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.885319][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.887343][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.899000][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 121.933973][ T8414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.020104][ T8396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.049712][ T8414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.061835][ T8396] veth0_vlan: entered promiscuous mode [ 122.066729][ T8396] veth1_vlan: entered promiscuous mode [ 122.081577][ T8396] veth0_macvtap: entered promiscuous mode [ 122.084977][ T8396] veth1_macvtap: entered promiscuous mode [ 122.093234][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.096528][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.100430][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.104894][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.107796][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.112730][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.132047][ T8414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.137732][ T8396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.140376][ T8396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.143110][ T8396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.145967][ T8396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.172753][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.175016][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.185009][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.187348][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.212093][ T45] bridge_slave_1: left allmulticast mode [ 122.213797][ T45] bridge_slave_1: left promiscuous mode [ 122.215558][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.221758][ T45] bridge_slave_0: left allmulticast mode [ 122.223696][ T45] bridge_slave_0: left promiscuous mode [ 122.225713][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.318607][ T63] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 122.426569][ T8543] xt_hashlimit: size too large, truncated to 1048576 [ 122.486770][ T63] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 122.490297][ T63] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.492907][ T63] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.496075][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.499378][ T63] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.501947][ T63] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.505228][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.510415][ T63] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.513670][ T63] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.513938][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.516804][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.518157][ T63] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.525396][ T63] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.528654][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.532265][ T63] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.534963][ T63] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.535481][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.538556][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.539478][ T63] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.547027][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 122.547169][ T63] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.547186][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.556128][ T45] bond0 (unregistering): Released all slaves [ 122.557455][ T63] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.561843][ T63] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.565047][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.571508][ T63] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.574122][ T63] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.577411][ T63] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.581655][ T63] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 122.584887][ T63] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 122.588018][ T63] usb 6-1: Product: syz [ 122.589704][ T63] usb 6-1: Manufacturer: syz [ 122.591559][ T63] usb 6-1: SerialNumber: syz [ 122.595528][ T63] usb 6-1: config 0 descriptor?? [ 122.602289][ T63] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 122.628756][ T5952] Bluetooth: hci3: command tx timeout [ 122.662279][ T8414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.666226][ T8414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.687817][ T8414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.692920][ T8414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.732871][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.743012][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.747672][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.749794][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.757128][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.759198][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.827964][ T39] audit: type=1400 audit(1735059233.927:659): avc: denied { mount } for pid=8539 comm="syz.1.582" name="/" dev="hugetlbfs" ino=35652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 122.844400][ T63] usb 6-1: USB disconnect, device number 13 [ 122.850095][ T63] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 122.897807][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.929716][ T45] hsr_slave_0: left promiscuous mode [ 122.932692][ T45] hsr_slave_1: left promiscuous mode [ 122.934894][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.937045][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.939861][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.942098][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.966633][ T45] veth1_macvtap: left promiscuous mode [ 122.968281][ T45] veth0_macvtap: left promiscuous mode [ 122.970458][ T45] veth1_vlan: left promiscuous mode [ 122.972043][ T45] veth0_vlan: left promiscuous mode [ 123.577290][ T45] team0 (unregistering): Port device team_slave_1 removed [ 123.645508][ T45] team0 (unregistering): Port device team_slave_0 removed [ 123.705058][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.709461][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.774436][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.777124][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.132297][ T8414] veth0_vlan: entered promiscuous mode [ 124.137502][ T8414] veth1_vlan: entered promiscuous mode [ 124.152593][ T8414] veth0_macvtap: entered promiscuous mode [ 124.167074][ T8414] veth1_macvtap: entered promiscuous mode [ 124.171967][ T8569] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 124.177327][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.180814][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.184076][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.191949][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.194956][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.198283][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.220383][ T8414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.222908][ T8414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.225662][ T8414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.228879][ T8414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.262479][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.265180][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.286837][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.290214][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 124.290223][ T39] audit: type=1400 audit(1735059235.377:661): avc: denied { mount } for pid=8576 comm="syz.1.591" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 124.298142][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.598756][ T6119] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 124.648840][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.760513][ T6119] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.763494][ T6119] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.766099][ T6119] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.769269][ T6119] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.772073][ T6119] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 124.774684][ T6119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.781574][ T6119] hub 6-1:1.0: bad descriptor, ignoring hub [ 124.783335][ T6119] hub 6-1:1.0: probe with driver hub failed with error -5 [ 124.785676][ T6119] cdc_wdm 6-1:1.0: skipping garbage [ 124.787417][ T6119] cdc_wdm 6-1:1.0: skipping garbage [ 124.790054][ T6119] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 124.791795][ T6119] cdc_wdm 6-1:1.0: Unknown control protocol [ 125.540884][ T8582] usb 6-1: reset low-speed USB device number 14 using dummy_hcd [ 125.775020][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.780388][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.783158][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.787048][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.791978][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 125.794524][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.849534][ T8582] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 125.858853][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.899525][ T8586] chnl_net:caif_netlink_parms(): no params data found [ 125.913694][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.962285][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.964448][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.966666][ T8586] bridge_slave_0: entered allmulticast mode [ 125.969499][ T8586] bridge_slave_0: entered promiscuous mode [ 125.972243][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.974338][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.976452][ T8586] bridge_slave_1: entered allmulticast mode [ 125.978839][ T8586] bridge_slave_1: entered promiscuous mode [ 126.002973][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.007005][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.031858][ T8586] team0: Port device team_slave_0 added [ 126.034777][ T8586] team0: Port device team_slave_1 added [ 126.056744][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.071943][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.074009][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.082398][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.086934][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.089592][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.098855][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.127142][ T8586] hsr_slave_0: entered promiscuous mode [ 126.130095][ T8586] hsr_slave_1: entered promiscuous mode [ 126.132279][ T8586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.134593][ T8586] Cannot create hsr debugfs directory [ 126.148672][ T7501] usb 6-1: USB disconnect, device number 14 [ 126.221011][ T45] bridge_slave_1: left allmulticast mode [ 126.222710][ T45] bridge_slave_1: left promiscuous mode [ 126.224425][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.227515][ T45] bridge_slave_0: left allmulticast mode [ 126.229833][ T45] bridge_slave_0: left promiscuous mode [ 126.231637][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.450362][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.455326][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.459457][ T45] bond0 (unregistering): Released all slaves [ 126.751279][ T39] audit: type=1400 audit(1735059237.857:662): avc: denied { write } for pid=8611 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.795625][ T39] audit: type=1400 audit(1735059237.897:663): avc: denied { bind } for pid=8612 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.798261][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.805665][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.808335][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.811427][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.813654][ T45] hsr_slave_0: left promiscuous mode [ 126.814517][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.818625][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.826152][ T45] hsr_slave_1: left promiscuous mode [ 126.830180][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.832498][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.835110][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.837309][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.837953][ T39] audit: type=1400 audit(1735059237.937:664): avc: denied { watch watch_reads } for pid=8624 comm="syz.3.598" path="/proc/785" dev="proc" ino=37138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 126.870626][ T45] veth1_macvtap: left promiscuous mode [ 126.872330][ T45] veth0_macvtap: left promiscuous mode [ 126.873998][ T45] veth1_vlan: left promiscuous mode [ 126.875664][ T45] veth0_vlan: left promiscuous mode [ 127.543413][ T45] team0 (unregistering): Port device team_slave_1 removed [ 127.628024][ T45] team0 (unregistering): Port device team_slave_0 removed [ 127.828619][ T5952] Bluetooth: hci0: command tx timeout [ 127.883484][ T8632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8632 comm=syz.3.599 [ 128.273707][ T8618] chnl_net:caif_netlink_parms(): no params data found [ 128.378074][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.392939][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.395463][ T8618] bridge_slave_0: entered allmulticast mode [ 128.397844][ T8618] bridge_slave_0: entered promiscuous mode [ 128.401500][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.403769][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.405883][ T8618] bridge_slave_1: entered allmulticast mode [ 128.408260][ T8618] bridge_slave_1: entered promiscuous mode [ 128.452603][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.456594][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.459694][ T8586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 128.470760][ T8586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 128.474409][ T8586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 128.486632][ T8586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 128.492936][ T8668] mmap: syz.1.604 (8668) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.494413][ T8618] team0: Port device team_slave_0 added [ 128.501597][ T8618] team0: Port device team_slave_1 added [ 128.521896][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.523933][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.531757][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.535678][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.537687][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.545135][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.603900][ T8673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.606681][ T8673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.613735][ T8618] hsr_slave_0: entered promiscuous mode [ 128.615981][ T8618] hsr_slave_1: entered promiscuous mode [ 128.657918][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.704679][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.731040][ T8586] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.735237][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.737292][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.742301][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.744389][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.793256][ T8676] fuse: Bad value for 'fd' [ 128.820854][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.836362][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.852478][ T8586] veth0_vlan: entered promiscuous mode [ 128.857290][ T8586] veth1_vlan: entered promiscuous mode [ 128.865839][ T39] audit: type=1400 audit(1735059239.967:665): avc: denied { ioctl } for pid=8682 comm="syz.1.608" path="socket:[34667]" dev="sockfs" ino=34667 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.875216][ T5952] Bluetooth: hci3: command tx timeout [ 128.879736][ T8586] veth0_macvtap: entered promiscuous mode [ 128.883342][ T8586] veth1_macvtap: entered promiscuous mode [ 128.908932][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.916960][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.920794][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.924425][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.929729][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.932806][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.936260][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.942212][ T8586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.945324][ T8586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.948040][ T8586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.952222][ T8586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.988318][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.015759][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.018483][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.031020][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.033325][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.094366][ T8694] netlink: 'syz.1.613': attribute type 29 has an invalid length. [ 129.098225][ T8696] netlink: 'syz.1.613': attribute type 29 has an invalid length. [ 129.144609][ T39] audit: type=1326 audit(1735059240.247:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.1.614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 129.151944][ T39] audit: type=1326 audit(1735059240.247:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.1.614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 129.158970][ T39] audit: type=1326 audit(1735059240.247:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.1.614" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 129.165634][ T39] audit: type=1326 audit(1735059240.247:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.1.614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 129.171833][ T45] bridge_slave_1: left allmulticast mode [ 129.173754][ T39] audit: type=1326 audit(1735059240.247:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8698 comm="syz.1.614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 129.174108][ T45] bridge_slave_1: left promiscuous mode [ 129.182789][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.188166][ T45] bridge_slave_0: left allmulticast mode [ 129.190242][ T45] bridge_slave_0: left promiscuous mode [ 129.191979][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.250423][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 129.253374][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.615'. [ 129.343164][ T63] hid (null): invalid report_size 63451 [ 129.348303][ T63] hid-generic 0209:0FFF:0006.0005: invalid report_size 63451 [ 129.350814][ T63] hid-generic 0209:0FFF:0006.0005: item 0 2 1 7 parsing failed [ 129.353315][ T63] hid-generic 0209:0FFF:0006.0005: probe with driver hid-generic failed with error -22 [ 129.478228][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.482992][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.486768][ T45] bond0 (unregistering): Released all slaves [ 129.505961][ T8711] mkiss: ax0: crc mode is auto. [ 129.548227][ T8720] hub 6-0:1.0: USB hub found [ 129.549923][ T8720] hub 6-0:1.0: 1 port detected [ 129.557600][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 129.557609][ T39] audit: type=1400 audit(1735059240.657:680): avc: denied { read append } for pid=8718 comm="syz.1.619" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 129.568264][ T39] audit: type=1400 audit(1735059240.657:681): avc: denied { open } for pid=8718 comm="syz.1.619" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 129.607310][ T8725] fuse: Unknown parameter 'group_i' [ 129.641898][ T8732] 9p: Unknown uid 00000000004294967295 [ 129.771839][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 129.777051][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 129.826198][ T39] audit: type=1400 audit(1735059240.927:682): avc: denied { getopt } for pid=8748 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.843792][ T45] hsr_slave_0: left promiscuous mode [ 129.845795][ T45] hsr_slave_1: left promiscuous mode [ 129.848939][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.849763][ T39] audit: type=1400 audit(1735059240.957:683): avc: denied { setopt } for pid=8751 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.851410][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.869936][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.872351][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.874572][ T39] audit: type=1400 audit(1735059240.977:684): avc: denied { bind } for pid=8751 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.912724][ T45] veth1_macvtap: left promiscuous mode [ 129.914390][ T45] veth0_macvtap: left promiscuous mode [ 129.916043][ T45] veth1_vlan: left promiscuous mode [ 129.917782][ T45] veth0_vlan: left promiscuous mode [ 129.940316][ T39] audit: type=1400 audit(1735059241.047:685): avc: denied { write } for pid=8751 comm="syz.3.627" path="socket:[37410]" dev="sockfs" ino=37410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.754707][ T8761] CIFS: Unable to determine destination address [ 130.881651][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.630'. [ 130.948522][ T5952] Bluetooth: hci3: command tx timeout [ 130.978344][ T39] audit: type=1400 audit(1735059242.077:686): avc: denied { watch_sb } for pid=8774 comm="syz.3.633" path="/268/net_prio.prioidx" dev="tmpfs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.032485][ T8776] binder: binder_mmap: 8774 20acc000-20ace000 bad vm_flags failed -1 [ 131.058694][ T45] team0 (unregistering): Port device team_slave_1 removed [ 131.125624][ T45] team0 (unregistering): Port device team_slave_0 removed [ 131.630977][ T8775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.633'. [ 131.673702][ T8618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.688044][ T39] audit: type=1800 audit(1735059242.787:687): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.635" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 131.688303][ T8618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.704624][ T8779] can: request_module (can-proto-3) failed. [ 131.704986][ T8618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.712514][ T8618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.742280][ T39] audit: type=1400 audit(1735059242.847:688): avc: denied { bind } for pid=8783 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 131.762835][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.772506][ T8618] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.777565][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.780277][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.788060][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.790970][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.832022][ T39] audit: type=1400 audit(1735059242.937:689): avc: denied { bind } for pid=8797 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.867798][ T8808] netlink: 'syz.3.641': attribute type 29 has an invalid length. [ 131.876565][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 131.878674][ T8810] netlink: 'syz.3.641': attribute type 29 has an invalid length. [ 131.900720][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.924427][ T8618] veth0_vlan: entered promiscuous mode [ 131.929677][ T8618] veth1_vlan: entered promiscuous mode [ 131.936505][ T8820] binder: 8819:8820 ioctl 40046205 0 returned -22 [ 131.943081][ T8618] veth0_macvtap: entered promiscuous mode [ 131.946240][ T8618] veth1_macvtap: entered promiscuous mode [ 131.953776][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.956807][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.960728][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.965782][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.968904][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.972204][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.976270][ T8618] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.979032][ T8618] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.981759][ T8618] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.984325][ T8618] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.012773][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.015047][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.026964][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.031869][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.131959][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.559872][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.561772][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.491803][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 133.495240][ T8838] bond0: option ad_select: unable to set because the bond device is up [ 133.495516][ T1138] bond0: (slave batadv0): interface is now down [ 133.502909][ T1138] bond0: now running without any active interface! [ 133.535759][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.540846][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.544856][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.548276][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.554313][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.557238][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.655712][ T8840] chnl_net:caif_netlink_parms(): no params data found [ 133.718529][ T1983] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 133.728362][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.735666][ T8840] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.737774][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.740172][ T8840] bridge_slave_0: entered allmulticast mode [ 133.742609][ T8840] bridge_slave_0: entered promiscuous mode [ 133.745543][ T8840] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.747625][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.749896][ T8840] bridge_slave_1: entered allmulticast mode [ 133.752245][ T8840] bridge_slave_1: entered promiscuous mode [ 133.775270][ T8840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.781151][ T8840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.793800][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.822913][ T8840] team0: Port device team_slave_0 added [ 133.826540][ T8840] team0: Port device team_slave_1 added [ 133.847174][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.849915][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.857219][ T8840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.861289][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.863382][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.869677][ T1983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.871223][ T8840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.873940][ T1983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.887251][ T1983] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.891092][ T1983] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.893692][ T1983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.897189][ T1983] usb 6-1: config 0 descriptor?? [ 133.917045][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.924932][ T8840] hsr_slave_0: entered promiscuous mode [ 133.927259][ T8840] hsr_slave_1: entered promiscuous mode [ 133.929430][ T8840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.931586][ T8840] Cannot create hsr debugfs directory [ 134.022217][ T1145] bridge_slave_1: left allmulticast mode [ 134.023907][ T1145] bridge_slave_1: left promiscuous mode [ 134.025665][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.029051][ T1145] bridge_slave_0: left allmulticast mode [ 134.030699][ T1145] bridge_slave_0: left promiscuous mode [ 134.032368][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.313668][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.319888][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.322444][ T1983] usbhid 6-1:0.0: can't add hid device: -71 [ 134.324238][ T1983] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 134.327380][ T1983] usb 6-1: USB disconnect, device number 15 [ 134.330434][ T1145] bond0 (unregistering): Released all slaves [ 134.653879][ T1145] hsr_slave_0: left promiscuous mode [ 134.656727][ T1145] hsr_slave_1: left promiscuous mode [ 134.660425][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.662809][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.668302][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.671676][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.704040][ T1145] veth1_macvtap: left promiscuous mode [ 134.705772][ T1145] veth0_macvtap: left promiscuous mode [ 134.707603][ T1145] veth1_vlan: left promiscuous mode [ 134.709403][ T1145] veth0_vlan: left promiscuous mode [ 135.392893][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 135.457277][ T8869] qnx4: no qnx4 filesystem (no root dir). [ 135.498584][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 135.514910][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 135.514957][ T39] audit: type=1400 audit(1735059246.617:692): avc: denied { listen } for pid=8872 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.522193][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 135.526597][ T39] audit: type=1400 audit(1735059246.627:693): avc: denied { accept } for pid=8872 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.582317][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.590810][ T5954] Bluetooth: hci0: command tx timeout [ 135.607933][ T5305] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.624323][ T5305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.634877][ T5305] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.642906][ T5305] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 135.646299][ T5305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.094764][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 136.140311][ T8893] vivid-002: disconnect [ 136.209428][ T8840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.224400][ T8840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.229283][ T8840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.245385][ T8840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.279354][ T8881] chnl_net:caif_netlink_parms(): no params data found [ 136.349362][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.351829][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.353988][ T8881] bridge_slave_0: entered allmulticast mode [ 136.356499][ T8881] bridge_slave_0: entered promiscuous mode [ 136.360122][ T8891] vivid-002: reconnect [ 136.363692][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.365783][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.367891][ T8881] bridge_slave_1: entered allmulticast mode [ 136.370354][ T8881] bridge_slave_1: entered promiscuous mode [ 136.390017][ T8910] Bluetooth: MGMT ver 1.23 [ 136.393279][ T39] audit: type=1400 audit(1735059247.497:694): avc: denied { getopt } for pid=8909 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 136.409348][ T8881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.417581][ T8881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.431966][ T8840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.438714][ T8840] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.460632][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.463514][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.472974][ T8881] team0: Port device team_slave_0 added [ 136.477973][ T8881] team0: Port device team_slave_1 added [ 136.500223][ T39] audit: type=1400 audit(1735059247.597:695): avc: denied { mount } for pid=8906 comm="syz.1.657" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 136.508231][ T39] audit: type=1400 audit(1735059247.607:696): avc: denied { create } for pid=8906 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 136.513255][ T8917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.514798][ T39] audit: type=1400 audit(1735059247.617:697): avc: denied { sys_admin } for pid=8906 comm="syz.1.657" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 136.531355][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.533486][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.560333][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.562753][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.571947][ T8881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.577448][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.579486][ T39] audit: type=1400 audit(1735059247.687:698): avc: denied { sendto } for pid=6056 comm="kworker/3:4" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 136.579887][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.594231][ T8881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.611234][ T8917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.648501][ T8881] hsr_slave_0: entered promiscuous mode [ 136.650720][ T8881] hsr_slave_1: entered promiscuous mode [ 136.653103][ T8881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.655319][ T8881] Cannot create hsr debugfs directory [ 136.679868][ T8917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.731467][ T8917] team0: Port device netdevsim0 removed [ 136.733946][ T8917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.761147][ T8881] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.821918][ T8840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.855189][ T8881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.864666][ T8840] veth0_vlan: entered promiscuous mode [ 136.870773][ T8840] veth1_vlan: entered promiscuous mode [ 136.887434][ T8917] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.893243][ T8917] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.899188][ T8917] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.902995][ T8840] veth0_macvtap: entered promiscuous mode [ 136.907168][ T8917] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.913497][ T39] audit: type=1400 audit(1735059248.017:699): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 136.919567][ T8840] veth1_macvtap: entered promiscuous mode [ 136.927531][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.931149][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.934605][ T8840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.939505][ T8840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.942534][ T8840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.945968][ T8840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.953092][ T8840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.955680][ T8840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.958299][ T8840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.961591][ T8840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.978966][ T8881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.990582][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 136.993497][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 137.008932][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 137.020629][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.022942][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.034643][ T8929] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.061708][ T8881] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.084166][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.086425][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.142109][ T1145] bridge_slave_1: left allmulticast mode [ 137.143860][ T1145] bridge_slave_1: left promiscuous mode [ 137.145573][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.149707][ T1145] bridge_slave_0: left allmulticast mode [ 137.151426][ T1145] bridge_slave_0: left promiscuous mode [ 137.153100][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.202842][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.205507][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.210311][ T8942] random: crng reseeded on system resumption [ 137.480665][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.486041][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.489937][ T1145] bond0 (unregistering): Released all slaves [ 137.518747][ T8881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.522486][ T8881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.525754][ T8881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.529417][ T8881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.611535][ T8881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.618267][ T8881] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.622775][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.625154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.632906][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.634971][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.668552][ T5952] Bluetooth: hci3: command tx timeout [ 137.733054][ T8881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.747491][ T8881] veth0_vlan: entered promiscuous mode [ 137.753193][ T8881] veth1_vlan: entered promiscuous mode [ 137.768830][ T8881] veth0_macvtap: entered promiscuous mode [ 137.774579][ T8881] veth1_macvtap: entered promiscuous mode [ 137.783311][ T1145] hsr_slave_0: left promiscuous mode [ 137.787242][ T1145] hsr_slave_1: left promiscuous mode [ 137.789996][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.792430][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.795206][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.797572][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.816482][ T8962] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 137.821874][ T8962] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 137.832126][ T1145] veth1_macvtap: left promiscuous mode [ 137.833885][ T1145] veth0_macvtap: left promiscuous mode [ 137.835647][ T1145] veth1_vlan: left promiscuous mode [ 137.837301][ T1145] veth0_vlan: left promiscuous mode [ 137.920801][ T8964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8964 comm=syz.3.669 [ 137.950278][ T8966] 9pnet_fd: Insufficient options for proto=fd [ 138.536820][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 138.606368][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 138.840084][ T39] audit: type=1400 audit(1735059249.947:700): avc: denied { mount } for pid=8971 comm="syz.1.672" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.135607][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.139457][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.144390][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.151756][ T8881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.155580][ T8881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.161187][ T8881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.167017][ T8881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.167662][ T8980] tmpfs: Bad value for 'mpol' [ 139.172524][ T8881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.175276][ T8881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.177740][ T8881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.223919][ T8983] loop8: detected capacity change from 0 to 7 [ 139.230816][ T8983] Dev loop8: unable to read RDB block 7 [ 139.237548][ T8983] loop8: AHDI p1 p3 p4 [ 139.240224][ T8983] loop8: partition table partially beyond EOD, truncated [ 139.244220][ T8983] loop8: p1 start 975770946 is beyond EOD, truncated [ 139.246778][ T8983] loop8: p3 start 6514546 is beyond EOD, truncated [ 139.267331][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.270323][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.296510][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.299734][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.517171][ T8999] trusted_key: encrypted_key: insufficient parameters specified [ 139.520565][ T39] audit: type=1400 audit(1735059250.627:701): avc: denied { remount } for pid=8998 comm="syz.1.679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 139.628920][ T6001] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 139.644645][ T9007] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.738223][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.354537][ T5305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.357789][ T5305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.361118][ T5305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.364288][ T5305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.366716][ T5305] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 140.372367][ T5305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.439355][ T9013] chnl_net:caif_netlink_parms(): no params data found [ 140.492358][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.494512][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.496904][ T9013] bridge_slave_0: entered allmulticast mode [ 140.499326][ T9013] bridge_slave_0: entered promiscuous mode [ 140.502058][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.504379][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.506497][ T9013] bridge_slave_1: entered allmulticast mode [ 140.508801][ T9013] bridge_slave_1: entered promiscuous mode [ 140.533974][ T9013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.539503][ T9013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.566265][ T9013] team0: Port device team_slave_0 added [ 140.570313][ T9013] team0: Port device team_slave_1 added [ 140.599234][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.601844][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.611828][ T9013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.617241][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.620152][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.629597][ T9013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.648637][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.672020][ T9013] hsr_slave_0: entered promiscuous mode [ 140.674142][ T9013] hsr_slave_1: entered promiscuous mode [ 140.726456][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.802919][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.919791][ T1145] bridge_slave_1: left allmulticast mode [ 140.921500][ T1145] bridge_slave_1: left promiscuous mode [ 140.923339][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.926568][ T1145] bridge_slave_0: left allmulticast mode [ 140.928254][ T1145] bridge_slave_0: left promiscuous mode [ 140.930163][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.203190][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.207174][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.212156][ T1145] bond0 (unregistering): Released all slaves [ 141.485226][ T39] audit: type=1400 audit(1735059252.587:702): avc: denied { remount } for pid=9032 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.535238][ T9040] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 141.546457][ T1145] hsr_slave_0: left promiscuous mode [ 141.550082][ T1145] hsr_slave_1: left promiscuous mode [ 141.552824][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.554948][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.557464][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.560590][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.572592][ T5305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.576212][ T5305] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.580075][ T5305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.583136][ T5305] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.585962][ T5305] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 141.588080][ T5305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.591126][ T1145] veth1_macvtap: left promiscuous mode [ 141.592767][ T1145] veth0_macvtap: left promiscuous mode [ 141.594381][ T1145] veth1_vlan: left promiscuous mode [ 141.595897][ T1145] veth0_vlan: left promiscuous mode [ 142.264902][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 142.348262][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 142.399469][ T5305] Bluetooth: hci0: command tx timeout [ 142.524977][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.687'. [ 143.047880][ T9041] chnl_net:caif_netlink_parms(): no params data found [ 143.117180][ T9013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.133769][ T9013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.147178][ T9013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.164197][ T9013] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.172607][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.174846][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.176931][ T9041] bridge_slave_0: entered allmulticast mode [ 143.180100][ T9041] bridge_slave_0: entered promiscuous mode [ 143.183266][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.185376][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.187521][ T9041] bridge_slave_1: entered allmulticast mode [ 143.193163][ T9041] bridge_slave_1: entered promiscuous mode [ 143.222522][ T9041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.240301][ T9041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.258144][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.262831][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.283822][ T9041] team0: Port device team_slave_0 added [ 143.287436][ T9041] team0: Port device team_slave_1 added [ 143.311877][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.313981][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.321501][ T9041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.325626][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.327663][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.335226][ T9041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.365403][ T9041] hsr_slave_0: entered promiscuous mode [ 143.367633][ T9041] hsr_slave_1: entered promiscuous mode [ 143.370146][ T9041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.372390][ T9041] Cannot create hsr debugfs directory [ 143.425887][ T9013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.452964][ T9041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.482194][ T9013] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.487451][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.489565][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.492857][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.494895][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.532175][ T9041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.571798][ T9013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.591564][ T9013] veth0_vlan: entered promiscuous mode [ 143.595600][ T9013] veth1_vlan: entered promiscuous mode [ 143.606622][ T9013] veth0_macvtap: entered promiscuous mode [ 143.611411][ T9013] veth1_macvtap: entered promiscuous mode [ 143.617179][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.620441][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.623707][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.629261][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.632089][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.635252][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.648715][ T9041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.654658][ T9013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.657439][ T9013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.660143][ T9013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.662619][ T9013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.668499][ T5305] Bluetooth: hci3: command tx timeout [ 143.690162][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.692471][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.703297][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.705589][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.719489][ T9041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.788771][ T1145] bridge_slave_1: left allmulticast mode [ 143.790504][ T1145] bridge_slave_1: left promiscuous mode [ 143.792345][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.795884][ T1145] bridge_slave_0: left allmulticast mode [ 143.797566][ T1145] bridge_slave_0: left promiscuous mode [ 143.799494][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.098336][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.103979][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.104579][ T9099] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 144.109904][ T9099] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 144.113769][ T1145] bond0 (unregistering): Released all slaves [ 144.121380][ T9095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.693'. [ 144.174210][ T9041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.180557][ T9041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.184545][ T9041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.193296][ T9041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.237767][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.243748][ T9041] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.252046][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.254113][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.255609][ T39] audit: type=1400 audit(1735059255.357:703): avc: denied { call } for pid=9100 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.256198][ T9101] binder: transaction release 20 bad handle 1, ret = -22 [ 144.261629][ T39] audit: type=1400 audit(1735059255.357:704): avc: denied { transfer } for pid=9100 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.262120][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.262146][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.362342][ T9041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.379888][ T9041] veth0_vlan: entered promiscuous mode [ 144.383923][ T9041] veth1_vlan: entered promiscuous mode [ 144.396665][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.406168][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.438963][ T9041] veth0_macvtap: entered promiscuous mode [ 144.442825][ T9041] veth1_macvtap: entered promiscuous mode [ 144.451276][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.454172][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.456886][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.461236][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.464862][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.470555][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.473489][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.476507][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.480229][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.483739][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.487961][ T9041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.490649][ T9041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.493182][ T9041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.495702][ T9041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.525500][ T1145] hsr_slave_0: left promiscuous mode [ 144.528130][ T1145] hsr_slave_1: left promiscuous mode [ 144.531164][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.533704][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.536249][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.539490][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.567175][ T1145] veth1_macvtap: left promiscuous mode [ 144.568970][ T1145] veth0_macvtap: left promiscuous mode [ 144.570609][ T1145] veth1_vlan: left promiscuous mode [ 144.572178][ T1145] veth0_vlan: left promiscuous mode [ 144.646480][ T39] audit: type=1400 audit(1735059255.747:705): avc: denied { nlmsg_read } for pid=9130 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.646485][ T9132] netlink: 172 bytes leftover after parsing attributes in process `syz.3.701'. [ 145.208271][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 145.278494][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 145.748481][ T5305] Bluetooth: hci3: command tx timeout [ 145.796112][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.803118][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.833755][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.836091][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.882453][ T9143] binder_alloc: 9142: binder_alloc_buf size 4096 failed, no address space [ 145.885326][ T9143] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 145.922734][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'. [ 145.925520][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'. [ 146.345104][ T9149] netlink: 44 bytes leftover after parsing attributes in process `syz.3.707'. [ 146.407217][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.303764][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.306593][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.310276][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.314180][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.316686][ T5952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.319704][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.395597][ T9153] chnl_net:caif_netlink_parms(): no params data found [ 147.444041][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.446230][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.448594][ T9153] bridge_slave_0: entered allmulticast mode [ 147.450842][ T9153] bridge_slave_0: entered promiscuous mode [ 147.453481][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.455614][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.457800][ T9153] bridge_slave_1: entered allmulticast mode [ 147.460964][ T9153] bridge_slave_1: entered promiscuous mode [ 147.482359][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.486176][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.519286][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.529565][ T9153] team0: Port device team_slave_0 added [ 147.532712][ T9153] team0: Port device team_slave_1 added [ 147.552589][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.554923][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.563231][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.567642][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.571532][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.579159][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.606565][ T9153] hsr_slave_0: entered promiscuous mode [ 147.608824][ T9153] hsr_slave_1: entered promiscuous mode [ 147.610748][ T9153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.612847][ T9153] Cannot create hsr debugfs directory [ 147.670794][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.754429][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.866308][ T1145] bridge_slave_1: left allmulticast mode [ 147.868868][ T1145] bridge_slave_1: left promiscuous mode [ 147.871565][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.876157][ T1145] bridge_slave_0: left allmulticast mode [ 147.879131][ T1145] bridge_slave_0: left promiscuous mode [ 147.881248][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.172208][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.178014][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.183744][ T1145] bond0 (unregistering): Released all slaves [ 148.526444][ T9176] syz.3.709 (9176) used obsolete PPPIOCDETACH ioctl [ 148.563883][ T1145] hsr_slave_0: left promiscuous mode [ 148.566112][ T1145] hsr_slave_1: left promiscuous mode [ 148.570435][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.572699][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.575645][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.577820][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.592096][ T39] audit: type=1400 audit(1735059259.697:706): avc: denied { accept } for pid=9182 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.607145][ T1145] veth1_macvtap: left promiscuous mode [ 148.609974][ T1145] veth0_macvtap: left promiscuous mode [ 148.611663][ T1145] veth1_vlan: left promiscuous mode [ 148.613250][ T1145] veth0_vlan: left promiscuous mode [ 148.627543][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.633877][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.637067][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.642096][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.645513][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.647879][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.279697][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 149.351260][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 149.359027][ T5305] Bluetooth: hci0: command tx timeout [ 149.461464][ T39] audit: type=1326 audit(1735059260.567:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 149.468062][ T39] audit: type=1326 audit(1735059260.567:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 149.478420][ T39] audit: type=1326 audit(1735059260.577:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.711" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 149.485094][ T39] audit: type=1326 audit(1735059260.577:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 149.493097][ T39] audit: type=1326 audit(1735059260.577:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 149.501770][ T39] audit: type=1326 audit(1735059260.577:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.711" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 149.511228][ T39] audit: type=1326 audit(1735059260.577:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 149.520311][ T39] audit: type=1326 audit(1735059260.577:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 149.526415][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.527643][ T39] audit: type=1326 audit(1735059260.577:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.711" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb02d85d29 code=0x7ffc0000 [ 149.530314][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.538171][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.540381][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.542417][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.544513][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.546589][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.548886][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.551116][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.554737][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.556825][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.559146][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.561355][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.563474][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.565899][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.568028][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.570285][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.572403][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.574467][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.581784][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.584009][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.586190][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.588880][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.591101][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.593220][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.595387][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.597508][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.599733][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.601856][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.603978][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.606123][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.608263][ T8079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.640666][ T8079] hid-generic 0000:0000:0000.0006: hidraw2: HID v0.00 Device [syz0] on syz0 [ 149.788546][ T6001] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 149.952527][ T6001] usb 6-1: config 0 has no interfaces? [ 149.954259][ T6001] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 149.956873][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.960934][ T6001] usb 6-1: config 0 descriptor?? [ 150.039203][ T9153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.043011][ T9153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.058825][ T9153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.064705][ T9153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.092046][ T9187] chnl_net:caif_netlink_parms(): no params data found [ 150.161754][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.170249][ T9206] [ 150.170319][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.171248][ T9206] ====================================================== [ 150.171257][ T9206] WARNING: possible circular locking dependency detected [ 150.173304][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.175895][ T9206] 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 Not tainted [ 150.178799][ T9187] bridge_slave_0: entered allmulticast mode [ 150.182280][ T9206] ------------------------------------------------------ [ 150.185046][ T9187] bridge_slave_0: entered promiscuous mode [ 150.187004][ T9206] syz.1.712/9206 is trying to acquire lock: [ 150.192812][ T9153] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.193588][ T9206] ffff888031d372c0 (&dev->mutex#2){+.+.}-{4:4}, at: __input_unregister_device+0x24/0x450 [ 150.197184][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.199376][ T9206] [ 150.199376][ T9206] but task is already holding lock: [ 150.199385][ T9206] ffff888043b35e20 (&hdev->ll_open_lock){+.+.}-{4:4} [ 150.201411][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.204278][ T9206] , at: hid_hw_open+0x25/0x170 [ 150.206548][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.208976][ T9206] [ 150.208976][ T9206] which lock already depends on the new lock. [ 150.208976][ T9206] [ 150.208985][ T9206] [ 150.208985][ T9206] the existing dependency chain (in reverse order) is: [ 150.208991][ T9206] [ 150.208991][ T9206] -> #1 (&hdev->ll_open_lock){+.+.}-{4:4} [ 150.210488][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.213118][ T9206] : [ 150.216146][ T9187] bridge_slave_1: entered allmulticast mode [ 150.219271][ T9206] __mutex_lock+0x19b/0xa60 [ 150.219296][ T9206] hid_hw_open+0x25/0x170 [ 150.219313][ T9206] input_open_device+0x22c/0x390 [ 150.219332][ T9206] evdev_open+0x52d/0x690 [ 150.219355][ T9206] chrdev_open+0x237/0x6a0 [ 150.219373][ T9206] do_dentry_open+0xf59/0x1ea0 [ 150.219389][ T9206] vfs_open+0x82/0x3f0 [ 150.219409][ T9206] path_openat+0x1e6a/0x2d60 [ 150.219427][ T9206] do_filp_open+0x20c/0x470 [ 150.219443][ T9206] do_sys_openat2+0x17a/0x1e0 [ 150.219459][ T9206] __x64_sys_openat+0x175/0x210 [ 150.223452][ T9187] bridge_slave_1: entered promiscuous mode [ 150.224428][ T9206] do_syscall_64+0xcd/0x250 [ 150.227147][ T11] bridge0: port 2(bridge_slave_1) entered blocking state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.227423][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.228955][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.230315][ T9206] [ 150.230315][ T9206] -> #0 (&dev->mutex#2){+.+.}-{4:4}: [ 150.254677][ T9206] __lock_acquire+0x249e/0x3c40 [ 150.256237][ T9206] lock_acquire.part.0+0x11b/0x380 [ 150.257860][ T9206] __mutex_lock+0x19b/0xa60 [ 150.259360][ T9206] __input_unregister_device+0x24/0x450 [ 150.261107][ T9206] input_unregister_device+0xb9/0x100 [ 150.262873][ T9206] steam_input_unregister+0x10c/0x2c0 [ 150.264602][ T9206] steam_client_ll_open+0xc9/0x100 [ 150.266224][ T9206] hid_hw_open+0xe2/0x170 [ 150.267635][ T9206] hidraw_open+0x274/0x7e0 [ 150.269085][ T9206] chrdev_open+0x237/0x6a0 [ 150.270505][ T9206] do_dentry_open+0xf59/0x1ea0 [ 150.272027][ T9206] vfs_open+0x82/0x3f0 [ 150.273362][ T9206] path_openat+0x1e6a/0x2d60 [ 150.274834][ T9206] do_filp_open+0x20c/0x470 [ 150.276262][ T9206] do_sys_openat2+0x17a/0x1e0 [ 150.277686][ T9206] __x64_sys_openat+0x175/0x210 [ 150.279185][ T9206] do_syscall_64+0xcd/0x250 [ 150.280604][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.282401][ T9206] [ 150.282401][ T9206] other info that might help us debug this: [ 150.282401][ T9206] [ 150.285229][ T9206] Possible unsafe locking scenario: [ 150.285229][ T9206] [ 150.287303][ T9206] CPU0 CPU1 [ 150.288800][ T9206] ---- ---- [ 150.290323][ T9206] lock(&hdev->ll_open_lock); [ 150.291684][ T9206] lock(&dev->mutex#2); [ 150.293583][ T9206] lock(&hdev->ll_open_lock); [ 150.295641][ T9206] lock(&dev->mutex#2); [ 150.296842][ T9206] [ 150.296842][ T9206] *** DEADLOCK *** [ 150.296842][ T9206] [ 150.299125][ T9206] 2 locks held by syz.1.712/9206: [ 150.300537][ T9206] #0: ffffffff8fc3f090 (minors_rwsem){+.+.}-{4:4}, at: hidraw_open+0xa6/0x7e0 [ 150.301215][ T6001] usb 8-1: USB disconnect, device number 17 [ 150.303008][ T9206] #1: ffff888043b35e20 (&hdev->ll_open_lock){+.+.}-{4:4}, at: hid_hw_open+0x25/0x170 [ 150.307290][ T9206] [ 150.307290][ T9206] stack backtrace: [ 150.308952][ T9206] CPU: 3 UID: 0 PID: 9206 Comm: syz.1.712 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 150.311903][ T9206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.314907][ T9206] Call Trace: [ 150.315869][ T9206] [ 150.316711][ T9206] dump_stack_lvl+0x116/0x1f0 [ 150.318031][ T9206] print_circular_bug+0x419/0x5d0 [ 150.319481][ T9206] check_noncircular+0x31a/0x400 [ 150.320907][ T9206] ? __pfx_check_noncircular+0x10/0x10 [ 150.322460][ T9206] ? __pfx_mark_lock+0x10/0x10 [ 150.323834][ T9206] ? lockdep_lock+0xc6/0x200 [ 150.325168][ T9206] ? __pfx_lockdep_lock+0x10/0x10 [ 150.326608][ T9206] __lock_acquire+0x249e/0x3c40 [ 150.328037][ T9206] ? __pfx___lock_acquire+0x10/0x10 [ 150.329544][ T9206] ? find_held_lock+0x2d/0x110 [ 150.330896][ T9206] lock_acquire.part.0+0x11b/0x380 [ 150.332363][ T9206] ? __input_unregister_device+0x24/0x450 [ 150.333993][ T9206] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 150.335611][ T9206] ? rcu_is_watching+0x12/0xc0 [ 150.336987][ T9206] ? trace_lock_acquire+0x14e/0x1f0 [ 150.338465][ T9206] ? __input_unregister_device+0x24/0x450 [ 150.340116][ T9206] ? lock_acquire+0x2f/0xb0 [ 150.341414][ T9206] ? __input_unregister_device+0x24/0x450 [ 150.342438][ T7973] delete_channel: no stack [ 150.343051][ T9206] __mutex_lock+0x19b/0xa60 [ 150.345619][ T9206] ? __input_unregister_device+0x24/0x450 [ 150.347243][ T9206] ? __input_unregister_device+0x24/0x450 [ 150.348860][ T9206] ? __pfx___mutex_lock+0x10/0x10 [ 150.350309][ T9206] ? synchronize_rcu_expedited+0x424/0x450 [ 150.351976][ T9206] ? __pfx_autoremove_wake_function+0x10/0x10 [ 150.353700][ T9206] ? __pfx_lock_release+0x10/0x10 [ 150.355161][ T9206] ? __input_unregister_device+0x24/0x450 [ 150.356776][ T9206] __input_unregister_device+0x24/0x450 [ 150.358353][ T9206] input_unregister_device+0xb9/0x100 [ 150.359906][ T9206] steam_input_unregister+0x10c/0x2c0 [ 150.361442][ T9206] steam_client_ll_open+0xc9/0x100 [ 150.362951][ T9206] hid_hw_open+0xe2/0x170 [ 150.364198][ T9206] hidraw_open+0x274/0x7e0 [ 150.365498][ T9206] ? __pfx_hidraw_open+0x10/0x10 [ 150.366944][ T9206] chrdev_open+0x237/0x6a0 [ 150.368246][ T9206] ? __pfx_chrdev_open+0x10/0x10 [ 150.369672][ T9206] do_dentry_open+0xf59/0x1ea0 [ 150.371050][ T9206] ? __pfx_chrdev_open+0x10/0x10 [ 150.372449][ T9206] vfs_open+0x82/0x3f0 [ 150.373604][ T9206] ? may_open+0x1f2/0x400 [ 150.374850][ T9206] path_openat+0x1e6a/0x2d60 [ 150.376230][ T9206] ? __pfx_path_openat+0x10/0x10 [ 150.377688][ T9206] ? __pfx___lock_acquire+0x10/0x10 [ 150.379223][ T9206] ? lock_acquire.part.0+0x11b/0x380 [ 150.380757][ T9206] ? find_held_lock+0x2d/0x110 [ 150.382163][ T9206] do_filp_open+0x20c/0x470 [ 150.383496][ T9206] ? __pfx_do_filp_open+0x10/0x10 [ 150.384963][ T9206] ? find_held_lock+0x2d/0x110 [ 150.386371][ T9206] ? alloc_fd+0x41f/0x760 [ 150.387637][ T9206] do_sys_openat2+0x17a/0x1e0 [ 150.389047][ T9206] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.390512][ T9206] ? __pfx_get_timespec64+0x10/0x10 [ 150.392005][ T9206] __x64_sys_openat+0x175/0x210 [ 150.393380][ T9206] ? __pfx___x64_sys_openat+0x10/0x10 [ 150.394840][ T9206] do_syscall_64+0xcd/0x250 [ 150.396099][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.397748][ T9206] RIP: 0033:0x7feb02d84690 [ 150.399085][ T9206] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 150.404533][ T9206] RSP: 002b:00007feb03b6cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 150.406894][ T9206] RAX: ffffffffffffffda RBX: 0000000000043201 RCX: 00007feb02d84690 [ 150.409170][ T9206] RDX: 0000000000043201 RSI: 00007feb03b6cc10 RDI: 00000000ffffff9c [ 150.411463][ T9206] RBP: 00007feb03b6cc10 R08: 0000000000000000 R09: 0023776172646968 [ 150.413738][ T9206] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 150.415993][ T9206] R13: 0000000000000000 R14: 00007feb02f75fa0 R15: 00007ffc8116c138 [ 150.418189][ T9206] [ 150.433106][ T6001] input: Steam Controller as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:28DE:1102.0003/input/input15 [ 150.500525][ T6001] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' disconnected [ 150.543713][ T5983] usb 6-1: USB disconnect, device number 16 [ 150.701152][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.792453][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.930543][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.011914][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.105994][ T1145] bridge_slave_1: left allmulticast mode [ 151.107613][ T1145] bridge_slave_1: left promiscuous mode [ 151.109444][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.112217][ T1145] bridge_slave_0: left allmulticast mode [ 151.113793][ T1145] bridge_slave_0: left promiscuous mode [ 151.115503][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.118234][ T1145] bridge_slave_1: left allmulticast mode [ 151.119996][ T1145] bridge_slave_1: left promiscuous mode [ 151.121611][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.124663][ T1145] bridge_slave_0: left allmulticast mode [ 151.126273][ T1145] bridge_slave_0: left promiscuous mode [ 151.127852][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.330002][ T1145] bond0 (unregistering): Released all slaves [ 151.336358][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.339996][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.343913][ T1145] bond0 (unregistering): Released all slaves [ 151.615279][ T1145] hsr_slave_0: left promiscuous mode [ 151.617347][ T1145] hsr_slave_1: left promiscuous mode [ 151.620327][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.622961][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.625744][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.628853][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.632081][ T1145] veth1_macvtap: left promiscuous mode [ 151.633706][ T1145] veth0_macvtap: left promiscuous mode [ 151.635285][ T1145] veth1_vlan: left promiscuous mode [ 151.636741][ T1145] veth0_vlan: left promiscuous mode [ 151.812683][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 151.848857][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 152.909296][ T1145] bridge_slave_1: left allmulticast mode [ 152.911578][ T1145] bridge_slave_1: left promiscuous mode [ 152.913879][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.917667][ T1145] bridge_slave_0: left allmulticast mode [ 152.920445][ T1145] bridge_slave_0: left promiscuous mode [ 152.922602][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.023957][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.028214][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.031637][ T1145] bond0 (unregistering): Released all slaves [ 153.132954][ T1145] hsr_slave_0: left promiscuous mode [ 153.135493][ T1145] hsr_slave_1: left promiscuous mode [ 153.137474][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.139947][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.179620][ T8] SELinux: failure in sel_netif_sid_slow(), invalid network interface (16) [ 153.261127][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 153.295594][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 153.368526][ T8] SELinux: failure in sel_netif_sid_slow(), invalid network interface (16) VM DIAGNOSIS: 16:54:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a944a40 RCX=ffffffff818e071c RDX=ffff88802707a440 RSI=ffffffff818e06f6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90005ff7998 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d528949 R13=0000000000000001 R14=ffff88806a944a48 R15=ffff88806a63fe40 RIP=ffffffff818e06f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020007038 CR3=000000000df7e000 CR4=00352ef0 DR0=000000000f002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624bf4b488 00007f624bf4b480 00007f624bf4b478 00007f624bf4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624caad100 00007f624bf4b440 00007f624bf4b458 00007f624bf4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624bf4b498 00007f624bf4b490 00007f624bf4b488 00007f624bf4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81874a53 RDX=ffff88801d68c880 RSI=0000000000000001 RDI=0000000000000007 RBP=000000000003d90c RSP=ffffc900006b0df0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905f3557 R11=ffffc900006b0ff8 R12=ffff888107e3c418 R13=ffff88806a72cc80 R14=ffff88806a72ca00 R15=ffffffff873eb100 RIP=ffffffff819a17f8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020003cc0 CR3=000000002736c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=95d1770d2c2552e8 0cf52716c1dd619e 95d1770d2c2552e8 0cf52716c1dd619e 95d1770d2c2552e8 0cf52716c1dd619e 95d1770d2c2552e8 0cf52716c1dd619e ZMM18=a81616a8486137e5 bab79a3a6299a4fa a81616a8486137e5 bab79a3a6299a4fa a81616a8486137e5 bab79a3a6299a4fa a81616a8486137e5 bab79a3a6299a4fa ZMM19=a406000000000000 0000000000000005 a406000000000000 0000000000000004 a406000000000000 0000000000000003 a406000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=99c9131b99c9131b 99c9131b99c9131b 99c9131b99c9131b 99c9131b99c9131b 99c9131b99c9131b 99c9131b99c9131b 99c9131b99c9131b 99c9131b99c9131b ZMM22=8bfb1c3a8bfb1c3a 8bfb1c3a8bfb1c3a 8bfb1c3a8bfb1c3a 8bfb1c3a8bfb1c3a 8bfb1c3a8bfb1c3a 8bfb1c3a8bfb1c3a 8bfb1c3a8bfb1c3a 8bfb1c3a8bfb1c3a ZMM23=12e1014712e10147 12e1014712e10147 12e1014712e10147 12e1014712e10147 12e1014712e10147 12e1014712e10147 12e1014712e10147 12e1014712e10147 ZMM24=1544672715446727 1544672715446727 1544672715446727 1544672715446727 1544672715446727 1544672715446727 1544672715446727 1544672715446727 ZMM25=26e3c54526e3c545 26e3c54526e3c545 26e3c54526e3c545 26e3c54526e3c545 26e3c54526e3c545 26e3c54526e3c545 26e3c54526e3c545 26e3c54526e3c545 ZMM26=606c8cab606c8cab 606c8cab606c8cab 606c8cab606c8cab 606c8cab606c8cab 606c8cab606c8cab 606c8cab606c8cab 606c8cab606c8cab 606c8cab606c8cab ZMM27=3579b97e3579b97e 3579b97e3579b97e 3579b97e3579b97e 3579b97e3579b97e 3579b97e3579b97e 3579b97e3579b97e 3579b97e3579b97e 3579b97e3579b97e ZMM28=000000a00000009f 0000009e0000009d 0000009c0000009b 0000009a00000099 0000009800000097 0000009600000095 0000009400000093 0000009200000091 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0704000007040000 0704000007040000 0704000007040000 0704000007040000 0704000007040000 0704000007040000 0704000007040000 0704000007040000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000029 RCX=ffffffff8179c30a RDX=ffff8880291e2440 RSI=ffffffff8179c2f6 RDI=0000000000000001 RBP=1ffff92000775df3 RSP=ffffc90003baef88 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000200 R14=ffff888027fb0000 R15=ffffc90003baf070 RIP=ffffffff8179c2f8 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555570a74500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3cd4e1 CR3=0000000038b02000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000000 Opmask01=00000000ffffffff Opmask02=00000000fff80000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffa493d50 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000002b5de RBX=0000000000000036 RCX=ffffc9000c681000 RDX=0000000000080000 RSI=ffffffff8179c2f6 RDI=0000000000000001 RBP=1ffff9200073fe2e RSP=ffffc900039ff160 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=3a30656764697262 R12=0000000000000001 R13=0000000000000000 R14=ffff8880291e2440 R15=ffffc900039ff248 RIP=ffffffff8179c2f8 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feb03b6d6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f624bf77bac CR3=000000004f0ac000 CR4=00352ef0 DR0=000000000f002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624be02bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624bf4b488 00007f624bf4b480 00007f624bf4b478 00007f624bf4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624caad100 00007f624bf4b440 00007f624bf4b458 00007f624bf4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f624bf4b498 00007f624bf4b490 00007f624bf4b488 00007f624bf4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000